last executing test programs: 8.862168416s ago: executing program 0 (id=1677): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = open(0x0, 0x0, 0x0) getdents(r7, 0x0, 0x0) 7.847248183s ago: executing program 0 (id=1680): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c0c5}, 0x4040800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x6, 0x10002) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44) 6.729456977s ago: executing program 0 (id=1682): socket$igmp6(0xa, 0x3, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40084) setsockopt(0xffffffffffffffff, 0xfff, 0x5, &(0x7f0000000300)="ef018ccbb85e70b1b4371b181e2991c0bad6c18e65ab2614442abeafc6b3cb0586b52f28bff39703004f7294a3f93089fc22eda1fc850b92541d0c3ecbdcb196108677e07cac6215f1dc4de0abed58fd09890330b3f3ff20648d22c965abd9296a39f494251ad2a6c6367e51c15db9dd264cdb80d2bdcda32f67619664d66e0e7019d5599a2fdf02a94fc60ecb20bc720cf74c5471a519d3153d7494f70981659882827ee3b832f329e28c505f0412c51fd394c038e13fae03b84a3911e3446b3731529fc74c6cae1a1fa7850a", 0xcd) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8004, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000800, 0x0, 0x0) r2 = syz_open_pts(r0, 0x80) r3 = dup3(r2, r0, 0x80000) read(r3, &(0x7f00000000c0)=""/226, 0xe2) 6.213305931s ago: executing program 2 (id=1689): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) 5.448892339s ago: executing program 0 (id=1691): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000380)={0x7, 0x1, 0x0, "6eccdf9b2ed51e03e6cdde42e5b9b568a530b0f30894c86c95a533c225abce37"}) 5.321941512s ago: executing program 1 (id=1692): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}]}], {0x14}}, 0xa4}}, 0x0) 4.747451394s ago: executing program 1 (id=1694): bpf$MAP_CREATE(0x0, &(0x7f0000002380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) 2.780994243s ago: executing program 0 (id=1701): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r0, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0xffffffff, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x4000000) 2.780647154s ago: executing program 4 (id=1702): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 2.698563643s ago: executing program 2 (id=1703): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r7 = epoll_create1(0x0) r8 = socket(0x1, 0x80802, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0xa000000d}) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x268, 0xffffff71) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r9, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r9) shutdown(r8, 0x0) close(r7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000280)=0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newtfilter={0x3c, 0x28, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x800) 2.55530527s ago: executing program 0 (id=1705): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e00"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000080)="10", 0x1) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.50470503s ago: executing program 1 (id=1707): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2000004, 0x29832, r2, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.405471379s ago: executing program 2 (id=1709): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 2.216791795s ago: executing program 3 (id=1710): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x40010, 0x24114}}}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) 2.162377224s ago: executing program 1 (id=1711): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000340)="7c53316655fd3a4193f63a7e03cb", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 2.161383134s ago: executing program 2 (id=1712): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000380)={0x7, 0x1, 0x0, "6eccdf9b2ed51e03e6cdde42e5b9b568a530b0f30894c86c95a533c225abce37"}) 2.113677154s ago: executing program 3 (id=1713): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) 2.112974979s ago: executing program 1 (id=1714): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) 1.991728928s ago: executing program 1 (id=1715): syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102f7"], 0x0) r0 = syz_usb_connect(0x0, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000200)="952bb3e006"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRES16=r2, @ANYRES16=r2, @ANYRES8=r2, @ANYRESOCT=r2, @ANYRESHEX=r2], 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0xffffffffffffffff, 0x1c1900) ioctl$EVIOCSKEYCODE(r2, 0x40084504, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000012c0)=""/4096) read$hidraw(0xffffffffffffffff, &(0x7f00000011c0)=""/213, 0xd5) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000200)={0x44, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES8, @ANYBLOB="1ef516c9d76f190745afe93dbf89380aadd2e9786feb0b69a334cf1690c995375b9cbdc9865e38c2b8016f2589b9befff9c2936823c87c77f5341a953adfb6f8d729e890da9e49a16c0e8d140d8ae1d64a092f3d7e61e95954f2e59cd21cf6d8da11c9f1a4e80829413ac7d0d71d94f4e613bd24ae4f9f0084133457f38146e532a38b43b3d5c61df00f16a4a360bdcef48cf1a3beb591d8bb321d5b6dc31cbd0a8e370ba988b626ed21ec2ed610921adcec9d59e273bfd75b0896623dbac9da47d08af22990cc6c7aef637d4d41c9bf560aadec4fce8465e11e1476fb2dcf9a89b087a8417095e19b3c4a047aa88e28f2e578693efce03bceaed35d89db9e124dc8668f3a63401bcaca3475e4920c33c3cf78625f21e79966ee4ff1a342b51153a55725c0d146701058f348505dcf08a12efd8c4d84891e9b68567d5879d98f8b4ed37eb1b2cd38b831dc2a6c009b418ea340ab422de9e254a13b8a3a00a2414e0c1d1a394a99da1c31083aff5a60c2c43e6abb510b9144249f037c3e3ee92778a95c6a986b280b7c438f54e57d9bb665d3db504e16f48e7936acc3b60004faf3a910c2024605b091c31aa408d650f6d8c921505e3e2c2429b30d47d2fa3cd43a7d9d4df5ff14292eff5d6fd1be9cef713e27f16255d7197af37c4b0290ba29da3eeab8cd1ba82b6d4ad550c534709fc9fcf1561198cd69aaefa2be449ec7c82e225200604a31a3b056b23a482479c6a113cca8c5ca3617223233dc6cb75cac3bc52e8b3897074edd4b3a0346f2ae05ae5d9b88edaee492decb341605b4d6a1a5f4c8ca076b3dfe971fda4aab000eba7c1377f0dafb7c78b5aa3a182b0f10b936a46c171b5c352f923edffa14730a501438858c0544b33c0fec4898039491bb5e8208f01a89ce4a4694c48c35fc3de3ea0c127f3215e21e4096d9ca339c7573e04d63b6ef98b8609c064bba4d97d74e0423e68f23ec9f5aa2775fedc0feaf2a07a2bbc53866686d5ef084e46567ee22e8f8a24b9c9400983d625650f118a4cf93fc81dbc72972c72991971fabbf5eafb6cce2a86d5ef3635d8aa54314e1f17a2d00089adec8bebb8b961d78cfd7b8a4b5cb7c357420228dac47b9eff511fec0962b06f5399136b00786b0811d3576b2b7e8b17d59bcfde96cf2c13530168d38b53605dcf9838f80ce29d0afbe93dcc8871e5e07c6e7a60bac6b7c63254a125c83e3a2b1541b174642e9201eab3842d488af07cc3902f69b1ee130823dc9855ef56c5e465d4bb5c494033598f6d39d33e95b0f5575a4a76ab29c111d060f8bc931be8bc332ff4e9a4f1dc046cbcede031620f9a6e3d97a0d01d79186baf0d9255b213d20d9bcc7bb8cabb25f4720c17469725e0cd0caab8c0d626dc2224f8e67cc44623bb6c5a07cdbccb73ccd8cce09a26e4dd0f2bbb7ecfed5544d20b0b95158c78ee4ee730f8527782fae1964d7ca444e5066d90bece76e98def0730babf322521971348849508c09b68bae920170ffbe1d694a10abb0a483d1b211d85f51f1a1a07e9901e86a3442428769a1b55734a68c1774c6ec3a6f70e7144d865c0bebd91fbe52f88b57625fa6c4879f10b3704f8c687c8a323a7976c68cd507e47d99b63a3f644050d3e758e47675eccf34bb90f44bf542dd948fc9193a4ccd754227b22516c0b2a23f898de6bc1e14ca08dda9ae65bfae7703448935eb55db8715a88338140319080c4be0d1a6f9c541ee5de1ad42658df9d6a8d443b5f3d9db1ff7716279969f14f121d2efa3bf60327874dec4955098e3e112b597ebd84300ae5706253d68aa1b53f3498fa2e5f7ffbe743f56b2d18dcdb2fc8765efacc98edf6c001489cc42794bd8f27c4357612d94ecc49eb506342086b3e35aa7a35261946c8199e492bdd8d4413ba37d716f87161ed3490edd8d6546f5da8557695b1be3573c416be0328177d08de9b6ec062b12d6670e93de7485389e1c4e9bd68660a6df7745c5f9b23b3ac129f7e3c14cba9c654b3494fc612abdc5a88d158d0324846bc06dedce85c2acbd6078d7ce2995fc6185b9ecfe66be4fab05f00c0730714deb7f5a0281d7f5baed64a7e12398b010c4af507117f9b526ee7b630f707f23365abb270b8e1b518ed9dd6d3a89910cc57b06c6d81d3e09c68e32f0f5b24b296437ffa2f6959e3233fed2fb63b9b64617cf50ac0816e2b71d2a85cf4a92bf1c5adfb25f306f98495a5daee6ad0f6e3df751cb0de45378cf86ae45b59e92e6c9fad84fff547ba6b1fb536a1f2834725b0303ba528b9f49aad7aa9589c32e2bc0dfddadb83881ed128cbe24889ebb40266032a8a21b76cd1af010ae7e5cc297f94d64efd9431b28c4124255a7fc2ed8f65f65fce090d6a563dfbd93dc08bb219eab3d06c9ce96e4cc5eff0730f7b6435a582bf7d8e1b4bbbf321ca575c65e2a3481d580440be58abe20ae51ca78ab17e4e19d77e7d68db3116f31b3f17de8081549c7ffefb4b268cd9c7fd2f1d8fb3fb4dfc74e061d4d6cafe058f317ba07fed43477a01d868bc07d925474ef0e0a7c53070de66562a50ca277bc34be503f41cbee9a0765b0221fef02fdfc2bc910d3ad793b8df4c5bd696ff12fa164da86ea8d3469b444a383676af0589ee874ffc55f3dd99ce44fed5f88c3b1eb55f86b3421b20a28f7ba36ba9d9d203a376eba2de9351e34608ac64f9f0f13241335684a20926046316f5eef18f3e28cf2d6bef02ce61202a5df783baf78f69cfc4b4f906d63e1ffe0724eae7aa51b61104d774237bc7f8714a75bfb2bc138845e9953d226b2956d63b81436328fc0055c61cc893d0be8e413237f6ac35c3cfdeda1ff0b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x0, 0x2, 0x39, {0x39, 0x22, "4da0d22fb527c4a98e59cd2f46e9363fc02463d6452b91a750ba9a67e348baf9abd6ce0d9d1cacfd39159acdadffd5522c2c0a51cc2e8d"}}, &(0x7f0000000140)={0x0, 0x3, 0x10, @string={0x10, 0x3, "ac4b084ed05ca0348b94c3f88e4d"}}, &(0x7f0000000b00)={0x0, 0xf, 0x10c, {0x5, 0xf, 0x10c, 0x4, [@wireless={0xb, 0x10, 0x1, 0x6, 0x1, 0x1, 0x8, 0x3ff, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0x0, 0xaf, 0x11}, @generic={0xea, 0x10, 0x3, "68705bf6b416732f7540e532556ca6ae07f3005c0ab4232e2699063628f4a87bc446e4da1c5a318dc2d7e8cb13000141d3e79c98a8f2c2254eefecfb19ab46e20c2dfb83e70d5d8f2e596a9bbec4a085b91347f0e1dc4458b8ea115ad521a109e073546673354689226fd709c3ebcc24a9788eb7f35805417376fbd560e21c5e407f4affdc87650e952b2acec850fcaa2c61ea54f7b982906e190102e8580dd99dc1a07d4b62b6dc25faf1c176a5c857b6aba49f623834c2fcc91c8e78f1adc95b4fc6db205452ddd38305006065dd3644fd707b0d8c5538314fdbd8fbe8d33d26d6059365c0a2"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x3, 0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0xff, 0x81, "95ae3724", "e590c84e"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x60, 0x9, 0x9, 0x6, 0x2, 0x3}}}, &(0x7f0000001100)={0x84, &(0x7f0000000c40)={0x20, 0x7a1e963ad6c9d341, 0xc8, "82238d28fa2664d035598f32ef970dcfa93ea623b52f3616daeb450aa9f551c926c1c431eab1b9573f0d16feb41ce6554d87804ff6236699008c6fddae4eacdb6ae3d27c38c9317719d921aac604b3fdc0a317164a0c11c72f023bb4588a3e61f9958e604e81852139c01540f40a9b8561913aea310ec11335a882d2f23f3468e9e9c173abe84520f3b3918e87ff832a9708642b56bafaccc17ffff61b52dc99f254de4c15ed96b5813cfb2931bf6f116e35daab3cf3800fd811f5512b318ffa0ce16ccc09c2b644"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x8}, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB='\x00'/10], &(0x7f0000000e40)={0x40, 0x7, 0x2, 0xc298}, &(0x7f0000000e80)={0x40, 0x9, 0x1}, &(0x7f0000000ec0)={0x40, 0xb, 0x2, 'Fn'}, &(0x7f0000000f00)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000000f40)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, &(0x7f0000000f80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000fc0)={0x40, 0x19, 0x2, "b442"}, &(0x7f0000001000)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001040)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001080)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000010c0)={0x40, 0x21, 0x1, 0x8}}) 1.060221392s ago: executing program 4 (id=1716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0xffffffff, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x4000000) 1.004241463s ago: executing program 4 (id=1717): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000380)=[@enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x72, {0x2, "440f20c03502000000440f22c00fc7b60000000066b8bf000f00d0b9800000c07f3235000400000f300f20a666bad104b801000000ef3e43c1dc1966baf80cb8983fe78fef66bafc0ced0fc7ba099d716a430fc7bc3700000000"}}], 0x8a}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000040)={0x0, &(0x7f0000000440)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control32=0x4002, 0x548803b5, 0x300000, 0x4000000000000001}}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0x80}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 949.045026ms ago: executing program 3 (id=1718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x48202) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000), 0x0) accept$alg(r2, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) 599.347026ms ago: executing program 3 (id=1719): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r7 = epoll_create1(0x0) r8 = socket(0x1, 0x80802, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0xa000000d}) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x268, 0xffffff71) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r9, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r9) shutdown(r8, 0x0) close(r7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000280)=0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newtfilter={0x3c, 0x28, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x800) 432.814227ms ago: executing program 4 (id=1720): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, 0x0, 0x0, 0x3e33, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00'}, 0x18) r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x5d, 0x80, 0x1, 0x3, 0x44, 0x8, 0x0, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x87, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0x6, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 421.124555ms ago: executing program 3 (id=1721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x4, 0x10}, {}, {0xffff, 0x6}}}, 0x24}}, 0x4000080) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) 289.601257ms ago: executing program 4 (id=1722): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x74, {"b9800000c00f3235000800000f3066baf80cb88819458fef66bafc0cb8fac90000ef672e0f1f00360f7821c7442400a9f80b95c7442402a400c0fec7442406000000000f0114240f07460f09b9e30200000f32b9780300000f32c4a1a25d921e6b5458"}}], 0x74}) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000340)={0x1, 0x0, [{0x7, 0x140, 0x6, 0xffffc685, 0x8437}]}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x88c80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@code={0xa, 0x68, {"b9030100c0b823000000ba000000000f3270701b2b460f19e666baf80cb80a62d98bef66bafc0cb036eeb9c802000061400f3066ba4200ecc74424001d000000c74424029fdd0000ff2c242e0f30f42e0f12ad00c30000"}}], 0x68}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 186.839277ms ago: executing program 3 (id=1723): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x100000, 0xf00}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000940)=[@uexit={0x0, 0x18, 0x8}, @code={0xa, 0x71, {"0f20d835080000000f22d8b9bf080000b80a000000ba000000000f30b8010000000f01c166b8af000f00d8c4c299479be00b4c21b91d030000b83deb0000ba000000000f300f01dfb9800000c00f3235001000000f30642e2e450fc72e0f01c5"}}, @uexit={0x0, 0x18, 0x6}, @rdmsr={0x66, 0x18, {0x8aa}}, @rdmsr={0x32, 0x18, {0xbc5}}, @rdmsr={0x32, 0x18, {0x316}}, @wr_crn={0x46, 0x20, {0x3, 0xffffffffffffff00}}, @wrmsr={0x1e, 0x20, {0x339, 0x17fffffff}}, @wr_crn={0x46, 0x20, {0x2, 0x4000000}}, @uexit={0x0, 0x18, 0x7ff}, @rdmsr={0x32, 0x18, {0x35c}}, @rdmsr={0x66, 0x18, {0x3f6}}, @wr_crn={0x46, 0x20, {0x0, 0x4}}, @in_dx={0x69, 0x20, {0x8cf9}}, @wrmsr={0x1e, 0x20, {0x340, 0x5}}, @cpuid={0x14, 0x18, {0x3fd, 0x4}}], 0x209}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x80, 0x5, 0xb9, 0x1, 0x11, 0xd, 0x204}, {0x804, 0x0, 0x1, 0xfd, 0x87, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x4000001, 0x3, 0x38, 0x5, 0x8, 0x7, 0x3, 0x50, 0x0, 0x71, 0x3, 0x5, 0x4}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x0, 0x8, 0x2000001, 0x5, 0x2004cb, 0xfffffffffffffff9, 0x2, 0x1136b2e5, 0x9, 0x0, 0x3, 0x0, 0x8000000000, 0xfffffffffffffffa], 0x1, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x4, 0x2000000, 0x0, 0x2004cb, 0x0, 0x10a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x8, 0x4, 0x0, 0x1, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x4}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {0x7000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xf, 0xfe, 0x0, 0x0, 0xff}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x50, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 84.004741ms ago: executing program 4 (id=1724): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x4) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000040)) 53.914324ms ago: executing program 2 (id=1725): r0 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 2 (id=1726): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): able register: -EPIPE [ 190.690825][ T5938] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 190.698747][ T5938] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 190.706155][ T5938] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 190.740434][ T5938] waterforce 0003:1044:7A4D.0006: hidraw0: USB HID v0.05 Device [HID 1044:7a4d] on usb-dummy_hcd.0-1/input0 [ 190.828908][ T24] usb 4-1: USB disconnect, device number 45 [ 190.834953][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 190.835002][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 190.843410][ T5938] waterforce 0003:1044:7A4D.0006: fw version request failed with -38 [ 190.887053][ C0] usb 1-1: input irq status -75 received [ 190.994217][ T8135] syzkaller0: entered promiscuous mode [ 191.000001][ T8135] syzkaller0: entered allmulticast mode [ 191.107013][ T5938] usb 1-1: USB disconnect, device number 26 [ 191.751019][ T5866] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 191.765739][ T5866] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 191.775951][ T5866] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 191.788541][ T5866] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 191.838472][ T30] audit: type=1400 audit(1764166770.681:324): avc: denied { create } for pid=8144 comm="syz.3.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 191.887057][ T30] audit: type=1400 audit(1764166770.731:325): avc: denied { mount } for pid=8146 comm="syz.0.782" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 192.092021][ T8156] syzkaller0: entered promiscuous mode [ 192.099562][ T8156] syzkaller0: entered allmulticast mode [ 192.189353][ T8166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.789'. [ 192.387929][ T8174] tipc: Enabled bearer , priority 0 [ 192.449427][ T8174] syzkaller0: entered promiscuous mode [ 192.455027][ T8174] syzkaller0: entered allmulticast mode [ 192.991220][ T5866] usb 3-1: USB disconnect, device number 19 [ 193.330353][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.796'. [ 193.787632][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.799439][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.198509][ T8181] tipc: Resetting bearer [ 194.204783][ T8171] tipc: Resetting bearer [ 194.217100][ T8171] tipc: Disabling bearer [ 194.233061][ T8200] tipc: New replicast peer: 255.255.255.255 [ 194.253315][ T8200] tipc: Enabled bearer , priority 10 [ 194.282437][ T8205] netlink: 'syz.4.796': attribute type 1 has an invalid length. [ 194.310742][ T8205] netlink: 224 bytes leftover after parsing attributes in process `syz.4.796'. [ 194.507280][ T8227] syz_tun: entered allmulticast mode [ 194.516067][ T8226] syz_tun: left allmulticast mode [ 194.583023][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 194.602017][ T5866] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 194.628391][ T8235] syzkaller0: entered promiscuous mode [ 194.634557][ T8235] syzkaller0: entered allmulticast mode [ 194.751895][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 194.769468][ T24] usb 4-1: config 0 has no interfaces? [ 194.778997][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 194.779124][ T5866] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 194.801706][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.823284][ T24] usb 4-1: config 0 descriptor?? [ 194.832826][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.840865][ T5866] usb 1-1: Product: syz [ 194.855033][ T5866] usb 1-1: Manufacturer: syz [ 194.859994][ T5866] usb 1-1: SerialNumber: syz [ 194.873350][ T5866] usb 1-1: config 0 descriptor?? [ 194.951991][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 195.056445][ T24] usb 4-1: USB disconnect, device number 46 [ 195.081733][ T5866] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 195.111556][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 195.129366][ T10] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 195.142991][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 195.153005][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 195.178446][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 195.187019][ T8251] netlink: 28 bytes leftover after parsing attributes in process `syz.4.817'. [ 195.191041][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 195.211817][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 195.218262][ T30] audit: type=1400 audit(1764166774.061:326): avc: denied { create } for pid=8250 comm="syz.4.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 195.230037][ T10] usb 3-1: Product: syz [ 195.244066][ T10] usb 3-1: Manufacturer: syz [ 195.255204][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 195.267994][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 195.274637][ T10] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 195.274754][ T30] audit: type=1400 audit(1764166774.121:327): avc: denied { accept } for pid=8250 comm="syz.4.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 195.308721][ T8251] "syz.4.817" (8251) uses obsolete ecb(arc4) skcipher [ 195.371806][ T10] tipc: Node number set to 222572710 [ 195.501660][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 195.671543][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 195.682140][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 195.690914][ T10] usb 4-1: config 0 has no interface number 0 [ 195.699144][ T10] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 195.710125][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.718563][ T10] usb 4-1: Product: syz [ 195.726055][ T10] usb 4-1: Manufacturer: syz [ 195.736151][ T10] usb 4-1: SerialNumber: syz [ 195.750984][ T10] usb 4-1: config 0 descriptor?? [ 195.759533][ T10] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 197.336390][ T5866] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 197.455430][ T8271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.823'. [ 197.724012][ T5866] usb 3-1: USB disconnect, device number 20 [ 197.796852][ T30] audit: type=1400 audit(1764166776.641:328): avc: denied { name_bind } for pid=8283 comm="syz.2.829" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 197.884832][ T8287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.829'. [ 198.002524][ T8290] netlink: 104 bytes leftover after parsing attributes in process `syz.1.830'. [ 198.014919][ T30] audit: type=1400 audit(1764166776.861:329): avc: denied { write } for pid=8289 comm="syz.1.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.608773][ T5903] usb 1-1: USB disconnect, device number 27 [ 198.812779][ T10] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 198.848679][ T10] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 198.859480][ T10] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 198.881001][ T10] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 198.894390][ T10] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 198.914349][ T2336] pvrusb2: request_firmware fatal error with code=-110 [ 198.920814][ T10] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 198.958793][ T10] usb 4-1: USB disconnect, device number 47 [ 198.982495][ T2336] pvrusb2: Failure uploading firmware1 [ 198.999272][ T2336] pvrusb2: Device initialization was not successful. [ 199.006075][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 199.016308][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 199.025774][ T5887] pvrusb2: Device being rendered inoperable [ 199.176340][ T30] audit: type=1400 audit(1764166778.021:330): avc: denied { ioctl } for pid=8320 comm="syz.0.843" path="socket:[17753]" dev="sockfs" ino=17753 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.212533][ T8321] xt_hashlimit: size too large, truncated to 1048576 [ 199.361710][ T5887] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 199.546626][ T5887] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.572397][ T5887] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 199.591828][ T5887] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 199.637925][ T5887] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 199.700163][ T5887] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 199.728280][ T5887] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 199.741344][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.769013][ T5887] usb 2-1: Product: syz [ 199.776625][ T5887] usb 2-1: Manufacturer: syz [ 199.821941][ T5887] cdc_wdm 2-1:1.0: skipping garbage [ 199.827325][ T5887] cdc_wdm 2-1:1.0: skipping garbage [ 199.834722][ T8341] netlink: 76 bytes leftover after parsing attributes in process `syz.0.850'. [ 199.842327][ T8345] syzkaller0: entered promiscuous mode [ 199.849153][ T8345] syzkaller0: entered allmulticast mode [ 199.849657][ T5887] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 200.241838][ T979] IPVS: starting estimator thread 0... [ 200.251132][ T8350] IPVS: lc: FWM 3 0x00000003 - no destination available [ 200.331752][ T8352] IPVS: using max 47 ests per chain, 112800 per kthread [ 200.391166][ T8357] openvswitch: netlink: Message has 572 unknown bytes. [ 200.398534][ T8357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.592658][ T30] audit: type=1400 audit(1764166779.441:331): avc: denied { read } for pid=8372 comm="syz.2.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.630299][ T30] audit: type=1400 audit(1764166779.471:332): avc: denied { setopt } for pid=8374 comm="syz.3.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 200.637921][ T8377] xt_hashlimit: size too large, truncated to 1048576 [ 201.197203][ T8390] veth0_vlan: mtu less than device minimum [ 201.203193][ T30] audit: type=1400 audit(1764166780.041:333): avc: denied { ioctl } for pid=8389 comm="syz.3.872" path="socket:[17867]" dev="sockfs" ino=17867 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 201.615689][ T5887] usb 2-1: USB disconnect, device number 3 [ 202.998502][ T8420] tipc: Enabled bearer , priority 0 [ 203.019321][ T8420] syzkaller0: entered promiscuous mode [ 203.030616][ T8420] syzkaller0: entered allmulticast mode [ 203.395920][ T11] block nbd0: Possible stuck request ffff88802603e000: control (read@0,1024B). Runtime 30 seconds [ 203.409367][ T11] block nbd0: Possible stuck request ffff88802603e1c0: control (read@1024,1024B). Runtime 30 seconds [ 203.420300][ T11] block nbd0: Possible stuck request ffff88802603e380: control (read@2048,1024B). Runtime 30 seconds [ 203.431223][ T11] block nbd0: Possible stuck request ffff88802603e540: control (read@3072,1024B). Runtime 30 seconds [ 203.469986][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.890'. [ 203.782095][ T979] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 203.944070][ T979] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 203.953099][ T979] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 203.963587][ T979] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 203.972919][ T979] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 203.984331][ T979] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 203.997170][ T979] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 204.006479][ T979] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 204.014537][ T979] usb 2-1: Product: syz [ 204.018806][ T979] usb 2-1: Manufacturer: syz [ 204.037936][ T979] cdc_wdm 2-1:1.0: skipping garbage [ 204.044108][ T979] cdc_wdm 2-1:1.0: skipping garbage [ 204.049376][ T979] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 204.462876][ T8430] tipc: Resetting bearer [ 204.481777][ T8418] tipc: Resetting bearer [ 204.498492][ T8418] tipc: Disabling bearer [ 204.514527][ T979] tipc: Node number set to 702032767 [ 204.547144][ T8450] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 204.629976][ T8450] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 204.739729][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.900'. [ 204.753558][ T8450] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 204.839494][ T30] audit: type=1400 audit(1764166783.681:334): avc: denied { setopt } for pid=8463 comm="syz.4.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 204.918313][ T8450] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 205.031043][ T5028] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 205.063572][ T5028] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 205.113549][ T5028] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 205.134912][ T5028] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 205.157300][ T30] audit: type=1400 audit(1764166784.001:335): avc: denied { write } for pid=8480 comm="syz.2.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 205.244516][ T8486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.908'. [ 205.296120][ T8485] syzkaller0: entered promiscuous mode [ 205.317717][ T8485] syzkaller0: entered allmulticast mode [ 205.377582][ T8489] tipc: Enabled bearer , priority 0 [ 205.426113][ T8489] syzkaller0: entered promiscuous mode [ 205.432669][ T8489] syzkaller0: entered allmulticast mode [ 206.092668][ T30] audit: type=1400 audit(1764166784.941:336): avc: denied { listen } for pid=8497 comm="syz.0.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 206.470636][ T8491] tipc: Resetting bearer [ 206.488614][ T8488] tipc: Resetting bearer [ 206.506017][ T8488] tipc: Disabling bearer [ 206.517943][ T5939] usb 2-1: USB disconnect, device number 4 [ 206.559822][ T8508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.914'. [ 206.839768][ T8522] netlink: 40 bytes leftover after parsing attributes in process `syz.1.921'. [ 206.940737][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'. [ 206.989485][ T8530] syzkaller0: entered promiscuous mode [ 207.015563][ T8530] syzkaller0: entered allmulticast mode [ 207.773474][ T30] audit: type=1400 audit(1764166786.621:337): avc: denied { ioctl } for pid=8549 comm="syz.2.931" path="socket:[18151]" dev="sockfs" ino=18151 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 207.832641][ T8554] tipc: Enabled bearer , priority 0 [ 207.852420][ T8554] tipc: Resetting bearer [ 207.874141][ T8552] tipc: Disabling bearer [ 207.899257][ T8557] tipc: Enabled bearer , priority 0 [ 207.906543][ T8557] syzkaller0: entered promiscuous mode [ 207.912221][ T8557] syzkaller0: entered allmulticast mode [ 207.926539][ T8557] tipc: Resetting bearer [ 207.944500][ T8556] tipc: Resetting bearer [ 207.981025][ T8556] tipc: Disabling bearer [ 208.046207][ T8569] netlink: 76 bytes leftover after parsing attributes in process `syz.0.939'. [ 208.317298][ T30] audit: type=1400 audit(1764166787.161:338): avc: denied { create } for pid=8588 comm="syz.0.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 208.391660][ T5939] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 208.480436][ T8595] tipc: Enabled bearer , priority 0 [ 208.490519][ T8595] tipc: Resetting bearer [ 208.552701][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 208.559621][ T5939] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 208.568596][ T5939] usb 2-1: config 0 has no interface number 0 [ 208.574897][ T5939] usb 2-1: config 0 interface 184 has no altsetting 0 [ 208.584223][ T5939] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 208.593653][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.601818][ T5939] usb 2-1: Product: syz [ 208.606120][ T5939] usb 2-1: Manufacturer: syz [ 208.610759][ T5939] usb 2-1: SerialNumber: syz [ 208.618044][ T5939] usb 2-1: config 0 descriptor?? [ 208.625397][ T5939] smsc75xx v1.0.0 [ 209.059587][ T8594] tipc: Disabling bearer [ 209.122743][ T5938] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 209.170900][ T8601] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 209.177436][ T8601] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 209.186411][ T8601] vhci_hcd vhci_hcd.0: Device attached [ 209.292379][ T5938] usb 3-1: Using ep0 maxpacket: 32 [ 209.299090][ T5938] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 209.313164][ T5938] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 209.322435][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 209.330610][ T5938] usb 3-1: Product: syz [ 209.335341][ T5938] usb 3-1: Manufacturer: syz [ 209.339966][ T5938] usb 3-1: SerialNumber: syz [ 209.348495][ T5938] usb 3-1: config 0 descriptor?? [ 209.354455][ T8597] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 209.441655][ T5887] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 209.499099][ T24] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 210.392224][ T8597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.400961][ T8597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.409990][ T979] usb 3-1: USB disconnect, device number 21 [ 210.508705][ T5939] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 210.519880][ T5939] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 210.530115][ T5939] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 210.540908][ T5939] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 210.550629][ T5939] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 210.741716][ T5939] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 210.752882][ T5939] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 210.752986][ T5887] usb 4-1: config 0 has no interfaces? [ 210.769573][ T5939] usb 2-1: USB disconnect, device number 5 [ 210.780059][ T5887] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 210.790756][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.812318][ T5887] usb 4-1: config 0 descriptor?? [ 210.914948][ T8634] netlink: 40 bytes leftover after parsing attributes in process `syz.1.966'. [ 211.025152][ T5939] usb 4-1: USB disconnect, device number 48 [ 211.026702][ T8602] usbip_core: unknown command [ 211.044541][ T8602] vhci_hcd: unknown pdu 0 [ 211.050859][ T8602] usbip_core: unknown command [ 211.057184][ T36] vhci_hcd: stop threads [ 211.064930][ T36] vhci_hcd: release socket [ 211.069413][ T36] vhci_hcd: disconnect device [ 211.091105][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 211.211707][ T5866] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 211.371711][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 211.414066][ T5866] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 211.431852][ T5866] usb 2-1: config 0 has no interface number 0 [ 211.458364][ T5866] usb 2-1: config 0 interface 184 has no altsetting 0 [ 211.525405][ T5866] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 211.570386][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.665355][ T5866] usb 2-1: Product: syz [ 211.719481][ T5866] usb 2-1: Manufacturer: syz [ 211.770618][ T5866] usb 2-1: SerialNumber: syz [ 211.785894][ T5866] usb 2-1: config 0 descriptor?? [ 211.799123][ T5866] smsc75xx v1.0.0 [ 211.821852][ T5887] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 211.971640][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 211.978101][ T5887] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 211.985910][ T5887] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 211.997996][ T5887] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.013485][ T5887] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 212.095567][ T5887] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 212.115390][ T5887] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 212.128380][ T5887] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 212.139905][ T5887] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.142164][ T8676] tipc: Enabling of bearer rejected, failed to enable media [ 212.151660][ T5887] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 212.151696][ T5887] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 212.185125][ T5887] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 212.192760][ T5887] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 212.204798][ T5887] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.217034][ T5887] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 212.228396][ T5887] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 212.251972][ T5887] usb 1-1: string descriptor 0 read error: -22 [ 212.258233][ T5887] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 212.267737][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.282580][ T5887] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 212.471739][ T979] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 212.495500][ T5900] usb 1-1: USB disconnect, device number 28 [ 212.641918][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 212.651075][ T979] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 212.663066][ T979] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 212.672169][ T979] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 212.680307][ T979] usb 4-1: Product: syz [ 212.685075][ T979] usb 4-1: Manufacturer: syz [ 212.689660][ T979] usb 4-1: SerialNumber: syz [ 212.695797][ T979] usb 4-1: config 0 descriptor?? [ 212.701168][ T8662] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 212.847573][ T5866] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 212.898517][ T5866] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 212.961667][ T5887] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 213.048245][ T5866] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 213.063494][ T5866] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 213.075910][ T5866] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 213.086754][ T5866] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 213.096657][ T5887] usb 1-1: device descriptor read/64, error -71 [ 213.105366][ T5866] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 213.119162][ T5866] usb 2-1: USB disconnect, device number 6 [ 213.315546][ T8662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.324293][ T8662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.333080][ T5939] usb 4-1: USB disconnect, device number 49 [ 213.341670][ T5887] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 213.471683][ T5887] usb 1-1: device descriptor read/64, error -71 [ 213.581873][ T5887] usb usb1-port1: attempt power cycle [ 214.201885][ T5866] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 214.311907][ T5887] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 214.421722][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 214.428503][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.439504][ T5866] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 214.449305][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.459300][ T5866] usb 2-1: config 0 descriptor?? [ 214.531667][ T5887] usb 1-1: device not accepting address 31, error -71 [ 214.651741][ T24] vhci_hcd: vhci_device speed not set [ 214.653340][ T10] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 214.668208][ T5866] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 214.814565][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 214.823687][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.831736][ T10] usb 4-1: Product: syz [ 214.835889][ T10] usb 4-1: Manufacturer: syz [ 214.840456][ T10] usb 4-1: SerialNumber: syz [ 214.846375][ T10] usb 4-1: config 0 descriptor?? [ 214.870388][ T5866] usb 2-1: USB disconnect, device number 7 [ 214.871686][ T5887] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 214.902071][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 214.908681][ T5887] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 214.917250][ T5887] usb 1-1: config 0 has no interface number 0 [ 214.923391][ T5887] usb 1-1: config 0 interface 184 has no altsetting 0 [ 214.932045][ T5887] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 214.941086][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.949116][ T5887] usb 1-1: Product: syz [ 214.953309][ T5887] usb 1-1: Manufacturer: syz [ 214.957891][ T5887] usb 1-1: SerialNumber: syz [ 214.964170][ T5887] usb 1-1: config 0 descriptor?? [ 214.970576][ T5887] smsc75xx v1.0.0 [ 215.054380][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 215.529078][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 215.628538][ T8759] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 215.657622][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 215.674328][ T8759] netlink: 'syz.2.1017': attribute type 1 has an invalid length. [ 215.683077][ T8759] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1017'. [ 215.842056][ T5939] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 215.977155][ T5887] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 215.988440][ T5887] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 216.022386][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 216.029505][ T5939] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 216.038361][ T5939] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.048579][ T5939] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.059284][ T5939] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 216.070884][ T5939] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 216.081282][ T5939] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.094586][ T5939] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 216.104340][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.188763][ T5887] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 216.199730][ T5887] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 216.209428][ T5887] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 216.219849][ T5887] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 216.229603][ T5887] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 216.240555][ T5887] usb 1-1: USB disconnect, device number 32 [ 216.316924][ T5939] usb 2-1: usb_control_msg returned -32 [ 216.322709][ T5939] usbtmc 2-1:16.0: can't read capabilities [ 216.976924][ T8789] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 217.000585][ T8789] netlink: 'syz.2.1029': attribute type 1 has an invalid length. [ 217.008380][ T8789] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1029'. [ 217.355690][ T8796] xt_hashlimit: size too large, truncated to 1048576 [ 217.437793][ T5887] usb 4-1: USB disconnect, device number 50 [ 218.900054][ T5939] usb 2-1: USB disconnect, device number 8 [ 219.001521][ T8837] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1048'. [ 219.104218][ T5866] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 219.160615][ T8847] tipc: Enabling of bearer rejected, failed to enable media [ 219.217284][ T8853] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 219.223822][ T8853] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 219.251902][ T8853] vhci_hcd vhci_hcd.0: Device attached [ 219.292331][ T5866] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 219.305080][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.314911][ T5866] usb 4-1: Product: syz [ 219.319099][ T5866] usb 4-1: Manufacturer: syz [ 219.323771][ T5866] usb 4-1: SerialNumber: syz [ 219.330640][ T5866] usb 4-1: config 0 descriptor?? [ 219.451961][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 219.511667][ T5946] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 219.519159][ T979] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 219.539112][ T5866] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 219.591997][ T24] usb 3-1: device descriptor read/64, error -71 [ 219.693080][ T5946] usb 2-1: config 0 has no interfaces? [ 219.698658][ T5946] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 219.708158][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.719258][ T5946] usb 2-1: config 0 descriptor?? [ 219.841673][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 219.928525][ T5946] usb 2-1: USB disconnect, device number 9 [ 219.938404][ T8854] usbip_core: unknown command [ 219.943783][ T8854] vhci_hcd: unknown pdu 0 [ 219.948478][ T8854] usbip_core: unknown command [ 219.953835][ T5028] vhci_hcd: stop threads [ 219.958092][ T5028] vhci_hcd: release socket [ 219.963159][ T5028] vhci_hcd: disconnect device [ 219.983233][ T24] usb 3-1: device descriptor read/64, error -71 [ 220.011703][ T979] vhci_hcd: vhci_device speed not set [ 220.093101][ T24] usb usb3-port1: attempt power cycle [ 220.169317][ T5866] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 220.441661][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 220.463699][ T30] audit: type=1400 audit(1764166799.311:339): avc: denied { append } for pid=8867 comm="syz.1.1058" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.487370][ T24] usb 3-1: device descriptor read/8, error -71 [ 220.548225][ T30] audit: type=1400 audit(1764166799.391:340): avc: denied { recv } for pid=5809 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.174 dest=37326 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 220.650172][ T8877] binder: 8876:8877 ioctl 4018620d 0 returned -22 [ 220.741688][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 220.762130][ T24] usb 3-1: device descriptor read/8, error -71 [ 220.871929][ T24] usb usb3-port1: unable to enumerate USB device [ 220.911647][ T5939] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 221.041648][ T5939] usb 1-1: device descriptor read/64, error -71 [ 221.281652][ T5939] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 221.411693][ T5939] usb 1-1: device descriptor read/64, error -71 [ 221.521833][ T5939] usb usb1-port1: attempt power cycle [ 221.834636][ T8889] tipc: Enabling of bearer rejected, failed to enable media [ 221.862023][ T5939] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 221.880043][ T24] usb 4-1: USB disconnect, device number 51 [ 221.896536][ T5939] usb 1-1: device descriptor read/8, error -71 [ 222.071819][ T8905] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1068'. [ 222.118485][ T8907] tipc: Enabled bearer , priority 0 [ 222.130696][ T8907] tipc: Resetting bearer [ 222.143828][ T5939] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 222.145640][ T8906] tipc: Disabling bearer [ 222.283190][ T5939] usb 1-1: device descriptor read/8, error -71 [ 222.297080][ T30] audit: type=1400 audit(1764166801.141:341): avc: denied { create } for pid=8912 comm="syz.2.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 222.345269][ T30] audit: type=1400 audit(1764166801.141:342): avc: denied { connect } for pid=8912 comm="syz.2.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 222.386349][ T8920] binder: 8919:8920 ioctl 4018620d 0 returned -22 [ 222.566461][ T5939] usb usb1-port1: unable to enumerate USB device [ 222.675257][ T8926] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 222.730445][ T8929] netlink: 'syz.4.1077': attribute type 1 has an invalid length. [ 222.767357][ T8929] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1077'. [ 223.545765][ T8941] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1082'. [ 223.546609][ T30] audit: type=1400 audit(1764166802.391:343): avc: denied { ioctl } for pid=8942 comm="syz.1.1085" path="socket:[19907]" dev="sockfs" ino=19907 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 223.580158][ T30] audit: type=1400 audit(1764166802.401:344): avc: denied { write } for pid=8942 comm="syz.1.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 223.754647][ T8954] kvm: user requested TSC rate below hardware speed [ 223.897072][ T8962] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 223.909556][ T979] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 223.935063][ T8965] netlink: 'syz.2.1092': attribute type 1 has an invalid length. [ 223.946135][ T8965] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1092'. [ 224.472662][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.628939][ T5866] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 224.647014][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.682045][ T979] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.723200][ T979] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.738364][ T8970] syz_tun: entered allmulticast mode [ 224.752489][ T8969] syz_tun: left allmulticast mode [ 224.758829][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.783859][ T979] usb 4-1: config 0 descriptor?? [ 224.822147][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 224.838683][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 224.858771][ T5866] usb 1-1: can't read configurations, error -61 [ 225.011703][ T5866] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 225.171760][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 225.207929][ T979] plantronics 0003:047F:FFFF.0007: unbalanced delimiter at end of report description [ 225.272756][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 225.291745][ T979] plantronics 0003:047F:FFFF.0007: parse failed [ 225.298030][ T5866] usb 1-1: can't read configurations, error -61 [ 225.305179][ T979] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 225.315597][ T5866] usb usb1-port1: attempt power cycle [ 225.531267][ T5939] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 225.710749][ T5939] usb 3-1: device descriptor read/64, error -71 [ 225.822167][ T5866] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 225.856044][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 225.902417][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 225.909973][ T5866] usb 1-1: can't read configurations, error -61 [ 225.981695][ T5939] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 226.059864][ T10] usb 4-1: USB disconnect, device number 52 [ 226.131691][ T5939] usb 3-1: device descriptor read/64, error -71 [ 226.172249][ T5866] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 226.212091][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 226.223118][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 226.230946][ T5866] usb 1-1: can't read configurations, error -61 [ 226.242167][ T5939] usb usb3-port1: attempt power cycle [ 226.251850][ T5866] usb usb1-port1: unable to enumerate USB device [ 226.491673][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 226.582237][ T5939] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 226.602132][ T5939] usb 3-1: device descriptor read/8, error -71 [ 226.645506][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 226.654762][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.662957][ T10] usb 4-1: Product: syz [ 226.667357][ T10] usb 4-1: Manufacturer: syz [ 226.672127][ T10] usb 4-1: SerialNumber: syz [ 226.853312][ T5939] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 226.892290][ T5939] usb 3-1: device descriptor read/8, error -71 [ 226.993023][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1106'. [ 227.014409][ T5939] usb usb3-port1: unable to enumerate USB device [ 227.076874][ T9014] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1113'. [ 227.088797][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 227.101669][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 227.275275][ T30] audit: type=1400 audit(1764166806.121:345): avc: denied { bind } for pid=9013 comm="syz.0.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 227.470134][ T8978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.482118][ T8978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.593134][ T9022] kvm: user requested TSC rate below hardware speed [ 227.718286][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 227.730186][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 227.739630][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 227.749567][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 227.841646][ T5939] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 227.901027][ T8978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.911502][ T8978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.001625][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 228.012825][ T5939] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 228.020403][ T5939] usb 1-1: can't read configurations, error -61 [ 228.161685][ T5939] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 228.311623][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 228.318712][ T5939] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 228.331633][ T5939] usb 1-1: can't read configurations, error -61 [ 228.341836][ T5939] usb usb1-port1: attempt power cycle [ 228.691662][ T5939] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 228.712095][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 228.725860][ T5939] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 228.739909][ T5939] usb 1-1: can't read configurations, error -61 [ 228.888856][ T5939] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 228.922168][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 228.936478][ T5939] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 228.951683][ T5939] usb 1-1: can't read configurations, error -61 [ 228.980636][ T5939] usb usb1-port1: unable to enumerate USB device [ 229.178783][ T5939] usb 4-1: USB disconnect, device number 53 [ 231.246415][ T9073] tipc: Enabling of bearer rejected, failed to enable media [ 231.314427][ T9074] vxfs: WRONG superblock magic 00000000 at 1 [ 231.321795][ T9074] vxfs: WRONG superblock magic 00000000 at 8 [ 231.327808][ T9074] vxfs: can't find superblock. [ 231.711645][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 231.775873][ T5866] libceph: connect (1)[c::]:6789 error -101 [ 231.792922][ T5866] libceph: mon0 (1)[c::]:6789 connect error [ 232.291725][ T9072] ceph: No mds server is up or the cluster is laggy [ 232.439056][ T5866] libceph: connect (1)[c::]:6789 error -101 [ 232.445234][ T5866] libceph: mon0 (1)[c::]:6789 connect error [ 232.748132][ T10] usb 1-1: device descriptor read/64, error -71 [ 232.878980][ T9093] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.911753][ T9093] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.943375][ T9100] syzkaller0: entered promiscuous mode [ 232.949041][ T9100] syzkaller0: entered allmulticast mode [ 233.484651][ T11] block nbd0: Possible stuck request ffff88802603e000: control (read@0,1024B). Runtime 60 seconds [ 233.654893][ T9093] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.675809][ T11] block nbd0: Possible stuck request ffff88802603e1c0: control (read@1024,1024B). Runtime 60 seconds [ 233.686710][ T11] block nbd0: Possible stuck request ffff88802603e380: control (read@2048,1024B). Runtime 60 seconds [ 233.697621][ T11] block nbd0: Possible stuck request ffff88802603e540: control (read@3072,1024B). Runtime 60 seconds [ 233.711121][ T9093] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.724948][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 234.648836][ T10] usb 1-1: device descriptor read/64, error -71 [ 234.687269][ T9093] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.708860][ T9115] netlink: 'syz.1.1135': attribute type 1 has an invalid length. [ 234.717299][ T9093] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.775574][ T10] usb usb1-port1: attempt power cycle [ 234.809719][ T9117] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 234.820481][ T9115] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1135'. [ 234.847497][ T9119] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 234.870697][ T9111] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 234.920054][ T9093] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.933839][ T9093] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.080657][ T3503] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.089093][ T3503] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.603829][ T3503] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.622505][ T3503] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.664654][ T3503] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.675190][ T3503] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.694493][ T3503] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.703642][ T3503] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.754225][ T9134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1143'. [ 237.085614][ T9144] syzkaller0: entered promiscuous mode [ 237.095330][ T9144] syzkaller0: entered allmulticast mode [ 239.529357][ T9164] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 239.544359][ T9162] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 239.553352][ T9162] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 239.591999][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 239.743055][ T5939] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 239.763101][ T10] usb 2-1: device descriptor read/64, error -71 [ 239.829811][ T9165] netlink: 'syz.0.1154': attribute type 1 has an invalid length. [ 239.838676][ T9165] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1154'. [ 239.887094][ T9167] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 239.911970][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 239.918597][ T5939] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 239.926854][ T5939] usb 3-1: config 0 has no interface number 0 [ 239.933096][ T5939] usb 3-1: config 0 interface 184 has no altsetting 0 [ 239.946051][ T9167] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 239.970346][ T5939] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 239.980775][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.989529][ T5939] usb 3-1: Product: syz [ 239.994058][ T5939] usb 3-1: Manufacturer: syz [ 239.998813][ T5939] usb 3-1: SerialNumber: syz [ 240.004512][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 240.015242][ T9167] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 240.027885][ T5939] usb 3-1: config 0 descriptor?? [ 240.119463][ T5939] smsc75xx v1.0.0 [ 240.723008][ T10] usb 2-1: device descriptor read/64, error -71 [ 240.750851][ T9167] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 240.790559][ T9176] netlink: 'syz.4.1158': attribute type 1 has an invalid length. [ 240.829534][ T9176] bond1: entered promiscuous mode [ 240.834932][ T10] usb usb2-port1: attempt power cycle [ 240.834939][ T9176] bond1: entered allmulticast mode [ 240.835223][ T9176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.863595][ T5032] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 240.895885][ T9176] veth3: entered promiscuous mode [ 240.901160][ T9176] veth3: entered allmulticast mode [ 240.907609][ T9176] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 240.916287][ T5032] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 240.948935][ T3503] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 240.981964][ T3503] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 241.095245][ T9187] syzkaller0: entered promiscuous mode [ 241.100800][ T9187] syzkaller0: entered allmulticast mode [ 241.126619][ T9189] syzkaller0: entered promiscuous mode [ 241.132343][ T9189] syzkaller0: entered allmulticast mode [ 241.160905][ T5939] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 241.173109][ T5939] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 241.182865][ T5939] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 241.194054][ T5939] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 241.203746][ T5939] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 241.214058][ T5939] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 241.223672][ T5939] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 241.232179][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 241.262129][ T10] usb 2-1: device descriptor read/8, error -71 [ 241.269902][ T9191] syzkaller0: entered promiscuous mode [ 241.276262][ T9191] syzkaller0: entered allmulticast mode [ 241.293870][ T5946] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 241.501749][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 241.521905][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 241.528804][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.531226][ T10] usb 2-1: device descriptor read/8, error -71 [ 241.539903][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.555992][ T5946] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 241.565010][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.574197][ T5946] usb 4-1: config 0 descriptor?? [ 241.654855][ T10] usb usb2-port1: unable to enumerate USB device [ 242.018981][ T5946] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 242.217581][ T5946] ft260 0003:0403:6030.0008: chip code: 6424 8183 [ 242.335481][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'. [ 242.456521][ T5946] ft260 0003:0403:6030.0008: failed to retrieve system status [ 242.467869][ T5946] ft260 0003:0403:6030.0008: probe with driver ft260 failed with error -32 [ 242.563759][ T5939] usb 3-1: USB disconnect, device number 30 [ 243.365566][ T9216] netlink: 'syz.0.1173': attribute type 1 has an invalid length. [ 243.386524][ T9216] bond1: entered promiscuous mode [ 243.391541][ T9216] bond1: entered allmulticast mode [ 243.398098][ T9216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.506759][ T9226] syzkaller0: entered promiscuous mode [ 243.512662][ T9226] syzkaller0: entered allmulticast mode [ 243.652126][ T9236] bridge0: port 3(gretap0) entered blocking state [ 243.665463][ T9236] bridge0: port 3(gretap0) entered disabled state [ 243.676976][ T9236] gretap0: entered allmulticast mode [ 243.690648][ T9236] gretap0: entered promiscuous mode [ 243.811704][ T5866] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 243.952083][ T5866] usb 2-1: device descriptor read/64, error -71 [ 244.076318][ T5946] usb 4-1: USB disconnect, device number 54 [ 244.091657][ T979] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 244.191657][ T5866] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 244.244201][ T979] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 244.253864][ T979] usb 1-1: config 0 has no interface number 0 [ 244.264207][ T979] usb 1-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 244.277486][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.332653][ T5866] usb 2-1: device descriptor read/64, error -71 [ 244.363362][ T979] usb 1-1: config 0 descriptor?? [ 244.451985][ T5866] usb usb2-port1: attempt power cycle [ 244.976206][ T979] usb 1-1: string descriptor 0 read error: -71 [ 245.265064][ T979] usb-storage 1-1:0.168: USB Mass Storage device detected [ 245.293659][ T979] usb-storage 1-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 245.323406][ T9254] syzkaller0: entered promiscuous mode [ 245.348953][ T9254] syzkaller0: entered allmulticast mode [ 245.394480][ T979] usb 1-1: USB disconnect, device number 48 [ 245.665716][ T9266] syzkaller0: entered promiscuous mode [ 245.671240][ T9266] syzkaller0: entered allmulticast mode [ 246.181695][ T5866] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 246.248327][ T30] audit: type=1400 audit(1764166825.061:346): avc: denied { read } for pid=9260 comm="syz.4.1188" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 246.484106][ T5866] usb 2-1: device descriptor read/8, error -71 [ 246.495528][ T30] audit: type=1400 audit(1764166825.061:347): avc: denied { open } for pid=9260 comm="syz.4.1188" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 246.519535][ T30] audit: type=1400 audit(1764166825.071:348): avc: denied { ioctl } for pid=9260 comm="syz.4.1188" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 246.600428][ T30] audit: type=1326 audit(1764166825.441:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b258f749 code=0x7ffc0000 [ 246.673504][ T30] audit: type=1326 audit(1764166825.441:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b258f749 code=0x7ffc0000 [ 246.765582][ T30] audit: type=1326 audit(1764166825.451:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f16b258f749 code=0x7ffc0000 [ 246.797594][ T30] audit: type=1326 audit(1764166825.451:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b258f749 code=0x7ffc0000 [ 246.824812][ T30] audit: type=1326 audit(1764166825.451:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b258f749 code=0x7ffc0000 [ 246.848697][ T30] audit: type=1326 audit(1764166825.451:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f16b258f749 code=0x7ffc0000 [ 247.007968][ T5900] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 247.166189][ T5900] usb 3-1: config 0 has no interfaces? [ 247.181935][ T5900] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 247.209760][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.729198][ T30] audit: type=1326 audit(1764166825.451:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b258f749 code=0x7ffc0000 [ 247.762088][ T5900] usb 3-1: config 0 descriptor?? [ 248.081975][ T5939] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 248.243585][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 248.254946][ T5939] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 248.288228][ T5939] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 248.351793][ T5938] usb 3-1: USB disconnect, device number 31 [ 248.419232][ T5939] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.431016][ T5939] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 248.460857][ T5939] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 248.470580][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.478830][ T5939] usb 2-1: Product: syz [ 248.485855][ T5939] usb 2-1: Manufacturer: syz [ 248.490613][ T5939] usb 2-1: SerialNumber: syz [ 248.531663][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 248.557053][ T5939] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input15 [ 248.641732][ T5903] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 248.741727][ T5939] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 248.750930][ T5939] (id 0x00) [ 248.771747][ T5903] usb 4-1: device descriptor read/64, error -71 [ 248.792401][ T5939] rc_core: IR keymap rc-imon-pad not found [ 248.798268][ T5939] Registered IR keymap rc-empty [ 248.804574][ T5939] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 248.815001][ T5938] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 248.822623][ T5939] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 248.977338][ T5939] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 248.989719][ T5939] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input16 [ 249.004367][ T5938] usb 3-1: config 0 has no interfaces? [ 249.009842][ T5938] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 249.022257][ T5939] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:18> initialized [ 249.027151][ T9352] syzkaller0: entered promiscuous mode [ 249.032941][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.037337][ T9352] syzkaller0: entered allmulticast mode [ 249.044279][ T5903] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 249.059336][ T5938] usb 3-1: config 0 descriptor?? [ 249.266701][ T5903] usb 4-1: device descriptor read/64, error -71 [ 249.268936][ T5866] usb 3-1: USB disconnect, device number 32 [ 249.780408][ T5903] usb usb4-port1: attempt power cycle [ 250.091290][ T9381] syzkaller0: entered promiscuous mode [ 250.097361][ T9381] syzkaller0: entered allmulticast mode [ 250.131834][ T5903] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 250.172073][ T5903] usb 4-1: device descriptor read/8, error -71 [ 250.411820][ T5903] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 250.432874][ T5903] usb 4-1: device descriptor read/8, error -71 [ 250.542172][ T5903] usb usb4-port1: unable to enumerate USB device [ 250.623234][ T9409] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 250.884079][ T5939] usb 2-1: USB disconnect, device number 18 [ 250.899427][ T9411] mmap: syz.2.1217 (9411) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 250.918128][ T9434] syzkaller0: entered promiscuous mode [ 250.924742][ T9434] syzkaller0: entered allmulticast mode [ 251.183604][ T5946] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 251.219603][ T9467] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 251.732809][ T9477] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 251.788966][ T5946] usb 1-1: config index 0 descriptor too short (expected 215, got 45) [ 251.800832][ T5946] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 251.810174][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.811307][ T9477] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 251.818260][ T5946] usb 1-1: Product: syz [ 251.832412][ T5946] usb 1-1: Manufacturer: syz [ 251.837333][ T5946] usb 1-1: SerialNumber: syz [ 251.962666][ T9477] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 252.005297][ T9477] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 252.082743][ T5037] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 252.099468][ T5028] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 252.118710][ T5028] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 252.142115][ T3503] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 252.279511][ T5946] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 252.301664][ T5946] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 252.372092][ T9503] syzkaller0: entered promiscuous mode [ 252.377706][ T9503] syzkaller0: entered allmulticast mode [ 252.538641][ T9512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1236'. [ 253.278174][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 253.278191][ T30] audit: type=1400 audit(1764166831.851:409): avc: denied { mounton } for pid=9506 comm="syz.1.1235" path="/260/bus" dev="tmpfs" ino=1331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 253.506244][ T30] audit: type=1400 audit(1764166832.321:410): avc: denied { mount } for pid=9515 comm="syz.2.1238" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 253.657252][ T30] audit: type=1400 audit(1764166832.501:411): avc: denied { bind } for pid=9522 comm="syz.1.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 253.726622][ T9525] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 253.733150][ T9525] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 253.742737][ T9525] vhci_hcd vhci_hcd.0: Device attached [ 253.762632][ T30] audit: type=1400 audit(1764166832.611:412): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 253.981636][ T5938] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 253.991631][ T5903] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 254.248547][ T5946] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 254.685001][ T5946] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 254.711715][ T5946] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 254.755294][ T5946] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 254.783196][ T5946] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 254.872310][ T30] audit: type=1400 audit(1764166833.691:413): avc: denied { read } for pid=9544 comm="syz.2.1244" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 254.913213][ T5903] usb 2-1: config 0 has no interfaces? [ 254.937030][ T5903] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 254.949567][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.073543][ T30] audit: type=1400 audit(1764166833.691:414): avc: denied { open } for pid=9544 comm="syz.2.1244" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 255.164445][ T5903] usb 2-1: config 0 descriptor?? [ 255.197532][ T30] audit: type=1400 audit(1764166833.701:415): avc: denied { ioctl } for pid=9544 comm="syz.2.1244" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 255.225068][ T5946] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 255.234610][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.239392][ T5946] usb 1-1: USB disconnect, device number 49 [ 255.434371][ T5939] usb 2-1: USB disconnect, device number 19 [ 255.440602][ T9526] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 255.450092][ T3503] vhci_hcd: stop threads [ 255.454538][ T3503] vhci_hcd: release socket [ 255.474456][ T3503] vhci_hcd: disconnect device [ 255.523078][ T9565] syzkaller0: entered promiscuous mode [ 255.528745][ T9565] syzkaller0: entered allmulticast mode [ 255.715077][ T9579] syzkaller0: entered promiscuous mode [ 255.722563][ T9579] syzkaller0: entered allmulticast mode [ 255.734019][ T30] audit: type=1400 audit(1764166834.571:416): avc: denied { create } for pid=9582 comm="syz.2.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 255.765177][ T30] audit: type=1400 audit(1764166834.581:417): avc: denied { mount } for pid=9582 comm="syz.2.1250" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 256.759034][ T9618] syzkaller0: entered promiscuous mode [ 256.766828][ T9618] syzkaller0: entered allmulticast mode [ 257.399917][ T30] audit: type=1400 audit(1764166836.241:418): avc: denied { watch } for pid=9638 comm="syz.3.1260" path="/245/file1" dev="tmpfs" ino=1254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 257.487111][ T9650] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 257.493657][ T9650] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 257.681704][ T9650] vhci_hcd vhci_hcd.0: Device attached [ 258.170835][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1261'. [ 258.190845][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1261'. [ 258.361730][ T5939] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 258.432718][ T5903] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 258.592908][ T5903] usb 1-1: config 0 has no interfaces? [ 258.598414][ T5903] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 258.609328][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.634314][ T5903] usb 1-1: config 0 descriptor?? [ 258.676254][ T9676] syzkaller0: entered promiscuous mode [ 258.681851][ T9676] syzkaller0: entered allmulticast mode [ 259.353052][ T9651] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 259.367341][ T36] vhci_hcd: stop threads [ 259.372437][ T36] vhci_hcd: release socket [ 259.406975][ T36] vhci_hcd: disconnect device [ 259.444844][ T5946] usb 1-1: USB disconnect, device number 50 [ 259.961673][ T5938] vhci_hcd: vhci_device speed not set [ 262.097576][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 262.178246][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1281'. [ 262.351814][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'. [ 262.398726][ T9775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1284'. [ 262.408017][ T9775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1284'. [ 262.441685][ T5946] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 262.651698][ T5887] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 263.025455][ T5946] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 263.039205][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.049479][ T5946] usb 1-1: Product: syz [ 263.055409][ T5946] usb 1-1: Manufacturer: syz [ 263.055757][ T5887] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 263.060487][ T5946] usb 1-1: SerialNumber: syz [ 263.087494][ T5887] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 263.103895][ T5887] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 263.114022][ T5887] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.128860][ T5887] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 263.141443][ T5938] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 263.203697][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 263.220367][ T5887] usb 3-1: Product: syz [ 263.224826][ T5887] usb 3-1: Manufacturer: syz [ 263.250153][ T5887] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 263.331665][ T5938] usb 4-1: device descriptor read/64, error -71 [ 263.378821][ T9808] syzkaller0: entered promiscuous mode [ 263.387320][ T9808] syzkaller0: entered allmulticast mode [ 263.461667][ T5939] vhci_hcd: vhci_device speed not set [ 263.492953][ T9816] syzkaller0: entered promiscuous mode [ 263.493310][ T5946] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 263.498430][ T9816] syzkaller0: entered allmulticast mode [ 263.517823][ T5946] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 263.571653][ T5938] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 263.609436][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1295'. [ 263.779719][ T5938] usb 4-1: device descriptor read/64, error -71 [ 264.234588][ T5938] usb usb4-port1: attempt power cycle [ 264.240828][ T11] block nbd0: Possible stuck request ffff88802603e000: control (read@0,1024B). Runtime 90 seconds [ 264.251505][ T11] block nbd0: Possible stuck request ffff88802603e1c0: control (read@1024,1024B). Runtime 90 seconds [ 264.262409][ T11] block nbd0: Possible stuck request ffff88802603e380: control (read@2048,1024B). Runtime 90 seconds [ 264.273280][ T11] block nbd0: Possible stuck request ffff88802603e540: control (read@3072,1024B). Runtime 90 seconds [ 264.338637][ T5946] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 264.350777][ T5946] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 264.360351][ T5946] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 264.370807][ T5946] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 264.601648][ T5938] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 264.632142][ T5938] usb 4-1: device descriptor read/8, error -71 [ 264.871656][ T5938] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 264.892221][ T5938] usb 4-1: device descriptor read/8, error -71 [ 265.001916][ T5938] usb usb4-port1: unable to enumerate USB device [ 265.274010][ T9852] netlink: 'syz.1.1303': attribute type 1 has an invalid length. [ 265.282319][ T9852] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1303'. [ 265.312577][ T5938] usb 3-1: USB disconnect, device number 33 [ 265.384035][ T9866] syzkaller0: entered promiscuous mode [ 265.385401][ T5946] usb 1-1: USB disconnect, device number 51 [ 265.389561][ T9866] syzkaller0: entered allmulticast mode [ 266.494690][ T9907] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1310'. [ 266.973841][ T5887] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 267.672512][ T5887] usb 1-1: device descriptor read/64, error -71 [ 267.931632][ T5887] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 268.081705][ T5887] usb 1-1: device descriptor read/64, error -71 [ 268.195097][ T5887] usb usb1-port1: attempt power cycle [ 268.551804][ T5887] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 268.559717][ T5946] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 268.582459][ T5887] usb 1-1: device descriptor read/8, error -71 [ 268.734426][ T5946] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 268.743946][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.751994][ T5946] usb 2-1: Product: syz [ 268.756353][ T5946] usb 2-1: Manufacturer: syz [ 268.761205][ T5946] usb 2-1: SerialNumber: syz [ 268.822417][ T5887] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 268.862143][ T5887] usb 1-1: device descriptor read/8, error -71 [ 268.971883][ T5887] usb usb1-port1: unable to enumerate USB device [ 269.573216][ T5946] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 269.615168][ T5946] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 270.409431][ T9972] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1324'. [ 270.779907][ T5946] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 270.798854][ T5946] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 270.808610][ T5946] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 271.270740][ T5946] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 272.201040][ T5887] usb 2-1: USB disconnect, device number 20 [ 272.771632][ T5887] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 273.286627][T10027] syzkaller0: entered promiscuous mode [ 273.292180][T10027] syzkaller0: entered allmulticast mode [ 273.343112][ T5887] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 273.352386][ T5887] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 273.365180][ T5887] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 273.376524][ T5887] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.398936][ T5887] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 273.418202][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 273.491686][ T5887] usb 3-1: Product: syz [ 273.495861][ T5887] usb 3-1: Manufacturer: syz [ 273.505380][ T5887] cdc_wdm 3-1:1.0: skipping garbage [ 273.510798][ T5887] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 274.069354][T10049] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.079448][T10049] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.142538][T10054] hfsplus: unable to find HFS+ superblock [ 274.151954][T10049] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.161910][T10049] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.214848][T10049] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.232493][T10049] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.279271][T10049] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.305561][T10049] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.412017][ T5946] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 274.434226][ T5028] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.449059][ T5028] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.544062][ T5028] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.553885][ T5028] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.576506][T10071] netlink: 'syz.1.1345': attribute type 1 has an invalid length. [ 274.585217][ T5946] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 274.602753][ T5028] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.608533][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.621037][ T5946] usb 4-1: Product: syz [ 274.621142][T10071] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1345'. [ 274.625555][ T5946] usb 4-1: Manufacturer: syz [ 274.640400][ T5946] usb 4-1: SerialNumber: syz [ 274.648746][ T5028] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.661837][ T5028] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.680192][ T5028] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.773575][T10084] fuse: Unknown parameter 'fd0x0000000000000004' [ 275.051081][ T5946] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 275.063291][ T5946] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 275.616268][ T5887] usb 3-1: USB disconnect, device number 34 [ 276.274457][ T5946] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 276.301759][ T5946] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 276.507176][ T5946] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 276.528259][ T5946] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 276.811874][T10140] binder: 10139:10140 ioctl c0306201 200000000040 returned -14 [ 276.846251][T10142] hfsplus: unable to find HFS+ superblock [ 277.590792][ T5938] usb 4-1: USB disconnect, device number 63 [ 278.336924][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'. [ 278.413493][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 278.413504][ T30] audit: type=1400 audit(1764166857.261:421): avc: denied { listen } for pid=10170 comm="syz.4.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 278.441708][ T5938] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 278.562066][ T30] audit: type=1400 audit(1764166857.281:422): avc: denied { accept } for pid=10170 comm="syz.4.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 278.604906][ T5938] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 278.650321][ T5938] usb 4-1: config 0 has no interface number 0 [ 278.675217][ T5938] usb 4-1: too many endpoints for config 0 interface 231 altsetting 238: 205, using maximum allowed: 30 [ 278.694575][ T5938] usb 4-1: config 0 interface 231 altsetting 238 has 0 endpoint descriptors, different from the interface descriptor's value: 205 [ 278.746369][ T5938] usb 4-1: config 0 interface 231 has no altsetting 0 [ 278.773704][ T5938] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 278.782770][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.790779][ T5938] usb 4-1: Product: syz [ 278.797862][ T5938] usb 4-1: Manufacturer: syz [ 278.811647][ T5938] usb 4-1: SerialNumber: syz [ 278.837145][ T5938] usb 4-1: config 0 descriptor?? [ 279.271737][ T5946] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 279.433425][ T5946] usb 1-1: no configurations [ 279.438640][ T5946] usb 1-1: can't read configurations, error -22 [ 279.641651][ T5946] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 279.883994][ T5946] usb 1-1: no configurations [ 280.101378][ T5946] usb 1-1: can't read configurations, error -22 [ 280.149406][ T5946] usb usb1-port1: attempt power cycle [ 280.626599][ T30] audit: type=1400 audit(1764166859.471:423): avc: denied { append } for pid=10225 comm="syz.1.1377" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 280.631744][ T5946] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 280.673278][ T5946] usb 1-1: no configurations [ 280.688080][ T5946] usb 1-1: can't read configurations, error -22 [ 280.739666][ T5938] hub 4-1:0.231: bad descriptor, ignoring hub [ 280.745934][ T5938] hub 4-1:0.231: probe with driver hub failed with error -5 [ 280.755753][ T5938] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 280.815428][ T5938] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 280.826102][ T5938] dib0700: firmware download failed at 7 with -22 [ 280.834311][ T5946] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 280.863815][ T5946] usb 1-1: no configurations [ 280.868434][ T5946] usb 1-1: can't read configurations, error -22 [ 280.878406][ T5946] usb usb1-port1: unable to enumerate USB device [ 280.914351][T10250] netlink: 'syz.1.1385': attribute type 1 has an invalid length. [ 281.015405][ T5938] usb 4-1: USB disconnect, device number 64 [ 281.331630][ T5938] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 281.371850][ T5946] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 281.471955][ T5938] usb 4-1: device descriptor read/64, error -71 [ 281.631650][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 281.637915][ T5946] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 281.646176][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.656334][ T5946] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 281.665205][ T5946] usb 2-1: config 0 has no interface number 0 [ 281.673080][ T5946] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 281.682179][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.690178][ T5946] usb 2-1: Product: syz [ 281.694413][ T5946] usb 2-1: Manufacturer: syz [ 281.699001][ T5946] usb 2-1: SerialNumber: syz [ 281.707214][ T5946] usb 2-1: config 0 descriptor?? [ 281.714159][ T5946] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 281.721676][ T5938] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 281.851690][ T5938] usb 4-1: device descriptor read/64, error -71 [ 281.916581][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.926450][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.962097][ T5938] usb usb4-port1: attempt power cycle [ 282.136990][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.154729][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.224821][ T2336] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 282.225273][ T5946] usb 2-1: USB disconnect, device number 21 [ 282.256157][ T2336] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 282.301618][ T5938] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 282.322275][ T5938] usb 4-1: device descriptor read/8, error -71 [ 282.571640][ T5938] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 282.592243][ T5938] usb 4-1: device descriptor read/8, error -71 [ 283.086626][ T5938] usb usb4-port1: unable to enumerate USB device [ 283.148932][ T30] audit: type=1400 audit(1764166861.991:424): avc: denied { read } for pid=10377 comm="syz.1.1400" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 283.172964][ T30] audit: type=1400 audit(1764166861.991:425): avc: denied { open } for pid=10377 comm="syz.1.1400" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 283.197398][ T30] audit: type=1400 audit(1764166861.991:426): avc: denied { read } for pid=10377 comm="syz.1.1400" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 283.220342][ T30] audit: type=1400 audit(1764166861.991:427): avc: denied { open } for pid=10377 comm="syz.1.1400" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 283.422083][ T5900] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 283.897094][ T5900] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 283.953511][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.999173][ T5900] usb 1-1: Product: syz [ 284.019653][ T5900] usb 1-1: Manufacturer: syz [ 284.042905][ T5900] usb 1-1: SerialNumber: syz [ 285.430142][ T5900] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 285.452354][ T5900] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 287.022296][ T5900] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 287.101467][ T5900] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 287.195045][ T5900] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 287.265188][ T5900] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 288.031527][T10434] syz.2.1408 (10434): drop_caches: 2 [ 288.170750][ T5900] usb 1-1: USB disconnect, device number 60 [ 288.272444][T10463] syzkaller0: entered promiscuous mode [ 288.278204][T10463] syzkaller0: entered allmulticast mode [ 288.345119][T10469] netlink: 'syz.2.1415': attribute type 1 has an invalid length. [ 288.369046][T10469] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1415'. [ 288.571766][ T5900] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 288.767866][ T5900] usb 1-1: device descriptor read/64, error -71 [ 289.017699][ T5900] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 289.161756][ T5900] usb 1-1: device descriptor read/64, error -71 [ 289.291977][ T5900] usb usb1-port1: attempt power cycle [ 289.824012][ T30] audit: type=1400 audit(1764166868.671:428): avc: denied { ioctl } for pid=10501 comm="syz.2.1423" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 289.849204][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.917179][ T30] audit: type=1326 audit(1764166868.761:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10501 comm="syz.2.1423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d37d8f749 code=0x0 [ 289.983551][ T5900] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 290.002245][ T5900] usb 1-1: device descriptor read/8, error -71 [ 290.241703][ T5900] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 290.262376][ T5900] usb 1-1: device descriptor read/8, error -71 [ 290.372505][ T5900] usb usb1-port1: unable to enumerate USB device [ 291.389952][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'. [ 291.771653][ T5938] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 291.820370][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'. [ 291.921677][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 291.928567][ T5938] usb 1-1: config 0 has an invalid interface number: 33 but max is 1 [ 291.937748][ T5938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.948085][ T5938] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 291.957013][ T5938] usb 1-1: config 0 has no interface number 0 [ 291.963883][ T5938] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 291.976941][ T5938] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 291.986928][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.994992][ T5938] usb 1-1: Product: syz [ 291.999224][ T5938] usb 1-1: Manufacturer: syz [ 292.002630][T10577] fuse: Unknown parameter 'fd0x0000000000000004' [ 292.004083][ T5938] usb 1-1: SerialNumber: syz [ 292.016363][ T5938] usb 1-1: config 0 descriptor?? [ 292.024916][ T5938] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 292.226634][T10553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.235373][T10553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.445904][T10553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.456164][T10553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.472881][ T5938] usb 1-1: USB disconnect, device number 65 [ 292.480044][ T5938] pvrusb2: Device being rendered inoperable [ 292.532049][T10605] syzkaller0: entered promiscuous mode [ 292.537565][T10605] syzkaller0: entered allmulticast mode [ 293.098253][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1444'. [ 294.271995][ T11] block nbd0: Possible stuck request ffff88802603e000: control (read@0,1024B). Runtime 120 seconds [ 294.282829][ T11] block nbd0: Possible stuck request ffff88802603e1c0: control (read@1024,1024B). Runtime 120 seconds [ 294.294378][ T11] block nbd0: Possible stuck request ffff88802603e380: control (read@2048,1024B). Runtime 120 seconds [ 294.322854][ T11] block nbd0: Possible stuck request ffff88802603e540: control (read@3072,1024B). Runtime 120 seconds [ 294.489371][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1448'. [ 295.151644][ T5939] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 295.321726][ T5939] usb 1-1: Using ep0 maxpacket: 32 [ 295.336601][ T5939] usb 1-1: config 0 has no interfaces? [ 295.345480][T10664] fuse: Unknown parameter 'fd0x0000000000000004' [ 295.353968][ T5939] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 295.379121][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.411168][ T5939] usb 1-1: config 0 descriptor?? [ 295.725272][ T5939] usb 1-1: USB disconnect, device number 66 [ 296.234423][ T5939] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 296.428513][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 296.450592][ T5939] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 296.459799][ T5939] usb 1-1: config 0 has no interface number 0 [ 296.493747][ T5939] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 296.508059][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.523324][ T5939] usb 1-1: Product: syz [ 296.530312][ T5939] usb 1-1: Manufacturer: syz [ 296.535029][ T5939] usb 1-1: SerialNumber: syz [ 296.544890][ T5939] usb 1-1: config 0 descriptor?? [ 296.555786][ T5939] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 296.658309][T10693] syzkaller0: entered promiscuous mode [ 296.664231][T10693] syzkaller0: entered allmulticast mode [ 296.780180][T10699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1459'. [ 296.863071][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1460'. [ 296.902329][T10705] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 298.288884][T10734] fuse: Unknown parameter 'fd0x0000000000000004' [ 298.871612][ T5900] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 299.021653][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 299.049997][ T5900] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 299.061693][ T5900] usb 4-1: config 0 has no interface number 0 [ 299.067827][ T5900] usb 4-1: config 0 interface 184 has no altsetting 0 [ 299.085678][T10746] syzkaller0: entered promiscuous mode [ 299.086453][ T5900] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 299.091300][T10746] syzkaller0: entered allmulticast mode [ 299.108283][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.116882][ T5900] usb 4-1: Product: syz [ 299.121040][ T5900] usb 4-1: Manufacturer: syz [ 299.139082][ T5900] usb 4-1: SerialNumber: syz [ 299.149997][ T5900] usb 4-1: config 0 descriptor?? [ 299.162100][ T5900] smsc75xx v1.0.0 [ 299.180291][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1471'. [ 299.293206][ T30] audit: type=1400 audit(1764166878.141:430): avc: denied { read } for pid=10760 comm="syz.4.1474" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 299.320929][ T30] audit: type=1400 audit(1764166878.141:431): avc: denied { open } for pid=10760 comm="syz.4.1474" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 299.808469][ T30] audit: type=1800 audit(1764166878.581:432): pid=10772 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1475" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 300.363478][ T5939] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 300.374315][ T5900] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 300.374564][ T5939] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 300.391653][ T5900] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 300.395098][ T5939] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 300.414036][ T5939] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 300.451044][ T5939] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 300.460942][ T5939] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 300.471714][ T5939] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 300.484108][ T5939] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 300.922269][T10785] syzkaller0: entered promiscuous mode [ 300.928348][T10785] syzkaller0: entered allmulticast mode [ 300.928764][ T5938] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 300.966773][ T5939] usb 1-1: USB disconnect, device number 67 [ 301.129549][ T5900] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 301.146437][ T5900] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 301.155808][ T5938] usb 3-1: too many configurations: 13, using maximum allowed: 8 [ 301.159870][ T5900] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 301.174387][ T5900] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 301.188718][ T5900] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 301.198245][ T5938] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 301.211089][ T5938] usb 3-1: can't read configurations, error -61 [ 301.361627][ T5938] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 301.363260][T10811] netlink: 'syz.0.1480': attribute type 1 has an invalid length. [ 301.377810][T10811] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1480'. [ 301.518229][ T5938] usb 3-1: too many configurations: 13, using maximum allowed: 8 [ 301.527401][ T5938] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 301.535017][ T5938] usb 3-1: can't read configurations, error -61 [ 301.541508][ T5938] usb usb3-port1: attempt power cycle [ 301.891655][ T5938] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 301.922599][ T5938] usb 3-1: too many configurations: 13, using maximum allowed: 8 [ 301.938400][ T5938] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 301.956769][ T5938] usb 3-1: can't read configurations, error -61 [ 301.984292][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1482'. [ 302.001785][T10823] tipc: Enabled bearer , priority 0 [ 302.010676][T10823] tipc: Resetting bearer [ 302.022224][T10822] tipc: Disabling bearer [ 302.090182][ T5887] usb 4-1: USB disconnect, device number 69 [ 302.096306][ T5938] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 302.132861][ T5938] usb 3-1: too many configurations: 13, using maximum allowed: 8 [ 302.144457][ T5938] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 302.152345][ T5938] usb 3-1: can't read configurations, error -61 [ 302.162047][ T5938] usb usb3-port1: unable to enumerate USB device [ 302.230574][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1484'. [ 304.901653][ T5866] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 305.051605][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 305.059174][ T5866] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 305.067602][ T5866] usb 1-1: config 0 has no interface number 0 [ 305.074080][ T5866] usb 1-1: config 0 interface 184 has no altsetting 0 [ 305.084675][ T5866] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 305.333078][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 305.342897][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 305.352497][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.360493][ T5866] usb 1-1: Product: syz [ 305.377087][ T5866] usb 1-1: Manufacturer: syz [ 305.389790][ T5866] usb 1-1: SerialNumber: syz [ 305.456985][ T5866] usb 1-1: config 0 descriptor?? [ 305.559222][ T5866] smsc75xx v1.0.0 [ 306.413502][ T5866] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 306.425661][ T5866] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 306.638325][ T5866] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 306.649627][ T5866] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 306.677626][ T5866] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 306.761952][ T5866] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 306.769449][ T30] audit: type=1400 audit(1764166885.611:433): avc: denied { shutdown } for pid=10932 comm="syz.4.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 307.049784][T10919] syz.2.1498 (10919): drop_caches: 2 [ 307.065389][T10946] tipc: Enabled bearer , priority 0 [ 307.076600][T10946] tipc: Resetting bearer [ 307.076819][ T30] audit: type=1326 audit(1764166885.921:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd402f8f749 code=0x7ffc0000 [ 307.116542][ T30] audit: type=1326 audit(1764166885.921:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd402f8f749 code=0x7ffc0000 [ 307.140426][T10945] tipc: Disabling bearer [ 307.151264][ T30] audit: type=1326 audit(1764166885.961:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fd402f8f749 code=0x7ffc0000 [ 307.175937][ T30] audit: type=1326 audit(1764166885.961:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd402f8f749 code=0x7ffc0000 [ 307.240561][ T30] audit: type=1326 audit(1764166885.961:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd402f8f749 code=0x7ffc0000 [ 307.275807][ T30] audit: type=1326 audit(1764166885.961:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd402f8f749 code=0x7ffc0000 [ 307.333582][ T30] audit: type=1326 audit(1764166885.961:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd402f8f749 code=0x7ffc0000 [ 307.361283][ T30] audit: type=1326 audit(1764166885.961:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd402f8f749 code=0x7ffc0000 [ 307.384856][ T30] audit: type=1326 audit(1764166885.991:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd402f8f749 code=0x7ffc0000 [ 307.671463][ T5900] usb 1-1: USB disconnect, device number 68 [ 307.707779][T10995] netlink: 'syz.2.1515': attribute type 1 has an invalid length. [ 308.101754][ T5887] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 308.281786][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 308.292249][ T5887] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 308.300729][ T5887] usb 3-1: config 0 has no interface number 0 [ 308.307474][ T5887] usb 3-1: config 0 interface 184 has no altsetting 0 [ 308.316476][ T5887] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 308.325830][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.333995][ T5887] usb 3-1: Product: syz [ 308.338308][ T5887] usb 3-1: Manufacturer: syz [ 308.343472][ T5887] usb 3-1: SerialNumber: syz [ 308.350905][ T5887] usb 3-1: config 0 descriptor?? [ 308.358685][ T5887] smsc75xx v1.0.0 [ 308.905251][T11082] zonefs (nullb0) ERROR: Not a zoned block device [ 309.061959][ T5887] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 309.077511][ T5887] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 309.347577][ T5887] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 309.361707][ T5887] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 309.397205][ T5887] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 309.426770][ T5887] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 309.791646][ T5887] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 309.941627][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 309.948383][ T5887] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 309.953122][T11106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 309.956855][ T5887] usb 4-1: config 0 has no interface number 0 [ 309.963765][T11106] IPv6: NLM_F_CREATE should be set when creating new route [ 309.963787][T11106] IPv6: NLM_F_CREATE should be set when creating new route [ 309.964122][T11106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 309.970484][ T5887] usb 4-1: config 0 interface 184 has no altsetting 0 [ 310.002789][ T5887] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 310.011896][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.020247][ T5887] usb 4-1: Product: syz [ 310.024550][ T5938] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 310.032238][ T5887] usb 4-1: Manufacturer: syz [ 310.036801][ T5887] usb 4-1: SerialNumber: syz [ 310.043574][ T5887] usb 4-1: config 0 descriptor?? [ 310.051369][ T5887] smsc75xx v1.0.0 [ 310.267785][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 310.276295][ T5938] usb 1-1: config 0 has an invalid interface number: 33 but max is 1 [ 310.284551][ T5938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.294945][ T5938] usb 1-1: config 0 has no interface number 1 [ 310.301048][ T5938] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 310.312171][ T5938] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.328029][ T5938] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 310.802152][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.810200][ T5938] usb 1-1: Product: syz [ 310.814459][ T5887] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 310.825235][ T5938] usb 1-1: Manufacturer: syz [ 310.829812][ T5938] usb 1-1: SerialNumber: syz [ 310.834416][ T5887] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 310.845131][ T5938] usb 1-1: config 0 descriptor?? [ 310.852460][ T5938] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 310.875483][ T5866] usb 3-1: USB disconnect, device number 39 [ 311.086495][T11101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.099307][ T5887] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 311.110443][ T5887] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 311.114908][T11101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.120510][ T5887] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 311.141134][ T5887] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 311.195152][T11147] syzkaller0: entered promiscuous mode [ 311.200729][T11147] syzkaller0: entered allmulticast mode [ 311.337130][T11101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.346020][T11101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.388777][ T5938] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 311.399561][ T5938] usb 1-1: USB disconnect, device number 69 [ 311.406476][ T5938] pvrusb2: Device being rendered inoperable [ 311.414094][ T5938] pvrusb2: Device being rendered inoperable [ 312.613257][ T5866] usb 4-1: USB disconnect, device number 70 [ 312.640882][T11187] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 312.719047][T11191] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 312.728266][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 312.728280][ T30] audit: type=1400 audit(1764166891.561:462): avc: denied { mount } for pid=11190 comm="syz.4.1539" name="/" dev="configfs" ino=205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 312.757425][T11196] fuse: Unknown parameter 'fd0x0000000000000004' [ 313.004985][T11212] kvm: emulating exchange as write [ 313.041646][ T5938] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 313.261700][ T5938] usb 3-1: Using ep0 maxpacket: 32 [ 313.268270][ T5938] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 313.280736][ T5938] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 313.289814][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.297811][ T5938] usb 3-1: Product: syz [ 313.301973][ T5938] usb 3-1: Manufacturer: syz [ 313.306546][ T5938] usb 3-1: SerialNumber: syz [ 313.314573][ T5938] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 313.322162][ T5938] imon 3-1:155.0: unable to initialize intf0, err -19 [ 313.328897][ T5938] imon:imon_probe: failed to initialize context! [ 313.784535][ T5938] imon 3-1:155.0: unable to register, err -19 [ 313.848120][T11237] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 315.154348][T11260] syzkaller0: entered promiscuous mode [ 315.159959][T11260] syzkaller0: entered allmulticast mode [ 315.256224][T11274] fuse: Unknown parameter 'fd0x00000000000000040000000000000000000000000000000000000000' [ 316.016016][T11282] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 317.190791][ T5887] usb 3-1: USB disconnect, device number 40 [ 317.639016][T11319] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 317.653252][T11319] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.661476][T11319] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.730682][T11325] fuse: Unknown parameter 'fd0x00000000000000040000000000000000000000000000000000000000' [ 319.708804][T11379] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 320.731767][ T5938] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 320.864351][T11396] fuse: Unknown parameter 'fd0x00000000000000040000000000000000000000000000000000000000' [ 320.891719][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 320.902386][ T5938] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 320.911296][ T5938] usb 1-1: config 0 has no interface number 0 [ 320.917597][ T5938] usb 1-1: config 0 interface 184 has no altsetting 0 [ 320.936423][ T5938] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 320.950807][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.959174][ T5938] usb 1-1: Product: syz [ 320.963519][ T5938] usb 1-1: Manufacturer: syz [ 320.968222][ T5938] usb 1-1: SerialNumber: syz [ 320.988901][ T5938] usb 1-1: config 0 descriptor?? [ 321.016327][ T5938] smsc75xx v1.0.0 [ 321.549080][T11402] tipc: Enabled bearer , priority 0 [ 321.565841][T11402] tipc: Resetting bearer [ 321.577997][T11401] tipc: Disabling bearer [ 321.637614][ T5938] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 321.660456][ T5938] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 321.680811][ T5938] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 321.713489][ T5938] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 321.740302][ T5938] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 321.761613][ T5938] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 321.780939][ T5938] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 322.095075][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1599'. [ 322.106131][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1599'. [ 322.680483][T11417] netlink: 'syz.2.1600': attribute type 1 has an invalid length. [ 323.542259][ T979] usb 1-1: USB disconnect, device number 70 [ 324.104393][ T30] audit: type=1400 audit(1764166902.941:463): avc: denied { read write } for pid=11487 comm="syz.2.1606" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 324.407339][ T30] audit: type=1400 audit(1764166902.941:464): avc: denied { open } for pid=11487 comm="syz.2.1606" path="/dev/sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 324.452132][ T11] block nbd0: Possible stuck request ffff88802603e000: control (read@0,1024B). Runtime 150 seconds [ 324.462966][ T11] block nbd0: Possible stuck request ffff88802603e1c0: control (read@1024,1024B). Runtime 150 seconds [ 324.474510][ T11] block nbd0: Possible stuck request ffff88802603e380: control (read@2048,1024B). Runtime 150 seconds [ 324.485572][ T11] block nbd0: Possible stuck request ffff88802603e540: control (read@3072,1024B). Runtime 150 seconds [ 324.517073][ T30] audit: type=1400 audit(1764166902.941:465): avc: denied { ioctl } for pid=11487 comm="syz.2.1606" path="/dev/sg0" dev="devtmpfs" ino=755 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 325.559315][T11486] syz.0.1605 (11486): drop_caches: 2 [ 325.639012][T11497] fuse: Unknown parameter 'fd0x00000000000000040000000000000000000000000000000000000000' [ 325.894003][T11505] netlink: 'syz.0.1612': attribute type 1 has an invalid length. [ 326.101960][ T30] audit: type=1400 audit(1764166904.941:466): avc: denied { module_load } for pid=11557 comm="syz.0.1616" path="/sys/power/wakeup_count" dev="sysfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 326.990923][T11573] tipc: Enabled bearer , priority 10 [ 327.205946][T11573] tipc: Enabling of bearer rejected, failed to enable media [ 327.656463][T11583] nfs: Unknown parameter 'ntext' [ 328.104079][ T5866] tipc: Node number set to 3704971817 [ 329.341998][ T5866] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 329.531762][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 329.578815][ T5866] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 329.589442][T11607] fuse: Unknown parameter 'fd0x00000000000000040000000000000000000000000000000000000000' [ 329.675965][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 329.687492][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 329.698379][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 329.710104][ T5866] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 329.719330][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.734668][ T5866] usb 1-1: Product: syz [ 329.738959][ T5866] usb 1-1: Manufacturer: syz [ 329.743706][ T5866] usb 1-1: SerialNumber: syz [ 329.755597][ T5866] usb 1-1: config 0 descriptor?? [ 329.776640][ T30] audit: type=1400 audit(1764166908.621:467): avc: denied { create } for pid=11613 comm="syz.3.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 329.776884][ T5866] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 330.248341][T11622] syzkaller0: entered promiscuous mode [ 330.256161][T11622] syzkaller0: entered allmulticast mode [ 330.275170][ T5866] usb 1-1: USB disconnect, device number 71 [ 330.299720][T11632] syzkaller0: entered promiscuous mode [ 330.305860][T11632] syzkaller0: entered allmulticast mode [ 332.023198][ T5887] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 332.655363][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 332.677365][ T5887] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 332.712353][ T5887] usb 1-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 332.730800][ T5887] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 332.749026][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.758483][ T5887] usb 1-1: Product: syz [ 332.763821][ T5887] usb 1-1: Manufacturer: syz [ 332.768928][ T5887] usb 1-1: SerialNumber: syz [ 332.788047][ T5887] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 332.796403][ T5887] imon 1-1:155.0: unable to initialize intf0, err -19 [ 332.803221][ T5887] imon:imon_probe: failed to initialize context! [ 332.809619][ T5887] imon 1-1:155.0: unable to register, err -19 [ 332.917412][T11686] netlink: 'syz.4.1647': attribute type 1 has an invalid length. [ 333.012935][ T5866] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 333.127375][T11700] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1648'. [ 333.171608][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 333.178650][ T5866] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 333.195504][ T5866] usb 4-1: config 0 has no interface number 1 [ 333.211982][ T5866] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 333.222861][T11702] syzkaller0: entered promiscuous mode [ 333.222879][T11702] syzkaller0: entered allmulticast mode [ 333.235598][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 333.245765][ T5866] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 333.258379][ T5866] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 333.267511][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.276113][ T5866] usb 4-1: Product: syz [ 333.280363][ T5866] usb 4-1: Manufacturer: syz [ 333.287350][ T5866] usb 4-1: SerialNumber: syz [ 333.322728][ T5866] usb 4-1: config 0 descriptor?? [ 333.334630][ T5866] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 333.539977][T11678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.563057][T11678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.858350][T11678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.874322][T11678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.118917][ T5866] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 334.135255][ T5866] usb 4-1: USB disconnect, device number 71 [ 334.142655][ T5866] pvrusb2: Device being rendered inoperable [ 334.150181][ T5866] pvrusb2: Device being rendered inoperable [ 335.113976][T11759] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1659'. [ 335.663926][ T30] audit: type=1400 audit(2000000005.720:468): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 335.747858][T11777] netlink: 'syz.4.1663': attribute type 1 has an invalid length. [ 335.757947][T11777] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1663'. [ 336.803139][ T5900] usb 1-1: USB disconnect, device number 72 [ 336.816736][ T30] audit: type=1400 audit(2000000006.260:469): avc: denied { getopt } for pid=11786 comm="syz.2.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 337.188071][T11804] syzkaller0: entered promiscuous mode [ 337.194129][T11804] syzkaller0: entered allmulticast mode [ 337.593616][ T5887] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 337.742406][T11823] tipc: Enabling of bearer rejected, failed to enable media [ 337.782178][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 337.797071][ T5887] usb 3-1: config 0 has an invalid interface number: 33 but max is 1 [ 337.836866][ T5887] usb 3-1: config 0 has no interface number 1 [ 337.843155][ T5887] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 337.868143][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 337.878336][ T5887] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 337.890085][ T5887] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 337.903583][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.911875][ T5887] usb 3-1: Product: syz [ 337.919085][ T5887] usb 3-1: Manufacturer: syz [ 337.944268][ T5887] usb 3-1: SerialNumber: syz [ 337.972404][ T5887] usb 3-1: config 0 descriptor?? [ 337.989560][ T5887] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 338.202895][T11799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.211894][T11799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.412275][ T5938] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 338.460576][T11799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.486247][T11799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.592495][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 338.695577][ T5938] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 338.706742][ T5887] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 338.715416][ T5938] usb 4-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 338.731455][ T5887] usb 3-1: USB disconnect, device number 41 [ 338.739555][ T5887] pvrusb2: Device being rendered inoperable [ 338.745691][ T5938] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 338.756194][ T5887] pvrusb2: Device being rendered inoperable [ 338.762171][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.771377][ T5938] usb 4-1: Product: syz [ 338.777755][ T5938] usb 4-1: Manufacturer: syz [ 338.782447][ T5938] usb 4-1: SerialNumber: syz [ 340.117318][ T5938] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 340.139670][ T5938] imon 4-1:155.0: unable to initialize intf0, err -19 [ 340.146520][ T5938] imon:imon_probe: failed to initialize context! [ 340.152893][ T5938] imon 4-1:155.0: unable to register, err -19 [ 340.162227][ T30] audit: type=1400 audit(2000000009.480:470): avc: denied { mount } for pid=11892 comm="syz.0.1680" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 340.222670][ T30] audit: type=1400 audit(2000000010.280:471): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 341.662782][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1690'. [ 341.675990][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1690'. [ 342.285541][ T5938] usb 4-1: USB disconnect, device number 72 [ 344.391749][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1703'. [ 344.658846][T12001] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 344.692110][T12011] syzkaller0: entered promiscuous mode [ 344.698541][T12011] syzkaller0: entered allmulticast mode [ 344.771618][ T5938] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 344.921827][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 345.003794][ T5938] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 345.043012][ T5938] usb 1-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 345.067667][ T5938] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 345.077251][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.938028][ T5938] usb 1-1: Product: syz [ 345.943815][ T5938] usb 1-1: Manufacturer: syz [ 345.948660][ T5938] usb 1-1: SerialNumber: syz [ 345.963032][ T5938] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 345.971358][ T5938] imon 1-1:155.0: unable to initialize intf0, err -19 [ 345.980294][ T5938] imon:imon_probe: failed to initialize context! [ 345.987659][ T5938] imon 1-1:155.0: unable to register, err -19 [ 346.425675][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1719'. [ 346.669386][T12088] syzkaller0: entered promiscuous mode [ 346.678440][T12088] syzkaller0: entered allmulticast mode [ 346.885550][T12100] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 346.977898][T12110] ------------[ cut here ]------------ [ 346.983923][T12110] WARNING: CPU: 1 PID: 12110 at arch/x86/kvm/lapic.c:3483 kvm_apic_accept_events+0x444/0x4c0 [ 346.994603][T12110] Modules linked in: [ 346.999170][T12110] CPU: 1 UID: 0 PID: 12110 Comm: syz.4.1724 Not tainted syzkaller #0 PREEMPT(full) [ 347.008589][T12110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.019076][T12110] RIP: 0010:kvm_apic_accept_events+0x444/0x4c0 [ 347.025272][T12110] Code: 34 03 00 00 02 00 00 00 e9 ae fd ff ff 4c 89 ef e8 81 ae de 00 e9 33 fc ff ff e8 47 ae de 00 e9 17 fd ff ff e8 ed 0b 76 00 90 <0f> 0b 90 e9 24 fd ff ff e8 5f ae de 00 e9 de fb ff ff e8 25 ae de [ 347.044992][T12110] RSP: 0018:ffffc9000b8b7c38 EFLAGS: 00010287 [ 347.051058][T12110] RAX: 0000000000000705 RBX: 0000000000000002 RCX: ffffc9000cccb000 [ 347.059221][T12110] RDX: 0000000000080000 RSI: ffffffff8146dbf3 RDI: 0000000000000005 [ 347.067253][T12110] RBP: ffff88807b2ae000 R08: 0000000000000005 R09: 0000000000000002 [ 347.075263][T12110] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000001 [ 347.083274][T12110] R13: ffff88807b2ae0e0 R14: ffff88804f6bd2b0 R15: 0000000000000001 [ 347.091225][T12110] FS: 00007f6497fe86c0(0000) GS:ffff888124b05000(0000) knlGS:0000000000000000 [ 347.100172][T12110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.106907][T12110] CR2: 000000000005fff8 CR3: 000000003041b000 CR4: 00000000003526f0 [ 347.114960][T12110] Call Trace: [ 347.118215][T12110] [ 347.121128][T12110] kvm_arch_vcpu_ioctl_get_mpstate+0x103/0x450 [ 347.127293][T12110] kvm_vcpu_ioctl+0x7b8/0x1690 [ 347.132066][T12110] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 347.137261][T12110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 347.143163][T12110] ? do_vfs_ioctl+0x128/0x14f0 [ 347.147908][T12110] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 347.152939][T12110] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 347.159790][T12110] ? hook_file_ioctl_common+0x145/0x410 [ 347.165362][T12110] ? selinux_file_ioctl+0x180/0x270 [ 347.170544][T12110] ? selinux_file_ioctl+0xb4/0x270 [ 347.175669][T12110] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 347.180850][T12110] __x64_sys_ioctl+0x18e/0x210 [ 347.185618][T12110] do_syscall_64+0xcd/0xfa0 [ 347.190104][T12110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.196027][T12110] RIP: 0033:0x7f649718f749 [ 347.200438][T12110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.220069][T12110] RSP: 002b:00007f6497fe8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.228484][T12110] RAX: ffffffffffffffda RBX: 00007f64973e5fa0 RCX: 00007f649718f749 [ 347.236456][T12110] RDX: 0000200000000040 RSI: 000000008004ae98 RDI: 0000000000000005 [ 347.244423][T12110] RBP: 00007f6497213f91 R08: 0000000000000000 R09: 0000000000000000 [ 347.252396][T12110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.260347][T12110] R13: 00007f64973e6038 R14: 00007f64973e5fa0 R15: 00007ffff27eafd8 [ 347.268367][T12110] [ 347.271386][T12110] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 347.278649][T12110] CPU: 1 UID: 0 PID: 12110 Comm: syz.4.1724 Not tainted syzkaller #0 PREEMPT(full) [ 347.287998][T12110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.298031][T12110] Call Trace: [ 347.301291][T12110] [ 347.304217][T12110] dump_stack_lvl+0x3d/0x1f0 [ 347.308791][T12110] vpanic+0x640/0x6f0 [ 347.312761][T12110] ? kvm_apic_accept_events+0x444/0x4c0 [ 347.318288][T12110] panic+0xca/0xd0 [ 347.321997][T12110] ? __pfx_panic+0x10/0x10 [ 347.326408][T12110] check_panic_on_warn+0xab/0xb0 [ 347.331322][T12110] __warn+0xf6/0x3c0 [ 347.335197][T12110] ? kvm_apic_accept_events+0x444/0x4c0 [ 347.340727][T12110] report_bug+0x3c3/0x580 [ 347.345041][T12110] ? kvm_apic_accept_events+0x444/0x4c0 [ 347.350568][T12110] handle_bug+0x184/0x210 [ 347.354878][T12110] exc_invalid_op+0x17/0x50 [ 347.359375][T12110] asm_exc_invalid_op+0x1a/0x20 [ 347.364228][T12110] RIP: 0010:kvm_apic_accept_events+0x444/0x4c0 [ 347.370388][T12110] Code: 34 03 00 00 02 00 00 00 e9 ae fd ff ff 4c 89 ef e8 81 ae de 00 e9 33 fc ff ff e8 47 ae de 00 e9 17 fd ff ff e8 ed 0b 76 00 90 <0f> 0b 90 e9 24 fd ff ff e8 5f ae de 00 e9 de fb ff ff e8 25 ae de [ 347.389992][T12110] RSP: 0018:ffffc9000b8b7c38 EFLAGS: 00010287 [ 347.396046][T12110] RAX: 0000000000000705 RBX: 0000000000000002 RCX: ffffc9000cccb000 [ 347.404007][T12110] RDX: 0000000000080000 RSI: ffffffff8146dbf3 RDI: 0000000000000005 [ 347.411956][T12110] RBP: ffff88807b2ae000 R08: 0000000000000005 R09: 0000000000000002 [ 347.419905][T12110] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000001 [ 347.427854][T12110] R13: ffff88807b2ae0e0 R14: ffff88804f6bd2b0 R15: 0000000000000001 [ 347.435818][T12110] ? kvm_apic_accept_events+0x443/0x4c0 [ 347.441352][T12110] ? kvm_apic_accept_events+0x443/0x4c0 [ 347.446884][T12110] kvm_arch_vcpu_ioctl_get_mpstate+0x103/0x450 [ 347.453024][T12110] kvm_vcpu_ioctl+0x7b8/0x1690 [ 347.457790][T12110] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 347.462972][T12110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 347.468848][T12110] ? do_vfs_ioctl+0x128/0x14f0 [ 347.473597][T12110] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 347.478607][T12110] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 347.485449][T12110] ? hook_file_ioctl_common+0x145/0x410 [ 347.490983][T12110] ? selinux_file_ioctl+0x180/0x270 [ 347.496159][T12110] ? selinux_file_ioctl+0xb4/0x270 [ 347.501251][T12110] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 347.506437][T12110] __x64_sys_ioctl+0x18e/0x210 [ 347.511197][T12110] do_syscall_64+0xcd/0xfa0 [ 347.515682][T12110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.521553][T12110] RIP: 0033:0x7f649718f749 [ 347.525953][T12110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.545539][T12110] RSP: 002b:00007f6497fe8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.553929][T12110] RAX: ffffffffffffffda RBX: 00007f64973e5fa0 RCX: 00007f649718f749 [ 347.561882][T12110] RDX: 0000200000000040 RSI: 000000008004ae98 RDI: 0000000000000005 [ 347.569830][T12110] RBP: 00007f6497213f91 R08: 0000000000000000 R09: 0000000000000000 [ 347.577783][T12110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.585735][T12110] R13: 00007f64973e6038 R14: 00007f64973e5fa0 R15: 00007ffff27eafd8 [ 347.593696][T12110] [ 347.596953][T12110] Kernel Offset: disabled [ 347.601249][T12110] Rebooting in 86400 seconds..