last executing test programs: 19.218855794s ago: executing program 4 (id=424): syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b8680857"], 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_emit_ethernet(0x6a, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe00004a59ac3fab5a3b30692619d523a7eb0167d4f100fd8bcb"], 0x138) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000280)={r5}, &(0x7f0000000200)=0x8) 16.772789573s ago: executing program 4 (id=436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 16.545825019s ago: executing program 4 (id=438): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x67) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0xc0c719fe1969ce50, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000082c0)="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", 0x2000, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0xffffffeffffffe00, {0xf0f, 0xfffffffe, 0x0, {0x6, 0x2, 0x80000005, 0xfffffffffffffffe, 0x7, 0x5, 0x3, 0xfffff4f0, 0x9, 0x8000, 0x6, r4, r5, 0x1, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x16f) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xffffffffffffffdb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) 15.794123325s ago: executing program 4 (id=442): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x1, 0x5, 0xffffffff}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x3be, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000080)={[0x3, 0x1, 0x8, 0x4, 0x400, 0x7, 0x3, 0x8, 0x1, 0x4, 0x10001, 0x9, 0x0, 0x5, 0x5], 0xeeee0000, 0x121000}) (async) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="002223000000962313db5d7de6c00b53743ff68b1e795846757383"], 0x0}, 0x0) r2 = socket(0x2, 0x80805, 0x0) recvfrom$rxrpc(r2, 0x0, 0x0, 0x2101, 0x0, 0x0) (async) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={0x0}, 0x1, 0x0, 0x0, 0x4051}, 0x20000800) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) memfd_secret(0x80000) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000140)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 13.895575339s ago: executing program 4 (id=450): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee00, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) keyctl$chown(0x4, r1, r2, 0x0) 12.417013927s ago: executing program 4 (id=457): r0 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0x980000, 0xff, 0x5525, r2, 0x0, &(0x7f0000000040)={0x980905, 0xe0, '\x00', @ptr=0x200}}) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000001040)="6cb76def", 0x4}], 0x1}}], 0x2, 0x0) socket(0x2, 0x80805, 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) pipe2$9p(&(0x7f0000000080), 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0x980000, 0xff, 0x5525, r2, 0x0, &(0x7f0000000040)={0x980905, 0xe0, '\x00', @ptr=0x200}}) (async) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000001040)="6cb76def", 0x4}], 0x1}}], 0x2, 0x0) (async) 10.656983183s ago: executing program 1 (id=461): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) write$sequencer(r2, &(0x7f0000000000), 0xca80) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0x0, 0x840, 0x1, 0x0, 0x400400}}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x18, &(0x7f0000000040)={0x0, 0x7, 0x5, {0x5, 0x21, "16f404"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000180)={0x50, 0x0, r10, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) 7.042605613s ago: executing program 1 (id=472): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) pipe2(0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000040)) (async) r5 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r5, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r8, 0x1) (async) shutdown(r8, 0x1) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) r10 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r10, 0x84, 0x21, 0x0, &(0x7f0000000480)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3908004900003800000000000690780a210104ac1414aa44244a01070b3d030e004b5ca4c14a000000fffc254543b0ce617b733e9f3633484a27ed0070d42fbec45c5fbb540b32d6d41dad8c6b8242ff5dc87de3a9e4a83ef0f6780f3c0fdcbc67e169177d86b727d75b8dff8ab427e1e0b2cdce1b160d91f8af159ff4e92adb1ab0b409821dca4cd2aad24431f63903d68324d8a2e800dbd3ef41916a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078fffe"], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3908004900003800000000000690780a210104ac1414aa44244a01070b3d030e004b5ca4c14a000000fffc254543b0ce617b733e9f3633484a27ed0070d42fbec45c5fbb540b32d6d41dad8c6b8242ff5dc87de3a9e4a83ef0f6780f3c0fdcbc67e169177d86b727d75b8dff8ab427e1e0b2cdce1b160d91f8af159ff4e92adb1ab0b409821dca4cd2aad24431f63903d68324d8a2e800dbd3ef41916a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078fffe"], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000280)={'ipvlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r12, @ANYRES8], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r12, @ANYRES8], 0x48) 5.730254336s ago: executing program 0 (id=474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf09"], 0x0, 0x100007, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000000000000000000000005500", "f4bd00b94e3d500007000000e0ff00000018000500", [0x0, 0x2000000000001]}}) 5.594696091s ago: executing program 0 (id=475): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0xfffffff9, 0x0, 0x1}, 0x50) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'geneve0\x00', 0x1000}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800020001"], 0x50) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r1, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/144, 0x90}, {&(0x7f0000000400)=""/12, 0xc}], 0x2, &(0x7f0000000480)=""/239, 0xef}, 0xffff}, {{&(0x7f0000000580)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/236, 0xec}, {&(0x7f0000000880)=""/51, 0x33}, {&(0x7f00000008c0)=""/46, 0x2e}], 0x5, &(0x7f0000000980)=""/207, 0xcf}, 0x10000}, {{&(0x7f0000000a80)=@hci, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/14, 0xe}, {&(0x7f0000000b40)=""/36, 0x24}, {&(0x7f0000000b80)=""/98, 0x62}], 0x3, &(0x7f0000000c40)=""/4096, 0x1000}, 0xc}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001c40)=""/112, 0x70}, {&(0x7f0000001cc0)=""/143, 0x8f}, {&(0x7f0000001d80)=""/93, 0x5d}, {&(0x7f0000001e00)=""/148, 0x94}, {&(0x7f0000001ec0)=""/52, 0x34}], 0x5, &(0x7f0000001f80)=""/114, 0x72}, 0x9}, {{&(0x7f0000002000)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000003600)=[{&(0x7f0000002080)=""/36, 0x24}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/147, 0x93}, {&(0x7f0000002280)=""/219, 0xdb}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/129, 0x81}, {&(0x7f0000003440)=""/141, 0x8d}, {&(0x7f0000003500)=""/218, 0xda}], 0x8, &(0x7f0000003680)=""/122, 0x7a}, 0x1ff}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003700)=""/72, 0x48}, {&(0x7f0000003780)=""/217, 0xd9}, {&(0x7f0000003880)=""/170, 0xaa}, {&(0x7f0000003940)=""/187, 0xbb}, {&(0x7f0000003a00)=""/117, 0x75}], 0x5}, 0x9363}, {{&(0x7f0000003b00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003b80)=""/207, 0xcf}], 0x1, &(0x7f0000003cc0)=""/42, 0x2a}, 0x6}], 0x7, 0x100, &(0x7f0000003ec0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0xc0c4) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) 5.593585399s ago: executing program 1 (id=476): io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_SET(r4, 0x0, 0x24004831) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) io_setup(0x7a, &(0x7f0000000000)) (rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='task_rename\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) (async, rerun: 32) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='+\x7f\xdb2\xcf\xf9,~]-4Y\x14\x83W1\r\xe2k\xabk*\xba\xab\xe7q\xbe\x94\xcf\xcd\xa0\x89\xc7.J\xe5h\xe0!\xd54x\xbc\xe0\x8b\x1dg\xd0\xb6.\x87\xf2\x19\xe6A\x9d\xf1P\xd2l\xaf?\xa3Vj\xaf\xb7\xe3\x1ff\\mD\xc5Zh\x14B[}C\x7fk\x1b<\x1a$\xa3\x1c\xa7\xac\x7f\x1do\xbe\xd4#y\x8bZ\x92\xb7\xd8\x107\xb9\x9d\r4dD\xe6\xee7\xa81>I.\x89\xa8\x95\x04EP4v\xac+\x86\x1e\xfe\xdb\xf8-#\xb4s\xcde!\xfb\x82\x9f`lj7\x04\xe3\xc8}\xa5Y\xb0\xaf\x1b\x15\xee+\xc3-\xfd\xb6J\xac\x86r\x04\xe2\xde\x99T\xfa+X\xdd<\x96\f\x19\x8d\xc8\xed\xe7\xf3\x8c\x1e\x1f\x8d\xa2\xbd\x82\\\xfe\x82D\xc1\xecg\x91\x06\x92Q\xf6M\x05\xbc\x11\xef0x0}) ioctl$IOMMU_IOAS_UNMAP(r6, 0x3b86, &(0x7f0000000100)={0x18, r7, 0xffffffffffffffff, 0x1c}) 5.210387992s ago: executing program 1 (id=477): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, r6, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000a25bd7000ffdbdf2577000000082d0545693777aff8e1fe19a13d384756000800", @ANYRES32=r8, @ANYBLOB="0500ee0049000000"], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x80) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x3d, 0x71, 0xbe, 0x10, 0x582, 0x44, 0xd317, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x98, [{{0x9, 0x4, 0xc4, 0x0, 0x0, 0x2, 0xf0, 0xde}}]}}]}}, 0x0) 4.256706414s ago: executing program 0 (id=478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/rcu_expedited', 0x2000, 0x2a) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) syz_usbip_server_init(0x3) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, 0x0, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001600)={0x5, 0x0, [{0xeeee0000, 0x2c, &(0x7f00000001c0)=""/44}, {0xdddd1000, 0x59, &(0x7f0000000340)=""/89}, {0x10000, 0x87, &(0x7f00000003c0)=""/135}, {0xffff1000, 0xff5, &(0x7f0000000600)=""/4085}, {0x8080000, 0x8, &(0x7f0000000040)=""/8}]}) r6 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r6}) read$msr(r3, &(0x7f0000002ac0)=""/89, 0x59) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x25dfdbff}, 0x24}, 0x1, 0x0, 0x0, 0x40051}, 0x0) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x440, 0x0, "b75594e202affd7914d445e8216c001bdb9e084b1e4f17c91438fc058a49aa33e55b653403afab36d749b9d556ad8a6564b4bdfef6f882abb574e3d28646f708dddde29701368381c1ed3596e2fa1edb94edca3a62a3e077bdbb3e22ef929be4958e25930a10d6042e10e5c456c84adc1f8c854df855ecd04b1a488b094cbefec8f7059c799ad43a"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x0, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r12 = dup(r1) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r12, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r11, 0xae80, 0x0) 3.446570659s ago: executing program 0 (id=481): syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b8680857"], 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe00004a59ac3fab5a3b30692619d523a7eb0167d4f100fd8bcb"], 0x138) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000280)={r5}, &(0x7f0000000200)=0x8) 3.321882171s ago: executing program 2 (id=482): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101081, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x2010, r0, 0x100000000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0xffff, 0x20}, 0xc) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x2008010, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfqno=', @ANYRESHEX=r3]) 3.239035205s ago: executing program 2 (id=483): r0 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='dirsync\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 3.238318053s ago: executing program 2 (id=484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socket$tipc(0x1e, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000013, 0x6, 0x0, 0xb49, 0xffffffff, 0x9, 0x8, 0xffffffff}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfeed, 0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f00000003c0)={0x0}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000002c0)={0x0, 'vlan0\x00', {0x1}, 0xc}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f00000000c0)=0x1ff, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x1b, &(0x7f0000000000)=0x7, 0x4) r6 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$clear(0x7, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000000d06010100000000000000000000000005000500000003006c697374b3040000000000003a641aa25d12e66face9f65f1e5b8ef93125db6532631f0fc5c7e963375904f848d00a9f75f85f93d2bf00"/94], 0x34}}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000140)={0x6, 0x7, {}, {0xee00}, 0x1, 0x400}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x8, 0x7, {}, {r8}, 0x9, 0x10000}) 3.213036639s ago: executing program 3 (id=485): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x5}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x3}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x5}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x3}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) 3.141758904s ago: executing program 3 (id=486): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf09"], 0x0, 0x100007, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000000000ffffffffffffaa5500", "f4bd00b94e3d500007000000e0ff00000018000500", [0x0, 0x2000000000001]}}) 2.788257233s ago: executing program 3 (id=487): r0 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000001d80)='./file0\x00', 0xb0d00, 0x194) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000020, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000060000000009000000000000", @ANYBLOB], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r3}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0x79) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000001800fdffffff0a000e001c0460093909d21d"], 0x34}}, 0x10) 1.991136684s ago: executing program 1 (id=488): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) signalfd(r0, &(0x7f0000000000)={[0x9]}, 0x8) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_AIE_OFF(r0, 0x7002) 1.633880977s ago: executing program 1 (id=489): syz_open_dev$sndctrl(&(0x7f0000000040), 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000104c05c4050000000000010902240001000000000904000028c4cbfb8cc639010300000009210000000122050009058103000000000015da9d93d8d84a13eca8fb4bbf74ef45546bbd9147b79ff43c7937522384fef8be640a444d2113ec9936b1d9a62f5bf18f95a7"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "eb31b7d2"}]}}, 0x0}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x4, 0x4e23, 0x9, 0xa, 0x80, 0x20, 0x4}, {0x4, 0x9, 0x5, 0x6, 0xa33, 0x7, 0x5, 0x6}, {0x10000, 0x4, 0x80, 0x7}, 0x6, 0x6e6bb0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@private2, 0x4d2, 0x6c}, 0x2, @in=@rand_addr=0x64010101, 0x3505, 0x2, 0x3, 0x33, 0xe00000, 0x0, 0xa}}, 0xe8) r1 = syz_io_uring_setup(0x32ed, &(0x7f00000000c0)={0x0, 0xde45, 0x10, 0x4, 0x56e}, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) getpid() getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESHEX=0x0, @ANYRES16=r2], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r5, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.525386218s ago: executing program 2 (id=490): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x4000014) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x20040, 0x0) 1.485030989s ago: executing program 3 (id=491): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100010, r0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100010, r0, 0x0) (async) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e) (async) 1.431465297s ago: executing program 3 (id=492): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1.387340125s ago: executing program 3 (id=493): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000180)={r4, 0x1, 0x1, 0x0, &(0x7f0000000040)}) fstat(r1, &(0x7f0000000340)) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x580}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) r8 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x800, 0x0, {0xfffe, 0x6c}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) read(r8, &(0x7f00000001c0)=""/254, 0xfe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$char_usb(r9, &(0x7f0000000040)="e2", 0x1068) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x40) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000000480)={{0x9}, 0x100, './file0\x00'}) socket$nl_sock_diag(0x10, 0x3, 0x4) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 1.300204725s ago: executing program 0 (id=494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x10001) 850.863087ms ago: executing program 0 (id=495): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000001180)=""/232) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000a29b2a204705202755af0102030109021200010000100009046e02005d"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x58}}, 0x4044814) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4048810}, 0x48080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x409}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004340)=""/102376, 0x18fe8) ptrace$getregset(0x4204, 0x0, 0x6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8a1, 0x38414762, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 526.316992ms ago: executing program 2 (id=496): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prlimit64(r0, 0xd, &(0x7f0000000140)={0xa, 0x87}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @dev={0xac, 0x14, 0x14, 0x26}}, @info_reply={0x10, 0x0, 0x0, 0x5, 0x48}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x810, 0xffffffffffffffff, 0x2d000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r3, 0x0, 0x3) socket$inet6_udplite(0xa, 0x2, 0x88) setrlimit(0xf, &(0x7f0000000000)={0x8, 0x8}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001401038010"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 2 (id=497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) socket$inet_smc(0x2b, 0x1, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c", 0xe, 0x8040, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) kernel console output (not intermixed with test programs): 638][ T43] usb 4-1: config 3 interface 99 has no altsetting 0 [ 87.062857][ T43] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=85.74 [ 87.078863][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.090031][ T43] usb 4-1: Product: syz [ 87.097112][ T43] usb 4-1: Manufacturer: syz [ 87.102807][ T43] usb 4-1: SerialNumber: syz [ 88.281432][ T6264] netlink: 277 bytes leftover after parsing attributes in process `syz.4.69'. [ 88.671082][ T30] audit: type=1400 audit(1757963298.587:243): avc: denied { bind } for pid=6257 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.713226][ T43] usb 4-1: USB disconnect, device number 5 [ 88.729599][ T6263] macvlan2: entered promiscuous mode [ 88.734978][ T6263] bridge0: entered promiscuous mode [ 88.789351][ T30] audit: type=1400 audit(1757963298.587:244): avc: denied { setopt } for pid=6257 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.830026][ T30] audit: type=1400 audit(1757963298.707:245): avc: denied { ioctl } for pid=6257 comm="syz.1.68" path="socket:[10461]" dev="sockfs" ino=10461 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.984833][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 89.001313][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 89.074106][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 89.089177][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.102104][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 89.140167][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.214836][ T3541] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.291261][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.393848][ T30] audit: type=1400 audit(1757963299.387:246): avc: denied { write } for pid=6268 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.967828][ T30] audit: type=1400 audit(1757963299.927:247): avc: denied { create } for pid=6277 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.281937][ T30] audit: type=1400 audit(1757963299.937:248): avc: denied { write } for pid=6277 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.643609][ T6295] overlayfs: missing 'workdir' [ 90.651239][ T30] audit: type=1400 audit(1757963300.637:249): avc: denied { ioctl } for pid=6266 comm="syz.3.71" path="socket:[9792]" dev="sockfs" ino=9792 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.856077][ T30] audit: type=1400 audit(1757963300.827:250): avc: denied { watch } for pid=6294 comm="syz.2.76" path="/19/bus/file1" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.940962][ T30] audit: type=1400 audit(1757963300.827:251): avc: denied { watch_sb } for pid=6294 comm="syz.2.76" path="/19/bus/file1" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.758827][ T6313] syz.1.80 uses obsolete (PF_INET,SOCK_PACKET) [ 91.789910][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 91.789922][ T30] audit: type=1400 audit(1757963301.777:254): avc: denied { ioctl } for pid=6309 comm="syz.1.80" path="socket:[10671]" dev="sockfs" ino=10671 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.081346][ T6061] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 92.420571][ T6327] netlink: 277 bytes leftover after parsing attributes in process `syz.2.82'. [ 92.757958][ T6329] netlink: 277 bytes leftover after parsing attributes in process `syz.4.84'. [ 92.871289][ T6061] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 92.880854][ T6061] usb 2-1: config 0 has no interface number 0 [ 92.887500][ T6061] usb 2-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 92.899777][ T6061] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid maxpacket 99, setting to 64 [ 92.924036][ T6061] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 92.952737][ T6061] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.141305][ T30] audit: type=1400 audit(1757963302.947:255): avc: denied { append } for pid=6332 comm="syz.4.86" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 93.164730][ T6061] usb 2-1: Product: syz [ 93.168907][ T6061] usb 2-1: Manufacturer: syz [ 93.173560][ T6061] usb 2-1: SerialNumber: syz [ 93.191332][ T6061] usb 2-1: config 0 descriptor?? [ 93.206840][ T6313] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 93.322709][ T30] audit: type=1400 audit(1757963303.237:256): avc: denied { write } for pid=6332 comm="syz.4.86" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 93.564648][ T30] audit: type=1400 audit(1757963303.237:257): avc: denied { open } for pid=6332 comm="syz.4.86" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 93.588950][ T30] audit: type=1400 audit(1757963303.367:258): avc: denied { read } for pid=6341 comm="syz.3.88" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 93.612680][ T30] audit: type=1400 audit(1757963303.377:259): avc: denied { open } for pid=6341 comm="syz.3.88" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 93.668555][ T6061] qcserial 2-1:0.49: Qualcomm USB modem converter detected [ 93.686235][ T6345] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=61894 sclass=netlink_audit_socket pid=6345 comm=syz.2.87 [ 93.937222][ T6061] usb 2-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 94.088125][ T6061] usb 2-1: USB disconnect, device number 2 [ 94.097647][ T6061] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 94.108454][ T6061] qcserial 2-1:0.49: device disconnected [ 94.242384][ T6350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.286392][ T6350] random: crng reseeded on system resumption [ 94.337436][ T30] audit: type=1400 audit(1757963304.187:260): avc: denied { read } for pid=6341 comm="syz.3.88" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 94.396884][ T30] audit: type=1400 audit(1757963304.187:261): avc: denied { open } for pid=6341 comm="syz.3.88" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 94.600975][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.665912][ T30] audit: type=1400 audit(1757963304.227:262): avc: denied { write } for pid=6341 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.706317][ T30] audit: type=1400 audit(1757963304.267:263): avc: denied { ioctl } for pid=6341 comm="syz.3.88" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.781327][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 94.795766][ T9] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 94.842360][ T9] usb 5-1: config 4 has no interface number 0 [ 94.849231][ T9] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.908454][ T9] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.054736][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 95.281311][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.409632][ T9] hub 5-1:4.128: USB hub found [ 95.627219][ T9] hub 5-1:4.128: config failed, hub has too many ports! (err -19) [ 95.797729][ T9] IPVS: starting estimator thread 0... [ 95.901506][ T6380] IPVS: using max 55 ests per chain, 132000 per kthread [ 96.016435][ T6384] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 96.350150][ T5926] usb 5-1: USB disconnect, device number 4 [ 96.406820][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 96.642463][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 96.737014][ T6388] netlink: 277 bytes leftover after parsing attributes in process `syz.0.97'. [ 97.104192][ T9] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.132410][ T9] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.147077][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 97.156692][ T9] usb 4-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 97.176033][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.176546][ T6390] tmpfs: Bad value for 'size' [ 97.184414][ T9] usb 4-1: Product: syz [ 97.188947][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 97.188959][ T30] audit: type=1400 audit(1757963307.167:267): avc: denied { mounton } for pid=6389 comm="syz.1.98" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 97.195488][ T9] usb 4-1: Manufacturer: 䐺럘者ݓ蓥⬱岸㠚ꪠ卓㒝侚㧷揄힇膹┣摣݉戯裊䆅軒ꋠ콶綡⨂뙪䢑⡚ﴡ韠儮껜ḯ❛胅苟쯋 [ 97.256994][ T9] usb 4-1: SerialNumber: syz [ 97.327058][ T6390] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.98'. [ 97.609239][ T6403] netem: incorrect gi model size [ 97.626243][ T6403] netem: change failed [ 97.771043][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 97.801921][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 97.842401][ T9] usb 4-1: USB disconnect, device number 6 [ 97.923702][ T30] audit: type=1400 audit(1757963307.917:268): avc: denied { create } for pid=6405 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 98.054342][ T30] audit: type=1400 audit(1757963308.037:269): avc: denied { sys_module } for pid=6405 comm="syz.2.101" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 98.225444][ T30] audit: type=1400 audit(1757963308.217:270): avc: denied { create } for pid=6415 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 98.293968][ T30] audit: type=1400 audit(1757963308.217:271): avc: denied { write } for pid=6415 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 98.387358][ T30] audit: type=1400 audit(1757963308.227:272): avc: denied { ioctl } for pid=6415 comm="syz.4.104" path="socket:[10871]" dev="sockfs" ino=10871 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 99.189620][ T5953] IPVS: starting estimator thread 0... [ 99.205632][ T6434] netlink: 277 bytes leftover after parsing attributes in process `syz.3.106'. [ 99.447903][ T6433] IPVS: using max 41 ests per chain, 98400 per kthread [ 99.482356][ T6436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 100.184541][ T6447] binder: 6446:6447 unknown command 0 [ 100.189949][ T6447] binder: 6446:6447 ioctl c0306201 200000000080 returned -22 [ 100.199185][ T6447] binder: BINDER_SET_CONTEXT_MGR already set [ 100.205333][ T6447] binder: 6446:6447 ioctl 4018620d 200000000040 returned -16 [ 100.500658][ T30] audit: type=1400 audit(1757963310.177:273): avc: denied { set_context_mgr } for pid=6446 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 100.520325][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.797007][ T30] audit: type=1400 audit(1757963310.187:274): avc: denied { map } for pid=6446 comm="syz.4.111" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.821033][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.920511][ T30] audit: type=1400 audit(1757963310.207:275): avc: denied { write } for pid=6446 comm="syz.4.111" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.165328][ T6480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.116'. [ 101.236282][ T6483] netlink: 'syz.0.118': attribute type 4 has an invalid length. [ 101.256387][ T6483] netlink: 'syz.0.118': attribute type 4 has an invalid length. [ 101.260598][ T30] audit: type=1400 audit(1757963310.227:276): avc: denied { mount } for pid=6446 comm="syz.4.111" name="/" dev="rpc_pipefs" ino=10900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 101.287111][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.421248][ T43] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 102.541272][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.605467][ T6499] netlink: 'syz.2.120': attribute type 10 has an invalid length. [ 102.652884][ T6499] batman_adv: batadv0: Adding interface: team0 [ 102.659414][ T6499] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.718545][ T43] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 102.731675][ T43] usb 5-1: config 0 has no interface number 0 [ 102.737827][ T43] usb 5-1: config 0 interface 110 has no altsetting 0 [ 102.911265][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 102.932363][ T9] usb 1-1: too many configurations: 18, using maximum allowed: 8 [ 102.995433][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 103.004254][ T9] usb 1-1: can't read configurations, error -61 [ 103.107760][ T6509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.464439][ T6499] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 103.498228][ T43] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 103.509054][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.509372][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.731400][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 103.737053][ T9] usb 1-1: too many configurations: 18, using maximum allowed: 8 [ 103.745236][ T6514] netlink: 'syz.2.120': attribute type 10 has an invalid length. [ 103.748022][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 103.757581][ T43] usb 5-1: Product: syz [ 103.761545][ T9] usb 1-1: can't read configurations, error -61 [ 103.848404][ T6515] overlayfs: overlapping lowerdir path [ 103.857324][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 103.857356][ T30] audit: type=1400 audit(1757963313.837:279): avc: denied { mounton } for pid=6510 comm="syz.3.124" path="/21/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 103.900660][ T6516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.124'. [ 104.127505][ T9] usb usb1-port1: attempt power cycle [ 104.133320][ T6514] netlink: 2 bytes leftover after parsing attributes in process `syz.2.120'. [ 104.149102][ T43] usb 5-1: Manufacturer: syz [ 104.154546][ T43] usb 5-1: SerialNumber: syz [ 104.562408][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.731301][ T43] usb 5-1: config 0 descriptor?? [ 104.739677][ T30] audit: type=1400 audit(1757963314.147:280): avc: denied { ioctl } for pid=6518 comm="syz.1.125" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 104.848183][ T6514] team0: entered promiscuous mode [ 104.857747][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 104.885899][ T6514] team_slave_0: entered promiscuous mode [ 104.892983][ T30] audit: type=1400 audit(1757963314.367:281): avc: denied { mounton } for pid=6518 comm="syz.1.125" path="/25/file0" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.901054][ T9] usb 1-1: too many configurations: 18, using maximum allowed: 8 [ 104.949198][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 104.959113][ T9] usb 1-1: can't read configurations, error -61 [ 104.971946][ T43] cdc_subset 5-1:0.110: probe with driver cdc_subset failed with error -22 [ 104.981826][ T6514] team_slave_1: entered promiscuous mode [ 105.052457][ T6514] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.064576][ T6514] batman_adv: batadv0: Interface activated: team0 [ 105.114958][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.155859][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 105.161776][ T9] usb 1-1: too many configurations: 18, using maximum allowed: 8 [ 105.177933][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 105.180966][ T43] usb 5-1: USB disconnect, device number 5 [ 105.190396][ T9] usb 1-1: can't read configurations, error -61 [ 105.281138][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 105.292832][ T6514] batman_adv: batadv0: Interface deactivated: team0 [ 105.305426][ T6514] batman_adv: batadv0: Removing interface: team0 [ 105.313667][ T6514] bridge0: port 3(team0) entered blocking state [ 105.320111][ T6514] bridge0: port 3(team0) entered disabled state [ 105.326683][ T6514] team0: entered allmulticast mode [ 105.330239][ T9] usb usb1-port1: unable to enumerate USB device [ 105.339485][ T6514] team_slave_0: entered allmulticast mode [ 105.732667][ T6514] team_slave_1: entered allmulticast mode [ 105.758911][ T6514] bridge0: port 3(team0) entered blocking state [ 105.765358][ T6514] bridge0: port 3(team0) entered forwarding state [ 105.788414][ T6531] GUP no longer grows the stack in syz.0.128 (6531): 200000004000-20000000a000 (200000002000) [ 105.801325][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 105.809123][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 105.827313][ T6531] CPU: 0 UID: 0 PID: 6531 Comm: syz.0.128 Not tainted syzkaller #0 PREEMPT(full) [ 105.827336][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.827343][ T6531] Call Trace: [ 105.827347][ T6531] [ 105.827352][ T6531] dump_stack_lvl+0x16c/0x1f0 [ 105.827371][ T6531] gup_vma_lookup+0x1d2/0x220 [ 105.827387][ T6531] __get_user_pages+0x243/0x34a0 [ 105.827409][ T6531] ? find_held_lock+0x2b/0x80 [ 105.827425][ T6531] ? __pfx___get_user_pages+0x10/0x10 [ 105.827445][ T6531] get_user_pages_remote+0x243/0xab0 [ 105.827461][ T6531] ? mas_parent_gap+0x6f0/0x7b0 [ 105.827477][ T6531] ? __pfx_get_user_pages_remote+0x10/0x10 [ 105.827495][ T6531] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.827511][ T6531] __access_remote_vm+0x24d/0x850 [ 105.827527][ T6531] ? do_raw_spin_lock+0x12c/0x2b0 [ 105.827539][ T6531] ? __pfx___access_remote_vm+0x10/0x10 [ 105.827555][ T6531] proc_pid_cmdline_read+0x4de/0x8e0 [ 105.827571][ T6531] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 105.827585][ T6531] ? rw_verify_area+0xcf/0x6c0 [ 105.827602][ T6531] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 105.827615][ T6531] vfs_readv+0x5be/0x8b0 [ 105.827628][ T6531] ? __pfx_vfs_readv+0x10/0x10 [ 105.827638][ T6531] ? kmem_cache_free+0x2d1/0x4d0 [ 105.827657][ T6531] ? __fget_files+0x20e/0x3c0 [ 105.827673][ T6531] ? do_preadv+0x1a6/0x270 [ 105.827681][ T6531] do_preadv+0x1a6/0x270 [ 105.827691][ T6531] ? __pfx_do_preadv+0x10/0x10 [ 105.827702][ T6531] ? rcu_is_watching+0x12/0xc0 [ 105.827719][ T6531] do_syscall_64+0xcd/0x4e0 [ 105.827734][ T6531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.827745][ T6531] RIP: 0033:0x7f4a97d8eba9 [ 105.827754][ T6531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.827764][ T6531] RSP: 002b:00007f4a98c61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 105.827776][ T6531] RAX: ffffffffffffffda RBX: 00007f4a97fd5fa0 RCX: 00007f4a97d8eba9 [ 105.827782][ T6531] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005 [ 105.827788][ T6531] RBP: 00007f4a97e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 105.827795][ T6531] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 105.827801][ T6531] R13: 00007f4a97fd6038 R14: 00007f4a97fd5fa0 R15: 00007ffffb7921d8 [ 105.827814][ T6531] [ 105.841289][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.139853][ T24] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 106.149367][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.158023][ T24] usb 4-1: Product: syz [ 106.162424][ T24] usb 4-1: Manufacturer: syz [ 106.167061][ T24] usb 4-1: SerialNumber: syz [ 106.173146][ T24] usb 4-1: config 0 descriptor?? [ 106.187049][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'. [ 106.223703][ T24] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 106.275630][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 106.311331][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 106.365109][ T24] keyspan 4-1:0.0: unsupported endpoint type 0 [ 106.377507][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 106.386242][ T6542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.386288][ T30] audit: type=1400 audit(1757963316.367:282): avc: denied { write } for pid=6544 comm="syz.2.133" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 106.423286][ T6542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.433202][ T6524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.659633][ T6542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.668518][ T6524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.676420][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 106.676802][ T6542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.693215][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 106.701067][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 106.718883][ T30] audit: type=1400 audit(1757963316.367:283): avc: denied { open } for pid=6544 comm="syz.2.133" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 106.745824][ T6524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.759145][ T30] audit: type=1400 audit(1757963316.507:284): avc: denied { read write } for pid=6546 comm="syz.0.132" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.819742][ T6524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.851325][ T5985] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.858923][ T30] audit: type=1400 audit(1757963316.507:285): avc: denied { open } for pid=6546 comm="syz.0.132" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.860814][ T24] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 106.887941][ T30] audit: type=1400 audit(1757963316.507:286): avc: denied { ioctl } for pid=6546 comm="syz.0.132" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.978758][ T30] audit: type=1400 audit(1757963316.907:287): avc: denied { create } for pid=6523 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.002997][ T30] audit: type=1400 audit(1757963316.967:288): avc: denied { setopt } for pid=6523 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.036829][ T24] usb 4-1: USB disconnect, device number 7 [ 107.064162][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 107.097938][ T24] keyspan 4-1:0.0: device disconnected [ 107.225471][ T5985] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 107.244714][ T5985] usb 2-1: config 0 has no interface number 0 [ 107.326017][ T5985] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.374531][ T5985] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.418139][ T5985] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 107.597665][ T5985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.637870][ T5985] usb 2-1: config 0 descriptor?? [ 107.971290][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 108.108577][ T5985] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 108.116675][ T5985] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 108.131393][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 108.139836][ T9] usb 4-1: config 0 has an invalid interface number: 86 but max is 0 [ 108.150638][ T5985] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 108.158689][ T9] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 108.172509][ T9] usb 4-1: config 0 has no interface number 0 [ 108.177875][ T5985] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 108.286922][ T5985] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 108.295540][ T5985] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 108.303115][ T5985] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 108.350257][ T5985] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input3 [ 108.361567][ T9] usb 4-1: config 0 interface 86 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.403497][ T9] usb 4-1: config 0 interface 86 has no altsetting 0 [ 108.412239][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.136'. [ 108.423699][ T5985] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 108.455109][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=33.7a [ 108.458612][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.136'. [ 108.524219][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.535734][ T9] usb 4-1: Product: syz [ 108.540346][ T9] usb 4-1: Manufacturer: syz [ 108.546540][ T9] usb 4-1: SerialNumber: syz [ 108.558721][ T9] usb 4-1: config 0 descriptor?? [ 108.697670][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'. [ 108.775515][ T9] usb 4-1: USB disconnect, device number 8 [ 109.096136][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 109.096152][ T30] audit: type=1400 audit(1757963319.087:295): avc: denied { name_bind } for pid=6539 comm="syz.1.131" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 109.136877][ T6541] netlink: 'syz.1.131': attribute type 10 has an invalid length. [ 109.144802][ T6541] batadv0: left allmulticast mode [ 109.152636][ T6541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.163079][ T6541] batadv0: entered allmulticast mode [ 109.168858][ T6541] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 109.183728][ T5985] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 109.202935][ T5985] usb 2-1: USB disconnect, device number 3 [ 109.699532][ T30] audit: type=1400 audit(1757963319.687:296): avc: denied { kexec_image_load } for pid=6573 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 110.108428][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 110.111267][ T30] audit: type=1400 audit(1757963319.877:297): avc: denied { mount } for pid=6573 comm="syz.3.140" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 110.248368][ T6594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.343145][ T6594] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 110.392633][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 110.407612][ T6597] netlink: 80 bytes leftover after parsing attributes in process `syz.0.145'. [ 110.418322][ T6597] netlink: 80 bytes leftover after parsing attributes in process `syz.0.145'. [ 110.501733][ T30] audit: type=1400 audit(1757963320.087:298): avc: denied { read write } for pid=6584 comm="syz.0.143" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.521293][ T5919] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.525029][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.561841][ T30] audit: type=1400 audit(1757963320.087:299): avc: denied { open } for pid=6584 comm="syz.0.143" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.613856][ T30] audit: type=1400 audit(1757963320.087:300): avc: denied { ioctl } for pid=6584 comm="syz.0.143" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.638554][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.741646][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 110.759240][ T5919] usb 2-1: config 0 has an invalid interface number: 74 but max is 0 [ 110.767485][ T5919] usb 2-1: config 0 has no interface number 0 [ 110.784032][ T5919] usb 2-1: config 0 interface 74 has no altsetting 0 [ 110.811347][ T9] usb 1-1: device descriptor read/64, error -71 [ 110.962055][ T5919] usb 2-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36 [ 110.991447][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.156754][ T6602] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 111.591305][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 113.387138][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 113.401296][ T5919] usb 2-1: Product: syz [ 113.405464][ T5919] usb 2-1: Manufacturer: syz [ 113.410024][ T5919] usb 2-1: SerialNumber: syz [ 113.499510][ T30] audit: type=1400 audit(1757963323.437:301): avc: denied { mount } for pid=6605 comm="syz.2.148" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 113.516917][ T9] usb 1-1: device descriptor read/all, error -71 [ 113.530355][ T30] audit: type=1400 audit(1757963323.527:302): avc: denied { create } for pid=6611 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 113.554875][ T30] audit: type=1400 audit(1757963323.547:303): avc: denied { create } for pid=6610 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.563859][ T5919] usb 2-1: config 0 descriptor?? [ 113.592310][ T6612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.147'. [ 113.689751][ T30] audit: type=1400 audit(1757963323.597:304): avc: denied { ioctl } for pid=6610 comm="syz.0.149" path="socket:[11298]" dev="sockfs" ino=11298 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.732171][ T9] usb usb1-port1: attempt power cycle [ 113.843039][ T5919] usb 2-1: can't set config #0, error -71 [ 113.951266][ T5919] usb 2-1: USB disconnect, device number 4 [ 114.143158][ T6633] netlink: 156 bytes leftover after parsing attributes in process `syz.4.152'. [ 115.288602][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 115.289300][ T30] audit: type=1400 audit(1757963325.277:307): avc: denied { append } for pid=6617 comm="syz.1.150" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 115.914789][ T30] audit: type=1400 audit(1757963325.907:308): avc: denied { ioctl } for pid=6635 comm="syz.2.154" path="socket:[12420]" dev="sockfs" ino=12420 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.942413][ T6640] 9pnet_fd: Insufficient options for proto=fd [ 116.539629][ T30] audit: type=1400 audit(1757963326.527:309): avc: denied { setopt } for pid=6647 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 116.763079][ T30] audit: type=1400 audit(1757963326.567:310): avc: denied { write } for pid=6647 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.414299][ T30] audit: type=1400 audit(1757963327.227:311): avc: denied { write } for pid=6663 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.712161][ T30] audit: type=1400 audit(1757963327.687:312): avc: denied { watch watch_reads } for pid=6655 comm="syz.1.158" path="/31/file0" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.981262][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.405014][ T6678] ip6erspan0: entered promiscuous mode [ 118.451583][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 118.483675][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 118.509604][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.573399][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.606485][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.630061][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.631269][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 118.641616][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.659658][ T6684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.166'. [ 118.661096][ T9] usb 2-1: config 0 descriptor?? [ 118.754527][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.816711][ T6690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6690 comm=syz.0.167 [ 118.850666][ T6689] netlink: 9 bytes leftover after parsing attributes in process `syz.0.167'. [ 118.949480][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.007748][ T6689] 0: renamed from hsr0 (while UP) [ 119.015903][ T6689] 0: entered allmulticast mode [ 119.020971][ T6689] hsr_slave_0: entered allmulticast mode [ 119.045571][ T6689] hsr_slave_1: entered allmulticast mode [ 119.052301][ T6689] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 119.077402][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 119.090465][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.108963][ T24] usb 4-1: Product: syz [ 119.143695][ T24] usb 4-1: Manufacturer: syz [ 119.153591][ T24] usb 4-1: SerialNumber: syz [ 119.167523][ T24] usb 4-1: config 0 descriptor?? [ 119.180578][ T24] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 119.190993][ T24] gspca_stv06xx: st6422 sensor detected [ 119.443123][ T6696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.169'. [ 119.515181][ T30] audit: type=1400 audit(1757963329.387:313): avc: denied { getopt } for pid=6693 comm="syz.0.169" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.783379][ T6692] block nbd2: NBD_DISCONNECT [ 119.789230][ T6692] block nbd2: Send disconnect failed -22 [ 120.136684][ T5985] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.260744][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 120.290239][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 120.296912][ T5985] usb 3-1: Using ep0 maxpacket: 8 [ 120.307081][ T9] usb 2-1: USB disconnect, device number 5 [ 120.321078][ T5985] usb 3-1: config 162 has an invalid interface number: 84 but max is 2 [ 120.332310][ T5985] usb 3-1: config 162 has an invalid interface number: 3 but max is 2 [ 120.358365][ T5985] usb 3-1: config 162 has no interface number 0 [ 120.399803][ T5985] usb 3-1: config 162 has no interface number 1 [ 120.458689][ T5985] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 120.517182][ T5985] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 120.548381][ T5985] usb 3-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 120.942869][ T6710] netlink: 132 bytes leftover after parsing attributes in process `syz.4.171'. [ 121.170645][ T5985] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 121.218138][ T6714] qnx6: unable to read the first superblock [ 121.590219][ T30] audit: type=1400 audit(1757963331.187:314): avc: denied { create } for pid=6711 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 121.616018][ T24] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 121.628087][ T5985] usb 3-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 121.644500][ T24] usb 4-1: USB disconnect, device number 9 [ 121.656549][ T30] audit: type=1400 audit(1757963331.247:315): avc: denied { write } for pid=6711 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 121.682312][ T5985] usb 3-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 121.712630][ T5985] usb 3-1: config 162 interface 84 has no altsetting 0 [ 121.726870][ T30] audit: type=1400 audit(1757963331.607:316): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 121.764746][ T5985] usb 3-1: config 162 interface 2 has no altsetting 0 [ 121.774092][ T5985] usb 3-1: config 162 interface 3 has no altsetting 0 [ 121.784131][ T5985] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 121.794310][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.802755][ T5985] usb 3-1: Product: syz [ 121.807320][ T5985] usb 3-1: Manufacturer: syz [ 121.808460][ T6721] netlink: 'syz.1.176': attribute type 1 has an invalid length. [ 121.840774][ T5985] usb 3-1: SerialNumber: syz [ 121.845468][ T6721] bond1: entered promiscuous mode [ 121.846475][ T6721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.895439][ T6721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.901388][ T6724] netlink: 48 bytes leftover after parsing attributes in process `syz.4.174'. [ 121.903589][ T6721] bond1: (slave bond2): making interface the new active one [ 121.937181][ T6721] bond2: entered promiscuous mode [ 121.943886][ T6721] bond1: (slave bond2): Enslaving as an active interface with an up link [ 122.100492][ T6691] block nbd2: Disconnected due to user request. [ 122.116056][ T6691] block nbd2: shutting down sockets [ 122.237707][ T5854] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 122.269388][ T5985] usb 3-1: USB disconnect, device number 3 [ 122.351886][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 122.535782][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 122.556935][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 122.611569][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.624940][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.652026][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.661534][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.671233][ T10] usb 2-1: Product: syz [ 122.675820][ T10] usb 2-1: Manufacturer: syz [ 122.681203][ T10] usb 2-1: SerialNumber: syz [ 122.939781][ T30] audit: type=1400 audit(1757963332.927:317): avc: denied { setopt } for pid=6720 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.013300][ T30] audit: type=1400 audit(1757963332.957:318): avc: denied { write } for pid=6720 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.081735][ T10] usb 2-1: skipping empty audio interface (v1) [ 123.114502][ T30] audit: type=1400 audit(1757963333.107:319): avc: denied { read } for pid=6735 comm="syz.3.180" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 123.137045][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.160842][ T30] audit: type=1400 audit(1757963333.107:320): avc: denied { open } for pid=6735 comm="syz.3.180" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 123.185696][ T30] audit: type=1400 audit(1757963333.137:321): avc: denied { ioctl } for pid=6735 comm="syz.3.180" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 123.317079][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 123.320072][ T5985] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 123.332770][ T10] usb 2-1: USB disconnect, device number 6 [ 123.355762][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.373214][ T6739] netlink: 277 bytes leftover after parsing attributes in process `syz.2.179'. [ 123.622540][ T5985] usb 5-1: Using ep0 maxpacket: 8 [ 123.787648][ T5985] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 123.798123][ T5985] usb 5-1: config 0 has no interface number 0 [ 123.817509][ T5985] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 124.351297][ T5985] usb 5-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 124.422508][ T30] audit: type=1400 audit(1757963334.407:322): avc: denied { execute } for pid=6735 comm="syz.3.180" path="/30/cpu.stat" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.430876][ T5985] usb 5-1: Product: syz [ 124.652933][ T5985] usb 5-1: Manufacturer: syz [ 124.658262][ T5985] usb 5-1: SerialNumber: syz [ 124.688939][ T6752] netlink: 277 bytes leftover after parsing attributes in process `syz.2.182'. [ 125.075432][ T5985] usb 5-1: config 0 descriptor?? [ 125.314755][ T5985] peak_usb 5-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 125.342638][ T6754] bond3: entered promiscuous mode [ 125.358679][ T6754] bond3: entered allmulticast mode [ 125.367659][ T6754] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.430716][ T5919] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 125.549302][ T5985] peak_usb 5-1:0.56 can0: sending command failure: -22 [ 125.585979][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.631793][ T5985] peak_usb 5-1:0.56 can0: sending command failure: -22 [ 125.645906][ T5919] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 125.975256][ T5985] peak_usb 5-1:0.56 can0: sending command failure: -22 [ 125.978264][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.227175][ T5919] usb 1-1: config 0 descriptor?? [ 126.397190][ T5985] peak_usb 5-1:0.56: probe with driver peak_usb failed with error -22 [ 126.806540][ T5919] logitech-djreceiver 0003:046D:C71F.0002: hidraw0: USB HID v7e.00 Device [HID 046d:c71f] on usb-dummy_hcd.0-1/input0 [ 127.192181][ T30] audit: type=1400 audit(1757963337.157:323): avc: denied { append } for pid=6753 comm="syz.0.184" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.464856][ T1205] usb 1-1: USB disconnect, device number 11 [ 128.526276][ T5953] usb 5-1: USB disconnect, device number 6 [ 128.957519][ T30] audit: type=1400 audit(1757963338.947:324): avc: denied { ioctl } for pid=6793 comm="syz.1.191" path="socket:[12871]" dev="sockfs" ino=12871 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 129.228748][ T1205] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 129.485635][ T1205] usb 1-1: Using ep0 maxpacket: 8 [ 129.507438][ T1205] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 129.516880][ T1205] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.526821][ T1205] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.603255][ T6802] netlink: 277 bytes leftover after parsing attributes in process `syz.2.193'. [ 129.947917][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 129.957555][ T1205] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.969383][ T1205] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.982945][ T1205] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 129.996465][ T1205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.137182][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.149033][ T10] usb 2-1: New USB device found, idVendor=0eef, idProduct=726b, bcdDevice= 0.00 [ 130.279888][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.291540][ T10] usb 2-1: config 0 descriptor?? [ 130.321055][ T1205] usb 1-1: GET_CAPABILITIES returned 0 [ 130.331288][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 130.414509][ T1205] usbtmc 1-1:16.0: can't read capabilities [ 130.572856][ T30] audit: type=1400 audit(1757963340.547:325): avc: denied { mount } for pid=6796 comm="syz.1.192" name="/" dev="autofs" ino=11730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 130.602299][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 130.639230][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 130.661769][ T5985] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 130.811636][ T5985] usb 5-1: Using ep0 maxpacket: 32 [ 130.826921][ T5985] usb 5-1: config 0 has an invalid interface number: 53 but max is 0 [ 130.838890][ T5985] usb 5-1: config 0 has no interface number 0 [ 130.860346][ T5985] usb 5-1: config 0 interface 53 has no altsetting 0 [ 130.868558][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.883950][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 130.891840][ T5985] usb 5-1: New USB device found, idVendor=2c7c, idProduct=030c, bcdDevice=18.43 [ 130.893057][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.911036][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.934846][ T5985] usb 5-1: Product: syz [ 130.934864][ T9] usb 4-1: Product: syz [ 130.934898][ T9] usb 4-1: Manufacturer: syz [ 130.951089][ T9] usb 4-1: SerialNumber: syz [ 130.958445][ T5985] usb 5-1: Manufacturer: syz [ 130.965324][ T5985] usb 5-1: SerialNumber: syz [ 131.009506][ T6790] usbtmc 1-1:16.0: INITIATE_CLEAR returned 2c [ 131.016762][ T9] usb 4-1: config 0 descriptor?? [ 131.021076][ T5985] usb 5-1: config 0 descriptor?? [ 131.031020][ T9] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 131.042303][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 131.051525][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 131.063137][ T9] keyspan 4-1:0.0: unsupported endpoint type 0 [ 131.071742][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 131.081287][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 131.089584][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 131.107221][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 131.122990][ T9] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 131.236903][ T6819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.245667][ T6819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.263201][ T5985] option 5-1:0.53: GSM modem (1-port) converter detected [ 131.290252][ T5985] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB1 [ 131.337081][ T5985] usb 5-1: USB disconnect, device number 7 [ 131.377660][ T5985] option1 ttyUSB1: GSM modem (1-port) converter now disconnected from ttyUSB1 [ 131.390958][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.405874][ T5985] option 5-1:0.53: device disconnected [ 131.413610][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.464172][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.474052][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.601465][ T9] usb 4-1: USB disconnect, device number 10 [ 131.609983][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 131.634523][ T9] keyspan 4-1:0.0: device disconnected [ 132.349854][ T10] usb 2-1: string descriptor 0 read error: -71 [ 132.366852][ T6827] netlink: 277 bytes leftover after parsing attributes in process `syz.4.199'. [ 132.380608][ T30] audit: type=1400 audit(1757963342.367:326): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 132.382470][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 132.409507][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 132.438058][ T10] usb 2-1: USB disconnect, device number 7 [ 132.455529][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.462129][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.481048][ T1205] usb 1-1: USB disconnect, device number 12 [ 132.493805][ T30] audit: type=1400 audit(1757963342.477:327): avc: denied { write } for pid=6828 comm="syz.1.200" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 132.543729][ T6829] netlink: 40 bytes leftover after parsing attributes in process `syz.1.200'. [ 132.573334][ T6829] sit0: left allmulticast mode [ 132.587488][ T6829] netlink: 40 bytes leftover after parsing attributes in process `syz.1.200'. [ 132.598174][ T6830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.200'. [ 132.618193][ T6830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.200'. [ 133.355473][ T6835] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 133.678556][ T6835] vlan2: entered allmulticast mode [ 133.693492][ T6835] bond0: entered allmulticast mode [ 133.719927][ T6835] bond_slave_0: entered allmulticast mode [ 133.758786][ T30] audit: type=1400 audit(1757963343.747:328): avc: denied { create } for pid=6848 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.823137][ T6835] bond_slave_1: entered allmulticast mode [ 134.024138][ T30] audit: type=1400 audit(1757963343.747:329): avc: denied { connect } for pid=6848 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.944233][ T6861] __vm_enough_memory: pid: 6861, comm: syz.0.206, bytes: 21199603085312 not enough memory for the allocation [ 135.073502][ T30] audit: type=1400 audit(1757963345.047:330): avc: denied { mount } for pid=6865 comm="syz.1.210" name="/" dev="hugetlbfs" ino=11832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 135.367593][ T30] audit: type=1400 audit(1757963345.357:331): avc: denied { setopt } for pid=6871 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.763289][ T6882] netlink: 277 bytes leftover after parsing attributes in process `syz.2.214'. [ 135.763757][ T6883] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.213'. [ 136.714982][ T6898] capability: warning: `syz.3.219' uses 32-bit capabilities (legacy support in use) [ 137.221290][ T30] audit: type=1400 audit(1757963347.187:332): avc: denied { write } for pid=6911 comm="syz.3.221" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 137.332276][ T6916] fuse: Bad value for 'fd' [ 137.337406][ T6916] __vm_enough_memory: pid: 6916, comm: syz.2.222, bytes: 21199608664064 not enough memory for the allocation [ 138.324403][ T6936] netlink: 277 bytes leftover after parsing attributes in process `syz.2.228'. [ 139.863780][ T6939] netlink: 48 bytes leftover after parsing attributes in process `syz.1.227'. [ 140.228875][ T6946] tipc: Started in network mode [ 140.234051][ T6946] tipc: Node identity 7f000001, cluster identity 4711 [ 140.242413][ T6946] tipc: New replicast peer: 0.0.0.0 [ 140.249003][ T6946] tipc: Enabled bearer , priority 10 [ 140.861234][ T5985] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 140.871482][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 141.062922][ T5985] usb 4-1: device descriptor read/64, error -32 [ 141.314554][ T6961] syz_tun: entered promiscuous mode [ 141.324272][ T6961] batadv_slave_0: entered promiscuous mode [ 141.335444][ T6961] hsr1: entered allmulticast mode [ 141.346717][ T6961] syz_tun: entered allmulticast mode [ 141.352137][ T6961] batadv_slave_0: entered allmulticast mode [ 141.367825][ T5985] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 141.617070][ T24] tipc: Node number set to 2130706433 [ 141.651623][ T10] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 141.776629][ T5985] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.789022][ T5985] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 141.800638][ T5985] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 141.816676][ T5985] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 141.829191][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.838507][ T5985] usb 4-1: Product: syz [ 141.844349][ T5985] usb 4-1: Manufacturer: syz [ 141.844440][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 141.849148][ T5985] usb 4-1: SerialNumber: syz [ 141.872952][ T5985] usb 4-1: config 0 descriptor?? [ 141.898778][ T5985] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 141.906447][ T5985] usb 4-1: No valid video chain found. [ 142.018662][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.030360][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 142.049634][ T10] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 142.168362][ T30] audit: type=1400 audit(1757963352.107:333): avc: denied { watch_mount } for pid=6963 comm="syz.4.235" path="/42" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 142.190692][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.239693][ T10] usb 1-1: config 0 descriptor?? [ 142.263255][ T30] audit: type=1400 audit(1757963352.247:334): avc: denied { sqpoll } for pid=6970 comm="syz.1.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 142.335374][ T9] usb 4-1: USB disconnect, device number 12 [ 142.506652][ T6957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.507026][ T6957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.518784][ T6982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.233'. [ 142.579190][ T10] waltop 0003:172F:0500.0003: unknown main item tag 0x0 [ 142.579210][ T10] waltop 0003:172F:0500.0003: unknown main item tag 0x0 [ 142.579222][ T10] waltop 0003:172F:0500.0003: unknown main item tag 0x0 [ 142.584290][ T10] waltop 0003:172F:0500.0003: hidraw0: USB HID v1.01 Device [HID 172f:0500] on usb-dummy_hcd.0-1/input0 [ 142.806265][ T10] usb 1-1: USB disconnect, device number 13 [ 144.108467][ T6996] netlink: 277 bytes leftover after parsing attributes in process `syz.0.239'. [ 144.493775][ T30] audit: type=1400 audit(1757963354.487:335): avc: denied { wake_alarm } for pid=6992 comm="syz.2.240" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 144.901853][ T7002] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.648208][ T30] audit: type=1400 audit(1757963355.637:336): avc: denied { name_connect } for pid=7018 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 145.911255][ T6061] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 145.945841][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'. [ 145.956417][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 145.965543][ T7028] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 146.131224][ T6061] usb 5-1: device descriptor read/64, error -71 [ 146.328269][ T30] audit: type=1400 audit(1757963356.297:337): avc: denied { connect } for pid=7033 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.415720][ T30] audit: type=1400 audit(1757963356.397:338): avc: denied { read write } for pid=7030 comm="syz.0.249" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 146.561887][ T6061] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 147.184953][ T30] audit: type=1400 audit(1757963356.397:339): avc: denied { open } for pid=7030 comm="syz.0.249" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 147.391304][ T6061] usb 5-1: device descriptor read/64, error -71 [ 148.421640][ T6061] usb usb5-port1: attempt power cycle [ 148.688247][ T7048] block device autoloading is deprecated and will be removed. [ 148.830352][ T7042] delete_channel: no stack [ 148.951256][ T6061] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 149.091061][ T7054] netlink: 277 bytes leftover after parsing attributes in process `syz.1.254'. [ 149.121512][ T6061] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 149.462282][ T6061] usb 5-1: Using ep0 maxpacket: 32 [ 149.502836][ T6061] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 149.574478][ T6061] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.667619][ T6061] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 149.811201][ T6061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.841323][ T6061] usb 5-1: Product: syz [ 149.899214][ T6061] usb 5-1: Manufacturer: syz [ 149.905455][ T6061] usb 5-1: SerialNumber: syz [ 149.907344][ T6061] usb 5-1: config 0 descriptor?? [ 149.908994][ T6061] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 149.909072][ T6061] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 149.909101][ T6061] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 149.909638][ T6061] keyspan 5-1:0.0: unsupported endpoint type 0 [ 149.909672][ T6061] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 149.909703][ T6061] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 149.909735][ T6061] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 149.909765][ T6061] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 149.912701][ T6061] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 149.941656][ T7060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.257'. [ 150.073053][ T7063] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.256'. [ 150.259419][ T1205] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 150.317939][ T7050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.318663][ T7050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.326903][ T7050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.327239][ T7050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.459785][ T6061] usb 5-1: USB disconnect, device number 11 [ 150.463143][ T6061] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 150.469134][ T6061] keyspan 5-1:0.0: device disconnected [ 150.581690][ T1205] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 150.597852][ T1205] usb 4-1: config 1 has no interface number 0 [ 150.605411][ T1205] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 80, setting to 64 [ 150.664815][ T1205] usb 4-1: config 1 interface 105 has no altsetting 0 [ 150.685751][ T1205] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 150.698939][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.712627][ T1205] usb 4-1: Product: syz [ 150.719037][ T1205] usb 4-1: Manufacturer: syz [ 150.727884][ T1205] usb 4-1: SerialNumber: syz [ 150.743655][ T7061] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 150.864382][ T7076] __vm_enough_memory: pid: 7076, comm: syz.0.260, bytes: 21199603085312 not enough memory for the allocation [ 151.026526][ T6061] kernel write not supported for file /radio7 (pid: 6061 comm: kworker/1:7) [ 151.379884][ T7056] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 151.541223][ T30] audit: type=1400 audit(1757963361.497:340): avc: denied { accept } for pid=7085 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 151.621444][ T6061] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 151.863900][ T30] audit: type=1400 audit(1757963361.857:341): avc: denied { map } for pid=7095 comm="syz.2.266" path="pipe:[13434]" dev="pipefs" ino=13434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 151.881208][ T6061] usb 2-1: Using ep0 maxpacket: 16 [ 151.889884][ T30] audit: type=1400 audit(1757963361.857:342): avc: denied { execute } for pid=7095 comm="syz.2.266" path="pipe:[13434]" dev="pipefs" ino=13434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 151.894583][ T6061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.914788][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.932934][ T6061] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 151.945535][ T6061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.955732][ T6061] usb 2-1: config 0 descriptor?? [ 152.039104][ T7103] netlink: 277 bytes leftover after parsing attributes in process `syz.0.267'. [ 152.415959][ T30] audit: type=1400 audit(1757963362.407:343): avc: denied { search } for pid=7055 comm="syz.3.255" name="/" dev="configfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.444118][ T1205] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 152.455701][ T1205] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 152.484950][ T1205] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 0a:fa:f5:32:a0:5c [ 152.523248][ T1205] usb 4-1: USB disconnect, device number 13 [ 152.538248][ T1205] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 152.742887][ T5854] Bluetooth: hci4: unexpected event 0x01 length: 4 > 1 [ 152.761803][ T1205] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 152.779764][ T7079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.791649][ T7079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.793147][ T1205] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 152.819316][ T1205] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 153.511232][ T5985] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 153.811276][ T5985] usb 1-1: Using ep0 maxpacket: 16 [ 153.822132][ T5985] usb 1-1: config 0 has no interfaces? [ 153.833246][ T5985] usb 1-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 153.844910][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.853824][ T6061] usbhid 2-1:0.0: can't add hid device: -71 [ 153.859865][ T6061] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 153.900767][ T5985] usb 1-1: Product: syz [ 153.993645][ T5985] usb 1-1: Manufacturer: syz [ 154.283606][ T6061] usb 2-1: USB disconnect, device number 8 [ 154.322385][ T5985] usb 1-1: SerialNumber: syz [ 154.336937][ T5985] usb 1-1: config 0 descriptor?? [ 154.364261][ T7129] netlink: 277 bytes leftover after parsing attributes in process `syz.4.275'. [ 154.416368][ T7122] delete_channel: no stack [ 154.985658][ T7140] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 155.146000][ T7140] bond4: entered promiscuous mode [ 155.151795][ T7140] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.152393][ T7146] overlayfs: failed to resolve './bus': -2 [ 155.203138][ T7144] netlink: 'syz.4.280': attribute type 39 has an invalid length. [ 155.254346][ T7145] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.269029][ T7145] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 155.281531][ T7145] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 155.361347][ T7145] bond4: (slave vcan1): making interface the new active one [ 155.368878][ T7145] vcan1: entered promiscuous mode [ 155.388453][ T7145] bond4: (slave vcan1): Enslaving as an active interface with an up link [ 155.701449][ T5919] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 155.898704][ T10] usb 1-1: USB disconnect, device number 14 [ 156.052831][ T5919] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 156.069399][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.089046][ T5919] usb 4-1: config 0 descriptor?? [ 156.204315][ T5919] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 156.330131][ T7149] ipvlan1: entered promiscuous mode [ 156.702397][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.718908][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.786912][ T30] audit: type=1400 audit(1757963366.777:344): avc: denied { connect } for pid=7173 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.035190][ T5919] gspca_cpia1: usb_control_msg 03, error -32 [ 157.064735][ T5919] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 157.263366][ T30] audit: type=1400 audit(1757963367.257:345): avc: denied { connect } for pid=7179 comm="syz.0.289" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.358629][ T7184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.288'. [ 157.722458][ T5919] gspca_cpia1: usb_control_msg 01, error -71 [ 157.730958][ T5919] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 157.766644][ T5919] usb 4-1: USB disconnect, device number 14 [ 158.012129][ T7184] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 158.190409][ T7204] veth5: entered allmulticast mode [ 158.355142][ T5985] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 158.550890][ T5854] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 158.559878][ T30] audit: type=1400 audit(1757963368.517:346): avc: denied { write } for pid=7210 comm="syz.3.296" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 158.593662][ T5985] usb 2-1: Using ep0 maxpacket: 32 [ 158.752751][ T5919] IPVS: starting estimator thread 0... [ 158.842486][ T7221] IPVS: using max 75 ests per chain, 180000 per kthread [ 158.892649][ T7222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.923746][ T5985] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 159.002115][ T5985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.049103][ T5985] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 159.066919][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.087936][ T5985] usb 2-1: Product: syz [ 159.103448][ T5985] usb 2-1: Manufacturer: syz [ 159.114081][ T5985] usb 2-1: SerialNumber: syz [ 159.602038][ T5985] usb 2-1: config 0 descriptor?? [ 159.609321][ T5985] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 159.621234][ T5985] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 159.959883][ T5985] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 160.059788][ T5985] keyspan 2-1:0.0: unsupported endpoint type 0 [ 160.087383][ T5985] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 160.105219][ T5985] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 160.133914][ T5985] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 160.143828][ T7200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.239835][ T5985] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 160.251878][ T5985] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 160.399454][ T7200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.651452][ T5985] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 160.737455][ T7200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.768227][ T7236] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 160.787589][ T7200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.811661][ T5985] usb 1-1: Using ep0 maxpacket: 16 [ 160.862271][ T5985] usb 1-1: config 3 has an invalid interface number: 99 but max is 0 [ 160.900881][ T5985] usb 1-1: config 3 has no interface number 0 [ 160.921883][ T5985] usb 1-1: config 3 interface 99 has no altsetting 0 [ 160.929778][ T5919] usb 2-1: USB disconnect, device number 9 [ 160.945344][ T5985] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=85.74 [ 160.953640][ T5919] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 160.963820][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.963846][ T5985] usb 1-1: Product: syz [ 160.963860][ T5985] usb 1-1: Manufacturer: syz [ 160.963873][ T5985] usb 1-1: SerialNumber: syz [ 160.971048][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 160.978901][ T5919] keyspan 2-1:0.0: device disconnected [ 161.451266][ T1205] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 161.611222][ T1205] usb 5-1: Using ep0 maxpacket: 8 [ 161.640266][ T1205] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 161.657288][ T1205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.755178][ T7262] process 'syz.1.309' launched './file0' with NULL argv: empty string added [ 161.804593][ T30] audit: type=1400 audit(1757963371.757:347): avc: denied { execute_no_trans } for pid=7258 comm="syz.1.309" path="/57/file0" dev="tmpfs" ino=327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.109111][ T30] audit: type=1400 audit(1757963371.767:348): avc: denied { remount } for pid=7258 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 162.131244][ T1205] usb 5-1: Product: syz [ 162.136244][ T1205] usb 5-1: Manufacturer: syz [ 162.141113][ T1205] usb 5-1: SerialNumber: syz [ 162.152510][ T1205] usb 5-1: config 0 descriptor?? [ 162.164287][ T1205] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 162.166346][ T7264] 9pnet_fd: Insufficient options for proto=fd [ 162.413650][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.496076][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.508569][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.518717][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.535449][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.551628][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.563948][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.574093][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.586129][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.596719][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.690524][ T1205] gspca_sonixj: reg_r err -71 [ 162.696894][ T1205] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 162.749979][ T1205] usb 5-1: USB disconnect, device number 12 [ 162.841812][ T30] audit: type=1400 audit(1757963372.827:349): avc: denied { getopt } for pid=7277 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.861032][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.931603][ T30] audit: type=1400 audit(1757963372.847:350): avc: denied { read } for pid=7269 comm="syz.1.312" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 162.957806][ T30] audit: type=1400 audit(1757963372.847:351): avc: denied { open } for pid=7269 comm="syz.1.312" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 163.046924][ T30] audit: type=1326 audit(1757963373.037:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb414f8eba9 code=0x7ffc0000 [ 163.353287][ T5985] usb 1-1: USB disconnect, device number 15 [ 163.431306][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 163.441096][ T30] audit: type=1326 audit(1757963373.067:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb414f8eba9 code=0x7ffc0000 [ 163.469453][ T30] audit: type=1326 audit(1757963373.067:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb414f8eba9 code=0x7ffc0000 [ 163.755169][ T30] audit: type=1326 audit(1757963373.067:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb414f8eba9 code=0x7ffc0000 [ 163.835295][ T24] usb 5-1: device descriptor read/64, error -71 [ 163.991234][ T30] audit: type=1326 audit(1757963373.067:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb414f8eba9 code=0x7ffc0000 [ 164.079089][ T30] audit: type=1326 audit(1757963373.067:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb414f8eba9 code=0x7ffc0000 [ 164.181336][ T5985] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 164.183504][ T30] audit: type=1326 audit(1757963373.067:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb414f8eba9 code=0x7ffc0000 [ 164.221325][ T30] audit: type=1326 audit(1757963373.077:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb414f8eba9 code=0x7ffc0000 [ 164.246127][ T30] audit: type=1326 audit(1757963373.737:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb414f8eba9 code=0x7ffc0000 [ 164.289830][ T30] audit: type=1326 audit(1757963373.737:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb414f8eba9 code=0x7ffc0000 [ 164.342684][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 164.372995][ T5985] usb 1-1: not running at top speed; connect to a high speed hub [ 164.386713][ T5985] usb 1-1: config 2 has an invalid interface number: 5 but max is 3 [ 164.421216][ T5985] usb 1-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 164.441197][ T5985] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 4 [ 164.450115][ T5985] usb 1-1: config 2 has no interface number 0 [ 164.487474][ T5985] usb 1-1: config 2 interface 5 altsetting 92 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 164.499512][ T24] usb 5-1: device descriptor read/64, error -71 [ 164.586717][ T5985] usb 1-1: config 2 interface 5 altsetting 92 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 164.598635][ T5985] usb 1-1: config 2 interface 5 altsetting 92 endpoint 0xB has invalid maxpacket 18944, setting to 64 [ 164.611350][ T5985] usb 1-1: config 2 interface 5 altsetting 92 has a duplicate endpoint with address 0x4, skipping [ 164.622224][ T5985] usb 1-1: config 2 interface 5 altsetting 92 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 164.634018][ T5985] usb 1-1: config 2 interface 5 altsetting 92 has 7 endpoint descriptors, different from the interface descriptor's value: 5 [ 164.651282][ T5985] usb 1-1: config 2 interface 5 has no altsetting 0 [ 164.669093][ T5985] usb 1-1: New USB device found, idVendor=19d2, idProduct=0113, bcdDevice=92.2a [ 164.678314][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.686442][ T5985] usb 1-1: Product: 뜣㋾崭큻΍俙ᗰ䝣㕠缔﫠㩤劼炜엿튿㰄ᇁట咡ホ⫌ࡀ뾣辺痂ॏ괶⍄ᥳ൛狉鉃䆡ඇ襩栟얺블顁ꖮ樵ኄ嫴䥄쿁娴ᖻ蛿뾙鳫㶥燧儃ÿ鐁㔂ꋿ淨핞䕚ਙ혻谻Ꞛ㞚ᮕ䆭烍鮗Ꜻ縣霐먉氙㩦㉹葛劋 [ 164.712893][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.739017][ T7299] netlink: 'syz.3.318': attribute type 1 has an invalid length. [ 164.816016][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.318'. [ 164.929029][ T7299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.011747][ T24] usb usb5-port1: attempt power cycle [ 165.019007][ T30] audit: type=1400 audit(1757963374.727:362): avc: denied { getopt } for pid=7294 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.019297][ T5985] usb 1-1: Manufacturer: 詔ꘉ᥇초ζ犉왆눮桒홉Ⱪ뛠ꦕ꼫仏꾝씌骩㑾痭ꢲ㉴챟࠷ﺄℶ攊䥂븎쪸ᾚ纰ᘫ趜뤮逡鸵ᮌ᚜僈쾁ퟳ்ꉰ⼼㝎쓈抮ৗ跮넱藇鵹‴臧笵᳌ဇ製ԫ깃帎礑䩢쯿聧ꚫ况앰駱偔⛉⢛娊׎鵞孔㝙裹㕙 ·蝵讦⌊はᢕ眫 [ 165.068972][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.069021][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 165.085129][ T5985] usb 1-1: SerialNumber: syz [ 165.221440][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 165.228340][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 165.240004][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.256545][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 165.265929][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.274368][ T10] usb 2-1: Product: syz [ 165.278551][ T10] usb 2-1: Manufacturer: syz [ 165.283288][ T10] usb 2-1: SerialNumber: syz [ 165.289711][ T10] usb 2-1: config 0 descriptor?? [ 165.298132][ T10] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 165.375133][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 165.375308][ T10] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 165.390457][ T30] audit: type=1400 audit(1757963375.307:363): avc: denied { mount } for pid=7287 comm="syz.0.316" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 165.420545][ T10] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 165.422464][ T24] usb 5-1: device descriptor read/8, error -71 [ 165.429432][ T10] keyspan 2-1:0.0: unsupported endpoint type 0 [ 165.444441][ T10] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 165.454506][ T10] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 165.467159][ T10] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 165.475076][ T10] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 165.486692][ T10] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 165.500405][ T7297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.597587][ T7297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.627400][ T7297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.638505][ T7297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.702387][ T7311] netlink: 277 bytes leftover after parsing attributes in process `syz.3.321'. [ 166.183573][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 166.443863][ T10] usb 2-1: USB disconnect, device number 10 [ 166.482188][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 166.511455][ T5985] usb 1-1: USB disconnect, device number 16 [ 166.521379][ T24] usb 5-1: device not accepting address 16, error -71 [ 166.531036][ T10] keyspan 2-1:0.0: device disconnected [ 166.547622][ T24] usb usb5-port1: unable to enumerate USB device [ 166.564742][ T7326] fuse: Bad value for 'fd' [ 166.586928][ T7326] __vm_enough_memory: pid: 7326, comm: syz.2.322, bytes: 21199608664064 not enough memory for the allocation [ 166.602291][ T7327] Driver unsupported XDP return value 0 on prog (id 55) dev N/A, expect packet loss! [ 167.647372][ T30] audit: type=1400 audit(1757963377.627:364): avc: denied { ioctl } for pid=7351 comm="syz.1.331" path="socket:[13909]" dev="sockfs" ino=13909 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 168.170249][ T7361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'. [ 168.280493][ T10] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 170.081733][ T7368] netlink: 277 bytes leftover after parsing attributes in process `syz.0.335'. [ 170.727609][ T10] usb 2-1: Invalid ep0 maxpacket: 64 [ 170.871304][ T10] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 170.925116][ T5985] IPVS: starting estimator thread 0... [ 170.982258][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 170.994215][ T7384] __vm_enough_memory: pid: 7384, comm: syz.0.340, bytes: 21199603085312 not enough memory for the allocation [ 171.073539][ T7389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.119416][ T7381] IPVS: using max 76 ests per chain, 182400 per kthread [ 171.411316][ T10] usb 2-1: Invalid ep0 maxpacket: 64 [ 171.421451][ T10] usb usb2-port1: attempt power cycle [ 171.471369][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 171.672007][ T9] usb 4-1: config 3 has an invalid interface number: 99 but max is 0 [ 171.793269][ T9] usb 4-1: config 3 has no interface number 0 [ 171.834611][ T9] usb 4-1: config 3 interface 99 has no altsetting 0 [ 171.850843][ T9] usb 4-1: string descriptor 0 read error: -71 [ 171.857971][ T9] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=85.74 [ 171.935493][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.001377][ T9] usb 4-1: can't set config #3, error -71 [ 172.018670][ T9] usb 4-1: USB disconnect, device number 15 [ 172.066261][ T30] audit: type=1400 audit(1757963382.057:365): avc: denied { block_suspend } for pid=7396 comm="syz.3.344" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 172.561267][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 172.774799][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 172.832530][ T7424] loop7: detected capacity change from 0 to 16384 [ 172.951208][ T5985] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 173.007756][ T7426] mkiss: ax0: crc mode is auto. [ 173.822424][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.894785][ T9] usb 2-1: config 0 descriptor?? [ 173.942468][ T9] cp210x 2-1:0.0: cp210x converter detected [ 173.951709][ T7425] loop7: detected capacity change from 16384 to 0 [ 173.959356][ T5985] usb 5-1: Using ep0 maxpacket: 16 [ 173.979166][ T5985] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 174.009887][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 174.065285][ T5985] usb 5-1: Product: syz [ 174.085530][ T5985] usb 5-1: SerialNumber: syz [ 174.146268][ T5985] usb 5-1: config 0 descriptor?? [ 174.177083][ T5985] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 174.206734][ T5985] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 174.223998][ T5985] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 174.230554][ T5985] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 174.367591][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 174.388484][ T9] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 174.451656][ T9] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 174.479380][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 174.509802][ T9] usb 2-1: USB disconnect, device number 14 [ 174.535249][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 174.544535][ T9] cp210x 2-1:0.0: device disconnected [ 174.566695][ T30] audit: type=1400 audit(1757963384.557:366): avc: denied { firmware_load } for pid=7412 comm="syz.4.348" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 174.787260][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'. [ 175.006364][ T30] audit: type=1400 audit(1757963384.997:367): avc: denied { read } for pid=7443 comm="syz.3.354" path="socket:[14283]" dev="sockfs" ino=14283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.564848][ T30] audit: type=1400 audit(1757963385.557:368): avc: denied { connect } for pid=7443 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 175.586572][ T7448] netlink: 'syz.3.354': attribute type 10 has an invalid length. [ 175.604032][ T7448] macvlan0: entered promiscuous mode [ 175.609608][ T7438] syz.4.348 (7438) used greatest stack depth: 19752 bytes left [ 175.634870][ T5985] usb 5-1: USB disconnect, device number 17 [ 175.718538][ T7448] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 176.111475][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 176.127971][ T5919] IPVS: starting estimator thread 0... [ 176.133993][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 176.231267][ T7478] IPVS: using max 40 ests per chain, 96000 per kthread [ 176.271334][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 176.283040][ T7479] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.386883][ T10] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 176.396300][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 176.402940][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.460375][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 176.475471][ T10] usb 5-1: config 0 descriptor?? [ 176.480446][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.499998][ T10] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 176.521090][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 176.524980][ T30] audit: type=1400 audit(1757963386.517:369): avc: denied { write } for pid=7480 comm="syz.3.363" path="socket:[15225]" dev="sockfs" ino=15225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 176.530203][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.530224][ T9] usb 1-1: Product: syz [ 176.530238][ T9] usb 1-1: Manufacturer: syz [ 176.530253][ T9] usb 1-1: SerialNumber: syz [ 176.576947][ T10] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 176.620953][ T9] usb 1-1: config 0 descriptor?? [ 176.662962][ T9] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 176.665159][ T30] audit: type=1326 audit(1757963386.657:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7485 comm="syz.3.365" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f039198eba9 code=0x0 [ 176.670488][ T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 176.693086][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.744492][ T30] audit: type=1400 audit(1757963386.737:371): avc: denied { create } for pid=7483 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 176.768148][ T7489] Option '0 @0 [ 176.768148][ T7489] Live regs before insn: [ 176.768148][ T7489] 0: .12345.... (85) call unknown' to dns_resolver key: bad/missing value [ 176.774030][ T7484] netlink: 1 bytes leftover after parsing attributes in process `syz.1.364'. [ 176.793275][ T7490] netlink: 'syz.4.358': attribute type 13 has an invalid length. [ 176.810173][ T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 176.822133][ T30] audit: type=1400 audit(1757963386.737:372): avc: denied { ioctl } for pid=7483 comm="syz.1.364" path="socket:[14333]" dev="sockfs" ino=14333 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 176.847553][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.848750][ T9] keyspan 1-1:0.0: unsupported endpoint type 0 [ 176.856074][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.891698][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.905519][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.918953][ T30] audit: type=1400 audit(1757963386.877:373): avc: denied { bind } for pid=7456 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 176.940845][ T7457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.949632][ T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 176.956550][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.958969][ T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 177.036300][ T7457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.271655][ T5985] usb 5-1: USB disconnect, device number 18 [ 177.310440][ T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 177.320747][ T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 177.344301][ T9] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 177.377630][ T9] usb 1-1: USB disconnect, device number 17 [ 177.399244][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 177.419867][ T9] keyspan 1-1:0.0: device disconnected [ 177.585674][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.369'. [ 178.765402][ T6061] libceph: connect (1)[c::]:6789 error -101 [ 178.773454][ T6061] libceph: mon0 (1)[c::]:6789 connect error [ 178.805934][ T7531] ceph: No mds server is up or the cluster is laggy [ 178.817296][ T6061] libceph: connect (1)[c::]:6789 error -101 [ 178.858009][ T6061] libceph: mon0 (1)[c::]:6789 connect error [ 180.004246][ T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 180.205135][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.250540][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 180.304478][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 180.332529][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.372732][ T9] usb 1-1: config 0 descriptor?? [ 180.391700][ T7550] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 180.481523][ T6061] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 180.722797][ T6061] usb 2-1: config 0 has an invalid descriptor of length 208, skipping remainder of the config [ 180.821323][ T6061] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 180.867114][ T9] corsair-psu 0003:1B1C:1C0C.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0c] on usb-dummy_hcd.0-1/input0 [ 180.905507][ T6061] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.00 [ 180.970268][ T9] corsair-psu 0003:1B1C:1C0C.0004: unable to initialize device (-38) [ 181.027993][ T7571] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 181.059144][ T9] corsair-psu 0003:1B1C:1C0C.0004: probe with driver corsair-psu failed with error -38 [ 181.079842][ T9] usb 1-1: USB disconnect, device number 18 [ 181.123661][ T7568] fido_id[7568]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 181.154599][ T6061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.176853][ T6061] usb 2-1: config 0 descriptor?? [ 181.477416][ T7576] netlink: 'syz.3.389': attribute type 1 has an invalid length. [ 181.720616][ T7580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.941999][ T7576] netlink: 224 bytes leftover after parsing attributes in process `syz.3.389'. [ 182.689164][ T30] audit: type=1400 audit(1757963392.678:374): avc: denied { ioctl } for pid=7591 comm="syz.0.393" path="socket:[16428]" dev="sockfs" ino=16428 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 182.713878][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.801239][ T10] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 183.005323][ T10] usb 5-1: config 0 has an invalid interface number: 139 but max is 0 [ 183.046938][ T10] usb 5-1: config 0 has no interface number 0 [ 183.087129][ T10] usb 5-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 183.127342][ T10] usb 5-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 183.157895][ T10] usb 5-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 183.214470][ T10] usb 5-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 183.231338][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 183.319443][ T10] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 183.487570][ T6061] usb 2-1: USB disconnect, device number 15 [ 183.548867][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.557206][ T10] usb 5-1: Product: syz [ 183.561424][ T10] usb 5-1: Manufacturer: syz [ 183.571039][ T10] usb 5-1: SerialNumber: syz [ 183.580684][ T10] usb 5-1: config 0 descriptor?? [ 183.621577][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 183.629822][ T24] usb 1-1: config 0 has no interface number 0 [ 183.632594][ T7590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 183.650410][ T24] usb 1-1: config 0 interface 1 has no altsetting 0 [ 183.688378][ T7590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 183.706064][ T7610] 9pnet_fd: Insufficient options for proto=fd [ 183.725760][ T30] audit: type=1400 audit(1757963393.698:375): avc: denied { append } for pid=7608 comm="syz.1.398" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 183.822110][ T24] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 183.834270][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.896437][ T24] usb 1-1: Product: syz [ 183.918603][ T24] usb 1-1: Manufacturer: syz [ 183.932595][ T24] usb 1-1: SerialNumber: syz [ 183.949092][ T24] usb 1-1: config 0 descriptor?? [ 183.968068][ T10] mct_u232 5-1:0.139: MCT U232 converter detected [ 183.989307][ T10] usb 5-1: MCT U232 converter now attached to ttyUSB0 [ 184.018237][ T10] usb 5-1: USB disconnect, device number 19 [ 184.049874][ T10] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 184.089294][ T10] mct_u232 5-1:0.139: device disconnected [ 184.563405][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.881013][ T7617] __vm_enough_memory: pid: 7617, comm: syz.1.400, bytes: 21199989092352 not enough memory for the allocation [ 185.849236][ T7611] Bluetooth: hci0: command 0x0406 tx timeout [ 185.856807][ T7611] Bluetooth: hci1: command 0x0406 tx timeout [ 185.859265][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 185.864814][ T7611] Bluetooth: hci2: command 0x0406 tx timeout [ 185.868889][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 186.225958][ T30] audit: type=1400 audit(1757963396.218:376): avc: denied { execute } for pid=7626 comm="syz.4.402" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 186.486662][ T7629] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 186.493425][ T7629] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.502562][ T7629] vhci_hcd vhci_hcd.0: Device attached [ 186.599868][ T7629] mkiss: ax0: crc mode is auto. [ 186.918921][ T43] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 187.072802][ T7631] vhci_hcd: connection closed [ 187.081721][ T7633] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 187.450138][ T7599] syz.0.395 (7599): drop_caches: 2 [ 187.506396][ T3541] vhci_hcd: stop threads [ 187.558681][ T3541] vhci_hcd: release socket [ 187.659795][ T3541] vhci_hcd: disconnect device [ 188.505344][ T30] audit: type=1400 audit(1757963397.638:377): avc: denied { search } for pid=5515 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.526686][ T30] audit: type=1400 audit(1757963397.638:378): avc: denied { search } for pid=5515 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.548451][ T30] audit: type=1400 audit(1757963397.658:379): avc: denied { search } for pid=5515 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.570633][ T30] audit: type=1400 audit(1757963397.668:380): avc: denied { read } for pid=5515 comm="dhcpcd" name="n104" dev="tmpfs" ino=3696 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 188.618190][ T30] audit: type=1400 audit(1757963397.668:381): avc: denied { open } for pid=5515 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=3696 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 188.646103][ T30] audit: type=1400 audit(1757963397.688:382): avc: denied { getattr } for pid=5515 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=3696 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 188.682399][ T24] msi2500 1-1:0.1: Registered as swradio24 [ 188.718750][ T24] msi2500 1-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 188.737254][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 188.780197][ T24] usb 1-1: USB disconnect, device number 19 [ 188.798681][ T30] audit: type=1400 audit(1757963398.788:383): avc: denied { watch watch_reads } for pid=7636 comm="syz.0.406" path="/83" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 189.121544][ T30] audit: type=1400 audit(1757963399.108:384): avc: denied { bind } for pid=7624 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 189.913153][ T7655] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 189.951215][ T5985] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 189.964975][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.409'. [ 190.101306][ T5985] usb 1-1: Using ep0 maxpacket: 16 [ 190.118941][ T5985] usb 1-1: config 3 has an invalid interface number: 99 but max is 0 [ 190.225121][ T5985] usb 1-1: config 3 has no interface number 0 [ 190.240462][ T5985] usb 1-1: config 3 interface 99 has no altsetting 0 [ 190.245613][ T7659] bridge0: port 3(gretap0) entered blocking state [ 190.254682][ T7659] bridge0: port 3(gretap0) entered disabled state [ 190.264743][ T7659] gretap0: entered promiscuous mode [ 190.265482][ T5985] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=85.74 [ 190.296969][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.355684][ T5985] usb 1-1: Product: syz [ 190.375165][ T5985] usb 1-1: Manufacturer: syz [ 190.387651][ T5985] usb 1-1: SerialNumber: syz [ 190.803627][ T7672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.874293][ T30] audit: type=1400 audit(1757963400.868:385): avc: denied { read open } for pid=7682 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.899705][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.192979][ T30] audit: type=1400 audit(1757963400.868:386): avc: denied { getattr } for pid=7682 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.218220][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.623914][ T7693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.415'. [ 191.817815][ T7697] netlink: 48 bytes leftover after parsing attributes in process `syz.1.416'. [ 192.143805][ T43] vhci_hcd: vhci_device speed not set [ 192.214777][ T5985] usb 1-1: USB disconnect, device number 20 [ 193.534459][ T43] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 193.597716][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 193.597727][ T30] audit: type=1400 audit(1757963403.588:396): avc: denied { search } for pid=7724 comm="syz.3.422" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 193.771996][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 193.896115][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.902738][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.069050][ T43] usb 1-1: config 3 has an invalid interface number: 99 but max is 0 [ 194.109166][ T43] usb 1-1: config 3 has no interface number 0 [ 194.156877][ T43] usb 1-1: config 3 interface 99 has no altsetting 0 [ 194.195614][ T43] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=85.74 [ 194.219205][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.250338][ T7729] delete_channel: no stack [ 194.261331][ T43] usb 1-1: Product: syz [ 194.265610][ T43] usb 1-1: Manufacturer: syz [ 194.270283][ T43] usb 1-1: SerialNumber: syz [ 194.287931][ T30] audit: type=1400 audit(1757963404.228:397): avc: denied { search } for pid=7724 comm="syz.3.422" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 194.411436][ T30] audit: type=1400 audit(1757963404.228:398): avc: denied { read open } for pid=7724 comm="syz.3.422" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 194.433259][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.447640][ T30] audit: type=1400 audit(1757963404.238:399): avc: denied { search } for pid=7724 comm="syz.3.422" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 194.588840][ T30] audit: type=1400 audit(1757963404.238:400): avc: denied { search } for pid=7724 comm="syz.3.422" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 194.616853][ T30] audit: type=1400 audit(1757963404.238:401): avc: denied { add_name } for pid=7724 comm="syz.3.422" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 194.646736][ T30] audit: type=1400 audit(1757963404.238:402): avc: denied { create } for pid=7724 comm="syz.3.422" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 194.801217][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 194.879345][ T7749] trusted_key: encrypted_key: insufficient parameters specified [ 194.954157][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 194.962174][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 194.994782][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.022560][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 195.041508][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.066299][ T24] usb 5-1: Product: syz [ 195.077579][ T24] usb 5-1: Manufacturer: syz [ 195.090012][ T24] usb 5-1: SerialNumber: syz [ 195.105046][ T24] usb 5-1: config 0 descriptor?? [ 195.133742][ T24] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 195.146582][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 195.159972][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 195.169937][ T24] keyspan 5-1:0.0: unsupported endpoint type 0 [ 195.186691][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 195.208512][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 195.244165][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 195.261241][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 195.334564][ T24] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 195.439471][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.452787][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.542963][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.563174][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.639814][ T30] audit: type=1400 audit(1757963405.628:403): avc: denied { create } for pid=7771 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 195.713816][ T30] audit: type=1400 audit(1757963405.698:404): avc: denied { connect } for pid=7771 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 195.860356][ T30] audit: type=1400 audit(1757963405.708:405): avc: denied { bind } for pid=7771 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 195.903728][ T43] usb 1-1: USB disconnect, device number 21 [ 195.964359][ T9] usb 5-1: USB disconnect, device number 20 [ 195.994898][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 196.084245][ T9] keyspan 5-1:0.0: device disconnected [ 197.090819][ T7781] mmap: syz.3.433 (7781): VmData 25841664 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 197.559294][ T7810] __vm_enough_memory: pid: 7810, comm: syz.4.438, bytes: 21199962734592 not enough memory for the allocation [ 198.084922][ T7828] fuseblk: Unknown parameter 'romode' [ 198.139813][ T7828] fuse: Unknown parameter 'group_Id' [ 198.341538][ T5953] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 198.591508][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 198.598280][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.612177][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.706227][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 198.720732][ T5953] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 198.733225][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.747469][ T5953] usb 5-1: config 0 descriptor?? [ 199.429703][ T7850] delete_channel: no stack [ 199.491642][ T7835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.511715][ T7835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.574969][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 199.574986][ T30] audit: type=1400 audit(1757963409.568:412): avc: denied { setopt } for pid=7862 comm="syz.0.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.630600][ T7864] netlink: 'syz.0.448': attribute type 10 has an invalid length. [ 199.661615][ T5953] usbhid 5-1:0.0: can't add hid device: -71 [ 199.667626][ T5953] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 199.716945][ T7864] team0: Port device netdevsim0 added [ 199.820922][ T5953] usb 5-1: USB disconnect, device number 21 [ 201.040601][ T7883] __vm_enough_memory: pid: 7883, comm: syz.1.452, bytes: 21199989092352 not enough memory for the allocation [ 201.243792][ T30] audit: type=1400 audit(1757963411.238:413): avc: denied { create } for pid=7888 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 201.377141][ T30] audit: type=1800 audit(1757963411.368:414): pid=7902 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.456" name="bus" dev="ramfs" ino=17097 res=0 errno=0 [ 202.885407][ T7944] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 202.988269][ T7944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.261368][ T43] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 203.428421][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.778325][ T43] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 203.881701][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.903050][ T43] usb 2-1: config 0 descriptor?? [ 204.614461][ T43] sony 0003:054C:024B.0005: hiddev0,hidraw0: USB HID v1.01 Device [HID 054c:024b] on usb-dummy_hcd.1-1/input0 [ 204.632769][ T43] sony 0003:054C:024B.0005: failed to claim input [ 204.664009][ T30] audit: type=1400 audit(1757963414.648:415): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 204.740354][ T7967] fuse: Unknown parameter 'rtmode' [ 206.546029][ T10] usb 2-1: USB disconnect, device number 16 [ 207.916509][ T7994] loop2: detected capacity change from 0 to 7 [ 207.928210][ T7994] Dev loop2: unable to read RDB block 7 [ 207.935781][ T7994] loop2: unable to read partition table [ 207.945597][ T7994] loop2: partition table beyond EOD, truncated [ 207.951936][ T7994] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 208.005529][ T30] audit: type=1400 audit(1757963417.998:416): avc: denied { read } for pid=7995 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 208.024871][ T5919] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 208.215002][ T5919] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 208.224325][ T5919] usb 4-1: config 0 has no interface number 0 [ 208.230514][ T5919] usb 4-1: config 0 interface 110 has no altsetting 0 [ 208.241206][ T5919] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 208.250513][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.258845][ T5919] usb 4-1: Product: syz [ 208.263311][ T5919] usb 4-1: Manufacturer: syz [ 208.271214][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 208.279915][ T5919] usb 4-1: SerialNumber: syz [ 208.292025][ T5919] usb 4-1: config 0 descriptor?? [ 208.548920][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 208.557456][ T10] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1 [ 208.571520][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 208.579961][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 208.589858][ T10] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 208.599346][ T10] usb 1-1: Product: syz [ 208.604462][ T10] usb 1-1: Manufacturer: syz [ 208.609768][ T10] usb 1-1: SerialNumber: syz [ 208.620747][ T10] usb 1-1: config 0 descriptor?? [ 208.626690][ T7996] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 208.643479][ T5919] cdc_subset 4-1:0.110: probe with driver cdc_subset failed with error -22 [ 208.836571][ T10] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 208.843608][ T10] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 208.851887][ T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 208.864020][ T10] usb 1-1: USB disconnect, device number 22 [ 208.879701][ T5919] usb 4-1: USB disconnect, device number 16 [ 209.013494][ T9] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 209.021879][ T9] usb 2-1: config 0 has no interface number 0 [ 209.029897][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice=d3.17 [ 209.039620][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.048185][ T9] usb 2-1: Product: syz [ 209.052565][ T9] usb 2-1: Manufacturer: syz [ 209.057524][ T9] usb 2-1: SerialNumber: syz [ 209.064127][ T9] usb 2-1: config 0 descriptor?? [ 209.383209][ T30] audit: type=1400 audit(1757963419.378:417): avc: denied { module_request } for pid=8005 comm="syz.0.478" kmod="net-pf-2-proto-0-type-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 209.435911][ T8006] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 209.442441][ T8006] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 209.452332][ T8006] vhci_hcd vhci_hcd.0: Device attached [ 209.510825][ T30] audit: type=1400 audit(1757963419.498:418): avc: denied { append } for pid=8012 comm="syz.3.479" name="dlm-monitor" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 209.632555][ T8010] vhci_hcd: connection closed [ 209.634010][ T72] vhci_hcd: stop threads [ 209.653374][ T72] vhci_hcd: release socket [ 209.670081][ T72] vhci_hcd: disconnect device [ 209.691570][ T5953] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 209.701065][ T5953] usb 33-1: enqueue for inactive port 0 [ 209.772282][ T5953] vhci_hcd: vhci_device speed not set [ 210.317789][ T8022] 9pnet_fd: Insufficient options for proto=fd [ 210.424633][ T8028] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 210.437915][ T8030] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 210.451835][ T43] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 210.549739][ T8034] loop2: detected capacity change from 0 to 7 [ 210.557102][ T8034] Dev loop2: unable to read RDB block 7 [ 210.618440][ T8035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.484'. [ 210.639892][ T8034] loop2: unable to read partition table [ 210.661342][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 210.670911][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 210.684194][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.694628][ T8034] loop2: partition table beyond EOD, truncated [ 210.701683][ T8034] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 210.713316][ T43] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 210.723825][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.732251][ T43] usb 1-1: Product: syz [ 210.736519][ T43] usb 1-1: Manufacturer: syz [ 210.745480][ T43] usb 1-1: SerialNumber: syz [ 210.766357][ T43] usb 1-1: config 0 descriptor?? [ 210.814485][ T43] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 210.822178][ T43] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 210.840940][ T43] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 210.926802][ T43] keyspan 1-1:0.0: unsupported endpoint type 0 [ 210.934416][ T43] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 210.942819][ T43] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 210.950740][ T43] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 210.960342][ T43] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 210.969475][ T43] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 211.008913][ T8020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.018644][ T8020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.143024][ T8020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.172164][ T8020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.451246][ T9] usb 2-1: USB disconnect, device number 17 [ 211.650014][ T43] usb 1-1: USB disconnect, device number 23 [ 211.750680][ T43] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 211.882944][ T43] keyspan 1-1:0.0: device disconnected [ 212.126601][ T30] audit: type=1400 audit(1757963422.118:419): avc: denied { map } for pid=8046 comm="syz.3.491" path="socket:[18445]" dev="sockfs" ino=18445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 212.321867][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 212.481206][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 212.498239][ T9] usb 2-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 212.598236][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 40, using maximum allowed: 30 [ 212.633206][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 40 [ 212.653746][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 212.687828][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.718606][ T9] usb 2-1: config 0 descriptor?? [ 212.831197][ T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 213.091694][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 213.108275][ T43] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 213.117536][ T43] usb 4-1: config 0 has no interface number 0 [ 213.119901][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.496'. [ 213.123720][ T43] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 213.123749][ T43] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 213.127320][ T43] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 213.132937][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.496'. [ 213.144026][ T5953] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 213.179894][ T43] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 213.188367][ T43] usb 4-1: Product: syz [ 213.192722][ T43] usb 4-1: SerialNumber: syz [ 213.297596][ T43] usb 4-1: config 0 descriptor?? [ 213.333058][ T43] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 213.446126][ T5953] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 213.484063][ T43] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input8 [ 213.522621][ T5953] usb 1-1: config 0 has no interface number 0 [ 213.620570][ T43] ------------[ cut here ]------------ [ 213.626450][ T43] URB ffff8880573ebe00 submitted while active [ 213.632897][ T5953] usb 1-1: config 0 interface 110 has no altsetting 0 [ 213.642868][ T43] WARNING: CPU: 1 PID: 43 at drivers/usb/core/urb.c:379 usb_submit_urb+0x1519/0x1770 [ 213.652865][ T43] Modules linked in: [ 213.657169][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 213.668041][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.678292][ T43] Workqueue: usb_hub_wq hub_event [ 213.684153][ T43] RIP: 0010:usb_submit_urb+0x1519/0x1770 [ 213.689826][ T43] Code: fd eb cb bb fe ff ff ff e9 96 f3 ff ff e8 5f 0c 7a fa c6 05 e2 41 52 09 01 90 48 c7 c7 80 0e 74 8c 48 89 de e8 f8 b0 38 fa 90 <0f> 0b 90 90 e9 ac fe ff ff bb f8 ff ff ff e9 66 f3 ff ff 48 89 ef [ 213.709690][ T43] RSP: 0018:ffffc90000b36e98 EFLAGS: 00010286 [ 213.716097][ T43] RAX: 0000000000000000 RBX: ffff8880573ebe00 RCX: ffffc90019640000 [ 213.724120][ T43] RDX: 0000000000100000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 213.732634][ T43] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 213.740714][ T43] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888032dd30a0 [ 213.749137][ T43] R13: ffff888032dd3010 R14: ffff888032dd309f R15: ffff888032dd3050 [ 213.757206][ T43] FS: 0000000000000000(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 213.766312][ T43] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.773231][ T43] CR2: 0000001b320f5ff8 CR3: 0000000032982000 CR4: 00000000003526f0 [ 213.781261][ T43] Call Trace: [ 213.784557][ T43] [ 213.787502][ T43] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.792825][ T43] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 213.798671][ T43] cm109_input_open+0x27a/0x490 [ 213.804796][ T43] ? __pfx_cm109_input_open+0x10/0x10 [ 213.804873][ T43] input_open_device+0x249/0x3d0 [ 213.804923][ T43] kbd_connect+0x103/0x160 [ 213.804955][ T43] input_attach_handler.isra.0+0x173/0x250 [ 213.804984][ T43] input_register_device+0xab9/0x1180 [ 213.805018][ T43] cm109_usb_probe+0x122f/0x17c0 [ 213.805074][ T43] usb_probe_interface+0x300/0xa40 [ 213.805097][ T43] ? __pfx_usb_probe_interface+0x10/0x10 [ 213.805118][ T43] really_probe+0x23e/0xa90 [ 213.805147][ T43] __driver_probe_device+0x1de/0x440 [ 213.805174][ T43] driver_probe_device+0x4c/0x1b0 [ 213.805219][ T43] __device_attach_driver+0x1df/0x310 [ 213.805245][ T43] ? __pfx___device_attach_driver+0x10/0x10 [ 213.805269][ T43] bus_for_each_drv+0x156/0x1e0 [ 213.805291][ T43] ? __pfx_bus_for_each_drv+0x10/0x10 [ 213.805310][ T43] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.805351][ T43] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 213.805378][ T43] __device_attach+0x1e4/0x4b0 [ 213.805403][ T43] ? __pfx___device_attach+0x10/0x10 [ 213.805428][ T43] ? do_raw_spin_unlock+0x172/0x230 [ 213.805455][ T43] bus_probe_device+0x17f/0x1c0 [ 213.805500][ T43] device_add+0x1148/0x1aa0 [ 213.805530][ T43] ? __pfx_device_add+0x10/0x10 [ 213.805553][ T43] ? preempt_schedule_thunk+0x16/0x30 [ 213.805590][ T43] usb_set_configuration+0x1187/0x1e20 [ 213.805652][ T43] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 213.805674][ T43] usb_generic_driver_probe+0xb1/0x110 [ 213.805696][ T43] usb_probe_device+0xec/0x3e0 [ 213.805721][ T43] ? __pfx_usb_probe_device+0x10/0x10 [ 213.805746][ T43] really_probe+0x23e/0xa90 [ 213.805790][ T43] __driver_probe_device+0x1de/0x440 [ 213.805816][ T43] driver_probe_device+0x4c/0x1b0 [ 213.805840][ T43] __device_attach_driver+0x1df/0x310 [ 213.805863][ T43] ? __pfx___device_attach_driver+0x10/0x10 [ 213.805885][ T43] bus_for_each_drv+0x156/0x1e0 [ 213.805922][ T43] ? __pfx_bus_for_each_drv+0x10/0x10 [ 213.805950][ T43] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 213.805976][ T43] __device_attach+0x1e4/0x4b0 [ 213.805999][ T43] ? __pfx___device_attach+0x10/0x10 [ 213.806022][ T43] ? do_raw_spin_unlock+0x172/0x230 [ 213.806065][ T43] bus_probe_device+0x17f/0x1c0 [ 213.806088][ T43] device_add+0x1148/0x1aa0 [ 213.806117][ T43] ? __pfx_device_add+0x10/0x10 [ 213.806142][ T43] ? add_device_randomness+0xb7/0xf0 [ 213.806170][ T43] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 213.806221][ T43] usb_new_device+0xd07/0x1a60 [ 213.806249][ T43] ? do_raw_spin_lock+0x12c/0x2b0 [ 213.806268][ T43] ? __pfx_usb_new_device+0x10/0x10 [ 213.806294][ T43] ? mark_held_locks+0x49/0x80 [ 213.806325][ T43] hub_event+0x2f34/0x4fe0 [ 213.806391][ T43] ? __pfx_hub_event+0x10/0x10 [ 213.806415][ T43] ? assoc_array_insert+0x1ec0/0x3970 [ 213.806454][ T43] ? rcu_is_watching+0x12/0xc0 [ 213.806481][ T43] process_one_work+0x9cc/0x1b70 [ 213.806526][ T43] ? __pfx_hcd_resume_work+0x10/0x10 [ 213.806553][ T43] ? __pfx_process_one_work+0x10/0x10 [ 213.806581][ T43] ? assign_work+0x1a0/0x250 [ 213.806602][ T43] worker_thread+0x6c8/0xf10 [ 213.806651][ T43] ? __pfx_worker_thread+0x10/0x10 [ 213.806671][ T43] kthread+0x3c2/0x780 [ 213.806690][ T43] ? __pfx_kthread+0x10/0x10 [ 213.806710][ T43] ? rcu_is_watching+0x12/0xc0 [ 213.806732][ T43] ? __pfx_kthread+0x10/0x10 [ 213.806751][ T43] ret_from_fork+0x56a/0x730 [ 213.806768][ T43] ? __pfx_kthread+0x10/0x10 [ 213.806803][ T43] ret_from_fork_asm+0x1a/0x30 [ 213.806838][ T43] [ 213.806849][ T43] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 213.806862][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 213.806883][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.806896][ T43] Workqueue: usb_hub_wq hub_event [ 213.806923][ T43] Call Trace: [ 213.806935][ T43] [ 213.806942][ T43] dump_stack_lvl+0x3d/0x1f0 [ 213.806966][ T43] vpanic+0x6e8/0x7a0 [ 213.806992][ T43] ? __pfx_vpanic+0x10/0x10 [ 213.807023][ T43] ? usb_submit_urb+0x1519/0x1770 [ 213.807043][ T43] panic+0xca/0xd0 [ 213.807057][ T43] ? __pfx_panic+0x10/0x10 [ 213.807082][ T43] check_panic_on_warn+0xab/0xb0 [ 213.807099][ T43] __warn+0xf6/0x3c0 [ 213.807114][ T43] ? usb_submit_urb+0x1519/0x1770 [ 213.807136][ T43] report_bug+0x3c3/0x580 [ 213.807156][ T43] ? usb_submit_urb+0x1519/0x1770 [ 213.807177][ T43] handle_bug+0x184/0x210 [ 213.807202][ T43] exc_invalid_op+0x17/0x50 [ 213.807226][ T43] asm_exc_invalid_op+0x1a/0x20 [ 213.807242][ T43] RIP: 0010:usb_submit_urb+0x1519/0x1770 [ 213.807263][ T43] Code: fd eb cb bb fe ff ff ff e9 96 f3 ff ff e8 5f 0c 7a fa c6 05 e2 41 52 09 01 90 48 c7 c7 80 0e 74 8c 48 89 de e8 f8 b0 38 fa 90 <0f> 0b 90 90 e9 ac fe ff ff bb f8 ff ff ff e9 66 f3 ff ff 48 89 ef [ 213.807280][ T43] RSP: 0018:ffffc90000b36e98 EFLAGS: 00010286 [ 213.807294][ T43] RAX: 0000000000000000 RBX: ffff8880573ebe00 RCX: ffffc90019640000 [ 213.807304][ T43] RDX: 0000000000100000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 213.807314][ T43] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 213.807322][ T43] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888032dd30a0 [ 213.807332][ T43] R13: ffff888032dd3010 R14: ffff888032dd309f R15: ffff888032dd3050 [ 213.807350][ T43] ? __warn_printk+0x1a5/0x350 [ 213.807376][ T43] ? usb_submit_urb+0x1518/0x1770 [ 213.807393][ T43] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.807414][ T43] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 213.807439][ T43] cm109_input_open+0x27a/0x490 [ 213.807464][ T43] ? __pfx_cm109_input_open+0x10/0x10 [ 213.807487][ T43] input_open_device+0x249/0x3d0 [ 213.807515][ T43] kbd_connect+0x103/0x160 [ 213.807536][ T43] input_attach_handler.isra.0+0x173/0x250 [ 213.807565][ T43] input_register_device+0xab9/0x1180 [ 213.807598][ T43] cm109_usb_probe+0x122f/0x17c0 [ 213.807630][ T43] usb_probe_interface+0x300/0xa40 [ 213.807648][ T43] ? __pfx_usb_probe_interface+0x10/0x10 [ 213.807665][ T43] really_probe+0x23e/0xa90 [ 213.807688][ T43] __driver_probe_device+0x1de/0x440 [ 213.807711][ T43] driver_probe_device+0x4c/0x1b0 [ 213.807731][ T43] __device_attach_driver+0x1df/0x310 [ 213.807753][ T43] ? __pfx___device_attach_driver+0x10/0x10 [ 213.807772][ T43] bus_for_each_drv+0x156/0x1e0 [ 213.807788][ T43] ? __pfx_bus_for_each_drv+0x10/0x10 [ 213.807805][ T43] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.807824][ T43] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 213.807845][ T43] __device_attach+0x1e4/0x4b0 [ 213.807866][ T43] ? __pfx___device_attach+0x10/0x10 [ 213.807887][ T43] ? do_raw_spin_unlock+0x172/0x230 [ 213.807910][ T43] bus_probe_device+0x17f/0x1c0 [ 213.807936][ T43] device_add+0x1148/0x1aa0 [ 213.807961][ T43] ? __pfx_device_add+0x10/0x10 [ 213.807982][ T43] ? preempt_schedule_thunk+0x16/0x30 [ 213.808013][ T43] usb_set_configuration+0x1187/0x1e20 [ 213.808051][ T43] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 213.808070][ T43] usb_generic_driver_probe+0xb1/0x110 [ 213.808090][ T43] usb_probe_device+0xec/0x3e0 [ 213.808111][ T43] ? __pfx_usb_probe_device+0x10/0x10 [ 213.808135][ T43] really_probe+0x23e/0xa90 [ 213.808157][ T43] __driver_probe_device+0x1de/0x440 [ 213.808179][ T43] driver_probe_device+0x4c/0x1b0 [ 213.808200][ T43] __device_attach_driver+0x1df/0x310 [ 213.808221][ T43] ? __pfx___device_attach_driver+0x10/0x10 [ 213.808240][ T43] bus_for_each_drv+0x156/0x1e0 [ 213.808257][ T43] ? __pfx_bus_for_each_drv+0x10/0x10 [ 213.808276][ T43] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 213.808297][ T43] __device_attach+0x1e4/0x4b0 [ 213.808317][ T43] ? __pfx___device_attach+0x10/0x10 [ 213.808338][ T43] ? do_raw_spin_unlock+0x172/0x230 [ 213.808361][ T43] bus_probe_device+0x17f/0x1c0 [ 213.808380][ T43] device_add+0x1148/0x1aa0 [ 213.808405][ T43] ? __pfx_device_add+0x10/0x10 [ 213.808427][ T43] ? add_device_randomness+0xb7/0xf0 [ 213.808450][ T43] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 213.808479][ T43] usb_new_device+0xd07/0x1a60 [ 213.808506][ T43] ? do_raw_spin_lock+0x12c/0x2b0 [ 213.808523][ T43] ? __pfx_usb_new_device+0x10/0x10 [ 213.808545][ T43] ? mark_held_locks+0x49/0x80 [ 213.808572][ T43] hub_event+0x2f34/0x4fe0 [ 213.808617][ T43] ? __pfx_hub_event+0x10/0x10 [ 213.808638][ T43] ? assoc_array_insert+0x1ec0/0x3970 [ 213.808672][ T43] ? rcu_is_watching+0x12/0xc0 [ 213.808696][ T43] process_one_work+0x9cc/0x1b70 [ 213.808721][ T43] ? __pfx_hcd_resume_work+0x10/0x10 [ 213.808745][ T43] ? __pfx_process_one_work+0x10/0x10 [ 213.808769][ T43] ? assign_work+0x1a0/0x250 [ 213.808788][ T43] worker_thread+0x6c8/0xf10 [ 213.808817][ T43] ? __pfx_worker_thread+0x10/0x10 [ 213.808834][ T43] kthread+0x3c2/0x780 [ 213.808851][ T43] ? __pfx_kthread+0x10/0x10 [ 213.808869][ T43] ? rcu_is_watching+0x12/0xc0 [ 213.808888][ T43] ? __pfx_kthread+0x10/0x10 [ 213.808906][ T43] ret_from_fork+0x56a/0x730 [ 213.808921][ T43] ? __pfx_kthread+0x10/0x10 [ 213.808942][ T43] ret_from_fork_asm+0x1a/0x30 [ 213.808973][ T43] [ 213.813174][ T43] Kernel Offset: disabled