last executing test programs: 4.330059272s ago: executing program 4 (id=4042): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 3.293122226s ago: executing program 0 (id=4063): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/tcp6\x00') read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0xcb0a) 2.970828285s ago: executing program 0 (id=4066): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x100000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 2.446859043s ago: executing program 2 (id=4075): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 2.166985766s ago: executing program 4 (id=4079): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, 0x0) 2.097943354s ago: executing program 4 (id=4081): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) 1.985395584s ago: executing program 1 (id=4084): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.38415002s ago: executing program 3 (id=4090): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000005}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 1.211184466s ago: executing program 4 (id=4091): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000002740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.210577199s ago: executing program 4 (id=4092): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$AUDIT_USER(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x5}, 0x5) 1.089622476s ago: executing program 1 (id=4093): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.060827583s ago: executing program 1 (id=4094): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 1.030921421s ago: executing program 1 (id=4095): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000440)=0x9, 0x1a) 509.349137ms ago: executing program 3 (id=4096): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 463.66485ms ago: executing program 3 (id=4097): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 462.6478ms ago: executing program 3 (id=4098): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 394.739042ms ago: executing program 3 (id=4099): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 381.315561ms ago: executing program 3 (id=4100): r0 = syz_io_uring_setup(0x5c3, &(0x7f00000002c0)={0x0, 0x4009839, 0x0, 0x2, 0x7b}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, r0, 0x35, {0x5, 0x1}, 0x1}, 0x1) 368.662203ms ago: executing program 2 (id=4101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = socket(0x2b, 0x80801, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x30, r3, 0x1, 0xffffffff, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) 341.043534ms ago: executing program 4 (id=4102): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x1, 0x5, "989eafdf24"}, 0x0}) 273.778701ms ago: executing program 0 (id=4103): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000480)=ANY=[@ANYBLOB="cf00000000"]) 214.771094ms ago: executing program 2 (id=4104): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) shutdown(r0, 0x1) 184.213398ms ago: executing program 0 (id=4105): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x80, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xd}}}, 0xb8}}, 0x0) 126.671439ms ago: executing program 1 (id=4106): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f00000000c0)) 108.654179ms ago: executing program 2 (id=4107): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x4, 0x7, 0x4, 0x10000, 0xbc9f, {0x77359400}, {0x3, 0x0, 0x87, 0xd, 0x2, 0x0, "8dc55fe2"}, 0x8, 0x4, {}, 0x4}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 101.042736ms ago: executing program 0 (id=4108): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x7, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3fff}}, 0x14}}, 0x4084854) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 53.51441ms ago: executing program 2 (id=4109): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@hyper, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) close(r0) 38.385157ms ago: executing program 1 (id=4110): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 34.045613ms ago: executing program 0 (id=4111): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f00000001c0)={'full', 0x20, 0xe, 0x20, 0x200}, 0x2f) write$cgroup_pressure(r2, &(0x7f0000000100)={'some', 0x20, 0x80003ffe, 0x20, 0x6}, 0x2f) 0s ago: executing program 2 (id=4112): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x7f, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): as 2 interfaces, different from the descriptor's value: 3 [ 252.896517][ T918] usb 2-1: config 1 has no interface number 1 [ 252.902656][ T918] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 252.941930][ T918] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 252.975578][ T918] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.984856][ T918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.993119][ T918] usb 2-1: Product: syz [ 253.014167][ T918] usb 2-1: Manufacturer: syz [ 253.024165][ T918] usb 2-1: SerialNumber: syz [ 253.140544][T12501] netlink: 'syz.0.2736': attribute type 1 has an invalid length. [ 253.150782][T12501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2736'. [ 253.245998][ T918] hub 2-1:1.0: Invalid hub with more than one config or interface [ 253.274506][ T918] hub 2-1:1.0: probe with driver hub failed with error -22 [ 253.300096][ T918] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 253.363053][ T918] usb 2-1: USB disconnect, device number 42 [ 253.394054][T12517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.594996][ T30] audit: type=1400 audit(1754818155.979:617): avc: denied { read } for pid=12526 comm="syz.4.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 253.927557][ T918] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 254.096183][ T918] usb 1-1: Using ep0 maxpacket: 32 [ 254.105770][ T918] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 254.128109][ T918] usb 1-1: config 0 has no interface number 0 [ 254.139663][ T918] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 254.151962][ T918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.160121][ T918] usb 1-1: Product: syz [ 254.164435][ T918] usb 1-1: Manufacturer: syz [ 254.182809][ T918] usb 1-1: SerialNumber: syz [ 254.190349][ T918] usb 1-1: config 0 descriptor?? [ 254.200028][ T918] smsc95xx v2.0.0 [ 254.407925][T12569] SELinux: ebitmap: truncated map [ 254.449802][T12569] SELinux: failed to load policy [ 254.583780][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2768'. [ 255.006562][T12599] SELinux: ebitmap: truncated map [ 255.028275][T12599] SELinux: failed to load policy [ 255.095490][ T1208] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 255.212056][ T918] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 255.233278][ T918] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 255.248289][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.265865][ T1208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.268913][ T918] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 255.279380][ T1208] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 255.299852][ T1208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.304801][ T918] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 255.325634][ T1208] usb 5-1: config 0 descriptor?? [ 255.347243][ T918] usb 1-1: USB disconnect, device number 45 [ 255.704347][ T43] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 255.771671][ T1208] prodikeys 0003:041E:2801.0036: unknown main item tag 0x0 [ 255.789468][ T1208] prodikeys 0003:041E:2801.0036: unknown main item tag 0x0 [ 255.804171][ T1208] prodikeys 0003:041E:2801.0036: unknown main item tag 0x0 [ 255.822305][ T1208] prodikeys 0003:041E:2801.0036: unknown main item tag 0x0 [ 255.868328][ T1208] prodikeys 0003:041E:2801.0036: unknown main item tag 0x0 [ 255.882620][ T1208] prodikeys 0003:041E:2801.0036: unknown main item tag 0x0 [ 255.890564][ T1208] prodikeys 0003:041E:2801.0036: unknown main item tag 0x0 [ 255.910941][ T1208] prodikeys 0003:041E:2801.0036: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input0 [ 256.002016][ T1208] usb 5-1: USB disconnect, device number 34 [ 256.009947][T12629] SELinux: ebitmap: truncated map [ 256.021767][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 256.037405][ T43] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 256.051586][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.060038][T12629] SELinux: failed to load policy [ 256.070025][ T43] usb 2-1: config 0 descriptor?? [ 256.082584][ T43] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 256.314293][ T5957] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 256.318688][T12641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2797'. [ 256.330994][T12641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2797'. [ 256.464204][ T5957] usb 3-1: Using ep0 maxpacket: 32 [ 256.471203][ T5957] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 256.487234][ T5957] usb 3-1: config 0 interface 0 has no altsetting 0 [ 256.493952][ T5957] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 256.506131][ T1208] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 256.506488][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.541303][ T5957] usb 3-1: config 0 descriptor?? [ 256.666136][ T1208] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.687236][ T1208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 256.717436][ T1208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 256.734176][ T1208] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.749761][ T1208] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.760574][ T1208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.790901][ T1208] usb 1-1: config 0 descriptor?? [ 257.090953][ T43] gspca_nw80x: reg_w err -71 [ 257.104553][ T43] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 257.125614][ T43] usb 2-1: USB disconnect, device number 43 [ 257.230165][T12681] input: syz0 as /devices/virtual/input/input52 [ 257.238027][ T1208] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 257.332992][ T5957] corsair-cpro 0003:1B1C:0C10.0038: hidraw1: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 257.400232][T12693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.526876][ T5957] corsair-cpro 0003:1B1C:0C10.0038: probe with driver corsair-cpro failed with error -5 [ 257.789566][ T43] usb 3-1: USB disconnect, device number 38 [ 257.809164][T12710] loop6: detected capacity change from 0 to 524287999 [ 258.344211][ T43] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 258.494257][ T5957] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 258.504200][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 258.511321][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 258.522785][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.532707][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.542621][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 258.556513][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 258.566887][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 258.575941][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.590749][ T43] usb 2-1: config 0 descriptor?? [ 258.596844][T12715] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 258.644597][ T5957] usb 5-1: Using ep0 maxpacket: 32 [ 258.656426][ T5957] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 258.669238][ T5957] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 258.679344][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.688034][ T5957] usb 5-1: Product: syz [ 258.692198][ T5957] usb 5-1: Manufacturer: syz [ 258.697300][ T5957] usb 5-1: SerialNumber: syz [ 258.705723][ T5957] usb 5-1: config 0 descriptor?? [ 258.711561][T12718] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 258.729307][ T5957] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input53 [ 258.754359][ T5913] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 258.916706][ T5913] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 258.926136][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.943917][ T5913] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 258.953919][ T5913] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 258.966061][ T5913] usb 4-1: Manufacturer: syz [ 258.985485][ T5957] usb 5-1: USB disconnect, device number 35 [ 258.991450][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 259.007872][ T5913] usb 4-1: config 0 descriptor?? [ 259.032046][ T43] usb 2-1: USB disconnect, device number 44 [ 259.033862][ T5859] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 259.115438][ T5913] rc_core: IR keymap rc-hauppauge not found [ 259.126584][ T5913] Registered IR keymap rc-empty [ 259.132375][ T5913] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 259.147903][ T5913] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input54 [ 259.235983][ T24] usb 1-1: USB disconnect, device number 46 [ 259.311105][ T5913] usb 4-1: USB disconnect, device number 35 [ 259.726187][T12778] tap0: tun_chr_ioctl cmd 1074025675 [ 259.731562][T12778] tap0: persist enabled [ 259.736459][T12778] tap0: tun_chr_ioctl cmd 1074025675 [ 259.741757][T12778] tap0: persist enabled [ 259.774246][ T5913] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 259.861532][T12786] loop8: detected capacity change from 0 to 8 [ 259.870077][T12786] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 259.876089][T12786] loop8: partition table partially beyond EOD, truncated [ 259.883203][T12786] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 259.924469][ T1208] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 259.947847][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.964721][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 259.976450][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 259.990078][ T5913] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 259.999724][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.008593][ T5913] usb 3-1: Product: syz [ 260.012932][ T5913] usb 3-1: Manufacturer: syz [ 260.018175][ T5913] usb 3-1: SerialNumber: syz [ 260.025368][ T5913] usb 3-1: config 0 descriptor?? [ 260.031043][T12768] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 260.087059][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.110904][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.133583][ T1208] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 260.146905][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.173390][ T1208] usb 2-1: config 0 descriptor?? [ 260.247428][ T5913] powermate: unknown product id 0240 [ 260.261803][ T5913] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 260.283429][ T5913] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input55 [ 260.332881][ T30] audit: type=1400 audit(1754818162.719:618): avc: denied { remount } for pid=12794 comm="syz.0.2868" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 260.509110][ C0] powermate: config urb returned -71 [ 260.514539][ T24] usb 3-1: USB disconnect, device number 39 [ 260.515931][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 260.529960][ C0] powermate: config urb returned -71 [ 260.944220][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 260.974303][ T5913] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 261.007059][ T1208] hid-led 0003:27B8:01ED.0039: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 261.028876][ T1208] hid-led 0003:27B8:01ED.0039: ThingM blink(1) initialized [ 261.097376][ T24] usb 4-1: config 0 has no interfaces? [ 261.103096][ T24] usb 4-1: New USB device found, idVendor=0919, idProduct=3333, bcdDevice= 0.40 [ 261.112273][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.125162][ T24] usb 4-1: config 0 descriptor?? [ 261.157114][ T5913] usb 5-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.173538][ T5913] usb 5-1: config 0 interface 0 altsetting 238 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.185923][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 261.192575][ T5913] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 261.202545][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.225090][ T5913] usb 5-1: config 0 descriptor?? [ 261.232675][ T24] usb 2-1: USB disconnect, device number 45 [ 261.296439][ T1208] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 261.349250][T12802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.357986][T12802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.370812][T12802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.381198][T12802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.392837][ T43] usb 4-1: USB disconnect, device number 36 [ 261.476235][ T1208] usb 3-1: config 0 interface 0 has no altsetting 0 [ 261.483081][ T1208] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 261.493748][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.508764][ T1208] usb 3-1: config 0 descriptor?? [ 261.652781][ T5913] acrux 0003:1A34:F705.003A: unknown global tag 0xd [ 261.673096][ T5913] acrux 0003:1A34:F705.003A: item 0 0 1 13 parsing failed [ 261.673478][T12821] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.687783][T12821] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.689912][ T5913] acrux 0003:1A34:F705.003A: parse failed [ 261.705735][ T5913] acrux 0003:1A34:F705.003A: probe with driver acrux failed with error -22 [ 261.746168][T12821] bond0: left promiscuous mode [ 261.754088][T12821] bond_slave_0: left promiscuous mode [ 261.760163][T12821] batadv0: left promiscuous mode [ 261.819030][ T30] audit: type=1326 audit(1754818164.209:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506ab8ebe9 code=0x7ffc0000 [ 261.882445][ T30] audit: type=1326 audit(1754818164.239:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f506ab8ebe9 code=0x7ffc0000 [ 261.894193][T12832] usb 5-1: USB disconnect, device number 36 [ 261.905815][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.909376][ T30] audit: type=1326 audit(1754818164.239:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506ab8ebe9 code=0x7ffc0000 [ 261.946971][T12827] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 261.971642][ T30] audit: type=1326 audit(1754818164.239:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506ab8ebe9 code=0x7ffc0000 [ 262.001820][T12840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.127859][T12827] usb 4-1: config index 0 descriptor too short (expected 72, got 36) [ 262.136639][T12827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 262.151889][T12827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 262.167901][T12827] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 262.186346][T12821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.188370][T12827] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 262.203582][T12827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.212443][T12827] usb 4-1: Product: syz [ 262.217229][T12827] usb 4-1: Manufacturer: syz [ 262.221888][T12827] usb 4-1: SerialNumber: syz [ 262.233436][T12821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.607736][ T1208] video4linux radio48: keene_cmd_set failed (-71) [ 262.634434][ T1208] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 262.643158][ T1208] usb 3-1: USB disconnect, device number 40 [ 262.973663][T12821] vlan2: left promiscuous mode [ 262.983363][T12821] bridge0: left promiscuous mode [ 263.036598][T12821] vlan2: left allmulticast mode [ 263.041477][T12821] bridge0: left allmulticast mode [ 263.070363][T12821] gretap1: left promiscuous mode [ 263.101574][T12821] gretap1: left allmulticast mode [ 263.155517][ T4394] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.177790][ T4394] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.226206][ T36] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.271073][ T36] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.339113][T12827] usb 4-1: USB disconnect, device number 37 [ 263.791678][T12897] veth1_macvtap: left promiscuous mode [ 263.804276][T12897] macsec0: entered promiscuous mode [ 263.837102][T12897] macsec0: entered allmulticast mode [ 263.874967][T12898] veth1_macvtap: entered promiscuous mode [ 263.892613][T12898] veth1_macvtap: entered allmulticast mode [ 263.927242][T12898] macsec0: left promiscuous mode [ 263.932375][T12898] macsec0: left allmulticast mode [ 263.947122][T12902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.983956][T12898] veth1_macvtap: left allmulticast mode [ 263.984194][T12827] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 264.033465][T12900] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 264.145719][T12827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.168711][T12827] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 264.190993][T12827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.217681][T12827] usb 4-1: config 0 descriptor?? [ 264.385384][ T30] audit: type=1326 audit(1754818166.769:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12919 comm="syz.1.2916" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f506ab8ebe9 code=0x0 [ 264.440807][T12922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2917'. [ 264.454494][T12922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2917'. [ 264.456302][T12827] usbhid 4-1:0.0: can't add hid device: -71 [ 264.473823][T12922] netlink: 50 bytes leftover after parsing attributes in process `syz.2.2917'. [ 264.474519][T12827] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 264.510809][T12827] usb 4-1: USB disconnect, device number 38 [ 265.134678][T12827] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 265.357341][T12827] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 265.366634][T12827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.385211][T12827] usb 5-1: Product: syz [ 265.389399][T12827] usb 5-1: Manufacturer: syz [ 265.393987][T12827] usb 5-1: SerialNumber: syz [ 265.418670][T12827] usb 5-1: config 0 descriptor?? [ 265.428540][T12827] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 266.048231][ T30] audit: type=1400 audit(1754818168.439:624): avc: denied { name_bind } for pid=12965 comm="syz.2.2937" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 266.187335][T12972] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.214256][T12972] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.297175][T12972] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.320556][ T30] audit: type=1400 audit(1754818168.709:625): avc: denied { accept } for pid=12978 comm="syz.1.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 266.334187][T12972] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.431915][T12972] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.443029][T12972] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.488868][T12827] gspca_stk1135: reg_w 0x7 err -71 [ 266.495038][T12827] gspca_stk1135: serial bus timeout: status=0x00 [ 266.507925][T12827] gspca_stk1135: Sensor write failed [ 266.513683][T12827] gspca_stk1135: serial bus timeout: status=0x00 [ 266.520706][T12827] gspca_stk1135: Sensor write failed [ 266.528894][T12827] gspca_stk1135: serial bus timeout: status=0x00 [ 266.536571][T12827] gspca_stk1135: Sensor read failed [ 266.541793][T12827] gspca_stk1135: serial bus timeout: status=0x00 [ 266.552589][T12827] gspca_stk1135: Sensor read failed [ 266.561897][T12972] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.572083][T12827] gspca_stk1135: Detected sensor type unknown (0x0) [ 266.578767][T12827] gspca_stk1135: serial bus timeout: status=0x00 [ 266.586310][T12972] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.597283][T12827] gspca_stk1135: Sensor read failed [ 266.614263][T12827] gspca_stk1135: serial bus timeout: status=0x00 [ 266.620700][T12827] gspca_stk1135: Sensor read failed [ 266.626325][T12827] gspca_stk1135: serial bus timeout: status=0x00 [ 266.632722][T12827] gspca_stk1135: Sensor write failed [ 266.638090][T12827] gspca_stk1135: serial bus timeout: status=0x00 [ 266.644834][T12827] gspca_stk1135: Sensor write failed [ 266.650207][T12827] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 266.680358][T12827] usb 5-1: USB disconnect, device number 37 [ 266.709674][ T65] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.718311][ T65] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.739171][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.747616][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.764184][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.774961][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.794577][ T1208] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 266.795589][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.812000][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.945241][ T1208] usb 3-1: Using ep0 maxpacket: 16 [ 266.955458][ T1208] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 266.964805][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.972890][ T1208] usb 3-1: Product: syz [ 266.979089][ T1208] usb 3-1: Manufacturer: syz [ 266.983736][ T1208] usb 3-1: SerialNumber: syz [ 266.991196][ T1208] usb 3-1: config 0 descriptor?? [ 267.000168][ T1208] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 267.010597][ T1208] usb 3-1: Detected FT232H [ 267.059340][T13006] netlink: 'syz.4.2956': attribute type 5 has an invalid length. [ 267.067411][T13006] netlink: 130080 bytes leftover after parsing attributes in process `syz.4.2956'. [ 267.124321][T12827] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 267.202743][ T1208] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 267.287381][T13021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2963'. [ 267.299757][T12827] usb 4-1: Using ep0 maxpacket: 16 [ 267.307547][T12827] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.318946][T12827] usb 4-1: config 0 has no interface number 0 [ 267.336027][T12827] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 267.350880][T12827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.360591][T12827] usb 4-1: Product: syz [ 267.365434][T12827] usb 4-1: Manufacturer: syz [ 267.370141][T12827] usb 4-1: SerialNumber: syz [ 267.380898][T12827] usb 4-1: config 0 descriptor?? [ 267.392115][T12827] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 267.622781][ T1208] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 267.787601][T13036] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2969'. [ 267.866985][T12827] gspca_spca1528: reg_w err -71 [ 267.875049][ T43] usb 3-1: USB disconnect, device number 41 [ 267.894205][T12827] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 267.907047][T12827] usb 4-1: USB disconnect, device number 39 [ 267.949096][ T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 267.974250][ T43] ftdi_sio 3-1:0.0: device disconnected [ 268.610236][T13064] veth0: entered promiscuous mode [ 268.619213][T13064] veth0: left promiscuous mode [ 268.665394][T13069] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2984'. [ 268.667470][ T5906] kernel read not supported for file /sequencer (pid: 5906 comm: kworker/0:3) [ 268.735571][ T30] audit: type=1400 audit(1754818171.119:626): avc: denied { read } for pid=13071 comm="syz.0.2985" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 268.762533][ T30] audit: type=1400 audit(1754818171.119:627): avc: denied { open } for pid=13071 comm="syz.0.2985" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 268.794185][ T30] audit: type=1400 audit(1754818171.119:628): avc: denied { ioctl } for pid=13071 comm="syz.0.2985" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 268.794739][ T1208] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 268.967285][ T30] audit: type=1400 audit(1754818171.359:629): avc: denied { write } for pid=13083 comm="syz.0.2992" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 269.050429][T13086] syzkaller1: entered promiscuous mode [ 269.062580][T13086] syzkaller1: entered allmulticast mode [ 269.074604][ T1208] usb 2-1: Using ep0 maxpacket: 16 [ 269.084708][ T1208] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 269.207013][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 269.235250][ T1208] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 269.284465][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.292481][ T1208] usb 2-1: Product: syz [ 269.305521][ T1208] usb 2-1: Manufacturer: syz [ 269.310139][ T1208] usb 2-1: SerialNumber: syz [ 269.343361][ T1208] usb 2-1: config 0 descriptor?? [ 269.388692][ T1208] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 269.415933][ T1208] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 269.993384][ T1208] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 269.999970][ T1208] em28xx 2-1:0.0: Config register raw data: 0xde [ 270.045843][ T5906] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 270.194617][ T5847] Bluetooth: hci5: command 0x1003 tx timeout [ 270.197531][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 270.203866][ T5906] usb 3-1: config 0 has no interfaces? [ 270.229738][ T1208] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 270.242922][ T1208] em28xx 2-1:0.0: No AC97 audio processor [ 270.258421][ T5906] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 270.277947][ T1208] usb 2-1: USB disconnect, device number 46 [ 270.285967][ T1208] em28xx 2-1:0.0: Disconnecting em28xx [ 270.292767][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.304532][ T1208] em28xx 2-1:0.0: Freeing device [ 270.309888][ T5906] usb 3-1: Product: syz [ 270.314046][ T5906] usb 3-1: Manufacturer: syz [ 270.338306][ T5906] usb 3-1: SerialNumber: syz [ 270.350667][ T5906] usb 3-1: config 0 descriptor?? [ 270.554208][ T43] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 270.575278][T12823] usb 3-1: USB disconnect, device number 42 [ 270.690269][T13126] 9p: Unknown uid 00000000004294967295 [ 270.726052][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.749555][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 270.759873][ T43] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 270.775786][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.797133][ T43] usb 5-1: config 0 descriptor?? [ 270.846709][ T43] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 270.854480][ T43] dvb-usb: bulk message failed: -22 (3/0) [ 270.881098][ T43] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 270.912352][ T43] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 270.942616][ T43] usb 5-1: media controller created [ 270.961307][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.981449][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 270.994260][ T43] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 271.026068][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input56 [ 271.058690][ T43] dvb-usb: schedule remote query interval to 150 msecs. [ 271.077733][ T43] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 271.238388][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 271.249025][ T43] dvb-usb: error while querying for an remote control event. [ 271.290582][T13146] netlink: 'syz.3.3019': attribute type 12 has an invalid length. [ 271.299881][T13146] netlink: 'syz.3.3019': attribute type 29 has an invalid length. [ 271.300049][T12823] usb 5-1: USB disconnect, device number 38 [ 271.311767][T13146] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3019'. [ 271.323970][T13146] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3019'. [ 271.334784][T13148] 8021q: VLANs not supported on ip_vti0 [ 271.342981][T12823] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 271.391956][T13151] overlayfs: upper fs does not support tmpfile. [ 271.506432][ T1208] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 271.555975][T13160] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 271.570218][T13160] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 271.674366][ T1208] usb 2-1: Using ep0 maxpacket: 32 [ 271.680867][ T1208] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 271.690483][ T1208] usb 2-1: config 0 has no interface number 0 [ 271.698107][ T1208] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 271.708198][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.716272][ T1208] usb 2-1: Product: syz [ 271.720469][ T1208] usb 2-1: Manufacturer: syz [ 271.725282][ T1208] usb 2-1: SerialNumber: syz [ 271.741852][ T1208] usb 2-1: config 0 descriptor?? [ 271.749224][ T1208] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 271.992520][ T1208] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 272.023457][ T1208] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 272.318466][T13197] netlink: del zone limit has 4 unknown bytes [ 272.418594][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 272.419277][ T43] usb 2-1: USB disconnect, device number 47 [ 272.456786][ T30] audit: type=1400 audit(1754818174.839:630): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 272.477831][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 272.516632][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 272.535300][ T43] quatech2 2-1:0.51: device disconnected [ 272.548014][T13212] @: renamed from vlan0 (while UP) [ 272.620069][T13218] netlink: 'syz.3.3052': attribute type 11 has an invalid length. [ 272.724549][ T1208] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 272.884369][ T1208] usb 3-1: Using ep0 maxpacket: 16 [ 272.897252][ T1208] usb 3-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 272.921399][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.932053][ T1208] usb 3-1: Product: syz [ 272.938360][ T30] audit: type=1400 audit(1754818175.329:631): avc: denied { create } for pid=13238 comm="syz.3.3063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 272.938609][ T1208] usb 3-1: Manufacturer: syz [ 272.964068][ T1208] usb 3-1: SerialNumber: syz [ 272.973103][ T1208] usb 3-1: config 0 descriptor?? [ 272.992160][ T30] audit: type=1400 audit(1754818175.359:632): avc: denied { connect } for pid=13238 comm="syz.3.3063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 273.031445][ T30] audit: type=1400 audit(1754818175.419:633): avc: denied { ioctl } for pid=13238 comm="syz.3.3063" path="socket:[48528]" dev="sockfs" ino=48528 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 273.107646][ T30] audit: type=1400 audit(1754818175.499:634): avc: denied { connect } for pid=13247 comm="syz.1.3067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 273.127330][ T43] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 273.136702][ T30] audit: type=1400 audit(1754818175.529:635): avc: denied { accept } for pid=13247 comm="syz.1.3067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 273.177618][T13250] binder: 13249:13250 ioctl 4018620d 0 returned -22 [ 273.199474][ T1208] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 273.219014][ T1208] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 273.248950][ T1208] usb 3-1: USB disconnect, device number 43 [ 273.279144][T13255] syzkaller1: entered promiscuous mode [ 273.288641][T13255] syzkaller1: entered allmulticast mode [ 273.296696][ T43] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.313449][ T43] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.324369][ T43] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 273.341736][T12832] IPVS: starting estimator thread 0... [ 273.342290][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.351902][T13257] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 273.360677][ T43] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 273.372820][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.383443][ T43] usb 5-1: config 0 descriptor?? [ 273.446418][T13259] IPVS: using max 50 ests per chain, 120000 per kthread [ 273.470000][T13263] syzkaller1: entered promiscuous mode [ 273.476355][T13263] syzkaller1: entered allmulticast mode [ 273.530849][T13267] raw_sendmsg: syz.0.3075 forgot to set AF_INET. Fix it! [ 273.799411][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3080'. [ 273.817010][ T43] hid (null): usage index exceeded [ 273.825685][ T43] uclogic 0003:28BD:0042.003B: interface is invalid, ignoring [ 273.844746][ T1208] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 273.995663][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.007883][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.027419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 274.035773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 274.046217][ T1208] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.076346][ T1208] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 274.135501][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.162483][ T1208] usb 4-1: config 0 descriptor?? [ 274.168214][ T43] usb 5-1: USB disconnect, device number 39 [ 274.201129][T13297] input: syz0 as /devices/virtual/input/input57 [ 274.598694][ T1208] hid-udraw 0003:20D6:CB17.003C: unknown main item tag 0x0 [ 274.638722][ T1208] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.003C/input/input58 [ 274.685711][ T1208] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.003C/input/input59 [ 274.726687][ T1208] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.003C/input/input60 [ 274.765753][ T1208] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.003C/input/input61 [ 274.807475][T13271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.829145][T13271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.836118][ T1208] hid-udraw 0003:20D6:CB17.003C: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.3-1/input0 [ 274.947426][ T1208] usb 4-1: USB disconnect, device number 40 [ 274.982449][T13332] GUP no longer grows the stack in syz.4.3105 (13332): 200000004000-20000000a000 (200000002000) [ 275.002108][T13332] CPU: 1 UID: 0 PID: 13332 Comm: syz.4.3105 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 275.002141][T13332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.002153][T13332] Call Trace: [ 275.002159][T13332] [ 275.002167][T13332] dump_stack_lvl+0x16c/0x1f0 [ 275.002192][T13332] gup_vma_lookup+0x1d2/0x220 [ 275.002218][T13332] __get_user_pages+0x243/0x34a0 [ 275.002246][T13332] ? find_held_lock+0x2b/0x80 [ 275.002266][T13332] ? __pfx___get_user_pages+0x10/0x10 [ 275.002296][T13332] get_user_pages_remote+0x243/0xab0 [ 275.002320][T13332] ? mas_parent_gap+0x6f0/0x7b0 [ 275.002339][T13332] ? __pfx_get_user_pages_remote+0x10/0x10 [ 275.002364][T13332] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 275.002388][T13332] __access_remote_vm+0x24d/0x850 [ 275.002413][T13332] ? do_raw_spin_lock+0x12c/0x2b0 [ 275.002431][T13332] ? __pfx___access_remote_vm+0x10/0x10 [ 275.002459][T13332] proc_pid_cmdline_read+0x4de/0x8e0 [ 275.002485][T13332] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 275.002508][T13332] ? rw_verify_area+0xcf/0x6c0 [ 275.002534][T13332] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 275.002552][T13332] vfs_readv+0x5be/0x8b0 [ 275.002573][T13332] ? __pfx_vfs_readv+0x10/0x10 [ 275.002591][T13332] ? kmem_cache_free+0x2d1/0x4d0 [ 275.002624][T13332] ? __fget_files+0x20e/0x3c0 [ 275.002651][T13332] ? do_preadv+0x1a6/0x270 [ 275.002666][T13332] do_preadv+0x1a6/0x270 [ 275.002683][T13332] ? __pfx_do_preadv+0x10/0x10 [ 275.002705][T13332] do_syscall_64+0xcd/0x4c0 [ 275.002726][T13332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.002744][T13332] RIP: 0033:0x7f563918ebe9 [ 275.002758][T13332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.002775][T13332] RSP: 002b:00007f563a097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 275.002792][T13332] RAX: ffffffffffffffda RBX: 00007f56393b5fa0 RCX: 00007f563918ebe9 [ 275.002803][T13332] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 275.002813][T13332] RBP: 00007f5639211e19 R08: 0000000000000000 R09: 0000000000000000 [ 275.002824][T13332] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 275.002834][T13332] R13: 00007f56393b6038 R14: 00007f56393b5fa0 R15: 00007ffcde3a9be8 [ 275.002858][T13332] [ 275.252057][T13334] syz.0.3106: attempt to access beyond end of device [ 275.252057][T13334] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 275.265445][T13334] FAT-fs (loop1): unable to read boot sector [ 275.305118][ T30] audit: type=1400 audit(1754818177.639:636): avc: denied { mounton } for pid=13333 comm="syz.0.3106" path="/610/file0" dev="tmpfs" ino=3165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 275.363496][T13336] netlink: 'syz.0.3107': attribute type 7 has an invalid length. [ 275.371351][T13336] netlink: 'syz.0.3107': attribute type 3 has an invalid length. [ 275.382002][T13336] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3107'. [ 275.628145][T12832] kernel write not supported for file /amidi2 (pid: 12832 comm: kworker/0:11) [ 275.872261][T13370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3121'. [ 276.143601][ T30] audit: type=1400 audit(1754818178.529:637): avc: denied { append } for pid=13383 comm="syz.3.3130" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 276.182481][ T30] audit: type=1400 audit(1754818178.539:638): avc: denied { map } for pid=13383 comm="syz.3.3130" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 276.211857][ T30] audit: type=1400 audit(1754818178.539:639): avc: denied { execute } for pid=13383 comm="syz.3.3130" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 276.588239][T13408] batadv_slave_1: entered promiscuous mode [ 276.615728][T13407] batadv_slave_1: left promiscuous mode [ 276.793236][T13418] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3145'. [ 276.846930][T13420] netlink: 'syz.0.3146': attribute type 1 has an invalid length. [ 276.857432][T13422] fuse: Invalid gid '00000000000037777777777' [ 276.964437][T13420] bond1: entered promiscuous mode [ 276.982449][T13420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.172167][T13426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 277.228033][T13426] bond1: (slave bond2): making interface the new active one [ 277.253716][T13426] bond2: entered promiscuous mode [ 277.271456][T13426] bond1: (slave bond2): Enslaving as an active interface with an up link [ 277.964257][ T43] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 278.118471][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.146360][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 288, setting to 64 [ 278.162278][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 278.178111][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.197292][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 278.208623][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 278.229081][ T43] usb 3-1: SerialNumber: syz [ 278.245476][T13466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 278.256101][ T43] cdc_acm 3-1:1.0: skipping garbage [ 278.280178][ T43] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 278.294217][ T1208] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 278.298418][ T43] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 278.328834][ T43] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 278.486697][ T1208] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 278.488711][ T43] usb 3-1: USB disconnect, device number 44 [ 278.497200][ T1208] usb 2-1: config 0 has no interface number 0 [ 278.587261][ T1208] usb 2-1: config 0 interface 98 has no altsetting 0 [ 278.597166][ T1208] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 278.606846][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.621588][ T1208] usb 2-1: Product: syz [ 278.629276][ T1208] usb 2-1: Manufacturer: syz [ 278.633905][ T1208] usb 2-1: SerialNumber: syz [ 278.654854][ T1208] usb 2-1: config 0 descriptor?? [ 278.673583][T13490] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3177'. [ 278.687001][T13490] nbd: must specify at least one socket [ 278.885617][ T1208] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 278.928395][T12832] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 279.071621][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 279.071636][ T30] audit: type=1400 audit(1754818181.459:641): avc: denied { read } for pid=13501 comm="syz.2.3183" path="socket:[50533]" dev="sockfs" ino=50533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 279.127290][T12832] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.144276][T12832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 279.155983][T12832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 279.166024][T12832] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.193815][T12832] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.203289][T12832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.213456][T12832] usb 1-1: config 0 descriptor?? [ 279.229470][T13502] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 279.266826][T13508] input: syz0 as /devices/virtual/input/input63 [ 279.343881][ T30] audit: type=1400 audit(1754818181.679:642): avc: denied { ioctl } for pid=13509 comm="syz.2.3186" path="/647/file0" dev="tmpfs" ino=3294 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 279.368174][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.483973][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3189'. [ 279.526367][ T1208] usb 2-1: reset high-speed USB device number 48 using dummy_hcd [ 279.685873][T12832] plantronics 0003:047F:FFFF.003D: ignoring exceeding usage max [ 279.703432][T12832] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 279.716075][ T5906] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 279.874621][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 279.881053][ T5906] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 279.889380][ T5906] usb 3-1: config 0 has no interface number 0 [ 279.895598][ T5906] usb 3-1: config 0 interface 184 has no altsetting 0 [ 279.902572][ T1208] usb 2-1: failed to restore interface 98 altsetting 4 (error=-71) [ 279.914517][ T1208] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 279.922445][ T1208] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 279.931158][T12832] usb 2-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 279.941916][ T30] audit: type=1400 audit(1754818182.339:643): avc: denied { firmware_load } for pid=12832 comm="kworker/0:11" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 279.941981][ T5906] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 279.972191][T12832] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 279.982064][ T1208] usb 2-1: USB disconnect, device number 48 [ 279.991180][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.000886][ T5906] usb 3-1: Product: syz [ 280.005095][ T5906] usb 3-1: Manufacturer: syz [ 280.009678][ T5906] usb 3-1: SerialNumber: syz [ 280.017017][ T5906] usb 3-1: config 0 descriptor?? [ 280.023503][ T5906] smsc75xx v1.0.0 [ 280.028477][ T5906] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 280.039230][ T5906] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 280.435591][T13519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.454904][T13519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.469297][ T1208] usb 3-1: USB disconnect, device number 45 [ 280.543184][T13543] netlink: 'syz.1.3199': attribute type 1 has an invalid length. [ 280.551732][T13543] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3199'. [ 280.561418][T13543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3199'. [ 280.765720][ T30] audit: type=1400 audit(1754818183.159:644): avc: denied { name_connect } for pid=13552 comm="syz.3.3203" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 281.299380][T13573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.317935][T13576] input: syz0 as /devices/virtual/input/input64 [ 281.704393][T12828] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 281.819953][ T5906] usb 1-1: USB disconnect, device number 47 [ 281.845652][T13608] binder: 13607:13608 ioctl c0306201 200000002800 returned -14 [ 281.907808][T12828] usb 2-1: Using ep0 maxpacket: 32 [ 281.918273][T12828] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 281.936651][T12828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.945827][T13611] openvswitch: netlink: IPv4 tun info is not correct [ 281.961393][T12828] usb 2-1: config 0 descriptor?? [ 282.034739][ T1208] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 282.077181][T13623] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3228'. [ 282.150653][T13625] syzkaller1: entered promiscuous mode [ 282.161928][T13625] syzkaller1: entered allmulticast mode [ 282.193827][T12828] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 282.211431][T12828] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 282.212699][ T1208] usb 3-1: Using ep0 maxpacket: 16 [ 282.234820][T12828] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 282.236882][ T1208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.244599][T12828] usb 2-1: media controller created [ 282.267172][ T1208] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 282.302374][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.328434][T12828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.355067][ T1208] usb 3-1: config 0 descriptor?? [ 282.403697][T12828] az6027: usb out operation failed. (-71) [ 282.425954][T12828] az6027: usb out operation failed. (-71) [ 282.441910][T12828] stb0899_attach: Driver disabled by Kconfig [ 282.448899][T12828] az6027: no front-end attached [ 282.448899][T12828] [ 282.461717][T12828] az6027: usb out operation failed. (-71) [ 282.472216][T12828] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 282.493769][T12828] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input65 [ 282.524739][T12828] dvb-usb: schedule remote query interval to 400 msecs. [ 282.533443][T13647] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3234'. [ 282.538767][T12828] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 282.567784][T12828] usb 2-1: USB disconnect, device number 49 [ 282.575241][ T43] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 282.583041][T13647] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3234'. [ 282.610093][T13647] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3234'. [ 282.683336][T12828] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 282.746996][ T43] usb 4-1: config 0 has no interfaces? [ 282.752511][ T43] usb 4-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 282.761576][T13655] netlink: 'syz.0.3238': attribute type 10 has an invalid length. [ 282.761594][T13655] netlink: 'syz.0.3238': attribute type 17 has an invalid length. [ 282.763462][T13655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.775125][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.790178][ T1208] mcp2221 0003:04D8:00DD.003E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 282.798171][ T43] usb 4-1: config 0 descriptor?? [ 283.080948][T12828] usb 4-1: USB disconnect, device number 41 [ 283.103946][T13673] netlink: 'syz.0.3242': attribute type 1 has an invalid length. [ 283.136165][T13673] netlink: 'syz.0.3242': attribute type 2 has an invalid length. [ 283.324477][ T1208] usb 3-1: USB disconnect, device number 46 [ 283.559213][T13702] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.3253'. [ 283.752677][T13715] veth0: entered promiscuous mode [ 283.760733][T13714] veth0: left promiscuous mode [ 283.765651][ T1208] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 283.887383][ T5906] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 283.927446][ T1208] usb 5-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 283.944282][ T1208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.962150][ T1208] usb 5-1: config 0 descriptor?? [ 284.067674][ T5906] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 284.085669][T13738] netlink: 'syz.0.3268': attribute type 4 has an invalid length. [ 284.087200][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.112906][ T5906] usb 2-1: Product: syz [ 284.123032][ T5906] usb 2-1: Manufacturer: syz [ 284.132396][ T5906] usb 2-1: SerialNumber: syz [ 284.145332][ T5906] usb 2-1: config 0 descriptor?? [ 284.163513][ T5906] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 284.366347][ T5906] gspca_sunplus: reg_r err -71 [ 284.374917][ T5906] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 284.399848][ T5906] usb 2-1: USB disconnect, device number 50 [ 284.426046][ T1208] aquacomputer_d5next 0003:0C70:F010.003F: item fetching failed at offset 1/5 [ 284.451554][ T1208] aquacomputer_d5next 0003:0C70:F010.003F: probe with driver aquacomputer_d5next failed with error -22 [ 284.466915][T12823] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 284.635842][T12823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.638239][T12828] usb 5-1: USB disconnect, device number 40 [ 284.652948][T12823] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 284.688257][T12823] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.698870][T12823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.712844][T12823] usb 3-1: Product: syz [ 284.717725][T12823] usb 3-1: Manufacturer: syz [ 284.722401][T12823] usb 3-1: SerialNumber: syz [ 284.766047][ T30] audit: type=1400 audit(1754818187.159:645): avc: denied { read } for pid=13760 comm="syz.3.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 284.936296][T13741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.948463][T13741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.959954][T12823] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 284.974587][T12823] usb 3-1: USB disconnect, device number 47 [ 285.066165][ T5906] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 285.225574][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.240153][ T5906] usb 1-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 285.254699][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.269088][ T5906] usb 1-1: config 0 descriptor?? [ 285.404868][T12823] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 285.566494][T12823] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 285.578355][T12823] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 285.589589][T12823] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.599742][T12823] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 285.611878][T12823] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 285.623979][T12823] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 285.636055][T12823] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 285.645499][T12823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.658199][T13741] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 285.687147][ T5906] thrustmaster 0003:044F:B300.0040: global environment stack underflow [ 285.695889][ T5906] thrustmaster 0003:044F:B300.0040: item 0 4 1 11 parsing failed [ 285.705054][ T5906] thrustmaster 0003:044F:B300.0040: parse failed [ 285.711518][ T5906] thrustmaster 0003:044F:B300.0040: probe with driver thrustmaster failed with error -22 [ 285.868070][T12823] usb 3-1: usb_control_msg returned -71 [ 285.890814][T12823] usbtmc 3-1:16.0: can't read capabilities [ 285.898313][ T5906] usb 1-1: USB disconnect, device number 48 [ 285.914566][T12823] usb 3-1: USB disconnect, device number 48 [ 286.535570][T13822] input: syz0 as /devices/virtual/input/input66 [ 286.646158][T13828] overlayfs: conflicting lowerdir path [ 286.658837][T13828] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 286.734444][ T918] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 286.899102][ T918] usb 3-1: config 0 has no interfaces? [ 286.912737][ T918] usb 3-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=9d.51 [ 286.931752][ T918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.942113][ T918] usb 3-1: Product: syz [ 286.948898][ T918] usb 3-1: Manufacturer: syz [ 286.954757][ T918] usb 3-1: SerialNumber: syz [ 286.965230][ T918] usb 3-1: config 0 descriptor?? [ 287.122459][T13866] pim6reg1: entered promiscuous mode [ 287.127926][T13866] pim6reg1: entered allmulticast mode [ 287.177230][ T918] usb 3-1: USB disconnect, device number 49 [ 287.184587][T12828] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 287.218757][ T30] audit: type=1400 audit(1754818189.609:646): avc: denied { read } for pid=13867 comm="syz.4.3325" path="socket:[52327]" dev="sockfs" ino=52327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 287.354436][T12828] usb 2-1: Using ep0 maxpacket: 8 [ 287.368150][T12828] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.378569][T12828] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.388647][T12828] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.398886][T12828] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.412018][T12828] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 287.421150][T12828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.648281][T12828] usb 2-1: GET_CAPABILITIES returned 0 [ 287.653979][T12828] usbtmc 2-1:16.0: can't read capabilities [ 287.688448][ T30] audit: type=1326 audit(1754818190.079:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13877 comm="syz.4.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563918ebe9 code=0x7ffc0000 [ 287.732438][ T30] audit: type=1326 audit(1754818190.079:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13877 comm="syz.4.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563918ebe9 code=0x7ffc0000 [ 287.757518][ T30] audit: type=1326 audit(1754818190.099:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13877 comm="syz.4.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f563918ebe9 code=0x7ffc0000 [ 287.781805][ T30] audit: type=1326 audit(1754818190.099:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13877 comm="syz.4.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563918ebe9 code=0x7ffc0000 [ 287.823985][T13882] SELinux: ebitmap start bit (2099205) is not a multiple of the map unit size (64) [ 287.833381][ T30] audit: type=1326 audit(1754818190.099:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13877 comm="syz.4.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f563918ebe9 code=0x7ffc0000 [ 287.833427][ T30] audit: type=1326 audit(1754818190.099:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13877 comm="syz.4.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563918ebe9 code=0x7ffc0000 [ 287.833464][ T30] audit: type=1326 audit(1754818190.109:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13877 comm="syz.4.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563918ebe9 code=0x7ffc0000 [ 287.861614][T12828] usb 2-1: USB disconnect, device number 51 [ 287.908474][T13882] SELinux: failed to load policy [ 288.039560][T13891] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3337'. [ 288.062876][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3336'. [ 288.197799][T12823] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 288.219275][T12823] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 288.759284][T13925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.894756][T12828] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 288.905817][ T30] audit: type=1400 audit(1754818191.289:654): avc: denied { nlmsg_read } for pid=13930 comm="syz.3.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 289.024322][ T918] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 289.104181][T12828] usb 3-1: Using ep0 maxpacket: 16 [ 289.116596][T12828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.134461][T12828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.144508][T12828] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 289.147444][T13941] af_packet: tpacket_rcv: packet too big, clamped from 57 to 4294967272. macoff=96 [ 289.153532][T12828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.175770][T12828] usb 3-1: config 0 descriptor?? [ 289.184173][ T918] usb 1-1: Using ep0 maxpacket: 32 [ 289.197367][ T918] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 289.210666][ T918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.219967][ T918] usb 1-1: Product: syz [ 289.226788][ T918] usb 1-1: Manufacturer: syz [ 289.231529][ T918] usb 1-1: SerialNumber: syz [ 289.238846][ T918] usb 1-1: config 0 descriptor?? [ 289.289428][T13945] syzkaller1: entered promiscuous mode [ 289.297240][T13945] syzkaller1: entered allmulticast mode [ 289.401776][T12828] usbhid 3-1:0.0: can't add hid device: -71 [ 289.420066][T12828] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 289.443886][T12828] usb 3-1: USB disconnect, device number 50 [ 289.529887][T13955] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 289.663161][ T918] airspy 1-1:0.0: Board ID: 00 [ 289.673071][ T918] airspy 1-1:0.0: Firmware version: [ 289.848326][T13974] trusted_key: encrypted_key: keyword 'upEäe' not recognized [ 289.922962][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 289.922977][ T30] audit: type=1326 audit(1754818192.309:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13977 comm="syz.1.3375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f506ab8ebe9 code=0x0 [ 290.276256][ T918] airspy 1-1:0.0: usb_control_msg() failed -71 request 12 [ 290.290575][ T918] airspy 1-1:0.0: Registered as swradio24 [ 290.296976][ T918] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 290.311263][ T918] usb 1-1: USB disconnect, device number 49 [ 290.329546][T14000] sock: sock_set_timeout: `syz.2.3383' (pid 14000) tries to set negative timeout [ 290.392268][T14004] loop2: detected capacity change from 0 to 7 [ 290.402914][T14004] Dev loop2: unable to read RDB block 7 [ 290.412494][T14004] loop2: AHDI p2 [ 290.416238][T14004] loop2: partition table partially beyond EOD, truncated [ 290.515139][T14011] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3388'. [ 290.989150][T14032] input: syz1 as /devices/virtual/input/input67 [ 291.214186][ T30] audit: type=1400 audit(1754818193.599:657): avc: denied { bind } for pid=14041 comm="syz.4.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 291.374945][T14052] block device autoloading is deprecated and will be removed. [ 291.451953][ T30] audit: type=1400 audit(1754818193.839:658): avc: denied { ioctl } for pid=5841 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3645 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 291.487905][ T918] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 291.650414][ T918] usb 2-1: Using ep0 maxpacket: 8 [ 291.656870][ T918] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 291.668025][ T918] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 291.677495][ T918] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 291.688630][ T918] usb 2-1: Product: syz [ 291.692795][ T918] usb 2-1: Manufacturer: syz [ 291.699895][ T918] usb 2-1: SerialNumber: syz [ 291.715500][T14074] netlink: 'syz.3.3417': attribute type 1 has an invalid length. [ 291.723255][T14074] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3417'. [ 291.864908][ T5906] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 291.910219][ T918] usb 2-1: Invalid connection information received from device [ 292.016018][ T5906] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 292.025262][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.035001][ T5906] usb 3-1: config 0 descriptor?? [ 292.044015][ T5906] cp210x 3-1:0.0: cp210x converter detected [ 292.074263][T12828] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 292.112979][ T1208] usb 2-1: USB disconnect, device number 52 [ 292.234191][T12828] usb 1-1: Using ep0 maxpacket: 16 [ 292.240844][T12828] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 292.251763][T12828] usb 1-1: config 0 has no interface number 0 [ 292.257916][T12828] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 292.267975][T12828] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 292.279954][T12828] usb 1-1: config 0 interface 41 has no altsetting 0 [ 292.289800][T12828] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 292.306017][T12828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.314018][T12828] usb 1-1: Product: syz [ 292.319523][T12828] usb 1-1: Manufacturer: syz [ 292.324384][T12828] usb 1-1: SerialNumber: syz [ 292.331007][T12828] usb 1-1: config 0 descriptor?? [ 292.339628][T14083] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 292.348127][T14083] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 292.387606][T12827] kernel read not supported for file /dsp (pid: 12827 comm: kworker/1:9) [ 292.453857][ T5906] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 292.566896][T14083] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 292.576770][T14083] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 292.669808][ T5906] usb 3-1: cp210x converter now attached to ttyUSB0 [ 292.858191][ T30] audit: type=1400 audit(1754818195.249:659): avc: denied { create } for pid=14112 comm="syz.4.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 292.886222][ T30] audit: type=1400 audit(1754818195.249:660): avc: denied { write } for pid=14112 comm="syz.4.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 292.887051][T12827] usb 3-1: USB disconnect, device number 51 [ 292.919410][ T30] audit: type=1400 audit(1754818195.249:661): avc: denied { ioctl } for pid=14112 comm="syz.4.3434" path="socket:[53778]" dev="sockfs" ino=53778 ioctlcmd=0x8b19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 292.919861][T12827] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 292.990789][T12828] Error reading MAC address [ 292.996582][T12827] cp210x 3-1:0.0: device disconnected [ 293.002555][T14083] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 293.010573][T14083] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 293.223742][T12828] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 293.240170][T12828] usb 1-1: USB disconnect, device number 50 [ 293.357914][T14126] netlink: 'syz.4.3440': attribute type 21 has an invalid length. [ 293.574500][ T30] audit: type=1400 audit(1754818195.959:662): avc: denied { setopt } for pid=14134 comm="syz.4.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 293.831629][ T30] audit: type=1326 audit(1754818196.219:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.2.3456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88cc58ebe9 code=0x0 [ 294.344252][T12828] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 294.494205][T12828] usb 4-1: Using ep0 maxpacket: 32 [ 294.501081][T12828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.512297][T12828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.531745][T12828] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 294.541002][T12828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.551929][T12828] usb 4-1: config 0 descriptor?? [ 294.798185][T14197] random: crng reseeded on system resumption [ 294.798340][ T30] audit: type=1400 audit(1754818197.189:664): avc: denied { append } for pid=14196 comm="syz.2.3471" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 294.890800][ T30] audit: type=1400 audit(1754818197.279:665): avc: denied { mounton } for pid=14200 comm="syz.0.3473" path="/672/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 294.986591][T12828] savu 0003:1E7D:2D5A.0042: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 295.266279][ T918] usb 4-1: USB disconnect, device number 42 [ 295.434199][T12828] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 295.594287][T12827] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 295.601908][T12828] usb 1-1: Using ep0 maxpacket: 8 [ 295.608756][T12828] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 295.619208][T12828] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 295.628294][T12828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.639494][T12828] hub 1-1:32.0: bad descriptor, ignoring hub [ 295.645867][T12828] hub 1-1:32.0: probe with driver hub failed with error -5 [ 295.755763][T12827] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.766044][T12827] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 295.780526][T12827] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.789889][T12827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.799818][T12827] usb 5-1: Product: syz [ 295.804562][T12827] usb 5-1: Manufacturer: syz [ 295.809214][T12827] usb 5-1: SerialNumber: syz [ 295.824228][ T1208] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 295.974394][ T1208] usb 3-1: Using ep0 maxpacket: 16 [ 295.980849][ T1208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 295.997607][ T1208] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 296.006716][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.015061][ T1208] usb 3-1: Product: syz [ 296.019217][ T1208] usb 3-1: Manufacturer: syz [ 296.023802][ T1208] usb 3-1: SerialNumber: syz [ 296.031441][ T1208] usb 3-1: config 0 descriptor?? [ 296.038023][ T1208] hub 3-1:0.0: bad descriptor, ignoring hub [ 296.043919][ T1208] hub 3-1:0.0: probe with driver hub failed with error -5 [ 296.055276][ T1208] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.124516][ T5906] usb 1-1: reset high-speed USB device number 51 using dummy_hcd [ 296.839415][T12827] cdc_ncm 5-1:1.0: bind() failure [ 296.849766][T12827] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 296.860561][T12827] usb 5-1: USB disconnect, device number 41 [ 297.266053][ T5906] usb 1-1: reset high-speed USB device number 51 using dummy_hcd [ 297.277188][ T5906] usb 1-1: device reset changed ep0 maxpacket size! [ 297.288566][ T5906] usb 1-1: USB disconnect, device number 51 [ 297.570093][T12827] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 297.585579][T12827] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 297.594224][ T5906] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 297.765806][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.790001][ T5906] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 297.814478][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.841449][ T5906] usb 1-1: config 0 descriptor?? [ 297.851637][ T5906] pwc: Askey VC010 type 2 USB webcam detected. [ 298.204234][T12827] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 298.255047][ T5906] pwc: recv_control_msg error -32 req 02 val 2b00 [ 298.262453][ T5906] pwc: recv_control_msg error -32 req 02 val 2700 [ 298.384290][T12827] usb 2-1: Using ep0 maxpacket: 16 [ 298.395522][T12827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 298.411391][T12827] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.425003][T12827] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 298.434037][T12827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.448765][T12827] usb 2-1: config 0 descriptor?? [ 298.474677][ T5906] pwc: recv_control_msg error -71 req 04 val 1000 [ 298.494291][ T5906] pwc: recv_control_msg error -71 req 04 val 1300 [ 298.504805][ T5906] pwc: recv_control_msg error -71 req 04 val 1400 [ 298.508912][T14297] loop6: detected capacity change from 0 to 1 [ 298.517131][ T5906] pwc: recv_control_msg error -71 req 02 val 2000 [ 298.528093][T14297] Dev loop6: unable to read RDB block 1 [ 298.533693][T14297] loop6: unable to read partition table [ 298.535748][ T5906] pwc: recv_control_msg error -71 req 02 val 2100 [ 298.539992][T14297] loop6: partition table beyond EOD, truncated [ 298.546951][ T5906] pwc: recv_control_msg error -71 req 04 val 1500 [ 298.552038][T14297] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 298.572447][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 298.572461][ T30] audit: type=1400 audit(1754818200.959:667): avc: denied { mounton } for pid=14298 comm="syz.4.3516" path="/649/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 298.574664][ T5906] pwc: recv_control_msg error -71 req 02 val 2500 [ 298.600933][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.641851][ T6016] usb 3-1: USB disconnect, device number 52 [ 298.661058][T14282] program syz.1.3508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.671160][ T5906] pwc: recv_control_msg error -71 req 02 val 2400 [ 298.671512][ T5906] pwc: recv_control_msg error -71 req 02 val 2600 [ 298.699060][ T30] audit: type=1400 audit(1754818201.079:668): avc: denied { name_connect } for pid=14300 comm="syz.2.3518" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 298.710576][ T5906] pwc: recv_control_msg error -71 req 02 val 2900 [ 298.732161][ T5906] pwc: recv_control_msg error -71 req 02 val 2800 [ 298.735079][T12827] usbhid 2-1:0.0: can't add hid device: -71 [ 298.740988][ T30] audit: type=1400 audit(1754818201.119:669): avc: denied { unmount } for pid=6359 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 298.764674][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.775465][T12827] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 298.783474][ T5906] pwc: recv_control_msg error -71 req 04 val 1100 [ 298.793124][ T5906] pwc: recv_control_msg error -71 req 04 val 1200 [ 298.798179][T12827] usb 2-1: USB disconnect, device number 53 [ 298.824508][ T5906] pwc: Registered as video103. [ 298.830599][ T5906] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input69 [ 298.886272][ T5906] usb 1-1: USB disconnect, device number 52 [ 299.155347][T14327] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1281 sclass=netlink_audit_socket pid=14327 comm=syz.2.3527 [ 299.540541][ T5906] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 299.565408][ T5906] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 299.624197][ T6016] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 299.774150][ T6016] usb 2-1: Using ep0 maxpacket: 16 [ 299.781390][T14371] tipc: Started in network mode [ 299.789507][ T30] audit: type=1400 audit(1754818202.169:670): avc: denied { accept } for pid=14370 comm="syz.3.3550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 299.814402][T14371] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 299.834600][ T6016] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 299.842967][ T6016] usb 2-1: config 0 has no interface number 0 [ 299.855029][ T6016] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 299.867853][T14371] tipc: Enabled bearer , priority 10 [ 299.881369][ T6016] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 299.907360][ T6016] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 299.917271][ T6016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.944156][ T6016] usb 2-1: Product: syz [ 299.966502][ T6016] usb 2-1: Manufacturer: syz [ 299.976275][ T6016] usb 2-1: SerialNumber: syz [ 299.988189][ T6016] usb 2-1: config 0 descriptor?? [ 300.001571][T14351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 300.010084][T14351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 300.229963][T14351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 300.241400][T14351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 300.268345][ T30] audit: type=1400 audit(1754818202.659:671): avc: denied { read } for pid=14389 comm="syz.0.3559" path="socket:[56445]" dev="sockfs" ino=56445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 300.316431][T14396] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3559'. [ 300.415176][ T5906] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 300.459156][T14392] infiniband syz2: set down [ 300.467650][T14392] infiniband syz2: added syzkaller0 [ 300.516043][T14392] RDS/IB: syz2: added [ 300.520810][T14392] smc: adding ib device syz2 with port count 1 [ 300.527299][T14392] smc: ib device syz2 port 1 has pnetid [ 300.574856][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 300.588637][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 300.611075][ T5906] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 300.643023][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.664024][ T5906] usb 4-1: config 0 descriptor?? [ 300.671006][ T6016] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 300.696851][ T6016] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 300.712215][ T6016] asix 2-1:0.251: probe with driver asix failed with error -32 [ 300.727481][ T6016] usb 2-1: USB disconnect, device number 54 [ 300.794215][T12827] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 300.911621][T14417] binder: 14416:14417 ioctl c0306201 0 returned -14 [ 300.928091][ T5906] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 300.928462][T14417] binder: 14416:14417 ioctl c0306201 200000000540 returned -11 [ 300.965765][T12827] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 300.974678][T12827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.986563][ T5906] tipc: Node number set to 4269801491 [ 300.995159][T12827] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 301.014195][T12827] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 301.028211][T12827] usb 1-1: Manufacturer: syz [ 301.037285][T12827] usb 1-1: config 0 descriptor?? [ 301.134218][T12827] rc_core: IR keymap rc-hauppauge not found [ 301.142403][T12827] Registered IR keymap rc-empty [ 301.150702][T12827] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 301.164276][T12827] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input70 [ 301.280946][T14405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.295088][T14405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.331446][ T5906] usb 1-1: USB disconnect, device number 53 [ 301.342844][T12827] usb 4-1: USB disconnect, device number 43 [ 301.760981][ T13] smc: removing ib device syz2 [ 301.968648][T14444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 302.145943][T14452] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3585'. [ 302.163326][T14452] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3585'. [ 302.177765][T14452] netlink: 'syz.4.3585': attribute type 6 has an invalid length. [ 302.187504][T14452] netlink: 'syz.4.3585': attribute type 5 has an invalid length. [ 302.199316][T14452] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3585'. [ 302.344458][ T5906] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 302.494547][ T6016] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 302.527216][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.554187][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.565906][ T5906] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 302.575068][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.596616][ T5906] usb 4-1: config 0 descriptor?? [ 302.690671][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3592'. [ 302.690920][ T6016] usb 1-1: Using ep0 maxpacket: 16 [ 302.707616][ T6016] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 302.726845][ T6016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.749479][ T6016] usb 1-1: config 0 descriptor?? [ 302.757456][ T6016] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 303.007182][T14483] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3600'. [ 303.019091][ T5906] isku 0003:1E7D:319C.0045: unknown main item tag 0x0 [ 303.037357][ T5906] isku 0003:1E7D:319C.0045: item fetching failed at offset 6/7 [ 303.055347][ T5906] isku 0003:1E7D:319C.0045: parse failed [ 303.079727][ T5906] isku 0003:1E7D:319C.0045: probe with driver isku failed with error -22 [ 303.220893][ T30] audit: type=1400 audit(1754818205.609:672): avc: denied { remount } for pid=14494 comm="syz.4.3605" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 303.223164][ T5906] usb 4-1: USB disconnect, device number 44 [ 303.583698][T14518] Set syz0 is full, maxelem 0 reached [ 303.803056][T12828] usb 1-1: USB disconnect, device number 54 [ 303.904466][ T6016] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 303.905736][T14535] binder: 14534:14535 ioctl c018620c 200000000100 returned -1 [ 303.994324][ T5906] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 304.057363][ T6016] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.071771][ T6016] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.081274][ T1208] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 304.089842][ T6016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.098518][ T6016] usb 5-1: Product: syz [ 304.102769][ T6016] usb 5-1: Manufacturer: syz [ 304.107968][ T6016] usb 5-1: SerialNumber: syz [ 304.144269][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 304.152749][ T5906] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 304.166741][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.177576][ T5906] usb 2-1: Product: syz [ 304.181771][ T5906] usb 2-1: Manufacturer: syz [ 304.187306][ T5906] usb 2-1: SerialNumber: syz [ 304.194932][ T5906] usb 2-1: config 0 descriptor?? [ 304.202927][ T5906] gspca_main: se401-2.14.0 probing 047d:5003 [ 304.244178][ T1208] usb 3-1: Using ep0 maxpacket: 16 [ 304.251015][ T1208] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.265132][ T1208] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.278615][ T1208] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 304.289057][ T1208] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 304.303368][ T1208] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.312613][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 304.328620][ T1208] usb 3-1: SerialNumber: syz [ 304.344950][ T1208] hub 3-1:1.0: bad descriptor, ignoring hub [ 304.350953][ T1208] hub 3-1:1.0: probe with driver hub failed with error -5 [ 304.360942][ T1208] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 304.370947][T14547] sp0: Synchronizing with TNC [ 304.379351][T14547] sp0: Found TNC [ 304.514418][T12828] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 304.607499][ T5906] gspca_se401: ExtraFeatures: 255 [ 304.612578][ T5906] gspca_se401: Frame size: 2314x0 bayer [ 304.618605][ T5906] gspca_se401: Frame size: 0x0 1/16th janggu [ 304.624696][ T5906] gspca_se401: Frame size: 0x47872 bayer [ 304.630337][ T5906] gspca_se401: Frame size: 8x0 bayer [ 304.643638][ T5906] gspca_se401: Frame size: 0x0 1/16th janggu [ 304.649945][ T5906] gspca_se401: Frame size: 0x0 1/16th janggu [ 304.656042][ T5906] gspca_se401: Frame size: 0x0 1/16th janggu [ 304.662020][ T5906] gspca_se401: Frame size: 0x0 1/16th janggu [ 304.674388][T12828] usb 4-1: Using ep0 maxpacket: 32 [ 304.681795][T12828] usb 4-1: config 254 has an invalid interface number: 160 but max is 0 [ 304.690295][T12828] usb 4-1: config 254 has no interface number 0 [ 304.696694][T12828] usb 4-1: config 254 interface 160 has no altsetting 0 [ 304.707728][T12828] usb 4-1: New USB device found, idVendor=24df, idProduct=d062, bcdDevice=c0.3f [ 304.716890][T12828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.726792][T12828] usb 4-1: Product: syz [ 304.730939][T12828] usb 4-1: Manufacturer: syz [ 304.735614][T12828] usb 4-1: SerialNumber: syz [ 304.754450][T14521] raw-gadget.1 gadget.2: fail, usb_ep_set_wedge returned -11 [ 304.809665][ T5906] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input71 [ 304.822819][ T5906] usb 2-1: USB disconnect, device number 55 [ 304.864772][ T1208] usb 3-1: USB disconnect, device number 53 [ 305.116718][T12828] usb 4-1: bad CDC descriptors [ 305.123833][T12828] usb 4-1: USB disconnect, device number 45 [ 305.136575][ T6016] cdc_ncm 5-1:1.0: bind() failure [ 305.147097][ T6016] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 305.153866][ T6016] cdc_ncm 5-1:1.1: bind() failure [ 305.162671][ T6016] usb 5-1: USB disconnect, device number 42 [ 305.693076][T14584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3639'. [ 305.768442][ T30] audit: type=1326 audit(1754818208.159:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.1.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506ab8ebe9 code=0x7ffc0000 [ 305.792104][ T918] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 305.833677][ T30] audit: type=1326 audit(1754818208.159:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.1.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506ab8ebe9 code=0x7ffc0000 [ 305.975610][ T918] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 305.998477][ T918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 306.034300][ T918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 306.062812][ T918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 306.093918][ T918] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 306.116947][ T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.128661][ T918] usb 4-1: config 0 descriptor?? [ 306.386907][ T1208] hid-generic 00A0:0006:0003.0046: unknown main item tag 0x0 [ 306.397395][ T1208] hid-generic 00A0:0006:0003.0046: unknown main item tag 0x0 [ 306.405462][ T1208] hid-generic 00A0:0006:0003.0046: unknown main item tag 0x0 [ 306.417132][ T1208] hid-generic 00A0:0006:0003.0046: unknown main item tag 0x0 [ 306.429172][ T1208] hid-generic 00A0:0006:0003.0046: unknown main item tag 0x0 [ 306.446734][ T1208] hid-generic 00A0:0006:0003.0046: unknown main item tag 0x0 [ 306.462039][ T1208] hid-generic 00A0:0006:0003.0046: unknown main item tag 0x0 [ 306.471051][ T1208] hid-generic 00A0:0006:0003.0046: unknown main item tag 0x0 [ 306.479153][ T1208] hid-generic 00A0:0006:0003.0046: unknown main item tag 0x0 [ 306.494318][ T1208] hid-generic 00A0:0006:0003.0046: hidraw0: HID v0.05 Device [syz1] on syz0 [ 306.547567][ T918] plantronics 0003:047F:FFFF.0047: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 306.658279][ T6016] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 306.805296][T12828] usb 4-1: USB disconnect, device number 46 [ 306.817908][ T6016] usb 1-1: config 0 has no interfaces? [ 306.835151][ T6016] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 306.846957][ T6016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.858918][ T6016] usb 1-1: config 0 descriptor?? [ 307.071832][T12828] usb 1-1: USB disconnect, device number 55 [ 307.868585][T14706] kvm: user requested TSC rate below hardware speed [ 307.924253][T12828] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 308.002006][ T30] audit: type=1400 audit(1754818210.389:675): avc: denied { watch watch_reads } for pid=14708 comm="syz.3.3693" path="pipe:[57427]" dev="pipefs" ino=57427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 308.054847][T14711] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 308.126489][T12828] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 308.144387][T12828] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 308.157376][T12828] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 308.177069][T12828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.189383][T14697] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 308.201803][T12828] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.319460][T14715] sock: sock_set_timeout: `syz.3.3695' (pid 14715) tries to set negative timeout [ 308.435480][ T1208] usb 1-1: USB disconnect, device number 56 [ 308.514286][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 308.515188][ T5847] Bluetooth: hci5: command 0x1003 tx timeout [ 308.810893][T14736] sctp: [Deprecated]: syz.3.3705 (pid 14736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.810893][T14736] Use struct sctp_sack_info instead [ 309.075868][ T30] audit: type=1326 audit(1754818211.459:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14748 comm="syz.2.3711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc58ebe9 code=0x7ffc0000 [ 309.102979][ T30] audit: type=1326 audit(1754818211.459:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14748 comm="syz.2.3711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc58ebe9 code=0x7ffc0000 [ 309.126803][ T30] audit: type=1326 audit(1754818211.469:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14748 comm="syz.2.3711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f88cc58ebe9 code=0x7ffc0000 [ 309.154206][ T30] audit: type=1326 audit(1754818211.469:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14748 comm="syz.2.3711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc58ebe9 code=0x7ffc0000 [ 309.198730][ T30] audit: type=1326 audit(1754818211.469:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14748 comm="syz.2.3711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc58ebe9 code=0x7ffc0000 [ 309.225206][ T1208] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 309.257150][ T30] audit: type=1326 audit(1754818211.469:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14748 comm="syz.2.3711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f88cc58ebe9 code=0x7ffc0000 [ 309.305461][ T30] audit: type=1326 audit(1754818211.469:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14748 comm="syz.2.3711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc58ebe9 code=0x7ffc0000 [ 309.331743][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3716'. [ 309.420197][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.433141][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.468816][ T1208] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 309.499071][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.540300][ T1208] usb 2-1: config 0 descriptor?? [ 310.521363][T12823] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 310.564586][ T1208] uclogic 0003:256C:006D.0048: failed retrieving string descriptor #200: -71 [ 310.574077][ T1208] uclogic 0003:256C:006D.0048: failed retrieving pen parameters: -71 [ 310.586916][ T1208] uclogic 0003:256C:006D.0048: failed probing pen v2 parameters: -71 [ 310.596382][ T1208] uclogic 0003:256C:006D.0048: failed probing parameters: -71 [ 310.615632][ T1208] uclogic 0003:256C:006D.0048: probe with driver uclogic failed with error -71 [ 310.642187][ T1208] usb 2-1: USB disconnect, device number 56 [ 310.684209][T12823] usb 3-1: Using ep0 maxpacket: 8 [ 310.696263][T12823] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 310.710786][T12823] usb 3-1: config 179 has no interface number 0 [ 310.725913][T12823] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 310.737819][T12823] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 310.749487][T12823] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 310.775233][T12823] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 310.804621][T12823] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 310.826335][T12823] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 310.836140][T12823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.847441][T14800] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 311.180973][T12823] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input73 [ 311.404047][T14800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.440656][T14800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.702242][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 311.702306][ T30] audit: type=1400 audit(1754818214.079:687): avc: denied { ioctl } for pid=14839 comm="syz.3.3751" path="socket:[58686]" dev="sockfs" ino=58686 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 311.733763][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.739537][ T918] usb 3-1: USB disconnect, device number 54 [ 311.740293][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 311.755073][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 312.124365][ T1208] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 312.274568][ T1208] usb 2-1: Using ep0 maxpacket: 32 [ 312.284782][ T1208] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 312.292936][ T1208] usb 2-1: config 0 has no interface number 0 [ 312.299225][ T1208] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.310853][ T1208] usb 2-1: config 0 interface 85 has no altsetting 0 [ 312.322660][ T1208] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 312.338527][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.356147][ T1208] usb 2-1: Product: syz [ 312.364754][ T1208] usb 2-1: Manufacturer: syz [ 312.375445][ T1208] usb 2-1: SerialNumber: syz [ 312.383740][ T1208] usb 2-1: config 0 descriptor?? [ 312.391379][ T918] kernel write not supported for file /1607/sched (pid: 918 comm: kworker/1:2) [ 313.010324][ T1208] appletouch 2-1:0.85: Geyser mode initialized. [ 313.019941][ T1208] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input74 [ 313.084457][ T918] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 313.215771][T12827] usb 2-1: USB disconnect, device number 57 [ 313.241861][T12827] appletouch 2-1:0.85: input: appletouch disconnected [ 313.248809][ T918] usb 3-1: Using ep0 maxpacket: 32 [ 313.258865][ T918] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 313.270963][ T918] usb 3-1: config 0 has no interface number 0 [ 313.284837][ T918] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 313.300193][ T918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.308420][ T918] usb 3-1: Product: syz [ 313.312918][ T918] usb 3-1: Manufacturer: syz [ 313.317863][ T918] usb 3-1: SerialNumber: syz [ 313.327035][ T918] usb 3-1: config 0 descriptor?? [ 313.336744][ T918] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 313.348654][ T918] usb 3-1: selecting invalid altsetting 1 [ 313.355497][ T918] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 313.366140][ T918] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 313.392277][ T918] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 313.402426][ T918] usb 3-1: media controller created [ 313.427735][ T918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.527896][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3792'. [ 313.594797][ T918] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 313.606537][ T918] zl10353_read_register: readreg error (reg=127, ret==-32) [ 314.003477][T14960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.019661][ T30] audit: type=1400 audit(1754818216.409:688): avc: denied { setattr } for pid=14956 comm="syz.0.3803" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=58942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 314.120462][ T30] audit: type=1400 audit(1754818216.509:689): avc: denied { listen } for pid=14966 comm="syz.3.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 314.141149][ T30] audit: type=1400 audit(1754818216.529:690): avc: denied { accept } for pid=14966 comm="syz.3.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 314.269999][ T30] audit: type=1400 audit(1754818216.659:691): avc: denied { nosuid_transition } for pid=14974 comm="syz.4.3812" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 314.296869][ T30] audit: type=1400 audit(1754818216.659:692): avc: denied { transition } for pid=14974 comm="syz.4.3812" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 314.329680][ T30] audit: type=1400 audit(1754818216.659:693): avc: denied { entrypoint } for pid=14974 comm="syz.4.3812" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1083 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 314.380789][ T30] audit: type=1400 audit(1754818216.659:694): avc: denied { noatsecure } for pid=14974 comm="syz.4.3812" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 314.462174][T14987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.476347][T14987] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 314.674421][T14898] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 314.779377][ T918] usb 3-1: USB disconnect, device number 55 [ 314.896664][ T30] audit: type=1326 audit(1754818217.289:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.4.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563918ebe9 code=0x7fc00000 [ 315.249734][T15026] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 315.259895][T15026] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 315.271281][T15026] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 315.281439][T15026] overlayfs: conflicting lowerdir path [ 315.306701][ T1208] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 315.418018][T15033] netlink: 'syz.2.3836': attribute type 2 has an invalid length. [ 315.444635][T15033] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.3836'. [ 315.474400][ T1208] usb 1-1: Using ep0 maxpacket: 32 [ 315.487822][ T1208] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 315.497256][ T1208] usb 1-1: config 0 has no interface number 0 [ 315.507564][ T1208] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 315.522251][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.541057][ T1208] usb 1-1: Product: syz [ 315.551009][ T1208] usb 1-1: Manufacturer: syz [ 315.558425][ T30] audit: type=1326 audit(1754818217.949:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.4.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f563918ebe9 code=0x7fc00000 [ 315.586645][ T1208] usb 1-1: SerialNumber: syz [ 315.600603][ T1208] usb 1-1: config 0 descriptor?? [ 315.659562][ T1208] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 315.765016][T15055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3845'. [ 315.779554][T15055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3845'. [ 315.877663][ T1208] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 315.905302][ T1208] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 316.060526][T15070] netlink: 'syz.3.3852': attribute type 10 has an invalid length. [ 316.123484][T15070] dummy0: entered promiscuous mode [ 316.129692][T15070] dummy0: entered allmulticast mode [ 316.136104][T15070] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 316.314562][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 316.323634][ T1208] usb 1-1: USB disconnect, device number 57 [ 316.332849][ T1208] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 316.355402][ T1208] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 316.368460][ T1208] quatech2 1-1:0.51: device disconnected [ 316.535432][ T918] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 316.639957][T15110] pim6reg: entered allmulticast mode [ 316.647751][T15110] pim6reg: left allmulticast mode [ 316.677933][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 316.684264][ T918] usb 5-1: Using ep0 maxpacket: 32 [ 316.688635][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.191051][T15133] netlink: 13 bytes leftover after parsing attributes in process `syz.2.3878'. [ 318.654171][T12823] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 318.816103][T12823] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 318.827171][ T1208] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 318.837343][T12823] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 318.850480][T12823] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 318.862019][T12823] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 318.875394][T12823] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 318.885097][T12823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.985534][ T5906] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 318.994578][ T1208] usb 4-1: Using ep0 maxpacket: 16 [ 319.012985][ T1208] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 319.025104][ T1208] usb 4-1: config 0 has no interface number 0 [ 319.031243][ T1208] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 319.041396][ T1208] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 319.051381][ T1208] usb 4-1: config 0 interface 41 has no altsetting 0 [ 319.060585][ T1208] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 319.069836][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.087425][ T1208] usb 4-1: Product: syz [ 319.091621][ T1208] usb 4-1: Manufacturer: syz [ 319.103682][T12823] ath6kl: Failed to submit usb control message: -71 [ 319.112479][ T1208] usb 4-1: SerialNumber: syz [ 319.118574][T12823] ath6kl: unable to send the bmi data to the device: -71 [ 319.130319][ T1208] usb 4-1: config 0 descriptor?? [ 319.137353][T12823] ath6kl: Unable to send get target info: -71 [ 319.144970][T15201] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 319.152218][T15201] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 319.162778][T12823] ath6kl: Failed to init ath6kl core: -71 [ 319.178567][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.190684][T12823] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 319.203517][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.240687][T12823] usb 1-1: USB disconnect, device number 58 [ 319.256191][ T5906] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 319.278078][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.292529][ T5906] usb 2-1: config 0 descriptor?? [ 319.413555][T15201] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 319.433095][T15201] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 319.710499][ T5906] hid_parser_main: 5 callbacks suppressed [ 319.710521][ T5906] cp2112 0003:10C4:EA90.0049: unknown main item tag 0x0 [ 319.734017][ T5906] cp2112 0003:10C4:EA90.0049: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 319.770261][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 319.770277][ T30] audit: type=1400 audit(1754818222.159:698): avc: denied { mount } for pid=15235 comm="syz.0.3927" name="/" dev="rpc_pipefs" ino=60648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 319.800037][ T30] audit: type=1400 audit(1754818222.159:699): avc: denied { watch } for pid=15235 comm="syz.0.3927" path="/754/file0" dev="rpc_pipefs" ino=60648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 319.826774][ T918] usb 5-1: unable to get BOS descriptor or descriptor too short [ 319.834903][ T30] audit: type=1400 audit(1754818222.159:700): avc: denied { unmount } for pid=15235 comm="syz.0.3927" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 319.855791][ T918] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 319.863358][ T918] usb 5-1: can't read configurations, error -71 [ 319.907168][T15240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.907709][ T5906] cp2112 0003:10C4:EA90.0049: Part Number: 0x82 Device Version: 0xFE [ 320.109271][ T5906] cp2112 0003:10C4:EA90.0049: error requesting SMBus config [ 320.130317][ T5906] cp2112 0003:10C4:EA90.0049: probe with driver cp2112 failed with error -71 [ 320.143769][ T5906] usb 2-1: USB disconnect, device number 58 [ 320.193581][ T30] audit: type=1400 audit(1754818222.579:701): avc: denied { mount } for pid=15251 comm="syz.0.3934" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 320.215331][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.272013][ T1208] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 320.283818][ T1208] usb 4-1: USB disconnect, device number 47 [ 320.442839][T15259] input input75: cannot allocate more than FF_MAX_EFFECTS effects [ 320.944157][ T5906] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 321.120670][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 321.171299][ T5906] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 321.180886][T15285] vivid-004: disconnect [ 321.188485][T15278] vivid-004: reconnect [ 321.194154][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.212490][ T5906] usb 2-1: Product: syz [ 321.224225][ T5906] usb 2-1: Manufacturer: syz [ 321.228853][ T5906] usb 2-1: SerialNumber: syz [ 321.249010][ T5906] usb 2-1: config 0 descriptor?? [ 321.259718][ T5906] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 321.318250][T15293] smc: net device bond0 erased user defined pnetid SYZ2 [ 321.470872][ T5906] gp8psk: usb in 128 operation failed. [ 321.490305][ T5906] gp8psk: usb in 137 operation failed. [ 321.504517][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 321.522727][ T5906] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 321.540083][ T5906] usb 2-1: media controller created [ 321.559751][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.586915][ T5906] gp8psk_fe: Frontend revision 1 attached [ 321.602028][ T5906] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 321.616205][ T5906] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 321.673807][T12823] kernel write not supported for file /sequencer (pid: 12823 comm: kworker/0:9) [ 321.843064][ T5906] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 321.858365][ T5906] gp8psk: found Genpix USB device pID = 201 (hex) [ 321.973502][ T30] audit: type=1400 audit(1754818224.359:702): avc: denied { listen } for pid=15331 comm="syz.0.3968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 322.027414][ T30] audit: type=1400 audit(1754818224.419:703): avc: denied { ioctl } for pid=15333 comm="syz.0.3969" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 322.052120][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.084364][ T30] audit: type=1326 audit(1754818224.469:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15335 comm="syz.0.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982cd8ebe9 code=0x7ffc0000 [ 322.105498][T12827] usb 2-1: USB disconnect, device number 59 [ 322.108816][ T30] audit: type=1326 audit(1754818224.479:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15335 comm="syz.0.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982cd8ebe9 code=0x7ffc0000 [ 322.145966][ T30] audit: type=1326 audit(1754818224.499:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15335 comm="syz.0.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f982cd8ebe9 code=0x7ffc0000 [ 322.193091][T12827] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 322.206653][ T30] audit: type=1326 audit(1754818224.499:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15335 comm="syz.0.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982cd8ebe9 code=0x7ffc0000 [ 322.230064][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.241545][T15340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3972'. [ 322.252809][T15340] netlink: 'syz.3.3972': attribute type 7 has an invalid length. [ 322.261249][T15340] netlink: 'syz.3.3972': attribute type 8 has an invalid length. [ 322.269397][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3972'. [ 322.684453][T12823] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 322.844291][T12823] usb 3-1: Using ep0 maxpacket: 32 [ 322.853601][T12823] usb 3-1: unable to get BOS descriptor or descriptor too short [ 322.875298][T12823] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 322.903709][T12823] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 322.919380][T12823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.947359][T12823] usb 3-1: Product: syz [ 322.951553][T12823] usb 3-1: Manufacturer: syz [ 322.964958][T12823] usb 3-1: SerialNumber: syz [ 323.133501][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3995'. [ 323.146927][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3995'. [ 323.189474][T12823] usb 3-1: Limiting number of CPorts to U8_MAX [ 323.212742][T12823] usb 3-1: Not enough endpoints found in device, aborting! [ 323.409583][T12823] usb 3-1: USB disconnect, device number 56 [ 323.564235][ T918] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 323.662745][T15417] program syz.1.4008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.673141][T15417] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 323.727575][ T918] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 323.736934][ T918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.757196][ T918] usb 1-1: Product: syz [ 323.763566][ T918] usb 1-1: Manufacturer: syz [ 323.768721][ T918] usb 1-1: SerialNumber: syz [ 323.775469][ T918] usb 1-1: config 0 descriptor?? [ 323.797132][T15423] syzkaller1: entered promiscuous mode [ 323.802718][T15423] syzkaller1: entered allmulticast mode [ 324.001110][T15428] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 324.511730][T15463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4027'. [ 324.529185][T15463] IPVS: Error connecting to the multicast addr [ 324.799295][ T918] usb 1-1: f81604_read: reg: 100f failed: -EPROTO [ 324.815334][T15469] syzkaller1: entered promiscuous mode [ 324.821763][T15469] syzkaller1: entered allmulticast mode [ 324.846283][ T918] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 324.858279][ T918] usb 1-1: USB disconnect, device number 59 [ 324.888281][ T918] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 324.983733][ T918] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 325.075918][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 325.075932][ T30] audit: type=1400 audit(1754818227.469:722): avc: denied { create } for pid=15498 comm="syz.1.4043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 325.142328][ T30] audit: type=1400 audit(1754818227.489:723): avc: denied { setopt } for pid=15498 comm="syz.1.4043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 325.187623][T15505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4045'. [ 325.207253][T15505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4045'. [ 325.233589][T15505] netlink: 'syz.3.4045': attribute type 20 has an invalid length. [ 325.304224][T12823] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 325.325937][T15505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4045'. [ 325.339846][T15505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4045'. [ 325.351252][T15505] netlink: 'syz.3.4045': attribute type 20 has an invalid length. [ 325.465815][T12823] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 325.486307][T12823] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.498780][T12823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 325.518840][T12823] usb 5-1: SerialNumber: syz [ 325.734681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 325.765006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 326.041119][ T30] audit: type=1400 audit(1754818228.429:724): avc: denied { recv } for pid=15526 comm="syz.2.4055" saddr=10.128.0.169 src=30006 daddr=10.128.1.243 dest=57454 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 326.165618][T12823] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 326.347462][T15553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4065'. [ 326.555370][T12823] usb 5-1: USB disconnect, device number 45 [ 326.562153][T12823] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 326.919862][ T30] audit: type=1400 audit(1754818229.309:725): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 326.943713][ T30] audit: type=1400 audit(1754818229.309:726): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 327.279190][ T30] audit: type=1400 audit(1754818229.669:727): avc: denied { lock } for pid=15586 comm="syz.4.4081" path="socket:[61800]" dev="sockfs" ino=61800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 327.813678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 327.822461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 327.885761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 327.894753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 328.514221][ T5850] Bluetooth: hci5: command 0x1003 tx timeout [ 328.514554][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 328.914360][ T5847] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 328.920862][ T5859] Bluetooth: hci6: command 0x1003 tx timeout [ 329.031591][ T5847] block nbd0: Receive control failed (result -107) [ 329.095527][T15632] nbd0: detected capacity change from 0 to 63 [ 329.173182][T15650] __nla_validate_parse: 1 callbacks suppressed [ 329.173199][T15650] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4105'. [ 329.264195][ T5906] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 329.344986][T15665] [ 329.347337][T15665] ===================================================== [ 329.354265][T15665] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 329.361708][T15665] 6.16.0-syzkaller-12288-g2b38afce25c4 #0 Not tainted [ 329.368446][T15665] ----------------------------------------------------- [ 329.375351][T15665] syz.1.4110/15665 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 329.383050][T15665] ffff888057d94408 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 329.391733][T15665] [ 329.391733][T15665] and this task is already holding: [ 329.399068][T15665] ffff888032b53028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 329.408876][T15665] which would create a new lock dependency: [ 329.414736][T15665] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 329.422803][T15665] [ 329.422803][T15665] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 329.432225][T15665] (&dev->event_lock#2){..-.}-{3:3} [ 329.432249][T15665] [ 329.432249][T15665] ... which became SOFTIRQ-irq-safe at: [ 329.445118][T15665] lock_acquire+0x179/0x350 [ 329.449709][T15665] _raw_spin_lock_irqsave+0x3a/0x60 [ 329.454981][T15665] input_inject_event+0x9f/0x3b0 [ 329.459988][T15665] led_set_brightness+0x217/0x290 [ 329.465083][T15665] led_trigger_event+0xda/0x270 [ 329.470010][T15665] kbd_bh+0x21b/0x300 [ 329.474053][T15665] tasklet_action_common+0x281/0x400 [ 329.479407][T15665] handle_softirqs+0x216/0x8e0 [ 329.484236][T15665] __irq_exit_rcu+0x109/0x170 [ 329.488984][T15665] irq_exit_rcu+0x9/0x30 [ 329.493292][T15665] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 329.498994][T15665] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 329.505037][T15665] preempt_schedule_irq+0x4c/0x90 [ 329.510133][T15665] irqentry_exit+0x36/0x90 [ 329.514609][T15665] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 329.520130][T15665] console_flush_all+0x9a2/0xc60 [ 329.525131][T15665] console_unlock+0xd8/0x210 [ 329.529786][T15665] console_callback+0x27c/0x4c0 [ 329.534698][T15665] process_one_work+0x9cc/0x1b70 [ 329.539700][T15665] worker_thread+0x6c8/0xf10 [ 329.544354][T15665] kthread+0x3c5/0x780 [ 329.548484][T15665] ret_from_fork+0x5d7/0x6f0 [ 329.553137][T15665] ret_from_fork_asm+0x1a/0x30 [ 329.557967][T15665] [ 329.557967][T15665] to a SOFTIRQ-irq-unsafe lock: [ 329.564959][T15665] (tasklist_lock){.+.+}-{3:3} [ 329.564979][T15665] [ 329.564979][T15665] ... which became SOFTIRQ-irq-unsafe at: [ 329.577557][T15665] ... [ 329.577562][T15665] lock_acquire+0x179/0x350 [ 329.584689][T15665] _raw_read_lock+0x5f/0x70 [ 329.589260][T15665] __do_wait+0x105/0x890 [ 329.593571][T15665] do_wait+0x21e/0x5a0 [ 329.597706][T15665] kernel_wait+0x9f/0x160 [ 329.602095][T15665] call_usermodehelper_exec_work+0xf1/0x170 [ 329.608056][T15665] process_one_work+0x9cc/0x1b70 [ 329.613055][T15665] worker_thread+0x6c8/0xf10 [ 329.617705][T15665] kthread+0x3c5/0x780 [ 329.621833][T15665] ret_from_fork+0x5d7/0x6f0 [ 329.626494][T15665] ret_from_fork_asm+0x1a/0x30 [ 329.631345][T15665] [ 329.631345][T15665] other info that might help us debug this: [ 329.631345][T15665] [ 329.641556][T15665] Chain exists of: [ 329.641556][T15665] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 329.641556][T15665] [ 329.655092][T15665] Possible interrupt unsafe locking scenario: [ 329.655092][T15665] [ 329.663381][T15665] CPU0 CPU1 [ 329.668717][T15665] ---- ---- [ 329.674052][T15665] lock(tasklist_lock); [ 329.678270][T15665] local_irq_disable(); [ 329.684997][T15665] lock(&dev->event_lock#2); [ 329.692169][T15665] lock(&client->buffer_lock); [ 329.699517][T15665] [ 329.702945][T15665] lock(&dev->event_lock#2); [ 329.707775][T15665] [ 329.707775][T15665] *** DEADLOCK *** [ 329.707775][T15665] [ 329.715891][T15665] 7 locks held by syz.1.4110/15665: [ 329.721058][T15665] #0: ffff8881473ca118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 329.730172][T15665] #1: ffff888140bbc230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 329.740247][T15665] #2: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 329.749877][T15665] #3: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 329.759419][T15665] #4: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 329.768528][T15665] #5: ffff888032b53028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 329.778765][T15665] #6: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 329.787791][T15665] [ 329.787791][T15665] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 329.798167][T15665] -> (&dev->event_lock#2){..-.}-{3:3} { [ 329.803793][T15665] IN-SOFTIRQ-W at: [ 329.807837][T15665] lock_acquire+0x179/0x350 [ 329.814149][T15665] _raw_spin_lock_irqsave+0x3a/0x60 [ 329.821166][T15665] input_inject_event+0x9f/0x3b0 [ 329.827911][T15665] led_set_brightness+0x217/0x290 [ 329.834737][T15665] led_trigger_event+0xda/0x270 [ 329.841391][T15665] kbd_bh+0x21b/0x300 [ 329.847172][T15665] tasklet_action_common+0x281/0x400 [ 329.854267][T15665] handle_softirqs+0x216/0x8e0 [ 329.860832][T15665] __irq_exit_rcu+0x109/0x170 [ 329.867308][T15665] irq_exit_rcu+0x9/0x30 [ 329.873354][T15665] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 329.880793][T15665] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 329.888571][T15665] preempt_schedule_irq+0x4c/0x90 [ 329.895400][T15665] irqentry_exit+0x36/0x90 [ 329.901613][T15665] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 329.908869][T15665] console_flush_all+0x9a2/0xc60 [ 329.915607][T15665] console_unlock+0xd8/0x210 [ 329.921997][T15665] console_callback+0x27c/0x4c0 [ 329.928646][T15665] process_one_work+0x9cc/0x1b70 [ 329.935383][T15665] worker_thread+0x6c8/0xf10 [ 329.941787][T15665] kthread+0x3c5/0x780 [ 329.947652][T15665] ret_from_fork+0x5d7/0x6f0 [ 329.954053][T15665] ret_from_fork_asm+0x1a/0x30 [ 329.960621][T15665] INITIAL USE at: [ 329.964592][T15665] lock_acquire+0x179/0x350 [ 329.970813][T15665] _raw_spin_lock_irqsave+0x3a/0x60 [ 329.977729][T15665] input_inject_event+0x9f/0x3b0 [ 329.984384][T15665] led_set_brightness+0x217/0x290 [ 329.991123][T15665] kbd_led_trigger_activate+0xcb/0x110 [ 329.998295][T15665] led_trigger_set+0x59a/0xc50 [ 330.004774][T15665] led_trigger_set_default+0x1e0/0x2e0 [ 330.011949][T15665] led_classdev_register_ext+0x7b8/0xa10 [ 330.019296][T15665] input_leds_connect+0x552/0x8e0 [ 330.026035][T15665] input_attach_handler.isra.0+0x176/0x250 [ 330.033554][T15665] input_register_device+0xab9/0x1180 [ 330.040640][T15665] atkbd_connect+0x5f8/0xa40 [ 330.046949][T15665] serio_driver_probe+0x7c/0xd0 [ 330.053512][T15665] really_probe+0x241/0xa90 [ 330.059726][T15665] __driver_probe_device+0x1de/0x440 [ 330.066723][T15665] driver_probe_device+0x4c/0x1b0 [ 330.073458][T15665] __driver_attach+0x283/0x580 [ 330.079933][T15665] bus_for_each_dev+0x13b/0x1d0 [ 330.086501][T15665] serio_handle_event+0x335/0xc30 [ 330.093237][T15665] process_one_work+0x9cc/0x1b70 [ 330.099886][T15665] worker_thread+0x6c8/0xf10 [ 330.106188][T15665] kthread+0x3c5/0x780 [ 330.111971][T15665] ret_from_fork+0x5d7/0x6f0 [ 330.118270][T15665] ret_from_fork_asm+0x1a/0x30 [ 330.124750][T15665] } [ 330.127309][T15665] ... key at: [] __key.7+0x0/0x40 [ 330.134481][T15665] -> (&client->buffer_lock){....}-{3:3} { [ 330.140186][T15665] INITIAL USE at: [ 330.144057][T15665] lock_acquire+0x179/0x350 [ 330.150108][T15665] _raw_spin_lock+0x2e/0x40 [ 330.156154][T15665] evdev_pass_values+0x10e/0x9b0 [ 330.162636][T15665] evdev_events+0x1bb/0x390 [ 330.168681][T15665] input_pass_values+0x74e/0x880 [ 330.175159][T15665] input_handle_event+0xf00/0x14d0 [ 330.181828][T15665] input_inject_event+0x1e8/0x3b0 [ 330.188394][T15665] evdev_write+0x457/0x750 [ 330.194352][T15665] vfs_write+0x29d/0x11d0 [ 330.200222][T15665] ksys_write+0x1f8/0x250 [ 330.206089][T15665] do_syscall_64+0xcd/0x4c0 [ 330.212130][T15665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.219559][T15665] } [ 330.222030][T15665] ... key at: [] __key.1+0x0/0x40 [ 330.229115][T15665] ... acquired at: [ 330.232888][T15665] _raw_spin_lock+0x2e/0x40 [ 330.237545][T15665] evdev_pass_values+0x10e/0x9b0 [ 330.242635][T15665] evdev_events+0x1bb/0x390 [ 330.247290][T15665] input_pass_values+0x74e/0x880 [ 330.252378][T15665] input_handle_event+0xf00/0x14d0 [ 330.257641][T15665] input_inject_event+0x1e8/0x3b0 [ 330.262818][T15665] evdev_write+0x457/0x750 [ 330.267386][T15665] vfs_write+0x29d/0x11d0 [ 330.271862][T15665] ksys_write+0x1f8/0x250 [ 330.276338][T15665] do_syscall_64+0xcd/0x4c0 [ 330.280989][T15665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.287028][T15665] [ 330.289327][T15665] [ 330.289327][T15665] the dependencies between the lock to be acquired [ 330.289333][T15665] and SOFTIRQ-irq-unsafe lock: [ 330.302788][T15665] -> (tasklist_lock){.+.+}-{3:3} { [ 330.308060][T15665] HARDIRQ-ON-R at: [ 330.312185][T15665] lock_acquire+0x179/0x350 [ 330.318671][T15665] _raw_read_lock+0x5f/0x70 [ 330.325153][T15665] __do_wait+0x105/0x890 [ 330.331377][T15665] do_wait+0x21e/0x5a0 [ 330.337424][T15665] kernel_wait+0x9f/0x160 [ 330.343722][T15665] call_usermodehelper_exec_work+0xf1/0x170 [ 330.351588][T15665] process_one_work+0x9cc/0x1b70 [ 330.358500][T15665] worker_thread+0x6c8/0xf10 [ 330.365063][T15665] kthread+0x3c5/0x780 [ 330.371104][T15665] ret_from_fork+0x5d7/0x6f0 [ 330.377667][T15665] ret_from_fork_asm+0x1a/0x30 [ 330.384408][T15665] SOFTIRQ-ON-R at: [ 330.388536][T15665] lock_acquire+0x179/0x350 [ 330.395019][T15665] _raw_read_lock+0x5f/0x70 [ 330.401500][T15665] __do_wait+0x105/0x890 [ 330.407720][T15665] do_wait+0x21e/0x5a0 [ 330.413783][T15665] kernel_wait+0x9f/0x160 [ 330.420081][T15665] call_usermodehelper_exec_work+0xf1/0x170 [ 330.427949][T15665] process_one_work+0x9cc/0x1b70 [ 330.434859][T15665] worker_thread+0x6c8/0xf10 [ 330.441421][T15665] kthread+0x3c5/0x780 [ 330.447460][T15665] ret_from_fork+0x5d7/0x6f0 [ 330.454020][T15665] ret_from_fork_asm+0x1a/0x30 [ 330.460761][T15665] INITIAL USE at: [ 330.464803][T15665] lock_acquire+0x179/0x350 [ 330.471201][T15665] _raw_write_lock_irq+0x36/0x50 [ 330.478030][T15665] copy_process+0x4caf/0x7690 [ 330.484597][T15665] kernel_clone+0xfc/0x930 [ 330.490903][T15665] user_mode_thread+0xc7/0x110 [ 330.497555][T15665] rest_init+0x23/0x2b0 [ 330.503606][T15665] start_kernel+0x3ee/0x4d0 [ 330.510000][T15665] x86_64_start_reservations+0x18/0x30 [ 330.517350][T15665] x86_64_start_kernel+0x130/0x190 [ 330.524366][T15665] common_startup_64+0x13e/0x148 [ 330.531195][T15665] INITIAL READ USE at: [ 330.535668][T15665] lock_acquire+0x179/0x350 [ 330.542496][T15665] _raw_read_lock+0x5f/0x70 [ 330.549325][T15665] __do_wait+0x105/0x890 [ 330.555894][T15665] do_wait+0x21e/0x5a0 [ 330.562287][T15665] kernel_wait+0x9f/0x160 [ 330.568932][T15665] call_usermodehelper_exec_work+0xf1/0x170 [ 330.577145][T15665] process_one_work+0x9cc/0x1b70 [ 330.584404][T15665] worker_thread+0x6c8/0xf10 [ 330.591312][T15665] kthread+0x3c5/0x780 [ 330.597702][T15665] ret_from_fork+0x5d7/0x6f0 [ 330.604611][T15665] ret_from_fork_asm+0x1a/0x30 [ 330.611697][T15665] } [ 330.614343][T15665] ... key at: [] tasklist_lock+0x18/0x40 [ 330.622210][T15665] ... acquired at: [ 330.626158][T15665] _raw_read_lock+0x5f/0x70 [ 330.630818][T15665] send_sigio+0xb8/0x3e0 [ 330.635214][T15665] dnotify_handle_event+0x15e/0x2b0 [ 330.640563][T15665] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 330.647124][T15665] fsnotify+0x13d6/0x1dc0 [ 330.651599][T15665] path_openat+0x1b50/0x2cb0 [ 330.656343][T15665] do_filp_open+0x20b/0x470 [ 330.660995][T15665] do_sys_openat2+0x11b/0x1d0 [ 330.665823][T15665] __x64_sys_openat+0x174/0x210 [ 330.670825][T15665] do_syscall_64+0xcd/0x4c0 [ 330.675477][T15665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.681517][T15665] [ 330.683815][T15665] -> (&f_owner->lock){....}-{3:3} { [ 330.689085][T15665] INITIAL USE at: [ 330.693039][T15665] lock_acquire+0x179/0x350 [ 330.699606][T15665] _raw_write_lock_irq+0x36/0x50 [ 330.706277][T15665] __f_setown+0x61/0x3c0 [ 330.712235][T15665] do_fcntl+0x1098/0x15a0 [ 330.718278][T15665] __x64_sys_fcntl+0x163/0x200 [ 330.724762][T15665] do_syscall_64+0xcd/0x4c0 [ 330.730977][T15665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.738581][T15665] INITIAL READ USE at: [ 330.742978][T15665] lock_acquire+0x179/0x350 [ 330.749632][T15665] _raw_read_lock_irq+0x67/0x80 [ 330.756637][T15665] f_getown+0x57/0x300 [ 330.762857][T15665] sock_ioctl+0x1f2/0x6b0 [ 330.769337][T15665] __x64_sys_ioctl+0x18b/0x210 [ 330.776252][T15665] do_syscall_64+0xcd/0x4c0 [ 330.782901][T15665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.790936][T15665] } [ 330.793495][T15665] ... key at: [] __key.1+0x0/0x40 [ 330.800664][T15665] ... acquired at: [ 330.804526][T15665] _raw_read_lock_irqsave+0x74/0x90 [ 330.809880][T15665] send_sigio+0x31/0x3e0 [ 330.814289][T15665] kill_fasync+0x214/0x510 [ 330.818857][T15665] lease_break_callback+0x23/0x30 [ 330.824036][T15665] __break_lease+0x674/0x1810 [ 330.828859][T15665] do_dentry_open+0x91f/0x1530 [ 330.833770][T15665] vfs_open+0x82/0x3f0 [ 330.837995][T15665] dentry_open+0x71/0xd0 [ 330.842388][T15665] do_mq_open+0x4df/0x8c0 [ 330.846868][T15665] __x64_sys_mq_open+0x155/0x1e0 [ 330.851956][T15665] do_syscall_64+0xcd/0x4c0 [ 330.856609][T15665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.862649][T15665] [ 330.864947][T15665] -> (&new->fa_lock){....}-{3:3} { [ 330.870045][T15665] INITIAL USE at: [ 330.873910][T15665] lock_acquire+0x179/0x350 [ 330.879957][T15665] _raw_write_lock_irq+0x36/0x50 [ 330.886439][T15665] fasync_remove_entry+0xb2/0x1e0 [ 330.893007][T15665] fasync_helper+0xaf/0xd0 [ 330.898965][T15665] sock_fasync+0x92/0x140 [ 330.904836][T15665] __fput+0x968/0xb70 [ 330.910359][T15665] task_work_run+0x150/0x240 [ 330.916487][T15665] get_signal+0x1d1/0x26d0 [ 330.922446][T15665] arch_do_signal_or_restart+0x8f/0x7d0 [ 330.929533][T15665] exit_to_user_mode_loop+0x84/0x110 [ 330.936356][T15665] do_syscall_64+0x3f6/0x4c0 [ 330.942482][T15665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.949911][T15665] INITIAL READ USE at: [ 330.954214][T15665] lock_acquire+0x179/0x350 [ 330.960704][T15665] _raw_read_lock_irqsave+0x74/0x90 [ 330.967883][T15665] kill_fasync+0x138/0x510 [ 330.974277][T15665] sock_wake_async+0x132/0x160 [ 330.981015][T15665] sctp_data_ready+0x522/0x600 [ 330.987752][T15665] sctp_ulpq_tail_event+0x97b/0xc30 [ 330.994926][T15665] do_ulpq_tail_event+0x10c/0x170 [ 331.001926][T15665] sctp_assoc_ulpevent_type_set+0x305/0x370 [ 331.009790][T15665] sctp_setsockopt+0x6a76/0xb870 [ 331.016702][T15665] do_sock_setsockopt+0xf3/0x1d0 [ 331.023613][T15665] __sys_setsockopt+0x1a0/0x230 [ 331.030443][T15665] __x64_sys_setsockopt+0xbd/0x160 [ 331.037535][T15665] do_syscall_64+0xcd/0x4c0 [ 331.044010][T15665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.051873][T15665] } [ 331.054346][T15665] ... key at: [] __key.0+0x0/0x40 [ 331.061432][T15665] ... acquired at: [ 331.065209][T15665] lock_acquire+0x179/0x350 [ 331.069866][T15665] _raw_read_lock_irqsave+0x74/0x90 [ 331.075220][T15665] kill_fasync+0x138/0x510 [ 331.079789][T15665] evdev_pass_values+0x619/0x9b0 [ 331.084878][T15665] evdev_events+0x1bb/0x390 [ 331.089531][T15665] input_pass_values+0x74e/0x880 [ 331.094619][T15665] input_handle_event+0xf00/0x14d0 [ 331.099880][T15665] input_inject_event+0x1e8/0x3b0 [ 331.105057][T15665] evdev_write+0x457/0x750 [ 331.109625][T15665] vfs_write+0x29d/0x11d0 [ 331.114102][T15665] ksys_write+0x1f8/0x250 [ 331.118580][T15665] do_syscall_64+0xcd/0x4c0 [ 331.123232][T15665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.129274][T15665] [ 331.131571][T15665] [ 331.131571][T15665] stack backtrace: [ 331.137434][T15665] CPU: 1 UID: 0 PID: 15665 Comm: syz.1.4110 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 331.137452][T15665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 331.137461][T15665] Call Trace: [ 331.137466][T15665] [ 331.137471][T15665] dump_stack_lvl+0x116/0x1f0 [ 331.137486][T15665] check_irq_usage+0x7dc/0x920 [ 331.137505][T15665] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 331.137524][T15665] ? check_path.constprop.0+0x24/0x50 [ 331.137545][T15665] ? __lock_acquire+0x12bc/0x1ce0 [ 331.137564][T15665] __lock_acquire+0x12bc/0x1ce0 [ 331.137587][T15665] lock_acquire+0x179/0x350 [ 331.137606][T15665] ? kill_fasync+0x138/0x510 [ 331.137626][T15665] _raw_read_lock_irqsave+0x74/0x90 [ 331.137647][T15665] ? kill_fasync+0x138/0x510 [ 331.137664][T15665] kill_fasync+0x138/0x510 [ 331.137682][T15665] evdev_pass_values+0x619/0x9b0 [ 331.137701][T15665] evdev_events+0x1bb/0x390 [ 331.137718][T15665] input_pass_values+0x74e/0x880 [ 331.137736][T15665] input_handle_event+0xf00/0x14d0 [ 331.137752][T15665] ? _copy_from_user+0x59/0xd0 [ 331.137771][T15665] input_inject_event+0x1e8/0x3b0 [ 331.137789][T15665] evdev_write+0x457/0x750 [ 331.137807][T15665] ? __pfx_evdev_write+0x10/0x10 [ 331.137825][T15665] ? bpf_lsm_file_permission+0x9/0x10 [ 331.137842][T15665] ? security_file_permission+0x71/0x210 [ 331.137863][T15665] ? rw_verify_area+0xcf/0x6c0 [ 331.137883][T15665] ? __pfx_evdev_write+0x10/0x10 [ 331.137900][T15665] vfs_write+0x29d/0x11d0 [ 331.137914][T15665] ? __pfx_vfs_write+0x10/0x10 [ 331.137926][T15665] ? find_held_lock+0x2b/0x80 [ 331.137941][T15665] ? __fget_files+0x204/0x3c0 [ 331.137956][T15665] ? __fget_files+0x20e/0x3c0 [ 331.137972][T15665] ksys_write+0x1f8/0x250 [ 331.137984][T15665] ? __pfx_ksys_write+0x10/0x10 [ 331.137999][T15665] do_syscall_64+0xcd/0x4c0 [ 331.138013][T15665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.138026][T15665] RIP: 0033:0x7f506ab8ebe9 [ 331.138038][T15665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.138052][T15665] RSP: 002b:00007f506ba2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 331.138065][T15665] RAX: ffffffffffffffda RBX: 00007f506adb5fa0 RCX: 00007f506ab8ebe9 [ 331.138074][T15665] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 331.138082][T15665] RBP: 00007f506ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 331.138090][T15665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.138097][T15665] R13: 00007f506adb6038 R14: 00007f506adb5fa0 R15: 00007ffe088fca88 [ 331.138110][T15665] [ 331.444237][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 331.450611][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.471651][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.487412][ T5906] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 331.496747][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.505588][ T5906] usb 5-1: config 0 descriptor?? [ 331.914692][ T5906] ft260 0003:0403:6030.004A: unknown main item tag 0x7 [ 332.114645][ T5906] ft260 0003:0403:6030.004A: chip code: 6424 8183 [ 332.315017][ T5906] ft260 0003:0403:6030.004A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 332.716652][ T5906] ft260 0003:0403:6030.004A: failed to retrieve status: -71 [ 332.724335][ T5906] ft260 0003:0403:6030.004A: failed to reset I2C controller: -71 [ 332.734439][ T5906] usb 5-1: USB disconnect, device number 46