last executing test programs: 11.82572857s ago: executing program 4 (id=1410): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000c80)={0x44, &(0x7f00000009c0)={0x20, 0x5, 0x68, "fde9599465d6916b125ca72733d2735cb998a2659c55934b0b533a5fc82e689cef231b774871935c4210583526cbb1520faf2771f156763b23ebed745dc71f9bd9a87fc38b949081ae03de19c03307a248a17c30e62bf1c583e3a3d0ed497c4b6ef7a6ee8cfb7244"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 11.643967182s ago: executing program 3 (id=1412): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x402, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') 10.748685479s ago: executing program 3 (id=1418): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000240)={0x20, 0x18, 0x2, "e5ce"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x20, 0x10, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x0, 0x11, 0x16, {0x16, 0x22, "32dff6abe3ad78d72d3a082032b5cae9d6df1be8"}}, &(0x7f0000000080)={0x0, 0x3, 0x58, @string={0x58, 0x3, "b529724c6203dd9deff511e1f16a560a6a2749a045151633811c206398760f915c2383d0c8a376c5888fa048fc48e047d541d9e321021369ba8cbe2067e4b8d0fa29b394a8a5a8fc2f828b477be7f0b6edc8717e96b8"}}, &(0x7f0000000740)=ANY=[@ANYBLOB="002222004000b7babd3a04b15c7b1b246e3d69610267f0d0a8d132d3fbb3ad4ab6412684662483a59016fac4032bc48f03761f2b998778c247ef24a94ac22d83b4"], &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff81, 0xff, 0x1, {0x22, 0xcc0}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="220d020000009517"], &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0x20, 0x1, 0xaa, "b67b155e4ca69679af411335bd78f1cd51b08c32bfc31e0dd1a7a51e7f1a96659b7895b922ff9b32d9828a925ff6008c5bc246c484e6641715254173b0ae6f2ecf41a99c429b48320cc28091abe817fef61dc3069efb447cdaec8125ad441f5dc7e9976752c2f114fbf7a3d448af392a74558fb6d21e17e8e34d7e33c3d58a3fa33cabcebce4667f5e7072101a8cb09bcaf7db74cf959f2f26f40b62cc16b57ea70bd2c4fd3f8580c52f"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0xd}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB='@\x00='], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x88000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r5, 0x7}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r3}}, 0x30) io_setup(0x5, &(0x7f0000000000)=0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) r10 = inotify_init() io_submit(r8, 0x2, &(0x7f0000000640)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0xffff, r9, 0x0, 0x0, 0x3, 0x0, 0x1, r9}]) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='pstore\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x1008001, 0x0) 9.200529463s ago: executing program 0 (id=1426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r1, 0x3e8c4ddb697c9f8f, 0x2, 0x0, {0x4}}, 0x14}}, 0x2000c090) 9.116716427s ago: executing program 0 (id=1428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket(0x1e, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) 7.946291761s ago: executing program 0 (id=1432): mlockall(0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a040000000000c5192c2a7e1ab6247d79c90703e7f9fe0fe6f07cbe6d76785d5cfb4f1e575f89bd5b8f28f1ad8f095afddbdb00b00b8bd0c5531565571c3ec4838c4c6824b664468a4a77f342"], 0x0, 0x26}, 0x28) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000180)=""/111) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b", 0x83}], 0x1}, 0x8000) r4 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r4, &(0x7f0000fec000/0x11000)=nil, 0x6000) shmctl$SHM_LOCK(r4, 0xb) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14258323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.019910932s ago: executing program 4 (id=1433): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001480)={0x24, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "c0756615"}, @local=@item_4={0x3, 0x2, 0x5, "42dd07f6"}]}}, &(0x7f0000001440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x27f, 0xfd, 0x1, {0x22, 0xdad}}}}, &(0x7f0000001700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001600), 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000004c0)='P') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r4, &(0x7f0000000080)='3', 0x1, 0x0) r5 = memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x6) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) open(&(0x7f0000000100)='./file0\x00', 0xa020, 0x7) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x20) 6.962121049s ago: executing program 0 (id=1435): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000140)) munlockall() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6.212056017s ago: executing program 3 (id=1442): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(r5, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 4.808212607s ago: executing program 3 (id=1444): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000c80)={0x44, &(0x7f00000009c0)={0x20, 0x5, 0x68, "fde9599465d6916b125ca72733d2735cb998a2659c55934b0b533a5fc82e689cef231b774871935c4210583526cbb1520faf2771f156763b23ebed745dc71f9bd9a87fc38b949081ae03de19c03307a248a17c30e62bf1c583e3a3d0ed497c4b6ef7a6ee8cfb7244"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 4.565686548s ago: executing program 2 (id=1446): socket(0x1e, 0x4, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r0, 0x5, 0x0, 0x4, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}]}, 0x30}}, 0x0) 4.431910295s ago: executing program 2 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x38, 0x0, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x38}}, 0x0) 4.252188714s ago: executing program 2 (id=1449): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x1c, 0x0, 0x0, 0x0}) 3.553914839s ago: executing program 4 (id=1450): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.404589312s ago: executing program 4 (id=1452): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x42280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) chdir(0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$P9_RVERSION(r4, 0x0, 0x15) fchown(r4, 0xee01, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, 0x2000, 0x2}) 3.355500628s ago: executing program 0 (id=1453): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x5, "3b71d06400"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000180)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000740)={0x40, 0x5}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.256307954s ago: executing program 4 (id=1455): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(r5, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 2.308034804s ago: executing program 4 (id=1456): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000003c0)={0x40, 0x1, 0xb9, "56df8d7aaeeec410acafbce731fa73e61c8e351c9228d2d03698dc106373affc095af28dc0fe92193f2f57849a2b45f9a1e1daabb310a62bf33d998eba62137dbe46936034388fe0fbb8a38491db946ddcac3965fcca6a31f3d5194ec96f54e932a0c2b3d4b9fae5f6bbe77f54bb2a629fce7296f35c5943ec23c7fa35f2648ede5d649aa9b5b5b90e1c9ad2d66f5ef8270b87faa528e6475162b7616444f8dd4973603c24121005843c8f2114f7167207f702695bedf6a753"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1.487534211s ago: executing program 3 (id=1460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r1, 0xd0d, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 1.413311341s ago: executing program 3 (id=1461): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001480)={0x24, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "c0756615"}, @local=@item_4={0x3, 0x2, 0x5, "42dd07f6"}]}}, &(0x7f0000001440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x27f, 0xfd, 0x1, {0x22, 0xdad}}}}, &(0x7f0000001700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001600), 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000004c0)='P') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r4, &(0x7f0000000080)='3', 0x1, 0x0) r5 = memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x6) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) open(&(0x7f0000000100)='./file0\x00', 0xa020, 0x7) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x20) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.178577816s ago: executing program 2 (id=1462): syz_open_dev$dri(0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x0) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000400)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) write(r0, &(0x7f0000000040)="240000001e005f0214ffff0600fffff8070000000000000000000100080003000b000000", 0x24) 1.177075838s ago: executing program 1 (id=1463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100"], 0x64}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 897.312639ms ago: executing program 1 (id=1464): socket$igmp(0x2, 0x3, 0x2) r0 = io_uring_setup(0x6ece, &(0x7f00000001c0)={0x0, 0x8fff, 0x800, 0x1, 0x16e}) syz_io_uring_setup(0x16b, &(0x7f0000000000)={0x0, 0xfffffffd, 0x13090, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) syz_io_uring_setup(0x17af, &(0x7f0000000380)={0x0, 0x0, 0x13290}, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r5, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r6, r3, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000a80)=ANY=[], 0x0) 461.949718ms ago: executing program 1 (id=1465): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x42280, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) chdir(0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$P9_RVERSION(r4, 0x0, 0x15) fchown(r4, 0xee01, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, 0x2000, 0x2}) 417.586772ms ago: executing program 1 (id=1466): ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x21010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) prlimit64(r0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) truncate(&(0x7f0000000640)='./file2\x00', 0xa00) truncate(&(0x7f00000003c0)='./file2\x00', 0x1bfc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) chdir(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000665000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) rt_sigsuspend(0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e1", 0x12}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4048aecb, &(0x7f0000001440)={{0x0, 0x0, 0x80, {0xffffffffffffffff, 0x1}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf9758b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bfe98e94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b91fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029e7a9e8b86a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf7b155ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f8edd941bff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b7fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22670812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa31819caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae399aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c04799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db63dec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880bffffffffffffff7fb5cb6967fb0ea8e14efce120947092c3b601002f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6af1d8183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c75f4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b769e44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd580800000000000000d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000000)) readv(r5, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/251, 0xfb}], 0x1) 357.613798ms ago: executing program 1 (id=1467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0xfffffffffffffffc, 0x3, 0x0, 0x5, 0x2000, 0x3, 0xb4d7, 0x9], 0xeeee8000, 0x2113c2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 144.60329ms ago: executing program 2 (id=1468): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x800000, 0x0, 0x0, 0x41100, 0x2}, 0x94) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x9}}, 0x20) sendto$inet(r0, 0x0, 0x0, 0x20048011, &(0x7f0000000540)={0x2, 0x4e24, @remote}, 0x10) 98.544897ms ago: executing program 1 (id=1469): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fed000/0x12000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000002c0)="ef067b801f23c003003b896bbb0b9e781ba3c004ea6ba2634960da8a9e0bec359056360ada5373917959c482cc5dbe69703902831c175f0c4a731a1da428710277667ae3540f80a855a92e3506e4e7d46a3fe96de6b72223d2f1067465ac9811c2581837509f9aab1013ebc3", 0x6c}, 0x68) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000017c0)={'gretap0\x00', &(0x7f0000001900)={'ip_vti0\x00', 0x0, 0x8, 0x1, 0x1, 0x7, {{0xd, 0x4, 0x0, 0x34, 0x34, 0x66, 0x0, 0x2, 0x6, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0xc, 0xbb, 0x1, 0xe, [{@remote, 0x401000}]}, @generic={0x88, 0x7, "e85fb58fd5"}, @timestamp_prespec={0x44, 0xc, 0x72, 0x3, 0xf, [{@loopback, 0x2}]}]}}}}}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000500)="c65e0d82218b1217c768b4aca4604da10a0ba95566c3db695d05f3d4cb48828df7425fc7c48ce14600aa07d5aa91c91aa11132fe6a3905862aebb0a1dfd218b58fbedbc528f481c8b83ffae0700fb220efd0dd4d12edbf984d78dd8779f68686fb902828e4c3c9a7f475399bd4e48882eef0c8237c7b0cf8fde6ba5ce068b8a083d48fa72cc50d2c39cba1e05bdb7798b835a749735564203ab87bbd15ab9b935302db3c47d9672d843e8321f5777f9724885ff144dea56d48e0d5c78416abeffda80054190f0d95278eacfc64c4", 0xce}, {&(0x7f0000000600)="58914c492ceb2a110750f622539546567c8c9c617eb0694d72c2de7bd60780d396f8aca2fc293be4f5227883f32d4257505d8c3dce6371db487dc454b818c95e6247fade5bf0db0d59d9249a79b2bfd3fb64cf3fdfcf1cb00f22a1d80947cb30ea36443c5564d04c7c2b27f96b94c9552a7dee0a09b22029ebef", 0x7a}, {&(0x7f0000000680)="3561166a497ad11429111eee4ad533e3a02b7ab352aaaad15630d150fbfa9ed903d0f915adcc5155c5410e6e598dab558cdd2b1c25ce0863507637e653a014038c8a918a48f453c4d7d0855202f180f58687aca3f983b65086647fbefdcf0b1501fc916fe14d9f929640bbad9f6e420981e091699a3fc26ebd2f5be7f7fdf1badd", 0x81}, {&(0x7f00000000c0)="ec5cee", 0x3}, {&(0x7f0000000740)="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", 0x1000}], 0x5, &(0x7f0000001980)=ANY=[@ANYBLOB="1c000000a20000000000000000080000", @ANYRES32=r1, @ANYBLOB="ffffffffac1414aa0000000014000000000000000000000001000000060000000000000014000000000000000000000002000000020000000000000011000000000000000000000001000000c80000000000000014000000000000000000000002000000008000000000000018000000000000000000000007000000890779ac1e01010028000000000000000000000007000000440457f301071392e0000001ac1414bbac1414bb7f000001"], 0xc0}, 0x40000) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="010026bd7000090000cfff106c7c1243c3c1"], 0x18}, 0x1, 0x0, 0x0, 0x44008000}, 0x8000) sendmmsg$inet6(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="0a649329b2a344470f9bc0faa8d0cf04aa19bcc4cb4b0f6cccc826140704427ced8e3a0b950b7fffb3a6d5", 0x2b}], 0x1}}], 0x2, 0x8008801) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 96.067647ms ago: executing program 0 (id=1470): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mlockall(0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a040000000000c5192c2a7e1ab6247d79c90703e7f9fe0fe6f07cbe6d76785d5cfb4f1e575f89bd5b8f28f1ad8f095afddbdb00b00b8bd0c5531565571c3ec4838c4c6824b664468a4a77f342"], 0x0, 0x26}, 0x28) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000180)=""/111) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b", 0x83}], 0x1}, 0x8000) shmat(0x0, &(0x7f0000fec000/0x11000)=nil, 0x6000) shmctl$SHM_LOCK(0x0, 0xb) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14258323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000b00), 0x400008, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee00]) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=1471): syz_usb_connect(0x3, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0x29, 0x63, 0x90, 0x10, 0x1a86, 0x752d, 0x2d4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xe9, 0x11, 0xbd}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): index 0x00000030: -32 [ 118.953694][ T43] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 119.163947][ T43] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 119.175313][ T43] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 119.342717][ T5981] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 119.383432][ T1220] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 119.503679][ T5981] usb 1-1: Using ep0 maxpacket: 32 [ 119.517810][ T5981] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 119.527858][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.536036][ T5981] usb 1-1: Product: syz [ 119.540381][ T5981] usb 1-1: Manufacturer: syz [ 119.541564][ T1220] usb 2-1: Using ep0 maxpacket: 8 [ 119.545166][ T5981] usb 1-1: SerialNumber: syz [ 119.557929][ T5981] usb 1-1: config 0 descriptor?? [ 119.567251][ T5981] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 119.582258][ T1220] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.595732][ T1220] usb 2-1: config index 0 descriptor too short (expected 274, got 18) [ 119.610586][ T1220] usb 2-1: config 4 interface 0 has no altsetting 0 [ 119.620750][ T1220] usb 2-1: string descriptor 0 read error: -22 [ 119.631023][ T1220] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 119.640524][ T1220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.722157][ T1220] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 119.793846][ T1220] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 119.813614][ T1220] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 119.820973][ T1220] usb 2-1: media controller created [ 119.860268][ T6961] usb 2-1: dvb_usb_au6610: wlen=132, aborting [ 119.868190][ T1220] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.934971][ T1220] zl10353_read_register: readreg error (reg=127, ret==0) [ 120.195320][ T1220] usb 2-1: USB disconnect, device number 9 [ 120.474496][ T6987] autofs: Unknown parameter './file0' [ 120.525668][ T30] audit: type=1804 audit(1752669616.136:274): pid=6989 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.346" name="/newroot/76/file0" dev="tmpfs" ino=434 res=1 errno=0 [ 120.726358][ T6998] netlink: 'syz.2.348': attribute type 72 has an invalid length. [ 120.737135][ T6998] netlink: 36 bytes leftover after parsing attributes in process `syz.2.348'. [ 120.807837][ T5981] gspca_ov534_9: reg_w failed -71 [ 121.130732][ T5912] usb 4-1: USB disconnect, device number 4 [ 121.231697][ T5981] gspca_ov534_9: Unknown sensor 0000 [ 121.231780][ T5981] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 121.294618][ T5981] usb 1-1: USB disconnect, device number 15 [ 121.346967][ T7022] misc userio: Invalid payload size [ 121.431397][ T1220] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 121.466863][ T30] audit: type=1400 audit(1752669617.076:275): avc: denied { read } for pid=7027 comm="syz.2.363" path="socket:[12550]" dev="sockfs" ino=12550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.506767][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 121.543093][ T30] audit: type=1400 audit(1752669617.156:276): avc: denied { bind } for pid=7027 comm="syz.2.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.580369][ T30] audit: type=1400 audit(1752669617.156:277): avc: denied { name_bind } for pid=7027 comm="syz.2.363" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 121.601312][ T30] audit: type=1400 audit(1752669617.156:278): avc: denied { node_bind } for pid=7027 comm="syz.2.363" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 121.603474][ T1220] usb 2-1: Using ep0 maxpacket: 8 [ 121.637765][ T1220] usb 2-1: unable to get BOS descriptor or descriptor too short [ 121.637813][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 121.650214][ T1220] usb 2-1: config index 0 descriptor too short (expected 274, got 18) [ 122.141330][ T1220] usb 2-1: config 4 interface 0 has no altsetting 0 [ 122.152051][ T1220] usb 2-1: string descriptor 0 read error: -22 [ 122.158467][ T1220] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 122.167865][ T1220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.181586][ T1220] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 122.199051][ T1220] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 122.216685][ T1220] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 122.225861][ T1220] usb 2-1: media controller created [ 122.255975][ T1220] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.402897][ T7040] autofs: Unknown parameter './file0' [ 122.615453][ T30] audit: type=1400 audit(1752669618.216:279): avc: denied { connect } for pid=7050 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.664488][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 122.844070][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 122.851879][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 122.860676][ T10] usb 1-1: config 0 has no interface number 0 [ 122.872682][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 122.882137][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.892080][ T10] usb 1-1: Product: syz [ 122.908155][ T10] usb 1-1: Manufacturer: syz [ 122.924097][ T30] audit: type=1326 audit(1752669618.536:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7057 comm="syz.2.377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17d338e929 code=0x0 [ 122.946831][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.955933][ T10] usb 1-1: SerialNumber: syz [ 122.966122][ T10] usb 1-1: config 0 descriptor?? [ 122.973980][ T10] smsc95xx v2.0.0 [ 123.894797][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 123.908981][ T1220] zl10353_read_register: readreg error (reg=127, ret==0) [ 123.917533][ T7014] usb 2-1: dvb_usb_au6610: wlen=132, aborting [ 123.931238][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 124.083419][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 124.115690][ T1220] usb 2-1: USB disconnect, device number 10 [ 124.131879][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 124.501656][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 124.691096][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 124.719006][ T10] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 124.741391][ T30] audit: type=1400 audit(1752669620.346:281): avc: denied { create } for pid=7087 comm="syz.1.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 124.744843][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.762874][ T30] audit: type=1400 audit(1752669620.376:282): avc: denied { getopt } for pid=7087 comm="syz.1.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 124.800639][ T10] usb 3-1: Product: syz [ 124.806965][ T10] usb 3-1: Manufacturer: syz [ 124.812244][ T10] usb 3-1: SerialNumber: syz [ 124.833358][ T10] usb 3-1: config 0 descriptor?? [ 124.872472][ T10] usb 3-1: selecting invalid altsetting 3 [ 124.884533][ T10] comedi comedi5: could not set alternate setting 3 in high speed [ 124.888505][ T30] audit: type=1400 audit(1752669620.496:283): avc: denied { setopt } for pid=7092 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.894752][ T10] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 124.925923][ T10] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 125.043088][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 125.084406][ T10] usb 3-1: USB disconnect, device number 9 [ 125.201386][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 125.208113][ T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 125.217513][ T9] usb 5-1: config 0 has no interface number 0 [ 125.221698][ T2145] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 125.227729][ T9] usb 5-1: config 0 interface 12 has no altsetting 0 [ 125.246539][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 125.256344][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.267712][ T9] usb 5-1: Product: syz [ 125.272631][ T9] usb 5-1: Manufacturer: syz [ 125.277247][ T9] usb 5-1: SerialNumber: syz [ 125.285415][ T9] usb 5-1: config 0 descriptor?? [ 125.451295][ T2145] usb 2-1: device descriptor read/64, error -71 [ 125.701285][ T2145] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 125.925318][ T43] usb 1-1: USB disconnect, device number 16 [ 125.961818][ T2145] usb 2-1: device descriptor read/64, error -71 [ 126.091958][ T2145] usb usb2-port1: attempt power cycle [ 126.176148][ T9] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 126.552993][ T2145] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 126.645888][ T2145] usb 2-1: device descriptor read/8, error -71 [ 126.880706][ T30] audit: type=1400 audit(1752669622.486:284): avc: denied { create } for pid=7114 comm="syz.3.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 126.991260][ T9] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 126.998688][ T9] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 127.012068][ T9] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 127.034459][ T9] usb 5-1: USB disconnect, device number 6 [ 127.094604][ T2145] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 127.114700][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.398'. [ 127.136337][ T2145] usb 2-1: device descriptor read/8, error -71 [ 127.611431][ T30] audit: type=1400 audit(1752669622.756:285): avc: denied { connect } for pid=7114 comm="syz.3.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 127.631353][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.633516][ T2145] usb usb2-port1: unable to enumerate USB device [ 127.637648][ T30] audit: type=1400 audit(1752669622.756:286): avc: denied { write } for pid=7114 comm="syz.3.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 127.880084][ T30] audit: type=1326 audit(1752669623.486:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.4.404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f208af8e929 code=0x0 [ 127.949006][ T7138] autofs: Unknown parameter '00000000000000000000' [ 127.975075][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 128.135572][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 128.151345][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.160953][ T9] usb 4-1: Product: syz [ 128.168620][ T9] usb 4-1: Manufacturer: syz [ 128.174984][ T9] usb 4-1: SerialNumber: syz [ 128.215542][ T9] usb 4-1: config 0 descriptor?? [ 128.240509][ T30] audit: type=1804 audit(1752669623.846:288): pid=7140 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.410" name="/newroot/112/file0" dev="tmpfs" ino=616 res=1 errno=0 [ 128.788267][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 129.548740][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 129.552474][ T5947] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 129.575745][ T9] usb 4-1: USB disconnect, device number 5 [ 129.773922][ T5947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.792317][ T5947] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 129.805005][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 129.820889][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 129.831940][ T5947] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 129.863882][ T5947] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 129.885794][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 129.899246][ T5947] usb 5-1: Product: syz [ 129.905063][ T5947] usb 5-1: Manufacturer: syz [ 129.921201][ T5947] usb 5-1: SerialNumber: syz [ 129.928031][ T5947] usb 5-1: config 0 descriptor?? [ 129.955916][ T7170] autofs: Unknown parameter '00000000000000000000' [ 130.164740][ T5947] radio-si470x 5-1:0.0: DeviceID=0x71d0 ChipID=0x6400 [ 130.171682][ T2145] IPVS: starting estimator thread 0... [ 130.186647][ T5947] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 130.203818][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 130.271706][ T7181] IPVS: using max 38 ests per chain, 91200 per kthread [ 130.351303][ T9] usb 2-1: device descriptor read/64, error -71 [ 130.397404][ T5947] radio-si470x 5-1:0.0: software version 113, hardware version 208 [ 130.405761][ T5947] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 130.661835][ T5947] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 130.945282][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 131.081813][ T9] usb 2-1: device descriptor read/64, error -71 [ 131.200616][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 131.208733][ T9] usb usb2-port1: attempt power cycle [ 131.364114][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.375202][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.385035][ T10] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 131.394275][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.404634][ T10] usb 1-1: config 0 descriptor?? [ 131.467168][ T5947] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 131.490800][ T5947] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 131.516472][ T5947] usb 5-1: USB disconnect, device number 7 [ 131.563593][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 131.604876][ T9] usb 2-1: device descriptor read/8, error -71 [ 131.872902][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 131.901672][ T9] usb 2-1: device descriptor read/8, error -71 [ 132.011604][ T9] usb usb2-port1: unable to enumerate USB device [ 132.032983][ T10] usb 1-1: string descriptor 0 read error: -22 [ 132.047851][ T30] audit: type=1400 audit(1752669627.656:289): avc: denied { create } for pid=7219 comm="syz.4.440" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 132.062853][ T7220] ======================================================= [ 132.062853][ T7220] WARNING: The mand mount option has been deprecated and [ 132.062853][ T7220] and is ignored by this kernel. Remove the mand [ 132.062853][ T7220] option from the mount to silence this warning. [ 132.062853][ T7220] ======================================================= [ 132.104265][ T30] audit: type=1400 audit(1752669627.656:290): avc: denied { mounton } for pid=7219 comm="syz.4.440" path="/89/file0" dev="tmpfs" ino=476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 132.109155][ T7220] ./file0: Can't open blockdev [ 132.187142][ T30] audit: type=1400 audit(1752669627.796:291): avc: denied { unlink } for pid=5829 comm="syz-executor" name="file0" dev="tmpfs" ino=476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 132.241443][ T10] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 132.260885][ T10] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 132.269922][ T10] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 132.283626][ T10] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 132.291993][ T10] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 132.319715][ T10] usb 1-1: USB disconnect, device number 17 [ 132.452375][ T7229] 9pnet_fd: Insufficient options for proto=fd [ 132.649034][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.662856][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.404749][ T7256] 9pnet_fd: Insufficient options for proto=fd [ 133.792276][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 133.887174][ T7277] autofs: Unknown parameter '00000000000000000000' [ 133.936389][ T30] audit: type=1400 audit(1752669629.546:292): avc: denied { connect } for pid=7278 comm="syz.4.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 133.943471][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.968856][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.971505][ T30] audit: type=1400 audit(1752669629.586:293): avc: denied { write } for pid=7278 comm="syz.4.465" path="socket:[13271]" dev="sockfs" ino=13271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 134.001496][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 134.010634][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.041749][ T10] usb 4-1: config 0 descriptor?? [ 134.407192][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 134.604581][ T10] usb 5-1: config 0 has no interfaces? [ 134.655911][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 134.754874][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.780016][ T10] usb 5-1: config 0 descriptor?? [ 135.032534][ T5947] usb 5-1: USB disconnect, device number 8 [ 136.286431][ T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 136.418578][ T30] audit: type=1400 audit(1752669632.026:294): avc: denied { name_bind } for pid=7336 comm="syz.2.488" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 136.462999][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.481538][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.496250][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.514091][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.549832][ T9] usb 5-1: Product: syz [ 136.559629][ T9] usb 5-1: Manufacturer: syz [ 136.568776][ T9] usb 5-1: SerialNumber: syz [ 136.690464][ T10] usb 4-1: USB disconnect, device number 6 [ 136.720816][ T7343] 9pnet_fd: Insufficient options for proto=fd [ 136.787050][ T7349] syzkaller1: entered promiscuous mode [ 136.815941][ T7349] syzkaller1: entered allmulticast mode [ 136.908781][ T30] audit: type=1326 audit(1752669632.516:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.2.496" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17d338e929 code=0x0 [ 136.987320][ T9] usb 5-1: cannot find UAC_HEADER [ 137.029902][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 137.088182][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.195279][ T2145] usb 5-1: USB disconnect, device number 9 [ 137.481379][ T5947] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.693852][ T5947] usb 4-1: unable to get BOS descriptor or descriptor too short [ 137.706781][ T5947] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 137.733566][ T5947] usb 4-1: can't read configurations, error -71 [ 138.011604][ T30] audit: type=1400 audit(1752669633.616:296): avc: denied { watch } for pid=7383 comm="syz.1.509" path="/110" dev="tmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 138.087224][ T30] audit: type=1400 audit(1752669633.616:297): avc: denied { watch_sb watch_reads } for pid=7383 comm="syz.1.509" path="/110" dev="tmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 138.221251][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 138.380281][ T30] audit: type=1400 audit(1752669633.986:298): avc: denied { connect } for pid=7396 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.409720][ T9] usb 1-1: config 0 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 161, changing to 11 [ 138.433197][ T9] usb 1-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.446869][ T30] audit: type=1400 audit(1752669633.986:299): avc: denied { write } for pid=7396 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.471228][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 138.484737][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=021b, bcdDevice= 0.00 [ 138.494999][ T30] audit: type=1400 audit(1752669634.016:300): avc: denied { ioctl } for pid=7380 comm="syz.0.506" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.520300][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.535975][ T9] usb 1-1: config 0 descriptor?? [ 138.563806][ T30] audit: type=1400 audit(1752669634.176:301): avc: denied { read write } for pid=7401 comm="syz.3.516" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.587802][ T30] audit: type=1400 audit(1752669634.176:302): avc: denied { open } for pid=7401 comm="syz.3.516" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.678459][ T30] audit: type=1400 audit(1752669634.286:303): avc: denied { read write } for pid=7405 comm="syz.4.519" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 138.703155][ T30] audit: type=1400 audit(1752669634.286:304): avc: denied { open } for pid=7405 comm="syz.4.519" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 138.861252][ T2145] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 138.921444][ T5947] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 138.929342][ T43] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 138.956485][ T9] apple 0003:05AC:021B.0002: unbalanced collection at end of report description [ 138.969793][ T9] apple 0003:05AC:021B.0002: parse failed [ 138.975979][ T9] apple 0003:05AC:021B.0002: probe with driver apple failed with error -22 [ 139.011976][ T2145] usb 2-1: Using ep0 maxpacket: 16 [ 139.018712][ T2145] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.029045][ T2145] usb 2-1: config 0 has no interfaces? [ 139.034561][ T2145] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 139.043794][ T2145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.054626][ T2145] usb 2-1: config 0 descriptor?? [ 139.092890][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.103212][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.112667][ T5947] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.122989][ T5947] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.134427][ T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.143564][ T5947] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.153037][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.157732][ T9] usb 1-1: USB disconnect, device number 18 [ 139.161023][ T43] usb 5-1: Product: syz [ 139.161042][ T43] usb 5-1: Manufacturer: syz [ 139.161056][ T43] usb 5-1: SerialNumber: syz [ 139.180434][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.189131][ T5947] usb 4-1: Product: syz [ 139.193773][ T5947] usb 4-1: Manufacturer: syz [ 139.198399][ T5947] usb 4-1: SerialNumber: syz [ 139.263231][ T10] usb 2-1: USB disconnect, device number 19 [ 139.410920][ T43] usb 5-1: 0:2 : does not exist [ 139.420630][ T43] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 139.443172][ T43] usb 5-1: USB disconnect, device number 10 [ 139.638853][ T5947] usb 4-1: cannot find UAC_HEADER [ 139.653643][ T5947] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 139.686585][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.718652][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 139.849310][ T43] usb 4-1: USB disconnect, device number 9 [ 139.891658][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 140.037966][ T30] audit: type=1400 audit(1752669635.646:305): avc: denied { create } for pid=7430 comm="syz.4.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.136527][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 140.153847][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 140.163032][ T9] usb 3-1: can't read configurations, error -71 [ 140.228337][ T7436] IPv6: addrconf: prefix option has invalid lifetime [ 140.293822][ T10] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 140.484091][ T10] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.508856][ T10] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.533719][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 140.541088][ T10] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 140.552252][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.572544][ T10] usb 2-1: config 0 descriptor?? [ 141.001602][ T10] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 141.483804][ T10] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 141.493452][ T10] hid-steam 0003:28DE:1102.0003: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 141.521971][ T7468] syzkaller1: entered promiscuous mode [ 141.528453][ T7468] syzkaller1: entered allmulticast mode [ 141.565697][ T10] hid-steam 0003:28DE:1102.0003: Steam Controller 'XXXXXXXXXX' connected [ 141.584228][ T10] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0003/input/input5 [ 141.623079][ T10] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 141.632155][ T10] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 141.684020][ T10] hid-steam 0003:28DE:1102.0004: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 141.791452][ T10] usb 2-1: USB disconnect, device number 20 [ 141.821393][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 141.904113][ T7476] fido_id[7476]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 141.971828][ T10] hid-steam 0003:28DE:1102.0003: Steam Controller 'XXXXXXXXXX' disconnected [ 142.003307][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.045550][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.083184][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.096426][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.129693][ T9] usb 4-1: Product: syz [ 142.141377][ T9] usb 4-1: Manufacturer: syz [ 142.158846][ T9] usb 4-1: SerialNumber: syz [ 142.361308][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 142.661800][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 142.774685][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 142.792973][ T9] usb 4-1: cannot find UAC_HEADER [ 142.813372][ T43] usb 5-1: config 2 has an invalid interface number: 166 but max is 0 [ 142.818249][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 142.829985][ T43] usb 5-1: config 2 has no interface number 0 [ 142.863033][ T43] usb 5-1: config 2 interface 166 has no altsetting 0 [ 142.901637][ T43] usb 5-1: New USB device found, idVendor=0403, idProduct=f06f, bcdDevice=bc.01 [ 142.942656][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.103799][ T43] usb 5-1: Product: syz [ 143.109009][ T43] usb 5-1: Manufacturer: syz [ 143.115689][ T43] usb 5-1: SerialNumber: syz [ 143.123642][ T7508] syzkaller1: entered promiscuous mode [ 143.129145][ T7508] syzkaller1: entered allmulticast mode [ 143.129851][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.156526][ T5947] usb 4-1: USB disconnect, device number 10 [ 143.419143][ T43] ftdi_sio 5-1:2.166: FTDI USB Serial Device converter detected [ 143.572747][ T43] ftdi_sio ttyUSB0: unknown device type: 0xbc01 [ 143.600962][ T43] usb 5-1: USB disconnect, device number 11 [ 143.613248][ T43] ftdi_sio 5-1:2.166: device disconnected [ 143.713631][ T7517] netlink: 52 bytes leftover after parsing attributes in process `syz.1.566'. [ 144.172976][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 144.172992][ T30] audit: type=1400 audit(1752669639.786:317): avc: denied { unmount } for pid=7527 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 144.198677][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.191840][ T30] audit: type=1326 audit(1752669640.796:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.4.583" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f208af8e929 code=0x0 [ 145.874104][ T7576] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 146.165842][ T2145] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 146.225761][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 146.382149][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 146.396337][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 146.407909][ T10] usb 1-1: config 0 has no interface number 0 [ 146.437161][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 146.440521][ T7601] IPv6: addrconf: prefix option has invalid lifetime [ 146.449424][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.492062][ T2145] usb 4-1: Using ep0 maxpacket: 32 [ 146.540618][ T2145] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 146.598585][ T2145] usb 4-1: config 0 has no interface number 0 [ 146.683104][ T2145] usb 4-1: config 0 interface 184 has no altsetting 0 [ 146.772149][ T2145] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 146.840060][ T10] usb 1-1: Product: syz [ 146.844367][ T10] usb 1-1: Manufacturer: syz [ 146.849139][ T10] usb 1-1: SerialNumber: syz [ 146.859622][ T2145] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.874569][ T10] usb 1-1: config 0 descriptor?? [ 146.882298][ T10] smsc95xx v2.0.0 [ 146.884938][ T2145] usb 4-1: Product: syz [ 146.884959][ T2145] usb 4-1: Manufacturer: syz [ 146.884974][ T2145] usb 4-1: SerialNumber: syz [ 146.887333][ T2145] usb 4-1: config 0 descriptor?? [ 146.889102][ T2145] smsc75xx v1.0.0 [ 146.889120][ T2145] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 146.889288][ T2145] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 147.141814][ T1220] usb 4-1: USB disconnect, device number 11 [ 147.306309][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 147.338278][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 147.736464][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 147.753825][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 149.000796][ T5981] usb 1-1: USB disconnect, device number 19 [ 149.950968][ T7650] fuse: Bad value for 'fd' [ 150.431447][ T1220] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 150.651474][ T1220] usb 1-1: Using ep0 maxpacket: 16 [ 150.662426][ T5981] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 150.684726][ T1220] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.709037][ T1220] usb 1-1: config 0 has no interfaces? [ 150.715532][ T1220] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 150.728042][ T1220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.748818][ T1220] usb 1-1: config 0 descriptor?? [ 150.881270][ T5981] usb 5-1: Using ep0 maxpacket: 32 [ 150.887832][ T5981] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.900117][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 150.912130][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 151.029725][ T5981] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 151.128154][ T2145] usb 1-1: USB disconnect, device number 20 [ 151.194688][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.403146][ T5981] usb 5-1: config 0 descriptor?? [ 151.425715][ T7648] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 151.443044][ T5981] hub 5-1:0.0: USB hub found [ 151.820744][ T7687] process 'syz.1.632' launched './file0' with NULL argv: empty string added [ 151.835423][ T30] audit: type=1400 audit(1752669647.446:319): avc: denied { execute_no_trans } for pid=7686 comm="syz.1.632" path="/140/file0" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 151.840847][ T5981] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 151.899793][ T5981] usbhid 5-1:0.0: can't add hid device: -71 [ 151.919465][ T5981] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 152.736828][ T5981] usb 5-1: USB disconnect, device number 12 [ 152.874679][ T30] audit: type=1804 audit(1752669648.486:320): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.633" name="file0" dev="tmpfs" ino=781 res=1 errno=0 [ 153.720415][ T7720] netlink: 40 bytes leftover after parsing attributes in process `syz.2.644'. [ 153.824631][ T7725] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 155.460985][ T30] audit: type=1400 audit(1752669651.066:321): avc: denied { mount } for pid=7751 comm="syz.4.656" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 155.973530][ T30] audit: type=1400 audit(1752669651.336:322): avc: denied { ioctl } for pid=7751 comm="syz.4.656" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 156.076463][ T7760] loop2: detected capacity change from 0 to 7 [ 156.090986][ T5831] Dev loop2: unable to read RDB block 7 [ 156.102804][ T5981] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 156.121215][ T5831] loop2: unable to read partition table [ 156.137525][ T5831] loop2: partition table beyond EOD, truncated [ 156.186256][ T7760] Dev loop2: unable to read RDB block 7 [ 156.208424][ T7760] loop2: unable to read partition table [ 156.223646][ T7760] loop2: partition table beyond EOD, truncated [ 156.241860][ T7760] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 156.261798][ T5981] usb 4-1: Using ep0 maxpacket: 32 [ 156.291694][ T5981] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 156.316773][ T5981] usb 4-1: config 0 has no interface number 0 [ 156.330943][ T5981] usb 4-1: config 0 interface 12 has no altsetting 0 [ 157.194275][ T5981] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 157.206966][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.215824][ T5981] usb 4-1: Product: syz [ 157.220080][ T5981] usb 4-1: Manufacturer: syz [ 157.229128][ T5981] usb 4-1: SerialNumber: syz [ 157.247652][ T5981] usb 4-1: config 0 descriptor?? [ 157.282320][ T30] audit: type=1326 audit(1752669652.896:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.2.669" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17d338e929 code=0x0 [ 157.324881][ T5981] f81534 4-1:0.12: required endpoints missing [ 157.435791][ T30] audit: type=1400 audit(1752669653.046:324): avc: denied { create } for pid=7783 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 157.476184][ T30] audit: type=1400 audit(1752669653.066:325): avc: denied { getopt } for pid=7783 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 157.552176][ T30] audit: type=1400 audit(1752669653.156:326): avc: denied { create } for pid=7790 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 157.580187][ T30] audit: type=1400 audit(1752669653.186:327): avc: denied { connect } for pid=7790 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 157.603434][ T7791] syz_tun: entered allmulticast mode [ 157.614195][ T7790] syz_tun: left allmulticast mode [ 157.732040][ T7797] netlink: 'syz.0.677': attribute type 72 has an invalid length. [ 157.757015][ T30] audit: type=1804 audit(1752669653.356:328): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.676" name="/newroot/144/file0" dev="tmpfs" ino=758 res=1 errno=0 [ 157.801257][ T7797] netlink: 36 bytes leftover after parsing attributes in process `syz.0.677'. [ 159.259022][ T7802] netlink: 60 bytes leftover after parsing attributes in process `syz.0.678'. [ 159.297852][ T2145] usb 4-1: USB disconnect, device number 12 [ 159.777937][ T7806] syzkaller1: entered promiscuous mode [ 159.826680][ T7806] syzkaller1: entered allmulticast mode [ 160.087908][ T7825] netlink: 'syz.1.688': attribute type 72 has an invalid length. [ 160.111976][ T30] audit: type=1400 audit(1752669655.716:329): avc: denied { write } for pid=7818 comm="syz.3.687" path="socket:[16186]" dev="sockfs" ino=16186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.161236][ T7825] netlink: 36 bytes leftover after parsing attributes in process `syz.1.688'. [ 160.187672][ T30] audit: type=1400 audit(1752669655.796:330): avc: denied { bind } for pid=7831 comm="syz.0.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 160.401320][ T5912] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 160.551322][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 160.557883][ T5912] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 160.566618][ T5912] usb 3-1: config 0 has no interface number 0 [ 160.572823][ T5912] usb 3-1: config 0 interface 12 has no altsetting 0 [ 160.582540][ T5912] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 160.591768][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.599753][ T5912] usb 3-1: Product: syz [ 160.603976][ T5912] usb 3-1: Manufacturer: syz [ 160.608567][ T5912] usb 3-1: SerialNumber: syz [ 160.616724][ T5912] usb 3-1: config 0 descriptor?? [ 160.623390][ T5912] f81534 3-1:0.12: required endpoints missing [ 160.705929][ T30] audit: type=1400 audit(1752669656.316:331): avc: denied { bind } for pid=7843 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 160.767436][ T30] audit: type=1400 audit(1752669656.376:332): avc: denied { create } for pid=7843 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 161.089046][ T7857] netlink: 60 bytes leftover after parsing attributes in process `syz.0.703'. [ 161.341258][ T5912] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 161.503006][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.515148][ T5912] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 161.524342][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.541950][ T5912] usb 4-1: config 0 descriptor?? [ 161.558282][ T5912] pwc: Askey VC010 type 2 USB webcam detected. [ 161.961030][ T5912] pwc: recv_control_msg error -32 req 02 val 2b00 [ 161.976034][ T5912] pwc: recv_control_msg error -32 req 02 val 2700 [ 161.984604][ T5912] pwc: recv_control_msg error -32 req 02 val 2c00 [ 161.994774][ T5912] pwc: recv_control_msg error -32 req 04 val 1000 [ 162.006045][ T5912] pwc: recv_control_msg error -32 req 04 val 1300 [ 162.017395][ T5912] pwc: recv_control_msg error -32 req 04 val 1400 [ 162.036749][ T5912] pwc: recv_control_msg error -32 req 02 val 2000 [ 162.048019][ T5912] pwc: recv_control_msg error -32 req 02 val 2100 [ 162.056341][ T5912] pwc: recv_control_msg error -32 req 04 val 1500 [ 162.267123][ T5912] pwc: recv_control_msg error -71 req 02 val 2400 [ 162.290547][ T5912] pwc: recv_control_msg error -71 req 02 val 2600 [ 162.303248][ T5912] pwc: recv_control_msg error -71 req 02 val 2900 [ 162.310767][ T5912] pwc: recv_control_msg error -71 req 02 val 2800 [ 162.320064][ T5912] pwc: recv_control_msg error -71 req 04 val 1100 [ 162.328592][ T5912] pwc: recv_control_msg error -71 req 04 val 1200 [ 162.342518][ T5912] pwc: Registered as video103. [ 162.354303][ T5912] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 162.405584][ T5912] usb 4-1: USB disconnect, device number 13 [ 162.504414][ T5844] Bluetooth: hci1: command tx timeout [ 162.781598][ T7893] netlink: 60 bytes leftover after parsing attributes in process `syz.4.716'. [ 163.182967][ T2145] usb 3-1: USB disconnect, device number 12 [ 163.250885][ T7906] netlink: 60 bytes leftover after parsing attributes in process `syz.2.722'. [ 163.268455][ T7908] fuse: Bad value for 'fd' [ 163.865511][ T7933] fuse: Bad value for 'fd' [ 164.191359][ T2145] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 164.361264][ T2145] usb 5-1: Using ep0 maxpacket: 16 [ 164.368390][ T2145] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.380743][ T2145] usb 5-1: config 0 has no interface number 0 [ 164.387083][ T2145] usb 5-1: config 0 interface 1 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.398712][ T2145] usb 5-1: config 0 interface 1 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.408609][ T2145] usb 5-1: config 0 interface 1 has no altsetting 0 [ 164.416012][ T2145] usb 5-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 1.00 [ 164.425733][ T2145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.440691][ T2145] usb 5-1: config 0 descriptor?? [ 164.797843][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888032c2dc00: rx timeout, send abort [ 164.821348][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 164.821366][ T30] audit: type=1400 audit(1752669660.426:336): avc: denied { read } for pid=5188 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 164.869439][ T30] audit: type=1400 audit(1752669660.426:337): avc: denied { search } for pid=5188 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.896851][ T2145] chicony 0003:04F2:0418.0005: item fetching failed at offset 0/4 [ 164.918093][ T30] audit: type=1400 audit(1752669660.426:338): avc: denied { search } for pid=5188 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.951124][ T2145] chicony 0003:04F2:0418.0005: Chicony hid parse failed: -22 [ 164.969212][ T2145] chicony 0003:04F2:0418.0005: probe with driver chicony failed with error -22 [ 164.988565][ T30] audit: type=1400 audit(1752669660.426:339): avc: denied { add_name } for pid=5188 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.013119][ T30] audit: type=1400 audit(1752669660.426:340): avc: denied { create } for pid=5188 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 165.035239][ T30] audit: type=1400 audit(1752669660.426:341): avc: denied { append open } for pid=5188 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 165.070539][ T30] audit: type=1400 audit(1752669660.426:342): avc: denied { getattr } for pid=5188 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 165.094107][ T7950] syzkaller1: entered promiscuous mode [ 165.099607][ T7950] syzkaller1: entered allmulticast mode [ 165.099777][ T5912] usb 5-1: USB disconnect, device number 13 [ 165.214815][ T7952] netlink: 504 bytes leftover after parsing attributes in process `syz.2.744'. [ 165.289564][ T7957] Scaler: ================= START STATUS ================= [ 165.297218][ T7957] Scaler: ================== END STATUS ================== [ 165.307956][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888032c2dc00: abort rx timeout. Force session deactivation [ 165.681477][ T5912] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 165.881753][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 165.938558][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.056828][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 166.206257][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 166.361071][ T5912] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 166.429033][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.493828][ T5912] usb 3-1: config 0 descriptor?? [ 166.500226][ T7962] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.549472][ T5912] hub 3-1:0.0: USB hub found [ 166.588631][ T7978] netlink: 40 bytes leftover after parsing attributes in process `syz.4.758'. [ 166.599801][ T7980] netlink: 504 bytes leftover after parsing attributes in process `syz.0.756'. [ 166.755495][ T5912] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 166.802420][ T5912] usbhid 3-1:0.0: can't add hid device: -71 [ 166.808501][ T5912] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 166.873845][ T5912] usb 3-1: USB disconnect, device number 13 [ 166.931533][ T7996] 9pnet_fd: Insufficient options for proto=fd [ 167.957474][ T8015] netlink: 504 bytes leftover after parsing attributes in process `syz.2.771'. [ 168.027499][ T30] audit: type=1400 audit(1752669663.636:343): avc: denied { read } for pid=8018 comm="syz.0.774" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 168.070264][ T30] audit: type=1400 audit(1752669663.636:344): avc: denied { open } for pid=8018 comm="syz.0.774" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 168.171643][ T8025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.777'. [ 168.181501][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 168.188087][ T8025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.777'. [ 168.259206][ T8027] 9pnet_fd: Insufficient options for proto=fd [ 168.342827][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 168.350375][ T10] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 168.350409][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.350429][ T10] usb 4-1: Product: syz [ 168.350444][ T10] usb 4-1: Manufacturer: syz [ 168.350458][ T10] usb 4-1: SerialNumber: syz [ 168.354338][ T10] usb 4-1: config 0 descriptor?? [ 168.361811][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 168.831310][ T5912] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 169.383086][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 169.394636][ T5912] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 169.413108][ T5912] usb 1-1: config 0 has no interface number 0 [ 169.424813][ T5912] usb 1-1: config 0 interface 12 has no altsetting 0 [ 169.434948][ T5912] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 169.448990][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.459872][ T5912] usb 1-1: Product: syz [ 169.464962][ T5912] usb 1-1: Manufacturer: syz [ 169.469689][ T5912] usb 1-1: SerialNumber: syz [ 169.488323][ T5912] usb 1-1: config 0 descriptor?? [ 169.498601][ T5912] f81534 1-1:0.12: required endpoints missing [ 169.561967][ T10] gspca_ov534_9: reg_w failed -71 [ 169.644504][ T30] audit: type=1326 audit(1752669665.256:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8061 comm="syz.4.790" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f208af8e929 code=0x0 [ 169.667253][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.687662][ T8064] 9pnet_fd: Insufficient options for proto=fd [ 169.715569][ T8067] IPv6: addrconf: prefix option has invalid lifetime [ 169.901398][ T10] gspca_ov534_9: Unknown sensor 0000 [ 169.901948][ T10] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 170.029995][ T10] usb 4-1: USB disconnect, device number 14 [ 170.721105][ T8079] netlink: 40 bytes leftover after parsing attributes in process `syz.3.797'. [ 170.814326][ T8088] binder: 8087:8088 ioctl c0306201 0 returned -14 [ 171.034312][ T8101] netlink: 'syz.3.807': attribute type 9 has an invalid length. [ 171.272223][ T8111] binder: 8110:8111 ioctl c0306201 0 returned -14 [ 171.689281][ T2145] usb 1-1: USB disconnect, device number 21 [ 172.264726][ T30] audit: type=1804 audit(1752669667.876:346): pid=8125 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.818" name="file0" dev="tmpfs" ino=1000 res=1 errno=0 [ 172.327768][ T8128] syzkaller1: entered promiscuous mode [ 172.367818][ T8128] syzkaller1: entered allmulticast mode [ 172.594816][ T8141] binder: 8139:8141 ioctl c0306201 0 returned -14 [ 172.821507][ T5844] Bluetooth: hci0: command tx timeout [ 173.197753][ T8151] bond0: entered promiscuous mode [ 173.203909][ T8151] bond_slave_0: entered promiscuous mode [ 173.209869][ T8151] bond_slave_1: entered promiscuous mode [ 173.217311][ T8151] batadv0: entered promiscuous mode [ 173.227413][ T8151] hsr1: entered allmulticast mode [ 173.234520][ T8151] bond0: entered allmulticast mode [ 173.333285][ T8151] bond_slave_0: entered allmulticast mode [ 173.339072][ T8151] bond_slave_1: entered allmulticast mode [ 173.366506][ T8151] batadv0: entered allmulticast mode [ 173.373013][ T8151] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 173.385529][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 173.395565][ T8151] bond0: left promiscuous mode [ 173.409352][ T30] audit: type=1326 audit(1752669669.016:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.4.834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f208af8e929 code=0x0 [ 173.411247][ T8151] bond_slave_0: left promiscuous mode [ 173.439966][ T8151] bond_slave_1: left promiscuous mode [ 173.446802][ T8151] batadv0: left promiscuous mode [ 173.553271][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.570012][ T10] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 173.591233][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.630586][ T10] usb 1-1: config 0 descriptor?? [ 174.077826][ T10] razer 0003:1532:010E.0006: unknown main item tag 0x0 [ 174.095268][ T10] razer 0003:1532:010E.0006: unknown main item tag 0x0 [ 174.113036][ T10] razer 0003:1532:010E.0006: unknown main item tag 0x0 [ 174.119982][ T10] razer 0003:1532:010E.0006: unknown main item tag 0x0 [ 174.141253][ T10] razer 0003:1532:010E.0006: unknown main item tag 0x0 [ 174.202071][ T5981] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 174.280038][ T10] razer 0003:1532:010E.0006: failed to enable macro keys: -71 [ 174.371403][ T5981] usb 3-1: Using ep0 maxpacket: 32 [ 174.422649][ T30] audit: type=1804 audit(1752669670.016:348): pid=8202 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.852" name="/newroot/129/file0" dev="tmpfs" ino=691 res=1 errno=0 [ 174.427183][ T10] razer 0003:1532:010E.0006: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0 [ 174.460312][ T10] usb 1-1: USB disconnect, device number 22 [ 174.567848][ T5981] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 174.705727][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.807238][ T5981] usb 3-1: Product: syz [ 174.856711][ T5981] usb 3-1: Manufacturer: syz [ 174.912741][ T5981] usb 3-1: SerialNumber: syz [ 175.070681][ T5981] usb 3-1: config 0 descriptor?? [ 175.219707][ T5981] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 175.720956][ T8207] fido_id[8207]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 176.614656][ T5981] gspca_ov534_9: reg_w failed -71 [ 176.869902][ T8248] binder: 8247:8248 ioctl c0306201 0 returned -14 [ 176.911352][ T5981] gspca_ov534_9: Unknown sensor 0000 [ 176.911449][ T5981] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 176.940338][ T5981] usb 3-1: USB disconnect, device number 14 [ 177.029982][ T8253] syzkaller1: entered promiscuous mode [ 177.037997][ T8253] syzkaller1: entered allmulticast mode [ 177.195525][ T8257] tipc: Enabling of bearer rejected, failed to enable media [ 177.343755][ T30] audit: type=1400 audit(1752669672.956:349): avc: denied { bind } for pid=8267 comm="syz.2.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 177.386117][ T30] audit: type=1400 audit(1752669672.986:350): avc: denied { write } for pid=8267 comm="syz.2.878" name="ptype" dev="proc" ino=4026533037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 177.762305][ T8282] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.885'. [ 177.845037][ T8284] syzkaller1: entered promiscuous mode [ 177.850649][ T8284] syzkaller1: entered allmulticast mode [ 177.970874][ T30] audit: type=1400 audit(1752669673.576:351): avc: denied { getopt } for pid=8291 comm="syz.3.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.089032][ T8296] syzkaller1: entered promiscuous mode [ 178.115872][ T8296] syzkaller1: entered allmulticast mode [ 178.127370][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 178.315956][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 178.361522][ T8304] overlayfs: failed to clone upperpath [ 178.396028][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 179.297535][ T5912] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 179.345377][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.473384][ T10] usb 5-1: config 0 descriptor?? [ 179.502667][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 179.518021][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.543712][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 179.560193][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 179.577906][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 179.594791][ T30] audit: type=1400 audit(1752669675.196:352): avc: denied { remount } for pid=8307 comm="syz.2.897" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 179.621331][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 179.649285][ T5912] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 179.671239][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 179.707934][ T5912] usb 1-1: Product: syz [ 179.715918][ T5912] usb 1-1: Manufacturer: syz [ 179.720540][ T5912] usb 1-1: SerialNumber: syz [ 179.734965][ T5912] usb 1-1: config 0 descriptor?? [ 179.950021][ T5912] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 179.959484][ T5912] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 180.032779][ T10] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 180.145377][ T5912] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 180.158630][ T5912] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 180.177460][ T5912] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 180.204467][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 180.222423][ T5912] usb 1-1: USB disconnect, device number 23 [ 180.232306][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.271316][ T10] usb 3-1: Product: syz [ 180.275540][ T10] usb 3-1: Manufacturer: syz [ 180.280114][ T10] usb 3-1: SerialNumber: syz [ 180.477392][ T10] usb 3-1: config 0 descriptor?? [ 180.504958][ T8333] overlayfs: failed to clone upperpath [ 180.695796][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 181.899156][ T5947] usb 5-1: USB disconnect, device number 14 [ 182.290081][ T30] audit: type=1400 audit(1752669677.896:353): avc: denied { create } for pid=8361 comm="syz.4.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.345974][ T30] audit: type=1400 audit(1752669677.896:354): avc: denied { ioctl } for pid=8361 comm="syz.4.919" path="socket:[19565]" dev="sockfs" ino=19565 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.443696][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 182.468723][ T10] usb 3-1: USB disconnect, device number 15 [ 182.551329][ T43] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 182.713581][ T43] usb 5-1: config 2 has an invalid interface number: 86 but max is 0 [ 182.723098][ T43] usb 5-1: config 2 has no interface number 0 [ 182.729174][ T43] usb 5-1: config 2 interface 86 has no altsetting 0 [ 182.738407][ T43] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=bb.2e [ 182.753371][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.763230][ T43] usb 5-1: Product: syz [ 182.768564][ T43] usb 5-1: Manufacturer: syz [ 182.773627][ T43] usb 5-1: SerialNumber: syz [ 182.996436][ T43] mvusb_mdio 5-1:2.86: probe with driver mvusb_mdio failed with error -5 [ 183.007701][ T43] usb 5-1: USB disconnect, device number 15 [ 183.569086][ T5947] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 183.752791][ T5947] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 183.778292][ T5947] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 183.885923][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.934333][ T5947] usb 4-1: config 0 descriptor?? [ 183.991059][ T5947] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 184.237018][ T5844] block nbd4: Receive control failed (result -107) [ 184.307968][ T8406] block nbd4: shutting down sockets [ 184.694926][ T5947] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 184.841285][ T5947] usb 5-1: device descriptor read/64, error -71 [ 184.944227][ T8448] comedi comedi1: aio_aio12_8: I/O port conflict (0x20109,32) [ 185.011932][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 185.082153][ T5947] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 185.129638][ T8456] netlink: 40 bytes leftover after parsing attributes in process `syz.1.958'. [ 185.172772][ T8461] overlayfs: failed to clone upperpath [ 185.191728][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 185.202455][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.210514][ T10] usb 3-1: config 0 has no interface number 0 [ 185.223836][ T5947] usb 5-1: device descriptor read/64, error -71 [ 185.243013][ T10] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 185.252396][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.260401][ T10] usb 3-1: Product: syz [ 185.269580][ T10] usb 3-1: Manufacturer: syz [ 185.276008][ T10] usb 3-1: SerialNumber: syz [ 185.286254][ T10] usb 3-1: config 0 descriptor?? [ 185.299595][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.331558][ T5947] usb usb5-port1: attempt power cycle [ 185.535333][ T30] audit: type=1400 audit(1752669681.146:355): avc: denied { getopt } for pid=8472 comm="syz.1.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.543096][ T2145] usb 3-1: USB disconnect, device number 16 [ 185.681538][ T5947] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 185.702163][ T5947] usb 5-1: device descriptor read/8, error -71 [ 185.848314][ T8484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.970'. [ 185.927094][ T1220] usb 4-1: USB disconnect, device number 15 [ 185.943021][ T5947] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 185.971971][ T5947] usb 5-1: device descriptor read/8, error -71 [ 185.979217][ T8490] syzkaller1: entered promiscuous mode [ 185.995754][ T8490] syzkaller1: entered allmulticast mode [ 186.091622][ T5947] usb usb5-port1: unable to enumerate USB device [ 186.344490][ T5841] Bluetooth: hci4: command tx timeout [ 186.537850][ T30] audit: type=1400 audit(1752669682.146:356): avc: denied { bind } for pid=8517 comm="syz.1.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.558321][ T30] audit: type=1400 audit(1752669682.146:357): avc: denied { accept } for pid=8517 comm="syz.1.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.578264][ T30] audit: type=1400 audit(1752669682.146:358): avc: denied { write } for pid=8517 comm="syz.1.986" path="socket:[20012]" dev="sockfs" ino=20012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.611345][ T5947] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 186.777683][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.795181][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.821311][ T5947] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 186.830389][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.847765][ T5947] usb 4-1: config 0 descriptor?? [ 186.906444][ T5841] Bluetooth: hci1: command tx timeout [ 187.054986][ T30] audit: type=1400 audit(1752669682.666:359): avc: denied { setopt } for pid=8537 comm="syz.1.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 187.084338][ T30] audit: type=1400 audit(1752669682.696:360): avc: denied { nlmsg_read } for pid=8537 comm="syz.1.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.236684][ T30] audit: type=1804 audit(1752669682.846:361): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.996" name="/newroot/166/file0" dev="tmpfs" ino=885 res=1 errno=0 [ 187.319510][ T5947] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 187.671290][ T5947] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0007/input/input7 [ 188.046580][ T8545] 9pnet_fd: Insufficient options for proto=fd [ 188.136821][ T5947] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 188.422304][ T5841] Bluetooth: hci4: command tx timeout [ 188.565816][ T5947] usb 4-1: USB disconnect, device number 16 [ 189.226707][ T8562] fido_id[8562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 189.513880][ T8590] fuse: Bad value for 'fd' [ 189.731709][ T5947] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 189.957649][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.124556][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.255204][ T5947] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 190.358101][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.448735][ T5947] usb 3-1: config 0 descriptor?? [ 190.520012][ T8604] overlayfs: failed to resolve './file0': -2 [ 192.091097][ T30] audit: type=1400 audit(1752669687.696:362): avc: denied { write } for pid=8619 comm="syz.3.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 192.113595][ T5947] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 192.173232][ T5947] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input8 [ 192.308587][ T8628] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 192.315151][ T8629] 9pnet_fd: Insufficient options for proto=fd [ 192.338469][ T5947] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 192.412481][ T5947] usb 3-1: USB disconnect, device number 17 [ 192.523536][ T8632] fido_id[8632]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 192.864225][ T30] audit: type=1400 audit(1752669688.476:363): avc: denied { map } for pid=8653 comm="syz.3.1041" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 192.918382][ T30] audit: type=1400 audit(1752669688.506:364): avc: denied { call } for pid=8653 comm="syz.3.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 193.826590][ T30] audit: type=1804 audit(1752669688.636:365): pid=8659 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1042" name="/newroot/234/file0" dev="tmpfs" ino=1250 res=1 errno=0 [ 194.014537][ T30] audit: type=1400 audit(1752669689.626:366): avc: denied { read } for pid=8668 comm="syz.3.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.037121][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.268892][ T30] audit: type=1400 audit(1752669689.876:367): avc: denied { ioctl } for pid=8684 comm="syz.2.1054" path="socket:[19008]" dev="sockfs" ino=19008 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 195.116137][ T30] audit: type=1804 audit(1752669689.966:368): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1055" name="/newroot/170/file0" dev="tmpfs" ino=900 res=1 errno=0 [ 195.214374][ T8697] syzkaller1: entered promiscuous mode [ 195.219904][ T8697] syzkaller1: entered allmulticast mode [ 195.290348][ T30] audit: type=1400 audit(1752669690.896:369): avc: denied { ioctl } for pid=8698 comm="syz.0.1062" path="socket:[19038]" dev="sockfs" ino=19038 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 196.041203][ T30] audit: type=1400 audit(1752669691.646:370): avc: denied { read } for pid=8736 comm="syz.4.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 196.099327][ T30] audit: type=1400 audit(1752669691.686:371): avc: denied { read write } for pid=8738 comm="syz.4.1080" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 196.125098][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 196.125173][ T51] Bluetooth: hci3: command tx timeout [ 196.131713][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 196.137537][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 196.480236][ T8752] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.1086'. [ 196.639500][ T8766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1092'. [ 196.783197][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 197.012740][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.982781][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 197.991950][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.002261][ T9] usb 3-1: config 0 descriptor?? [ 198.685799][ T9] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 198.712927][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0009/input/input10 [ 198.789459][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1106'. [ 198.802911][ T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 198.852540][ T9] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 199.092088][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 199.103096][ T43] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 199.121834][ T43] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 199.164350][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.522251][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 199.544171][ T43] usb 4-1: config 1 has no interface number 0 [ 199.559007][ T43] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 199.645561][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.717087][ T43] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 199.758670][ T5947] usb 3-1: USB disconnect, device number 18 [ 199.914894][ T43] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 199.959142][ T43] snd_usb_pod 4-1:1.1: invalid control EP [ 199.992054][ T43] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 200.031341][ T43] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 200.038926][ T43] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 200.171293][ T2145] usb 4-1: USB disconnect, device number 17 [ 200.887046][ T5947] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 201.149184][ T5947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.201366][ T5947] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 201.210469][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.265822][ T5947] usb 5-1: config 0 descriptor?? [ 201.287577][ T5947] pwc: Askey VC010 type 2 USB webcam detected. [ 201.690755][ T5947] pwc: recv_control_msg error -32 req 02 val 2b00 [ 201.716614][ T5947] pwc: recv_control_msg error -32 req 02 val 2700 [ 201.718415][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 201.718435][ T30] audit: type=1400 audit(1752669697.326:374): avc: denied { append } for pid=8864 comm="syz.0.1130" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.746475][ T5947] pwc: recv_control_msg error -32 req 02 val 2c00 [ 201.765589][ T30] audit: type=1400 audit(1752669697.376:375): avc: denied { map } for pid=8864 comm="syz.0.1130" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.803410][ T5947] pwc: recv_control_msg error -32 req 04 val 1000 [ 201.847847][ T5947] pwc: recv_control_msg error -32 req 04 val 1300 [ 201.856000][ T30] audit: type=1400 audit(1752669697.376:376): avc: denied { execute } for pid=8864 comm="syz.0.1130" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.881012][ T5981] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 201.885640][ T8869] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1132'. [ 201.891379][ T5947] pwc: recv_control_msg error -32 req 04 val 1400 [ 201.911600][ T30] audit: type=1400 audit(1752669697.396:377): avc: denied { write } for pid=8862 comm="syz.3.1131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 201.934684][ T5947] pwc: recv_control_msg error -32 req 02 val 2000 [ 201.941941][ T5947] pwc: recv_control_msg error -32 req 02 val 2100 [ 201.970797][ T8873] syz_tun: entered allmulticast mode [ 201.978837][ T8873] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 201.987810][ T8873] mroute: pending queue full, dropping entries [ 201.999914][ T8872] syz_tun: left allmulticast mode [ 202.063374][ T5981] usb 3-1: Using ep0 maxpacket: 16 [ 202.070771][ T5981] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.089708][ T5981] usb 3-1: config 0 has no interfaces? [ 202.096992][ T5981] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 202.110225][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.131864][ T5981] usb 3-1: config 0 descriptor?? [ 202.150320][ T5947] pwc: recv_control_msg error -71 req 02 val 2500 [ 202.160523][ T5947] pwc: recv_control_msg error -71 req 02 val 2400 [ 202.179464][ T5947] pwc: recv_control_msg error -71 req 02 val 2600 [ 202.186798][ T5947] pwc: recv_control_msg error -71 req 02 val 2900 [ 202.212479][ T5947] pwc: recv_control_msg error -71 req 02 val 2800 [ 202.258752][ T5947] pwc: recv_control_msg error -71 req 04 val 1100 [ 202.272200][ T5947] pwc: recv_control_msg error -71 req 04 val 1200 [ 202.289381][ T5947] pwc: Registered as video103. [ 202.304565][ T5947] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 202.342882][ T5981] usb 3-1: USB disconnect, device number 19 [ 202.365286][ T5947] usb 5-1: USB disconnect, device number 20 [ 202.507577][ T8895] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1144'. [ 202.881184][ T30] audit: type=1400 audit(1752669698.486:378): avc: denied { ioctl } for pid=8916 comm="syz.1.1155" path="socket:[21555]" dev="sockfs" ino=21555 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.882719][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 203.062278][ T5947] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 203.122001][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 203.133524][ T10] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 203.162256][ T10] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 203.185338][ T10] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.224525][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 203.227381][ T5947] usb 1-1: Using ep0 maxpacket: 8 [ 203.234769][ T10] usb 4-1: New USB device found, idVendor=0825, idProduct=0000, bcdDevice= 0.00 [ 203.238538][ T5947] usb 1-1: unable to get BOS descriptor or descriptor too short [ 203.248091][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.262883][ T5947] usb 1-1: config index 0 descriptor too short (expected 274, got 18) [ 203.265687][ T10] usb 4-1: Product: syz [ 203.283734][ T10] usb 4-1: Manufacturer: syz [ 203.288360][ T10] usb 4-1: SerialNumber: syz [ 203.293422][ T5947] usb 1-1: config 4 interface 0 has no altsetting 0 [ 203.329971][ T5947] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 203.352936][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.383773][ T5947] usb 1-1: Product: syz [ 203.388021][ T5947] usb 1-1: Manufacturer: syz [ 203.407973][ T5947] usb 1-1: SerialNumber: syz [ 203.600136][ T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 255 proto 1 vid 0x0825 pid 0x0000 [ 203.672189][ T5947] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 203.691571][ T5947] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.702324][ T5947] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 203.709489][ T5947] usb 1-1: media controller created [ 203.742609][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.781819][ T5947] zl10353_read_register: readreg error (reg=127, ret==0) [ 203.813800][ T30] audit: type=1400 audit(1752669699.426:379): avc: denied { read write } for pid=8902 comm="syz.3.1148" name="lp0" dev="devtmpfs" ino=3070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 203.845816][ T5981] usb 4-1: USB disconnect, device number 18 [ 203.855559][ T30] audit: type=1400 audit(1752669699.426:380): avc: denied { open } for pid=8902 comm="syz.3.1148" path="/dev/usb/lp0" dev="devtmpfs" ino=3070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 203.921885][ T5947] usb 1-1: USB disconnect, device number 24 [ 204.044031][ T8902] usblp0: removed [ 204.148684][ T8957] tipc: Enabling of bearer rejected, failed to enable media [ 204.256169][ T8964] fuse: Bad value for 'group_id' [ 204.274407][ T8964] fuse: Bad value for 'group_id' [ 204.344872][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 204.955173][ T8972] syzkaller1: entered promiscuous mode [ 204.960934][ T8972] syzkaller1: entered allmulticast mode [ 204.981233][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 204.989225][ T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 204.998237][ T9] usb 5-1: config 0 has no interface number 0 [ 205.004605][ T9] usb 5-1: config 0 interface 12 has no altsetting 0 [ 205.013787][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 205.023115][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.032028][ T9] usb 5-1: Product: syz [ 205.036206][ T9] usb 5-1: Manufacturer: syz [ 205.040809][ T9] usb 5-1: SerialNumber: syz [ 205.047762][ T9] usb 5-1: config 0 descriptor?? [ 205.518760][ T8994] fuse: Bad value for 'group_id' [ 205.526416][ T8994] fuse: Bad value for 'group_id' [ 205.561503][ T5981] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 205.703626][ T9002] syzkaller1: entered promiscuous mode [ 205.709269][ T9002] syzkaller1: entered allmulticast mode [ 205.725532][ T5981] usb 3-1: Using ep0 maxpacket: 8 [ 205.734547][ T5981] usb 3-1: unable to get BOS descriptor or descriptor too short [ 205.743823][ T5981] usb 3-1: config index 0 descriptor too short (expected 274, got 18) [ 205.752503][ T5981] usb 3-1: config 4 interface 0 has no altsetting 0 [ 205.763644][ T5981] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 205.772778][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.781844][ T5981] usb 3-1: Product: syz [ 205.786058][ T5981] usb 3-1: Manufacturer: syz [ 205.790661][ T5981] usb 3-1: SerialNumber: syz [ 205.866698][ T9] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 205.879931][ T9] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 205.888320][ T9] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 205.899090][ T9] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 205.919326][ T9] usb 5-1: USB disconnect, device number 21 [ 206.015558][ T5981] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 206.031941][ T5981] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 206.042491][ T5981] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 206.049680][ T5981] usb 3-1: media controller created [ 206.081419][ T5981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.114541][ T5981] zl10353_read_register: readreg error (reg=127, ret==0) [ 206.182199][ T5981] usb 3-1: USB disconnect, device number 20 [ 206.182375][ T9010] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1194'. [ 207.346127][ T9026] fuse: Bad value for 'group_id' [ 207.351295][ T9026] fuse: Bad value for 'group_id' [ 207.777581][ T9040] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.797971][ T9040] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.911355][ T5981] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 208.011334][ T5947] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 208.064779][ T5981] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.075857][ T5981] usb 3-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.089381][ T5981] usb 3-1: config 0 interface 0 has no altsetting 0 [ 208.096685][ T5981] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 208.106496][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.117621][ T5981] usb 3-1: config 0 descriptor?? [ 208.126337][ T5981] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 208.181848][ T5947] usb 5-1: Using ep0 maxpacket: 32 [ 208.188535][ T5947] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 208.198520][ T5947] usb 5-1: config 0 has no interface number 0 [ 208.204673][ T5947] usb 5-1: config 0 interface 12 has no altsetting 0 [ 208.214481][ T5947] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 208.223707][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.233310][ T5947] usb 5-1: Product: syz [ 208.237549][ T5947] usb 5-1: Manufacturer: syz [ 208.242213][ T5947] usb 5-1: SerialNumber: syz [ 208.248754][ T5947] usb 5-1: config 0 descriptor?? [ 208.281362][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 208.411755][ T9] usb 4-1: device descriptor read/64, error -71 [ 208.651406][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 208.781410][ T9] usb 4-1: device descriptor read/64, error -71 [ 208.884121][ T9070] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1220'. [ 208.893684][ T9] usb usb4-port1: attempt power cycle [ 209.069683][ T5947] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 209.083417][ T5947] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 209.091165][ T5947] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 209.098790][ T5947] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 209.114170][ T5947] usb 5-1: USB disconnect, device number 22 [ 209.241370][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 209.263277][ T9] usb 4-1: device descriptor read/8, error -71 [ 209.501756][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 209.543039][ T9] usb 4-1: device descriptor read/8, error -71 [ 209.673875][ T9] usb usb4-port1: unable to enumerate USB device [ 210.361023][ T9096] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1232'. [ 210.591277][ T5947] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 210.651447][ T10] usb 3-1: USB disconnect, device number 21 [ 210.761846][ T5947] usb 1-1: too many configurations: 228, using maximum allowed: 8 [ 210.776863][ T5947] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 210.786621][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.794748][ T5947] usb 1-1: Product: syz [ 210.798907][ T5947] usb 1-1: Manufacturer: syz [ 210.803553][ T5947] usb 1-1: SerialNumber: syz [ 210.811819][ T43] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 210.820226][ T5947] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 210.835642][ T30] audit: type=1400 audit(1752669706.446:381): avc: denied { firmware_load } for pid=5981 comm="kworker/1:7" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 210.867366][ T5981] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 210.981478][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 210.990479][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 210.999466][ T43] usb 5-1: config index 0 descriptor too short (expected 274, got 18) [ 211.003360][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 211.007799][ T43] usb 5-1: config 4 interface 0 has no altsetting 0 [ 211.024562][ T43] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 211.033994][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.042097][ T43] usb 5-1: Product: syz [ 211.046355][ T43] usb 5-1: Manufacturer: syz [ 211.050995][ T43] usb 5-1: SerialNumber: syz [ 211.171591][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 211.195273][ T10] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 211.236774][ T10] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 211.283053][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.376225][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 211.438579][ T10] usb 3-1: config 1 has no interface number 0 [ 211.490722][ T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 211.546390][ T9] usb 1-1: USB disconnect, device number 25 [ 211.569318][ T43] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 211.573581][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.811927][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 211.972034][ T10] snd_usb_pod 3-1:1.1: set_interface failed [ 211.979588][ T43] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 212.005615][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 212.027995][ T10] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 212.038273][ T43] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 212.058473][ T43] usb 5-1: media controller created [ 212.086635][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.109199][ T10] usb 3-1: USB disconnect, device number 22 [ 212.120650][ T43] zl10353_read_register: readreg error (reg=127, ret==0) [ 212.132529][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 212.225678][ T9126] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1245'. [ 212.254368][ T43] usb 5-1: USB disconnect, device number 23 [ 212.946420][ T5981] usb 1-1: Service connection timeout for: 256 [ 212.952694][ T5981] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 212.962712][ T5981] ath9k_htc: Failed to initialize the device [ 212.973205][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 213.291952][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 213.452682][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.471227][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 213.490204][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 213.504429][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.523502][ T9] usb 1-1: config 0 descriptor?? [ 213.645215][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 213.745281][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 213.865704][ T10] usb 4-1: config 0 has no interface number 0 [ 213.931270][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 214.024016][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 214.123257][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.135494][ T9] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 214.228138][ T10] usb 4-1: Product: syz [ 214.281831][ T10] usb 4-1: Manufacturer: syz [ 214.323904][ T10] usb 4-1: SerialNumber: syz [ 214.345170][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000A/input/input12 [ 214.370645][ T10] usb 4-1: config 0 descriptor?? [ 214.480068][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.499683][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.607311][ T9] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 215.045759][ T9] usb 1-1: USB disconnect, device number 26 [ 215.150823][ T9165] fido_id[9165]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 215.228345][ T9171] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1261'. [ 215.425304][ T9181] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9181 comm=syz.2.1265 [ 215.548500][ T10] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 215.559325][ T10] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 215.568721][ T10] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 215.591059][ T10] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 215.630471][ T10] usb 4-1: USB disconnect, device number 23 [ 215.744134][ T9192] syz_tun: entered allmulticast mode [ 218.061444][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 218.076145][ T30] audit: type=1400 audit(1752669713.556:382): avc: denied { bind } for pid=9219 comm="syz.1.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 218.096605][ T5903] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 218.301487][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 218.325257][ T5903] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.381503][ T5903] usb 3-1: config 0 has no interfaces? [ 218.389895][ T5981] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 218.394107][ T5903] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 218.418505][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.433854][ T5903] usb 3-1: config 0 descriptor?? [ 218.441595][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 218.451391][ T43] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 218.459527][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 218.468807][ T9] usb 1-1: can't read configurations, error -71 [ 218.591612][ T5835] Bluetooth: hci3: command tx timeout [ 218.597318][ T5981] usb 5-1: Using ep0 maxpacket: 16 [ 218.604400][ T5981] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.614888][ T5981] usb 5-1: config 0 has no interface number 0 [ 218.623803][ T5981] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 218.633241][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.641370][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 218.647256][ T5981] usb 5-1: Product: syz [ 218.651635][ T5981] usb 5-1: Manufacturer: syz [ 218.656306][ T5981] usb 5-1: SerialNumber: syz [ 218.666520][ T43] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 218.669938][ T5903] usb 3-1: USB disconnect, device number 23 [ 218.675582][ T5981] usb 5-1: config 0 descriptor?? [ 218.692148][ T43] usb 4-1: config 0 has no interface number 0 [ 218.698601][ T43] usb 4-1: config 0 interface 12 has no altsetting 0 [ 218.713387][ T43] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 218.722967][ T5981] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 218.732855][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.740876][ T43] usb 4-1: Product: syz [ 218.747901][ T43] usb 4-1: Manufacturer: syz [ 218.756998][ T43] usb 4-1: SerialNumber: syz [ 218.772613][ T43] usb 4-1: config 0 descriptor?? [ 218.921486][ T5903] usb 5-1: USB disconnect, device number 24 [ 219.326071][ T9252] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1292'. [ 219.756596][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 219.875553][ T43] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 219.896888][ T43] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 219.906436][ T43] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 219.924299][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.929730][ T43] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 219.953615][ T43] usb 4-1: USB disconnect, device number 24 [ 219.957557][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 219.971105][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.077450][ T9] usb 1-1: config 0 descriptor?? [ 220.098210][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 220.235507][ T5835] Bluetooth: hci4: unexpected event for opcode 0x0c0d [ 220.500310][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 220.508151][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 220.515973][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 220.523544][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 220.530695][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 220.538797][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 220.555646][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 220.577264][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 220.668236][ T30] audit: type=1400 audit(1752669716.276:383): avc: denied { create } for pid=9284 comm="syz.4.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 220.689661][ T5912] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 220.698474][ T30] audit: type=1400 audit(1752669716.296:384): avc: denied { ioctl } for pid=9284 comm="syz.4.1306" path="socket:[22952]" dev="sockfs" ino=22952 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 221.650045][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 221.871652][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 222.657052][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 222.667732][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 222.674978][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 222.681925][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 222.688834][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 222.913344][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 222.921635][ T9] pwc: Registered as video103. [ 222.931240][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 222.937865][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 222.950363][ T5912] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.964539][ T9] usb 1-1: USB disconnect, device number 28 [ 222.970849][ T9294] syz_tun: entered allmulticast mode [ 222.971437][ T5912] usb 4-1: config 0 has no interface number 0 [ 222.987735][ T5912] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 222.998304][ T9294] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 223.006886][ T9294] mroute: pending queue full, dropping entries [ 223.031252][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.039335][ T5912] usb 4-1: Product: syz [ 223.063107][ T5912] usb 4-1: Manufacturer: syz [ 223.067764][ T5912] usb 4-1: SerialNumber: syz [ 223.100923][ T5912] usb 4-1: config 0 descriptor?? [ 223.108947][ T9293] syz_tun: left allmulticast mode [ 223.125569][ T5912] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 223.282352][ T30] audit: type=1400 audit(1752669718.896:385): avc: denied { connect } for pid=9302 comm="syz.2.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.327179][ T30] audit: type=1400 audit(1752669718.916:386): avc: denied { bind } for pid=9302 comm="syz.2.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.346895][ T30] audit: type=1400 audit(1752669718.916:387): avc: denied { write } for pid=9302 comm="syz.2.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.406208][ T5912] usb 4-1: USB disconnect, device number 25 [ 223.433935][ T30] audit: type=1400 audit(1752669718.916:388): avc: denied { getopt } for pid=9302 comm="syz.2.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.698908][ T9312] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 223.705461][ T9312] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 223.713388][ T9312] vhci_hcd vhci_hcd.0: Device attached [ 224.041275][ T43] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 224.140243][ T9313] vhci_hcd: connection reset by peer [ 224.155901][ T36] vhci_hcd: stop threads [ 224.160285][ T36] vhci_hcd: release socket [ 224.164975][ T36] vhci_hcd: disconnect device [ 224.276048][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.327907][ T5947] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 224.343880][ T9324] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.468101][ T9327] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 224.877259][ T5947] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.908034][ T5947] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 224.933769][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.968310][ T5947] usb 1-1: config 0 descriptor?? [ 224.987116][ T5947] pwc: Askey VC010 type 2 USB webcam detected. [ 225.069795][ T9336] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1324'. [ 225.223301][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 225.255719][ T30] audit: type=1400 audit(1752669720.866:389): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 225.672811][ T5947] pwc: recv_control_msg error -32 req 02 val 2b00 [ 225.687105][ T5947] pwc: recv_control_msg error -32 req 02 val 2700 [ 225.702783][ T5947] pwc: recv_control_msg error -32 req 02 val 2c00 [ 225.717800][ T5947] pwc: recv_control_msg error -32 req 04 val 1000 [ 225.738848][ T5947] pwc: recv_control_msg error -32 req 04 val 1300 [ 225.771398][ T5947] pwc: recv_control_msg error -32 req 04 val 1400 [ 225.801381][ T5947] pwc: recv_control_msg error -32 req 02 val 2000 [ 225.831512][ T5947] pwc: recv_control_msg error -32 req 02 val 2100 [ 226.047747][ T5947] pwc: recv_control_msg error -71 req 02 val 2500 [ 226.073643][ T5947] pwc: recv_control_msg error -71 req 02 val 2400 [ 226.099969][ T5947] pwc: recv_control_msg error -71 req 02 val 2600 [ 226.129713][ T5947] pwc: recv_control_msg error -71 req 02 val 2900 [ 226.142548][ T5947] pwc: recv_control_msg error -71 req 02 val 2800 [ 226.160089][ T5947] pwc: recv_control_msg error -71 req 04 val 1100 [ 226.167065][ T9356] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1332'. [ 226.167733][ T5947] pwc: recv_control_msg error -71 req 04 val 1200 [ 226.197408][ T5947] pwc: Registered as video103. [ 226.214387][ T5947] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 226.250237][ T5947] usb 1-1: USB disconnect, device number 29 [ 226.511250][ T5981] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 227.061324][ T5981] usb 3-1: device descriptor read/64, error -71 [ 227.113358][ T30] audit: type=1400 audit(1752669722.726:390): avc: denied { mount } for pid=9367 comm="syz.0.1336" name="/" dev="ramfs" ino=23629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 227.331283][ T5981] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 227.521517][ T5981] usb 3-1: device descriptor read/64, error -71 [ 227.692822][ T5981] usb usb3-port1: attempt power cycle [ 227.861412][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 227.994917][ T9372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 228.110548][ T5981] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 228.206356][ T5981] usb 3-1: device descriptor read/8, error -71 [ 228.491331][ T5981] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 228.523063][ T5981] usb 3-1: device descriptor read/8, error -71 [ 228.576057][ T9386] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1343'. [ 228.631456][ T5981] usb usb3-port1: unable to enumerate USB device [ 229.491626][ T43] vhci_hcd: vhci_device speed not set [ 230.163229][ T9411] overlayfs: overlapping lowerdir path [ 230.190851][ T9411] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 230.455568][ T9425] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1355'. [ 230.679048][ T9427] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.715009][ T9427] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.104700][ T9429] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.140308][ T9440] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1358'. [ 231.243934][ T9429] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.333424][ T5981] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 231.363013][ T9429] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.557743][ T5981] usb 5-1: device descriptor read/64, error -71 [ 232.401307][ T9457] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 232.407888][ T9457] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 232.415755][ T9457] vhci_hcd vhci_hcd.0: Device attached [ 232.455102][ T9429] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.574024][ T9462] vhci_hcd: connection closed [ 232.599811][ T13] vhci_hcd: stop threads [ 232.623170][ T13] vhci_hcd: release socket [ 232.628676][ T13] vhci_hcd: disconnect device [ 232.759090][ T9429] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.784972][ T9429] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.816017][ T9429] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.843558][ T9429] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.891295][ T5981] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 232.972088][ T43] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 233.031302][ T5981] usb 5-1: device descriptor read/64, error -71 [ 233.138472][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.149243][ T5981] usb usb5-port1: attempt power cycle [ 233.158621][ T43] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 233.164288][ T9477] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1373'. [ 233.168323][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 233.185115][ T43] usb 3-1: Product: syz [ 233.189297][ T43] usb 3-1: Manufacturer: syz [ 233.194013][ T43] usb 3-1: SerialNumber: syz [ 233.200122][ T43] usb 3-1: config 0 descriptor?? [ 233.591881][ T5981] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 233.622731][ T5981] usb 5-1: device descriptor read/8, error -71 [ 233.862500][ T5981] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 233.912253][ T5981] usb 5-1: device descriptor read/8, error -71 [ 234.265108][ T5981] usb usb5-port1: unable to enumerate USB device [ 234.501796][ T30] audit: type=1400 audit(1752669730.066:391): avc: denied { name_bind } for pid=9501 comm="syz.0.1380" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 234.699999][ T9504] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 234.711208][ T9504] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 234.796429][ T30] audit: type=1400 audit(1752669730.306:392): avc: denied { mounton } for pid=9499 comm="syz.4.1379" path="/272/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 234.839720][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 234.985550][ T5835] Bluetooth: hci2: command tx timeout [ 235.144321][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.300362][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 235.315895][ T9] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 235.326070][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.334441][ T9] usb 1-1: Product: syz [ 235.338643][ T9] usb 1-1: Manufacturer: syz [ 235.343921][ T9] usb 1-1: SerialNumber: syz [ 235.359609][ T9] usb 1-1: config 0 descriptor?? [ 235.366727][ T9] usb-storage 1-1:0.0: USB Mass Storage device detected [ 235.861549][ T9] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 236.214669][ T30] audit: type=1800 audit(1752669731.566:393): pid=9514 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1382" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 236.271416][ T5981] usb 3-1: USB disconnect, device number 28 [ 236.439352][ T30] audit: type=1400 audit(1752669731.576:394): avc: denied { setopt } for pid=9510 comm="syz.4.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 236.758244][ T30] audit: type=1400 audit(1752669731.586:395): avc: denied { read } for pid=9510 comm="syz.4.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 237.747778][ T30] audit: type=1400 audit(1752669733.336:396): avc: denied { read } for pid=9515 comm="syz.3.1383" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 237.791084][ T9522] Bluetooth: MGMT ver 1.23 [ 237.818729][ T9522] Bluetooth: hci0: service_discovery: too big uuid_count value 14336 [ 237.992599][ T30] audit: type=1400 audit(1752669733.336:397): avc: denied { open } for pid=9515 comm="syz.3.1383" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 238.051227][ T9] usb 1-1: USB disconnect, device number 30 [ 239.368347][ T30] audit: type=1400 audit(1752669734.956:398): avc: denied { shutdown } for pid=9537 comm="syz.3.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.411367][ T5981] libceph: connect (1)[c::]:6789 error -101 [ 239.468480][ T5981] libceph: mon0 (1)[c::]:6789 connect error [ 240.079803][ T5981] libceph: connect (1)[c::]:6789 error -101 [ 240.373078][ T5981] libceph: mon0 (1)[c::]:6789 connect error [ 240.441969][ T30] audit: type=1400 audit(1752669735.326:399): avc: denied { read } for pid=9547 comm="syz.2.1394" path="socket:[23407]" dev="sockfs" ino=23407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 240.487531][ T9542] ceph: No mds server is up or the cluster is laggy [ 240.791211][ T5947] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 241.032240][ T5947] usb 5-1: Using ep0 maxpacket: 16 [ 241.115724][ T5947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.246308][ T5947] usb 5-1: config 0 has no interfaces? [ 241.265471][ T5947] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 241.299360][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.353075][ T5947] usb 5-1: config 0 descriptor?? [ 241.581471][ T5947] usb 5-1: USB disconnect, device number 29 [ 241.587860][ T5981] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 241.756299][ T5981] usb 3-1: too many configurations: 228, using maximum allowed: 8 [ 241.774843][ T5981] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 241.784173][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.793744][ T5981] usb 3-1: Product: syz [ 241.798027][ T5981] usb 3-1: Manufacturer: syz [ 241.804048][ T5981] usb 3-1: SerialNumber: syz [ 241.918589][ T5981] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 242.007494][ T5947] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 242.437261][ T5903] usb 3-1: USB disconnect, device number 29 [ 242.541172][ T43] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 243.356120][ T5947] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 243.378314][ T5947] ath9k_htc: Failed to initialize the device [ 243.393036][ T5903] usb 3-1: ath9k_htc: USB layer deinitialized [ 243.636047][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.649031][ T43] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 243.661829][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.672849][ T43] usb 5-1: config 0 descriptor?? [ 243.980276][ T2145] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 244.252831][ T43] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 244.267584][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000B/input/input15 [ 244.791969][ T2145] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 244.803467][ T43] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 244.817415][ T2145] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.829449][ T2145] usb 4-1: Product: syz [ 244.834115][ T2145] usb 4-1: Manufacturer: syz [ 244.840204][ T43] usb 5-1: USB disconnect, device number 30 [ 244.847574][ T2145] usb 4-1: SerialNumber: syz [ 244.858592][ T2145] usb 4-1: config 0 descriptor?? [ 244.987699][ T9632] fido_id[9632]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 245.737153][ T9643] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 245.748584][ T9643] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 246.210270][ T30] audit: type=1400 audit(1752669741.656:400): avc: denied { create } for pid=9646 comm="syz.1.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 247.114662][ T2145] usb 4-1: non-Atmel transceiver xxxx08e5 [ 247.168884][ T9653] Invalid source name [ 247.177519][ T30] audit: type=1400 audit(1752669742.756:401): avc: denied { mount } for pid=9610 comm="syz.3.1418" name="/" dev="pstore" ino=1702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 247.199815][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.215925][ T30] audit: type=1400 audit(1752669742.766:402): avc: denied { mounton } for pid=9610 comm="syz.3.1418" path="/235/file0" dev="pstore" ino=1702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 247.319349][ T2145] usb 4-1: Firmware version (0.0) predates our first public release. [ 247.339614][ T2145] usb 4-1: Please update to version 0.2 or newer [ 247.356330][ T2145] usb 4-1: atusb_probe: initialization failed, error = -19 [ 247.385233][ T2145] usb 4-1: USB disconnect, device number 26 [ 247.402814][ T43] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 247.572460][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 247.588358][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.611642][ T43] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 247.623524][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.656260][ T43] usb 5-1: config 0 descriptor?? [ 247.803623][ T5835] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 247.814021][ T5835] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 247.906500][ T30] audit: type=1400 audit(1752669743.516:403): avc: denied { unmount } for pid=5991 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 248.110968][ T43] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 249.251350][ T30] audit: type=1400 audit(1752669744.456:404): avc: denied { execute } for pid=9656 comm="syz.4.1433" dev="hugetlbfs" ino=24405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 249.431979][ T30] audit: type=1400 audit(1752669744.456:405): avc: denied { execute_no_trans } for pid=9656 comm="syz.4.1433" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=24405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 249.509352][ T30] audit: type=1400 audit(1752669744.986:406): avc: denied { recv } for pid=5838 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.122 dest=45172 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 249.534966][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.610788][ T30] audit: type=1400 audit(1752669745.036:407): avc: denied { read } for pid=9680 comm="syz.2.1443" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.633411][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.665492][ T30] audit: type=1400 audit(1752669745.036:408): avc: denied { open } for pid=9680 comm="syz.2.1443" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.689478][ T30] audit: type=1400 audit(1752669745.116:409): avc: denied { create } for pid=9683 comm="syz.1.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 249.801241][ T43] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 250.534441][ T10] usb 5-1: USB disconnect, device number 31 [ 250.555371][ T5903] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 250.566732][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.619533][ T43] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 250.701504][ T5903] usb 3-1: device descriptor read/64, error -71 [ 250.719048][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.763526][ T43] usb 4-1: config 0 descriptor?? [ 251.061293][ T5903] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 251.071333][ T5947] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 251.467395][ T43] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 251.480243][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000D/input/input16 [ 251.570153][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 251.570173][ T30] audit: type=1400 audit(1752669747.176:450): avc: denied { read } for pid=5191 comm="acpid" name="event4" dev="devtmpfs" ino=3174 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.600585][ T5903] usb 3-1: device descriptor read/64, error -71 [ 251.602966][ T30] audit: type=1400 audit(1752669747.176:451): avc: denied { open } for pid=5191 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3174 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.635423][ T30] audit: type=1400 audit(1752669747.176:452): avc: denied { ioctl } for pid=5191 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3174 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.642053][ T43] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 251.704060][ T5947] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.714482][ T5947] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.731538][ T5903] usb usb3-port1: attempt power cycle [ 251.739943][ T5947] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 251.749444][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 251.757738][ T5947] usb 1-1: Product: syz [ 251.762025][ T5947] usb 1-1: Manufacturer: syz [ 251.766691][ T5947] usb 1-1: SerialNumber: syz [ 251.845424][ T5947] usb 1-1: config 0 descriptor?? [ 251.867850][ T5947] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 251.887580][ T5947] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 251.918509][ T5947] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 252.037682][ T30] audit: type=1400 audit(1752669747.646:453): avc: denied { prog_run } for pid=9721 comm="syz.1.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 252.098046][ T5947] usb 4-1: USB disconnect, device number 27 [ 252.151398][ T43] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 252.242180][ T5903] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 252.262206][ T5903] usb 3-1: device descriptor read/8, error -71 [ 252.323474][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.333781][ T43] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 252.343643][ T43] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 252.353119][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.363813][ T43] usb 5-1: config 0 descriptor?? [ 252.501509][ T5903] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 252.521789][ T5903] usb 3-1: device descriptor read/8, error -71 [ 252.631688][ T5903] usb usb3-port1: unable to enumerate USB device [ 252.652058][ T30] audit: type=1400 audit(1752669748.266:454): avc: denied { create } for pid=9725 comm="syz.3.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 252.673497][ T30] audit: type=1400 audit(1752669748.266:455): avc: denied { ioctl } for pid=9725 comm="syz.3.1460" path="socket:[24480]" dev="sockfs" ino=24480 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 252.959974][ T30] audit: type=1400 audit(1752669748.566:456): avc: denied { write } for pid=9731 comm="syz.1.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 252.965271][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1463'. [ 252.991279][ T2145] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 253.007724][ T30] audit: type=1400 audit(1752669748.616:457): avc: denied { create } for pid=9731 comm="syz.1.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 253.028281][ T30] audit: type=1400 audit(1752669748.636:458): avc: denied { ioctl } for pid=9731 comm="syz.1.1463" path="socket:[24746]" dev="sockfs" ino=24746 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 253.085307][ T30] audit: type=1400 audit(1752669748.696:459): avc: denied { sys_module } for pid=9731 comm="syz.1.1463" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 253.171233][ T2145] usb 4-1: Using ep0 maxpacket: 16 [ 253.182032][ T2145] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.195751][ T2145] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 253.205137][ T2145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.225053][ T2145] usb 4-1: config 0 descriptor?? [ 254.000887][ T2145] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 254.012223][ T5903] usb 1-1: USB disconnect, device number 31 [ 254.143215][ C1] ================================================================== [ 254.151340][ C1] BUG: KASAN: use-after-free in mcp2221_raw_event+0xf94/0x1030 [ 254.158943][ C1] Read of size 1 at addr ffff88805c903fff by task syz.0.1470/9755 [ 254.166763][ C1] [ 254.169088][ C1] CPU: 1 UID: 0 PID: 9755 Comm: syz.0.1470 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 254.169106][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.169114][ C1] Call Trace: [ 254.169119][ C1] [ 254.169125][ C1] dump_stack_lvl+0x116/0x1f0 [ 254.169156][ C1] print_report+0xcd/0x610 [ 254.169174][ C1] ? __virt_addr_valid+0x81/0x610 [ 254.169188][ C1] ? __phys_addr+0xe8/0x180 [ 254.169202][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 254.169221][ C1] kasan_report+0xe0/0x110 [ 254.169237][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 254.169256][ C1] mcp2221_raw_event+0xf94/0x1030 [ 254.169271][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 254.169287][ C1] __hid_input_report.constprop.0+0x311/0x450 [ 254.169302][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 254.169319][ C1] hid_irq_in+0x35e/0x870 [ 254.169336][ C1] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 254.169353][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 254.169368][ C1] dummy_timer+0x180e/0x3a20 [ 254.169386][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 254.169398][ C1] ? rcu_is_watching+0x12/0xc0 [ 254.169412][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 254.169426][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 254.169435][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 254.169449][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 254.169461][ C1] ? read_tsc+0x9/0x20 [ 254.169476][ C1] hrtimer_run_softirq+0x17d/0x350 [ 254.169489][ C1] handle_softirqs+0x219/0x8e0 [ 254.169503][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 254.169517][ C1] __irq_exit_rcu+0x109/0x170 [ 254.169529][ C1] irq_exit_rcu+0x9/0x30 [ 254.169541][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 254.169555][ C1] [ 254.169559][ C1] [ 254.169563][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 254.169575][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 254.169589][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 d6 8c 0d f6 48 89 df e8 be e0 0d f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 e5 02 fe f5 65 8b 05 7e d9 45 08 85 c0 74 16 5b [ 254.169600][ C1] RSP: 0018:ffffc9000c84fb30 EFLAGS: 00000246 [ 254.169609][ C1] RAX: 0000000000000002 RBX: ffff88805c5fbc58 RCX: ffffffff81c3c22f [ 254.169617][ C1] RDX: 0000000000000000 RSI: ffffffff8de32e47 RDI: ffffffff8c158f60 [ 254.169623][ C1] RBP: 0000000000000292 R08: 0000000000000001 R09: 0000000000000001 [ 254.169630][ C1] R10: ffffffff90a98757 R11: 0000000000000001 R12: ffff88801ffa4880 [ 254.169636][ C1] R13: 0000000000000bb8 R14: ffff88805c5fbc58 R15: ffff888034241500 [ 254.169645][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 254.169660][ C1] snd_rawmidi_write+0x4a4/0xc10 [ 254.169674][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 254.169684][ C1] ? __import_iovec+0x1dd/0x650 [ 254.169700][ C1] ? avc_policy_seqno+0x9/0x20 [ 254.169710][ C1] ? selinux_file_permission+0x126/0x660 [ 254.169724][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 254.169738][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 254.169748][ C1] ? security_file_permission+0x71/0x210 [ 254.169763][ C1] ? rw_verify_area+0xcf/0x680 [ 254.169776][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 254.169786][ C1] vfs_writev+0x5df/0xde0 [ 254.169801][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 254.169813][ C1] ? kmem_cache_free+0x2d1/0x4d0 [ 254.169830][ C1] ? __fget_files+0x20e/0x3c0 [ 254.169846][ C1] ? do_writev+0x28c/0x340 [ 254.169857][ C1] do_writev+0x28c/0x340 [ 254.169868][ C1] ? __pfx_do_writev+0x10/0x10 [ 254.169882][ C1] do_syscall_64+0xcd/0x4c0 [ 254.169897][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.169908][ C1] RIP: 0033:0x7fcb4898e929 [ 254.169916][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.169926][ C1] RSP: 002b:00007fcb4975a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 254.169936][ C1] RAX: ffffffffffffffda RBX: 00007fcb48bb5fa0 RCX: 00007fcb4898e929 [ 254.169943][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 254.169949][ C1] RBP: 00007fcb48a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 254.169955][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.169964][ C1] R13: 0000000000000000 R14: 00007fcb48bb5fa0 R15: 00007ffeed29ef08 [ 254.169980][ C1] [ 254.169986][ C1] [ 254.598944][ C1] The buggy address belongs to the physical page: [ 254.605331][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c903 [ 254.614074][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 254.621185][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 254.629765][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 254.638328][ C1] page dumped because: kasan: bad access detected [ 254.644722][ C1] page_owner tracks the page as freed [ 254.650066][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9421, tgid 9404 (syz.0.1349), ts 230404437986, free_ts 250235441709 [ 254.671407][ C1] post_alloc_hook+0x1c0/0x230 [ 254.676154][ C1] get_page_from_freelist+0x1321/0x3890 [ 254.681692][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 254.687564][ C1] alloc_pages_mpol+0x1fb/0x550 [ 254.692396][ C1] new_slab+0x23b/0x330 [ 254.696526][ C1] ___slab_alloc+0xd9c/0x1940 [ 254.701193][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 254.706717][ C1] kmem_cache_alloc_node_noprof+0xf5/0x3b0 [ 254.712500][ C1] kmalloc_reserve+0x18b/0x2c0 [ 254.717240][ C1] __alloc_skb+0x166/0x380 [ 254.721646][ C1] alloc_skb_with_frags+0xe0/0x860 [ 254.726758][ C1] sock_alloc_send_pskb+0x7fb/0x990 [ 254.731964][ C1] __ip_append_data+0x21c6/0x4240 [ 254.736978][ C1] ip_make_skb+0x27f/0x300 [ 254.741396][ C1] udp_sendmsg+0x18b4/0x29f0 [ 254.745968][ C1] inet_sendmsg+0x105/0x140 [ 254.750450][ C1] page last free pid 5903 tgid 5903 stack trace: [ 254.756750][ C1] __free_frozen_pages+0x7fe/0x1180 [ 254.761947][ C1] __put_partials+0x16d/0x1c0 [ 254.766601][ C1] qlist_free_all+0x4d/0x120 [ 254.771172][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 254.776606][ C1] __kasan_slab_alloc+0x69/0x90 [ 254.781436][ C1] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 254.786791][ C1] usb_control_msg+0xbc/0x4a0 [ 254.791443][ C1] hub_ext_port_status+0x14e/0x670 [ 254.796532][ C1] hub_port_reset+0xad2/0x1cb0 [ 254.801277][ C1] hub_port_init+0x1f6/0x3a70 [ 254.805938][ C1] hub_event+0x2c67/0x4fa0 [ 254.810334][ C1] process_one_work+0x9cf/0x1b70 [ 254.815425][ C1] worker_thread+0x6c8/0xf10 [ 254.819992][ C1] kthread+0x3c5/0x780 [ 254.824063][ C1] ret_from_fork+0x5d7/0x6f0 [ 254.828661][ C1] ret_from_fork_asm+0x1a/0x30 [ 254.833420][ C1] [ 254.835737][ C1] Memory state around the buggy address: [ 254.841349][ C1] ffff88805c903e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 254.849387][ C1] ffff88805c903f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 254.857438][ C1] >ffff88805c903f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 254.865483][ C1] ^ [ 254.873442][ C1] ffff88805c904000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 254.881477][ C1] ffff88805c904080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 254.889513][ C1] ================================================================== [ 254.897580][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 254.897598][ C1] CPU: 1 UID: 0 PID: 9755 Comm: syz.0.1470 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 254.897622][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.897633][ C1] Call Trace: [ 254.897639][ C1] [ 254.897647][ C1] dump_stack_lvl+0x3d/0x1f0 [ 254.897675][ C1] panic+0x71c/0x800 [ 254.897702][ C1] ? __pfx_panic+0x10/0x10 [ 254.897727][ C1] ? __pfx__printk+0x10/0x10 [ 254.897745][ C1] ? end_report+0x4c/0x170 [ 254.897770][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 254.897796][ C1] check_panic_on_warn+0xab/0xb0 [ 254.897812][ C1] end_report+0x107/0x170 [ 254.897834][ C1] kasan_report+0xee/0x110 [ 254.897858][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 254.897885][ C1] mcp2221_raw_event+0xf94/0x1030 [ 254.897910][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 254.897935][ C1] __hid_input_report.constprop.0+0x311/0x450 [ 254.897958][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 254.897984][ C1] hid_irq_in+0x35e/0x870 [ 254.898013][ C1] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 254.898039][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 254.898069][ C1] dummy_timer+0x180e/0x3a20 [ 254.898098][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 254.898113][ C1] ? rcu_is_watching+0x12/0xc0 [ 254.898136][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 254.898158][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 254.898172][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 254.898199][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 254.898218][ C1] ? read_tsc+0x9/0x20 [ 254.898242][ C1] hrtimer_run_softirq+0x17d/0x350 [ 254.898263][ C1] handle_softirqs+0x219/0x8e0 [ 254.898286][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 254.898308][ C1] __irq_exit_rcu+0x109/0x170 [ 254.898327][ C1] irq_exit_rcu+0x9/0x30 [ 254.898346][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 254.898369][ C1] [ 254.898375][ C1] [ 254.898381][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 254.898400][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 254.898423][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 d6 8c 0d f6 48 89 df e8 be e0 0d f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 e5 02 fe f5 65 8b 05 7e d9 45 08 85 c0 74 16 5b [ 254.898440][ C1] RSP: 0018:ffffc9000c84fb30 EFLAGS: 00000246 [ 254.898456][ C1] RAX: 0000000000000002 RBX: ffff88805c5fbc58 RCX: ffffffff81c3c22f [ 254.898467][ C1] RDX: 0000000000000000 RSI: ffffffff8de32e47 RDI: ffffffff8c158f60 [ 254.898479][ C1] RBP: 0000000000000292 R08: 0000000000000001 R09: 0000000000000001 [ 254.898489][ C1] R10: ffffffff90a98757 R11: 0000000000000001 R12: ffff88801ffa4880 [ 254.898500][ C1] R13: 0000000000000bb8 R14: ffff88805c5fbc58 R15: ffff888034241500 [ 254.898515][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 254.898538][ C1] snd_rawmidi_write+0x4a4/0xc10 [ 254.898561][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 254.898578][ C1] ? __import_iovec+0x1dd/0x650 [ 254.898602][ C1] ? avc_policy_seqno+0x9/0x20 [ 254.898618][ C1] ? selinux_file_permission+0x126/0x660 [ 254.898640][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 254.898663][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 254.898679][ C1] ? security_file_permission+0x71/0x210 [ 254.898703][ C1] ? rw_verify_area+0xcf/0x680 [ 254.898723][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 254.898740][ C1] vfs_writev+0x5df/0xde0 [ 254.898762][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 254.898782][ C1] ? kmem_cache_free+0x2d1/0x4d0 [ 254.898809][ C1] ? __fget_files+0x20e/0x3c0 [ 254.898834][ C1] ? do_writev+0x28c/0x340 [ 254.898851][ C1] do_writev+0x28c/0x340 [ 254.898870][ C1] ? __pfx_do_writev+0x10/0x10 [ 254.898892][ C1] do_syscall_64+0xcd/0x4c0 [ 254.898917][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.898933][ C1] RIP: 0033:0x7fcb4898e929 [ 254.898948][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.898963][ C1] RSP: 002b:00007fcb4975a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 254.898980][ C1] RAX: ffffffffffffffda RBX: 00007fcb48bb5fa0 RCX: 00007fcb4898e929 [ 254.898991][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 254.899002][ C1] RBP: 00007fcb48a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 254.899012][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.899023][ C1] R13: 0000000000000000 R14: 00007fcb48bb5fa0 R15: 00007ffeed29ef08 [ 254.899040][ C1] [ 254.905034][ C1] Kernel Offset: disabled