last executing test programs: 4.402216159s ago: executing program 4 (id=1604): unshare(0x22000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r3}, 0xc) 4.331944437s ago: executing program 4 (id=1606): open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1f0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x400) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) 4.032799749s ago: executing program 4 (id=1609): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x4ff3913d, 0xca0, 0x9}, 0x10) 3.582856538s ago: executing program 0 (id=1618): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000100"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0xffc2, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800084000000008140005"], 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 3.465898619s ago: executing program 0 (id=1621): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0xc0089364, 0x800000000000001) 3.361882045s ago: executing program 0 (id=1622): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8060, 0x0) 3.303207957s ago: executing program 0 (id=1624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mkdir(0x0, 0x0) 3.063253361s ago: executing program 4 (id=1627): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0x10) 2.961399855s ago: executing program 4 (id=1630): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0xf542}, {r0, 0x1141}], 0x2, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r1 = gettid() timer_create(0x3, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 2.673218927s ago: executing program 1 (id=1636): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) 2.417618068s ago: executing program 0 (id=1638): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 1.939271916s ago: executing program 1 (id=1639): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000100)={0x30, r4, 0x0, 0x0, 0x40000, 0x22de, 0x1000, 0x0}) 1.93702941s ago: executing program 4 (id=1640): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.806314994s ago: executing program 1 (id=1641): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000000300)) 1.608481757s ago: executing program 1 (id=1642): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x64010101}}}], 0x20}}], 0x1, 0x4880) 1.597540215s ago: executing program 0 (id=1643): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="000c1c"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000002140)=ANY=[@ANYBLOB="02020c"], 0x0, 0x0, 0x0}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 1.505571328s ago: executing program 1 (id=1645): gettid() r0 = mq_open(&(0x7f0000002180)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00j\x05\xf9\xa1k;L\xb3C\xeb\xf1\xa7\f\xfb\xa8U\t\xc4\x00t\xbb\x03\x01/\x8dQxk\f\xa7\xfd\xa2=\xb9\xfa\x8d\xa4>\x11\xed\a\xd8\xd4NEz[\xb5\xd4\xd05j\xf2}\xa1a\xd9\xdf0*K \xec\xbc\x86>,\x9dLJ\x13\x1a1\x8fI\x12\xc9\xc5\x11\xf9\xa0S\x95\x9dU\xadn\x89v\xe9\x82\xdd=\xf5e\xacq\x0e\x17\xd4\x19\x8dEp\xbd0\xe8\xb5U\x8fx\xa3\xd0\x92\xbb\xd8>\xda\xe1\x9d\x8c\x1b4\x9c\x17\xb2\xec;\xef\xcd\xa1){\x91\xd2\xc9#;9a,x\x93\xb1xN\x02\x91J\x9c\xed\xff\xea\x16^v\x17\xcc\xfe\xa2g\xa9\x9dk\xe4', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x9, 0xfffffffffffff7f4}) r1 = syz_io_uring_setup(0x1a5a, &(0x7f0000000200)={0x0, 0xcd3e, 0x10100, 0x4, 0x6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x79a5, 0x2, 0x46, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 1.352556265s ago: executing program 1 (id=1646): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x3, 0x1, 0x0, 0x1d, {0x9, 0x21, 0xf800, 0xdf, 0x1, {0x22, 0xb3}}, {{{0x9, 0x5, 0x81, 0x3, 0x9a24824d8b6ef257, 0x0, 0x0, 0xe}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000ec0)={0x24, 0x0, &(0x7f0000000d40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001940)={0x24, 0x0, &(0x7f0000001880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000002580)={0x2c, &(0x7f0000002300)={0x0, 0xf, 0xb3, {0xb3, 0xf, "64e9987e60b596d8e504685a568c7de481280342c0b938c30d9f5a55c0f18f9e1dcf1f3ada45b41867d3e650ee5c0ef6420a3dc24d58a8e3f024c1d78afc493a1438d1e58fd1b4d86e323d01148bc8f6c5312743d821c80d0ca15273f779f8d4cfca3113ff1ea969121bde2a9f0defb92428979a7bdc18f5659de54d780b91d87bea980fdb1a40ddd9ea0b7f718d6f74dc6cdf86e0149cd5c734f77539d16d4864a3a2b7b3c94b786a0c926db9877c118e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 982.775531ms ago: executing program 2 (id=1652): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x80) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000540)={0xfffffff7, 0x200401, 0xfffffffd, 0xc6cf, 0x91, "0000080100", 0x23fffd, 0x1fd}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9) 931.77862ms ago: executing program 3 (id=1653): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf", 0x45}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/80, 0x50}], 0x2}, 0x0) 890.935564ms ago: executing program 2 (id=1654): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0xf0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 889.77743ms ago: executing program 3 (id=1655): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r0, 0x24, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 815.109504ms ago: executing program 2 (id=1656): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 778.043904ms ago: executing program 3 (id=1657): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x104) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8b, 0xffffffff, 0x40}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) 715.908225ms ago: executing program 3 (id=1658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@empty}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 690.019184ms ago: executing program 2 (id=1659): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x4, 0x8, 0x100, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x9, 0x1000, 0xc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 596.800692ms ago: executing program 2 (id=1660): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c65) write$P9_RLOPEN(r1, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x2, 0x3}, 0x5}}, 0x18) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f0000000580)={0x0, 0x0}) 487.832904ms ago: executing program 3 (id=1661): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='kvm_unmap_hva_range\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 391.171524ms ago: executing program 3 (id=1662): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 0s ago: executing program 2 (id=1663): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) brk(0x200000ffc000) kernel console output (not intermixed with test programs): icast mode [ 99.410398][ T30] audit: type=1400 audit(1757318080.028:321): avc: denied { bind } for pid=6934 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.497879][ T30] audit: type=1400 audit(1757318080.038:322): avc: denied { read } for pid=6934 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.739743][ T6950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.929394][ T5957] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 100.055509][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 100.142096][ T5957] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 100.172671][ T5957] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 100.200439][ T6974] vivid-002: disconnect [ 100.234267][ T5957] usb 5-1: USB disconnect, device number 6 [ 100.240344][ T6974] vivid-002: reconnect [ 100.494090][ T6995] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.437'. [ 100.752475][ T7014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.443'. [ 100.774561][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'. [ 100.790731][ T7017] erspan0: entered promiscuous mode [ 100.798454][ T7017] macsec1: entered promiscuous mode [ 100.805463][ T7017] macsec1: entered allmulticast mode [ 100.810830][ T7017] erspan0: entered allmulticast mode [ 100.821268][ T7017] erspan0: left allmulticast mode [ 100.834578][ T7017] erspan0: left promiscuous mode [ 100.873095][ T7014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.443'. [ 101.001320][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'. [ 101.048721][ T7029] warning: `syz.3.450' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.186286][ T6002] IPVS: starting estimator thread 0... [ 101.201968][ T7036] tipc: Started in network mode [ 101.224094][ T7036] tipc: Node identity ac1414aa, cluster identity 4711 [ 101.244142][ T7036] tipc: Enabled bearer , priority 10 [ 101.264844][ T7045] netlink: 'syz.2.458': attribute type 29 has an invalid length. [ 101.275837][ T7039] IPVS: using max 39 ests per chain, 93600 per kthread [ 101.317749][ T7045] netlink: 'syz.2.458': attribute type 29 has an invalid length. [ 101.344671][ T7045] unsupported nla_type 58 [ 102.357755][ T6002] tipc: Node number set to 2886997162 [ 102.493767][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 102.493782][ T30] audit: type=1400 audit(1757318083.118:333): avc: denied { setopt } for pid=7081 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.542535][ T30] audit: type=1400 audit(1757318083.148:334): avc: denied { read } for pid=7081 comm="syz.0.473" path="socket:[14452]" dev="sockfs" ino=14452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.566005][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.607482][ T30] audit: type=1400 audit(1757318083.168:335): avc: denied { read write } for pid=7085 comm="syz.1.472" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 102.631350][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.666144][ T7089] __nla_validate_parse: 3 callbacks suppressed [ 102.666160][ T7089] netlink: 64 bytes leftover after parsing attributes in process `syz.0.475'. [ 102.720930][ T30] audit: type=1400 audit(1757318083.168:336): avc: denied { open } for pid=7085 comm="syz.1.472" path="/dev/sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 102.744681][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.755306][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 102.764560][ T30] audit: type=1400 audit(1757318083.208:337): avc: denied { ioctl } for pid=7085 comm="syz.1.472" path="/dev/sg0" dev="devtmpfs" ino=765 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 102.928330][ T24] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 102.945163][ T24] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 102.964639][ T24] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 102.979659][ T24] usb 3-1: config 220 has no interface number 2 [ 102.979958][ T30] audit: type=1326 audit(1757318083.608:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.4.479" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a5518ebe9 code=0x0 [ 102.986290][ T24] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 103.015318][ T5957] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 103.028284][ T24] usb 3-1: config 220 interface 0 has no altsetting 0 [ 103.039003][ T24] usb 3-1: config 220 interface 76 has no altsetting 0 [ 103.049481][ T24] usb 3-1: config 220 interface 1 has no altsetting 0 [ 103.064695][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 103.074308][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.083226][ T24] usb 3-1: Product: syz [ 103.090792][ T24] usb 3-1: Manufacturer: syz [ 103.097457][ T24] usb 3-1: SerialNumber: syz [ 103.207068][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.218149][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.227960][ T5957] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.241630][ T5957] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.251177][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.261496][ T5957] usb 2-1: config 0 descriptor?? [ 103.318160][ T24] usb 3-1: selecting invalid altsetting 0 [ 103.328449][ T24] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 103.334893][ T24] usb 3-1: No valid video chain found. [ 103.345530][ T24] usb 3-1: selecting invalid altsetting 0 [ 103.347997][ T5956] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.351266][ T24] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 103.364474][ T24] usb 3-1: USB disconnect, device number 8 [ 103.526592][ T5956] usb 1-1: Using ep0 maxpacket: 8 [ 103.533307][ T5956] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 103.542679][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.554017][ T5956] usb 1-1: config 0 descriptor?? [ 103.690989][ T5957] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 103.772050][ T5956] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 104.042561][ T5957] usb 2-1: USB disconnect, device number 7 [ 104.118216][ T7122] geneve2: entered promiscuous mode [ 104.133680][ T7122] geneve2: entered allmulticast mode [ 104.331939][ T7127] TCP: TCP_TX_DELAY enabled [ 104.579443][ T5956] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 104.614027][ T5956] asix 1-1:0.0: probe with driver asix failed with error -71 [ 104.649348][ T5956] usb 1-1: USB disconnect, device number 5 [ 104.756326][ T7147] block nbd4: NBD_DISCONNECT [ 104.756729][ T7147] block nbd4: Send disconnect failed -22 [ 104.757242][ T7145] block nbd4: Disconnected due to user request. [ 104.757271][ T7145] block nbd4: shutting down sockets [ 104.967877][ T30] audit: type=1400 audit(1757318085.598:339): avc: denied { read } for pid=7154 comm="syz.4.503" path="socket:[15632]" dev="sockfs" ino=15632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.245125][ T7169] mmap: syz.4.510 (7169) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.939535][ T30] audit: type=1400 audit(1757318086.568:340): avc: denied { connect } for pid=7201 comm="syz.2.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.621852][ T30] audit: type=1400 audit(1757318087.248:341): avc: denied { bind } for pid=7230 comm="syz.4.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.721850][ T30] audit: type=1400 audit(1757318087.348:342): avc: denied { remount } for pid=7236 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 107.481221][ T7270] Bluetooth: hci5: Frame reassembly failed (-84) [ 107.982116][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 108.112873][ T7296] syzkaller1: entered promiscuous mode [ 108.119358][ T7296] syzkaller1: entered allmulticast mode [ 108.245407][ T5956] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 108.425108][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 108.431540][ T5956] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 108.440586][ T5956] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 108.450291][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.455133][ T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 108.460748][ T5956] usb 4-1: config 0 descriptor?? [ 108.515213][ T10] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 108.627581][ T43] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.638561][ T43] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.648405][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.654997][ T43] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 108.664045][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.669325][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 108.674034][ T43] usb 5-1: config 0 descriptor?? [ 108.697708][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 108.709529][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.712963][ T24] usb 4-1: USB disconnect, device number 8 [ 108.725693][ T10] usb 2-1: config 0 descriptor?? [ 108.733999][ T7306] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 109.121102][ T43] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0009/input/input12 [ 109.151608][ T10] hid_parser_main: 10 callbacks suppressed [ 109.151626][ T10] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 109.168262][ T10] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 109.175315][ T10] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 109.182193][ T10] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 109.189348][ T10] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 109.208537][ T43] sony 0003:054C:03D5.0009: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 109.210147][ T10] elan 0003:04F3:0755.000A: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 109.442883][ T43] usb 2-1: USB disconnect, device number 8 [ 109.461380][ T6002] usb 5-1: USB disconnect, device number 7 [ 109.485686][ T51] Bluetooth: hci5: command 0xfc11 tx timeout [ 109.492420][ T5850] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 109.906300][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 109.906315][ T30] audit: type=1400 audit(1757318090.538:350): avc: denied { create } for pid=7323 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.937576][ T30] audit: type=1400 audit(1757318090.538:351): avc: denied { bind } for pid=7323 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.972116][ T5171] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 109.980694][ T5850] Bluetooth: hci6: command 0x1003 tx timeout [ 110.272700][ T30] audit: type=1400 audit(1757318090.898:352): avc: denied { getopt } for pid=7338 comm="syz.2.583" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.411261][ T7344] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 110.591158][ T30] audit: type=1326 audit(1757318091.218:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f3b8ebe9 code=0x7ffc0000 [ 110.635956][ T7349] netlink: 'syz.4.588': attribute type 1 has an invalid length. [ 110.637962][ T30] audit: type=1326 audit(1757318091.218:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f3b8ebe9 code=0x7ffc0000 [ 110.698563][ T7357] random: crng reseeded on system resumption [ 110.706533][ T30] audit: type=1326 audit(1757318091.228:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f48f3b8ebe9 code=0x7ffc0000 [ 110.774880][ T30] audit: type=1326 audit(1757318091.228:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f3b8ebe9 code=0x7ffc0000 [ 110.807462][ T30] audit: type=1326 audit(1757318091.228:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f3b8ebe9 code=0x7ffc0000 [ 110.900925][ T30] audit: type=1326 audit(1757318091.228:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48f3b8ebe9 code=0x7ffc0000 [ 110.953461][ T7371] capability: warning: `syz.1.599' uses 32-bit capabilities (legacy support in use) [ 110.973264][ T30] audit: type=1326 audit(1757318091.228:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f3b8ebe9 code=0x7ffc0000 [ 111.048752][ T7375] netlink: 116 bytes leftover after parsing attributes in process `syz.4.601'. [ 111.146112][ T7369] block nbd0: server does not support multiple connections per device. [ 111.168641][ T7369] block nbd0: shutting down sockets [ 111.305710][ T5956] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 111.471447][ T5956] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 111.483237][ T5956] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 111.499605][ T5956] usb 2-1: Product: syz [ 111.507163][ T5956] usb 2-1: Manufacturer: syz [ 111.511767][ T5956] usb 2-1: SerialNumber: syz [ 111.534103][ T5956] usb 2-1: config 0 descriptor?? [ 111.542123][ T5956] ch341 2-1:0.0: ch341-uart converter detected [ 111.625768][ T6002] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 111.785115][ T6002] usb 4-1: Using ep0 maxpacket: 32 [ 111.793850][ T6002] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 111.803066][ T6002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.811140][ T6002] usb 4-1: Product: syz [ 111.815589][ T6002] usb 4-1: Manufacturer: syz [ 111.820238][ T6002] usb 4-1: SerialNumber: syz [ 111.826944][ T6002] usb 4-1: config 0 descriptor?? [ 112.240829][ T6002] airspy 4-1:0.0: Board ID: 00 [ 112.245926][ T6002] airspy 4-1:0.0: Firmware version: [ 112.549583][ T5956] usb 2-1: failed to send control message: -71 [ 112.562386][ T5956] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 112.578729][ T5956] usb 2-1: USB disconnect, device number 9 [ 112.589476][ T5956] ch341 2-1:0.0: device disconnected [ 112.847400][ T6002] airspy 4-1:0.0: usb_control_msg() failed -71 request 12 [ 112.868890][ T6002] airspy 4-1:0.0: Registered as swradio24 [ 112.874684][ T6002] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 112.894069][ T6002] usb 4-1: USB disconnect, device number 9 [ 113.053540][ T5957] IPVS: starting estimator thread 0... [ 113.054402][ T7419] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 113.156082][ T7420] IPVS: using max 42 ests per chain, 100800 per kthread [ 113.276171][ T7433] ALSA: seq fatal error: cannot create timer (-22) [ 113.310472][ T7435] input: syz0 as /devices/virtual/input/input13 [ 113.344006][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 113.478912][ T7445] loop8: detected capacity change from 0 to 8 [ 113.502295][ T7445] Dev loop8: unable to read RDB block 8 [ 113.510870][ T7445] loop8: unable to read partition table [ 113.517766][ T7445] loop8: partition table beyond EOD, truncated [ 113.531538][ T7445] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 113.775420][ T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 113.877553][ T7465] netlink: 40 bytes leftover after parsing attributes in process `syz.2.643'. [ 113.937859][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 113.967354][ T43] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 113.979722][ T43] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 113.989039][ T43] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 114.001374][ T43] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 114.011117][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 114.030353][ T43] usb 4-1: config 0 has no interface number 0 [ 114.045805][ T43] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 114.061999][ T43] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 114.072956][ T43] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 114.086425][ T43] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.129878][ T43] usb 4-1: config 0 interface 125 has no altsetting 0 [ 114.139648][ T43] usb 4-1: config 0 interface 125 has no altsetting 2 [ 114.149057][ T43] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 114.160797][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.171179][ T43] usb 4-1: Product: syz [ 114.177720][ T43] usb 4-1: Manufacturer: syz [ 114.182379][ T43] usb 4-1: SerialNumber: syz [ 114.193543][ T43] usb 4-1: config 0 descriptor?? [ 114.207990][ T7477] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 114.214638][ T7477] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.235443][ T43] usb 4-1: selecting invalid altsetting 2 [ 114.247123][ T7477] vhci_hcd vhci_hcd.0: Device attached [ 114.427369][ T5907] vhci_hcd: vhci_device speed not set [ 114.495122][ T5907] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 114.715299][ T5957] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 114.886401][ T5957] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.898087][ T5957] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 114.907204][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.925415][ T5957] usb 3-1: config 0 descriptor?? [ 114.937801][ T5957] pwc: Askey VC010 type 2 USB webcam detected. [ 115.267229][ T6002] usb 4-1: USB disconnect, device number 10 [ 115.352689][ T5957] pwc: recv_control_msg error -32 req 02 val 2b00 [ 115.360060][ T5957] pwc: recv_control_msg error -32 req 02 val 2700 [ 115.425131][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 115.568730][ T5957] pwc: recv_control_msg error -71 req 04 val 1000 [ 115.579931][ T5957] pwc: recv_control_msg error -71 req 04 val 1300 [ 115.580739][ T43] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 115.595568][ T5957] pwc: recv_control_msg error -71 req 04 val 1400 [ 115.595935][ T5957] pwc: recv_control_msg error -71 req 02 val 2000 [ 115.604265][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.612731][ T5957] pwc: recv_control_msg error -71 req 02 val 2100 [ 115.619837][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 115.619849][ T30] audit: type=1400 audit(1757318096.248:386): avc: denied { create } for pid=7517 comm="syz.1.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 115.625959][ T5957] pwc: recv_control_msg error -71 req 04 val 1500 [ 115.630347][ T30] audit: type=1400 audit(1757318096.258:387): avc: denied { ioctl } for pid=7517 comm="syz.1.667" path="socket:[16493]" dev="sockfs" ino=16493 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 115.655518][ T5957] pwc: recv_control_msg error -71 req 02 val 2500 [ 115.655854][ T5957] pwc: recv_control_msg error -71 req 02 val 2400 [ 115.680879][ T5957] pwc: recv_control_msg error -71 req 02 val 2600 [ 115.701740][ T43] usb 5-1: config 0 descriptor?? [ 115.711052][ T43] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 115.720566][ T5957] pwc: recv_control_msg error -71 req 02 val 2900 [ 115.736341][ T5957] pwc: recv_control_msg error -71 req 02 val 2800 [ 115.743362][ T5957] pwc: recv_control_msg error -71 req 04 val 1100 [ 115.753071][ T5957] pwc: recv_control_msg error -71 req 04 val 1200 [ 115.772997][ T5957] pwc: Registered as video103. [ 115.788348][ T5957] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 115.835670][ T5957] usb 3-1: USB disconnect, device number 9 [ 116.141908][ T43] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 116.544576][ T43] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 116.796240][ T24] usb 5-1: USB disconnect, device number 8 [ 116.838210][ T7552] 9pnet: p9_errstr2errno: server reported unknown error [ 116.894755][ T30] audit: type=1400 audit(1757318097.518:388): avc: denied { bind } for pid=7553 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.048614][ T7561] overlayfs: invalid origin (0000) [ 117.209752][ T7478] vhci_hcd: connection reset by peer [ 117.226920][ T1161] vhci_hcd: stop threads [ 117.241703][ T1161] vhci_hcd: release socket [ 117.265172][ T1161] vhci_hcd: disconnect device [ 117.287665][ T30] audit: type=1400 audit(1757318097.908:389): avc: denied { setopt } for pid=7573 comm="syz.0.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.394092][ T30] audit: type=1400 audit(1757318098.018:390): avc: denied { read write } for pid=7575 comm="syz.0.691" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 117.448778][ T30] audit: type=1400 audit(1757318098.048:391): avc: denied { open } for pid=7575 comm="syz.0.691" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 117.611352][ T7590] overlayfs: upper fs does not support tmpfile. [ 117.770105][ T30] audit: type=1400 audit(1757318098.398:392): avc: denied { append } for pid=7596 comm="syz.4.700" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.983471][ T30] audit: type=1400 audit(1757318098.608:393): avc: denied { write } for pid=7605 comm="syz.2.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.074220][ T30] audit: type=1400 audit(1757318098.698:394): avc: denied { append } for pid=7609 comm="syz.3.706" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.092898][ T5957] kernel write not supported for file /sg0 (pid: 5957 comm: kworker/0:6) [ 118.147986][ T30] audit: type=1400 audit(1757318098.698:395): avc: denied { bind } for pid=7607 comm="syz.2.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.428450][ T7628] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.715'. [ 119.635237][ T5907] vhci_hcd: vhci_device speed not set [ 119.793017][ T7683] input: syz1 as /devices/virtual/input/input15 [ 119.845224][ T7683] input: failed to attach handler leds to device input15, error: -6 [ 120.113311][ T7697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 120.288763][ T7703] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.748'. [ 121.365104][ T5907] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 121.530040][ T5907] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 121.539309][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.565141][ T5907] usb 4-1: Product: syz [ 121.565919][ T5171] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 121.569338][ T5907] usb 4-1: Manufacturer: syz [ 121.569354][ T5907] usb 4-1: SerialNumber: syz [ 121.575267][ T5850] Bluetooth: hci5: command 0x1003 tx timeout [ 121.596004][ T5907] usb 4-1: config 0 descriptor?? [ 122.305274][ T24] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 122.480296][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 122.491225][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 122.491239][ T30] audit: type=1400 audit(1757318103.108:401): avc: denied { map } for pid=7760 comm="syz.1.775" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 122.491278][ T30] audit: type=1400 audit(1757318103.108:402): avc: denied { execute } for pid=7760 comm="syz.1.775" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 122.497425][ T24] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 122.553371][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.564837][ T24] usb 3-1: config 0 descriptor?? [ 122.570493][ T7748] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 122.632816][ T5907] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 122.719146][ T5907] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 7e:a1:8a:d2:7b:3e [ 122.801777][ T5907] usb 4-1: USB disconnect, device number 11 [ 122.827055][ T5907] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 122.997333][ T24] elan 0003:04F3:0755.000B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 123.042533][ T7777] IPVS: Error joining to the multicast group [ 123.222727][ T24] usb 3-1: USB disconnect, device number 10 [ 123.448103][ T5171] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 123.458721][ T5171] CPU: 0 UID: 0 PID: 5171 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 123.458736][ T5171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.458743][ T5171] Workqueue: hci3 hci_rx_work [ 123.458760][ T5171] Call Trace: [ 123.458763][ T5171] [ 123.458767][ T5171] dump_stack_lvl+0x16c/0x1f0 [ 123.458782][ T5171] sysfs_warn_dup+0x7f/0xa0 [ 123.458796][ T5171] sysfs_create_dir_ns+0x24b/0x2b0 [ 123.458810][ T5171] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 123.458823][ T5171] ? find_held_lock+0x2b/0x80 [ 123.458839][ T5171] ? do_raw_spin_unlock+0x172/0x230 [ 123.458854][ T5171] kobject_add_internal+0x2c4/0x9b0 [ 123.458870][ T5171] kobject_add+0x16e/0x240 [ 123.458885][ T5171] ? __pfx_kobject_add+0x10/0x10 [ 123.458901][ T5171] ? do_raw_spin_unlock+0x172/0x230 [ 123.458913][ T5171] ? kobject_put+0xab/0x5a0 [ 123.458930][ T5171] device_add+0x288/0x1aa0 [ 123.458945][ T5171] ? __pfx_dev_set_name+0x10/0x10 [ 123.458955][ T5171] ? __pfx_device_add+0x10/0x10 [ 123.458969][ T5171] ? mgmt_send_event_skb+0x2fb/0x460 [ 123.458984][ T5171] hci_conn_add_sysfs+0x17e/0x230 [ 123.458997][ T5171] le_conn_complete_evt+0x1075/0x1d70 [ 123.459007][ T5171] ? preempt_count_sub+0xb0/0x160 [ 123.459023][ T5171] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 123.459033][ T5171] ? hci_event_packet+0x459/0x11c0 [ 123.459047][ T5171] hci_le_conn_complete_evt+0x23c/0x370 [ 123.459061][ T5171] hci_le_meta_evt+0x354/0x5e0 [ 123.459072][ T5171] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 123.459084][ T5171] hci_event_packet+0x682/0x11c0 [ 123.459095][ T5171] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 123.459107][ T5171] ? __pfx_hci_event_packet+0x10/0x10 [ 123.459118][ T5171] ? kcov_remote_start+0x3c9/0x6d0 [ 123.459130][ T5171] ? lockdep_hardirqs_on+0x7c/0x110 [ 123.459145][ T5171] hci_rx_work+0x2c5/0x16b0 [ 123.459166][ T5171] ? rcu_is_watching+0x12/0xc0 [ 123.459182][ T5171] process_one_work+0x9cc/0x1b70 [ 123.459199][ T5171] ? __pfx_process_one_work+0x10/0x10 [ 123.459215][ T5171] ? assign_work+0x1a0/0x250 [ 123.459228][ T5171] worker_thread+0x6c8/0xf10 [ 123.459244][ T5171] ? __kthread_parkme+0x19e/0x250 [ 123.459260][ T5171] ? __pfx_worker_thread+0x10/0x10 [ 123.459272][ T5171] kthread+0x3c2/0x780 [ 123.459283][ T5171] ? __pfx_kthread+0x10/0x10 [ 123.459294][ T5171] ? rcu_is_watching+0x12/0xc0 [ 123.459307][ T5171] ? __pfx_kthread+0x10/0x10 [ 123.459317][ T5171] ret_from_fork+0x5d4/0x6f0 [ 123.459327][ T5171] ? __pfx_kthread+0x10/0x10 [ 123.459337][ T5171] ret_from_fork_asm+0x1a/0x30 [ 123.459356][ T5171] [ 123.459369][ T5171] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 123.719892][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 123.727516][ T5171] Bluetooth: hci3: failed to register connection device [ 123.849770][ T30] audit: type=1400 audit(1757318104.478:403): avc: denied { create } for pid=7799 comm="syz.2.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 123.907906][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 123.922225][ T7803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.792'. [ 123.928998][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.934117][ T30] audit: type=1400 audit(1757318104.548:404): avc: denied { write } for pid=7799 comm="syz.2.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 123.955052][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.019342][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 124.063425][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 124.083289][ T10] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 124.108376][ T10] usb 4-1: Manufacturer: syz [ 124.146225][ T10] usb 4-1: config 0 descriptor?? [ 124.158305][ T30] audit: type=1400 audit(1757318104.788:405): avc: denied { remount } for pid=7809 comm="syz.2.795" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 124.583551][ T10] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 124.612642][ T10] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 124.666678][ T5957] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 124.690086][ T5861] udevd[5861]: setting mode of /dev/bus/usb/004/012 to 020664 failed: Read-only file system [ 124.726909][ T5861] udevd[5861]: setting owner of /dev/bus/usb/004/012 to uid=0, gid=0 failed: Read-only file system [ 124.855661][ T5957] usb 5-1: config 0 has no interfaces? [ 124.861160][ T5957] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 124.898865][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.910128][ T5907] usb 4-1: USB disconnect, device number 12 [ 124.942605][ T5957] usb 5-1: config 0 descriptor?? [ 124.979510][ T7831] fido_id[7831]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 125.058534][ T5861] udevd[5861]: symlink '../bus/usb/004/012' '/dev/char/189:395.tmp-c189:395' failed: Read-only file system [ 125.105797][ T5861] udevd[5861]: symlink '../bus/usb/004/012' '/dev/char/189:395.tmp-c189:395' failed: Read-only file system [ 125.203620][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.224185][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.238386][ T10] usb 5-1: USB disconnect, device number 9 [ 126.064867][ T7847] syzkaller1: entered promiscuous mode [ 126.083539][ T7848] ALSA: mixer_oss: invalid OSS volume 'ؤ¿ßnhè‹{%¼ÿOBÁ›eb' [ 126.104742][ T7847] syzkaller1: entered allmulticast mode [ 126.313778][ T30] audit: type=1400 audit(1757318106.938:406): avc: denied { read } for pid=7852 comm="syz.2.812" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 126.418969][ T30] audit: type=1400 audit(1757318107.028:407): avc: denied { mount } for pid=7854 comm="syz.3.813" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 126.483008][ T7857] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.814'. [ 126.522546][ T30] audit: type=1400 audit(1757318107.148:408): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 126.905639][ T7875] fuseblk: Bad value for 'fd' [ 127.042618][ T7874] Set syz1 is full, maxelem 6117 reached [ 127.123524][ T30] audit: type=1400 audit(1757318107.748:409): avc: denied { bind } for pid=7876 comm="syz.3.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.525446][ T5171] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.526876][ T7853] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 129.266563][ T7853] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.277585][ T7853] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.284894][ T7853] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.291769][ T7853] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.298566][ T7853] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.305141][ T7853] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.311288][ T7853] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.317477][ T7853] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 129.324156][ T7853] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 129.332353][ T7853] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.341457][ T7853] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.351251][ T7853] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.520730][ T30] audit: type=1400 audit(1757318110.148:410): avc: denied { execute } for pid=7887 comm="syz.0.828" dev="hugetlbfs" ino=18709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 129.565813][ T30] audit: type=1400 audit(1757318110.148:411): avc: denied { execute_no_trans } for pid=7887 comm="syz.0.828" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=18709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 129.614981][ T5957] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 129.615217][ T5907] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 129.682267][ T7897] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 129.767703][ T30] audit: type=1326 audit(1757318110.398:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f3b8ebe9 code=0x7ffc0000 [ 129.806617][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 129.834765][ T30] audit: type=1326 audit(1757318110.398:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f3b8ebe9 code=0x7ffc0000 [ 129.835120][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 129.858173][ T30] audit: type=1326 audit(1757318110.428:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48f3b8ebe9 code=0x7ffc0000 [ 129.910244][ T30] audit: type=1326 audit(1757318110.428:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f3b8ebe9 code=0x7ffc0000 [ 129.955445][ T30] audit: type=1326 audit(1757318110.428:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48f3b8ebe9 code=0x7ffc0000 [ 129.958253][ T5907] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 129.985146][ T5957] usb 5-1: device not accepting address 10, error -71 [ 130.015107][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 130.031322][ T10] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 130.037827][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.041208][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.076643][ T30] audit: type=1326 audit(1757318110.428:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f3b8ebe9 code=0x7ffc0000 [ 130.098471][ T5907] usb 4-1: Product: syz [ 130.109537][ T5907] usb 4-1: Manufacturer: syz [ 130.124159][ T5907] usb 4-1: SerialNumber: syz [ 130.125847][ T10] usb 2-1: config 0 descriptor?? [ 130.151436][ T5907] usb 4-1: config 0 descriptor?? [ 130.153964][ T30] audit: type=1326 audit(1757318110.428:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48f3b8ebe9 code=0x7ffc0000 [ 130.190345][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 130.221007][ T30] audit: type=1326 audit(1757318110.428:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f3b8ebe9 code=0x7ffc0000 [ 130.374782][ T5907] usb 4-1: USB disconnect, device number 13 [ 130.522653][ T6374] udevd[6374]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.606783][ T5171] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.702834][ T7923] binder: 7922:7923 ioctl c0306201 200000000240 returned -11 [ 131.192550][ T10] gspca_nw80x: reg_w err -71 [ 131.204533][ T10] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 131.229360][ T10] usb 2-1: USB disconnect, device number 10 [ 131.326810][ T5171] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.332833][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.344301][ T7942] netlink: 5 bytes leftover after parsing attributes in process `syz.2.849'. [ 131.408840][ T5171] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.441100][ T7904] syz.4.835 (7904): drop_caches: 2 [ 132.029890][ T5956] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 132.235283][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 132.246294][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 132.269377][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.866'. [ 132.277346][ T5956] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 132.297448][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.319091][ T5956] usb 2-1: Product: syz [ 132.323268][ T5956] usb 2-1: Manufacturer: syz [ 132.341469][ T5956] usb 2-1: SerialNumber: syz [ 132.368854][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.377386][ T5956] usb 2-1: config 0 descriptor?? [ 132.406730][ T5956] hub 2-1:0.0: bad descriptor, ignoring hub [ 132.424228][ T5956] hub 2-1:0.0: probe with driver hub failed with error -5 [ 132.466520][ T5956] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 132.685731][ T5171] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.876323][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 133.040357][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.064778][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.083255][ T24] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 133.093356][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.108197][ T24] usb 3-1: config 0 descriptor?? [ 133.405696][ T5171] Bluetooth: hci4: command 0x0c1a tx timeout [ 133.411805][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.481675][ T8030] netlink: 5 bytes leftover after parsing attributes in process `syz.4.889'. [ 133.500650][ T5171] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.935675][ T24] hid-led 0003:27B8:01ED.000D: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 133.984464][ T24] hid-led 0003:27B8:01ED.000D: ThingM blink(1) initialized [ 134.122812][ T8029] syz.3.888 (8029): drop_caches: 2 [ 134.166727][ T24] usb 3-1: USB disconnect, device number 11 [ 134.179121][ T8029] syz.3.888 (8029): drop_caches: 2 [ 134.470096][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.897'. [ 134.551127][ T8052] mkiss: ax0: crc mode is auto. [ 134.746894][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 134.746910][ T30] audit: type=1400 audit(1757318115.368:428): avc: denied { create } for pid=8059 comm="syz.4.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 134.785378][ T30] audit: type=1400 audit(1757318115.408:429): avc: denied { write } for pid=8059 comm="syz.4.903" path="socket:[19880]" dev="sockfs" ino=19880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 134.819254][ T5956] usb 2-1: USB disconnect, device number 11 [ 135.222922][ T8083] netlink: 'syz.1.910': attribute type 9 has an invalid length. [ 135.231099][ T8083] netlink: 'syz.1.910': attribute type 7 has an invalid length. [ 135.239317][ T8083] netlink: 'syz.1.910': attribute type 8 has an invalid length. [ 135.485415][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.491520][ T5171] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.565698][ T5171] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.790765][ T8105] syz.3.921(8105): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 135.982650][ T30] audit: type=1400 audit(1757318116.608:430): avc: denied { create } for pid=8109 comm="syz.2.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 136.562232][ T8144] smc: net device bond0 applied user defined pnetid SYZ2 [ 136.576045][ T8144] netlink: 14 bytes leftover after parsing attributes in process `syz.4.937'. [ 136.618764][ T8148] netlink: 3 bytes leftover after parsing attributes in process `syz.3.939'. [ 136.709355][ T8144] smc: removing net device bond0 with user defined pnetid SYZ2 [ 136.733708][ T8144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.771589][ T8144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.798689][ T8144] bond0 (unregistering): Released all slaves [ 136.861945][ T8148] 0ªX¹¦À: renamed from caif0 [ 136.874259][ T8148] 0ªX¹¦À: entered allmulticast mode [ 136.884774][ T8148] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 137.065285][ T5957] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 137.206186][ T8168] 8021q: VLANs not supported on ip_vti0 [ 137.228809][ T5957] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.251873][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 137.264633][ T5956] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 137.285782][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 137.300154][ T5957] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.313656][ T5957] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.323374][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.333638][ T5957] usb 2-1: config 0 descriptor?? [ 137.339429][ T8154] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.445203][ T5956] usb 4-1: Using ep0 maxpacket: 32 [ 137.451855][ T5956] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 137.463028][ T5956] usb 4-1: config 0 has no interface number 0 [ 137.481531][ T5956] usb 4-1: config 0 interface 184 has no altsetting 0 [ 137.517170][ T5956] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 137.533043][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.565308][ T5956] usb 4-1: Product: syz [ 137.565997][ T5171] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.570184][ T5956] usb 4-1: Manufacturer: syz [ 137.602977][ T5956] usb 4-1: SerialNumber: syz [ 137.627589][ T5956] usb 4-1: config 0 descriptor?? [ 137.655588][ T5956] smsc75xx v1.0.0 [ 137.706107][ T30] audit: type=1400 audit(1757318118.328:431): avc: denied { setopt } for pid=8182 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.806082][ T5957] plantronics 0003:047F:FFFF.000E: reserved main item tag 0xd [ 137.847069][ T5957] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 137.941814][ T8189] batadv_slave_1: entered promiscuous mode [ 137.969335][ T8188] batadv_slave_1: left promiscuous mode [ 138.051326][ T43] usb 2-1: USB disconnect, device number 12 [ 138.279136][ T5956] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 138.302148][ T5956] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 138.537092][ T5956] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 138.564881][ T5956] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 138.575775][ T5956] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 138.587284][ T5956] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 138.636629][ T5956] usb 4-1: USB disconnect, device number 14 [ 138.662911][ T8218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.969'. [ 138.673337][ T8218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.969'. [ 138.683051][ T8218] netlink: 50 bytes leftover after parsing attributes in process `syz.1.969'. [ 138.837376][ T30] audit: type=1326 audit(1757318119.458:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8225 comm="syz.4.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5518ebe9 code=0x7ffc0000 [ 138.898568][ T30] audit: type=1326 audit(1757318119.458:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8225 comm="syz.4.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5518ebe9 code=0x7ffc0000 [ 138.941802][ T30] audit: type=1326 audit(1757318119.458:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8225 comm="syz.4.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7a5518ebe9 code=0x7ffc0000 [ 138.982247][ T30] audit: type=1326 audit(1757318119.458:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8225 comm="syz.4.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5518ebe9 code=0x7ffc0000 [ 139.012794][ T8233] trusted_key: syz.2.975 sent an empty control message without MSG_MORE. [ 139.034901][ T30] audit: type=1326 audit(1757318119.458:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8225 comm="syz.4.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5518ebe9 code=0x7ffc0000 [ 139.067417][ T5957] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 139.086348][ T30] audit: type=1326 audit(1757318119.458:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8225 comm="syz.4.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7a5518ebe9 code=0x7ffc0000 [ 139.236533][ T5957] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 139.245377][ T5957] usb 2-1: config 0 has no interface number 0 [ 139.258095][ T5957] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 139.267332][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.305068][ T5957] usb 2-1: Product: syz [ 139.309257][ T5957] usb 2-1: Manufacturer: syz [ 139.313873][ T5957] usb 2-1: SerialNumber: syz [ 139.369013][ T5957] usb 2-1: config 0 descriptor?? [ 139.525377][ T8261] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 139.541983][ T8261] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 139.614829][ T8268] tracefs: Invalid gid '0x00000000ffffffff' [ 139.729208][ T5956] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 139.784068][ T78] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.795914][ T5957] usb 2-1: Firmware version (0.0) predates our first public release. [ 139.811789][ T5957] usb 2-1: Please update to version 0.2 or newer [ 139.821386][ T5957] usb 2-1: Firmware: build [ 139.896993][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 139.904420][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.916133][ T5956] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 139.926641][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.937584][ T5956] usb 3-1: config 0 descriptor?? [ 139.953692][ T8289] bond0: entered promiscuous mode [ 139.958943][ T8289] bond_slave_0: entered promiscuous mode [ 139.964732][ T8289] bond_slave_1: entered promiscuous mode [ 140.051093][ T5957] usb 2-1: USB disconnect, device number 13 [ 140.287006][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 140.304285][ T8297] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 140.354947][ T5956] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 140.377606][ T5956] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 140.387260][ T5956] hid-steam 0003:28DE:1102.000F: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 140.456131][ T5956] hid-steam 0003:28DE:1102.000F: Steam Controller 'XXXXXXXXXX' connected [ 140.472738][ T5956] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.000F/input/input17 [ 140.514472][ T5956] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0 [ 140.541004][ T5956] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0 [ 140.570530][ T5956] hid-steam 0003:28DE:1102.0010: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 140.704449][ T8306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.793161][ T8306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.028973][ T8313] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1011'. [ 141.041288][ T8313] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1011'. [ 141.118399][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 141.118415][ T30] audit: type=1400 audit(1757318121.748:451): avc: denied { read } for pid=8314 comm="syz.1.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.312074][ T30] audit: type=1400 audit(1757318121.938:452): avc: denied { getopt } for pid=8322 comm="syz.3.1016" lport=34615 faddr=::ffff:172.20.255.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 141.335567][ T8323] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1015'. [ 141.409514][ T8329] netlink: 'syz.1.1017': attribute type 1 has an invalid length. [ 141.417748][ T8329] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1017'. [ 141.805185][ T5850] Bluetooth: hci5: command 0x1003 tx timeout [ 141.805198][ T5171] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 142.150093][ T30] audit: type=1400 audit(1757318122.778:453): avc: denied { connect } for pid=8342 comm="syz.3.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.193981][ T30] audit: type=1400 audit(1757318122.798:454): avc: denied { getopt } for pid=8342 comm="syz.3.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.502965][ T24] usb 3-1: USB disconnect, device number 12 [ 142.568221][ T24] hid-steam 0003:28DE:1102.000F: Steam Controller 'XXXXXXXXXX' disconnected [ 142.587973][ T8360] syzkaller1: entered promiscuous mode [ 142.597864][ T8360] syzkaller1: entered allmulticast mode [ 142.614740][ T30] audit: type=1400 audit(1757318123.238:455): avc: denied { create } for pid=8361 comm="syz.0.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.646714][ T30] audit: type=1400 audit(1757318123.268:456): avc: denied { setopt } for pid=8361 comm="syz.0.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.669794][ T8364] netlink: 'syz.1.1032': attribute type 39 has an invalid length. [ 142.671366][ T30] audit: type=1400 audit(1757318123.268:457): avc: denied { write } for pid=8361 comm="syz.0.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.704104][ T5907] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 142.876638][ T5907] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.912351][ T5907] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.925697][ T5907] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.934727][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.180656][ T5907] usb 4-1: usb_control_msg returned -32 [ 143.186959][ T5907] usbtmc 4-1:16.0: can't read capabilities [ 143.259781][ T30] audit: type=1400 audit(1757318123.888:458): avc: denied { ioctl } for pid=8395 comm="syz.0.1046" path="socket:[21687]" dev="sockfs" ino=21687 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.324945][ T8401] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.411771][ T30] audit: type=1400 audit(1757318124.038:459): avc: denied { setopt } for pid=8406 comm="syz.1.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.784371][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'. [ 144.015254][ T30] audit: type=1400 audit(1757318124.638:460): avc: denied { read write } for pid=8433 comm="syz.1.1064" name="mouse0" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 144.169439][ T8445] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1068'. [ 144.303116][ T8451] loop6: detected capacity change from 0 to 524288000 [ 144.315620][ T8451] buffer_io_error: 358 callbacks suppressed [ 144.315635][ T8451] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.386675][ T8451] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.395445][ T8451] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.403402][ T8451] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.411824][ T8451] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.420231][ T8451] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.429139][ T8451] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.437303][ T8451] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.457865][ T8451] ldm_validate_partition_table(): Disk read failed. [ 144.473229][ T8451] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.497151][ T8451] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.505353][ T8451] Dev loop6: unable to read RDB block 0 [ 144.536541][ T8451] loop6: unable to read partition table [ 144.542622][ T8456] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 144.551774][ T8451] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 144.588920][ T6351] udevd[6351]: symlink '../../loop6' '/dev/disk/by-diskseq/75.tmp-b7:6' failed: Read-only file system [ 145.476335][ T5957] usb 4-1: USB disconnect, device number 15 [ 145.655095][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 145.817826][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 145.845747][ T24] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 145.861068][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.871678][ T24] usb 3-1: config 0 descriptor?? [ 146.095508][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 146.114150][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.129005][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 146.138116][ T24] usb 3-1: media controller created [ 146.169398][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.275466][ T5957] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 146.303558][ T24] az6027: usb out operation failed. (-71) [ 146.314826][ T24] az6027: usb out operation failed. (-71) [ 146.328341][ T24] stb0899_attach: Driver disabled by Kconfig [ 146.334807][ T24] az6027: no front-end attached [ 146.334807][ T24] [ 146.344702][ T24] az6027: usb out operation failed. (-71) [ 146.351857][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 146.371447][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 146.401427][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 146.418437][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 146.425575][ T5957] usb 2-1: Using ep0 maxpacket: 32 [ 146.440896][ T24] usb 3-1: USB disconnect, device number 13 [ 146.442917][ T5957] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 146.458564][ T5957] usb 2-1: config 0 has no interface number 0 [ 146.466858][ T5957] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 146.478373][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.504609][ T5957] usb 2-1: Product: syz [ 146.509105][ T5957] usb 2-1: Manufacturer: syz [ 146.513699][ T5957] usb 2-1: SerialNumber: syz [ 146.526493][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 146.539956][ T5957] usb 2-1: config 0 descriptor?? [ 146.554091][ T5957] smsc95xx v2.0.0 [ 146.683521][ T8541] syzkaller1: entered promiscuous mode [ 146.689435][ T8541] syzkaller1: entered allmulticast mode [ 146.906306][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 146.906322][ T30] audit: type=1400 audit(1757318127.538:465): avc: denied { setopt } for pid=8546 comm="syz.2.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 146.963034][ T5957] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 146.984664][ T30] audit: type=1400 audit(1757318127.608:466): avc: denied { watch } for pid=8548 comm="syz.3.1116" path="/232/file5" dev="tmpfs" ino=1226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 146.992976][ T5957] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 147.021218][ T30] audit: type=1400 audit(1757318127.608:467): avc: denied { watch_sb } for pid=8548 comm="syz.3.1116" path="/232/file5" dev="tmpfs" ino=1226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.449667][ T5957] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 147.475305][ T5957] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 147.492429][ T5957] usb 2-1: USB disconnect, device number 14 [ 147.510536][ T5900] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 147.607821][ T8567] loop8: detected capacity change from 0 to 8 [ 147.624811][ T8567] Dev loop8: unable to read RDB block 8 [ 147.631351][ T8567] loop8: unable to read partition table [ 147.637306][ T8567] loop8: partition table beyond EOD, truncated [ 147.643570][ T8567] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 147.662230][ T6351] udevd[6351]: symlink '../../loop8' '/dev/disk/by-diskseq/76.tmp-b7:8' failed: Read-only file system [ 147.675091][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 147.682610][ T5900] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.708484][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.728249][ T6351] udevd[6351]: symlink '../../loop8' '/dev/disk/by-diskseq/76.tmp-b7:8' failed: Read-only file system [ 147.740415][ T5900] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 147.758645][ T5900] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.764270][ T5861] udevd[5861]: symlink '../../loop8' '/dev/disk/by-diskseq/76.tmp-b7:8' failed: Read-only file system [ 147.768519][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 147.787264][ T5900] usb 4-1: SerialNumber: syz [ 147.795655][ T5900] hub 4-1:1.0: bad descriptor, ignoring hub [ 147.809956][ T5900] hub 4-1:1.0: probe with driver hub failed with error -5 [ 147.819056][ T5900] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 147.889926][ T30] audit: type=1400 audit(1757318128.518:468): avc: denied { setopt } for pid=8572 comm="syz.4.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 147.910325][ T30] audit: type=1400 audit(1757318128.518:469): avc: denied { write } for pid=8572 comm="syz.4.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.145702][ T5900] usb 4-1: USB disconnect, device number 16 [ 148.893427][ T8615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1145'. [ 148.906939][ T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 149.065381][ T24] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 149.076593][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.092415][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.112610][ T43] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 149.126911][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 149.136015][ T43] usb 4-1: SerialNumber: syz [ 149.157256][ T8627] syz.4.1151 (8627): drop_caches: 2 [ 149.170188][ T8627] syz.4.1151 (8627): drop_caches: 2 [ 149.205203][ T5900] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 149.218208][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.228688][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 149.242434][ T24] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 149.252890][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 149.261507][ T24] usb 3-1: Product: syz [ 149.266262][ T24] usb 3-1: Manufacturer: syz [ 149.270875][ T24] usb 3-1: SerialNumber: syz [ 149.289368][ T24] usb 3-1: config 0 descriptor?? [ 149.353885][ T43] usb 4-1: 0:2 : does not exist [ 149.365183][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 149.377655][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 149.389589][ T5900] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 149.391405][ T43] usb 4-1: USB disconnect, device number 17 [ 149.421299][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 149.444369][ T5900] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 149.470164][ T5900] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 149.489657][ T5900] usb 2-1: Product: syz [ 149.493835][ T5900] usb 2-1: Manufacturer: syz [ 149.504212][ T5900] usb 2-1: SerialNumber: syz [ 149.509641][ T5171] Bluetooth: hci4: Unable to find connection for big 0x00 [ 149.521834][ T5900] usb 2-1: config 0 descriptor?? [ 149.522968][ T24] usb 3-1: USB disconnect, device number 14 [ 149.729618][ T8647] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1160'. [ 149.839879][ T8650] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 149.839879][ T8650] The task syz.0.1161 (8650) triggered the difference, watch for misbehavior. [ 149.934526][ T30] audit: type=1400 audit(1757318130.558:470): avc: denied { connect } for pid=8653 comm="syz.3.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 149.958442][ T5900] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 150.249678][ T30] audit: type=1400 audit(1757318130.878:471): avc: denied { read } for pid=8664 comm="syz.3.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 150.301857][ T8667] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1168'. [ 150.583180][ T5900] usb 2-1: USB disconnect, device number 15 [ 151.384220][ T8687] syzkaller1: entered promiscuous mode [ 151.391263][ T8687] syzkaller1: entered allmulticast mode [ 151.445479][ T5957] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 151.620739][ T5957] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 151.621679][ T30] audit: type=1326 audit(1757318132.248:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8702 comm="syz.4.1182" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a5518ebe9 code=0x0 [ 151.629940][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.665729][ T5957] usb 3-1: Product: syz [ 151.669900][ T5957] usb 3-1: Manufacturer: syz [ 151.675208][ T5957] usb 3-1: SerialNumber: syz [ 151.682927][ T5957] usb 3-1: config 0 descriptor?? [ 151.693538][ T5957] gspca_main: sq930x-2.14.0 probing 2770:930c [ 151.743850][ T30] audit: type=1400 audit(1757318132.368:473): avc: denied { ioctl } for pid=8705 comm="syz.0.1183" path="uts:[4026532932]" dev="nsfs" ino=4026532932 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 151.795331][ T5900] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 151.945232][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 151.952129][ T5900] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 151.961684][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.972321][ T5900] usb 2-1: config 0 descriptor?? [ 151.983183][ T5900] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 152.009806][ T24] kernel write not supported for file /377/coredump_filter (pid: 24 comm: kworker/1:0) [ 152.221521][ T30] audit: type=1400 audit(1757318132.848:474): avc: denied { read } for pid=8727 comm="syz.0.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 152.506541][ T8738] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 152.605518][ T8746] vivid-004: disconnect [ 152.618257][ T8740] vivid-004: reconnect [ 152.776090][ T5957] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 152.782011][ T5957] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 152.812046][ T5957] usb 3-1: USB disconnect, device number 15 [ 152.909443][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 153.021699][ T5907] usb 2-1: USB disconnect, device number 16 [ 153.171127][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.182472][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.202395][ T10] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 153.221648][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.242753][ T10] usb 4-1: config 0 descriptor?? [ 153.744205][ T8770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1212'. [ 153.835136][ T5907] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 153.866795][ T30] audit: type=1400 audit(1757318134.498:475): avc: denied { mount } for pid=8778 comm="syz.2.1216" name="/" dev="ramfs" ino=22477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 154.025154][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 154.039366][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 154.056597][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 154.067848][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 154.078713][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 154.090020][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 154.111172][ T5907] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 154.127789][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.147860][ T5907] usb 2-1: Product: syz [ 154.166663][ T5907] usb 2-1: Manufacturer: syz [ 154.171290][ T5907] usb 2-1: SerialNumber: syz [ 154.186338][ T5907] usb 2-1: config 0 descriptor?? [ 154.304539][ T8796] pim6reg1: entered promiscuous mode [ 154.311848][ T8796] pim6reg1: entered allmulticast mode [ 154.313416][ T24] usb 4-1: USB disconnect, device number 18 [ 154.419097][ T30] audit: type=1400 audit(1757318135.048:476): avc: denied { create } for pid=8797 comm="syz.2.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.438775][ T30] audit: type=1400 audit(1757318135.048:477): avc: denied { connect } for pid=8797 comm="syz.2.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.619214][ T30] audit: type=1326 audit(1757318135.248:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.4.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5518ebe9 code=0x7fc00000 [ 154.815095][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 154.827599][ T5907] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 154.845554][ T5907] input input20: Device does not respond to id packet P [ 154.853251][ T5907] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 154.868537][ T5907] input input20: Device does not respond to id packet B [ 154.903092][ T5907] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 154.909387][ T5907] input input20: Device does not respond to id packet N [ 154.920053][ T5907] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 154.937564][ T5907] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 154.945127][ T5907] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 154.958785][ T5907] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 154.979518][ T5907] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20 [ 154.997238][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 155.007863][ T24] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 155.017826][ T24] usb 3-1: config 0 has no interface number 0 [ 155.023929][ T24] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 155.040838][ T5907] usb 2-1: USB disconnect, device number 17 [ 155.055138][ T24] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 155.086506][ T24] usb 3-1: config 0 interface 126 has no altsetting 0 [ 155.096467][ T24] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 155.122020][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.141887][ T24] usb 3-1: Product: syz [ 155.149146][ T24] usb 3-1: Manufacturer: syz [ 155.153909][ T24] usb 3-1: SerialNumber: syz [ 155.171759][ T24] usb 3-1: config 0 descriptor?? [ 155.179918][ T8804] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 155.187316][ T8804] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 155.205820][ T5921] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 155.365085][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 155.371640][ T5921] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 155.381392][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.399203][ T5921] usb 5-1: config 0 descriptor?? [ 155.428567][ T30] audit: type=1400 audit(1757318136.058:479): avc: denied { open } for pid=8833 comm="syz.3.1239" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 155.615497][ T5921] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 155.627768][ T24] ir_usb 3-1:0.126: IR Dongle converter detected [ 155.648298][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.669455][ T5921] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 155.685155][ T5921] usb 5-1: media controller created [ 155.706107][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.716076][ T30] audit: type=1326 audit(1757318136.348:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8840 comm="syz.1.1242" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66ae38ebe9 code=0x0 [ 155.822072][ T5921] az6027: usb out operation failed. (-71) [ 155.828528][ T5921] az6027: usb out operation failed. (-71) [ 155.836530][ T24] usb 3-1: IR Dongle converter now attached to ttyUSB0 [ 155.845728][ T5921] stb0899_attach: Driver disabled by Kconfig [ 155.851709][ T5921] az6027: no front-end attached [ 155.851709][ T5921] [ 155.865189][ T5921] az6027: usb out operation failed. (-71) [ 155.870919][ T5921] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 155.887828][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 155.923140][ T5921] dvb-usb: schedule remote query interval to 400 msecs. [ 155.932094][ T5921] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 155.943800][ T5921] usb 5-1: USB disconnect, device number 12 [ 155.974545][ T5921] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 156.031600][ T8846] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1243'. [ 156.047147][ T24] usb 3-1: USB disconnect, device number 16 [ 156.069580][ T24] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 156.083943][ T24] ir_usb 3-1:0.126: device disconnected [ 156.259432][ T8850] overlayfs: failed to clone lowerpath [ 156.355237][ T5907] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 156.521935][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.543145][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.552295][ T30] audit: type=1400 audit(1757318137.178:481): avc: denied { setattr } for pid=8853 comm="syz.0.1247" name="UDP-Lite" dev="sockfs" ino=23753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.560278][ T5907] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 156.605843][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.627560][ T5907] usb 4-1: config 0 descriptor?? [ 156.735184][ T5957] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 156.917818][ T8882] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1260'. [ 156.921597][ T5957] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.935071][ T8882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1260'. [ 156.941468][ T5957] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.960152][ T5957] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 156.972909][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 156.991029][ T5957] usb 2-1: SerialNumber: syz [ 157.070635][ T5907] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 157.080794][ T5907] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 157.088681][ T5907] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 157.099027][ T5907] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 157.106569][ T5907] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 157.113745][ T5907] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 157.123840][ T5907] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 157.137992][ T5907] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 157.209605][ T5957] usb 2-1: 0:2 : does not exist [ 157.232815][ T5957] usb 2-1: USB disconnect, device number 18 [ 157.258036][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.275358][ T5907] cp2112 0003:10C4:EA90.0012: Part Number: 0x00 Device Version: 0x00 [ 157.530053][ T30] audit: type=1400 audit(1757318138.158:482): avc: denied { write } for pid=8900 comm="syz.0.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.614285][ T8905] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1271'. [ 157.632387][ T8905] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1271'. [ 157.682447][ T5907] cp2112 0003:10C4:EA90.0012: error setting SMBus config [ 157.706568][ T5907] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -71 [ 157.738991][ T5907] usb 4-1: USB disconnect, device number 19 [ 157.750532][ T5957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5957 comm=kworker/0:6 [ 157.752256][ T30] audit: type=1400 audit(1757318138.378:483): avc: denied { mounton } for pid=8911 comm="syz.0.1274" path="/syzcgroup/net/syz0/devices.allow" dev="cgroup" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 157.779193][ T8912] 9pnet: p9_errstr2errno: server reported unknown error ÷e¸ [ 157.890372][ T8916] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1276'. [ 158.205078][ T5956] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 158.259735][ T30] audit: type=1326 audit(1757318138.888:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.0.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c58ebe9 code=0x7ffc0000 [ 158.311662][ T30] audit: type=1326 audit(1757318138.888:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.0.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c58ebe9 code=0x7ffc0000 [ 158.335365][ T30] audit: type=1326 audit(1757318138.888:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.0.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e9c58ebe9 code=0x7ffc0000 [ 158.360987][ T30] audit: type=1326 audit(1757318138.888:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.0.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c58ebe9 code=0x7ffc0000 [ 158.390786][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 158.397441][ T8936] netlink: 83 bytes leftover after parsing attributes in process `syz.3.1286'. [ 158.400609][ T30] audit: type=1326 audit(1757318138.888:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.0.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c58ebe9 code=0x7ffc0000 [ 158.451751][ T5956] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 158.473558][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.482232][ T30] audit: type=1326 audit(1757318138.888:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.0.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e9c58ebe9 code=0x7ffc0000 [ 158.505717][ T5956] usb 3-1: Product: syz [ 158.510235][ T5956] usb 3-1: Manufacturer: syz [ 158.525293][ T5956] usb 3-1: SerialNumber: syz [ 158.539478][ T5956] usb 3-1: config 0 descriptor?? [ 158.545393][ T30] audit: type=1326 audit(1757318138.888:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.0.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c58ebe9 code=0x7ffc0000 [ 158.576925][ T30] audit: type=1326 audit(1757318138.888:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.0.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c58ebe9 code=0x7ffc0000 [ 158.979144][ T5956] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 158.992322][ T5956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 159.004178][ T5956] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 159.044968][ T5956] usb 3-1: media controller created [ 159.088460][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.181792][ T5956] zl10353_read_register: readreg error (reg=127, ret==0) [ 159.205087][ T5956] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 159.229988][ T5956] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 159.256803][ T5956] usb 3-1: USB disconnect, device number 17 [ 159.303323][ T8974] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.317441][ T5956] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 159.725097][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 159.900433][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.911580][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.922031][ T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 159.932643][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.948952][ T24] usb 5-1: config 0 descriptor?? [ 160.373495][ T24] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x1 [ 160.382191][ T24] cm6533_jd 0003:0D8C:0022.0013: item fetching failed at offset 4/5 [ 160.390855][ T24] cm6533_jd 0003:0D8C:0022.0013: parse failed [ 160.398484][ T24] cm6533_jd 0003:0D8C:0022.0013: probe with driver cm6533_jd failed with error -22 [ 160.500755][ T9002] binder: 9001:9002 ioctl c0306201 0 returned -14 [ 160.573291][ T5956] usb 5-1: USB disconnect, device number 13 [ 160.742992][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1322'. [ 160.787760][ T9023] syzkaller1: entered promiscuous mode [ 160.793238][ T9023] syzkaller1: entered allmulticast mode [ 160.875356][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 160.955166][ T5921] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 161.028063][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.041200][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 161.053950][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.064817][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.082719][ T9013] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 161.107695][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.116268][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 161.130502][ T5921] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 161.144644][ T5921] usb 3-1: config 0 has no interface number 0 [ 161.164482][ T5921] usb 3-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=fe.8f [ 161.177516][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.191436][ T9031] loop2: detected capacity change from 0 to 7 [ 161.201593][ T6352] Dev loop2: unable to read RDB block 7 [ 161.208194][ T5921] usb 3-1: Product: syz [ 161.208513][ T6352] loop2: AHDI p1 p2 [ 161.212358][ T5921] usb 3-1: Manufacturer: syz [ 161.212374][ T5921] usb 3-1: SerialNumber: syz [ 161.218954][ T6352] loop2: partition table partially beyond EOD, truncated [ 161.238195][ T5921] usb 3-1: config 0 descriptor?? [ 161.250803][ T6352] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 161.276825][ T9031] Dev loop2: unable to read RDB block 7 [ 161.282464][ T9031] loop2: AHDI p1 p2 [ 161.287281][ T9031] loop2: partition table partially beyond EOD, truncated [ 161.294496][ T9031] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 161.339713][ T9013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.342575][ T6352] udevd[6352]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 161.373326][ T9013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.393639][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 161.400656][ T10] usb 2-1: USB disconnect, device number 19 [ 161.443603][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 161.467900][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 161.479059][ T5957] usb 3-1: USB disconnect, device number 18 [ 161.495083][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 161.498255][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 161.519621][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 161.542144][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 161.665280][ T5921] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 161.674615][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.685603][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.695350][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 161.704343][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.713769][ T24] usb 5-1: config 0 descriptor?? [ 161.818745][ T5921] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 161.827879][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.836397][ T5921] usb 4-1: Product: syz [ 161.840565][ T5921] usb 4-1: Manufacturer: syz [ 161.845170][ T5921] usb 4-1: SerialNumber: syz [ 161.851114][ T5921] usb 4-1: config 0 descriptor?? [ 162.012891][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 162.024443][ T9039] block nbd2: not configured, cannot reconfigure [ 162.065865][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 162.112759][ T5921] usb 4-1: USB disconnect, device number 20 [ 162.138983][ T24] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 162.319208][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 162.733035][ T24] pyra 0003:1E7D:2CF6.0014: couldn't init struct pyra_device [ 162.743200][ T24] pyra 0003:1E7D:2CF6.0014: couldn't install mouse [ 162.757240][ T24] pyra 0003:1E7D:2CF6.0014: probe with driver pyra failed with error -71 [ 162.769587][ T24] usb 5-1: USB disconnect, device number 14 [ 163.333162][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 163.606891][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 163.720831][ T9079] loop7: detected capacity change from 0 to 7 [ 163.729927][ T9079] Dev loop7: unable to read RDB block 7 [ 163.736506][ T9079] loop7: unable to read partition table [ 163.742303][ T9079] loop7: partition table beyond EOD, truncated [ 163.755615][ T9079] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 163.768517][ T5861] udevd[5861]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 163.799033][ T5861] udevd[5861]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 163.810063][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 163.824271][ T24] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 163.839561][ T24] usb 3-1: config 127 has no interface number 1 [ 163.854523][ T5861] udevd[5861]: symlink '../../loop7' '/dev/disk/by-diskseq/80.tmp-b7:7' failed: Read-only file system [ 163.865748][ T24] usb 3-1: config 127 interface 0 altsetting 10 endpoint 0x4 has invalid wMaxPacketSize 0 [ 163.876895][ T24] usb 3-1: config 127 interface 171 has no altsetting 0 [ 163.898455][ T24] usb 3-1: config 127 interface 0 has no altsetting 0 [ 163.907291][ T24] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 163.925376][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.936811][ T24] usb 3-1: Product: syz [ 163.942175][ T24] usb 3-1: Manufacturer: syz [ 163.947074][ T24] usb 3-1: SerialNumber: syz [ 164.032036][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 164.032049][ T30] audit: type=1400 audit(1757318144.658:501): avc: denied { setopt } for pid=9086 comm="syz.3.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.105122][ T30] audit: type=1400 audit(1757318144.698:502): avc: denied { read } for pid=9086 comm="syz.3.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.180689][ T24] xr_serial 3-1:127.171: xr_serial converter detected [ 164.212128][ T24] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 164.227039][ T24] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 164.258901][ T24] usb 3-1: USB disconnect, device number 19 [ 164.278744][ T24] xr_serial 3-1:127.171: device disconnected [ 164.373890][ T9098] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 164.418954][ T30] audit: type=1400 audit(1757318145.048:503): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 164.661969][ T9115] loop5: detected capacity change from 0 to 2927 [ 164.684134][ T30] audit: type=1326 audit(1757318145.308:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9112 comm="syz.4.1364" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a5518ebe9 code=0x0 [ 164.725932][ T9118] loop5: detected capacity change from 2927 to 5215 [ 164.738958][ T9117] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005 [ 164.761701][ T6351] udevd[6351]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 164.777245][ T30] audit: type=1400 audit(1757318145.388:505): avc: denied { append } for pid=9119 comm="syz.3.1366" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 164.810627][ T5861] udevd[5861]: symlink '../../loop5' '/dev/disk/by-diskseq/82.tmp-b7:5' failed: Read-only file system [ 164.894610][ T5861] buffer_io_error: 7 callbacks suppressed [ 164.894627][ T5861] Buffer I/O error on dev loop5, logical block 651, async page read [ 164.906264][ T6351] udevd[6351]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 164.942892][ T5861] udevd[5861]: symlink '../../loop5' '/dev/disk/by-diskseq/82.tmp-b7:5' failed: Read-only file system [ 165.002294][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 165.016700][ T9129] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 165.043421][ T9129] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 165.679984][ T9151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1377'. [ 165.739325][ T30] audit: type=1400 audit(1757318146.368:506): avc: denied { listen } for pid=9153 comm="syz.4.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.779827][ T30] audit: type=1400 audit(1757318146.388:507): avc: denied { accept } for pid=9153 comm="syz.4.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.862322][ T5957] Process accounting resumed [ 165.991936][ T5921] IPVS: starting estimator thread 0... [ 166.086739][ T9174] IPVS: using max 38 ests per chain, 91200 per kthread [ 166.151600][ T9186] ieee802154 phy1 wpan1: encryption failed: -22 [ 166.220737][ T30] audit: type=1400 audit(1757318146.848:508): avc: denied { write } for pid=9191 comm="syz.2.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.262095][ T9194] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1395'. [ 166.409627][ T30] audit: type=1400 audit(1757318147.038:509): avc: denied { wake_alarm } for pid=9203 comm="syz.1.1401" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.528471][ T30] audit: type=1400 audit(1757318147.158:510): avc: denied { mounton } for pid=9211 comm="syz.1.1406" path=2F3239352FE91F7189591E9233614B dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 166.565114][ T5957] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 166.725111][ T5957] usb 4-1: Using ep0 maxpacket: 32 [ 166.731661][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 166.742909][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 166.753448][ T5957] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 166.772031][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 166.785132][ T5957] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 166.794799][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.803051][ T5957] usb 4-1: Product: syz [ 166.807346][ T5957] usb 4-1: Manufacturer: syz [ 166.811931][ T5957] usb 4-1: SerialNumber: syz [ 166.820903][ T5957] usb 4-1: config 0 descriptor?? [ 166.828695][ T5957] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22 [ 166.845993][ T10] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 167.017988][ T10] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 167.026714][ T10] usb 2-1: config 0 has no interface number 0 [ 167.034629][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 167.044704][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.053405][ T10] usb 2-1: Product: syz [ 167.055646][ T5921] usb 4-1: USB disconnect, device number 21 [ 167.057631][ T10] usb 2-1: Manufacturer: syz [ 167.071185][ T10] usb 2-1: SerialNumber: syz [ 167.083687][ T10] usb 2-1: config 0 descriptor?? [ 167.373563][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 167.421389][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 167.499780][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 167.551725][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 167.623099][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 167.682356][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 167.835987][ T5921] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 167.848647][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 167.901206][ T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x44 [ 167.948452][ T6351] udevd[6351]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 168.006857][ T5921] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 168.019113][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 168.035280][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 168.057911][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 168.095394][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 168.104779][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 168.113812][ T24] usb 2-1: USB disconnect, device number 20 [ 168.137011][ T5921] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.160370][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.180293][ T5921] usb 5-1: config 0 descriptor?? [ 168.186030][ T9231] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 168.603691][ T5921] plantronics 0003:047F:FFFF.0015: reserved main item tag 0xd [ 168.616649][ T5921] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 168.828202][ T24] usb 5-1: USB disconnect, device number 15 [ 169.369651][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 169.369668][ T30] audit: type=1400 audit(1757318149.998:512): avc: denied { write } for pid=9296 comm="syz.4.1443" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 169.461348][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1445'. [ 169.498772][ T30] audit: type=1400 audit(1757318150.108:513): avc: denied { mount } for pid=9300 comm="syz.2.1444" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 169.914441][ T30] audit: type=1400 audit(1757318150.538:514): avc: denied { mounton } for pid=9320 comm="syz.0.1454" path="/250/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 170.022957][ T30] audit: type=1400 audit(1757318150.648:515): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 170.181916][ T9336] usb usb8: usbfs: process 9336 (syz.0.1461) did not claim interface 0 before use [ 170.244098][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'. [ 170.257685][ T30] audit: type=1400 audit(1757318150.888:516): avc: denied { append } for pid=9340 comm="syz.1.1462" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 170.311830][ T24] kernel read not supported for file /admmidi2 (pid: 24 comm: kworker/1:0) [ 170.396325][ T9344] netlink: 'syz.3.1464': attribute type 2 has an invalid length. [ 170.455360][ T9344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1464'. [ 170.598900][ T30] audit: type=1400 audit(1757318151.228:517): avc: denied { read } for pid=9355 comm="syz.1.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 170.649705][ T9352] block nbd4: Send control failed (result -32) [ 170.661720][ T9352] block nbd4: Request send failed, requeueing [ 170.673128][ T94] block nbd4: Dead connection, failed to find a fallback [ 170.681486][ T94] block nbd4: shutting down sockets [ 170.687476][ T94] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.699037][ T9352] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.709415][ T9352] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 170.720396][ T9352] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.730143][ T9352] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 170.742490][ T9352] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.765485][ T9352] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.791836][ T9352] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 170.818557][ T9352] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.844121][ T9352] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 170.867981][ T9352] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.880787][ T9352] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.892237][ T9352] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 170.904627][ T9352] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.917474][ T9352] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 170.928812][ T9352] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.941516][ T9352] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 170.954923][ T9352] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 170.969752][ T9352] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 170.997617][ T30] audit: type=1400 audit(1757318151.608:518): avc: denied { mounton } for pid=9366 comm="syz.3.1475" path="/proc/669/task" dev="proc" ino=25566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 171.067725][ T5921] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 171.235310][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 171.246502][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.267963][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.289462][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.316920][ T5921] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 171.327413][ T6002] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 171.342894][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.356476][ T5921] usb 2-1: config 0 descriptor?? [ 171.391200][ T9383] IPv4: Oversized IP packet from 127.202.26.0 [ 171.490733][ T6002] usb 4-1: Using ep0 maxpacket: 8 [ 171.497982][ T6002] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.510286][ T6002] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.522051][ T6002] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.542438][ T6002] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.574255][ T6002] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.602815][ T6002] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.636320][ T9393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.802398][ T5921] HID 045e:07da: Invalid code 65791 type 1 [ 171.811202][ T5921] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0016/input/input24 [ 171.833525][ T6002] usb 4-1: usb_control_msg returned -32 [ 171.840278][ T6002] usbtmc 4-1:16.0: can't read capabilities [ 171.847480][ T5921] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 171.878914][ T6002] usb 4-1: USB disconnect, device number 22 [ 172.021782][ T10] usb 2-1: USB disconnect, device number 21 [ 172.095338][ T30] audit: type=1400 audit(1757318152.728:519): avc: denied { setopt } for pid=9401 comm="syz.4.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.424332][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 172.570251][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 172.741957][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 172.765360][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 172.928331][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 172.960464][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.984946][ T10] usb 5-1: config 0 descriptor?? [ 173.004166][ T10] cp210x 5-1:0.0: cp210x converter detected [ 173.039966][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 173.083859][ T9440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.161120][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 173.418873][ T10] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 173.437545][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 173.638272][ T10] usb 5-1: USB disconnect, device number 16 [ 173.650996][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 173.672766][ T10] cp210x 5-1:0.0: device disconnected [ 174.369158][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 174.380990][ T30] audit: type=1400 audit(1757318154.998:520): avc: denied { bind } for pid=9479 comm="syz.4.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 174.440422][ T30] audit: type=1400 audit(1757318154.998:521): avc: denied { listen } for pid=9479 comm="syz.4.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 174.488181][ T30] audit: type=1400 audit(1757318154.998:522): avc: denied { write } for pid=9479 comm="syz.4.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 174.501772][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 174.603496][ T9492] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1529'. [ 174.795191][ T6002] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 174.946507][ T6002] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.963192][ T6002] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 174.984066][ T6002] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.007282][ T6002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.033892][ T6002] usb 3-1: Product: syz [ 175.039120][ T6002] usb 3-1: Manufacturer: syz [ 175.051133][ T6002] usb 3-1: SerialNumber: syz [ 175.069489][ T6002] cdc_mbim 3-1:1.0: skipping garbage [ 175.102049][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 175.281700][ T9489] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 175.419399][ T30] audit: type=1400 audit(1757318156.048:523): avc: denied { accept } for pid=9525 comm="syz.1.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 175.489904][ T30] audit: type=1400 audit(1757318156.118:524): avc: denied { listen } for pid=9525 comm="syz.1.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 175.491022][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 175.509235][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.581191][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 175.752780][ T9535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1548'. [ 175.946840][ T9489] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 175.966547][ T6002] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 175.983378][ T6002] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 176.007357][ T6002] wwan wwan0: port wwan0mbim0 attached [ 176.074635][ T6002] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, a2:fd:0c:a5:42:ba [ 176.118286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 176.141767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 176.150335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 176.159557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 176.168739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 176.262588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #241!!! [ 176.272762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 176.281413][ T10] usb 3-1: USB disconnect, device number 20 [ 176.298736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 176.308166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 176.323572][ T10] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 176.351735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 176.645413][ T9551] netlink: 'syz.3.1554': attribute type 4 has an invalid length. [ 176.703853][ T9553] netlink: 'syz.3.1554': attribute type 4 has an invalid length. [ 176.923549][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 177.181675][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 177.422385][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 177.648221][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 178.049876][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 178.222157][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 179.139711][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 179.285112][ T5921] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 179.332880][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 179.421432][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 179.456110][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 179.466464][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.487849][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.519766][ T5921] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 179.561696][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.591599][ T5921] usb 2-1: config 0 descriptor?? [ 179.606642][ T5921] hub 2-1:0.0: USB hub found [ 179.817030][ T5921] hub 2-1:0.0: 1 port detected [ 180.052755][ T9697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.132737][ T30] audit: type=1400 audit(1757318160.758:525): avc: denied { mounton } for pid=9696 comm="syz.4.1601" path="/352/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 180.144302][ T9698] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 180.255095][ T6002] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 180.447454][ T5921] hub 2-1:0.0: activate --> -90 [ 180.526559][ T6002] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 180.534693][ T6002] usb 3-1: config 0 has no interface number 0 [ 180.569852][ T6002] usb 3-1: too many endpoints for config 0 interface 32 altsetting 32: 32, using maximum allowed: 30 [ 180.599814][ T6002] usb 3-1: config 0 interface 32 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 180.631311][ T6002] usb 3-1: config 0 interface 32 has no altsetting 0 [ 180.657267][ T6002] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 180.667862][ T6002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.680792][ T6002] usb 3-1: Product: syz [ 180.684986][ T6002] usb 3-1: Manufacturer: syz [ 180.689779][ T6002] usb 3-1: SerialNumber: syz [ 180.704760][ T6002] usb 3-1: config 0 descriptor?? [ 180.849186][ T5921] usb 2-1-port1: config error [ 180.849633][ T10] usb 2-1: USB disconnect, device number 22 [ 180.866156][ T5921] usb 2-1-port1: attempt power cycle [ 180.900794][ T9725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1613'. [ 180.941773][ T6002] usb 3-1: USB disconnect, device number 21 [ 181.194657][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1618'. [ 181.623006][ T30] audit: type=1326 audit(1757318162.248:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c58ebe9 code=0x7fc00000 [ 181.700522][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 181.782552][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 182.074573][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 182.083910][ T30] audit: type=1400 audit(1757318162.698:527): avc: denied { read write } for pid=9775 comm="syz.1.1636" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.192693][ T30] audit: type=1400 audit(1757318162.698:528): avc: denied { open } for pid=9775 comm="syz.1.1636" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.238622][ T30] audit: type=1400 audit(1757318162.698:529): avc: denied { map } for pid=9775 comm="syz.1.1636" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.295203][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 182.353875][ T30] audit: type=1400 audit(1757318162.698:530): avc: denied { execute } for pid=9775 comm="syz.1.1636" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.398488][ T30] audit: type=1326 audit(1757318162.908:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e9c52adb9 code=0x7fc00000 [ 182.431606][ T30] audit: type=1400 audit(1757318162.938:532): avc: denied { ioctl } for pid=9775 comm="syz.1.1636" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.814681][ T9789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.065180][ T5957] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 183.235226][ T5957] usb 5-1: Using ep0 maxpacket: 32 [ 183.241783][ T5957] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 183.250438][ T5957] usb 5-1: config 0 has no interface number 0 [ 183.260126][ T5957] usb 5-1: config 0 interface 184 has no altsetting 0 [ 183.271184][ T5957] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 183.280761][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.289012][ T5957] usb 5-1: Product: syz [ 183.293589][ T5957] usb 5-1: Manufacturer: syz [ 183.298463][ T5957] usb 5-1: SerialNumber: syz [ 183.314366][ T5957] usb 5-1: config 0 descriptor?? [ 183.337478][ T5957] smsc75xx v1.0.0 [ 183.591023][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 183.645093][ T5921] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 183.670190][ T6351] udevd[6351]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 183.742639][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 183.827468][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 183.838633][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 183.856068][ T5921] usb 2-1: unable to get BOS descriptor or descriptor too short [ 183.872899][ T5921] usb 2-1: config 1 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.894080][ T5921] usb 2-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 57943, setting to 1024 [ 183.915365][ T5921] usb 2-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.931910][ T5861] udevd[5861]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 183.943486][ T5921] usb 2-1: config 1 interface 0 has no altsetting 0 [ 183.958901][ T5921] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 183.969138][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.979058][ T5921] usb 2-1: Product: syz [ 183.983230][ T5921] usb 2-1: Manufacturer: syz [ 183.991384][ T5921] usb 2-1: SerialNumber: syz [ 184.053219][ T6351] udevd[6351]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 184.140191][ T6351] udevd[6351]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 184.400957][ T9838] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7eb pfn:0x7c68a [ 184.410677][ T9838] memcg:ffff8881404c1a00 [ 184.415104][ T9838] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 184.422852][ T9838] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 184.431969][ T9838] raw: 00000000000007eb 0000000000000000 00000001ffffffff ffff8881404c1a00 [ 184.440817][ T9838] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 184.457478][ T9838] page_owner tracks the page as allocated [ 184.464619][ T9838] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 9838, tgid 9836 (syz.3.1662), ts 184400933251, free_ts 184384938640 [ 184.489213][ T30] audit: type=1400 audit(1757318165.118:533): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.489650][ T9838] post_alloc_hook+0x1c0/0x230 [ 184.523349][ T9838] get_page_from_freelist+0x132b/0x38e0 [ 184.529379][ T9838] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 184.542466][ T9838] alloc_pages_mpol+0x1fb/0x550 [ 184.548159][ T9838] folio_alloc_noprof+0x20/0x2d0 [ 184.553140][ T9838] filemap_alloc_folio_noprof+0x3a1/0x470 [ 184.561964][ T9838] page_cache_ra_order+0x4e1/0xd70 [ 184.568289][ T9838] filemap_fault+0x152e/0x2930 [ 184.573084][ T9838] __do_fault+0x10d/0x490 [ 184.577890][ T5957] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 184.582066][ T9838] do_pte_missing+0xf50/0x3ba0 [ 184.590289][ T5957] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 184.594732][ T9838] __handle_mm_fault+0x152a/0x2a50 [ 184.603343][ T5957] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 184.610653][ T9838] handle_mm_fault+0x589/0xd10 [ 184.619437][ T5957] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 184.624060][ T9838] __get_user_pages+0x551/0x34a0 [ 184.633517][ T5957] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 184.640928][ T9838] populate_vma_page_range+0x267/0x3f0 [ 184.648991][ T5957] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 184.654236][ T9838] __mm_populate+0x1d8/0x380 [ 184.664110][ T5957] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 184.679389][ T9838] vm_mmap_pgoff+0x37f/0x470 [ 184.684023][ T9838] page last free pid 9837 tgid 9836 stack trace: [ 184.689510][ T5957] usb 5-1: USB disconnect, device number 17 [ 184.706333][ T9838] free_unref_folios+0xa61/0x16b0 [ 184.711920][ T9838] folios_put_refs+0x56f/0x740 [ 184.717134][ T9838] truncate_inode_pages_range+0x311/0xe50 [ 184.723001][ T9838] set_blocksize+0x2b8/0x500 [ 184.727776][ T9838] blkdev_bszset+0x19b/0x240 [ 184.732397][ T9838] blkdev_ioctl+0x44e/0x6d0 [ 184.733176][ T6351] udevd[6351]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 184.737062][ T9838] __x64_sys_ioctl+0x18b/0x210 [ 184.737090][ T9838] do_syscall_64+0xcd/0x4c0 [ 184.761042][ T9838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.771055][ T9838] ------------[ cut here ]------------ [ 184.776565][ T9838] kernel BUG at mm/filemap.c:867! [ 184.781932][ T9838] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 184.788342][ T9838] CPU: 0 UID: 0 PID: 9838 Comm: syz.3.1662 Not tainted syzkaller #0 PREEMPT(full) [ 184.797601][ T9838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.807630][ T9838] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 184.813596][ T9838] Code: 77 c8 ff 48 c7 c6 60 24 b9 8b 4c 89 ef e8 9d 28 11 00 90 0f 0b e8 a5 77 c8 ff 48 c7 c6 c0 24 b9 8b 4c 89 ef e8 86 28 11 00 90 <0f> 0b e8 8e 77 c8 ff 90 0f 0b 90 e9 f2 fb ff ff e8 80 77 c8 ff 48 [ 184.833179][ T9838] RSP: 0018:ffffc9000455f460 EFLAGS: 00010246 [ 184.839221][ T9838] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000d27c000 [ 184.847187][ T9838] RDX: 0000000000080000 RSI: ffffffff81f3173a RDI: ffff888025e32884 [ 184.855142][ T9838] RBP: 0000000000112c00 R08: 0000000000000001 R09: 0000000000000001 [ 184.863088][ T9838] R10: ffffffff90ab6b97 R11: 0000000000000000 R12: 0000000000000002 [ 184.871047][ T9838] R13: ffffea0001f1a280 R14: 0000000000000000 R15: 000000000002c928 [ 184.878997][ T9838] FS: 00007fdea81d56c0(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 184.887905][ T9838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.894468][ T9838] CR2: 000055556fa51808 CR3: 000000007a8c7000 CR4: 00000000003526f0 [ 184.902416][ T9838] DR0: 0000000000009000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.910364][ T9838] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 184.918324][ T9838] Call Trace: [ 184.921580][ T9838] [ 184.924490][ T9838] ? rcu_is_watching+0x12/0xc0 [ 184.929240][ T9838] ? __pfx___filemap_add_folio+0x10/0x10 [ 184.934860][ T9838] filemap_add_folio+0x10e/0x220 [ 184.939776][ T9838] ? __pfx_filemap_add_folio+0x10/0x10 [ 184.945214][ T9838] ? css_rstat_updated+0x1c2/0x510 [ 184.950316][ T9838] page_cache_ra_order+0x5a7/0xd70 [ 184.955420][ T9838] filemap_fault+0x152e/0x2930 [ 184.960172][ T9838] ? __pfx_filemap_fault+0x10/0x10 [ 184.965277][ T9838] ? __pfx_filemap_map_pages+0x10/0x10 [ 184.970811][ T9838] __do_fault+0x10d/0x490 [ 184.975134][ T9838] ? __pfx_filemap_map_pages+0x10/0x10 [ 184.980583][ T9838] do_pte_missing+0xf50/0x3ba0 [ 184.985334][ T9838] ? mtree_range_walk+0x718/0xc00 [ 184.990339][ T9838] ? find_held_lock+0x2b/0x80 [ 184.994999][ T9838] __handle_mm_fault+0x152a/0x2a50 [ 185.000101][ T9838] ? __pfx___handle_mm_fault+0x10/0x10 [ 185.005549][ T9838] ? lockdep_hardirqs_on+0x7c/0x110 [ 185.010732][ T9838] handle_mm_fault+0x589/0xd10 [ 185.015485][ T9838] __get_user_pages+0x551/0x34a0 [ 185.020409][ T9838] ? __pfx___get_user_pages+0x10/0x10 [ 185.025768][ T9838] populate_vma_page_range+0x267/0x3f0 [ 185.031211][ T9838] ? __pfx_populate_vma_page_range+0x10/0x10 [ 185.037171][ T9838] ? __pfx_find_vma_intersection+0x10/0x10 [ 185.043043][ T9838] ? do_mmap+0x69c/0x1210 [ 185.047356][ T9838] __mm_populate+0x1d8/0x380 [ 185.051930][ T9838] ? __pfx___mm_populate+0x10/0x10 [ 185.057022][ T9838] ? up_write+0x1b2/0x520 [ 185.061332][ T9838] vm_mmap_pgoff+0x37f/0x470 [ 185.065906][ T9838] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 185.070998][ T9838] ? __fget_files+0x20e/0x3c0 [ 185.075655][ T9838] ksys_mmap_pgoff+0x32c/0x5c0 [ 185.080402][ T9838] __x64_sys_mmap+0x125/0x190 [ 185.085056][ T9838] do_syscall_64+0xcd/0x4c0 [ 185.089547][ T9838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.095427][ T9838] RIP: 0033:0x7fdea9f8ebe9 [ 185.099827][ T9838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.119426][ T9838] RSP: 002b:00007fdea81d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 185.127829][ T9838] RAX: ffffffffffffffda RBX: 00007fdeaa1c6090 RCX: 00007fdea9f8ebe9 [ 185.135780][ T9838] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 185.143738][ T9838] RBP: 00007fdeaa011e19 R08: 0000000000000004 R09: 000000002c93a000 [ 185.151703][ T9838] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 185.159679][ T9838] R13: 00007fdeaa1c6128 R14: 00007fdeaa1c6090 R15: 00007fffa2989508 [ 185.167637][ T9838] [ 185.170634][ T9838] Modules linked in: [ 185.174558][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.181255][ T9838] ---[ end trace 0000000000000000 ]--- [ 185.208029][ T9838] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 185.210057][ T6351] udevd[6351]: symlink '../../loop2' '/dev/disk/by-diskseq/79.tmp-b7:2' failed: Read-only file system [ 185.214290][ T9838] Code: 77 c8 ff 48 c7 c6 60 24 b9 8b 4c 89 ef e8 9d 28 11 00 90 0f 0b e8 a5 77 c8 ff 48 c7 c6 c0 24 b9 8b 4c 89 ef e8 86 28 11 00 90 <0f> 0b e8 8e 77 c8 ff 90 0f 0b 90 e9 f2 fb ff ff e8 80 77 c8 ff 48 [ 185.245167][ T9838] RSP: 0018:ffffc9000455f460 EFLAGS: 00010246 [ 185.251335][ T9838] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000d27c000 [ 185.259381][ T9838] RDX: 0000000000080000 RSI: ffffffff81f3173a RDI: ffff888025e32884 [ 185.267537][ T9838] RBP: 0000000000112c00 R08: 0000000000000001 R09: 0000000000000001 [ 185.275847][ T9838] R10: ffffffff90ab6b97 R11: 0000000000000000 R12: 0000000000000002 [ 185.284104][ T9838] R13: ffffea0001f1a280 R14: 0000000000000000 R15: 000000000002c928 [ 185.292370][ T9838] FS: 00007fdea81d56c0(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 185.301343][ T9838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.308087][ T9838] CR2: 0000001b32404ff8 CR3: 000000007a8c7000 CR4: 00000000003526f0 [ 185.316536][ T9838] DR0: 0000000000009000 DR1: 0000000000000000 DR2: 0000000000000000 [ 185.324593][ T9838] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 185.332746][ T9838] Kernel panic - not syncing: Fatal exception [ 185.339009][ T9838] Kernel Offset: disabled [ 185.343309][ T9838] Rebooting in 86400 seconds..