last executing test programs: 7m58.684379078s ago: executing program 0 (id=3029): r0 = semget$private(0x0, 0x8, 0xa) semop(r0, &(0x7f0000000140)=[{0x3, 0x3, 0x1000}, {0x2, 0x2, 0x800}, {0x2, 0x1, 0x800}, {0x1, 0xfff9, 0x1000}], 0x4) semop(r0, &(0x7f0000000380)=[{0x1, 0x7}], 0x1) 7m58.584297525s ago: executing program 0 (id=3030): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x0, 0x0, 0x0, 0xfffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x4, 0x4d35a72f, 0x0, 0x0, 0x0, 0xfffff7ffffffffff, 0x0, 0x40}, {0x2cf, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0, 0x0, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x2, 0x0, {0x5, 0x4, 0x3, 0x26, 0x9, 0x64, 0x93e7, 0xf6, 0x6, 0x5, @rand_addr=0x64010102, @private=0xa010102}}}}}}, 0x0) 7m58.462245569s ago: executing program 0 (id=3033): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe01000000000000", 0x1c) 7m58.409662618s ago: executing program 0 (id=3034): r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) 7m58.344770685s ago: executing program 0 (id=3035): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 7m58.305459968s ago: executing program 0 (id=3036): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) fsopen(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, 0x0) 7m42.972716824s ago: executing program 32 (id=3036): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) fsopen(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, 0x0) 1m45.577628401s ago: executing program 1 (id=9630): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="ec4969ce12aee5cbcb87448d7b8d39e591f0817d13f230e3603631a855802b483c", 0x21}], 0x1}}], 0x1, 0x20000800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000067c000/0x4000)=nil, &(0x7f0000711000/0x4000)=nil, &(0x7f0000044000/0x3000)=nil, &(0x7f0000553000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000e3000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1m45.524108867s ago: executing program 1 (id=9632): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0xb, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) 1m45.014970184s ago: executing program 1 (id=9643): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="02010000080000000000000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x48c0) 1m44.852879681s ago: executing program 1 (id=9648): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) umount2(&(0x7f0000000180)='./file0/../file0\x00', 0x4) 1m44.759459908s ago: executing program 1 (id=9652): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x0, "eea2c615f073cfc7b867a8f1eae374992b05d96de4fee85d3648ec884824c0fa", "dad132180b5c87e3c4ce5aace7bd878f", {"bfb382e7c4f35588608b6b77d4179781", "5c1eec4feb340aa2a2dfcc3569d1153d"}}}}}}}, 0x0) 1m44.074190964s ago: executing program 1 (id=9660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)) 1m43.712221578s ago: executing program 33 (id=9660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)) 1m6.825768915s ago: executing program 2 (id=10221): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a3100000000050001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x20004010) 1m6.673238277s ago: executing program 2 (id=10226): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001040)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x100000a, @local, 0x4}, 0x1c, &(0x7f0000002280)=[{&(0x7f0000001680)="1a", 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0x23c, @private2}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000001180)='\f', 0x1}], 0x1}}], 0x2, 0x931766f6159e6d55) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x4, 0x3}, &(0x7f00000002c0)=0x90) 1m6.425700298s ago: executing program 2 (id=10232): socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 1m6.334391355s ago: executing program 2 (id=10234): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m6.203855555s ago: executing program 2 (id=10236): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f00000003c0)='1\x00\x00\x00', 0x4, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d34", 0x5, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, 0x0) 1m5.502186407s ago: executing program 2 (id=10249): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000001600)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000016c0), r2) 1m5.317848452s ago: executing program 34 (id=10249): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000001600)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000016c0), r2) 53.414045833s ago: executing program 5 (id=10447): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 52.88546046s ago: executing program 5 (id=10459): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) fstat(r1, 0x0) 52.774612562s ago: executing program 5 (id=10461): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x6, 0x7, {0x7, 0x23, "3d91419da5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 50.802669996s ago: executing program 5 (id=10499): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xe0443, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xd553, 0xfffffff8, 0x201, 0x2007, 0x8, "d206476a94f3902707f67f8de40100"}) 50.606490678s ago: executing program 5 (id=10504): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 50.495480098s ago: executing program 5 (id=10506): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000100)={&(0x7f0000000500)=@canfd={{}, 0xff, 0x1, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b2947b81f0e3c8973fc2af287fa10b9126ea28baed9b57d82ab23db557c307ae88dad8c925a00"}, 0x48}, 0x2, 0x0, 0x0, 0x4105}, 0x4011) 35.341610103s ago: executing program 35 (id=10506): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000100)={&(0x7f0000000500)=@canfd={{}, 0xff, 0x1, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b2947b81f0e3c8973fc2af287fa10b9126ea28baed9b57d82ab23db557c307ae88dad8c925a00"}, 0x48}, 0x2, 0x0, 0x0, 0x4105}, 0x4011) 5.816150152s ago: executing program 8 (id=11041): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) 5.114987157s ago: executing program 8 (id=11054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x13) 4.755468823s ago: executing program 8 (id=11058): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @broadcast}}) 3.849425362s ago: executing program 6 (id=11071): syz_open_dev$video4linux(&(0x7f0000000000), 0xe45f, 0x109000) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x80000000, "65544000000000000000debd97c000", 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3.6508328s ago: executing program 8 (id=11075): ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000997aa910c6250290ba41010203010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3, 0x6, 0x5b, 0x20, 0x93a, 0x260e, 0xe573, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe, 0x0, 0x0, 0x38, 0x5a, 0x57}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 3.550521034s ago: executing program 6 (id=11076): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.519999517s ago: executing program 6 (id=11077): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffdfff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000640)={0x1}) 3.434032048s ago: executing program 6 (id=11079): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) 3.232602098s ago: executing program 6 (id=11082): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40000000}) syz_usb_disconnect(r0) 2.398683233s ago: executing program 7 (id=11087): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 1.486135863s ago: executing program 7 (id=11100): r0 = inotify_init1(0x800) close(r0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x5411, 0xfffffffffffffffa) 1.34551128s ago: executing program 6 (id=11102): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a4610000000109021200010000"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) 1.344128059s ago: executing program 7 (id=11103): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.239934652s ago: executing program 7 (id=11106): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="a6", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) 1.111714346s ago: executing program 7 (id=11108): r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x8) dup3(r1, r0, 0x80000) finit_module(r1, 0x0, 0x0) 1.105977455s ago: executing program 8 (id=11109): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 882.303399ms ago: executing program 7 (id=11111): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x40) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 771.815392ms ago: executing program 8 (id=11114): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) 501.910791ms ago: executing program 3 (id=11116): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000002000000000000000000085000000360000009500"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[], 0x0) 350.234203ms ago: executing program 3 (id=11117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_vmscan_write_folio\x00', r0, 0x0, 0x100000001}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_vmscan_write_folio\x00', r1, 0x0, 0x100000001}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 337.44908ms ago: executing program 3 (id=11119): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x55) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8002}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 310.088866ms ago: executing program 4 (id=11120): r0 = socket$unix(0x1, 0x1, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r1, 0xffffffffffffffff, 0xee00) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=0xc) keyctl$chown(0x4, r1, r2, 0x0) 236.245713ms ago: executing program 3 (id=11121): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3, 0x0, 0x0, 0x2}, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000280)={{0x3, 0x4}, 0x0, 0x98, 0xfffffff2, {0x7, 0x17}, 0x40, 0x6}) 235.10684ms ago: executing program 4 (id=11122): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000030100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"], 0x114}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 203.504217ms ago: executing program 4 (id=11123): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x37b) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) shutdown(r0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x832308415e7c5548}], 0x1, 0x0, 0x0, 0xfffffe96) 159.749344ms ago: executing program 4 (id=11124): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a31000000002c000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000140000001100010000000000000000006a"], 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b00)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000003c0)=0x6, r1, 0x0, 0x0, 0x1}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 109.147138ms ago: executing program 4 (id=11125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x930, 0x51}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x10) 65.298714ms ago: executing program 3 (id=11126): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000ac0)={r1, 0xd0}, &(0x7f0000000b00)=0x8) listen(r0, 0x2) 52.780046ms ago: executing program 4 (id=11127): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x10000000}) 0s ago: executing program 3 (id=11128): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x80102, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3, 0x400, 0x0, 0x2111}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x9c6b, 0x2f, 0x0, 0x0) 0s ago: executing program 3 (id=11129): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) kernel console output (not intermixed with test programs): T9142] usb 5-1: Manufacturer: syz [ 611.134748][ T9142] usb 5-1: SerialNumber: syz [ 611.147158][ T9142] usb 5-1: config 0 descriptor?? [ 611.381758][ T9142] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 611.407557][ T9142] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 611.427672][ T9142] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 611.446902][ T9142] usb 5-1: media controller created [ 611.484049][ T9142] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 611.633697][ T8641] bond1 (unregistering): Released all slaves [ 611.815970][ T8712] sit0: Caught tx_queue_len zero misconfig [ 611.845370][ T8712] netem: change failed [ 612.374698][ T5891] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 612.544825][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 612.552120][ T5891] usb 4-1: config 0 interface 0 has no altsetting 0 [ 612.555739][ T9142] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 612.570562][ T5891] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 612.582830][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.591338][ T5891] usb 4-1: Product: syz [ 612.596896][ T5891] usb 4-1: Manufacturer: syz [ 612.602155][ T5891] usb 4-1: SerialNumber: syz [ 612.610197][ T5891] usb 4-1: config 0 descriptor?? [ 612.624813][ T9142] usb 5-1: USB disconnect, device number 104 [ 612.843815][ T8760] netlink: 'syz.5.9811': attribute type 6 has an invalid length. [ 613.035657][ T5891] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 613.444129][ T5891] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 613.475926][ T5891] usb 4-1: USB disconnect, device number 91 [ 613.817552][ T8836] loop6: detected capacity change from 0 to 524288000 [ 613.845623][ T8836] loop6: detected capacity change from 524288000 to 0 [ 614.090818][ T8851] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9839'. [ 614.484890][ T5891] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 614.588973][ T8870] netlink: 'syz.5.9847': attribute type 2 has an invalid length. [ 614.598624][ T8870] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9847'. [ 614.607995][ T8870] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 614.664849][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 614.676276][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 614.688543][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 614.714097][ T5891] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 614.763308][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 614.782945][ T5891] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 614.811624][ T5891] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 614.831241][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.839524][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9844'. [ 614.861973][ T5891] usb 5-1: config 0 descriptor?? [ 614.897163][ T5134] Bluetooth: hci2: urb ffff888046f0a100 submission failed (90) [ 615.142554][ T9142] usb 5-1: USB disconnect, device number 105 [ 615.544452][ T8941] CIFS mount error: No usable UNC path provided in device string! [ 615.544452][ T8941] [ 615.575702][ T8941] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 615.595533][ T5891] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 615.750481][ T5891] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 615.769965][ T5891] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 615.795649][ T5891] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 615.811904][ T5891] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 615.821183][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 615.829530][ T5891] usb 6-1: Product: syz [ 615.833799][ T5891] usb 6-1: Manufacturer: syz [ 615.840661][ T5891] usb 6-1: SerialNumber: syz [ 616.060573][ T5891] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 83 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 616.181411][ T30] audit: type=1400 audit(2000004347.481:2125): avc: denied { name_bind 0x1000000 } for pid=8966 comm="syz.3.9876" path="socket:[99210]" dev="sockfs" ino=99210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 616.265160][ T5891] usb 6-1: USB disconnect, device number 83 [ 616.302361][ T5891] usblp0: removed [ 616.391754][ T8988] 8021q: adding VLAN 0 to HW filter on device bond2 [ 616.408333][ T8988] bond0: (slave bond2): Enslaving as an active interface with an up link [ 616.575896][ T8979] SELinux: failed to load policy [ 616.699198][ T9035] ip6tnl0: Caught tx_queue_len zero misconfig [ 617.002350][ T5891] hid-generic 0000:0000:0000.00B7: unknown main item tag 0x0 [ 617.025565][ T5891] hid-generic 0000:0000:0000.00B7: unknown main item tag 0x0 [ 617.052306][ T5891] hid-generic 0000:0000:0000.00B7: unknown main item tag 0x0 [ 617.071897][ T5891] hid-generic 0000:0000:0000.00B7: unknown main item tag 0x0 [ 617.085061][ T5891] hid-generic 0000:0000:0000.00B7: unknown main item tag 0x0 [ 617.096583][ T5891] hid-generic 0000:0000:0000.00B7: unknown main item tag 0x0 [ 617.105733][ T5891] hid-generic 0000:0000:0000.00B7: unknown main item tag 0x0 [ 617.116601][ T5891] hid-generic 0000:0000:0000.00B7: unknown main item tag 0x0 [ 617.124090][ T5891] hid-generic 0000:0000:0000.00B7: unknown main item tag 0x0 [ 617.132634][ T5891] hid-generic 0000:0000:0000.00B7: unknown main item tag 0x0 [ 617.145524][ T5891] hid-generic 0000:0000:0000.00B7: hidraw0: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 617.145524][ T5891] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 617.174279][ T9066] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9902'. [ 617.211785][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9903'. [ 617.238759][ T9070] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9903'. [ 617.260427][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9903'. [ 617.280687][ T9070] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9903'. [ 617.453063][ T5890] kernel write not supported for file /uinput (pid: 5890 comm: kworker/1:5) [ 617.672653][ T9100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9916'. [ 617.964662][ T5890] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 618.114410][ T30] audit: type=1400 audit(2000004349.411:2126): avc: denied { lock } for pid=9130 comm="syz.2.9928" path="/2052/file0" dev="tmpfs" ino=10416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 618.137964][ T5890] usb 7-1: Using ep0 maxpacket: 32 [ 618.158695][ T5890] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 618.186352][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.205180][ T30] audit: type=1400 audit(2000004349.461:2127): avc: denied { append } for pid=9127 comm="syz.5.9927" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 618.232130][ T5890] usb 7-1: config 0 descriptor?? [ 618.273657][ T9137] xt_hashlimit: max too large, truncated to 1048576 [ 618.291190][ T9137] xt_limit: Overflow, try lower: 0/0 [ 618.372803][ T30] audit: type=1400 audit(2000004349.671:2128): avc: denied { map } for pid=9144 comm="syz.5.9932" path="socket:[101550]" dev="sockfs" ino=101550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 618.444721][ T30] audit: type=1400 audit(2000004349.671:2129): avc: denied { setopt } for pid=9144 comm="syz.5.9932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 618.471924][ T5890] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 618.480617][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9934'. [ 618.497920][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 618.536102][ T5890] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 618.543289][ T5890] usb 7-1: media controller created [ 618.589360][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 618.685467][ T5890] az6027: usb out operation failed. (-71) [ 618.699292][ T5890] az6027: usb out operation failed. (-71) [ 618.712928][ T5890] stb0899_attach: Driver disabled by Kconfig [ 618.728004][ T5890] az6027: no front-end attached [ 618.728004][ T5890] [ 618.739963][ T5890] az6027: usb out operation failed. (-71) [ 618.747565][ T5890] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 618.769521][ T5890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input111 [ 618.784147][ T5890] dvb-usb: schedule remote query interval to 400 msecs. [ 618.791494][ T5890] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 618.803863][ T5890] usb 7-1: USB disconnect, device number 2 [ 618.853940][ T5890] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 618.889068][ T9188] netlink: 'syz.2.9942': attribute type 4 has an invalid length. [ 619.540604][ T7748] cgroup: fork rejected by pids controller in /syz6 [ 619.676921][ T9232] __nla_validate_parse: 1 callbacks suppressed [ 619.676941][ T9232] netlink: 108 bytes leftover after parsing attributes in process `syz.5.9961'. [ 620.203040][ T1145] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.345742][ T1145] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.543372][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 620.545406][ T1145] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.569579][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 620.579893][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 620.588824][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 620.596710][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 620.796378][ T1145] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.219785][ T1145] bridge_slave_1: left allmulticast mode [ 621.231243][ T1145] bridge_slave_1: left promiscuous mode [ 621.259039][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.468838][ T1145] bridge_slave_0: left allmulticast mode [ 621.474530][ T1145] bridge_slave_0: left promiscuous mode [ 621.484854][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.835264][ T2349] IPVS: ip_vs_send_async error -101 [ 622.191030][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.201485][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.211307][ T1145] bond0 (unregistering): Released all slaves [ 622.222889][ T9271] chnl_net:caif_netlink_parms(): no params data found [ 622.347993][ T9469] bond0: Removing last ns target with arp_interval on [ 622.351065][ T13] bond0: (slave bond_slave_1): interface is now down [ 622.364191][ T9142] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 622.429335][ T175] bond0: (slave bond_slave_1): interface is now down [ 622.484824][ T3931] bond0: (slave bond_slave_1): interface is now down [ 622.543933][ T9142] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 622.554950][ T175] bond0: (slave bond_slave_1): interface is now down [ 622.557788][ T9142] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.581519][ T9142] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 622.598608][ T9142] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 622.609859][ T9142] usb 6-1: Manufacturer: syz [ 622.614768][ T175] bond0: (slave bond_slave_1): interface is now down [ 622.622557][ T9142] usb 6-1: config 0 descriptor?? [ 622.643572][ T5816] Bluetooth: hci1: command tx timeout [ 622.674201][ T9271] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.687302][ T9142] rc_core: IR keymap rc-hauppauge not found [ 622.693232][ T9142] Registered IR keymap rc-empty [ 622.699252][ T175] bond0: (slave bond_slave_1): interface is now down [ 622.705561][ T9271] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.709651][ T9142] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 622.713286][ T9271] bridge_slave_0: entered allmulticast mode [ 622.726781][ T9142] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input112 [ 622.731340][ T9271] bridge_slave_0: entered promiscuous mode [ 622.755492][ T1156] bond0: (slave bond_slave_1): interface is now down [ 622.767239][ T9525] netlink: 'syz.4.10006': attribute type 4 has an invalid length. [ 622.786698][ T9271] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.807928][ T3931] bond0: (slave bond_slave_1): interface is now down [ 622.811103][ T9271] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.822120][ T9271] bridge_slave_1: entered allmulticast mode [ 622.833348][ T9271] bridge_slave_1: entered promiscuous mode [ 622.894855][ T9386] bond0: (slave bond_slave_1): interface is now down [ 622.915575][ T1145] hsr_slave_0: left promiscuous mode [ 622.932125][ T1145] hsr_slave_1: left promiscuous mode [ 622.945246][ T9386] bond0: (slave bond_slave_1): interface is now down [ 622.952563][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 622.959891][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.971565][ T9142] usb 6-1: USB disconnect, device number 84 [ 622.979866][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.994785][ T9386] bond0: (slave bond_slave_1): interface is now down [ 623.006527][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.014974][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.054292][ T1145] veth1_macvtap: left promiscuous mode [ 623.060388][ T1145] veth0_macvtap: left promiscuous mode [ 623.066065][ T36] bond0: (slave bond_slave_1): interface is now down [ 623.066845][ T1145] veth1_vlan: left promiscuous mode [ 623.079081][ T1145] veth0_vlan: left promiscuous mode [ 623.115980][ T3931] bond0: (slave bond_slave_1): interface is now down [ 623.152706][ T9565] netlink: 'syz.2.10015': attribute type 8 has an invalid length. [ 623.174934][ T3931] bond0: (slave bond_slave_1): interface is now down [ 623.234709][ T36] bond0: (slave bond_slave_1): interface is now down [ 623.285639][ T1156] bond0: (slave bond_slave_1): interface is now down [ 623.344707][ T1156] bond0: (slave bond_slave_1): interface is now down [ 623.424668][ T1156] bond0: (slave bond_slave_1): interface is now down [ 623.475678][ T1156] bond0: (slave bond_slave_1): interface is now down [ 623.524683][ T9386] bond0: (slave bond_slave_1): interface is now down [ 623.590374][ T9386] bond0: (slave bond_slave_1): interface is now down [ 623.647225][ T9386] bond0: (slave bond_slave_1): interface is now down [ 623.717249][ T1156] bond0: (slave bond_slave_1): interface is now down [ 623.794884][ T1156] bond0: (slave bond_slave_1): interface is now down [ 623.844772][ T9386] bond0: (slave bond_slave_1): interface is now down [ 623.897414][ T9386] bond0: (slave bond_slave_1): interface is now down [ 623.949294][ T1156] bond0: (slave bond_slave_1): interface is now down [ 624.004695][ T1156] bond0: (slave bond_slave_1): interface is now down [ 624.023369][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 624.080941][ T9386] bond0: (slave bond_slave_1): interface is now down [ 624.090811][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.114291][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 624.136625][ T3931] bond0: (slave bond_slave_1): interface is now down [ 624.195345][ T13] bond0: (slave bond_slave_1): interface is now down [ 624.254986][ T13] bond0: (slave bond_slave_1): interface is now down [ 624.314696][ T13] bond0: (slave bond_slave_1): interface is now down [ 624.401417][T18537] bond0: (slave bond_slave_1): interface is now down [ 624.472790][T18537] bond0: (slave bond_slave_1): interface is now down [ 624.528077][T18537] bond0: (slave bond_slave_1): interface is now down [ 624.592022][T18537] bond0: (slave bond_slave_1): interface is now down [ 624.644856][ T13] wlan1: Trigger new scan to find an IBSS to join [ 624.655434][ T13] bond0: (slave bond_slave_1): interface is now down [ 624.724843][ T5816] Bluetooth: hci1: command tx timeout [ 624.730266][ T1156] bond0: (slave bond_slave_1): interface is now down [ 624.790480][T18537] bond0: (slave bond_slave_1): interface is now down [ 624.846025][T18537] bond0: (slave bond_slave_1): interface is now down [ 624.897873][ T1156] bond0: (slave bond_slave_1): interface is now down [ 624.954794][ T1156] bond0: (slave bond_slave_1): interface is now down [ 625.019614][ T6094] bond0: (slave bond_slave_1): interface is now down [ 625.043676][ T9271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.075552][T18537] bond0: (slave bond_slave_1): interface is now down [ 625.091810][ T9271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.151014][T18537] bond0: now running without any active interface! [ 625.227793][ T9630] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1048580, id = 0 [ 625.272322][ T9271] team0: Port device team_slave_0 added [ 625.298233][ T9271] team0: Port device team_slave_1 added [ 625.433979][ T9271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.467963][ T9271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.499353][ T30] audit: type=1400 audit(2000004356.801:2130): avc: denied { setopt } for pid=9659 comm="syz.3.10030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 625.523489][ T9271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.541277][ T9271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.548427][ T9271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.577729][ T9271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.706863][ T9271] hsr_slave_0: entered promiscuous mode [ 625.713258][ T9271] hsr_slave_1: entered promiscuous mode [ 625.733505][ T9271] debugfs: 'hsr0' already exists in 'hsr' [ 625.742854][ T9271] Cannot create hsr debugfs directory [ 625.764798][ T9717] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10035'. [ 626.462845][ T5890] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 626.529921][ T9271] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 626.539608][ T9271] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 626.549120][ T9271] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 626.559455][ T9271] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 626.566685][T26779] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 626.626467][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.632503][ T9271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.647298][ T5890] usb 4-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 626.656762][ T9271] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.666506][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.677824][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.684975][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.696134][ T5890] usb 4-1: config 0 descriptor?? [ 626.702733][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.709915][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.731203][T26779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 626.746132][T26779] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 626.747298][ T4853] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 626.774958][T26779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.788966][T26779] usb 3-1: Product: syz [ 626.793230][T26779] usb 3-1: Manufacturer: syz [ 626.798274][ T5816] Bluetooth: hci1: command tx timeout [ 626.803997][T26779] usb 3-1: SerialNumber: syz [ 626.811152][T26779] usb 3-1: config 0 descriptor?? [ 626.907960][ T4853] usb 5-1: Using ep0 maxpacket: 32 [ 626.926080][ T4853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.949031][ T4853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.960630][ T4853] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 626.970556][ T4853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.986801][ T4853] usb 5-1: config 0 descriptor?? [ 627.024520][ T9271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.117136][ T5890] hid_parser_main: 6 callbacks suppressed [ 627.117158][ T5890] cherry 0003:046A:0023.00B8: unknown main item tag 0x7 [ 627.130487][ T5890] cherry 0003:046A:0023.00B8: unknown main item tag 0x0 [ 627.137789][ T5890] cherry 0003:046A:0023.00B8: unknown main item tag 0x0 [ 627.152882][ T5890] cherry 0003:046A:0023.00B8: hidraw0: USB HID v0.00 Device [HID 046a:0023] on usb-dummy_hcd.3-1/input0 [ 627.239715][ T9271] veth0_vlan: entered promiscuous mode [ 627.260126][ T9271] veth1_vlan: entered promiscuous mode [ 627.267905][T26779] usb 3-1: USB disconnect, device number 107 [ 627.300108][ T9271] veth0_macvtap: entered promiscuous mode [ 627.309715][ T9271] veth1_macvtap: entered promiscuous mode [ 627.333240][ T9271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.338069][ T5891] usb 4-1: USB disconnect, device number 92 [ 627.351838][ T9271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.369493][ T1145] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.380687][ T1145] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.390910][ T1145] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.409122][ T1145] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.418391][ T4853] logitech 0003:046D:C29C.00B9: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 627.514038][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.535034][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.567056][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.575416][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.609374][ T4853] logitech 0003:046D:C29C.00B9: no inputs found [ 627.637890][ T4853] usb 5-1: USB disconnect, device number 106 [ 627.849003][ T30] audit: type=1400 audit(2000004359.161:2131): avc: denied { create } for pid=9953 comm="syz.6.10062" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1 [ 627.871033][ T30] audit: type=1400 audit(2000004359.171:2132): avc: denied { create } for pid=9953 comm="syz.6.10062" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 628.017340][ T9965] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10067'. [ 628.033375][ T9965] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10067'. [ 628.074731][ T9965] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10067'. [ 628.084872][ T9965] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10067'. [ 628.535056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 628.579499][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10086'. [ 628.814733][ T4853] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 628.874843][ T5816] Bluetooth: hci1: command tx timeout [ 628.974627][ T4853] usb 5-1: Using ep0 maxpacket: 8 [ 629.227738][ T5870] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 629.270585][ T4853] usb 5-1: config index 0 descriptor too short (expected 30482, got 18) [ 629.284650][ T4853] usb 5-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 629.293987][ T4853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 629.306368][ T4853] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 629.316257][ T4853] usb 5-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 629.325267][ T4853] usb 5-1: Product: syz [ 629.329553][ T4853] usb 5-1: Manufacturer: syz [ 629.346302][ T4853] usb 5-1: config 0 descriptor?? [ 629.356267][ T4853] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 629.372459][T10039] vcan0: tx address claim with dlc 0 [ 629.375049][ T4853] usb 5-1: Detected FT2232C/D [ 629.404815][ T5870] usb 6-1: Using ep0 maxpacket: 32 [ 629.421309][ T5870] usb 6-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 629.442252][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.465030][ T5870] usb 6-1: Product: syz [ 629.469280][ T5870] usb 6-1: Manufacturer: syz [ 629.473910][ T5870] usb 6-1: SerialNumber: syz [ 629.504266][ T5870] usb 6-1: config 0 descriptor?? [ 629.597875][ T68] wlan1: Trigger new scan to find an IBSS to join [ 629.733583][ T5870] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 629.759088][ T4853] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 629.774871][ T4853] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 629.786980][ T4853] usb 5-1: USB disconnect, device number 107 [ 629.795917][ T4853] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 629.807740][ T4853] ftdi_sio 5-1:0.0: device disconnected [ 629.950436][ T9919] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 629.958295][ T5877] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 630.118762][ T9919] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.130366][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.140408][ T9919] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 630.149611][ T5877] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 630.159247][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.170628][ T9919] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 630.182879][ T9919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 630.192335][ T5877] usb 4-1: config 0 descriptor?? [ 630.197816][ T9919] usb 7-1: SerialNumber: syz [ 630.336299][T10129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10112'. [ 630.346071][T10129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10112'. [ 630.364812][ T5870] usb 6-1: reset high-speed USB device number 85 using dummy_hcd [ 630.424526][ T9919] usb 7-1: 0:2 : does not exist [ 630.429557][ T9919] usb 7-1: unit 255 not found! [ 630.453106][ T9919] usb 7-1: USB disconnect, device number 3 [ 630.512614][ T3446] wlan1: Creating new IBSS network, BSSID 1e:f6:3a:6e:03:0d [ 630.613514][ T5877] logitech-djreceiver 0003:046D:C71F.00BA: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 630.738967][ T5870] usb 6-1: [UEAGLE-ATM] interface 1 not found [ 630.748149][ T5870] ueagle-atm 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 630.812937][ T5891] usb 4-1: USB disconnect, device number 93 [ 630.942070][ T5870] usb 6-1: USB disconnect, device number 85 [ 631.315760][T10201] batadv_slave_1: entered promiscuous mode [ 631.322832][T10201] batadv_slave_1: left promiscuous mode [ 631.355386][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10126'. [ 631.639428][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10136'. [ 631.804699][ T5955] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 631.857639][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10140'. [ 631.960440][ T5955] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 631.972483][ T5955] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 631.984354][ T5955] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 632.006543][ T30] audit: type=1400 audit(2000004363.311:2133): avc: denied { read } for pid=10241 comm="syz.4.10142" path="socket:[103130]" dev="sockfs" ino=103130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 632.008165][ T5955] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 632.071331][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.089728][ T5955] usb 7-1: Product: syz [ 632.099810][ T5955] usb 7-1: Manufacturer: syz [ 632.109907][ T5955] usb 7-1: SerialNumber: syz [ 632.122605][ T5955] usb 7-1: config 0 descriptor?? [ 632.137277][T10219] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 632.147960][T10219] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 632.169561][ T5955] usb 7-1: ucan: probing device on interface #0 [ 632.785128][ T5955] ucan 7-1:0.0: probe with driver ucan failed with error -22 [ 632.853270][T10283] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10157'. [ 633.017227][ T5870] usb 7-1: USB disconnect, device number 4 [ 633.214810][T10305] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10164'. [ 634.428216][ T30] audit: type=1400 audit(2000004365.731:2134): avc: denied { mounton } for pid=10349 comm="syz.5.10182" path="/" dev="tmpfs" ino=6589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 634.534669][ T5870] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 634.706679][ T5870] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 634.721288][ T5870] usb 3-1: config 0 has no interface number 0 [ 634.730242][ T5870] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 634.740635][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.748916][ T5870] usb 3-1: Product: syz [ 634.758984][ T5870] usb 3-1: Manufacturer: syz [ 634.773576][ T5870] usb 3-1: SerialNumber: syz [ 634.793245][ T5870] usb 3-1: config 0 descriptor?? [ 634.833687][ T5870] kobil_sct 3-1:0.148: required endpoints missing [ 635.057685][T10343] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10180'. [ 635.070442][ T5870] usb 3-1: USB disconnect, device number 108 [ 635.254804][ T5955] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 635.424769][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 635.432585][ T5955] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 635.448442][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.467143][ T5955] usb 5-1: config 0 descriptor?? [ 635.621810][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10205'. [ 635.681323][ T5955] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 635.690674][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 635.704944][ T5955] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 635.712127][ T5955] usb 5-1: media controller created [ 635.731055][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 635.891952][ T5955] az6027: usb out operation failed. (-71) [ 635.923121][ T5955] az6027: usb out operation failed. (-71) [ 635.954729][ T5955] stb0899_attach: Driver disabled by Kconfig [ 635.960827][ T5955] az6027: no front-end attached [ 635.960827][ T5955] [ 635.969762][ T5955] az6027: usb out operation failed. (-71) [ 635.975876][ T5955] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 635.984725][ T5955] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input114 [ 635.999994][ T5955] dvb-usb: schedule remote query interval to 400 msecs. [ 636.008202][ T5955] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 636.034931][ T5955] usb 5-1: USB disconnect, device number 108 [ 636.124408][ T5955] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 636.386454][T10483] sp0: Synchronizing with TNC [ 636.399439][T10480] sp0: Found TNC [ 636.678100][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10219'. [ 636.699298][T10495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10219'. [ 636.840706][T10500] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10221'. [ 637.518985][T10536] netlink: 21 bytes leftover after parsing attributes in process `syz.5.10237'. [ 638.324827][ T4853] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 638.443598][ T5134] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 638.458149][ T5134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 638.468604][ T5134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 638.481829][ T5134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 638.489571][ T5134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 638.496765][ T4853] usb 6-1: Using ep0 maxpacket: 16 [ 638.507906][ T4853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.534304][ T4853] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 638.551326][ T4853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.572245][ T4853] usb 6-1: config 0 descriptor?? [ 638.830112][ T30] audit: type=1400 audit(2000004370.131:2135): avc: denied { ioctl } for pid=10700 comm="syz.3.10262" path="socket:[105479]" dev="sockfs" ino=105479 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 638.871104][T10583] chnl_net:caif_netlink_parms(): no params data found [ 638.999325][T10726] Bluetooth: hci2: Frame reassembly failed (-84) [ 639.021018][ T4853] mcp2221 0003:04D8:00DD.00BB: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 639.074135][T10583] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.081942][T10583] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.090147][T10583] bridge_slave_0: entered allmulticast mode [ 639.097896][T10583] bridge_slave_0: entered promiscuous mode [ 639.116274][T10583] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.123528][T10583] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.132150][T10583] bridge_slave_1: entered allmulticast mode [ 639.140229][T10583] bridge_slave_1: entered promiscuous mode [ 639.189581][T10583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.225746][T10583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.326474][T10583] team0: Port device team_slave_0 added [ 639.339182][T10583] team0: Port device team_slave_1 added [ 639.419398][T10583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.433277][T10583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.479434][ T9919] usb 6-1: USB disconnect, device number 86 [ 639.523345][T10583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.539625][T10583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.546995][T10583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.575107][T10583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.647882][T10583] hsr_slave_0: entered promiscuous mode [ 639.655616][T10583] hsr_slave_1: entered promiscuous mode [ 639.662044][T10583] debugfs: 'hsr0' already exists in 'hsr' [ 639.668619][T10583] Cannot create hsr debugfs directory [ 639.755626][ T4853] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 639.853791][T10966] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10274'. [ 639.920528][ T4853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 639.932382][ T4853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14660, setting to 64 [ 639.956830][ T4853] usb 7-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 639.966485][ T4853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.968656][T10583] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 639.987344][ T4853] usb 7-1: config 0 descriptor?? [ 639.990185][T10583] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 639.995521][T10864] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 640.036103][T10583] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 640.050182][T10583] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 640.202223][T10583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.230716][T10583] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.254395][ T3931] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.261626][ T3931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.280204][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.287446][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.324911][ T9919] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 640.441665][ T4853] cypress 0003:04B4:DE64.00BC: item fetching failed at offset 0/3 [ 640.455574][ T4853] cypress 0003:04B4:DE64.00BC: parse failed [ 640.474706][ T4853] cypress 0003:04B4:DE64.00BC: probe with driver cypress failed with error -22 [ 640.485909][ T9919] usb 6-1: Using ep0 maxpacket: 8 [ 640.493465][ T30] audit: type=1400 audit(2000004371.791:2136): avc: denied { append } for pid=11009 comm="syz.4.10283" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 640.523001][ T9919] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 640.533171][ T9919] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 640.544285][ T9919] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 640.554880][ T9919] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 640.568261][ T5134] Bluetooth: hci0: command tx timeout [ 640.577030][ T9919] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 640.586131][ T9919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.607659][T10583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.638561][ T5918] usb 7-1: USB disconnect, device number 5 [ 640.809258][ T9919] usb 6-1: GET_CAPABILITIES returned 0 [ 640.816557][ T9919] usbtmc 6-1:16.0: can't read capabilities [ 640.911798][T10583] veth0_vlan: entered promiscuous mode [ 640.928878][T10583] veth1_vlan: entered promiscuous mode [ 640.962723][T10583] veth0_macvtap: entered promiscuous mode [ 640.971834][T10583] veth1_macvtap: entered promiscuous mode [ 640.989261][T10583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.002138][T10583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.027289][ T9919] usb 6-1: USB disconnect, device number 87 [ 641.034744][ T5134] Bluetooth: hci2: command 0x1003 tx timeout [ 641.035479][ T5816] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 641.046553][ T9386] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.066941][ T9386] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.075811][ T9386] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.123279][ T9386] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.279685][ T30] audit: type=1326 audit(2000004372.581:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11067 comm="syz.6.10292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18fa38f749 code=0x7ffc0000 [ 641.283927][ T6094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.344760][ T6094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.354481][ T30] audit: type=1326 audit(2000004372.611:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11067 comm="syz.6.10292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18fa38f749 code=0x7ffc0000 [ 641.406967][T13656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.420311][T13656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.448696][ T30] audit: type=1326 audit(2000004372.621:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11067 comm="syz.6.10292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18fa38f749 code=0x7ffc0000 [ 641.521918][ T30] audit: type=1326 audit(2000004372.621:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11067 comm="syz.6.10292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18fa38f749 code=0x7ffc0000 [ 641.571529][ T30] audit: type=1326 audit(2000004372.621:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11067 comm="syz.6.10292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f18fa38f749 code=0x7ffc0000 [ 641.630194][ T30] audit: type=1326 audit(2000004372.621:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11067 comm="syz.6.10292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18fa38f749 code=0x7ffc0000 [ 641.690203][ T30] audit: type=1326 audit(2000004372.621:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11067 comm="syz.6.10292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f18fa38f749 code=0x7ffc0000 [ 641.786350][ T30] audit: type=1326 audit(2000004372.621:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11067 comm="syz.6.10292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18fa38f749 code=0x7ffc0000 [ 641.939008][T11100] erspan0: entered promiscuous mode [ 642.444818][T11121] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 642.451381][T11121] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 642.461283][T11121] vhci_hcd vhci_hcd.0: Device attached [ 642.530510][T11121] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 642.537064][T11121] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 642.594654][T11121] vhci_hcd vhci_hcd.0: Device attached [ 642.631580][T11121] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 642.638183][T11121] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 642.646870][ T9919] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 642.677469][ T5816] Bluetooth: hci0: command tx timeout [ 642.724900][ T9919] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 642.734525][T11121] vhci_hcd vhci_hcd.0: Device attached [ 642.752821][T11132] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 642.759451][T11132] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 642.805488][T11132] vhci_hcd vhci_hcd.0: Device attached [ 642.832734][T11133] vhci_hcd: connection closed [ 642.833401][T11122] vhci_hcd: connection reset by peer [ 642.844214][ T6094] vhci_hcd vhci_hcd.4: stop threads [ 642.849560][ T6094] vhci_hcd vhci_hcd.4: release socket [ 642.855986][T11130] vhci_hcd: connection closed [ 642.862988][T11126] vhci_hcd: connection closed [ 642.864815][ T6094] vhci_hcd vhci_hcd.4: disconnect device [ 642.922296][ T6094] vhci_hcd vhci_hcd.4: stop threads [ 642.939730][ T6094] vhci_hcd vhci_hcd.4: release socket [ 642.965295][ T6094] vhci_hcd vhci_hcd.4: disconnect device [ 642.984940][ T6094] vhci_hcd vhci_hcd.4: stop threads [ 642.990250][ T6094] vhci_hcd vhci_hcd.4: release socket [ 643.011125][ T6094] vhci_hcd vhci_hcd.4: disconnect device [ 643.027912][ T6094] vhci_hcd vhci_hcd.4: stop threads [ 643.033162][ T6094] vhci_hcd vhci_hcd.4: release socket [ 643.055554][ T6094] vhci_hcd vhci_hcd.4: disconnect device [ 643.138434][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10318'. [ 643.944777][ T4853] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 644.036124][ T5870] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 644.104763][ T4853] usb 7-1: Using ep0 maxpacket: 32 [ 644.111845][ T4853] usb 7-1: config index 0 descriptor too short (expected 6683, got 27) [ 644.120369][ T4853] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 644.128764][ T4853] usb 7-1: config 0 has no interface number 0 [ 644.135405][ T4853] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 644.146507][ T4853] usb 7-1: config 0 interface 85 has no altsetting 0 [ 644.155283][ T4853] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 644.164352][ T4853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.172580][ T4853] usb 7-1: Product: syz [ 644.177052][ T4853] usb 7-1: Manufacturer: syz [ 644.181654][ T4853] usb 7-1: SerialNumber: syz [ 644.188025][ T4853] usb 7-1: config 0 descriptor?? [ 644.194651][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 644.201384][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.212628][ T5870] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 644.221770][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.232711][ T5870] usb 4-1: config 0 descriptor?? [ 644.650540][ T5870] mcp2221 0003:04D8:00DD.00BD: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 644.716219][ T5816] Bluetooth: hci0: command tx timeout [ 644.806171][ T4853] appletouch 7-1:0.85: Geyser mode initialized. [ 644.813700][ T4853] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input115 [ 644.855777][ T2014] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 645.023366][ T4853] usb 7-1: USB disconnect, device number 6 [ 645.030374][ T2014] usb 6-1: Using ep0 maxpacket: 8 [ 645.043447][ T2014] usb 6-1: config 0 has an invalid interface number: 56 but max is 0 [ 645.052825][ T4853] appletouch 7-1:0.85: input: appletouch disconnected [ 645.060151][ T2014] usb 6-1: config 0 has no interface number 0 [ 645.070018][ T5955] usb 4-1: USB disconnect, device number 94 [ 645.071910][ T2014] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 645.087899][ T2014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.096218][ T2014] usb 6-1: Product: syz [ 645.100407][ T2014] usb 6-1: Manufacturer: syz [ 645.105629][ T2014] usb 6-1: SerialNumber: syz [ 645.112511][ T2014] usb 6-1: config 0 descriptor?? [ 645.119612][ T2014] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 645.127620][ T2014] pctv452e: pctv452e_power_ctrl: 1 [ 645.127620][ T2014] [ 645.135724][ T2014] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 645.135724][ T2014] [ 645.146330][ T2014] dvb-usb: bulk message failed: -22 (5/0) [ 645.153750][ T2014] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 645.164356][ T2014] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 645.172878][ T2014] usb 6-1: media controller created [ 645.178282][ T2014] dvb-usb: bulk message failed: -22 (8/0) [ 645.184001][ T2014] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 645.192148][ T2014] dvb-usb: MAC address reading failed. [ 645.205628][ T2014] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 645.245737][ T2014] DVB: Unable to find symbol stb0899_attach() [ 645.251837][ T2014] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 645.314677][ T2014] rc_core: IR keymap rc-tt-1500 not found [ 645.320466][ T2014] Registered IR keymap rc-empty [ 645.326978][ T2014] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 645.340800][ T2014] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input116 [ 645.352496][ T2014] dvb-usb: schedule remote query interval to 100 msecs. [ 645.360619][ T2014] pctv452e: pctv452e_power_ctrl: 0 [ 645.360619][ T2014] [ 645.368469][ T2014] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 645.380849][ T2014] usb 6-1: USB disconnect, device number 88 [ 645.402414][ T2014] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 645.573335][T11286] CIFS: VFS: Malformed UNC in devname [ 646.064680][ T5955] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 646.224645][ T5955] usb 7-1: Using ep0 maxpacket: 16 [ 646.231655][ T5955] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.254700][ T5955] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.274647][ T5955] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 646.283729][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.317102][ T5955] usb 7-1: config 0 descriptor?? [ 646.732473][ T5955] hid-multitouch 0003:1FD2:6007.00BE: unknown main item tag 0x6 [ 646.742171][ T5955] hid-multitouch 0003:1FD2:6007.00BE: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 646.794959][ T5816] Bluetooth: hci0: command tx timeout [ 646.877458][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 646.877474][ T30] audit: type=1326 audit(2000004378.171:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.7.10369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd14418f749 code=0x0 [ 646.941822][ T2014] usb 7-1: USB disconnect, device number 7 [ 647.104922][ T4853] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 647.142192][T11391] blkio.reset_stats is deprecated [ 647.254755][ T4853] usb 4-1: Using ep0 maxpacket: 8 [ 647.261401][ T4853] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 647.274127][ T4853] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 647.284689][ T4853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.297918][ T4853] hub 4-1:32.0: bad descriptor, ignoring hub [ 647.304115][ T4853] hub 4-1:32.0: probe with driver hub failed with error -5 [ 647.675995][ T4853] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 647.800204][ T2014] usb 4-1: reset high-speed USB device number 95 using dummy_hcd [ 647.837072][ T4853] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 647.847347][ T4853] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 647.861298][ T4853] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 647.879718][ T4853] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 647.898412][ T4853] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 647.910514][ T9919] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 647.919913][ T4853] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 647.930084][ T4853] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 647.940779][ T4853] usb 6-1: Product: syz [ 647.945078][ T4853] usb 6-1: Manufacturer: syz [ 647.958488][ T4853] cdc_wdm 6-1:1.0: skipping garbage [ 647.966272][ T4853] cdc_wdm 6-1:1.0: skipping garbage [ 647.983919][ T4853] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 648.001657][ T4853] cdc_wdm 6-1:1.0: Unknown control protocol [ 648.116238][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10397'. [ 648.155195][T11462] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10399'. [ 648.192878][ T5816] block nbd2: Receive control failed (result -32) [ 648.201760][ T2014] usb 6-1: USB disconnect, device number 89 [ 648.504039][ T30] audit: type=1326 audit(2000004379.801:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11490 comm="syz.7.10408" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd14418f749 code=0x0 [ 648.817633][ T30] audit: type=1400 audit(2000004380.121:2161): avc: denied { ioctl } for pid=11513 comm="syz.3.10414" path="socket:[106685]" dev="sockfs" ino=106685 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 648.884908][ T5955] usb 4-1: USB disconnect, device number 95 [ 649.038399][ T5955] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 649.204768][ T5955] usb 5-1: Using ep0 maxpacket: 16 [ 649.223321][ T5955] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.250015][ T5955] usb 5-1: config 0 interface 0 has no altsetting 0 [ 649.260860][ T5955] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 649.270228][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.281997][ T5955] usb 5-1: config 0 descriptor?? [ 649.343061][ T30] audit: type=1400 audit(2000004380.641:2162): avc: denied { getopt } for pid=11551 comm="syz.3.10427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 649.375034][T11553] tmpfs: Invalid uid '0x00000000ffffffff' [ 649.738601][ T5955] cougar 0003:060B:500A.00BF: unexpected long global item [ 649.762165][ T5955] cougar 0003:060B:500A.00BF: parse failed [ 649.778908][ T5955] cougar 0003:060B:500A.00BF: probe with driver cougar failed with error -22 [ 649.914852][ T4853] usb 5-1: USB disconnect, device number 109 [ 650.276411][ T5955] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 650.455907][ T5955] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 650.482162][ T5955] usb 4-1: config 0 has no interfaces? [ 650.495863][ T5955] usb 4-1: config 0 has no interfaces? [ 650.507153][ T5955] usb 4-1: config 0 has no interfaces? [ 650.519174][ T5955] usb 4-1: config 0 has no interfaces? [ 650.536499][ T5955] usb 4-1: config 0 has no interfaces? [ 650.551729][ T5955] usb 4-1: config 0 has no interfaces? [ 650.561612][ T5955] usb 4-1: config 0 has no interfaces? [ 650.569518][ T5955] usb 4-1: config 0 has no interfaces? [ 650.587078][ T5955] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 650.614689][ T5955] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 650.632728][ T5955] usb 4-1: Product: syz [ 650.641618][ T5955] usb 4-1: Manufacturer: syz [ 650.650507][ T5955] usb 4-1: SerialNumber: syz [ 650.660896][ T5955] usb 4-1: config 0 descriptor?? [ 650.754808][ T30] audit: type=1400 audit(2000004382.051:2163): avc: denied { getattr } for pid=11642 comm="syz.5.10459" path="socket:[106935]" dev="sockfs" ino=106935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 651.074962][ T5955] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 651.239200][ T5955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.264687][ T5955] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 651.273783][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.289320][ T9] usb 4-1: USB disconnect, device number 96 [ 651.305506][ T5955] usb 6-1: config 0 descriptor?? [ 651.553481][T11685] netlink: 54759 bytes leftover after parsing attributes in process `syz.4.10471'. [ 651.576765][T11687] netlink: 80 bytes leftover after parsing attributes in process `syz.7.10472'. [ 651.595007][T11687] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 651.652154][ T30] audit: type=1400 audit(2000004382.951:2164): avc: denied { bind } for pid=11690 comm="syz.4.10474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 651.749594][ T5955] steelseries 0003:1038:12B6.00C0: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.5-1/input0 [ 651.859076][ T30] audit: type=1800 audit(2000004383.161:2165): pid=11706 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.10479" name="bus" dev="tmpfs" ino=11221 res=0 errno=0 [ 651.882684][ T30] audit: type=1804 audit(2000004383.181:2166): pid=11706 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm=6C2586CE36DB0CCF197CC94F7FCE8F name="/newroot/2210/bus" dev="tmpfs" ino=11221 res=1 errno=0 [ 652.101365][T11725] overlayfs: invalid origin (0000) [ 652.199682][ T5955] usb 6-1: USB disconnect, device number 90 [ 652.680468][T11767] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 652.723610][ T30] audit: type=1400 audit(2000004384.021:2167): avc: denied { relabelto } for pid=11766 comm="syz.4.10497" name="2078" dev="tmpfs" ino=10491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 652.820390][ T30] audit: type=1400 audit(2000004384.021:2168): avc: denied { associate } for pid=11766 comm="syz.4.10497" name="2078" dev="tmpfs" ino=10491 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 652.883123][T11778] ptrace attach of "./syz-executor exec"[9271] was attempted by "./syz-executor exec"[11778] [ 652.895914][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10500'. [ 652.896916][ T30] audit: type=1400 audit(2000004384.101:2169): avc: denied { remove_name } for pid=5819 comm="syz-executor" name="binderfs" dev="tmpfs" ino=10495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 652.968401][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10500'. [ 652.986750][ T30] audit: type=1400 audit(2000004384.111:2170): avc: denied { rmdir } for pid=5819 comm="syz-executor" name="2078" dev="tmpfs" ino=10491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 653.205925][ T30] audit: type=1400 audit(2000004384.501:2171): avc: denied { listen } for pid=11791 comm="syz.6.10507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 654.581474][T11834] serio: Serial port ptm0 [ 654.952321][T11852] overlayfs: missing 'workdir' [ 655.074983][ T1207] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 655.240549][ T1207] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 655.255002][ T1207] usb 7-1: config 0 has no interface number 0 [ 655.271381][ T1207] usb 7-1: config 0 interface 41 has no altsetting 0 [ 655.289951][ T1207] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 655.308069][ T1207] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.325293][ T1207] usb 7-1: Product: syz [ 655.334199][ T1207] usb 7-1: Manufacturer: syz [ 655.347598][ T1207] usb 7-1: SerialNumber: syz [ 655.367576][ T1207] usb 7-1: config 0 descriptor?? [ 655.465806][ T2014] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 655.637112][ T2014] usb 5-1: unable to get BOS descriptor or descriptor too short [ 655.649374][ T2014] usb 5-1: not running at top speed; connect to a high speed hub [ 655.681294][ T2014] usb 5-1: config 2 has an invalid interface number: 96 but max is 0 [ 655.696617][ T2014] usb 5-1: config 2 has no interface number 0 [ 655.702741][ T2014] usb 5-1: config 2 interface 96 has no altsetting 0 [ 655.714115][ T2014] usb 5-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=59.b1 [ 655.735106][ T2014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.743150][ T2014] usb 5-1: Product: syz [ 655.765013][ T2014] usb 5-1: Manufacturer: syz [ 655.769691][ T2014] usb 5-1: SerialNumber: syz [ 656.011337][ T2014] mos7840 5-1:2.96: required endpoints missing [ 656.030260][ T2014] usb 5-1: USB disconnect, device number 110 [ 656.190664][ T1207] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 656.206589][ T1207] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 656.221790][ T1207] usb 7-1: USB disconnect, device number 8 [ 656.470884][T11908] Bluetooth: MGMT ver 1.23 [ 656.634147][T11914] batadv_slave_1: entered promiscuous mode [ 656.646139][T11913] batadv_slave_1: left promiscuous mode [ 656.954755][ T1207] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 656.979014][T11930] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10554'. [ 657.127187][ T1207] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.153117][ T1207] usb 5-1: config 0 has no interfaces? [ 657.173749][ T1207] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 657.193984][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.203691][T11941] erspan0: entered promiscuous mode [ 657.216503][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10558'. [ 657.234174][ T1207] usb 5-1: config 0 descriptor?? [ 657.314913][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 657.363227][T11947] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 657.475306][ T1207] usb 5-1: USB disconnect, device number 111 [ 657.484932][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 657.494726][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.525162][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.544636][ T9] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 657.569171][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 657.584664][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 657.603957][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.630462][ T9] usb 4-1: config 0 descriptor?? [ 658.072506][ T9] hid (null): nested delimiters [ 658.089471][ T9] hid (null): nested delimiters [ 658.094365][ T9] hid (null): nested delimiters [ 658.247621][T12009] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 658.255048][T12009] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 658.287076][ T4853] usb 4-1: USB disconnect, device number 97 [ 658.392190][ T30] audit: type=1400 audit(2000004389.691:2172): avc: denied { module_load } for pid=12020 comm="syz.6.10572" path="/122/bus" dev="tmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 658.417545][T12021] Invalid ELF header magic: != ELF [ 658.744788][ T4853] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 658.901071][ T4853] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 658.915329][T12039] netlink: 'syz.3.10576': attribute type 1 has an invalid length. [ 658.923269][ T4853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.932460][ T4853] usb 7-1: Product: syz [ 658.936867][ T4853] usb 7-1: Manufacturer: syz [ 658.941543][ T4853] usb 7-1: SerialNumber: syz [ 658.949870][ T4853] usb 7-1: config 0 descriptor?? [ 658.958637][ T4853] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 009 [ 659.377550][ T4853] (null): failure reading functionality [ 659.415435][ T4853] i2c i2c-1: connected i2c-tiny-usb device [ 659.443798][T12051] sp0: Synchronizing with TNC [ 659.628902][ T4853] usb 7-1: USB disconnect, device number 9 [ 660.052556][T12100] netlink: zone id is out of range [ 660.081702][T12100] netlink: zone id is out of range [ 660.091826][T12100] netlink: zone id is out of range [ 660.097703][T12096] netlink: set zone limit has 4 unknown bytes [ 660.103911][T12100] netlink: zone id is out of range [ 660.110824][T12100] netlink: zone id is out of range [ 660.804763][ T4853] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 660.834825][ T2014] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 660.977158][ T4853] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 660.987225][ T4853] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 661.004831][ T4853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 661.016943][ T2014] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 661.034700][ T2014] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 661.054027][ T4853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 661.061418][ T2014] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 661.075220][ T4853] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 661.094420][ T4853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 661.105667][ T2014] usb 7-1: config 220 has no interface number 2 [ 661.111966][ T2014] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 661.126322][ T4853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 661.134108][ T2014] usb 7-1: config 220 interface 0 has no altsetting 0 [ 661.141273][ T2014] usb 7-1: config 220 interface 76 has no altsetting 0 [ 661.149258][ T2014] usb 7-1: config 220 interface 1 has no altsetting 0 [ 661.156279][ T4853] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 661.165472][ T4853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 661.176688][ T4853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 661.184789][ T4853] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 661.193878][ T4853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 661.207456][ T4853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 661.216290][ T4853] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 661.225406][ T2014] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 661.235665][ T4853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 661.246840][ T2014] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.264661][ T4853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 661.271465][ T2014] usb 7-1: Product: syz [ 661.281633][ T2014] usb 7-1: Manufacturer: syz [ 661.286424][ T2014] usb 7-1: SerialNumber: syz [ 661.292287][ T4853] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 661.302028][ T4853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 661.317737][ T4853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 661.327114][ T4853] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 661.336282][ T4853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 661.348653][ T4853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 661.357459][ T4853] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 661.369847][ T4853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 661.381403][ T4853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 661.392195][ T4853] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 661.402940][ T4853] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 661.411496][ T4853] usb 4-1: Product: syz [ 661.416061][ T4853] usb 4-1: Manufacturer: syz [ 661.420801][ T4853] usb 4-1: SerialNumber: syz [ 661.447554][ T4853] usb 4-1: config 0 descriptor?? [ 661.463236][ T4853] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 661.527987][ T2014] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 661.546645][ T2014] uvcvideo 7-1:220.0: No valid video chain found. [ 661.553912][ T2014] usb 7-1: selecting invalid altsetting 0 [ 661.589516][ T2014] usb 7-1: selecting invalid altsetting 0 [ 661.605756][ T2014] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 661.618580][T12166] input: syz1 as /devices/virtual/input/input117 [ 661.627551][ T2014] usb 7-1: USB disconnect, device number 10 [ 661.677338][ T1207] usb 4-1: USB disconnect, device number 98 [ 661.700532][ T1207] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 662.932784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 663.065865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 663.067032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 663.646140][T12253] binder_alloc: binder_alloc_mmap_handler: 12250 200000ffc000-200000fff000 already mapped failed -16 [ 663.870062][T12269] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 663.971797][ T30] audit: type=1400 audit(2000004395.271:2173): avc: denied { setopt } for pid=12270 comm="syz.4.10630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 664.206231][ T4853] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 664.364679][ T4853] usb 4-1: Using ep0 maxpacket: 32 [ 664.376498][ T4853] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 664.400420][ T4853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.436347][ T4853] usb 4-1: config 0 descriptor?? [ 664.458029][ T4853] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 664.907158][T12299] netlink: 'syz.4.10641': attribute type 1 has an invalid length. [ 664.915664][T12299] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10641'. [ 665.137585][T12312] [U] [ 665.141320][T12312] [U] [ 665.144038][T12312] [U] [ 665.146739][T12312] [U] [ 665.150578][T12312] [U] [ 665.153307][T12312] [U] [ 665.156067][T12312] [U] [ 665.158773][T12312] [U] [ 665.162214][T12312] [U] [ 665.164938][T12312] [U] [ 665.167631][T12312] [U] [ 665.170415][T12312] [U] [ 665.173332][T12312] [U] [ 665.176031][T12312] [U] [ 665.178728][T12312] [U] [ 665.181426][T12312] [U] [ 665.184516][T12312] [U] [ 665.187224][T12312] [U] [ 665.189923][T12312] [U] [ 665.192626][T12312] [U] [ 665.195794][T12312] [U] [ 665.198507][T12312] [U] [ 665.201204][T12312] [U] [ 665.203904][T12312] [U] [ 665.218229][T12312] [U] [ 665.220979][T12312] [U] [ 665.223683][T12312] [U] [ 665.226387][T12312] [U] [ 665.232347][T12312] [U] [ 665.235086][T12312] [U] [ 665.237786][T12312] [U] [ 665.240483][T12312] [U] [ 665.244230][T12312] [U] [ 665.246943][T12312] [U] [ 665.249634][T12312] [U] [ 665.252332][T12312] [U] [ 665.255375][T12312] [U] [ 665.258079][T12312] [U] [ 665.260773][T12312] [U] [ 665.263467][T12312] [U] [ 665.266993][T12312] [U] [ 665.269715][T12312] [U] [ 665.272414][T12312] [U] [ 665.275117][T12312] [U] [ 665.278705][T12312] [U] [ 665.281425][T12312] [U] [ 665.284210][T12312] [U] [ 665.286906][T12312] [U] [ 665.290850][T12312] [U] [ 665.293572][T12312] [U] [ 665.296295][T12312] [U] [ 665.299007][T12312] [U] [ 665.326166][T12312] [U] [ 665.328907][T12312] [U] [ 665.331617][T12312] [U] [ 665.334320][T12312] [U] [ 665.339963][T12312] [U] [ 665.342692][T12312] [U] [ 665.345391][T12312] [U] [ 665.348086][T12312] [U] [ 665.352655][T12312] [U] [ 665.355369][T12312] [U] [ 665.358067][T12312] [U] [ 665.360761][T12312] [U] [ 665.386076][T12312] [U] [ 665.388809][T12312] [U] [ 665.391510][T12312] [U] [ 665.394208][T12312] [U] [ 665.397196][T12312] [U] [ 665.399900][T12312] [U] [ 665.402596][T12312] [U] [ 665.405300][T12312] [U] [ 665.408227][T12312] [U] [ 665.410931][T12312] [U] [ 665.413625][T12312] [U] [ 665.416314][T12312] [U] [ 665.420445][T12312] [U] [ 665.423156][T12312] [U] [ 665.425853][T12312] [U] [ 665.428545][T12312] [U] [ 665.431733][T12312] [U] [ 665.434442][T12312] [U] [ 665.437140][T12312] [U] [ 665.439834][T12312] [U] [ 665.446673][T12312] [U] [ 665.449392][T12312] [U] [ 665.452098][T12312] [U] [ 665.454788][T12312] [U] [ 665.457729][T12312] [U] [ 665.460440][T12312] [U] [ 665.463140][T12312] [U] [ 665.465832][T12312] [U] [ 665.469241][T12312] [U] [ 665.471951][T12312] [U] [ 665.474649][T12312] [U] [ 665.474969][ T4853] gspca_vc032x: reg_w err -71 [ 665.477330][T12312] [U] [ 665.484028][ T4853] gspca_vc032x: I2c Bus Busy Wait 00 [ 665.485408][T12312] [U] [ 665.489927][ T4853] gspca_vc032x: I2c Bus Busy Wait 00 [ 665.492602][T12312] [U] [ 665.492631][T12312] [U] [ 665.492656][T12312] [U] [ 665.506235][T12312] [U] [ 665.508937][T12312] [U] [ 665.511634][T12312] [U] [ 665.514322][T12312] [U] [ 665.527141][ T4853] gspca_vc032x: I2c Bus Busy Wait 00 [ 665.542797][ T4853] gspca_vc032x: I2c Bus Busy Wait 00 [ 665.552932][ T4853] gspca_vc032x: I2c Bus Busy Wait 00 [ 665.555665][T12312] [U] [ 665.560941][T12312] [U] [ 665.563054][ T4853] gspca_vc032x: I2c Bus Busy Wait 00 [ 665.563625][T12312] [U] [ 665.571619][T12312] [U] [ 665.573191][ T4853] gspca_vc032x: I2c Bus Busy Wait 00 [ 665.578383][T12312] [U] [ 665.582249][T12312] [U] [ 665.584949][T12312] [U] [ 665.587643][T12312] [U] [ 665.590660][ T4853] gspca_vc032x: I2c Bus Busy Wait 00 [ 665.591077][T12312] [U] [ 665.598638][T12312] [U] [ 665.601333][T12312] [U] [ 665.604026][T12312] [U] [ 665.604625][ T4853] gspca_vc032x: I2c Bus Busy Wait 00 [ 665.608019][T12312] [U] [ 665.614671][T12312] [U] [ 665.617368][T12312] [U] [ 665.620066][T12312] [U] [ 665.622274][ T4853] gspca_vc032x: I2c Bus Busy Wait 00 [ 665.625025][T12312] [U] [ 665.630759][T12312] [U] [ 665.633459][T12312] [U] [ 665.634601][ T4853] gspca_vc032x: I2c Bus Busy Wait 00 [ 665.636149][T12312] [U] [ 665.642149][ T4853] gspca_vc032x: I2c Bus Busy Wait 00 [ 665.650552][T12312] [U] [ 665.653275][T12312] [U] [ 665.655971][T12312] [U] [ 665.670650][ T4853] gspca_vc032x: I2c Bus Busy Wait 00 [ 665.680771][ T4853] gspca_vc032x: I2c Bus Busy Wait 00 [ 665.694690][ T4853] gspca_vc032x: I2c Bus Busy Wait 00 [ 665.707214][T12311] [U] [ 665.710191][ T4853] gspca_vc032x: I2c Bus Busy Wait 00 [ 665.720503][ T4853] gspca_vc032x: I2c Bus Busy Wait 00 [ 665.730663][ T4853] gspca_vc032x: I2c Bus Busy Wait 00 [ 665.745139][ T4853] gspca_vc032x: Unknown sensor... [ 665.755435][ T4853] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 665.786577][ T4853] usb 4-1: USB disconnect, device number 99 [ 666.567316][ T30] audit: type=1400 audit(2000004397.861:2174): avc: denied { mounton } for pid=12360 comm="syz.3.10656" path="/2252/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 666.593565][ T30] audit: type=1400 audit(2000004397.891:2175): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=34304 daddr=10.128.0.14 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 666.691151][T12361] ./file0: Can't open blockdev [ 667.054915][ T1207] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 667.083991][T12380] SELinux: failed to load policy [ 667.227081][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.250149][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.282028][ T1207] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 667.297846][ T1207] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 667.314769][ T1207] usb 4-1: Manufacturer: syz [ 667.330760][ T1207] usb 4-1: config 0 descriptor?? [ 667.745975][T12411] overlay: filesystem on ./bus is read-only [ 667.785030][ T2014] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 667.903458][ T9] hid-generic 0000:0000:0000.00C3: unknown main item tag 0x0 [ 667.935237][ T9] hid-generic 0000:0000:0000.00C3: hidraw0: HID v0.00 Device [syz1] on syz0 [ 667.989061][ T2014] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 668.020323][ T2014] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.035568][ T2014] usb 7-1: Product: syz [ 668.039774][ T2014] usb 7-1: Manufacturer: syz [ 668.044374][ T2014] usb 7-1: SerialNumber: syz [ 668.067834][ T2014] usb 7-1: config 0 descriptor?? [ 668.097472][T12425] KVM: debugfs: duplicate directory 12425-4 [ 668.178864][ T1207] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00C2/input/input118 [ 668.303609][ T1207] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00C2/input/input119 [ 668.315188][ T5816] Bluetooth: unknown link type 79 [ 668.320294][ T5816] Bluetooth: hci4: connection err: -111 [ 668.332924][ T1207] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00C2/input/input120 [ 668.350243][ T1207] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00C2/input/input121 [ 668.372549][ T1207] uclogic 0003:256C:006D.00C2: input,hidraw1: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 668.387167][ T1207] usb 4-1: USB disconnect, device number 100 [ 668.507831][ T2014] usb 7-1: Firmware: major: 216, minor: 113, hardware type: ATUSB (1) [ 668.610053][ T5134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 668.621321][ T5134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 668.651091][ T5134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 668.666368][ T5134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 668.677140][ T5134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 668.709137][ T2014] usb 7-1: failed to fetch extended address, random address set [ 668.767742][ T2014] usb 7-1: USB disconnect, device number 11 [ 669.128512][T12548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.318259][T12465] chnl_net:caif_netlink_parms(): no params data found [ 669.327269][ T1207] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 669.484847][ T1207] usb 5-1: Using ep0 maxpacket: 16 [ 669.507063][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.523450][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.535217][ T1207] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 669.549084][ T1207] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 669.559486][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.570496][ T1207] usb 5-1: config 0 descriptor?? [ 669.639506][T12465] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.653253][T12465] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.665087][T12465] bridge_slave_0: entered allmulticast mode [ 669.673791][T12465] bridge_slave_0: entered promiscuous mode [ 669.689144][T12465] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.705809][T12465] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.716164][T12465] bridge_slave_1: entered allmulticast mode [ 669.723927][T12465] bridge_slave_1: entered promiscuous mode [ 669.829789][T12465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.852223][ T68] macsec0: left promiscuous mode [ 669.857557][ T68] bridge0: port 3(macsec0) entered disabled state [ 669.867656][ T68] bridge_slave_1: left allmulticast mode [ 669.873378][ T68] bridge_slave_1: left promiscuous mode [ 669.879352][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.890131][ T68] bridge_slave_0: left allmulticast mode [ 669.897080][ T68] bridge_slave_0: left promiscuous mode [ 669.902989][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.988537][T12543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.998019][T12543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.024860][ T1207] microsoft 0003:045E:07DA.00C4: unknown main item tag 0x0 [ 670.032413][ T1207] microsoft 0003:045E:07DA.00C4: unknown main item tag 0x0 [ 670.081596][ T1207] microsoft 0003:045E:07DA.00C4: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 670.093186][ T1207] microsoft 0003:045E:07DA.00C4: no inputs found [ 670.102113][ T1207] microsoft 0003:045E:07DA.00C4: could not initialize ff, continuing anyway [ 670.190634][ T68] batman_adv: batadv0: Removing interface: gretap1 [ 670.224403][ T68] batman_adv: batadv0: Removing interface: gretap2 [ 670.288897][ T4853] usb 5-1: USB disconnect, device number 112 [ 670.374848][ T2014] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 670.410535][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.420385][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.429746][ T68] bond0 (unregistering): Released all slaves [ 670.443415][T12465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.547317][T12465] team0: Port device team_slave_0 added [ 670.555348][ T68] tipc: Disabling bearer [ 670.557919][ T2014] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 670.575368][ T68] tipc: Left network mode [ 670.581357][T12465] team0: Port device team_slave_1 added [ 670.587985][ T2014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.620713][ T68] IPVS: stopping master sync thread 2349 ... [ 670.631129][ T2014] usb 4-1: config 0 descriptor?? [ 670.713712][T12465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.721859][ T5816] Bluetooth: hci2: command tx timeout [ 670.726723][T12465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.755812][T12465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.829618][T12465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.843750][T12465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.873597][T12465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.892859][ T2014] kaweth 4-1:0.0: Firmware present in device. [ 671.012457][ T68] hsr_slave_0: left promiscuous mode [ 671.027985][ T68] hsr_slave_1: left promiscuous mode [ 671.040682][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.055973][ T2014] kaweth 4-1:0.0: Statistics collection: 0 [ 671.061800][ T2014] kaweth 4-1:0.0: Multicast filter limit: 0 [ 671.073438][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.081231][ T2014] kaweth 4-1:0.0: MTU: 0 [ 671.086563][ T2014] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 671.314693][ T30] audit: type=1326 audit(2000004402.601:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.6.10703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18fa38f749 code=0x0 [ 671.351100][ T4853] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 671.525501][ T4853] usb 5-1: Using ep0 maxpacket: 16 [ 671.533160][ T4853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.544445][ T4853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 671.558533][ T4853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 671.570888][ T4853] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 671.583138][ T4853] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 671.601561][ T4853] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 671.612325][ T4853] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 671.629095][ T4853] usb 5-1: Manufacturer: syz [ 671.645124][ T4853] usb 5-1: config 0 descriptor?? [ 671.681157][ T2014] kaweth 4-1:0.0: Error setting receive filter [ 671.693291][ T2014] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 671.718419][ T2014] usb 4-1: USB disconnect, device number 101 [ 671.788126][ T68] team0 (unregistering): Port device team_slave_1 removed [ 671.861692][ T68] team0 (unregistering): Port device team_slave_0 removed [ 671.944742][ T4853] rc_core: IR keymap rc-hauppauge not found [ 671.950677][ T4853] Registered IR keymap rc-empty [ 671.957909][ T4853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.989806][ T4853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 672.035343][ T4853] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 672.061512][ T4853] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input123 [ 672.101565][ T4853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 672.144810][ T4853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 672.174822][ T4853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 672.224346][ T4853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 672.254734][ T4853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 672.284730][ T4853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 672.305239][ T4853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 672.334723][ T4853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 672.360749][ T4853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 672.395299][ T4853] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 672.435734][ T4853] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 672.454662][ T4853] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 672.482320][ T4853] usb 5-1: USB disconnect, device number 113 [ 672.799109][ T5816] Bluetooth: hci2: command tx timeout [ 672.876757][T12465] hsr_slave_0: entered promiscuous mode [ 672.886429][T12465] hsr_slave_1: entered promiscuous mode [ 672.894007][T12465] debugfs: 'hsr0' already exists in 'hsr' [ 672.900208][T12465] Cannot create hsr debugfs directory [ 673.126286][ T4853] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 673.190451][ T68] IPVS: stop unused estimator thread 0... [ 673.301629][ T4853] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.334075][ T4853] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 673.345330][T12465] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 673.357118][ T4853] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 673.383136][ T4853] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 673.385899][T12465] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 673.403015][T13024] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 673.403205][ T4853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.419763][ T4853] usb 7-1: Product: syz [ 673.426596][ T4853] usb 7-1: Manufacturer: syz [ 673.431416][ T4853] usb 7-1: SerialNumber: syz [ 673.441929][T12465] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 673.459557][T12465] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 673.599604][T12465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.619998][ T9919] libceph: connect (1)[c::]:6789 error -101 [ 673.626953][ T9919] libceph: mon0 (1)[c::]:6789 connect error [ 673.633087][T13041] ceph: No mds server is up or the cluster is laggy [ 673.652580][T12465] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.691214][ T3931] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.698434][ T3931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.734670][ T3931] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.741862][ T3931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.128319][T12465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.156552][T13072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10722'. [ 674.347290][ T9919] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 674.406443][T13089] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10727'. [ 674.471703][T12465] veth0_vlan: entered promiscuous mode [ 674.485010][T12465] veth1_vlan: entered promiscuous mode [ 674.519315][ T4853] cdc_ncm 7-1:1.0: bind() failure [ 674.528252][T12465] veth0_macvtap: entered promiscuous mode [ 674.529828][ T4853] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 674.538844][T12465] veth1_macvtap: entered promiscuous mode [ 674.544755][ T9919] usb 5-1: Using ep0 maxpacket: 16 [ 674.556304][ T4853] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 674.566444][ T9919] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 674.567556][T12465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.579104][ T4853] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 674.593186][ T9919] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 674.608764][T12465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.612610][ T9919] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 674.629844][ T4853] usb 7-1: USB disconnect, device number 12 [ 674.648421][ T9919] usb 5-1: config 1 interface 0 has no altsetting 0 [ 674.657998][ T9919] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 674.669036][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.681804][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.690775][ T9919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.699483][ T9919] usb 5-1: Product: syz [ 674.705873][ T9919] usb 5-1: Manufacturer: syz [ 674.710496][ T9919] usb 5-1: SerialNumber: syz [ 674.715870][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.729439][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.842693][ T5940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.855730][ T5940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.875073][ T5816] Bluetooth: hci2: command tx timeout [ 674.886127][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.896331][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.958217][ T30] audit: type=1326 audit(2000004406.251:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13114 comm="syz.3.10731" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd712d8f749 code=0x0 [ 675.151423][T13067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.165372][T13067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.203284][ T9919] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 114 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 675.224455][ T9919] usb 5-1: USB disconnect, device number 114 [ 675.233662][ T9919] usblp0: removed [ 675.502722][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10738'. [ 675.659821][T13163] sctp: [Deprecated]: syz.8.10741 (pid 13163) Use of struct sctp_assoc_value in delayed_ack socket option. [ 675.659821][T13163] Use struct sctp_sack_info instead [ 676.174652][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 676.347137][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 676.375417][ T9] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 676.391352][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 676.414730][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.436187][T13178] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 676.446797][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 676.644276][ T30] audit: type=1400 audit(2000004407.941:2178): avc: denied { mount } for pid=13212 comm="syz.3.10755" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 676.691805][ T30] audit: type=1400 audit(2000004407.981:2179): avc: denied { mounton } for pid=13212 comm="syz.3.10755" path="/2269/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 676.753226][ T30] audit: type=1400 audit(2000004408.051:2180): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 676.819950][ T9] usb 9-1: USB disconnect, device number 2 [ 676.956847][ T5816] Bluetooth: hci2: command tx timeout [ 676.995204][ T30] audit: type=1400 audit(2000004408.291:2181): avc: denied { mounton } for pid=13240 comm="syz.3.10759" path="/2271/file0" dev="tmpfs" ino=11541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 677.252015][T13257] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10765'. [ 677.262483][T13257] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10765'. [ 677.449948][ T30] audit: type=1400 audit(2000004408.751:2182): avc: denied { accept } for pid=13261 comm="syz.3.10767" path="socket:[111444]" dev="sockfs" ino=111444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 677.524729][ T30] audit: type=1400 audit(2000004408.801:2183): avc: denied { read } for pid=13264 comm="syz.4.10769" path="socket:[112068]" dev="sockfs" ino=112068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 678.347110][T13295] netlink: 'syz.4.10780': attribute type 21 has an invalid length. [ 678.382626][T13295] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10780'. [ 678.441406][T13296] netlink: 'syz.4.10780': attribute type 21 has an invalid length. [ 678.449647][T13296] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10780'. [ 678.473849][T13296] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10780'. [ 678.495589][T13295] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10780'. [ 678.904528][T13302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10783'. [ 678.940507][T13302] hsr_slave_0: left promiscuous mode [ 678.979364][T13302] hsr_slave_1: left promiscuous mode [ 679.326806][ T30] audit: type=1326 audit(2000004410.631:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13314 comm="syz.3.10784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd712d8f749 code=0x7ffc0000 [ 679.387865][ T30] audit: type=1326 audit(2000004410.671:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13314 comm="syz.3.10784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd712d8f749 code=0x7ffc0000 [ 679.418351][ T30] audit: type=1326 audit(2000004410.681:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13314 comm="syz.3.10784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd712d8f783 code=0x7ffc0000 [ 679.492529][ T30] audit: type=1326 audit(2000004410.681:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13314 comm="syz.3.10784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd712d8f783 code=0x7ffc0000 [ 679.810552][T13333] trusted_key: syz.8.10796 sent an empty control message without MSG_MORE. [ 679.893622][T13336] netlink: 80 bytes leftover after parsing attributes in process `syz.4.10797'. [ 680.157043][ T5134] Bluetooth: hci2: command 0x0405 tx timeout [ 680.904022][T13383] evm: overlay not supported [ 681.917216][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 681.917236][ T30] audit: type=1400 audit(2000004413.211:2199): avc: denied { bind } for pid=13400 comm="syz.6.10820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 681.955911][T13402] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10819'. [ 681.980230][T13402] bond0: entered promiscuous mode [ 682.000254][T13402] bond_slave_0: entered promiscuous mode [ 682.023129][T13402] bond_slave_1: entered promiscuous mode [ 682.108392][T13402] bond0: left promiscuous mode [ 682.113357][T13402] bond_slave_0: left promiscuous mode [ 682.175279][T13402] bond_slave_1: left promiscuous mode [ 682.293556][T13416] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10822'. [ 682.459733][ T30] audit: type=1400 audit(2000004413.761:2200): avc: denied { mounton } for pid=13422 comm="syz.6.10826" path="/" dev="ramfs" ino=112759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 682.664952][ T1207] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 682.711023][ T30] audit: type=1400 audit(2000004413.991:2201): avc: denied { accept } for pid=13437 comm="syz.6.10832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 682.814987][ T1207] usb 9-1: Using ep0 maxpacket: 32 [ 682.835138][ T1207] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.853907][ T1207] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.871102][ T1207] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 682.884799][ T1207] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.895984][ T1207] usb 9-1: config 0 descriptor?? [ 682.975232][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10836'. [ 683.154730][ T5955] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 683.308850][ T5955] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 683.328487][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.364758][ T1207] ft260 0003:0403:6030.00C5: unknown main item tag 0x7 [ 683.375993][ T5955] usb 7-1: Product: syz [ 683.380198][ T5955] usb 7-1: Manufacturer: syz [ 683.392105][ T5955] usb 7-1: SerialNumber: syz [ 683.401777][ T5955] usb 7-1: config 0 descriptor?? [ 683.415289][ T5955] hub 7-1:0.0: bad descriptor, ignoring hub [ 683.423379][ T5955] hub 7-1:0.0: probe with driver hub failed with error -5 [ 683.437084][ T5816] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 683.455974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 683.555349][ T1207] ft260 0003:0403:6030.00C5: chip code: 6424 8183 [ 683.620030][ T5955] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 683.637598][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 683.638272][ T5955] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 683.638318][ T5955] usb 7-1: media controller created [ 683.650610][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 683.723103][ T5955] DVB: Unable to find symbol dib7000p_attach() [ 683.730931][ T5955] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 683.756109][ T1207] ft260 0003:0403:6030.00C5: uart interface is not supported [ 683.834812][ T5955] rc_core: IR keymap rc-dib0700-rc5 not found [ 683.845539][ T5955] Registered IR keymap rc-empty [ 683.850748][ T5955] dvb-usb: could not initialize remote control. [ 683.869391][ T5955] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 683.999774][ T5870] usb 9-1: USB disconnect, device number 3 [ 684.116724][T13515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.126949][T13514] netlink: 'syz.4.10844': attribute type 1 has an invalid length. [ 684.135540][T13514] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.10844'. [ 684.366578][T13515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.598447][ T30] audit: type=1400 audit(2000004415.901:2202): avc: denied { relabelfrom } for pid=13536 comm="syz.8.10849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 684.622190][ T30] audit: type=1400 audit(2000004415.931:2203): avc: denied { relabelto } for pid=13536 comm="syz.8.10849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 685.024711][ T5955] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 685.175884][ T5955] usb 4-1: Using ep0 maxpacket: 8 [ 685.183335][ T5955] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.205327][ T5955] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 685.214394][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.226929][ T5955] usb 4-1: Product: syz [ 685.231121][ T5955] usb 4-1: Manufacturer: syz [ 685.235895][ T5955] usb 4-1: SerialNumber: syz [ 685.243184][ T5955] usb 4-1: config 0 descriptor?? [ 685.251514][ T5955] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 685.258330][ T5955] usb 4-1: selecting invalid altsetting 1 [ 685.459987][ T5955] gspca_stk014: init reg: 0x00 [ 685.468134][ T5955] stk014 4-1:0.0: probe with driver stk014 failed with error -5 [ 685.691378][ T5955] usb 4-1: USB disconnect, device number 102 [ 685.850419][T13623] loop6: detected capacity change from 0 to 2640 [ 685.868079][T13623] buffer_io_error: 159 callbacks suppressed [ 685.868097][T13623] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.882698][T13623] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.891046][T13623] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.899478][T13623] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.908195][ T30] audit: type=1400 audit(2000004417.211:2204): avc: denied { map } for pid=13622 comm="syz.4.10875" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 685.932307][T13623] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.932368][T13623] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.932425][T13623] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.932450][T13623] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.932465][T13623] ldm_validate_partition_table(): Disk read failed. [ 685.932490][T13623] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.932514][T13623] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.932571][T13623] Dev loop6: unable to read RDB block 0 [ 685.932756][T13623] loop6: unable to read partition table [ 685.933019][T13623] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 686.334667][ T5955] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 686.487877][ T5955] usb 9-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 686.497164][ T5955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.505225][ T5955] usb 9-1: Product: syz [ 686.509387][ T5955] usb 9-1: Manufacturer: syz [ 686.513977][ T5955] usb 9-1: SerialNumber: syz [ 686.521155][ T5955] usb 9-1: config 0 descriptor?? [ 687.034779][ T5816] Bluetooth: hci2: command 0x0405 tx timeout [ 687.157021][ T5955] mos7840 9-1:0.0: required endpoints missing [ 687.168501][ T5955] usb 9-1: USB disconnect, device number 4 [ 687.254825][T26779] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 687.414639][T26779] usb 5-1: Using ep0 maxpacket: 16 [ 687.421405][T26779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.432433][T26779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.447584][T26779] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 687.462040][T26779] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 687.471949][T26779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.484110][T26779] usb 5-1: config 0 descriptor?? [ 687.516734][ T5816] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 687.526152][ T5816] Bluetooth: hci3: Injecting HCI hardware error event [ 687.536856][ T5134] Bluetooth: hci3: hardware error 0x00 [ 687.916616][T26779] HID 045e:07da: Invalid code 65791 type 1 [ 687.927965][T26779] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.00C6/input/input125 [ 687.958154][T26779] microsoft 0003:045E:07DA.00C6: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 688.170985][ T9142] usb 5-1: USB disconnect, device number 115 [ 688.724693][ T9142] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 688.904696][ T9142] usb 4-1: Using ep0 maxpacket: 16 [ 688.912158][ T9142] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.923323][ T9142] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.933919][ T9142] usb 4-1: config 0 interface 0 has no altsetting 0 [ 688.949553][ T9142] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 688.959093][ T9142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.970620][T13732] kvm: user requested TSC rate below hardware speed [ 688.980454][ T9142] usb 4-1: config 0 descriptor?? [ 689.045544][T13740] netlink: 'syz.8.10902': attribute type 29 has an invalid length. [ 689.063877][T13740] netlink: 'syz.8.10902': attribute type 29 has an invalid length. [ 689.076468][T13740] netlink: 508 bytes leftover after parsing attributes in process `syz.8.10902'. [ 689.229325][ T9919] usb 7-1: USB disconnect, device number 13 [ 689.277487][ T9919] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 689.401523][ T9142] nzxt-smart2 0003:1E71:2009.00C7: unknown main item tag 0x0 [ 689.419226][ T9142] nzxt-smart2 0003:1E71:2009.00C7: unknown main item tag 0x0 [ 689.438922][ T9142] nzxt-smart2 0003:1E71:2009.00C7: unknown main item tag 0x0 [ 689.465702][ T9142] nzxt-smart2 0003:1E71:2009.00C7: unknown main item tag 0x0 [ 689.473883][ T9142] nzxt-smart2 0003:1E71:2009.00C7: unknown main item tag 0x0 [ 689.484447][ T9142] nzxt-smart2 0003:1E71:2009.00C7: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 689.587723][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10911'. [ 689.599076][ T5134] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 689.606629][ T9142] usb 4-1: USB disconnect, device number 103 [ 690.478829][T13850] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 690.512098][T13850] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 690.531342][T13850] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 690.574845][ T30] audit: type=1400 audit(2000004421.861:2205): avc: denied { listen } for pid=13851 comm="syz.3.10923" lport=33562 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 690.975131][ T9142] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 691.055111][ T9919] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 691.144638][ T9142] usb 5-1: Using ep0 maxpacket: 16 [ 691.156181][ T9142] usb 5-1: config 255 has an invalid interface number: 176 but max is 1 [ 691.178002][ T9142] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 691.205152][ T9142] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 2 [ 691.217538][ T9919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.232708][ T9142] usb 5-1: config 255 has no interface number 0 [ 691.239781][ T9919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.249834][ T9142] usb 5-1: config 255 interface 176 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 691.264737][ T9919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 691.279346][ T9142] usb 5-1: config 255 interface 176 has no altsetting 0 [ 691.286707][ T9919] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 691.296325][ T9919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.314723][ T9142] usb 5-1: Dual-Role OTG device on HNP port [ 691.321015][ T9142] usb 5-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=85.37 [ 691.346800][ T9919] usb 4-1: config 0 descriptor?? [ 691.352003][ T9142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.374642][ T9142] usb 5-1: Product: syz [ 691.378862][ T9142] usb 5-1: Manufacturer: syz [ 691.389691][ T9142] usb 5-1: SerialNumber: syz [ 691.622622][ T9142] usb 5-1: USB disconnect, device number 116 [ 691.771930][T26779] IPVS: starting estimator thread 0... [ 691.786709][ T9919] plantronics 0003:047F:FFFF.00C8: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 691.884647][T13907] IPVS: using max 43 ests per chain, 103200 per kthread [ 692.046404][ T1207] usb 4-1: USB disconnect, device number 104 [ 692.056387][T26779] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 692.214906][T26779] usb 9-1: Using ep0 maxpacket: 16 [ 692.222823][T26779] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.239895][T26779] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 692.253011][T26779] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 692.264498][T26779] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.280507][T26779] usb 9-1: config 0 descriptor?? [ 692.603936][T13952] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10948'. [ 692.635048][ T5955] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 692.713122][T26779] HID 045e:07da: Invalid code 65791 type 1 [ 692.733237][T26779] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.00C9/input/input126 [ 692.752160][T26779] microsoft 0003:045E:07DA.00C9: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 692.784761][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 692.793914][ T5955] usb 5-1: unable to get BOS descriptor or descriptor too short [ 692.804818][ T5955] usb 5-1: config 5 has an invalid interface number: 52 but max is 0 [ 692.823229][ T5955] usb 5-1: config 5 has no interface number 0 [ 692.840003][ T5955] usb 5-1: config 5 interface 52 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 692.860215][ T5955] usb 5-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 692.888807][ T5955] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 692.902390][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.925004][ T5955] usb 5-1: Product: syz [ 692.929244][ T5955] usb 5-1: Manufacturer: syz [ 692.933976][ T5955] usb 5-1: SerialNumber: syz [ 693.181325][ T5955] aircable 5-1:5.52: aircable converter detected [ 693.210260][ T5955] usb 5-1: aircable converter now attached to ttyUSB0 [ 693.233287][ T5955] usb 5-1: USB disconnect, device number 117 [ 693.248336][ T5955] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 693.261421][ T5955] aircable 5-1:5.52: device disconnected [ 693.364363][T26779] kernel write not supported for file bpf-prog (pid: 26779 comm: kworker/0:3) [ 693.403880][T26779] usb 9-1: USB disconnect, device number 5 [ 693.505218][ T9919] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 693.664846][ T9919] usb 7-1: Using ep0 maxpacket: 8 [ 693.686805][ T9919] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 693.697871][ T9919] usb 7-1: config 0 has no interface number 0 [ 693.704026][ T9919] usb 7-1: too many endpoints for config 0 interface 41 altsetting 22: 88, using maximum allowed: 30 [ 693.724933][ T9919] usb 7-1: config 0 interface 41 altsetting 22 has 0 endpoint descriptors, different from the interface descriptor's value: 88 [ 693.755040][ T9919] usb 7-1: config 0 interface 41 has no altsetting 0 [ 693.785768][ T9919] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 693.795145][ T9919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.803507][ T9919] usb 7-1: Product: syz [ 693.819340][ T9919] usb 7-1: Manufacturer: syz [ 693.823983][ T9919] usb 7-1: SerialNumber: syz [ 693.845399][ T9919] usb 7-1: config 0 descriptor?? [ 693.854172][ T9919] gspca_main: se401-2.14.0 probing 047d:5003 [ 694.255113][ T9919] gspca_se401: ExtraFeatures: 195 [ 694.260596][ T9919] gspca_se401: Frame size: 0x512 bayer [ 694.267187][ T9919] gspca_se401: Frame size: 22579x10101 bayer [ 694.273225][ T9919] gspca_se401: Frame size: 10267x10595 bayer [ 694.286186][ T9919] gspca_se401: Frame size: 27089x17043 bayer [ 694.292251][ T9919] gspca_se401: Frame size: 64904x39544 bayer [ 694.298689][ T9919] gspca_se401: Frame size: 32163x39022 bayer [ 694.309430][ T9919] gspca_se401: Frame size: 9394x17661 bayer [ 694.316098][ T9919] gspca_se401: Frame size: 23478x13105 bayer [ 694.322139][ T9919] gspca_se401: Frame size: 64591x52309 bayer [ 694.338267][T14076] input: syz1 as /devices/virtual/input/input127 [ 694.384710][T26779] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 694.468221][ T9919] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input128 [ 694.536147][T26779] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.555996][T26779] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.568283][T26779] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 694.579081][T26779] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 694.587530][T26779] usb 9-1: Manufacturer: syz [ 694.596630][T26779] usb 9-1: config 0 descriptor?? [ 694.678735][ T1207] usb 7-1: USB disconnect, device number 14 [ 694.699493][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10985'. [ 694.783859][T14109] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10987'. [ 695.449013][T26779] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.00CA/input/input129 [ 695.529287][T26779] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.00CA/input/input130 [ 695.553090][T26779] input: syz Touch Strip as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.00CA/input/input131 [ 695.572518][T26779] input: syz Dial as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.00CA/input/input132 [ 695.578299][ T9919] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 695.619364][T26779] uclogic 0003:256C:006D.00CA: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.8-1/input0 [ 695.740536][ T9142] usb 9-1: USB disconnect, device number 6 [ 695.784210][ T9919] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 695.804732][ T9919] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 695.826301][ T9919] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 695.844776][ T9919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.891161][T14167] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 695.909404][ T9919] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 696.205409][ T9142] usb 4-1: USB disconnect, device number 105 [ 696.322563][T14273] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input133 [ 697.065058][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11023'. [ 697.483037][T14354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11033'. [ 697.880265][T14378] input: syz0 as /devices/virtual/input/input135 [ 697.975912][T14382] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 698.246521][ T30] audit: type=1326 audit(2000004429.551:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14413 comm="syz.3.11047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd712d8f749 code=0x7ffc0000 [ 698.270567][ T30] audit: type=1326 audit(2000004429.551:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14413 comm="syz.3.11047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd712d8f749 code=0x7ffc0000 [ 698.305918][ T30] audit: type=1326 audit(2000004429.581:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14413 comm="syz.3.11047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd712d8f749 code=0x7ffc0000 [ 698.331938][ T30] audit: type=1326 audit(2000004429.581:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14413 comm="syz.3.11047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd712d8f749 code=0x7ffc0000 [ 698.388302][ T30] audit: type=1326 audit(2000004429.581:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14413 comm="syz.3.11047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd712d8f749 code=0x7ffc0000 [ 698.431660][ T30] audit: type=1326 audit(2000004429.601:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14413 comm="syz.3.11047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fd712d8f749 code=0x7ffc0000 [ 698.474890][ T30] audit: type=1326 audit(2000004429.681:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14413 comm="syz.3.11047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd712d8f749 code=0x7ffc0000 [ 698.539884][ T30] audit: type=1326 audit(2000004429.681:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14413 comm="syz.3.11047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd712d8f749 code=0x7ffc0000 [ 698.590251][ T30] audit: type=1326 audit(2000004429.681:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14413 comm="syz.3.11047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fd712d8f749 code=0x7ffc0000 [ 698.649002][T14370] IPVS: You probably need to specify IP address on multicast interface. [ 698.669164][ T30] audit: type=1326 audit(2000004429.681:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14413 comm="syz.3.11047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd712d8f749 code=0x7ffc0000 [ 698.698632][T14370] IPVS: Error connecting to the multicast addr [ 700.214938][ T1207] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 700.404949][ T1207] usb 9-1: Using ep0 maxpacket: 16 [ 700.416681][ T1207] usb 9-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 700.430506][ T1207] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.441983][ T1207] usb 9-1: Product: syz [ 700.469345][ T1207] usb 9-1: Manufacturer: syz [ 700.480716][ T1207] usb 9-1: SerialNumber: syz [ 700.493065][ T1207] usb 9-1: config 0 descriptor?? [ 700.719374][ T1207] usb 9-1: can't set first interface for hiFace device. [ 700.730733][ T1207] snd-usb-hiface 9-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 700.742190][ T1207] usb 9-1: USB disconnect, device number 7 [ 700.745040][T14576] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11083'. [ 700.748176][T26779] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 700.929937][T26779] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 700.952590][T26779] usb 7-1: config 0 has no interface number 0 [ 700.977187][T26779] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 701.007920][T26779] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 701.058123][T26779] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 701.084689][T26779] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.128355][T26779] usb 7-1: config 0 descriptor?? [ 701.134072][T14559] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 701.176443][T26779] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 701.194950][ T9919] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 701.364691][ T9919] usb 9-1: Using ep0 maxpacket: 16 [ 701.397945][ T9919] usb 9-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 701.414716][ T9919] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.423378][ T9919] usb 9-1: Product: syz [ 701.427758][ T9919] usb 9-1: Manufacturer: syz [ 701.432425][ T9919] usb 9-1: SerialNumber: syz [ 701.449355][T26779] usb 7-1: USB disconnect, device number 15 [ 701.458615][ T9919] usb 9-1: config 0 descriptor?? [ 701.704100][ T9919] snd-usb-hiface 9-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 701.918606][ T9919] usb 9-1: USB disconnect, device number 8 [ 702.511366][T14675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11107'. [ 702.552235][T14677] Invalid ELF header len 8 [ 702.605490][T26779] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 702.774695][T26779] usb 7-1: Using ep0 maxpacket: 16 [ 702.781547][T26779] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.804914][T26779] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 702.825279][T26779] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 702.845502][T26779] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.868027][T26779] usb 7-1: config 0 descriptor?? [ 703.029714][T14700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11115'. [ 703.145018][T26779] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 703.163237][ T9919] usb 7-1: USB disconnect, device number 16 [ 703.296512][T26779] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 703.309276][T26779] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.324853][T26779] usb 9-1: config 0 descriptor?? [ 703.532553][T26779] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 703.643132][T14749] [ 703.645487][T14749] ===================================================== [ 703.652412][T14749] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 703.659879][T14749] syzkaller #0 Tainted: G L [ 703.665848][T14749] ----------------------------------------------------- [ 703.672765][T14749] syz.3.11129/14749 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 703.680556][T14749] ffff888047462c90 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 703.689270][T14749] [ 703.689270][T14749] and this task is already holding: [ 703.696652][T14749] ffff888059676028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 703.706478][T14749] which would create a new lock dependency: [ 703.712353][T14749] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 703.720446][T14749] [ 703.720446][T14749] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 703.729991][T14749] (&client->buffer_lock){..-.}-{3:3} [ 703.730017][T14749] [ 703.730017][T14749] ... which became SOFTIRQ-irq-safe at: [ 703.743051][T14749] lock_acquire+0x179/0x330 [ 703.747638][T14749] _raw_spin_lock+0x2e/0x40 [ 703.752223][T14749] evdev_pass_values+0x10e/0x9b0 [ 703.757248][T14749] evdev_events+0x1bb/0x390 [ 703.761829][T14749] input_pass_values+0x74e/0x880 [ 703.766840][T14749] input_handle_event+0xb29/0x14d0 [ 703.772026][T14749] input_event+0x8e/0xd0 [ 703.776346][T14749] hidinput_hid_event+0x90b/0x2470 [ 703.781536][T14749] hid_process_event+0x4b7/0x5e0 [ 703.786626][T14749] hid_input_array_field+0x51a/0x700 [ 703.791980][T14749] hid_report_raw_event+0xac8/0x12c0 [ 703.797332][T14749] __hid_input_report.constprop.0+0x33f/0x470 [ 703.803479][T14749] hid_irq_in+0x35e/0x870 [ 703.807887][T14749] __usb_hcd_giveback_urb+0x38b/0x610 [ 703.813337][T14749] usb_hcd_giveback_urb+0x39b/0x450 [ 703.818619][T14749] dummy_timer+0x1809/0x3ad0 [ 703.823369][T14749] __hrtimer_run_queues+0x202/0xc40 [ 703.828646][T14749] hrtimer_run_softirq+0x17d/0x350 [ 703.833833][T14749] handle_softirqs+0x219/0x950 [ 703.838670][T14749] __irq_exit_rcu+0x109/0x170 [ 703.843426][T14749] irq_exit_rcu+0x9/0x30 [ 703.847737][T14749] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 703.853438][T14749] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 703.859556][T14749] __sanitizer_cov_trace_pc+0x8/0x70 [ 703.864910][T14749] kernfs_root+0x94/0x2a0 [ 703.869304][T14749] kernfs_link_sibling+0x537/0x770 [ 703.874484][T14749] kernfs_add_one+0x20a/0x840 [ 703.879228][T14749] __kernfs_create_file+0x295/0x350 [ 703.884501][T14749] sysfs_add_file_mode_ns+0x207/0x3c0 [ 703.889946][T14749] internal_create_group+0x597/0xf70 [ 703.895297][T14749] internal_create_groups+0x9d/0x150 [ 703.900651][T14749] device_add+0x7a5/0x1980 [ 703.905141][T14749] usb_create_ep_devs+0x160/0x2b0 [ 703.910234][T14749] create_intf_ep_devs.isra.0+0x161/0x200 [ 703.916038][T14749] usb_set_configuration+0x11a7/0x1e50 [ 703.921567][T14749] usb_generic_driver_probe+0xb1/0x110 [ 703.927088][T14749] usb_probe_device+0xef/0x400 [ 703.931918][T14749] really_probe+0x241/0xb20 [ 703.936489][T14749] __driver_probe_device+0x1de/0x470 [ 703.941928][T14749] driver_probe_device+0x4c/0x1b0 [ 703.947022][T14749] __device_attach_driver+0x1df/0x350 [ 703.952469][T14749] bus_for_each_drv+0x159/0x1e0 [ 703.957384][T14749] __device_attach+0x1e4/0x4e0 [ 703.962219][T14749] device_initial_probe+0xaa/0xc0 [ 703.967317][T14749] bus_probe_device+0x64/0x150 [ 703.972149][T14749] device_add+0x116e/0x1980 [ 703.976736][T14749] usb_new_device+0xd07/0x1a90 [ 703.981569][T14749] hub_event+0x313a/0x52f0 [ 703.986054][T14749] process_one_work+0x9ba/0x1b20 [ 703.991074][T14749] worker_thread+0x6c8/0xf10 [ 703.995736][T14749] kthread+0x3c5/0x780 [ 703.999879][T14749] ret_from_fork+0x983/0xb10 [ 704.004571][T14749] ret_from_fork_asm+0x1a/0x30 [ 704.009412][T14749] [ 704.009412][T14749] to a SOFTIRQ-irq-unsafe lock: [ 704.016412][T14749] (tasklist_lock){.+.+}-{3:3} [ 704.016433][T14749] [ 704.016433][T14749] ... which became SOFTIRQ-irq-unsafe at: [ 704.029056][T14749] ... [ 704.029063][T14749] lock_acquire+0x179/0x330 [ 704.036193][T14749] _raw_read_lock+0x5f/0x70 [ 704.040774][T14749] __do_wait+0x105/0x890 [ 704.045088][T14749] do_wait+0x21d/0x570 [ 704.049225][T14749] kernel_wait+0x9f/0x160 [ 704.053625][T14749] call_usermodehelper_exec_work+0xf1/0x170 [ 704.059595][T14749] process_one_work+0x9ba/0x1b20 [ 704.064646][T14749] worker_thread+0x6c8/0xf10 [ 704.069306][T14749] kthread+0x3c5/0x780 [ 704.073442][T14749] ret_from_fork+0x983/0xb10 [ 704.078112][T14749] ret_from_fork_asm+0x1a/0x30 [ 704.082958][T14749] [ 704.082958][T14749] other info that might help us debug this: [ 704.082958][T14749] [ 704.093165][T14749] Chain exists of: [ 704.093165][T14749] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 704.093165][T14749] [ 704.106708][T14749] Possible interrupt unsafe locking scenario: [ 704.106708][T14749] [ 704.115013][T14749] CPU0 CPU1 [ 704.120354][T14749] ---- ---- [ 704.125696][T14749] lock(tasklist_lock); [ 704.129917][T14749] local_irq_disable(); [ 704.136647][T14749] lock(&client->buffer_lock); [ 704.143995][T14749] lock(&new->fa_lock); [ 704.150739][T14749] [ 704.154175][T14749] lock(&client->buffer_lock); [ 704.159187][T14749] [ 704.159187][T14749] *** DEADLOCK *** [ 704.159187][T14749] [ 704.167309][T14749] 7 locks held by syz.3.11129/14749: [ 704.172567][T14749] #0: ffff8881463b1118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 704.181715][T14749] #1: ffff88801db59230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 704.191797][T14749] #2: ffffffff8e3c9620 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 704.201437][T14749] #3: ffffffff8e3c9620 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 704.210988][T14749] #4: ffffffff8e3c9620 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 704.220106][T14749] #5: ffff888059676028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 704.230355][T14749] #6: ffffffff8e3c9620 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 704.239385][T14749] [ 704.239385][T14749] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 704.249772][T14749] -> (&client->buffer_lock){..-.}-{3:3} { [ 704.255502][T14749] IN-SOFTIRQ-W at: [ 704.259477][T14749] lock_acquire+0x179/0x330 [ 704.265622][T14749] _raw_spin_lock+0x2e/0x40 [ 704.271760][T14749] evdev_pass_values+0x10e/0x9b0 [ 704.278331][T14749] evdev_events+0x1bb/0x390 [ 704.284466][T14749] input_pass_values+0x74e/0x880 [ 704.291039][T14749] input_handle_event+0xb29/0x14d0 [ 704.297790][T14749] input_event+0x8e/0xd0 [ 704.303670][T14749] hidinput_hid_event+0x90b/0x2470 [ 704.310414][T14749] hid_process_event+0x4b7/0x5e0 [ 704.316985][T14749] hid_input_array_field+0x51a/0x700 [ 704.323899][T14749] hid_report_raw_event+0xac8/0x12c0 [ 704.330813][T14749] __hid_input_report.constprop.0+0x33f/0x470 [ 704.338522][T14749] hid_irq_in+0x35e/0x870 [ 704.344493][T14749] __usb_hcd_giveback_urb+0x38b/0x610 [ 704.351508][T14749] usb_hcd_giveback_urb+0x39b/0x450 [ 704.358350][T14749] dummy_timer+0x1809/0x3ad0 [ 704.364589][T14749] __hrtimer_run_queues+0x202/0xc40 [ 704.371455][T14749] hrtimer_run_softirq+0x17d/0x350 [ 704.378228][T14749] handle_softirqs+0x219/0x950 [ 704.384648][T14749] __irq_exit_rcu+0x109/0x170 [ 704.390976][T14749] irq_exit_rcu+0x9/0x30 [ 704.396871][T14749] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 704.404169][T14749] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 704.411782][T14749] __sanitizer_cov_trace_pc+0x8/0x70 [ 704.418709][T14749] kernfs_root+0x94/0x2a0 [ 704.424673][T14749] kernfs_link_sibling+0x537/0x770 [ 704.431420][T14749] kernfs_add_one+0x20a/0x840 [ 704.437739][T14749] __kernfs_create_file+0x295/0x350 [ 704.444681][T14749] sysfs_add_file_mode_ns+0x207/0x3c0 [ 704.451704][T14749] internal_create_group+0x597/0xf70 [ 704.458643][T14749] internal_create_groups+0x9d/0x150 [ 704.465572][T14749] device_add+0x7a5/0x1980 [ 704.471628][T14749] usb_create_ep_devs+0x160/0x2b0 [ 704.478294][T14749] create_intf_ep_devs.isra.0+0x161/0x200 [ 704.485659][T14749] usb_set_configuration+0x11a7/0x1e50 [ 704.492759][T14749] usb_generic_driver_probe+0xb1/0x110 [ 704.499865][T14749] usb_probe_device+0xef/0x400 [ 704.506303][T14749] really_probe+0x241/0xb20 [ 704.512464][T14749] __driver_probe_device+0x1de/0x470 [ 704.520187][T14749] driver_probe_device+0x4c/0x1b0 [ 704.526965][T14749] __device_attach_driver+0x1df/0x350 [ 704.534004][T14749] bus_for_each_drv+0x159/0x1e0 [ 704.540602][T14749] __device_attach+0x1e4/0x4e0 [ 704.547013][T14749] device_initial_probe+0xaa/0xc0 [ 704.553766][T14749] bus_probe_device+0x64/0x150 [ 704.560286][T14749] device_add+0x116e/0x1980 [ 704.566451][T14749] usb_new_device+0xd07/0x1a90 [ 704.572855][T14749] hub_event+0x313a/0x52f0 [ 704.579010][T14749] process_one_work+0x9ba/0x1b20 [ 704.585590][T14749] worker_thread+0x6c8/0xf10 [ 704.591813][T14749] kthread+0x3c5/0x780 [ 704.597517][T14749] ret_from_fork+0x983/0xb10 [ 704.603744][T14749] ret_from_fork_asm+0x1a/0x30 [ 704.610243][T14749] INITIAL USE at: [ 704.614125][T14749] lock_acquire+0x179/0x330 [ 704.620184][T14749] _raw_spin_lock_irq+0x36/0x50 [ 704.626601][T14749] evdev_read+0x436/0xee0 [ 704.632492][T14749] vfs_readv+0x5c1/0x8b0 [ 704.638280][T14749] do_readv+0x28c/0x340 [ 704.643981][T14749] do_syscall_64+0xcd/0xf80 [ 704.650032][T14749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.657476][T14749] } [ 704.659964][T14749] ... key at: [] __key.88+0x0/0x40 [ 704.667147][T14749] [ 704.667147][T14749] the dependencies between the lock to be acquired [ 704.667155][T14749] and SOFTIRQ-irq-unsafe lock: [ 704.680714][T14749] -> (tasklist_lock){.+.+}-{3:3} { [ 704.686004][T14749] HARDIRQ-ON-R at: [ 704.690148][T14749] lock_acquire+0x179/0x330 [ 704.696633][T14749] _raw_read_lock+0x5f/0x70 [ 704.703122][T14749] __do_wait+0x105/0x890 [ 704.709346][T14749] do_wait+0x21d/0x570 [ 704.715416][T14749] kernel_wait+0x9f/0x160 [ 704.721730][T14749] call_usermodehelper_exec_work+0xf1/0x170 [ 704.729605][T14749] process_one_work+0x9ba/0x1b20 [ 704.736527][T14749] worker_thread+0x6c8/0xf10 [ 704.743117][T14749] kthread+0x3c5/0x780 [ 704.749171][T14749] ret_from_fork+0x983/0xb10 [ 704.755742][T14749] ret_from_fork_asm+0x1a/0x30 [ 704.762500][T14749] SOFTIRQ-ON-R at: [ 704.766638][T14749] lock_acquire+0x179/0x330 [ 704.773125][T14749] _raw_read_lock+0x5f/0x70 [ 704.779646][T14749] __do_wait+0x105/0x890 [ 704.785870][T14749] do_wait+0x21d/0x570 [ 704.791937][T14749] kernel_wait+0x9f/0x160 [ 704.798279][T14749] call_usermodehelper_exec_work+0xf1/0x170 [ 704.806688][T14749] process_one_work+0x9ba/0x1b20 [ 704.813615][T14749] worker_thread+0x6c8/0xf10 [ 704.820192][T14749] kthread+0x3c5/0x780 [ 704.826248][T14749] ret_from_fork+0x983/0xb10 [ 704.832819][T14749] ret_from_fork_asm+0x1a/0x30 [ 704.839586][T14749] INITIAL USE at: [ 704.843688][T14749] lock_acquire+0x179/0x330 [ 704.850211][T14749] _raw_write_lock_irq+0x36/0x50 [ 704.857119][T14749] copy_process+0x4668/0x7430 [ 704.863726][T14749] kernel_clone+0xfc/0x910 [ 704.870483][T14749] user_mode_thread+0xc8/0x110 [ 704.877153][T14749] rest_init+0x23/0x2b0 [ 704.883299][T14749] start_kernel+0x3ef/0x4d0 [ 704.889697][T14749] x86_64_start_reservations+0x18/0x30 [ 704.897061][T14749] x86_64_start_kernel+0x130/0x190 [ 704.904077][T14749] common_startup_64+0x13e/0x148 [ 704.910910][T14749] INITIAL READ USE at: [ 704.915392][T14749] lock_acquire+0x179/0x330 [ 704.922222][T14749] _raw_read_lock+0x5f/0x70 [ 704.929059][T14749] __do_wait+0x105/0x890 [ 704.935629][T14749] do_wait+0x21d/0x570 [ 704.942027][T14749] kernel_wait+0x9f/0x160 [ 704.948680][T14749] call_usermodehelper_exec_work+0xf1/0x170 [ 704.956909][T14749] process_one_work+0x9ba/0x1b20 [ 704.964176][T14749] worker_thread+0x6c8/0xf10 [ 704.971099][T14749] kthread+0x3c5/0x780 [ 704.977498][T14749] ret_from_fork+0x983/0xb10 [ 704.984415][T14749] ret_from_fork_asm+0x1a/0x30 [ 704.991509][T14749] } [ 704.994158][T14749] ... key at: [] tasklist_lock+0x18/0x40 [ 705.002033][T14749] ... acquired at: [ 705.005992][T14749] _raw_read_lock+0x5f/0x70 [ 705.010664][T14749] send_sigurg+0xed/0xc80 [ 705.015156][T14749] sk_send_sigurg+0x76/0x360 [ 705.019900][T14749] unix_stream_sendmsg+0xfa3/0x1320 [ 705.025256][T14749] ____sys_sendmsg+0xa5d/0xc30 [ 705.030176][T14749] ___sys_sendmsg+0x134/0x1d0 [ 705.035014][T14749] __sys_sendmsg+0x16d/0x220 [ 705.039762][T14749] do_syscall_64+0xcd/0xf80 [ 705.044417][T14749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.050462][T14749] [ 705.052772][T14749] -> (&f_owner->lock){....}-{3:3} { [ 705.058051][T14749] INITIAL USE at: [ 705.062008][T14749] lock_acquire+0x179/0x330 [ 705.068234][T14749] _raw_write_lock_irq+0x36/0x50 [ 705.074902][T14749] __f_setown+0x61/0x3c0 [ 705.080958][T14749] generic_setlease+0xf0f/0x1330 [ 705.087637][T14749] kernel_setlease+0x106/0x140 [ 705.094432][T14749] vfs_setlease+0x1e8/0x280 [ 705.100940][T14749] do_fcntl_add_lease+0x3c4/0x550 [ 705.107696][T14749] fcntl_setlease+0xfc/0x180 [ 705.114018][T14749] do_fcntl+0x153b/0x1660 [ 705.120071][T14749] __x64_sys_fcntl+0x163/0x200 [ 705.126654][T14749] do_syscall_64+0xcd/0xf80 [ 705.132905][T14749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.140609][T14749] INITIAL READ USE at: [ 705.145007][T14749] lock_acquire+0x179/0x330 [ 705.151665][T14749] _raw_read_lock_irqsave+0x74/0x90 [ 705.159029][T14749] send_sigurg+0x5f/0xc80 [ 705.165516][T14749] sk_send_sigurg+0x76/0x360 [ 705.172272][T14749] unix_stream_sendmsg+0xfa3/0x1320 [ 705.179634][T14749] ____sys_sendmsg+0xa5d/0xc30 [ 705.186561][T14749] ___sys_sendmsg+0x134/0x1d0 [ 705.193396][T14749] __sys_sendmmsg+0x200/0x420 [ 705.200231][T14749] __x64_sys_sendmmsg+0x9c/0x100 [ 705.207332][T14749] do_syscall_64+0xcd/0xf80 [ 705.213990][T14749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.222092][T14749] } [ 705.224664][T14749] ... key at: [] __key.1+0x0/0x40 [ 705.231940][T14749] ... acquired at: [ 705.235810][T14749] _raw_read_lock_irqsave+0x74/0x90 [ 705.241195][T14749] send_sigio+0x31/0x3e0 [ 705.245594][T14749] kill_fasync+0x214/0x510 [ 705.250164][T14749] n_tty_receive_buf_common+0x5d1/0x19d0 [ 705.255959][T14749] tty_ioctl+0x583/0x1650 [ 705.260451][T14749] __x64_sys_ioctl+0x18e/0x210 [ 705.265371][T14749] do_syscall_64+0xcd/0xf80 [ 705.270027][T14749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.276074][T14749] [ 705.278378][T14749] -> (&new->fa_lock){....}-{3:3} { [ 705.283499][T14749] INITIAL USE at: [ 705.287412][T14749] lock_acquire+0x179/0x330 [ 705.293485][T14749] _raw_write_lock_irq+0x36/0x50 [ 705.300022][T14749] fasync_remove_entry+0xb2/0x1e0 [ 705.307038][T14749] fasync_helper+0xaf/0xd0 [ 705.313018][T14749] fuse_dev_fasync+0xad/0x100 [ 705.319436][T14749] __fput+0x96b/0xb70 [ 705.324979][T14749] task_work_run+0x150/0x240 [ 705.331140][T14749] exit_to_user_mode_loop+0xfb/0x540 [ 705.337979][T14749] do_syscall_64+0x4ee/0xf80 [ 705.344117][T14749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.351570][T14749] INITIAL READ USE at: [ 705.355897][T14749] lock_acquire+0x179/0x330 [ 705.362409][T14749] _raw_read_lock_irqsave+0x74/0x90 [ 705.369626][T14749] kill_fasync+0x138/0x510 [ 705.376064][T14749] mousedev_write+0x61c/0x850 [ 705.382918][T14749] vfs_writev+0x5df/0xde0 [ 705.389255][T14749] do_writev+0x28c/0x340 [ 705.395555][T14749] do_syscall_64+0xcd/0xf80 [ 705.402134][T14749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.410276][T14749] } [ 705.412755][T14749] ... key at: [] __key.0+0x0/0x40 [ 705.419862][T14749] ... acquired at: [ 705.423681][T14749] lock_acquire+0x179/0x330 [ 705.428369][T14749] _raw_read_lock_irqsave+0x74/0x90 [ 705.433746][T14749] kill_fasync+0x138/0x510 [ 705.438508][T14749] evdev_pass_values+0x619/0x9b0 [ 705.443633][T14749] evdev_events+0x1bb/0x390 [ 705.448331][T14749] input_pass_values+0x74e/0x880 [ 705.453450][T14749] input_handle_event+0xf00/0x14d0 [ 705.458723][T14749] input_inject_event+0x1e8/0x3b0 [ 705.463916][T14749] evdev_write+0x457/0x750 [ 705.468717][T14749] vfs_write+0x2a0/0x11d0 [ 705.473218][T14749] ksys_write+0x1f8/0x250 [ 705.477713][T14749] do_syscall_64+0xcd/0xf80 [ 705.482380][T14749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.488527][T14749] [ 705.490839][T14749] [ 705.490839][T14749] stack backtrace: [ 705.496710][T14749] CPU: 1 UID: 0 PID: 14749 Comm: syz.3.11129 Tainted: G L syzkaller #0 PREEMPT(full) [ 705.496735][T14749] Tainted: [L]=SOFTLOCKUP [ 705.496741][T14749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 705.496761][T14749] Call Trace: [ 705.496770][T14749] [ 705.496783][T14749] dump_stack_lvl+0x116/0x1f0 [ 705.496804][T14749] check_irq_usage+0x8e6/0xbc0 [ 705.496821][T14749] ? __pfx___smp_call_single_queue+0x10/0x10 [ 705.496844][T14749] ? check_path.constprop.0+0x24/0x50 [ 705.496862][T14749] ? __lock_acquire+0x167f/0x2890 [ 705.496878][T14749] __lock_acquire+0x167f/0x2890 [ 705.496898][T14749] lock_acquire+0x179/0x330 [ 705.496916][T14749] ? kill_fasync+0x138/0x510 [ 705.496955][T14749] _raw_read_lock_irqsave+0x74/0x90 [ 705.496979][T14749] ? kill_fasync+0x138/0x510 [ 705.496994][T14749] kill_fasync+0x138/0x510 [ 705.497017][T14749] evdev_pass_values+0x619/0x9b0 [ 705.497042][T14749] evdev_events+0x1bb/0x390 [ 705.497074][T14749] input_pass_values+0x74e/0x880 [ 705.497112][T14749] input_handle_event+0xf00/0x14d0 [ 705.497133][T14749] ? _copy_from_user+0x59/0xd0 [ 705.497164][T14749] input_inject_event+0x1e8/0x3b0 [ 705.497190][T14749] evdev_write+0x457/0x750 [ 705.497221][T14749] ? __pfx_evdev_write+0x10/0x10 [ 705.497251][T14749] ? bpf_lsm_file_permission+0x9/0x10 [ 705.497268][T14749] ? security_file_permission+0x71/0x210 [ 705.497294][T14749] ? rw_verify_area+0xcf/0x6c0 [ 705.497319][T14749] ? __pfx_evdev_write+0x10/0x10 [ 705.497341][T14749] vfs_write+0x2a0/0x11d0 [ 705.497367][T14749] ? __pfx_vfs_write+0x10/0x10 [ 705.497383][T14749] ? find_held_lock+0x2b/0x80 [ 705.497404][T14749] ? __fget_files+0x204/0x3c0 [ 705.497425][T14749] ? __fget_files+0x20e/0x3c0 [ 705.497446][T14749] ksys_write+0x1f8/0x250 [ 705.497466][T14749] ? __pfx_ksys_write+0x10/0x10 [ 705.497483][T14749] ? fput+0x70/0xf0 [ 705.497504][T14749] do_syscall_64+0xcd/0xf80 [ 705.497520][T14749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.497536][T14749] RIP: 0033:0x7fd712d8f749 [ 705.497550][T14749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.497564][T14749] RSP: 002b:00007fd713c2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 705.497580][T14749] RAX: ffffffffffffffda RBX: 00007fd712fe5fa0 RCX: 00007fd712d8f749 [ 705.497597][T14749] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000004 [ 705.497606][T14749] RBP: 00007fd712e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 705.497616][T14749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.497625][T14749] R13: 00007fd712fe6038 R14: 00007fd712fe5fa0 R15: 00007ffd27c01288 [ 705.497641][T14749] [ 705.764564][ T1207] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 705.773386][T26779] [drm:udl_init] *ERROR* Selecting channel failed [ 705.801153][T26779] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 705.808220][T26779] [drm] Initialized udl on minor 2 [ 705.813845][T26779] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 705.822433][T26779] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 705.829918][ T5918] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 705.837970][ T5918] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 705.847123][T26779] usb 9-1: USB disconnect, device number 9 [ 705.925956][ T1207] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 705.934118][ T1207] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 705.946141][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 705.958051][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 705.969388][ T1207] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 705.982406][ T1207] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 705.994094][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.004749][ T1207] usb 5-1: config 0 descriptor?? [ 706.010171][T14742] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 706.425552][ T1207] plantronics 0003:047F:FFFF.00CB: reserved main item tag 0xd [ 706.437809][ T1207] plantronics 0003:047F:FFFF.00CB: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 706.705980][ T1207] usb 5-1: USB disconnect, device number 118