last executing test programs: 2m11.380485284s ago: executing program 1 (id=6015): r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000400), 0x4) 2m11.306544933s ago: executing program 1 (id=6018): r0 = fsopen(&(0x7f00000000c0)='befs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 2m11.128502662s ago: executing program 1 (id=6021): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) 2m11.048577484s ago: executing program 1 (id=6025): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 2m10.961240058s ago: executing program 1 (id=6028): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) 2m10.832586455s ago: executing program 1 (id=6032): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000), 0x4) 1m55.783826561s ago: executing program 32 (id=6032): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000), 0x4) 52.335037329s ago: executing program 5 (id=7469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x8000) 52.100532893s ago: executing program 5 (id=7475): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403, 0x300}, [@IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x28}}, 0x0) 51.957922691s ago: executing program 5 (id=7478): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x42}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000280)={0x40}, 0x0, 0x0}) 50.224623174s ago: executing program 5 (id=7522): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x0, 0x2000000, {0x7, 0x0, 0x0, r1, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x0) 50.102361446s ago: executing program 5 (id=7524): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 49.53141262s ago: executing program 2 (id=7529): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa140006000000004001f0ffff"], 0x40}}, 0x0) 49.511549908s ago: executing program 3 (id=7530): capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88fd, 0x10}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) 49.382807215s ago: executing program 2 (id=7533): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 49.350558838s ago: executing program 3 (id=7535): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 49.221230131s ago: executing program 2 (id=7537): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x8}], 0x18}, 0x4000000) 49.179983035s ago: executing program 3 (id=7539): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 49.061465071s ago: executing program 2 (id=7541): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000000c0)={{{0x1}}, 0x0, 0x7}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, 0x0) 48.933121636s ago: executing program 2 (id=7544): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "eb31b7d2"}]}}, 0x0}, 0x0) 48.914666189s ago: executing program 3 (id=7545): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff}) 48.852713897s ago: executing program 0 (id=7546): io_setup(0x800, &(0x7f0000000440)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x4f}]) 48.850913983s ago: executing program 4 (id=7547): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x2aa, @mcast1, 0x3}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 48.762441915s ago: executing program 4 (id=7548): r0 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, 0x0) 48.716563921s ago: executing program 3 (id=7549): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0]}, &(0x7f0000000740)={[&(0x7f0000000a40)='.^*%$\'-\\:\x00']}) 48.693327879s ago: executing program 0 (id=7550): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200040d4}, 0x20040084) 48.660139379s ago: executing program 4 (id=7551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 48.532605753s ago: executing program 0 (id=7552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000010c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000014) 48.519956034s ago: executing program 4 (id=7553): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) 48.428095337s ago: executing program 3 (id=7554): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) 48.380574968s ago: executing program 0 (id=7555): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) rename(&(0x7f0000002440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) 48.349027513s ago: executing program 0 (id=7556): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) 48.317941109s ago: executing program 4 (id=7557): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$vim2m(0x0, 0x8004, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x20) 47.647791457s ago: executing program 4 (id=7558): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0xfc) 47.308317561s ago: executing program 5 (id=7559): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) 40.22381787s ago: executing program 0 (id=7560): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x5, 0xedbee61c307273fa) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00007d0000)) 21.898635617s ago: executing program 2 (id=7561): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) 0s ago: executing program 33 (id=7560): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x5, 0xedbee61c307273fa) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00007d0000)) kernel console output (not intermixed with test programs): ess `syz.0.6180'. [ 361.008710][ T5975] usb 3-1: Using ep0 maxpacket: 16 [ 361.025921][ T5975] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 361.058669][ T5975] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 361.095504][ T5975] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 361.127475][ T5975] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.141100][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.159378][ T5975] usb 3-1: Product: syz [ 361.169668][ T5975] usb 3-1: Manufacturer: syz [ 361.195369][ T5975] usb 3-1: SerialNumber: syz [ 361.227240][ T30] audit: type=1326 audit(1759299756.043:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.3.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25378eec9 code=0x7ffc0000 [ 361.287325][ T30] audit: type=1326 audit(1759299756.043:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.3.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25378eec9 code=0x7ffc0000 [ 361.346964][ T30] audit: type=1326 audit(1759299756.103:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.3.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fa25378eec9 code=0x7ffc0000 [ 361.411666][ T30] audit: type=1326 audit(1759299756.103:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.3.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25378eec9 code=0x7ffc0000 [ 361.416142][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 361.474150][ T30] audit: type=1326 audit(1759299756.103:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.3.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25378eec9 code=0x7ffc0000 [ 361.504044][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 361.511559][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 361.521478][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 361.535478][ T5975] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 361.556561][ T5975] usb 3-1: failed to enable PITCH for EP 0x82 [ 361.568416][ T5975] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 361.632552][ T5975] usb 3-1: USB disconnect, device number 89 [ 361.686272][T13793] udevd[13793]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.034706][T19768] tmpfs: Bad value for 'nr_inodes' [ 362.199743][T19778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6206'. [ 363.209135][T19830] netdevsim netdevsim4: Direct firmware load for . [ 363.209135][T19830] failed with error -2 [ 363.256940][T19830] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 363.256940][T19830] [ 363.358154][T19840] Unsupported ieee802154 address type: 0 [ 363.807278][T19865] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 364.498523][T19908] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 364.523683][T19908] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 364.850942][T19930] netlink: 'syz.2.6275': attribute type 1 has an invalid length. [ 364.879911][T19930] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6275'. [ 364.909596][T19930] NCSI netlink: No device for ifindex 0 [ 365.090034][T19941] netlink: 'syz.2.6281': attribute type 15 has an invalid length. [ 365.110823][T19941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6281'. [ 365.444159][T19963] dlm: non-version read from control device 36 [ 365.637329][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 365.637346][ T30] audit: type=1326 audit(1759299760.463:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19975 comm="syz.0.6300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49758eec9 code=0x7ffc0000 [ 365.710152][ T30] audit: type=1326 audit(1759299760.513:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19975 comm="syz.0.6300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fa49758eec9 code=0x7ffc0000 [ 365.760767][ T30] audit: type=1326 audit(1759299760.513:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19975 comm="syz.0.6300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49758eec9 code=0x7ffc0000 [ 365.762934][T19983] netlink: 'syz.2.6302': attribute type 3 has an invalid length. [ 365.833233][ T30] audit: type=1326 audit(1759299760.513:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19975 comm="syz.0.6300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49758eec9 code=0x7ffc0000 [ 366.112547][T19997] bridge10: entered promiscuous mode [ 366.112573][T19997] bridge10: entered allmulticast mode [ 366.177080][T20003] bridge2: entered promiscuous mode [ 366.250005][T20009] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6312'. [ 366.284366][T20009] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6312'. [ 366.316083][T20009] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6312'. [ 366.423259][ T30] audit: type=1400 audit(1759299761.233:1048): avc: denied { create } for pid=20016 comm="syz.2.6316" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 366.502520][ T30] audit: type=1400 audit(1759299761.243:1049): avc: denied { append } for pid=20016 comm="syz.2.6316" name="file0" dev="tmpfs" ino=6354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 366.612976][ T30] audit: type=1400 audit(1759299761.243:1050): avc: denied { open } for pid=20016 comm="syz.2.6316" path="/1263/file0" dev="tmpfs" ino=6354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 366.666457][ T30] audit: type=1400 audit(1759299761.373:1051): avc: denied { unlink } for pid=5821 comm="syz-executor" name="file0" dev="tmpfs" ino=6354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 366.877300][T20042] netlink: 'syz.3.6328': attribute type 2 has an invalid length. [ 367.165149][ T30] audit: type=1400 audit(1759299761.993:1052): avc: denied { read } for pid=20053 comm="syz.0.6333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 367.388864][ T30] audit: type=1400 audit(1759299762.213:1053): avc: denied { setopt } for pid=20068 comm="syz.3.6341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 368.230600][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 368.325967][T20123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6362'. [ 368.405029][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 368.434592][ T24] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 368.452027][ T24] usb 4-1: config 2 has no interface number 0 [ 368.466370][ T24] usb 4-1: config 2 interface 31 has no altsetting 0 [ 368.495563][ T24] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 368.519671][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.538239][ T24] usb 4-1: Product: syz [ 368.544752][ T24] usb 4-1: Manufacturer: syz [ 368.554558][ T24] usb 4-1: SerialNumber: syz [ 368.586287][T20135] bridge11: entered promiscuous mode [ 368.876134][T20156] TCP: TCP_TX_DELAY enabled [ 369.035850][ T24] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 369.063932][ T24] usb 4-1: USB disconnect, device number 28 [ 369.182896][ T976] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 369.369382][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 369.387682][ T976] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 369.449652][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 369.488514][ T976] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 369.520005][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.534116][ T976] usb 5-1: Product: syz [ 369.546264][ T976] usb 5-1: Manufacturer: syz [ 369.556531][ T976] usb 5-1: SerialNumber: syz [ 369.573489][ T976] usb 5-1: config 0 descriptor?? [ 369.592573][T20161] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 369.610279][T20161] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 369.619278][ T976] usb 5-1: ucan: probing device on interface #0 [ 369.898509][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.908787][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.930723][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.952624][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.974182][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.017226][T20219] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6396'. [ 370.028101][T20223] trusted_key: encrypted_key: keylen parameter is missing [ 370.032709][T20219] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6396'. [ 370.053652][ T976] usb 5-1: ucan: failed to retrieve device info [ 370.059938][ T976] usb 5-1: ucan: probe failed; try to update the device firmware [ 370.137372][T20233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6399'. [ 370.146734][ T976] usb 5-1: USB disconnect, device number 100 [ 370.207037][ T999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.232131][T20208] lo speed is unknown, defaulting to 1000 [ 370.316301][ T999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.533153][ T999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.660170][ T999] team0: Port device netdevsim0 removed [ 370.672280][ T999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.696005][T20270] bridge0: port 3(veth0_to_bridge) entered blocking state [ 370.704589][T20270] bridge0: port 3(veth0_to_bridge) entered disabled state [ 370.712285][T20270] veth0_to_bridge: entered allmulticast mode [ 370.720188][T20270] veth0_to_bridge: entered promiscuous mode [ 370.726575][T20270] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.754212][T20270] bridge0: port 3(veth0_to_bridge) entered blocking state [ 370.761523][T20270] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 370.918616][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 370.918633][ T30] audit: type=1400 audit(1759299765.743:1056): avc: denied { create } for pid=20292 comm="syz.0.6416" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 371.066796][ T30] audit: type=1400 audit(1759299765.763:1057): avc: denied { unlink } for pid=5827 comm="syz-executor" name="file0" dev="tmpfs" ino=6976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 371.136266][T20313] netlink: 'syz.2.6419': attribute type 7 has an invalid length. [ 371.238790][ T30] audit: type=1326 audit(1759299766.063:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20386 comm="syz.3.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25378eec9 code=0x7ffc0000 [ 371.263550][ T999] bridge_slave_1: left allmulticast mode [ 371.269617][ T999] bridge_slave_1: left promiscuous mode [ 371.277131][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.293055][ T30] audit: type=1326 audit(1759299766.123:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20386 comm="syz.3.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25378eec9 code=0x7ffc0000 [ 371.349594][ T30] audit: type=1326 audit(1759299766.123:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20386 comm="syz.3.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fa25378eec9 code=0x7ffc0000 [ 371.395529][ T999] bridge_slave_0: left allmulticast mode [ 371.419635][ T999] bridge_slave_0: left promiscuous mode [ 371.450567][ T30] audit: type=1326 audit(1759299766.123:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20386 comm="syz.3.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25378eec9 code=0x7ffc0000 [ 371.476727][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.503992][ T30] audit: type=1326 audit(1759299766.123:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20386 comm="syz.3.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25378eec9 code=0x7ffc0000 [ 371.527472][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.574666][T20409] netlink: 'syz.2.6426': attribute type 10 has an invalid length. [ 371.580601][ T30] audit: type=1400 audit(1759299766.373:1063): avc: denied { read open } for pid=20404 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.646339][ T30] audit: type=1400 audit(1759299766.373:1064): avc: denied { getattr } for pid=20404 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.708321][ T30] audit: type=1400 audit(1759299766.413:1065): avc: denied { map } for pid=20406 comm="syz.4.6428" path="socket:[53292]" dev="sockfs" ino=53292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 371.731677][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.013692][ T5835] Bluetooth: hci3: command tx timeout [ 372.234794][T20446] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 372.775600][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.794864][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.806150][ T999] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 372.821333][ T999] bond0 (unregistering): Released all slaves [ 372.939591][ T999] bond1 (unregistering): Released all slaves [ 373.059626][ T999] bond2 (unregistering): Released all slaves [ 373.078233][ T999] bond3 (unregistering): Released all slaves [ 373.089446][ T999] bond4 (unregistering): Released all slaves [ 373.106370][ T999] bond5 (unregistering): Released all slaves [ 373.119659][ T999] bond6 (unregistering): Released all slaves [ 373.211938][ T999] bond7 (unregistering): Released all slaves [ 373.335968][T20208] chnl_net:caif_netlink_parms(): no params data found [ 373.368512][ T999] : left promiscuous mode [ 373.633467][ T5975] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 373.753923][T20536] process 'syz.4.6460' launched './file0' with NULL argv: empty string added [ 373.816256][ T5975] usb 1-1: Using ep0 maxpacket: 16 [ 373.846357][ T5975] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 373.875266][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.897030][T20208] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.918606][ T5975] usb 1-1: Product: syz [ 373.925928][ T5975] usb 1-1: Manufacturer: syz [ 373.934854][T20208] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.939399][ T5975] usb 1-1: SerialNumber: syz [ 373.957060][ T5975] r8152-cfgselector 1-1: Unknown version 0x0000 [ 373.968491][T20208] bridge_slave_0: entered allmulticast mode [ 373.969255][ T5975] r8152-cfgselector 1-1: config 0 descriptor?? [ 373.984045][T20208] bridge_slave_0: entered promiscuous mode [ 374.074437][T20208] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.088292][T20208] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.091742][ T5835] Bluetooth: hci3: command tx timeout [ 374.111085][T20208] bridge_slave_1: entered allmulticast mode [ 374.118559][T20208] bridge_slave_1: entered promiscuous mode [ 374.292454][T20208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.366110][T20208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.414993][T20618] Zero length message leads to an empty skb [ 374.486456][T20624] netlink: 'syz.3.6469': attribute type 62 has an invalid length. [ 374.527059][ T1206] r8152-cfgselector 1-1: USB disconnect, device number 89 [ 374.712064][T20208] team0: Port device team_slave_0 added [ 374.745789][T20664] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 374.755213][T20664] SELinux: failed to load policy [ 374.766271][ T999] hsr_slave_0: left promiscuous mode [ 374.814345][ T999] hsr_slave_1: left promiscuous mode [ 374.837247][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.849938][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.862075][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.877399][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.907611][ T999] veth1_macvtap: left promiscuous mode [ 374.922085][ T999] veth0_macvtap: left promiscuous mode [ 374.927971][ T999] veth1_vlan: left promiscuous mode [ 375.239381][T20683] ptrace attach of "./syz-executor exec"[20686] was attempted by "./syz-executor exec"[20683] [ 375.600076][ T999] team0 (unregistering): Port device team_slave_1 removed [ 375.645647][ T999] team0 (unregistering): Port device team_slave_0 removed [ 375.999455][ T2979] smc: removing ib device syz0 [ 376.009892][T20208] team0: Port device team_slave_1 added [ 376.067162][ T1206] lo speed is unknown, defaulting to 1000 [ 376.079708][ T1206] syz0: Port: 1 Link DOWN [ 376.168005][T20208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.170246][ T5835] Bluetooth: hci3: command tx timeout [ 376.195602][T20208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.237235][T20208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.264911][T20208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.266043][T20736] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 376.280447][T20208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.280478][T20208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.419068][T20208] hsr_slave_0: entered promiscuous mode [ 376.454123][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 376.454139][ T30] audit: type=1400 audit(1759299771.283:1076): avc: denied { write } for pid=20769 comm="syz.2.6493" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 376.458837][T20208] hsr_slave_1: entered promiscuous mode [ 376.544584][T20208] debugfs: 'hsr0' already exists in 'hsr' [ 376.554178][T20208] Cannot create hsr debugfs directory [ 376.714867][T20798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6497'. [ 376.844028][ T30] audit: type=1400 audit(1759299771.673:1077): avc: denied { connect } for pid=20811 comm="syz.0.6500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 376.908745][ T30] audit: type=1400 audit(1759299771.683:1078): avc: denied { ioctl } for pid=20811 comm="syz.0.6500" path="socket:[53019]" dev="sockfs" ino=53019 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 377.137532][ T30] audit: type=1326 audit(1759299771.963:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20853 comm="syz.4.6505" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5569b8eec9 code=0x0 [ 377.446959][T20208] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 377.479271][T20208] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 377.516776][T20208] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 377.560895][T20208] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 377.766669][T20208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.812057][T20208] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.854045][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.861225][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.888126][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.895302][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.998275][T20926] Bluetooth: MGMT ver 1.23 [ 378.063000][T20208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.250175][ T5835] Bluetooth: hci3: command tx timeout [ 378.334729][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.341284][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.613943][T20208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.666985][ T30] audit: type=1400 audit(1759299773.484:1080): avc: denied { name_connect } for pid=20974 comm="syz.2.6533" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 378.820200][ T5901] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 378.943849][T20990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6537'. [ 378.964936][ T30] audit: type=1400 audit(1759299773.794:1081): avc: denied { listen } for pid=20991 comm="syz.2.6538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 379.013387][ T5901] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 379.055052][ T5901] usb 4-1: config 0 has no interface number 0 [ 379.067674][ T5901] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 379.102229][ T5901] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 379.126855][ T5901] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 379.181006][ T5901] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 379.232908][ T5901] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 379.267142][ T5901] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 379.288896][T20208] veth0_vlan: entered promiscuous mode [ 379.294890][ T5901] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 379.308734][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.330514][ T5901] usb 4-1: config 0 descriptor?? [ 379.336499][T20966] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 379.347575][T20208] veth1_vlan: entered promiscuous mode [ 379.365157][T20966] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 379.404006][ T5901] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 379.420730][ T24] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 379.446493][T20208] veth0_macvtap: entered promiscuous mode [ 379.469671][T20208] veth1_macvtap: entered promiscuous mode [ 379.509199][T20208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.533495][T20208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.568671][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.602120][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.609382][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 379.624660][ T24] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 379.633159][ T24] usb 5-1: config 4 has no interface number 0 [ 379.639259][ T24] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.653456][ T24] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.666211][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 379.672909][T20966] ldusb 4-1:0.55: Write buffer overflow, 1 bytes dropped [ 379.676229][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.716373][ T4875] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.740945][ T24] hub 5-1:4.128: USB hub found [ 379.751801][ T4875] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.789112][ T5901] usb 4-1: USB disconnect, device number 29 [ 379.817903][ T5901] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 379.823031][ T30] audit: type=1400 audit(1759299774.644:1082): avc: denied { bind } for pid=21028 comm="syz.2.6546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.917895][ T24] hub 5-1:4.128: 6 ports detected [ 379.937008][ T24] hub 5-1:4.128: Using single TT (err -22) [ 379.957548][ T24] hub 5-1:4.128: insufficient power available to use all downstream ports [ 379.996471][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.010383][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.074537][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.083274][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.127377][ T24] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 380.138914][ T24] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 380.149942][ T30] audit: type=1400 audit(1759299774.974:1083): avc: denied { mounton } for pid=20208 comm="syz-executor" path="/root/syzkaller.Vn4Ulm/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 380.186944][ T30] audit: type=1400 audit(1759299774.984:1084): avc: denied { mount } for pid=20208 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 380.215552][ T24] usb 5-1: USB disconnect, device number 101 [ 380.219643][ T30] audit: type=1400 audit(1759299774.984:1085): avc: denied { mounton } for pid=20208 comm="syz-executor" path="/root/syzkaller.Vn4Ulm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 380.457961][T21095] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6554'. [ 380.591051][T21104] Invalid ELF header len 14 [ 380.690140][T21107] mkiss: ax0: crc mode is auto. [ 380.910142][ T5902] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 381.012941][T21142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.079976][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 381.093129][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.129930][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.153591][ T5902] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 381.172671][ T5901] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 381.181889][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.207401][ T5902] usb 1-1: config 0 descriptor?? [ 381.340236][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 381.374243][ T5901] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 381.396101][ T5901] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 381.425343][ T5901] usb 4-1: Product: syz [ 381.443861][ T5901] usb 4-1: Manufacturer: syz [ 381.448515][ T5901] usb 4-1: SerialNumber: syz [ 381.470856][ T5901] usb 4-1: config 0 descriptor?? [ 381.496762][ T5901] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 381.526222][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 381.526237][ T30] audit: type=1326 audit(1759299776.354:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21174 comm="syz.2.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62a78eec9 code=0x7ffc0000 [ 381.611269][ T30] audit: type=1326 audit(1759299776.354:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21174 comm="syz.2.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff62a78eec9 code=0x7ffc0000 [ 381.649709][ T30] audit: type=1326 audit(1759299776.354:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21174 comm="syz.2.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62a78eec9 code=0x7ffc0000 [ 381.694132][ T5902] elo 0003:04E7:0009.0001: item fetching failed at offset 0/4 [ 381.713671][ T30] audit: type=1326 audit(1759299776.354:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21174 comm="syz.2.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62a78eec9 code=0x7ffc0000 [ 381.738121][ T5902] elo 0003:04E7:0009.0001: parse failed [ 381.747143][ T5902] elo 0003:04E7:0009.0001: probe with driver elo failed with error -22 [ 381.763551][ T30] audit: type=1326 audit(1759299776.354:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21174 comm="syz.2.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7ff62a78eec9 code=0x7ffc0000 [ 381.793314][ T30] audit: type=1326 audit(1759299776.354:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21174 comm="syz.2.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62a78eec9 code=0x7ffc0000 [ 381.816780][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.856070][ T30] audit: type=1326 audit(1759299776.394:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21174 comm="syz.2.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62a78eec9 code=0x7ffc0000 [ 381.879586][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.896309][ T1206] usb 1-1: USB disconnect, device number 90 [ 382.089915][ T24] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 382.103667][ T5901] gspca_zc3xx: reg_w_i err -71 [ 382.108509][ T5901] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 382.141250][ T5901] usb 4-1: USB disconnect, device number 30 [ 382.249902][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 382.260841][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 382.270012][ T24] usb 3-1: config 4 interface 0 has no altsetting 0 [ 382.298371][ T24] usb 3-1: string descriptor 0 read error: -22 [ 382.304900][ T24] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 382.324905][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.357948][ T24] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 382.377312][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 382.411679][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 382.421845][T21243] netlink: 'syz.5.6597': attribute type 10 has an invalid length. [ 382.429986][ T24] usb 3-1: media controller created [ 382.479154][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.564460][T21191] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 382.596946][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 382.707787][ T24] usb 3-1: USB disconnect, device number 90 [ 382.843459][ T30] audit: type=1400 audit(1759299777.674:1103): avc: denied { remount } for pid=21280 comm="syz.3.6606" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 382.843592][T21282] tmpfs: Cannot change global quota limit on remount [ 382.863288][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.943116][ T5901] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 383.099768][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 383.106336][ T5901] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.117151][ T1206] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 383.124902][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 383.136955][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 383.148483][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 383.158434][ T5975] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 383.166304][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 383.182277][ T5901] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 383.191461][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 383.199544][ T5901] usb 1-1: Product: syz [ 383.204196][ T5901] usb 1-1: Manufacturer: syz [ 383.208962][ T5901] usb 1-1: SerialNumber: syz [ 383.215408][ T5901] usb 1-1: config 0 descriptor?? [ 383.309808][ T1206] usb 5-1: Using ep0 maxpacket: 16 [ 383.317670][ T1206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 383.329513][ T1206] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 383.340193][ T1206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 383.354268][ T5975] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 383.364694][ T5975] usb 6-1: config 0 interface 0 has no altsetting 0 [ 383.374784][ T1206] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 383.385009][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.394156][ T1206] usb 5-1: Product: syz [ 383.398765][ T5975] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 383.410528][ T1206] usb 5-1: Manufacturer: syz [ 383.415179][ T1206] usb 5-1: SerialNumber: syz [ 383.419901][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 383.428079][ T5975] usb 6-1: Product: syz [ 383.435076][ T1206] usb 5-1: config 0 descriptor?? [ 383.441292][ T5975] usb 6-1: Manufacturer: syz [ 383.446106][ T5901] radio-si470x 1-1:0.0: DeviceID=0x7ab1 ChipID=0xb100 [ 383.455981][T21283] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 383.459204][ T5975] usb 6-1: SerialNumber: syz [ 383.471593][ T5975] usb 6-1: config 0 descriptor?? [ 383.484137][ T5975] usb 6-1: selecting invalid altsetting 0 [ 383.497958][ T1206] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 383.644400][ T976] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 383.654481][ T5901] radio-si470x 1-1:0.0: software version 122, hardware version 177 [ 383.753293][ T5975] usb 5-1: USB disconnect, device number 102 [ 383.790464][ T1206] usb 6-1: USB disconnect, device number 2 [ 383.835433][ T976] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 383.859248][ T5901] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 383.864947][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.877753][ T5901] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 383.889011][ T5901] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 383.898671][ T5901] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 383.925281][ T5901] usb 1-1: USB disconnect, device number 91 [ 383.930375][ T976] usb 3-1: config 0 descriptor?? [ 384.383439][ T30] audit: type=1400 audit(1759299779.214:1104): avc: denied { write } for pid=21361 comm="syz.5.6618" path="socket:[55097]" dev="sockfs" ino=55097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 384.394968][ T976] glorious 0003:258A:0033.0002: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.2-1/input0 [ 384.429044][T21365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6619'. [ 384.559403][ T5975] usb 3-1: USB disconnect, device number 91 [ 384.847460][T21393] vivid-001: disconnect [ 384.855638][T21394] netlink: 'syz.4.6626': attribute type 2 has an invalid length. [ 384.856842][T21391] vivid-001: reconnect [ 385.066828][ T30] audit: type=1400 audit(1759299779.894:1105): avc: denied { connect } for pid=21407 comm="syz.4.6630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 385.071396][T21410] ªªªªªª_congesti: renamed from lo (while UP) [ 385.152819][ T1206] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 385.321302][ T1206] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 385.339902][ T1206] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 385.365420][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.409659][ T1206] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 385.479963][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 385.650328][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 385.656611][ T24] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.660214][ T5975] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 385.668340][ T24] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.685140][ T24] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.698499][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 385.705233][ T24] usb 6-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 385.714363][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.724085][ T24] usb 6-1: config 0 descriptor?? [ 385.780406][ T5901] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 385.829734][ T5975] usb 3-1: Using ep0 maxpacket: 16 [ 385.836514][ T5975] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 385.845137][ T5975] usb 3-1: config 0 has no interface number 0 [ 385.853649][ T5975] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 385.862812][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.871490][ T5975] usb 3-1: Product: syz [ 385.875660][ T5975] usb 3-1: Manufacturer: syz [ 385.880338][ T5975] usb 3-1: SerialNumber: syz [ 385.887308][ T5975] usb 3-1: config 0 descriptor?? [ 385.901498][ T5975] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 385.930536][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 385.938769][ T5901] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 385.947797][ T5901] usb 4-1: config 0 has no interface number 0 [ 385.957221][ T5901] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 385.967477][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.976737][ T5901] usb 4-1: Product: syz [ 385.981558][ T5901] usb 4-1: Manufacturer: syz [ 385.986177][ T5901] usb 4-1: SerialNumber: syz [ 386.000661][ T5901] usb 4-1: config 0 descriptor?? [ 386.011444][ T5901] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 386.021323][ T5901] usb 4-1: selecting invalid altsetting 1 [ 386.027106][ T5901] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 386.038687][ T5901] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 386.053927][ T5901] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 386.062634][ T5901] usb 4-1: media controller created [ 386.091927][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 386.127930][ T5915] libceph: connect (1)[c::]:6789 error -101 [ 386.135084][ T5915] libceph: mon0 (1)[c::]:6789 connect error [ 386.149160][ T24] lenovo 0003:04B3:3109.0003: unknown main item tag 0x4 [ 386.150813][ T5915] libceph: connect (1)[c::]:6789 error -101 [ 386.164126][ T5915] libceph: mon0 (1)[c::]:6789 connect error [ 386.171861][ T24] lenovo 0003:04B3:3109.0003: unknown main item tag 0x1 [ 386.185519][ T24] lenovo 0003:04B3:3109.0003: hidraw0: USB HID v5f.b2 Device [HID 04b3:3109] on usb-dummy_hcd.5-1/input0 [ 386.344068][ T24] usb 6-1: USB disconnect, device number 3 [ 386.431509][ T5915] libceph: connect (1)[c::]:6789 error -101 [ 386.437735][ T5915] libceph: mon0 (1)[c::]:6789 connect error [ 386.491414][ T1206] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 386.511856][ T5975] gspca_spca1528: reg_w err -71 [ 386.530222][ T5975] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 386.547362][ T5975] usb 3-1: USB disconnect, device number 92 [ 386.692395][ T1206] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 386.700877][ T1206] stv0680 1-1:4.0: last error: 242, command = 0x24 [ 386.710364][ T1206] usb 1-1: USB disconnect, device number 92 [ 386.917952][T21456] ceph: No mds server is up or the cluster is laggy [ 386.951160][ T1206] libceph: connect (1)[c::]:6789 error -101 [ 386.957530][ T1206] libceph: mon0 (1)[c::]:6789 connect error [ 387.130147][ T5835] Bluetooth: hci3: command tx timeout [ 387.209800][ T5901] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 387.237506][ T5901] zl10353_read_register: readreg error (reg=127, ret==-110) [ 387.269621][ T5901] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 387.374316][ T5901] usb 4-1: USB disconnect, device number 31 [ 387.636238][T21548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6657'. [ 387.682178][ T24] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 387.844274][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.867088][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.881713][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 387.893318][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.944342][ T24] usb 5-1: config 0 descriptor?? [ 388.289710][ T976] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 388.393930][ T24] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 388.403334][ T24] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 388.411040][ T24] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 388.423313][ T24] hid-led 0003:04D8:F372.0004: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.4-1/input0 [ 388.450160][ T5901] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 388.450793][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 388.498750][ T976] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 388.525326][ T976] usb 1-1: config 0 has no interface number 0 [ 388.551749][ T976] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 388.574133][ T24] hid-led 0003:04D8:F372.0004: Greynut Luxafor initialized [ 388.594816][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.622609][ T976] usb 1-1: Product: syz [ 388.625983][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.637753][ T24] usb 5-1: USB disconnect, device number 103 [ 388.647726][ T976] usb 1-1: Manufacturer: syz [ 388.664980][ T976] usb 1-1: SerialNumber: syz [ 388.669671][ T5901] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 388.669697][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.671838][ T5901] usb 4-1: config 0 descriptor?? [ 388.693285][ T13] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 388.721038][ T976] usb 1-1: config 0 descriptor?? [ 388.732127][ T1138] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 388.740079][ T976] hub 1-1:0.132: bad descriptor, ignoring hub [ 388.746274][ T976] hub 1-1:0.132: probe with driver hub failed with error -5 [ 388.758673][ T1138] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 388.788179][ T1138] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 388.813585][ T976] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input44 [ 388.824384][ T1138] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 388.848479][ T2967] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 388.885518][ T37] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 388.927754][ T37] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 388.972330][ T37] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 388.990839][ T13] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 389.005373][ T37] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 389.019918][ T13] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 389.029829][ T1138] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 389.090442][ T37] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 389.112779][ T37] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 389.134901][ T13] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 389.148197][ T13] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 389.161870][ T4875] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 389.197711][ T5901] cmedia_hs100b 0003:0D8C:0014.0005: hidraw0: USB HID v0.00 Device [HID 0d8c:0014] on usb-dummy_hcd.3-1/input0 [ 389.429088][ T5901] usb 4-1: USB disconnect, device number 32 [ 389.584372][T21689] can0: slcan on ptm0. [ 389.669886][T21688] can0 (unregistered): slcan off ptm0. [ 389.726515][T21703] dlm: no local IP address has been set [ 389.753889][T21703] dlm: cannot start dlm midcomms -107 [ 389.966166][T21720] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 390.025911][T21721] tipc: Started in network mode [ 390.031712][T21721] tipc: Node identity , cluster identity 4711 [ 390.042614][T21721] tipc: Failed to set node id, please configure manually [ 390.081635][T21721] tipc: Enabling of bearer rejected, failed to enable media [ 390.568312][ T30] audit: type=1400 audit(1759299785.384:1106): avc: denied { watch watch_with_perm watch_reads } for pid=21756 comm="syz.2.6700" path="/1361/bus" dev="tmpfs" ino=6846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 390.865056][T21783] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6708'. [ 391.029394][ T5901] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 391.134549][ T5183] usb 1-1: reset high-speed USB device number 93 using dummy_hcd [ 391.158607][ T5183] usb 1-1: device reset changed ep0 maxpacket size! [ 391.184762][ T5975] usb 1-1: USB disconnect, device number 93 [ 391.208983][ T5901] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 391.209016][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 391.209047][ T5901] usb 5-1: Product: syz [ 391.209065][ T5901] usb 5-1: Manufacturer: syz [ 391.209082][ T5901] usb 5-1: SerialNumber: syz [ 391.257862][ T5901] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 391.379406][ T5975] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 391.535409][ T5975] usb 1-1: Using ep0 maxpacket: 8 [ 391.537103][ T5975] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 391.537131][ T5975] usb 1-1: config 2 has no interface number 0 [ 391.537172][ T5975] usb 1-1: config 2 interface 31 has no altsetting 0 [ 391.539619][ T1206] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 391.541904][ T5975] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 391.541932][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.541954][ T5975] usb 1-1: Product: syz [ 391.541970][ T5975] usb 1-1: Manufacturer: syz [ 391.541986][ T5975] usb 1-1: SerialNumber: syz [ 391.658232][ T5901] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 391.658272][ T5901] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 391.724231][ T1206] usb 4-1: Using ep0 maxpacket: 8 [ 391.733034][ T1206] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 391.733068][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 391.735026][ T1206] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 391.735055][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.735097][ T1206] usb 4-1: Product: syz [ 391.735114][ T1206] usb 4-1: Manufacturer: syz [ 391.735131][ T1206] usb 4-1: SerialNumber: syz [ 391.750339][ T1206] usb 4-1: config 0 descriptor?? [ 391.874149][ T976] usb 5-1: USB disconnect, device number 104 [ 391.903737][ T1206] rc_core: IR keymap rc-streamzap not found [ 391.903757][ T1206] Registered IR keymap rc-empty [ 391.904859][ T1206] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 391.915659][ T1206] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input45 [ 391.917913][ T30] audit: type=1400 audit(1759299786.744:1107): avc: denied { ioctl } for pid=5183 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4174 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 392.006782][ T1206] usb 4-1: USB disconnect, device number 33 [ 392.124194][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.181156][ T5975] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 392.186366][ T5975] usb 1-1: USB disconnect, device number 94 [ 392.430649][ T30] audit: type=1326 audit(1759299787.264:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21896 comm="syz.5.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60edd8eec9 code=0x7ffc0000 [ 392.454110][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.497970][ T30] audit: type=1326 audit(1759299787.264:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21896 comm="syz.5.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60edd8eec9 code=0x7ffc0000 [ 392.521483][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.575476][ T30] audit: type=1326 audit(1759299787.294:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21896 comm="syz.5.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f60edd8eec9 code=0x7ffc0000 [ 392.652264][ T30] audit: type=1326 audit(1759299787.294:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21896 comm="syz.5.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60edd8eec9 code=0x7ffc0000 [ 392.674404][T21911] dlm: no locking on control device [ 392.750950][ T30] audit: type=1326 audit(1759299787.294:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21896 comm="syz.5.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f60edd8eec9 code=0x7ffc0000 [ 392.851892][ T30] audit: type=1326 audit(1759299787.294:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21896 comm="syz.5.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60edd8eec9 code=0x7ffc0000 [ 393.008322][T21934] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6737'. [ 393.179231][ T1206] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 393.278735][ T5975] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 393.337892][ T1206] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 393.371055][ T1206] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 393.396682][ T1206] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 393.419572][ T1206] usb 3-1: config 220 has no interface number 2 [ 393.437142][ T1206] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 393.464996][ T5975] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 393.481634][ T1206] usb 3-1: config 220 interface 0 has no altsetting 0 [ 393.508766][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 393.529400][ T1206] usb 3-1: config 220 interface 76 has no altsetting 0 [ 393.541682][ T1206] usb 3-1: config 220 interface 1 has no altsetting 0 [ 393.554400][ T5975] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 393.593988][ T1206] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 393.604035][ T30] audit: type=1400 audit(1759299788.424:1114): avc: denied { bind } for pid=21962 comm="syz.4.6744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 393.629350][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.646794][ T1206] usb 3-1: Product: syz [ 393.659451][ T5975] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 393.668508][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.681183][ T1206] usb 3-1: Manufacturer: syz [ 393.685795][ T1206] usb 3-1: SerialNumber: syz [ 393.707011][ T5975] usb 4-1: Product: syz [ 393.714244][ T5975] usb 4-1: Manufacturer: syz [ 393.731653][ T5975] usb 4-1: SerialNumber: syz [ 393.754248][ T5975] usb 4-1: config 0 descriptor?? [ 393.775634][T21936] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 393.787370][T21936] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 393.824575][ T5975] usb 4-1: ucan: probing device on interface #0 [ 393.939499][ T5901] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 393.970198][ T1206] usb 3-1: selecting invalid altsetting 0 [ 393.976460][ T1206] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 393.999239][ T1206] usb 3-1: No valid video chain found. [ 394.038107][ T1206] usb 3-1: selecting invalid altsetting 0 [ 394.069637][ T1206] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 394.099991][ T1206] usb 3-1: USB disconnect, device number 93 [ 394.175669][ T5901] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 394.199263][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.213667][ T5901] usb 1-1: Product: syz [ 394.217897][ T5901] usb 1-1: Manufacturer: syz [ 394.249647][ T5901] usb 1-1: SerialNumber: syz [ 394.269748][ T5901] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 394.296046][ T5915] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 394.457310][ T5975] ucan 4-1:0.0: probe with driver ucan failed with error -71 [ 394.504725][ T5975] usb 4-1: USB disconnect, device number 34 [ 394.832088][T22043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6756'. [ 394.862415][T22043] bridge1: entered allmulticast mode [ 394.962468][ T5975] usb 1-1: USB disconnect, device number 95 [ 395.349801][T22079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6767'. [ 395.358830][T22079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6767'. [ 395.590387][ T976] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 395.611998][ T5915] usb 1-1: Service connection timeout for: 256 [ 395.640624][ T5915] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 395.672588][ T5915] ath9k_htc: Failed to initialize the device [ 395.691828][ T5975] usb 1-1: ath9k_htc: USB layer deinitialized [ 395.719934][ T30] audit: type=1400 audit(1759299790.544:1115): avc: denied { mount } for pid=22103 comm="syz.0.6773" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 395.747651][ T44] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 395.774723][ T976] usb 5-1: Using ep0 maxpacket: 8 [ 395.796922][ T976] usb 5-1: config 12 has an invalid interface number: 80 but max is 0 [ 395.816663][ T976] usb 5-1: config 12 has no interface number 0 [ 395.825734][ T976] usb 5-1: config 12 interface 80 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 32 [ 395.838183][ T976] usb 5-1: New USB device found, idVendor=04e8, idProduct=6615, bcdDevice=b8.ab [ 395.866500][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.876390][ T976] usb 5-1: Product: syz [ 395.880746][ T976] usb 5-1: Manufacturer: syz [ 395.885525][ T976] usb 5-1: SerialNumber: syz [ 395.900682][T22077] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 395.929518][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 395.944247][ T44] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 395.961509][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.979390][ T44] usb 3-1: Product: syz [ 395.992232][ T44] usb 3-1: Manufacturer: syz [ 396.005210][ T44] usb 3-1: SerialNumber: syz [ 396.014229][ T44] usb 3-1: config 0 descriptor?? [ 396.149391][ T976] usb 5-1: USB disconnect, device number 105 [ 396.240414][ T44] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 396.261399][ T30] audit: type=1400 audit(1759299791.095:1116): avc: denied { bind } for pid=22148 comm="syz.5.6782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 396.359210][T22156] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 396.366675][T22155] [U] J"—e:ÀÆ" [ 396.459229][ T5915] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 396.633402][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.643874][ T44] gspca_sunplus: reg_w_riv err -71 [ 396.643939][ T44] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 396.660535][T22173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6792'. [ 396.677971][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.682011][ T44] usb 3-1: USB disconnect, device number 94 [ 396.703830][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.745302][ T5915] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 396.746134][ T30] audit: type=1400 audit(1759299791.575:1117): avc: denied { read } for pid=22179 comm="syz.5.6793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 396.763720][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.791681][ T5915] usb 4-1: config 0 descriptor?? [ 396.973564][T22198] autofs4:pid:22198:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 397.237926][ T5915] wacom 0003:056A:0010.0006: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 397.264115][ T5915] wacom 0003:056A:0010.0006: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.3-1/input0 [ 397.282113][ T5915] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0010.0006/input/input46 [ 397.449531][ T5901] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 397.579153][ T44] usb 4-1: USB disconnect, device number 35 [ 397.620299][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 397.663452][ T5901] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 397.684324][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.706575][ T5901] usb 5-1: config 0 descriptor?? [ 397.728615][ T5901] gspca_main: sq930x-2.14.0 probing 041e:403c [ 397.788118][T22249] : Can't lookup blockdev [ 398.222477][T22262] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6815'. [ 398.369259][ T5901] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 398.375163][ T5901] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 398.401939][T22212] syz.5.6805 (22212): drop_caches: 2 [ 398.425477][ T5901] usb 5-1: USB disconnect, device number 106 [ 398.462889][ T44] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 398.654147][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.676770][ T44] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 398.709399][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.729139][ T44] usb 1-1: config 0 descriptor?? [ 398.733622][T22299] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22299 comm=syz.3.6826 [ 398.819070][T22303] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 399.015641][ T30] audit: type=1326 audit(1759299793.835:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22313 comm="syz.3.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25378eec9 code=0x7ffc0000 [ 399.039115][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.074865][ T30] audit: type=1326 audit(1759299793.835:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22313 comm="syz.3.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25378eec9 code=0x7ffc0000 [ 399.133739][T22323] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6838'. [ 399.143072][ T30] audit: type=1326 audit(1759299793.865:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22313 comm="syz.3.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa25378eec9 code=0x7ffc0000 [ 399.166553][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.176721][T22323] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6838'. [ 399.184962][T22325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6837'. [ 399.191219][ T44] smartjoyplus 0003:0925:8866.0007: item fetching failed at offset 5/7 [ 399.213695][ T44] smartjoyplus 0003:0925:8866.0007: parse failed [ 399.229276][ T44] smartjoyplus 0003:0925:8866.0007: probe with driver smartjoyplus failed with error -22 [ 399.240111][ T30] audit: type=1326 audit(1759299793.865:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22313 comm="syz.3.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25378eec9 code=0x7ffc0000 [ 399.307121][ T30] audit: type=1326 audit(1759299793.875:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22313 comm="syz.3.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fa25378eec9 code=0x7ffc0000 [ 399.372626][ T30] audit: type=1326 audit(1759299793.875:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22313 comm="syz.3.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25378eec9 code=0x7ffc0000 [ 399.450434][ T44] usb 1-1: USB disconnect, device number 96 [ 399.845313][T22377] pimreg3: entered allmulticast mode [ 400.264171][ T44] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 400.393638][T22415] mkiss: ax0: crc mode is auto. [ 400.451569][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 400.467247][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 400.491305][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.548870][ T44] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 400.592541][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.658245][ T44] usb 3-1: config 0 descriptor?? [ 401.106750][ T44] kye 0003:0458:0138.0008: hidraw0: USB HID v0.03 Device [HID 0458:0138] on usb-dummy_hcd.2-1/input0 [ 401.297711][ T44] usb 3-1: USB disconnect, device number 95 [ 401.381904][T22457] fido_id[22457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 402.046575][ T30] audit: type=1400 audit(1759299796.875:1124): avc: denied { setattr } for pid=22505 comm="syz.2.6894" name="anycast6" dev="proc" ino=4026533149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 402.070058][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.268116][ T30] audit: type=1401 audit(1759299797.095:1125): op=fscreate invalid_context="*" [ 402.682088][T22544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6909'. [ 402.859265][ T44] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 403.050246][ T44] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 403.059703][ T44] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 403.072357][ T44] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 403.087095][ T44] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 403.118649][ T44] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 403.138766][ T5901] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 403.158667][ T44] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 403.172660][ T44] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 403.180886][ T44] usb 6-1: Product: syz [ 403.185068][ T44] usb 6-1: Manufacturer: syz [ 403.201811][ T44] cdc_wdm 6-1:1.0: skipping garbage [ 403.207045][ T44] cdc_wdm 6-1:1.0: skipping garbage [ 403.227956][ T44] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 403.238476][T22373] syz.4.6852 (22373): drop_caches: 1 [ 403.243895][ T44] cdc_wdm 6-1:1.0: Unknown control protocol [ 403.296531][ T5901] usb 1-1: unable to get BOS descriptor or descriptor too short [ 403.314435][ T5901] usb 1-1: config 13 has an invalid interface number: 191 but max is 0 [ 403.324427][ T5901] usb 1-1: config 13 has no interface number 0 [ 403.347645][ T5901] usb 1-1: config 13 interface 191 altsetting 156 bulk endpoint 0x2 has invalid maxpacket 1023 [ 403.363337][ T5901] usb 1-1: config 13 interface 191 has no altsetting 0 [ 403.373979][ T5901] usb 1-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=fd.3e [ 403.391985][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.402883][ T5901] usb 1-1: Product: syz [ 403.407265][ T5901] usb 1-1: Manufacturer: syz [ 403.412308][ T5901] usb 1-1: SerialNumber: syz [ 403.422403][T22558] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 403.642912][ T5901] HFC-S_USB 1-1:13.191: probe with driver HFC-S_USB failed with error -5 [ 403.665582][ T5901] usb 1-1: USB disconnect, device number 97 [ 403.773561][T22619] [U] ¹ [ 403.804465][ T30] audit: type=1400 audit(1759299798.635:1126): avc: denied { connect } for pid=22621 comm="syz.4.6935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 403.805701][T22622] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 403.918765][ T5915] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 403.954479][ T30] audit: type=1326 audit(1759299798.785:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22625 comm="syz.4.6937" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5569b8eec9 code=0x0 [ 403.993602][ T5901] usb 6-1: USB disconnect, device number 4 [ 404.080179][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.103581][ T5915] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 404.113284][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.128120][ T5915] usb 4-1: config 0 descriptor?? [ 404.225716][T22652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6941'. [ 404.238365][T22653] syz_tun: entered promiscuous mode [ 404.248422][T22653] macsec1: entered allmulticast mode [ 404.258479][T22653] syz_tun: entered allmulticast mode [ 404.268317][T22653] syz_tun: left allmulticast mode [ 404.273721][T22653] syz_tun: left promiscuous mode [ 404.389237][ T5901] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 404.433175][ T30] audit: type=1400 audit(1759299799.255:1128): avc: denied { listen } for pid=22665 comm="syz.0.6946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 404.557219][ T5901] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.569122][ T5915] hid_mf 0003:0079:1846.0009: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 404.591996][ T5901] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 404.602026][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.613095][ T5915] hid_mf 0003:0079:1846.0009: Invalid report, this should never happen! [ 404.626097][ T5901] usb 6-1: Product: syz [ 404.630969][ T5915] hid_mf 0003:0079:1846.0009: Force feedback init failed. [ 404.638606][ T5901] usb 6-1: Manufacturer: syz [ 404.643211][ T5901] usb 6-1: SerialNumber: syz [ 404.662171][ T5901] usb 6-1: config 0 descriptor?? [ 404.676088][ T5901] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 404.799133][ T5915] usb 4-1: USB disconnect, device number 36 [ 404.906916][T22675] fido_id[22675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 404.933861][T22700] xt_time: unknown flags 0xf4 [ 405.258280][ T30] audit: type=1400 audit(1759299800.085:1129): avc: denied { append } for pid=22721 comm="syz.4.6965" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 405.290442][ T5901] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 405.306009][ T5901] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 405.321648][ T5901] usb 6-1: USB disconnect, device number 5 [ 405.463796][T22743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6970'. [ 405.858798][ T44] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 405.963576][ T30] audit: type=1400 audit(1759299800.795:1130): avc: denied { rename } for pid=22780 comm="syz.5.6987" name="file1" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 406.043808][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.073816][T22786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6990'. [ 406.079957][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.114067][ T44] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 406.126068][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.144942][ T44] usb 4-1: config 0 descriptor?? [ 406.216042][ T30] audit: type=1326 audit(1759299801.045:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22794 comm="syz.2.6993" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff62a78eec9 code=0x0 [ 406.763050][ T44] hid-led 0003:0FC5:B080.000A: probe with driver hid-led failed with error -71 [ 406.794314][ T44] usb 4-1: USB disconnect, device number 37 [ 406.859309][ T5901] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 406.938982][ T5915] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 407.019957][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.031664][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.041761][ T5901] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 407.051341][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.064825][ T5901] usb 1-1: config 0 descriptor?? [ 407.090887][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 407.096218][ T30] audit: type=1400 audit(1759299801.925:1132): avc: denied { mounton } for pid=22860 comm="syz.2.7009" path="/1419/file0" dev="tmpfs" ino=7140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 407.102763][ T5915] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 407.127655][ T5943] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 407.136943][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.169167][ T5915] usb 6-1: config 0 descriptor?? [ 407.298485][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 407.305415][ T5943] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 407.313869][ T5943] usb 5-1: config 0 has no interface number 0 [ 407.330303][ T5943] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 407.342902][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.358727][ T5943] usb 5-1: Product: syz [ 407.362888][ T5943] usb 5-1: Manufacturer: syz [ 407.374895][ T5943] usb 5-1: SerialNumber: syz [ 407.385864][ T5943] usb 5-1: config 0 descriptor?? [ 407.403054][ T30] audit: type=1400 audit(1759299802.235:1133): avc: denied { name_bind } for pid=22870 comm="syz.2.7013" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 407.443610][ T5943] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 407.468456][ T5943] usb 5-1: selecting invalid altsetting 1 [ 407.474602][ T5943] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 407.493189][ T5943] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 407.510128][ T5943] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 407.518756][ T5943] usb 5-1: media controller created [ 407.547117][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.556201][T22882] random: crng reseeded on system resumption [ 407.615171][ T5915] logitech 0003:046D:C626.000C: unbalanced delimiter at end of report description [ 407.618747][T22886] mkiss: ax0: crc mode is auto. [ 407.626637][ T5915] logitech 0003:046D:C626.000C: parse failed [ 407.638846][ T5915] logitech 0003:046D:C626.000C: probe with driver logitech failed with error -22 [ 407.650969][ T5943] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 407.661412][ T5943] zl10353_read_register: readreg error (reg=127, ret==-71) [ 407.678864][ T5943] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 407.681876][ T5901] hid-led 0003:27B8:01ED.000B: probe with driver hid-led failed with error -71 [ 407.716101][ T5901] usb 1-1: USB disconnect, device number 98 [ 407.745887][ T5943] usb 5-1: USB disconnect, device number 107 [ 407.900982][ T5915] usb 6-1: USB disconnect, device number 6 [ 408.315938][T22962] smc: net device bond0 applied user defined pnetid SYZ0 [ 408.440927][ T5901] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 408.482620][T22979] new mount options do not match the existing superblock, will be ignored [ 408.494028][ T30] audit: type=1400 audit(1759299803.325:1134): avc: denied { mount } for pid=22978 comm="syz.2.7038" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 408.523552][ T30] audit: type=1400 audit(1759299803.355:1135): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 408.579135][ T5915] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 408.599434][ T5975] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 408.606818][T22984] netlink: 'syz.2.7040': attribute type 4 has an invalid length. [ 408.621696][T22984] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7040'. [ 408.639543][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 408.646129][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.664414][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.676423][ T5901] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 408.690209][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.704771][ T5901] usb 4-1: config 0 descriptor?? [ 408.739272][ T5915] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 408.760839][ T5915] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 408.770029][ T5975] usb 5-1: Using ep0 maxpacket: 16 [ 408.778999][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.796135][ T5915] usb 1-1: Product: syz [ 408.800641][ T5975] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.818310][ T5975] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.827339][ T5915] usb 1-1: Manufacturer: syz [ 408.832038][ T5915] usb 1-1: SerialNumber: syz [ 408.852367][ T5975] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.861890][ T5915] usb 1-1: config 0 descriptor?? [ 408.874095][ T5915] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 408.885766][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.894495][ T5975] usb 5-1: Product: syz [ 408.902023][ T5975] usb 5-1: Manufacturer: syz [ 408.908037][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 408.918445][ T5975] usb 5-1: SerialNumber: syz [ 408.925858][ T5915] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 408.953889][ T5915] usb 1-1: media controller created [ 408.987330][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.077997][ T5915] DVB: Unable to find symbol mt352_attach() [ 409.163130][ T5901] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 409.176678][ T5915] DVB: Unable to find symbol nxt6000_attach() [ 409.185004][ T5901] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 409.192443][ T5915] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 409.202388][ T5901] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 409.210629][ T5901] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 409.221219][ T5915] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input49 [ 409.233875][ T5901] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 409.249746][ T5901] savu 0003:1E7D:2D5A.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 409.251220][ T5915] dvb-usb: schedule remote query interval to 1000 msecs. [ 409.281749][ T5915] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 409.297842][ T5915] dvb-usb: bulk message failed: -22 (7/0) [ 409.304654][ T5915] dvb-usb: bulk message failed: -22 (7/0) [ 409.346017][ T5915] usb 1-1: USB disconnect, device number 99 [ 409.380157][ T5975] usb 5-1: cannot find UAC_HEADER [ 409.472745][ T5975] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 409.539925][ T5975] usb 4-1: USB disconnect, device number 38 [ 409.561988][ T5915] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 409.616195][T23058] vlan0: entered allmulticast mode [ 409.659144][ T5916] usb 5-1: USB disconnect, device number 108 [ 409.712153][T20112] udevd[20112]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.043322][T23111] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7061'. [ 410.112824][ T30] audit: type=1400 audit(1759299804.935:1136): avc: denied { connect } for pid=23112 comm="syz.3.7063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 410.132380][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.841464][T23168] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7084'. [ 410.857495][T23168] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7084'. [ 411.272920][T23208] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 411.410311][ T5975] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 411.456165][T23223] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 411.471981][T23223] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 411.477816][T23223] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 411.477816][T23223] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 411.505273][T23223] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 411.517533][T23223] CUSE: DEVNAME unspecified [ 411.570588][ T5975] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 411.599832][ T5975] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 411.631230][ T5975] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 411.636679][T23232] Dead loop on virtual device ip6_vti0, fix it urgently! [ 411.656109][ T5975] usb 6-1: config 220 has no interface number 2 [ 411.670515][ T5975] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 411.686270][ T5975] usb 6-1: config 220 interface 0 has no altsetting 0 [ 411.693798][ T5975] usb 6-1: config 220 interface 76 has no altsetting 0 [ 411.701320][ T5975] usb 6-1: config 220 interface 1 has no altsetting 0 [ 411.711424][ T5975] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 411.721854][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.730410][ T5975] usb 6-1: Product: syz [ 411.734662][ T5975] usb 6-1: Manufacturer: syz [ 411.739902][ T5975] usb 6-1: SerialNumber: syz [ 411.766689][ T30] audit: type=1326 audit(1759299806.595:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23241 comm="syz.4.7113" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5569b8eec9 code=0x0 [ 411.850805][T23249] netlink: 'syz.2.7116': attribute type 10 has an invalid length. [ 411.859161][T23249] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 411.866245][T23249] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 411.876757][T23249] team0: Port device netdevsim0 added [ 411.888975][T23249] netlink: 'syz.2.7116': attribute type 10 has an invalid length. [ 411.898636][ T5915] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 411.899612][T23249] team0: Port device netdevsim0 removed [ 411.915773][T23249] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 411.971411][ T5975] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 411.981209][ T5975] usb 6-1: No valid video chain found. [ 411.995731][ T5975] usb 6-1: selecting invalid altsetting 0 [ 412.015727][ T5975] usb 6-1: selecting invalid altsetting 0 [ 412.021861][ T5975] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 412.034196][ T5975] usb 6-1: USB disconnect, device number 7 [ 412.054664][ T5915] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.066527][ T5915] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 412.082617][ T5915] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 412.094858][ T5915] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 412.106139][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.116865][T23235] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 412.218190][ T5916] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 412.370424][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.383741][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.394545][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.408492][ T5916] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 412.417553][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.431428][ T5916] usb 3-1: config 0 descriptor?? [ 412.685428][ T30] audit: type=1326 audit(1759299807.515:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23286 comm="syz.4.7123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5569b8eec9 code=0x0 [ 412.757309][ T30] audit: type=1400 audit(1759299807.585:1139): avc: denied { shutdown } for pid=23293 comm="syz.5.7124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 412.861023][ T5916] ortek 0003:1223:3F07.000E: unknown main item tag 0x0 [ 412.889512][ T5916] ortek 0003:1223:3F07.000E: unknown main item tag 0x0 [ 412.910719][ T5916] ortek 0003:1223:3F07.000E: unknown main item tag 0x0 [ 412.925788][ T5916] ortek 0003:1223:3F07.000E: unknown main item tag 0x0 [ 412.933716][ T5916] ortek 0003:1223:3F07.000E: unknown main item tag 0x0 [ 412.941520][ T5915] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 412.942268][ T5916] ortek 0003:1223:3F07.000E: item fetching failed at offset 66/69 [ 412.962947][ T5916] ortek 0003:1223:3F07.000E: probe with driver ortek failed with error -22 [ 412.976472][ T5915] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input51 [ 413.020825][ T5915] usb 4-1: USB disconnect, device number 39 [ 413.020885][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 413.028116][ T44] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 413.160994][ T30] audit: type=1400 audit(1759299807.995:1140): avc: denied { checkpoint_restore } for pid=23322 comm="syz.5.7130" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 413.185862][ T5943] usb 3-1: USB disconnect, device number 96 [ 413.228039][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 413.252357][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.295353][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.307860][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 413.330824][ T44] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 413.342230][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.363834][ T44] usb 5-1: config 0 descriptor?? [ 413.548589][ T5975] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 413.703476][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.703511][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.703551][ T5975] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 413.703576][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.709168][ T5975] usb 6-1: config 0 descriptor?? [ 413.791010][ T44] konepure 0003:1E7D:2DBE.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.4-1/input0 [ 413.959286][T23382] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 413.985175][ T5915] usb 5-1: USB disconnect, device number 109 [ 413.998924][T23377] fido_id[23377]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 414.174486][ T5975] hkems 0003:2006:0118.0010: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.5-1/input0 [ 414.205034][ T5975] hkems 0003:2006:0118.0010: no inputs found [ 414.214834][ T5975] hkems 0003:2006:0118.0010: force feedback init failed [ 414.324946][ T30] audit: type=1400 audit(2000000000.530:1141): avc: denied { read } for pid=23410 comm="syz.2.7152" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 414.431180][ T5975] usb 6-1: USB disconnect, device number 8 [ 414.523865][T23430] sd 0:0:1:0: device reset [ 414.545258][ T44] IPVS: starting estimator thread 0... [ 414.545605][T23432] IPVS: ip_vs_add_dest(): server weight less than zero [ 414.617905][T23437] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7158'. [ 414.648594][T23433] IPVS: using max 43 ests per chain, 103200 per kthread [ 414.718189][ T5915] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 414.884845][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 414.912768][ T5915] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 414.932528][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.949785][ T5915] usb 4-1: config 0 descriptor?? [ 415.194323][T23478] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7174'. [ 415.383845][ T5915] waltop 0003:172F:0037.0011: collection stack underflow [ 415.412589][ T5915] waltop 0003:172F:0037.0011: item 0 1 0 12 parsing failed [ 415.420814][ T5915] waltop 0003:172F:0037.0011: probe with driver waltop failed with error -22 [ 415.443558][T23499] tipc: Started in network mode [ 415.463366][T23499] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 415.493035][T23499] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 415.503229][T23499] tipc: Enabled bearer , priority 10 [ 415.510292][ T5975] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 415.612167][T23508] use of bytesused == 0 is deprecated and will be removed in the future, [ 415.626876][ T5943] usb 4-1: USB disconnect, device number 40 [ 415.633113][T23512] netlink: 1000 bytes leftover after parsing attributes in process `syz.2.7187'. [ 415.651412][T23508] use the actual size instead. [ 415.672553][ T5975] usb 1-1: Using ep0 maxpacket: 16 [ 415.701038][ T5975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.728225][ T5975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.758444][ T5975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 415.803447][ T5975] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 415.813265][ T5975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.849209][ T5975] usb 1-1: config 0 descriptor?? [ 416.109352][ T44] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 416.281460][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 416.287042][ T5975] hid_parser_main: 66 callbacks suppressed [ 416.287063][ T5975] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 416.316929][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.317033][ T5975] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 416.343569][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.365390][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 416.377301][ T5975] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 416.392810][ T5975] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 416.405264][ T44] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 416.425774][ T5975] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 416.437634][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.447560][ T5975] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 416.464783][ T5975] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 416.469632][ T44] usb 3-1: config 0 descriptor?? [ 416.505925][ T5975] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 416.529275][ T5975] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 416.536525][ T5975] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 416.573856][ T5975] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 416.599494][ T5975] microsoft 0003:045E:07DA.0012: no inputs found [ 416.605853][ T5975] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway [ 416.621147][ T5915] tipc: Node number set to 1 [ 416.635475][T23583] sp0: Synchronizing with TNC [ 416.667334][ T5975] usb 1-1: USB disconnect, device number 100 [ 416.696601][T23581] [U] è [ 416.741005][T23584] fido_id[23584]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 416.864542][T23608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7211'. [ 416.873757][T23608] nbd: socks must be embedded in a SOCK_ITEM attr [ 416.947393][ T44] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0013/input/input53 [ 416.975452][ T44] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 417.019249][T23622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7214'. [ 417.115161][ T1206] usb 3-1: USB disconnect, device number 97 [ 417.263266][T23643] team0: Device ip6gre2 is of different type [ 417.653280][T23683] usb usb9: usbfs: process 23683 (syz.4.7227) did not claim interface 0 before use [ 417.815265][ T30] audit: type=1400 audit(2000000004.020:1142): avc: denied { bind } for pid=23701 comm="syz.4.7234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 417.968164][ T1206] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 418.133151][ T1206] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.165712][ T1206] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 418.187104][T23726] F2FS-fs: Conflicting test_dummy_encryption options [ 418.187679][ T1206] usb 3-1: config 1 has no interface number 0 [ 418.204400][ T1206] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.223830][ T1206] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 418.239178][T23728] tipc: Started in network mode [ 418.244095][T23728] tipc: Node identity 05000000000000004879ffffffffffff, cluster identity 4711 [ 418.244767][ T1206] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 418.274041][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.285866][ T1206] usb 3-1: Product: syz [ 418.292252][ T1206] usb 3-1: Manufacturer: syz [ 418.296973][ T1206] usb 3-1: SerialNumber: syz [ 418.372109][T23740] Dead loop on virtual device ip6_vti0, fix it urgently! [ 418.503455][T23751] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 418.522708][ T30] audit: type=1326 audit(2000000004.720:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23687 comm="syz.0.7230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49758eec9 code=0x7fc00000 [ 418.558975][ T5975] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 418.669429][ T44] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 418.679883][T23759] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 418.718248][ T5975] usb 5-1: Using ep0 maxpacket: 32 [ 418.730207][ T5975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.753123][ T5975] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 418.762758][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.771373][ T5975] usb 5-1: Product: syz [ 418.771396][ T5975] usb 5-1: Manufacturer: syz [ 418.771434][ T5975] usb 5-1: SerialNumber: syz [ 418.779711][ T5975] usb 5-1: config 0 descriptor?? [ 418.796041][ T5975] usb 5-1: bad CDC descriptors [ 418.799765][ T5975] usb 5-1: unsupported MDLM descriptors [ 418.828103][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 418.829425][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.829470][ T44] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.829499][ T44] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.829526][ T44] usb 4-1: config 0 interface 0 has no altsetting 0 [ 418.829559][ T44] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 418.829584][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.831952][ T44] usb 4-1: config 0 descriptor?? [ 418.925091][ T1206] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 418.925138][ T1206] cdc_ncm 3-1:1.1: bind() failure [ 418.928149][ T5915] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 418.950636][ T1206] usb 3-1: USB disconnect, device number 98 [ 419.009021][ T5902] usb 5-1: USB disconnect, device number 110 [ 419.120938][ T5915] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 419.133678][ T5915] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 419.157535][ T5915] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 419.177237][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.195434][T23761] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 419.206543][ T5915] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 419.274851][ T44] kye 0003:0458:0153.0014: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.3-1/input0 [ 419.398056][ T5943] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 419.443484][ T5915] usb 4-1: USB disconnect, device number 41 [ 419.486712][ T44] usb 1-1: USB disconnect, device number 101 [ 419.565408][ T5943] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 419.582334][ T5943] usb 6-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 419.591738][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.606639][ T5943] usb 6-1: config 0 descriptor?? [ 419.724173][ T30] audit: type=1400 audit(2000000005.930:1144): avc: denied { ioctl } for pid=23846 comm="syz.4.7260" path="socket:[59979]" dev="sockfs" ino=59979 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 419.784933][T23851] program syz.4.7262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.079008][ T5943] maltron 0003:058F:9410.0015: hidraw0: USB HID v40.00 Device [HID 058f:9410] on usb-dummy_hcd.5-1/input0 [ 420.277800][ T5943] usb 6-1: USB disconnect, device number 9 [ 420.677102][T23918] EXT4-fs: Conflicting test_dummy_encryption options [ 421.218736][ T5915] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 421.388378][ T976] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 421.391988][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.425798][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.450809][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.469386][ T5915] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 421.478895][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.491112][ T5915] usb 5-1: config 0 descriptor?? [ 421.570649][ T976] usb 6-1: Using ep0 maxpacket: 8 [ 421.577644][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.602302][ T976] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 421.628119][ T976] usb 6-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 421.657495][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.684668][ T976] usb 6-1: config 0 descriptor?? [ 421.872663][T23970] syz.2.7299 (23970): drop_caches: 1 [ 421.944007][ T5915] wacom 0003:056A:0010.0016: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 421.978410][ T5915] wacom 0003:056A:0010.0016: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.4-1/input0 [ 422.019588][ T5915] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0010.0016/input/input54 [ 422.114479][ T976] hid_parser_main: 1245 callbacks suppressed [ 422.114501][ T976] logitech 0003:046D:C298.0017: unknown main item tag 0x0 [ 422.154031][ T976] logitech 0003:046D:C298.0017: unknown main item tag 0x0 [ 422.170473][ T976] logitech 0003:046D:C298.0017: unknown main item tag 0x0 [ 422.179682][ T976] logitech 0003:046D:C298.0017: unknown main item tag 0x0 [ 422.182279][ T30] audit: type=1400 audit(2000000008.380:1145): avc: denied { mount } for pid=23989 comm="syz.2.7304" name="/" dev="hugetlbfs" ino=60767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 422.186901][ T976] logitech 0003:046D:C298.0017: unknown main item tag 0x0 [ 422.243576][ T5943] usb 5-1: USB disconnect, device number 111 [ 422.257019][ T976] logitech 0003:046D:C298.0017: unknown main item tag 0x0 [ 422.272873][ T30] audit: type=1400 audit(2000000008.420:1146): avc: denied { remount } for pid=23989 comm="syz.2.7304" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 422.294862][ T976] logitech 0003:046D:C298.0017: unknown main item tag 0x0 [ 422.301629][ T30] audit: type=1400 audit(2000000008.480:1147): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 422.320749][ T976] logitech 0003:046D:C298.0017: unknown main item tag 0x0 [ 422.365902][ T976] logitech 0003:046D:C298.0017: unknown main item tag 0x0 [ 422.376842][T23979] fido_id[23979]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 422.382415][ T976] logitech 0003:046D:C298.0017: unknown main item tag 0x0 [ 422.453617][ T976] logitech 0003:046D:C298.0017: hidraw0: USB HID v0.00 Device [HID 046d:c298] on usb-dummy_hcd.5-1/input0 [ 422.498260][ T976] logitech 0003:046D:C298.0017: no inputs found [ 422.533760][ T976] usb 6-1: USB disconnect, device number 10 [ 422.601713][T24010] fido_id[24010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 422.798198][ T5975] usb 3-1: new low-speed USB device number 99 using dummy_hcd [ 422.960160][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 422.994694][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.018689][ T5975] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 423.043764][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.063914][ T5975] usb 3-1: config 0 descriptor?? [ 423.078924][ T30] audit: type=1400 audit(2000000009.290:1148): avc: denied { write } for pid=24048 comm="syz.4.7316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 423.098410][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.168423][ T976] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 423.184276][T24054] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7317'. [ 423.329667][ T976] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 423.350207][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 423.372650][ T976] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 423.391985][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.427572][ T976] usb 4-1: config 0 descriptor?? [ 423.439294][T24040] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 423.450018][ T976] hub 4-1:0.0: USB hub found [ 423.497655][ T5975] glorious 0003:258A:0036.0018: item fetching failed at offset 0/2 [ 423.517421][ T5975] glorious 0003:258A:0036.0018: probe with driver glorious failed with error -22 [ 423.666849][ T976] hub 4-1:0.0: 2 ports detected [ 423.732062][ T5916] usb 3-1: USB disconnect, device number 99 [ 423.789402][ T5975] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 423.814279][T24099] team0: Device gtp1 is of different type [ 423.951593][ T5975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.969403][ T5975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.984862][ T5975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.996136][ T5975] usb 1-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 424.016674][ T5975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.032199][T24113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.035723][ T5975] usb 1-1: config 0 descriptor?? [ 424.075222][ T976] hub 4-1:0.0: set hub depth failed [ 424.103165][ T976] usb 4-1: USB disconnect, device number 42 [ 424.431185][T24144] netlink: 'syz.5.7336': attribute type 10 has an invalid length. [ 424.444069][T24144] team0: Port device netdevsim0 added [ 424.455966][T24144] netlink: 'syz.5.7336': attribute type 10 has an invalid length. [ 424.468982][ T5975] wacom 0003:056A:0010.0019: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 424.481368][T24144] team0: Port device netdevsim0 removed [ 424.483787][ T5975] wacom 0003:056A:0010.0019: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.0-1/input0 [ 424.492403][T24144] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 424.504287][ T5975] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0010.0019/input/input57 [ 424.558468][ T976] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 424.588804][ T5943] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 424.722162][ T44] usb 1-1: USB disconnect, device number 102 [ 424.734000][ T976] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 424.748324][ T5943] usb 3-1: Using ep0 maxpacket: 16 [ 424.763903][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.778884][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.788603][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.799348][ T976] usb 5-1: Product: syz [ 424.803849][ T976] usb 5-1: Manufacturer: syz [ 424.817257][ T976] usb 5-1: SerialNumber: syz [ 424.822387][ T5943] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 424.851182][ T976] usb 5-1: config 0 descriptor?? [ 424.866929][ T976] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 424.873405][ T5943] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 424.883708][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.896208][ T5943] usb 3-1: config 0 descriptor?? [ 424.908955][ T5975] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 425.063638][ T976] gspca_sn9c2028: read1 error -71 [ 425.069951][ T5975] usb 6-1: Using ep0 maxpacket: 32 [ 425.070631][ T976] gspca_sn9c2028: read1 error -71 [ 425.077735][ T5975] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 425.080774][ T976] gspca_sn9c2028: read1 error -71 [ 425.093666][ T5975] usb 6-1: config 0 has no interface number 0 [ 425.094347][ T976] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 425.100884][ T5975] usb 6-1: config 0 interface 184 has no altsetting 0 [ 425.120687][ T5975] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 425.122134][ T976] usb 5-1: USB disconnect, device number 112 [ 425.135440][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.146835][ T5975] usb 6-1: Product: syz [ 425.151579][ T5975] usb 6-1: Manufacturer: syz [ 425.156516][ T5975] usb 6-1: SerialNumber: syz [ 425.183327][ T5975] usb 6-1: config 0 descriptor?? [ 425.191923][ T5975] smsc75xx v1.0.0 [ 425.358469][ T5943] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 425.400564][ T5943] microsoft 0003:045E:07DA.001A: no inputs found [ 425.406930][ T5943] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 425.574366][ T976] usb 3-1: USB disconnect, device number 100 [ 425.611813][ T5915] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 425.776309][ T5915] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 425.794696][ T5915] usb 4-1: config 0 has no interface number 0 [ 425.800939][ T30] audit: type=1400 audit(2000000012.000:1149): avc: denied { ioctl } for pid=24234 comm="syz.0.7351" path="socket:[60351]" dev="sockfs" ino=60351 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 425.827018][ T5975] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 425.838765][ T5915] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.850774][ T5975] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 425.860864][ T5915] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.874124][ T5975] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 425.885144][ T5915] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 425.898294][ T44] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 425.898464][ T5975] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 425.915951][ T5915] usb 4-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 425.925347][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.943323][ T5975] usb 6-1: USB disconnect, device number 11 [ 425.952223][ T5915] usb 4-1: config 0 descriptor?? [ 426.074382][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.088348][ T44] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 426.102033][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.139443][ T44] usb 5-1: config 0 descriptor?? [ 426.329887][T24262] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 426.382342][ T5915] uclogic 0003:28BD:0934.001B: Interface probing failed: -22 [ 426.408372][ T5915] uclogic 0003:28BD:0934.001B: interface is invalid, ignoring [ 426.583951][ T44] gembird 0003:11FF:3331.001C: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.4-1/input0 [ 426.633082][ T5915] usb 4-1: USB disconnect, device number 43 [ 426.807715][ T5975] usb 5-1: USB disconnect, device number 113 [ 427.484259][T24321] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 427.594101][ T30] audit: type=1400 audit(2000000013.800:1150): avc: denied { append } for pid=24328 comm="syz.0.7374" name="video7" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 427.617357][ C0] vkms_vblank_simulate: vblank timer overrun [ 428.110704][T24358] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.7386' sets config #1 [ 428.348156][ T5943] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 428.508058][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 428.521070][ T5943] usb 5-1: config 36 has an invalid interface number: 228 but max is 0 [ 428.541420][ T5943] usb 5-1: config 36 has no interface number 0 [ 428.551016][ T5943] usb 5-1: config 36 interface 228 altsetting 68 endpoint 0x7 has invalid wMaxPacketSize 0 [ 428.565104][ T5943] usb 5-1: config 36 interface 228 altsetting 68 bulk endpoint 0x7 has invalid maxpacket 0 [ 428.578578][ T5915] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 428.596518][ T5943] usb 5-1: config 36 interface 228 has no altsetting 0 [ 428.632469][ T5943] usb 5-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 428.666174][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 428.686747][ T5943] usb 5-1: Product: syz [ 428.691163][ T5943] usb 5-1: Manufacturer: syz [ 428.706997][ T5943] usb 5-1: SerialNumber: syz [ 428.749600][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.779902][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.814816][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.847884][ T5915] usb 3-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 428.866537][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.877593][T24400] rtc_cmos 00:00: Alarms can be up to one day in the future [ 428.890375][ T5915] usb 3-1: config 0 descriptor?? [ 429.021544][T23041] udevd[23041]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.043765][ T5943] usb 5-1: USB disconnect, device number 114 [ 429.078033][ T976] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 429.238051][ T976] usb 6-1: Using ep0 maxpacket: 32 [ 429.254652][ T976] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 429.263602][ T976] usb 6-1: config 0 has no interface number 0 [ 429.279510][ T976] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 429.289195][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.297521][ T976] usb 6-1: Product: syz [ 429.302734][ T976] usb 6-1: Manufacturer: syz [ 429.309377][ T976] usb 6-1: SerialNumber: syz [ 429.323025][ T5915] wacom 0003:056A:0010.001D: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 429.328676][ T976] usb 6-1: config 0 descriptor?? [ 429.357504][ T5915] wacom 0003:056A:0010.001D: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.2-1/input0 [ 429.359207][ T976] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 429.379116][ T5915] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0010.001D/input/input60 [ 429.429386][ T976] usb 6-1: selecting invalid altsetting 1 [ 429.442362][ T976] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 429.477227][ T976] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 429.519671][ T976] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 429.522370][ T5915] usb 3-1: USB disconnect, device number 101 [ 429.565336][ T976] usb 6-1: media controller created [ 429.659814][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 430.038286][ T5943] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 430.162285][ T30] audit: type=1400 audit(2000000016.370:1151): avc: denied { write } for pid=24498 comm="syz.0.7420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 430.181788][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.201018][ T5943] usb 4-1: Using ep0 maxpacket: 32 [ 430.210930][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.234369][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.252109][ T5943] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 430.273151][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.292060][ T5943] usb 4-1: config 0 descriptor?? [ 430.315509][ T5943] hub 4-1:0.0: USB hub found [ 430.522533][ T5943] hub 4-1:0.0: 1 port detected [ 430.650787][T24392] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 430.688405][ T976] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 430.705874][ T976] zl10353_read_register: readreg error (reg=127, ret==-71) [ 430.721530][ T976] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 430.738126][ T5943] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 430.748448][ T5943] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 430.775164][ T5943] usbhid 4-1:0.0: can't add hid device: -71 [ 430.797587][ T5943] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 430.851151][ T976] usb 6-1: USB disconnect, device number 12 [ 430.864248][ T5943] usb 4-1: USB disconnect, device number 44 [ 431.050937][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 431.319586][ T30] audit: type=1400 audit(2000000017.530:1152): avc: denied { connect } for pid=24564 comm="syz.4.7435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 431.361006][T24568] Bluetooth: MGMT ver 1.23 [ 431.484925][ T30] audit: type=1400 audit(2000000017.690:1153): avc: denied { ioctl } for pid=24574 comm="syz.4.7439" path="/dev/nvram" dev="devtmpfs" ino=622 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 431.789662][T24594] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7446'. [ 431.798912][T24594] netlink: 'syz.5.7446': attribute type 4 has an invalid length. [ 431.808515][ T30] audit: type=1400 audit(2000000017.980:1154): avc: denied { shutdown } for pid=24588 comm="syz.2.7445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 432.825649][T24645] netlink: 'syz.2.7467': attribute type 1 has an invalid length. [ 432.951686][ T30] audit: type=1400 audit(2000000019.150:1155): avc: denied { connect } for pid=24654 comm="syz.4.7472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 433.103012][T24666] program syz.4.7476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.175907][T24668] program syz.4.7476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.418024][ T5975] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 433.578681][ T5975] usb 6-1: Using ep0 maxpacket: 16 [ 433.597775][ T5975] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 433.616871][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.635016][ T5975] usb 6-1: Product: syz [ 433.645650][ T5975] usb 6-1: Manufacturer: syz [ 433.653555][ T5975] usb 6-1: SerialNumber: syz [ 433.666070][ T5975] usb 6-1: config 0 descriptor?? [ 433.675755][ T5975] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 433.884336][T24726] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7498'. [ 433.896027][T24726] netlink: 'syz.3.7498': attribute type 3 has an invalid length. [ 434.004934][T24736] netlink: 'syz.3.7501': attribute type 6 has an invalid length. [ 434.016319][T24736] netlink: 'syz.3.7501': attribute type 6 has an invalid length. [ 434.087023][ T5975] usb 6-1: clie_3_5_startup: get interface number bad return length: 0 [ 434.098109][ T976] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 434.111445][ T5975] visor 6-1:0.0: probe with driver visor failed with error -5 [ 434.177741][T24745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7505'. [ 434.268269][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 434.278857][T24750] vxcan3: entered promiscuous mode [ 434.285625][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.307202][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.320541][ T5975] usb 6-1: USB disconnect, device number 13 [ 434.329426][ T976] usb 5-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 434.347851][ T976] usb 5-1: New USB device strings: Mfr=27, Product=0, SerialNumber=0 [ 434.366270][ T976] usb 5-1: Manufacturer: syz [ 434.390043][ T976] usb 5-1: config 0 descriptor?? [ 434.822702][ T976] ntrig 0003:1B96:000C.001E: item fetching failed at offset 0/2 [ 434.839185][ T976] ntrig 0003:1B96:000C.001E: parse failed [ 434.855199][ T976] ntrig 0003:1B96:000C.001E: probe with driver ntrig failed with error -22 [ 435.035878][ T5943] usb 5-1: USB disconnect, device number 115 [ 435.122012][T24821] sp0: Synchronizing with TNC [ 435.147555][T24818] [U] è [ 435.988895][T24868] futex_wake_op: syz.4.7538 tries to shift op by -1; fix this program [ 436.366167][T24899] vivid-003: disconnect [ 436.375667][T24898] vivid-003: reconnect [ 436.458276][ T5943] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 436.639195][ T5943] usb 3-1: Using ep0 maxpacket: 16 [ 436.658346][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.691853][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.713544][ T5943] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 436.737198][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.779146][ T5943] usb 3-1: config 0 descriptor?? [ 436.828878][T24927] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 436.831039][T24928] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 1 [ 436.845547][T24930] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 2 [ 436.994628][T24932] IPVS: stopping backup sync thread 24931 ... [ 437.004679][T24932] IPVS: stopping backup sync thread 24930 ... [ 437.011247][T24932] IPVS: stopping backup sync thread 24928 ... [ 437.012222][T24932] IPVS: stopping backup sync thread 24927 ... [ 437.754056][ T5943] playstation 0003:054C:05C4.001F: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 437.842624][ T5943] playstation 0003:054C:05C4.001F: Failed to retrieve feature with reportID 18: -71 [ 437.842656][ T5943] playstation 0003:054C:05C4.001F: Failed to retrieve DualShock4 pairing info: -71 [ 437.842705][ T5943] playstation 0003:054C:05C4.001F: Failed to get MAC address from DualShock4 [ 437.842724][ T5943] playstation 0003:054C:05C4.001F: Failed to create dualshock4. [ 437.855251][ T5943] playstation 0003:054C:05C4.001F: probe with driver playstation failed with error -71 [ 437.877887][ T5943] usb 3-1: USB disconnect, device number 102 [ 438.395723][T24934] sp0: Synchronizing with TNC [ 440.423778][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.432657][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.867966][ C1] sched: DL replenish lagged too much [ 502.335712][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.344568][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 542.202320][ T31] INFO: task kworker/u8:8:2979 blocked for more than 147 seconds. [ 542.202356][ T31] Not tainted syzkaller #0 [ 542.202370][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 542.202380][ T31] task:kworker/u8:8 state:D stack:24216 pid:2979 tgid:2979 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 542.202440][ T31] Workqueue: ib-unreg-wq ib_unregister_work [ 542.202481][ T31] Call Trace: [ 542.202490][ T31] [ 542.202504][ T31] __schedule+0x1190/0x5de0 [ 542.202541][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 542.202571][ T31] ? __pfx___schedule+0x10/0x10 [ 542.202602][ T31] ? find_held_lock+0x2b/0x80 [ 542.202631][ T31] ? schedule+0x2d7/0x3a0 [ 542.202659][ T31] schedule+0xe7/0x3a0 [ 542.202683][ T31] schedule_timeout+0x257/0x290 [ 542.202706][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 542.202738][ T31] ? mark_held_locks+0x49/0x80 [ 542.202760][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 542.202787][ T31] __wait_for_common+0x2f9/0x4e0 [ 542.202814][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 542.202841][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 542.202872][ T31] ? ib_cq_pool_cleanup+0x220/0x360 [ 542.202909][ T31] disable_device+0x16f/0x280 [ 542.202938][ T31] ? __pfx_disable_device+0x10/0x10 [ 542.202975][ T31] __ib_unregister_device+0x2b4/0x480 [ 542.203006][ T31] ? rcu_is_watching+0x12/0xc0 [ 542.203039][ T31] ib_unregister_work+0x19/0x30 [ 542.203067][ T31] process_one_work+0x9cf/0x1b70 [ 542.203106][ T31] ? __pfx_process_one_work+0x10/0x10 [ 542.203141][ T31] ? assign_work+0x1a0/0x250 [ 542.203168][ T31] worker_thread+0x6c8/0xf10 [ 542.203207][ T31] ? __pfx_worker_thread+0x10/0x10 [ 542.203237][ T31] kthread+0x3c5/0x780 [ 542.203261][ T31] ? __pfx_kthread+0x10/0x10 [ 542.203287][ T31] ? rcu_is_watching+0x12/0xc0 [ 542.203315][ T31] ? __pfx_kthread+0x10/0x10 [ 542.203340][ T31] ret_from_fork+0x56a/0x730 [ 542.203363][ T31] ? __pfx_kthread+0x10/0x10 [ 542.203388][ T31] ret_from_fork_asm+0x1a/0x30 [ 542.203431][ T31] [ 542.203499][ T31] [ 542.203499][ T31] Showing all locks held in the system: [ 542.203509][ T31] 1 lock held by kthreadd/2: [ 542.203524][ T31] 1 lock held by kworker/R-kvfre/6: [ 542.203537][ T31] #0: ffffffff8e0793e8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 542.203594][ T31] 1 lock held by kworker/0:0/9: [ 542.203607][ T31] #0: ffffffff8e0793e8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 542.203662][ T31] 4 locks held by kworker/u8:0/12: [ 542.203676][ T31] 6 locks held by kworker/u8:1/13: [ 542.203689][ T31] 1 lock held by kworker/R-mm_pe/14: [ 542.203703][ T31] #0: ffffffff8e0793e8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 542.203759][ T31] 4 locks held by kworker/1:0/24: [ 542.203773][ T31] 1 lock held by khungtaskd/31: [ 542.203785][ T31] #0: ffffffff8e1c34a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 542.203841][ T31] 4 locks held by kworker/u8:2/36: [ 542.203855][ T31] 3 locks held by kworker/u8:3/37: [ 542.203868][ T31] 3 locks held by kworker/1:1/44: [ 542.203882][ T31] #0: ffff88801b079148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 542.203938][ T31] #1: ffffc90000b47d10 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 542.203993][ T31] #2: ffffffff8e1cea38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 542.204049][ T31] 4 locks held by kworker/1:2/55: [ 542.204062][ T31] 3 locks held by kworker/u8:4/79: [ 542.204079][ T31] 3 locks held by kworker/1:3/976: [ 542.204093][ T31] 4 locks held by kworker/u8:5/999: [ 542.204106][ T31] #0: ffff88801beec148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 542.204163][ T31] #1: ffffc900039efd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 542.204220][ T31] #2: ffffffff8feb1d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 542.204284][ T31] #3: ffffffff8fec80c8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0xebf/0x1320 [ 542.204343][ T31] 3 locks held by kworker/u8:6/1138: [ 542.204357][ T31] 3 locks held by kworker/0:2/1206: [ 542.204370][ T31] #0: ffff88801b07a148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 542.204428][ T31] #1: ffffc900041dfd10 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 542.204484][ T31] #2: ffffffff8fec80c8 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x15/0x50 [ 542.204556][ T31] 2 locks held by kworker/u8:7/2967: [ 542.204570][ T31] 3 locks held by kworker/u8:8/2979: [ 542.204583][ T31] #0: ffff888022abe148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 542.204640][ T31] #1: ffffc9000bd47d10 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 542.204698][ T31] #2: ffff88803d494700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 542.204760][ T31] 4 locks held by kworker/u8:9/3006: [ 542.204773][ T31] 3 locks held by kworker/R-ipv6_/3199: [ 542.204786][ T31] #0: ffff88814cd65148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 542.204843][ T31] #1: ffffc9000c157ca8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 542.204900][ T31] #2: ffffffff8fec80c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 542.204954][ T31] 1 lock held by kworker/R-krxrp/3406: [ 542.204984][ T31] 1 lock held by kworker/R-bat_e/3423: [ 542.204997][ T31] #0: ffffffff8e0793e8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 542.205053][ T31] 4 locks held by kworker/u8:10/4875: [ 542.205067][ T31] 1 lock held by udevd/5198: [ 542.205080][ T31] 2 locks held by dhcpcd/5493: [ 542.205093][ T31] #0: ffff888031d166d8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 542.205152][ T31] #1: ffffffff8fec80c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x18f/0x1f0 [ 542.205214][ T31] 2 locks held by getty/5585: [ 542.205234][ T31] #0: ffff8880357350a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 542.205288][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 542.205351][ T31] 2 locks held by syz-executor/5811: [ 542.205364][ T31] 2 locks held by syz-executor/5821: [ 542.205378][ T31] 2 locks held by syz-executor/5822: [ 542.205392][ T31] 4 locks held by kworker/u9:4/5835: [ 542.205405][ T31] #0: ffff888030df3148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 542.205462][ T31] #1: ffffc9000424fd10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 542.205519][ T31] #2: ffff88807cb38dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 542.205578][ T31] #3: ffff88807cb380b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb20 [ 542.205638][ T31] 1 lock held by kworker/R-wg-cr/5860: [ 542.205651][ T31] #0: ffffffff8e0793e8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 542.205706][ T31] 1 lock held by kworker/R-wg-cr/5861: [ 542.205719][ T31] #0: ffffffff8e0793e8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 542.205776][ T31] 1 lock held by kworker/R-wg-cr/5867: [ 542.205788][ T31] #0: ffffffff8e0793e8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 542.205845][ T31] 1 lock held by kworker/R-wg-cr/5869: [ 542.205858][ T31] #0: ffffffff8e0793e8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 542.205913][ T31] 1 lock held by kworker/R-wg-cr/5871: [ 542.205926][ T31] #0: ffffffff8e0793e8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 542.205983][ T31] 3 locks held by kworker/1:5/5894: [ 542.205997][ T31] 4 locks held by kworker/0:3/5901: [ 542.206010][ T31] #0: ffff88805304a148 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 542.206072][ T31] #1: ffffc9000454fd10 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 542.206146][ T31] #2: ffff88807c97d308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 542.206211][ T31] #3: ffff888078e66648 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 542.206277][ T31] 3 locks held by kworker/0:4/5902: [ 542.206292][ T31] 2 locks held by kworker/0:5/5915: [ 542.206305][ T31] 3 locks held by kworker/1:6/5916: [ 542.206318][ T31] 3 locks held by kworker/1:7/5943: [ 542.206331][ T31] 4 locks held by kworker/0:7/5975: [ 542.206345][ T31] #0: ffff88801b079148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 542.206402][ T31] #1: ffffc9000548fd10 (reg_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 542.206458][ T31] #2: ffffffff8fec80c8 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0x900 [ 542.206516][ T31] #3: ffff88807c0d8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x9e/0x210 [ 542.206577][ T31] 1 lock held by kworker/R-bond1/9652: [ 542.206591][ T31] #0: ffffffff8e0793e8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 542.206646][ T31] 3 locks held by kworker/u8:11/9865: [ 542.206659][ T31] 3 locks held by kworker/u8:12/9869: [ 542.206672][ T31] 4 locks held by kworker/u8:13/9870: [ 542.206686][ T31] 1 lock held by kworker/R-bond3/11285: [ 542.206699][ T31] #0: ffffffff8e0793e8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 542.206755][ T31] 1 lock held by kworker/R-bond2/14876: [ 542.206768][ T31] #0: ffffffff8e0793e8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 542.206824][ T31] 1 lock held by kworker/R-bond7/18412: [ 542.206836][ T31] #0: ffffffff8e0793e8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 542.206891][ T31] 1 lock held by kworker/R-bond8/19326: [ 542.206904][ T31] #0: ffffffff8e0793e8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 542.206960][ T31] 2 locks held by syz-executor/20208: [ 542.206973][ T31] 1 lock held by kworker/R-wg-cr/20516: [ 542.206986][ T31] #0: ffffffff8e0793e8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 542.207042][ T31] 1 lock held by kworker/R-wg-cr/20526: [ 542.207055][ T31] #0: ffffffff8e0793e8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 542.207112][ T31] 1 lock held by kworker/R-wg-cr/20531: [ 542.207128][ T31] 5 locks held by syz.3.7554/24920: [ 542.207141][ T31] 2 locks held by fido_id/24938: [ 542.207154][ T31] 3 locks held by kworker/u8:14/24958: [ 542.207167][ T31] 4 locks held by kworker/u8:15/24959: [ 542.207181][ T31] 2 locks held by kworker/u8:16/24960: [ 542.207194][ T31] 7 locks held by kworker/u8:17/24962: [ 542.207208][ T31] [ 542.207214][ T31] ============================================= [ 542.207214][ T31] [ 542.207224][ T31] NMI backtrace for cpu 1 [ 542.207247][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 542.207271][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 542.207282][ T31] Call Trace: [ 542.207289][ T31] [ 542.207297][ T31] dump_stack_lvl+0x116/0x1f0 [ 542.207325][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 542.207358][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 542.207380][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 542.207414][ T31] watchdog+0xf0e/0x1260 [ 542.207446][ T31] ? __pfx_watchdog+0x10/0x10 [ 542.207469][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 542.207496][ T31] ? __kthread_parkme+0x19e/0x250 [ 542.207527][ T31] ? __pfx_watchdog+0x10/0x10 [ 542.207552][ T31] kthread+0x3c5/0x780 [ 542.207574][ T31] ? __pfx_kthread+0x10/0x10 [ 542.207598][ T31] ? rcu_is_watching+0x12/0xc0 [ 542.207624][ T31] ? __pfx_kthread+0x10/0x10 [ 542.207647][ T31] ret_from_fork+0x56a/0x730 [ 542.207667][ T31] ? __pfx_kthread+0x10/0x10 [ 542.207689][ T31] ret_from_fork_asm+0x1a/0x30 [ 542.207727][ T31] [ 542.207735][ T31] Sending NMI from CPU 1 to CPUs 0: [ 542.207763][ C0] NMI backtrace for cpu 0 [ 542.207775][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 542.207798][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 542.207811][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 542.207831][ C0] RIP: 0010:match_held_lock+0x5f/0xc0 [ 542.207854][ C0] Code: 28 5c 8f 48 2d 60 a9 81 95 48 c1 f8 03 48 0f af c2 0f b7 53 20 5b 81 e2 ff 1f 00 00 48 39 d0 0f 94 c0 0f b6 c0 e9 d1 01 03 00 01 00 00 00 5b e9 c6 01 03 00 31 f6 e8 2f fe ff ff 48 85 c0 75 [ 542.207872][ C0] RSP: 0018:ffffc900000072a0 EFLAGS: 00000046 [ 542.207887][ C0] RAX: 0000000000000019 RBX: ffff88801dac8bf8 RCX: ffffc900000072ec [ 542.207902][ C0] RDX: 0000000000000006 RSI: ffffffff8e1c34a0 RDI: ffff88801dac8bf8 [ 542.207913][ C0] RBP: 0000000000000005 R08: 0000000000000001 R09: 0000000000000000 [ 542.207924][ C0] R10: 0000000000000005 R11: 0000000000082cd9 R12: ffffffff8e1c34a0 [ 542.207936][ C0] R13: ffffc900000072ec R14: 0000000000000006 R15: 0000000000000006 [ 542.207948][ C0] FS: 0000000000000000(0000) GS:ffff888124e71000(0000) knlGS:0000000000000000 [ 542.207967][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.207988][ C0] CR2: 0000200000028000 CR3: 000000000df82000 CR4: 00000000003526f0 [ 542.208002][ C0] Call Trace: [ 542.208009][ C0] [ 542.208016][ C0] find_held_lock+0x2b/0x80 [ 542.208043][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 542.208068][ C0] lock_release+0xe4/0x2f0 [ 542.208090][ C0] unwind_next_frame+0x3f9/0x20a0 [ 542.208114][ C0] ? net_rx_action+0xa9f/0xfe0 [ 542.208136][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 542.208167][ C0] arch_stack_walk+0x94/0x100 [ 542.208193][ C0] ? handle_softirqs+0x216/0x8e0 [ 542.208221][ C0] stack_trace_save+0x8e/0xc0 [ 542.208248][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 542.208277][ C0] ? br_netif_receive_skb+0xff/0x200 [ 542.208307][ C0] kasan_save_stack+0x33/0x60 [ 542.208334][ C0] ? kasan_save_stack+0x33/0x60 [ 542.208360][ C0] ? kasan_save_track+0x14/0x30 [ 542.208387][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 542.208415][ C0] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 542.208443][ C0] ? __skb_ext_alloc+0x1a/0x80 [ 542.208472][ C0] ? skb_ext_add+0x232/0x7a0 [ 542.208499][ C0] ? br_nf_pre_routing+0xc5e/0x15b0 [ 542.208527][ C0] ? br_handle_frame+0xad8/0x14b0 [ 542.208552][ C0] ? __netif_receive_skb_core.constprop.0+0xa25/0x4bd0 [ 542.208575][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 542.208595][ C0] ? __netif_receive_skb+0x1d/0x160 [ 542.208615][ C0] ? process_backlog+0x442/0x15e0 [ 542.208635][ C0] ? __napi_poll.constprop.0+0xba/0x550 [ 542.208655][ C0] ? net_rx_action+0xa9f/0xfe0 [ 542.208692][ C0] kasan_save_track+0x14/0x30 [ 542.208719][ C0] __kasan_slab_alloc+0x89/0x90 [ 542.208748][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 542.208777][ C0] ? __skb_ext_alloc+0x1a/0x80 [ 542.208808][ C0] __skb_ext_alloc+0x1a/0x80 [ 542.208836][ C0] skb_ext_add+0x232/0x7a0 [ 542.208864][ C0] ? br_validate_ipv4+0x422/0x780 [ 542.208893][ C0] br_nf_pre_routing+0xc5e/0x15b0 [ 542.208923][ C0] br_handle_frame+0xad8/0x14b0 [ 542.208951][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 542.208982][ C0] ? kdf.constprop.0+0x122/0x280 [ 542.209007][ C0] ? message_ephemeral+0x5f/0x70 [ 542.209031][ C0] ? wg_noise_handshake_create_initiation+0x322/0x610 [ 542.209062][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 542.209089][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 542.209117][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 542.209143][ C0] __netif_receive_skb_core.constprop.0+0xa25/0x4bd0 [ 542.209171][ C0] ? mark_held_locks+0x49/0x80 [ 542.209190][ C0] ? kasan_quarantine_put+0x10a/0x240 [ 542.209218][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 542.209240][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 542.209266][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 542.209297][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 542.209326][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 542.209354][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 542.209376][ C0] ? process_backlog+0x3f0/0x15e0 [ 542.209396][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 542.209418][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 542.209440][ C0] ? lock_acquire+0x179/0x350 [ 542.209463][ C0] ? process_backlog+0x3f0/0x15e0 [ 542.209483][ C0] __netif_receive_skb+0x1d/0x160 [ 542.209504][ C0] process_backlog+0x442/0x15e0 [ 542.209529][ C0] __napi_poll.constprop.0+0xba/0x550 [ 542.209552][ C0] net_rx_action+0xa9f/0xfe0 [ 542.209578][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 542.209600][ C0] ? mark_held_locks+0x49/0x80 [ 542.209619][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 542.209643][ C0] ? tmigr_handle_remote+0x132/0x380 [ 542.209675][ C0] ? run_timer_base+0x121/0x190 [ 542.209695][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 542.209718][ C0] handle_softirqs+0x216/0x8e0 [ 542.209746][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 542.209774][ C0] ? kernel_fpu_end+0x59/0x70 [ 542.209797][ C0] do_softirq+0xb2/0xf0 [ 542.209822][ C0] [ 542.209829][ C0] [ 542.209836][ C0] __local_bh_enable_ip+0x100/0x120 [ 542.209863][ C0] kernel_fpu_end+0x5e/0x70 [ 542.209886][ C0] blake2s_compress+0x7b/0xe0 [ 542.209914][ C0] blake2s_update+0xef/0x360 [ 542.209940][ C0] hmac.constprop.0+0x32a/0x420 [ 542.209966][ C0] ? __pfx_hmac.constprop.0+0x10/0x10 [ 542.210001][ C0] ? __pfx_curve25519_ever64_base+0x10/0x10 [ 542.210037][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 542.210063][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 542.210086][ C0] ? kernel_fpu_end+0x59/0x70 [ 542.210109][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 542.210137][ C0] kdf.constprop.0+0x122/0x280 [ 542.210164][ C0] ? __pfx_kdf.constprop.0+0x10/0x10 [ 542.210189][ C0] ? __pfx_mix_hash+0x10/0x10 [ 542.210222][ C0] message_ephemeral+0x5f/0x70 [ 542.210247][ C0] wg_noise_handshake_create_initiation+0x322/0x610 [ 542.210279][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 542.210309][ C0] ? find_held_lock+0x2b/0x80 [ 542.210335][ C0] ? ktime_get_coarse_with_offset+0x1af/0x240 [ 542.210367][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 542.210391][ C0] ? ktime_get_coarse_with_offset+0x1c1/0x240 [ 542.210421][ C0] ? ktime_get_coarse_with_offset+0x150/0x240 [ 542.210455][ C0] wg_packet_send_handshake_initiation+0x19a/0x360 [ 542.210478][ C0] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 542.210500][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 542.210531][ C0] wg_packet_handshake_send_worker+0x1c/0x30 [ 542.210553][ C0] process_one_work+0x9cf/0x1b70 [ 542.210580][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 542.210603][ C0] ? __pfx_process_one_work+0x10/0x10 [ 542.210630][ C0] ? assign_work+0x1a0/0x250 [ 542.210653][ C0] worker_thread+0x6c8/0xf10 [ 542.210681][ C0] ? __pfx_worker_thread+0x10/0x10 [ 542.210704][ C0] kthread+0x3c5/0x780 [ 542.210725][ C0] ? __pfx_kthread+0x10/0x10 [ 542.210747][ C0] ? rcu_is_watching+0x12/0xc0 [ 542.210773][ C0] ? __pfx_kthread+0x10/0x10 [ 542.210795][ C0] ret_from_fork+0x56a/0x730 [ 542.210815][ C0] ? __pfx_kthread+0x10/0x10 [ 542.210836][ C0] ret_from_fork_asm+0x1a/0x30 [ 542.210868][ C0] [ 542.427730][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 542.427752][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 542.427779][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 542.427791][ T31] Call Trace: [ 542.427800][ T31] [ 542.427809][ T31] dump_stack_lvl+0x3d/0x1f0 [ 542.427839][ T31] vpanic+0x6e8/0x7a0 [ 542.427861][ T31] ? __pfx_vpanic+0x10/0x10 [ 542.427884][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 542.427915][ T31] panic+0xca/0xd0 [ 542.427931][ T31] ? __pfx_panic+0x10/0x10 [ 542.427951][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 542.427990][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 542.428024][ T31] ? watchdog+0xd78/0x1260 [ 542.428049][ T31] ? watchdog+0xd6b/0x1260 [ 542.428076][ T31] watchdog+0xd89/0x1260 [ 542.428106][ T31] ? __pfx_watchdog+0x10/0x10 [ 542.428131][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 542.428157][ T31] ? __kthread_parkme+0x19e/0x250 [ 542.428188][ T31] ? __pfx_watchdog+0x10/0x10 [ 542.428214][ T31] kthread+0x3c5/0x780 [ 542.428236][ T31] ? __pfx_kthread+0x10/0x10 [ 542.428260][ T31] ? rcu_is_watching+0x12/0xc0 [ 542.428287][ T31] ? __pfx_kthread+0x10/0x10 [ 542.428310][ T31] ret_from_fork+0x56a/0x730 [ 542.428332][ T31] ? __pfx_kthread+0x10/0x10 [ 542.428353][ T31] ret_from_fork_asm+0x1a/0x30 [ 542.428391][ T31] [ 542.428598][ T31] Kernel Offset: disabled