last executing test programs: 11.521188792s ago: executing program 1 (id=1874): unshare(0x40200) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}, {0x2, 0x100, 0x800}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) semget$private(0x0, 0x3, 0xa) unshare(0x40400) 11.32013039s ago: executing program 1 (id=1878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ip6gretap0\x00', 0x400}) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0xa, 0x40000) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f00000001c0)={0x28c5d86a, 0xc489}) close(r0) 9.79048843s ago: executing program 1 (id=1883): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x4, 0x10}, 0xc) sendmsg$inet6(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="f7", 0x1}], 0x1}, 0x4000) 9.432792423s ago: executing program 1 (id=1886): socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='RECLEV\nPHONEOUT\nSPEAKER \'CD\' 00000000000000000000\nDIGIT'], 0xb8) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r6, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000300)}, 0x0) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) 7.890641424s ago: executing program 0 (id=1888): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) 7.887580039s ago: executing program 2 (id=1890): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xc}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.723478602s ago: executing program 0 (id=1891): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) 7.719715956s ago: executing program 2 (id=1892): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04e040"], 0x7) 7.374699073s ago: executing program 3 (id=1895): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240088c0}, 0x200000c4) 7.26382121s ago: executing program 3 (id=1897): socket(0x11, 0x800000003, 0x0) socket(0x11, 0x800000003, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x11, 0x6, @broadcast}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 6.807837456s ago: executing program 3 (id=1899): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x60, r2, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{}, {}, @device_a, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 6.753666384s ago: executing program 0 (id=1900): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usbip_server_init(0x3) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 6.724054437s ago: executing program 1 (id=1901): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x15d) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r4, 0x2008002) sendfile(r3, r4, 0x0, 0x80000001) 5.202122142s ago: executing program 4 (id=1902): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b63717a", 0xa}], 0x1}, 0x0) 4.338687335s ago: executing program 4 (id=1903): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f4b"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.334735613s ago: executing program 0 (id=1904): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYRESOCT=r1, @ANYRES16=r1], 0x50}, 0x1, 0x0, 0x0, 0x8c41}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0xffffffff, "fa02c8098000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca3710c0000cdc67c5e3126628168", r3, 0xffffffffffffffff}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000040), 0x4) ioctl$SYNC_IOC_MERGE(r5, 0x40103e05, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, 0x0, 0x0, 0x40) sendfile(r6, r8, 0x0, 0x10ffff) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) unshare(0x44000280) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) lseek(r3, 0xa, 0x4) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, r0) 4.287955634s ago: executing program 2 (id=1905): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x800, 0x4, 0x80, 0x2, 0x46b}, 0x4, 0x0, 0x9, 0x7, 0x7, 0x1, 0x2, 0x17, 0x7, 0x6, {0xa, 0x2, 0x3, 0xfffffffd, 0x5, 0xc}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56561, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff3}, {0xffff, 0xffff}, {0x2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 2.496568304s ago: executing program 3 (id=1906): socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="9febd852ceddc25a190100180000000000000024000000240000010200000000000000012000840000000000000082ff24abac2ff6aa530400000000"], 0x0, 0x3e, 0x0, 0x1}, 0x28) r0 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x1000003, 0x11012, 0xffffffffffffffff, 0x68255000) syz_clone(0x202000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x5e) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 2.28171432s ago: executing program 2 (id=1907): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) 2.213992537s ago: executing program 4 (id=1908): openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/diskstats\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49c, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x7ffc, 0x70, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000900)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0x7bffffff, 0x0, 0x4) sched_setaffinity(0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r2, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 2.199052439s ago: executing program 2 (id=1909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) 1.233453668s ago: executing program 1 (id=1910): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}, {0x0}], 0x2}}], 0x1, 0x4048890) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) shutdown(r0, 0x2) 1.213688455s ago: executing program 0 (id=1911): sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x40004) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) gettid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) 1.048559176s ago: executing program 3 (id=1912): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 1.04689889s ago: executing program 4 (id=1913): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sched\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) io_setup(0x2, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000040)=ANY=[], 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x388, 0x0, 0x1c4, 0x1c4, 0x2a8, 0x2a8, 0x2a8, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @loopback, 0xff000000, 0xff, 0xe, 0x9, {@empty, {[0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x8, 0x101, 0x10, 0x7, 0x3, 0x101, 'ipvlan0\x00', 'macvtap0\x00', {}, {0xff}, 0x0, 0xa}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x1c4}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x12ed}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3d4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(r2, &(0x7f0000000000)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap']) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x212f) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}], 0x20}, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 542.601503ms ago: executing program 4 (id=1914): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b63717a", 0xa}], 0x1}, 0x0) 452.308267ms ago: executing program 0 (id=1915): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="2006"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000004000080080002"], 0x1c}], 0x1}, 0x0) 402.961951ms ago: executing program 4 (id=1916): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x60, r2, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{}, {}, @device_a, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 21.513807ms ago: executing program 2 (id=1917): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000f40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$xdp(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f00000002c0)="a15c2011db2003a30092ae9e27e76dcdb801a2f74bf4d89bcf85cf9b65dd214ec364e6f7107651d9d92f4b699f823c6f7e5a21035e59e20571917ab362034fcfc56c96a1ef79efff0fe16affab88141018ada4421b16b654e0cf8162e96ac2907d425d0b211e9ecade94e508ed90b749ceff0bf12161b6322cc68a3d370455287df394a0d9d3759210a2c5ab6c4c69e84f0e3b8c528390bcb6b35c0f", 0x9c}, {&(0x7f0000000380)="4f5d7869e35e1a18815c8fb5f34f63281ee5b167b7ddc888aa8697b1503e0abccd9f40efc30eea10ef99ebdfc8aab779b8977d6812c6d50615f54d635375a8485725220ce52a3762827c93a9c3f5cb5ade548644c7689ce50f30aa3cfa9d7bf97cd0fa301ad4236b98b444cb224fe7ff33cc7d83004399fa3a70a48e44e79205b2fc2e9268c6b3c124d786e269cd88b96ee56a6f9daed89d2c984f9a4f543bfe3a5eb85b1cf0d20d73ef2e127570f9241d25e6c0ea3c1f75931e4d424b5cde1fff4140811a3358495303006ae26aa8e8ca89015897995611a4710eeab9321182e8db71b249f8a650cf", 0xe9}, {&(0x7f0000000f00)="cacfaa1c8382a32b4a2191160e85453685cbd4bf0ef106ce397122b4dc0a29f02c903ab46309632785810735e9ecc5ecdc3d0c88a26769e1c609958b0a3f551668b070293b25c41c83990aab5253627d12740ac8ac65274ce0c4c6247fe1f25e93bef463e0d8cbc8f51758e2bf9da990801e4ad3b12fd4bad2d31fe73a9033f4884cda989b1788646ac8da25aa82ab236100f17d83243f0dc4a80557201d86b32bbf09291e9694513059a9b0a460e0889921323116030ac25e05", 0xba}, {&(0x7f0000000fc0)="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", 0xd90}], 0x4, 0x0, 0x0, 0x20008001}, 0x1) 0s ago: executing program 3 (id=1918): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xbdf) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_DISCONNECT(r0, 0xab08) kernel console output (not intermixed with test programs): : probe with driver sq930x failed with error -110 [ 221.837212][ T8246] netlink: 'syz.3.729': attribute type 10 has an invalid length. [ 222.668328][ T30] audit: type=1400 audit(1755055011.047:308): avc: denied { write } for pid=8244 comm="syz.3.729" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 222.861308][ T8252] ALSA: mixer_oss: invalid OSS volume '' [ 223.087879][ T8261] netlink: 'syz.3.734': attribute type 10 has an invalid length. [ 223.552118][ T5924] usb 5-1: USB disconnect, device number 8 [ 224.214803][ T5924] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 224.437373][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 224.485740][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.510676][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.524303][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 224.540053][ T5924] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 224.564587][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.598426][ T5924] usb 5-1: config 0 descriptor?? [ 224.878682][ T5931] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 224.914643][ T8282] comedi comedi0: mpc624: I/O port conflict (0xee,16) [ 225.076324][ T5924] usbhid 5-1:0.0: can't add hid device: -71 [ 225.172666][ T5924] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 225.182540][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 225.243094][ T5931] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 225.258100][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.276970][ T5924] usb 5-1: USB disconnect, device number 9 [ 225.306025][ T5931] usb 2-1: config 0 has no interface number 0 [ 225.316852][ T5931] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 225.331524][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.366292][ T5931] usb 2-1: Product: syz [ 225.387338][ T5931] usb 2-1: Manufacturer: syz [ 225.405779][ T5931] usb 2-1: SerialNumber: syz [ 225.420373][ T5931] usb 2-1: config 0 descriptor?? [ 225.607640][ T30] audit: type=1400 audit(1755055014.545:309): avc: denied { name_connect } for pid=8290 comm="syz.2.746" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 225.651237][ T5931] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 225.662259][ T5931] usb 2-1: No valid video chain found. [ 225.678472][ T5931] usb 2-1: USB disconnect, device number 16 [ 225.723283][ T5958] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 225.906003][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 226.761194][ T5958] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 226.770289][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.782886][ T5958] usb 4-1: config 0 descriptor?? [ 226.798865][ T5958] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 227.235725][ T5958] gspca_sonixj: reg_r err -32 [ 227.245941][ T5958] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 227.585040][ T8322] comedi comedi0: mpc624: I/O port conflict (0xee,16) [ 228.415013][ T8334] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.760'. [ 228.424593][ T8334] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.760'. [ 228.433756][ T8334] netlink: 584 bytes leftover after parsing attributes in process `syz.0.760'. [ 228.508478][ T8333] netlink: 'syz.1.761': attribute type 10 has an invalid length. [ 228.966858][ T24] usb 4-1: USB disconnect, device number 11 [ 229.210190][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.765'. [ 230.036492][ T8347] gretap1: entered promiscuous mode [ 230.079300][ T8347] bridge1: port 1(gretap1) entered blocking state [ 230.086028][ T8347] bridge1: port 1(gretap1) entered disabled state [ 230.103821][ T8347] gretap1: entered allmulticast mode [ 230.927021][ T30] audit: type=1326 audit(1755055019.512:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.4.776" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f898e18ebe9 code=0x0 [ 231.301963][ T8386] netlink: 32 bytes leftover after parsing attributes in process `syz.0.779'. [ 231.478002][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'. [ 231.741828][ T5924] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 232.026326][ T5924] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 232.035920][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.049312][ T5924] usb 2-1: Product: syz [ 232.053921][ T5924] usb 2-1: Manufacturer: syz [ 232.058769][ T5924] usb 2-1: SerialNumber: syz [ 232.106763][ T5924] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 232.137430][ T30] audit: type=1400 audit(1755055020.644:311): avc: denied { firmware_load } for pid=92 comm="kworker/0:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 232.156099][ T92] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 232.209995][ T5931] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 232.471121][ T5931] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 232.546494][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.586540][ T5931] usb 5-1: config 0 descriptor?? [ 232.602488][ T5931] cp210x 5-1:0.0: cp210x converter detected [ 232.748763][ T78] usb 2-1: USB disconnect, device number 17 [ 233.164329][ T5931] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 233.218760][ T5931] usb 5-1: cp210x converter now attached to ttyUSB0 [ 233.349153][ T92] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 233.392397][ T24] usb 5-1: USB disconnect, device number 10 [ 233.446802][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 233.462506][ T92] ath9k_htc: Failed to initialize the device [ 233.480249][ T24] cp210x 5-1:0.0: device disconnected [ 233.486228][ T78] usb 2-1: ath9k_htc: USB layer deinitialized [ 233.964565][ T30] audit: type=1800 audit(1755055022.356:312): pid=8435 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.797" name="file1" dev="overlay" ino=911 res=0 errno=0 [ 234.906205][ T5865] Bluetooth: hci4: command 0x0406 tx timeout [ 234.976413][ T30] audit: type=1400 audit(1755055023.282:313): avc: denied { write } for pid=8446 comm="syz.3.802" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 235.266637][ T30] audit: type=1400 audit(1755055023.282:314): avc: denied { open } for pid=8446 comm="syz.3.802" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 236.001547][ T30] audit: type=1326 audit(1755055024.236:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.2.807" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f834db8ebe9 code=0x0 [ 236.863944][ T8477] random: crng reseeded on system resumption [ 238.768103][ T8499] syz.4.815 (8499): drop_caches: 2 [ 239.738350][ T30] audit: type=1400 audit(1755055027.734:316): avc: denied { setopt } for pid=8502 comm="syz.0.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 240.070464][ T5931] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 240.240923][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 240.262883][ T5931] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 240.399537][ T5931] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.410840][ T5931] usb 4-1: config 0 has no interface number 0 [ 240.422199][ T5931] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 240.442970][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.468336][ T5931] usb 4-1: Product: syz [ 240.478869][ T5931] usb 4-1: Manufacturer: syz [ 240.489362][ T5931] usb 4-1: SerialNumber: syz [ 240.506394][ T5931] usb 4-1: config 0 descriptor?? [ 240.806280][ T5931] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 240.840201][ T5931] usb 4-1: No valid video chain found. [ 240.946753][ T8534] netlink: 'syz.1.829': attribute type 10 has an invalid length. [ 241.126182][ T5931] usb 4-1: USB disconnect, device number 12 [ 242.985940][ T8555] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 243.091990][ T30] audit: type=1400 audit(1755055030.886:317): avc: denied { bind } for pid=8556 comm="syz.0.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 243.112331][ T30] audit: type=1400 audit(1755055030.886:318): avc: denied { setopt } for pid=8556 comm="syz.0.839" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 243.298320][ T92] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 243.414778][ T8566] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 243.772977][ T92] usb 5-1: Using ep0 maxpacket: 16 [ 244.225469][ T92] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 244.236847][ T92] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.246812][ T92] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.260739][ T92] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.326832][ T8578] netlink: 'syz.1.844': attribute type 10 has an invalid length. [ 244.368923][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.431292][ T92] usb 5-1: Product: syz [ 244.501976][ T92] usb 5-1: Manufacturer: syz [ 244.551764][ T92] usb 5-1: SerialNumber: syz [ 245.191888][ T8586] ALSA: mixer_oss: invalid OSS volume 'DIGIT' [ 245.551161][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 245.559013][ T92] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 245.567859][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 245.616300][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 245.629534][ T92] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 245.685986][ T92] usb 5-1: USB disconnect, device number 11 [ 245.783055][ T8596] udevd[8596]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.457388][ T5959] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 246.808863][ T24] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 246.847994][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 246.948953][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.960362][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.970156][ T5959] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 246.986630][ T5959] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 246.998890][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.440211][ T5959] usb 3-1: config 0 descriptor?? [ 247.454405][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.469999][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 247.491568][ T24] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 247.515763][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.528423][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.554814][ T24] usb 1-1: Product: syz [ 247.562873][ T24] usb 1-1: Manufacturer: syz [ 247.584297][ T24] usb 1-1: SerialNumber: syz [ 247.612620][ T8603] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 247.947193][ T5959] usbhid 3-1:0.0: can't add hid device: -71 [ 247.958229][ T5959] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 248.044215][ T5959] usb 3-1: USB disconnect, device number 5 [ 248.938984][ T24] cdc_ncm 1-1:1.0: bind() failure [ 249.879228][ T24] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 249.887062][ T24] cdc_ncm 1-1:1.1: bind() failure [ 250.394215][ T24] usb 1-1: USB disconnect, device number 7 [ 251.700185][ T8670] bridge0: port 3(gretap0) entered blocking state [ 251.707117][ T8670] bridge0: port 3(gretap0) entered disabled state [ 251.714519][ T8670] gretap0: entered allmulticast mode [ 251.727796][ T8670] gretap0: entered promiscuous mode [ 251.734667][ T8670] bridge0: port 3(gretap0) entered blocking state [ 251.741151][ T8670] bridge0: port 3(gretap0) entered forwarding state [ 252.104226][ T8671] netlink: 'syz.1.871': attribute type 10 has an invalid length. [ 252.979926][ T30] audit: type=1400 audit(1755055040.053:319): avc: denied { map } for pid=8674 comm="syz.1.874" path="/dev/comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 253.244964][ T30] audit: type=1400 audit(1755055040.053:320): avc: denied { execute } for pid=8674 comm="syz.1.874" path="/dev/comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 253.668228][ T92] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 253.763078][ T8693] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 253.847414][ T92] usb 4-1: Using ep0 maxpacket: 16 [ 253.878143][ T92] usb 4-1: config 0 has no interfaces? [ 253.883930][ T5931] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 253.913604][ T92] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 253.942097][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.008324][ T92] usb 4-1: Product: syz [ 254.040156][ T92] usb 4-1: Manufacturer: syz [ 254.077261][ T92] usb 4-1: SerialNumber: syz [ 254.114648][ T5931] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 254.157537][ T92] usb 4-1: config 0 descriptor?? [ 254.211699][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.362930][ T5931] usb 3-1: config 0 descriptor?? [ 254.528633][ T5859] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 254.552542][ T92] usb 4-1: USB disconnect, device number 13 [ 255.039971][ T5931] usb 3-1: Cannot set MAC address [ 255.101526][ T5931] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 255.200552][ T5931] usb 3-1: USB disconnect, device number 6 [ 255.233495][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 256.212066][ T30] audit: type=1400 audit(1755055042.336:321): avc: denied { read write } for pid=8709 comm="syz.3.887" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 256.305411][ T30] audit: type=1400 audit(1755055042.336:322): avc: denied { open } for pid=8709 comm="syz.3.887" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 256.332693][ T30] audit: type=1400 audit(1755055042.392:323): avc: denied { module_load } for pid=8709 comm="syz.3.887" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 256.357275][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.477188][ T30] audit: type=1400 audit(1755055043.187:324): avc: denied { bind } for pid=8712 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 256.511967][ T6773] Bluetooth: hci5: Frame reassembly failed (-84) [ 257.098958][ T8726] comedi: valid board names for 8255 driver are: [ 257.105708][ T8726] 8255 [ 257.108497][ T8726] comedi: valid board names for vmk80xx driver are: [ 257.115188][ T8726] vmk80xx [ 257.118217][ T8726] comedi: valid board names for usbduxsigma driver are: [ 257.125288][ T8726] usbduxsigma [ 257.128684][ T8726] comedi: valid board names for usbduxfast driver are: [ 257.135875][ T8726] usbduxfast [ 257.139179][ T8726] comedi: valid board names for usbdux driver are: [ 257.145745][ T8726] usbdux [ 257.148703][ T8726] comedi: valid board names for ni6501 driver are: [ 257.155312][ T8726] ni6501 [ 257.158632][ T8726] comedi: valid board names for dt9812 driver are: [ 257.165479][ T8726] dt9812 [ 257.168434][ T8726] comedi: valid board names for ni_labpc_cs driver are: [ 257.175426][ T8726] ni_labpc_cs [ 257.178836][ T8726] comedi: valid board names for ni_daq_700 driver are: [ 257.185749][ T8726] ni_daq_700 [ 257.189051][ T8726] comedi: valid board names for labpc_pci driver are: [ 257.224290][ T8726] labpc_pci [ 257.227556][ T8726] comedi: valid board names for adl_pci9118 driver are: [ 257.234857][ T8726] pci9118dg [ 257.238072][ T8726] pci9118hg [ 257.241336][ T8726] pci9118hr [ 257.244556][ T8726] comedi: valid board names for 8255_pci driver are: [ 257.251337][ T8726] 8255_pci [ 257.254468][ T8726] comedi: valid board names for s526 driver are: [ 257.261182][ T8726] s526 [ 257.263970][ T8726] comedi: valid board names for multiq3 driver are: [ 257.270592][ T8726] multiq3 [ 257.273697][ T8726] comedi: valid board names for pcmuio driver are: [ 257.280268][ T8726] pcmuio48 [ 257.283479][ T8726] pcmuio96 [ 257.286621][ T8726] comedi: valid board names for pcmmio driver are: [ 257.293731][ T8726] pcmmio [ 257.296690][ T8726] comedi: valid board names for pcmda12 driver are: [ 257.303818][ T8726] pcmda12 [ 257.306871][ T8726] comedi: valid board names for pcmad driver are: [ 257.313731][ T8726] pcmad12 [ 257.316776][ T8726] pcmad16 [ 257.319860][ T8726] comedi: valid board names for ni_labpc driver are: [ 257.334121][ T8726] lab-pc-1200 [ 257.337599][ T8726] lab-pc-1200ai [ 257.341171][ T8726] lab-pc+ [ 257.344208][ T8726] comedi: valid board names for atmio16 driver are: [ 257.350861][ T8726] atmio16 [ 257.353899][ T8726] atmio16d [ 257.357346][ T8726] comedi: valid board names for ni_at_ao driver are: [ 257.364038][ T8726] at-ao-6 [ 257.367124][ T8726] at-ao-10 [ 257.370236][ T8726] comedi: valid board names for ni_at_a2150 driver are: [ 257.377294][ T8726] ni_at_a2150 [ 257.380821][ T8726] comedi: valid board names for adq12b driver are: [ 257.387341][ T8726] adq12b [ 257.390631][ T8726] comedi: valid board names for mpc624 driver are: [ 257.397146][ T8726] mpc624 [ 257.400131][ T8726] comedi: valid board names for c6xdigio driver are: [ 257.406821][ T8726] c6xdigio [ 257.410450][ T8726] comedi: valid board names for aio_iiro_16 driver are: [ 257.417406][ T8726] aio_iiro_16 [ 257.421476][ T8726] comedi: valid board names for aio_aio12_8 driver are: [ 257.428457][ T8726] aio_aio12_8 [ 257.432037][ T8726] aio_ai12_8 [ 257.435352][ T8726] aio_ao12_4 [ 257.438658][ T8726] comedi: valid board names for fl512 driver are: [ 257.445136][ T8726] fl512 [ 257.448003][ T8726] comedi: valid board names for dmm32at driver are: [ 257.454946][ T8726] dmm32at [ 257.457995][ T8726] comedi: valid board names for dt282x driver are: [ 257.464688][ T8726] dt2821 [ 257.467646][ T8726] dt2821-f [ 257.470778][ T8726] dt2821-g [ 257.473911][ T8726] dt2823 [ 257.476976][ T8726] dt2824-pgh [ 257.480294][ T8726] dt2824-pgl [ 257.483597][ T8726] dt2825 [ 257.486873][ T8726] dt2827 [ 257.489840][ T8726] dt2828 [ 257.492799][ T8726] dt2829 [ 257.495819][ T8726] dt21-ez [ 257.498879][ T8726] dt23-ez [ 257.501924][ T8726] dt24-ez [ 257.505006][ T8726] dt24-ez-pgl [ 257.508520][ T8726] comedi: valid board names for dt2817 driver are: [ 257.515055][ T8726] dt2817 [ 257.518341][ T8726] comedi: valid board names for dt2815 driver are: [ 257.525328][ T8726] dt2815 [ 257.528961][ T8726] comedi: valid board names for dt2814 driver are: [ 257.540055][ T8726] dt2814 [ 257.543037][ T8726] comedi: valid board names for dt2811 driver are: [ 257.591638][ T8726] dt2811-pgh [ 257.594988][ T8726] dt2811-pgl [ 257.598297][ T8726] comedi: valid board names for dt2801 driver are: [ 257.604896][ T8726] dt2801 [ 257.607857][ T8726] comedi: valid board names for das6402 driver are: [ 257.614779][ T8726] das6402-12 [ 257.618089][ T8726] das6402-16 [ 257.621397][ T8726] comedi: valid board names for das1800 driver are: [ 257.628051][ T8726] das-1701st [ 257.631823][ T8726] das-1701st-da [ 257.635806][ T8726] das-1702st [ 257.639172][ T8726] das-1702st-da [ 257.642754][ T8726] das-1702hr [ 257.646471][ T8726] das-1702hr-da [ 257.650038][ T8726] das-1701ao [ 257.653346][ T8726] das-1702ao [ 257.656752][ T8726] das-1801st [ 257.660487][ T8726] das-1801st-da [ 257.664085][ T8726] das-1802st [ 257.667479][ T8726] das-1802st-da [ 257.671044][ T8726] das-1802hr [ 257.674348][ T8726] das-1802hr-da [ 257.678251][ T8726] das-1801hc [ 257.681573][ T8726] das-1802hc [ 257.684876][ T8726] das-1801ao [ 257.688258][ T8726] das-1802ao [ 257.691556][ T8726] comedi: valid board names for das800 driver are: [ 257.698102][ T8726] das-800 [ 257.876962][ T8726] cio-das800 [ 257.880372][ T8726] das-801 [ 257.883422][ T8726] cio-das801 [ 257.886743][ T8726] das-802 [ 257.889815][ T8726] cio-das802 [ 257.893187][ T8726] cio-das802/16 [ 257.896747][ T8726] comedi: valid board names for isa-das08 driver are: [ 257.903870][ T8726] isa-das08 [ 257.907109][ T8726] das08-pgm [ 257.910320][ T8726] das08-pgh [ 257.913565][ T8726] das08-pgl [ 257.916778][ T8726] das08-aoh [ 257.920001][ T8726] das08-aol [ 257.923259][ T8726] das08-aom [ 257.926488][ T8726] das08/jr-ao [ 257.929880][ T8726] das08jr-16-ao [ 257.933454][ T8726] pc104-das08 [ 257.937169][ T8726] das08jr/16 [ 257.940478][ T8726] comedi: valid board names for das16m1 driver are: [ 257.947118][ T8726] das16m1 [ 257.950145][ T8726] comedi: valid board names for dac02 driver are: [ 257.956604][ T8726] dac02 [ 257.960346][ T8726] comedi: valid board names for rti802 driver are: [ 257.967209][ T8726] rti802 [ 257.970173][ T8726] comedi: valid board names for rti800 driver are: [ 257.976719][ T8726] rti800 [ 257.979690][ T8726] rti815 [ 257.982639][ T8726] comedi: valid board names for pcm3724 driver are: [ 257.989396][ T8726] pcm3724 [ 257.992440][ T8726] comedi: valid board names for pcl818 driver are: [ 257.999279][ T8726] pcl818l [ 258.002318][ T8726] pcl818h [ 258.005354][ T8726] pcl818hd [ 258.008485][ T8726] pcl818hg [ 258.011663][ T8726] pcl818 [ 258.014632][ T8726] pcl718 [ 258.017585][ T8726] pcm3718 [ 258.020708][ T8726] comedi: valid board names for pcl816 driver are: [ 258.027222][ T8726] pcl816 [ 258.030506][ T8726] pcl814b [ 258.033559][ T8726] comedi: valid board names for pcl812 driver are: [ 258.040073][ T8726] pcl812 [ 258.043048][ T8726] pcl812pg [ 258.046172][ T8726] acl8112pg [ 258.049401][ T8726] acl8112dg [ 258.052653][ T8726] acl8112hg [ 258.055868][ T8726] a821pgl [ 258.058909][ T8726] a821pglnda [ 258.062556][ T8726] a821pgh [ 258.065600][ T8726] a822pgl [ 258.069538][ T8726] a822pgh [ 258.072593][ T8726] a823pgl [ 258.075671][ T8726] a823pgh [ 258.078713][ T8726] pcl813 [ 258.081669][ T8726] pcl813b [ 258.084751][ T8726] acl8113 [ 258.087789][ T8726] iso813 [ 258.090739][ T8726] acl8216 [ 258.093804][ T8726] a826pg [ 258.097129][ T8726] comedi: valid board names for pcl730 driver are: [ 258.103685][ T8726] pcl730 [ 258.106707][ T8726] iso730 [ 258.109673][ T8726] acl7130 [ 258.112729][ T8726] pcm3730 [ 258.115817][ T8726] pcl725 [ 258.118778][ T8726] p8r8dio [ 258.121834][ T8726] acl7225b [ 258.124961][ T8726] p16r16dio [ 258.128496][ T8726] pcl733 [ 258.131448][ T8726] pcl734 [ 258.134389][ T8726] opmm-1616-xt [ 258.137900][ T8726] pearl-mm-p [ 258.141219][ T8726] ir104-pbf [ 258.144430][ T8726] comedi: valid board names for pcl726 driver are: [ 258.151030][ T8726] pcl726 [ 258.153991][ T8726] pcl727 [ 258.156985][ T8726] pcl728 [ 258.160287][ T8726] acl6126 [ 258.163696][ T8726] acl6128 [ 258.166746][ T8726] comedi: valid board names for pcl724 driver are: [ 258.173397][ T8726] pcl724 [ 258.176843][ T8726] pcl722 [ 258.180474][ T8726] pcl731 [ 258.183469][ T8726] acl7122 [ 258.186509][ T8726] acl7124 [ 258.189547][ T8726] pet48dio [ 258.193018][ T8726] pcmio48 [ 258.196063][ T8726] onyx-mm-dio [ 258.199453][ T8726] comedi: valid board names for pcl711 driver are: [ 258.206011][ T8726] pcl711 [ 258.208966][ T8726] pcl711b [ 258.212035][ T8726] acl8112hg [ 258.215249][ T8726] acl8112dg [ 258.218461][ T8726] comedi: valid board names for amplc_pc263 driver are: [ 258.225753][ T8726] pc263 [ 258.228638][ T8726] comedi: valid board names for amplc_pc236 driver are: [ 258.235622][ T8726] pc36at [ 258.238598][ T8726] comedi: valid board names for amplc_dio200 driver are: [ 258.245709][ T8726] pc212e [ 258.248669][ T8726] pc214e [ 258.251625][ T8726] pc215e [ 258.254887][ T8726] pc218e [ 258.257858][ T8726] pc272e [ 258.260808][ T8726] comedi: valid board names for comedi_parport driver are: [ 258.268059][ T8726] comedi_parport [ 258.271708][ T8726] comedi: valid board names for comedi_test driver are: [ 258.278693][ T8726] comedi_test [ 258.282095][ T8726] comedi: valid board names for comedi_bond driver are: [ 258.289850][ T8726] comedi_bond [ 258.471673][ T30] audit: type=1400 audit(1755055043.580:325): avc: denied { create } for pid=8716 comm="syz.0.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 258.682516][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 258.815454][ T30] audit: type=1400 audit(1755055043.589:326): avc: denied { create } for pid=8716 comm="syz.0.890" name="GPL" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 259.027553][ T8742] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 259.270141][ T30] audit: type=1400 audit(1755055043.598:327): avc: denied { getopt } for pid=8716 comm="syz.0.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 260.080109][ T8745] dummy0: entered allmulticast mode [ 260.118822][ T8745] dummy0: left allmulticast mode [ 261.069862][ T30] audit: type=1400 audit(1755055047.714:328): avc: denied { map } for pid=8764 comm="syz.3.902" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 261.206669][ T30] audit: type=1400 audit(1755055047.742:329): avc: denied { write execute } for pid=8764 comm="syz.3.902" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 261.384357][ T78] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 262.434542][ T78] usb 2-1: Using ep0 maxpacket: 16 [ 262.442413][ T78] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.455512][ T78] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 262.468119][ T78] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 262.530828][ T78] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 262.542388][ T78] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 262.573013][ T78] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 262.582830][ T78] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 262.594301][ T78] usb 2-1: Manufacturer: syz [ 262.619870][ T78] usb 2-1: config 0 descriptor?? [ 263.122196][ T5917] usb 2-1: USB disconnect, device number 18 [ 263.436140][ T8797] syz.3.912 (8797): drop_caches: 2 [ 263.998506][ T30] audit: type=1400 audit(1755055050.455:330): avc: denied { listen } for pid=8798 comm="syz.3.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 263.999281][ T5865] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 264.029082][ T5865] CPU: 1 UID: 0 PID: 5865 Comm: kworker/u9:9 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 264.029100][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.029108][ T5865] Workqueue: hci2 hci_rx_work [ 264.029124][ T5865] Call Trace: [ 264.029128][ T5865] [ 264.029133][ T5865] dump_stack_lvl+0x16c/0x1f0 [ 264.029149][ T5865] sysfs_warn_dup+0x7f/0xa0 [ 264.029167][ T5865] sysfs_create_dir_ns+0x24b/0x2b0 [ 264.029181][ T5865] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 264.029196][ T5865] ? find_held_lock+0x2b/0x80 [ 264.029213][ T5865] ? do_raw_spin_unlock+0x172/0x230 [ 264.029226][ T5865] kobject_add_internal+0x2c4/0x9b0 [ 264.029240][ T5865] kobject_add+0x16e/0x240 [ 264.029254][ T5865] ? __pfx_kobject_add+0x10/0x10 [ 264.029268][ T5865] ? do_raw_spin_unlock+0x172/0x230 [ 264.029281][ T5865] ? kobject_put+0xab/0x5a0 [ 264.029296][ T5865] device_add+0x288/0x1aa0 [ 264.029311][ T5865] ? __pfx_dev_set_name+0x10/0x10 [ 264.029326][ T5865] ? __pfx_device_add+0x10/0x10 [ 264.029339][ T5865] ? mgmt_send_event_skb+0x2fb/0x460 [ 264.029359][ T5865] hci_conn_add_sysfs+0x17e/0x230 [ 264.029370][ T5865] le_conn_complete_evt+0x1075/0x1d70 [ 264.029385][ T5865] ? preempt_count_sub+0x150/0x160 [ 264.029401][ T5865] ? find_held_lock+0x2b/0x80 [ 264.029416][ T5865] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 264.029435][ T5865] ? hci_event_packet+0x459/0x11c0 [ 264.029459][ T5865] ? __mutex_unlock_slowpath+0x163/0x800 [ 264.029481][ T5865] hci_le_conn_complete_evt+0x23c/0x370 [ 264.029510][ T5865] hci_le_meta_evt+0x354/0x5e0 [ 264.029534][ T5865] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 264.029554][ T5865] hci_event_packet+0x682/0x11c0 [ 264.029569][ T5865] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 264.029586][ T5865] ? __pfx_hci_event_packet+0x10/0x10 [ 264.029603][ T5865] ? kcov_remote_start+0x3c9/0x6d0 [ 264.029616][ T5865] ? lockdep_hardirqs_on+0x7c/0x110 [ 264.029630][ T5865] hci_rx_work+0x2c5/0x16b0 [ 264.029640][ T5865] ? rcu_is_watching+0x12/0xc0 [ 264.029656][ T5865] process_one_work+0x9cc/0x1b70 [ 264.029674][ T5865] ? __pfx_process_one_work+0x10/0x10 [ 264.029689][ T5865] ? assign_work+0x1a0/0x250 [ 264.029701][ T5865] worker_thread+0x6c8/0xf10 [ 264.029732][ T5865] ? __kthread_parkme+0x19e/0x250 [ 264.029749][ T5865] ? __pfx_worker_thread+0x10/0x10 [ 264.029761][ T5865] kthread+0x3c5/0x780 [ 264.029773][ T5865] ? __pfx_kthread+0x10/0x10 [ 264.029786][ T5865] ? rcu_is_watching+0x12/0xc0 [ 264.029800][ T5865] ? __pfx_kthread+0x10/0x10 [ 264.029812][ T5865] ret_from_fork+0x5d7/0x6f0 [ 264.029824][ T5865] ? __pfx_kthread+0x10/0x10 [ 264.029836][ T5865] ret_from_fork_asm+0x1a/0x30 [ 264.029857][ T5865] [ 264.030525][ T5865] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 264.282207][ T30] audit: type=1400 audit(1755055050.483:331): avc: denied { accept } for pid=8798 comm="syz.3.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 264.294730][ T5865] Bluetooth: hci2: failed to register connection device [ 264.601188][ T30] audit: type=1400 audit(1755055051.016:332): avc: denied { setopt } for pid=8820 comm="syz.4.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.851075][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 265.061766][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 265.071159][ T8829] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 265.079074][ T8829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.095929][ T24] usb 2-1: config 0 has an invalid interface number: 115 but max is 0 [ 265.116044][ T24] usb 2-1: config 0 has no interface number 0 [ 265.123992][ T24] usb 2-1: too many endpoints for config 0 interface 115 altsetting 104: 97, using maximum allowed: 30 [ 265.140648][ T24] usb 2-1: config 0 interface 115 altsetting 104 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 265.156284][ T24] usb 2-1: config 0 interface 115 has no altsetting 0 [ 265.165945][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 265.513086][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.529938][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.542081][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.707623][ T24] usb 2-1: config 0 descriptor?? [ 265.721232][ T24] cp210x 2-1:0.115: cp210x converter detected [ 266.402899][ T30] audit: type=1400 audit(1755055052.288:333): avc: denied { create } for pid=8836 comm="syz.0.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 266.465062][ T24] cp210x 2-1:0.115: failed to get vendor val 0x370b size 1: -32 [ 266.473300][ T24] cp210x 2-1:0.115: querying part number failed [ 266.500950][ T8844] netlink: 52 bytes leftover after parsing attributes in process `syz.1.919'. [ 266.722658][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 266.775470][ T30] audit: type=1400 audit(1755055052.288:334): avc: denied { connect } for pid=8836 comm="syz.0.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 266.890832][ T5917] usb 2-1: USB disconnect, device number 19 [ 266.929680][ T5917] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 266.975858][ T5917] cp210x 2-1:0.115: device disconnected [ 267.388156][ T8862] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 267.575884][ T8869] netlink: 'syz.1.936': attribute type 10 has an invalid length. [ 267.818226][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'. [ 267.831394][ T8874] netlink: 'syz.1.938': attribute type 30 has an invalid length. [ 267.853561][ T6770] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.862512][ T6770] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.891895][ T6770] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.922285][ T6770] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.039970][ T8879] netlink: 72 bytes leftover after parsing attributes in process `syz.0.939'. [ 268.054160][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'. [ 268.063855][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.939'. [ 268.878611][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'. [ 269.630769][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 269.697659][ T8913] netlink: 72 bytes leftover after parsing attributes in process `syz.4.951'. [ 269.752005][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.951'. [ 269.763268][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.951'. [ 269.855621][ T24] usb 1-1: config 0 has an invalid interface number: 115 but max is 0 [ 269.913771][ T24] usb 1-1: config 0 has no interface number 0 [ 269.937698][ T24] usb 1-1: too many endpoints for config 0 interface 115 altsetting 104: 97, using maximum allowed: 30 [ 269.987859][ T24] usb 1-1: config 0 interface 115 altsetting 104 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 270.032522][ T24] usb 1-1: config 0 interface 115 has no altsetting 0 [ 270.135838][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 270.174076][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.224166][ T24] usb 1-1: config 0 descriptor?? [ 270.246944][ T24] cp210x 1-1:0.115: cp210x converter detected [ 270.504713][ T24] cp210x 1-1:0.115: failed to get vendor val 0x370b size 1: -32 [ 270.525106][ T24] cp210x 1-1:0.115: querying part number failed [ 270.581881][ T5959] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 270.581992][ T8928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.947'. [ 270.619829][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 270.748992][ T5959] usb 3-1: Using ep0 maxpacket: 8 [ 270.807686][ T5959] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 270.816149][ T5959] usb 3-1: config 0 has no interface number 0 [ 270.824023][ T5959] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=bc.ed [ 270.833967][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.864379][ T24] usb 1-1: USB disconnect, device number 8 [ 270.874138][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 270.895406][ T5959] usb 3-1: Product: syz [ 270.904787][ T24] cp210x 1-1:0.115: device disconnected [ 270.912357][ T5959] usb 3-1: Manufacturer: syz [ 270.931313][ T5959] usb 3-1: SerialNumber: syz [ 270.957734][ T5959] usb 3-1: config 0 descriptor?? [ 270.988327][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 271.138645][ T8933] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 271.255603][ T5959] usbserial_generic 3-1:0.175: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 271.278293][ T5959] usbserial_generic 3-1:0.175: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 271.399065][ T5959] usbserial_generic 3-1:0.175: device has no bulk endpoints [ 271.442697][ T5959] safe_serial 3-1:0.175: safe_serial converter detected [ 271.509930][ T5959] safe_serial 3-1:0.175: probe with driver safe_serial failed with error -22 [ 272.252124][ T5959] usb 3-1: USB disconnect, device number 7 [ 272.389705][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 272.440998][ T8941] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 272.551902][ T8941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.589037][ T30] audit: type=1400 audit(1755055058.490:335): avc: denied { mount } for pid=8946 comm="syz.1.961" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 272.649294][ T30] audit: type=1400 audit(1755055058.490:336): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 272.857848][ T5931] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 272.863376][ T30] audit: type=1400 audit(1755055058.743:337): avc: denied { listen } for pid=8960 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 272.964794][ T92] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 273.040352][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 273.047335][ T5931] usb 4-1: config 0 has no interfaces? [ 273.055970][ T5931] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 273.066339][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.074510][ T5931] usb 4-1: Product: syz [ 273.078662][ T5931] usb 4-1: Manufacturer: syz [ 273.083292][ T5931] usb 4-1: SerialNumber: syz [ 273.089361][ T5931] usb 4-1: config 0 descriptor?? [ 273.125552][ T92] usb 2-1: Using ep0 maxpacket: 16 [ 273.132481][ T92] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 273.142175][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.152119][ T92] usb 2-1: config 0 descriptor?? [ 273.160577][ T92] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 273.313515][ T5931] usb 4-1: USB disconnect, device number 14 [ 273.970089][ T5931] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 273.996991][ T8976] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 274.021184][ T92] gspca_sonixj: reg_r err -32 [ 274.026072][ T92] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 274.248054][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 274.263989][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 274.285710][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 274.313343][ T5931] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 274.325183][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.332451][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.976'. [ 274.348274][ T5931] usb 1-1: Product: syz [ 274.358000][ T5931] usb 1-1: Manufacturer: syz [ 274.370774][ T5931] usb 1-1: SerialNumber: syz [ 274.441515][ T5931] usb 1-1: config 0 descriptor?? [ 274.475452][ T5931] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 274.495582][ T5931] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 275.126993][ T5931] em28xx 1-1:0.0: unknown em28xx chip ID (111) [ 275.635346][ T5931] em28xx 1-1:0.0: Config register raw data: 0x6f [ 275.641802][ T5931] em28xx 1-1:0.0: I2S Audio (3 sample rate(s)) [ 275.647973][ T5931] em28xx 1-1:0.0: No AC97 audio processor [ 275.661232][ T5931] usb 1-1: USB disconnect, device number 9 [ 275.930325][ T5931] usb 2-1: USB disconnect, device number 20 [ 276.073484][ T9032] binder: BINDER_SET_CONTEXT_MGR already set [ 276.080261][ T9032] binder: 9031:9032 ioctl 4018620d 200000000040 returned -16 [ 276.089978][ T9032] binder: 9031:9032 ioctl c0306201 200000000240 returned -11 [ 276.620122][ T9045] netlink: 'syz.0.994': attribute type 10 has an invalid length. [ 277.069931][ T5865] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 278.795335][ T9092] syz.2.1009 (9092): drop_caches: 2 [ 283.781528][ T9151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1032'. [ 286.030416][ T5959] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 286.120514][ T9178] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 286.276938][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 286.294104][ T5959] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 286.324544][ T5959] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 286.345704][ T5959] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 286.517367][ T5959] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 286.535350][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.564416][ T5959] usb 4-1: Product: syz [ 286.574237][ T5959] usb 4-1: Manufacturer: syz [ 286.578862][ T5959] usb 4-1: SerialNumber: syz [ 287.038832][ T5959] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 287.749907][ T5917] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 287.975359][ T5931] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 287.991117][ T5959] usb 4-1: 2:1: cannot get freq at ep 0x82 [ 288.011274][ T5959] usb 4-1: USB disconnect, device number 15 [ 288.077708][ T8597] udevd[8597]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.482447][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 288.573001][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 288.586111][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.601391][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.617466][ T5931] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.632355][ T5917] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 288.643684][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.659651][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.682745][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 288.703400][ T5931] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 288.714021][ T9213] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 288.798220][ T5917] usb 1-1: config 0 descriptor?? [ 289.309564][ T5931] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.329673][ T5931] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 289.339644][ T5931] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 289.347733][ T5931] usb 5-1: Manufacturer: syz [ 289.392049][ T5931] usb 5-1: config 0 descriptor?? [ 289.500575][ T5917] betop 0003:20BC:5500.0009: item fetching failed at offset 7/11 [ 289.509715][ T5917] betop 0003:20BC:5500.0009: parse failed [ 289.518270][ T5917] betop 0003:20BC:5500.0009: probe with driver betop failed with error -22 [ 289.708266][ T5931] rc_core: IR keymap rc-hauppauge not found [ 289.885848][ T5959] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 290.111303][ T5931] Registered IR keymap rc-empty [ 290.117621][ T5931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 290.159468][ T5931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 290.197509][ T5910] usb 1-1: USB disconnect, device number 10 [ 290.220229][ T5931] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 290.236701][ T5931] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 290.256957][ T5931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 290.283769][ T5931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 290.316122][ T5931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 290.350519][ T5931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 290.379834][ T5931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 290.401783][ T5931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 290.437219][ T5931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 290.461715][ T5959] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.473734][ T5959] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.484625][ T5959] usb 4-1: config 0 interface 0 has no altsetting 0 [ 290.491304][ T5959] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 290.501000][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.673611][ T5931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 290.765622][ T5931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 290.903689][ T5959] usb 4-1: config 0 descriptor?? [ 290.925143][ T5931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 290.962127][ T5931] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 290.972585][ T5931] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 290.986188][ T5931] usb 5-1: USB disconnect, device number 12 [ 291.182390][ T78] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 291.363288][ T78] usb 2-1: device descriptor read/64, error -71 [ 291.441327][ T9260] syz.0.1065 (9260): drop_caches: 2 [ 291.562058][ T5959] usb 4-1: string descriptor 0 read error: -22 [ 291.652102][ T78] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 291.778922][ T5959] uclogic 0003:256C:006D.000A: interface is invalid, ignoring [ 291.791899][ T78] usb 2-1: device descriptor read/64, error -71 [ 291.817669][ T5865] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 291.940221][ T78] usb usb2-port1: attempt power cycle [ 292.700468][ T5917] usb 4-1: USB disconnect, device number 16 [ 292.795509][ T78] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 292.818827][ T78] usb 2-1: device descriptor read/8, error -71 [ 293.160895][ T78] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 293.193187][ T78] usb 2-1: device descriptor read/8, error -71 [ 293.424097][ T78] usb usb2-port1: unable to enumerate USB device [ 293.673261][ T30] audit: type=1400 audit(1755055078.199:338): avc: denied { mount } for pid=9306 comm="syz.3.1082" name="/" dev="configfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 293.724805][ T9308] tipc: Started in network mode [ 293.749680][ T9308] tipc: Node identity 4, cluster identity 4711 [ 293.760447][ T30] audit: type=1400 audit(1755055078.199:339): avc: denied { search } for pid=9306 comm="syz.3.1082" name="/" dev="configfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 293.807173][ T9308] tipc: Node number set to 4 [ 293.813952][ T30] audit: type=1400 audit(1755055078.208:340): avc: denied { setattr } for pid=9306 comm="syz.3.1082" name="/" dev="configfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 294.676736][ T30] audit: type=1400 audit(1755055079.144:341): avc: denied { shutdown } for pid=9315 comm="syz.0.1085" laddr=::1 lport=38851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.698213][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.805614][ T78] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 297.462623][ T78] usb 2-1: device descriptor read/64, error -71 [ 297.724957][ T78] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 298.022524][ T78] usb 2-1: device descriptor read/64, error -71 [ 298.085486][ T9377] ALSA: mixer_oss: invalid OSS volume 'DIGIT' [ 298.279494][ T30] audit: type=1400 audit(1755055082.474:342): avc: denied { create } for pid=9378 comm="syz.4.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 298.402195][ T78] usb usb2-port1: attempt power cycle [ 299.649465][ T78] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 299.715384][ T78] usb 2-1: device descriptor read/8, error -71 [ 299.740166][ T9400] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 301.774078][ T9413] overlayfs: failed to resolve './file1': -2 [ 302.024705][ T9422] ALSA: mixer_oss: invalid OSS volume 'DIGIT' [ 303.272697][ T976] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 303.608050][ T976] usb 1-1: device descriptor read/64, error -71 [ 303.941880][ T976] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 304.087231][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 304.114108][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1129'. [ 304.161939][ T976] usb 1-1: device descriptor read/64, error -71 [ 304.291427][ T976] usb usb1-port1: attempt power cycle [ 305.364802][ T976] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 305.403499][ T976] usb 1-1: device descriptor read/8, error -71 [ 305.640272][ T5910] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 305.712179][ T976] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 305.864692][ T976] usb 1-1: device descriptor read/8, error -71 [ 305.913601][ T5959] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 306.177574][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 306.337634][ T976] usb usb1-port1: unable to enumerate USB device [ 306.429398][ T5910] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 306.534186][ T5959] usb 2-1: Using ep0 maxpacket: 16 [ 306.557609][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.624473][ T5959] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 306.647859][ T5910] usb 5-1: config 0 has no interface number 0 [ 306.655571][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.672011][ T30] audit: type=1326 audit(1755055090.368:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9490 comm="syz.0.1142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6790d8ebe9 code=0x0 [ 306.730960][ T5910] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 306.757043][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.769088][ T5959] usb 2-1: config 0 descriptor?? [ 306.805219][ T5959] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 306.814297][ T5910] usb 5-1: Product: syz [ 307.725703][ T5910] usb 5-1: Manufacturer: syz [ 307.731766][ T5910] usb 5-1: SerialNumber: syz [ 307.759418][ T5910] usb 5-1: config 0 descriptor?? [ 307.770235][ T5910] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 307.777034][ T5910] usb 5-1: No valid video chain found. [ 307.983722][ T24] usb 5-1: USB disconnect, device number 13 [ 308.278242][ T5910] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 308.553781][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 308.560841][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.573055][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.583073][ T5910] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 308.593364][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.604853][ T5910] usb 3-1: config 0 descriptor?? [ 309.048538][ T5910] usbhid 3-1:0.0: can't add hid device: -71 [ 309.134228][ T5910] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 309.145449][ T5910] usb 3-1: USB disconnect, device number 8 [ 310.092881][ T24] usb 2-1: USB disconnect, device number 29 [ 310.151586][ T9533] binder: 9532:9533 ioctl c0306201 200000000240 returned -11 [ 312.883645][ T9557] syz.4.1163 (9557): drop_caches: 2 [ 314.614176][ T5917] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 315.171415][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 315.184413][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.208283][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.245700][ T5917] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 315.259464][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.273953][ T5917] usb 5-1: config 0 descriptor?? [ 315.974181][ T5917] usbhid 5-1:0.0: can't add hid device: -71 [ 315.990920][ T5917] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 316.166849][ T5917] usb 5-1: USB disconnect, device number 14 [ 316.472147][ T9605] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 318.486228][ T9626] ALSA: mixer_oss: invalid OSS volume 'DIGIT' [ 319.348027][ T9640] 9pnet_virtio: no channels available for device syz [ 319.358191][ T9639] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 320.395367][ T9653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1193'. [ 321.023437][ T9669] tmpfs: Unknown parameter 'nosw' [ 321.133422][ T9666] ALSA: mixer_oss: invalid OSS volume 'DIGIT' [ 321.154743][ T30] audit: type=1400 audit(1755055103.913:344): avc: denied { watch watch_reads } for pid=9667 comm="syz.0.1199" path="/251" dev="tmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 321.293994][ T30] audit: type=1326 audit(1755055103.913:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6790d8ebe9 code=0x7ffc0000 [ 321.393793][ T30] audit: type=1326 audit(1755055103.941:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6790d8ebe9 code=0x7ffc0000 [ 321.491814][ T30] audit: type=1326 audit(1755055103.941:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6790d8ebe9 code=0x7ffc0000 [ 321.559532][ T30] audit: type=1326 audit(1755055103.941:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6790d8ebe9 code=0x7ffc0000 [ 321.627186][ T5865] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 321.666492][ T30] audit: type=1326 audit(1755055103.941:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f6790d8ebe9 code=0x7ffc0000 [ 321.691553][ T30] audit: type=1326 audit(1755055103.941:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6790d8ebe9 code=0x7ffc0000 [ 321.716173][ T30] audit: type=1326 audit(1755055103.941:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6790d8ebe9 code=0x7ffc0000 [ 322.193447][ T30] audit: type=1326 audit(1755055103.941:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6790d8ebe9 code=0x7ffc0000 [ 322.209529][ T9690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1207'. [ 322.218176][ T30] audit: type=1326 audit(1755055103.941:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6790d8ebe9 code=0x7ffc0000 [ 323.027722][ T9706] netlink: 'syz.2.1211': attribute type 10 has an invalid length. [ 323.386712][ T9708] ALSA: mixer_oss: invalid OSS volume 'DIGIT' [ 324.510251][ T9712] netlink: 'syz.1.1214': attribute type 10 has an invalid length. [ 324.873074][ T9712] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 325.071222][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'. [ 325.081535][ T9734] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 325.089669][ T9734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.903694][ T9749] tmpfs: Unknown parameter 'nosw' [ 326.856082][ T9764] syz.2.1233 (9764): drop_caches: 2 [ 327.864530][ T9768] kvm: pic: level sensitive irq not supported [ 327.864748][ T9768] kvm: pic: non byte read [ 327.897257][ T9768] kvm: pic: level sensitive irq not supported [ 327.897326][ T9768] kvm: pic: non byte read [ 327.911638][ T9768] kvm: pic: level sensitive irq not supported [ 327.911700][ T9768] kvm: pic: non byte read [ 327.938862][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 327.938877][ T30] audit: type=1400 audit(1755055110.264:358): avc: denied { bind } for pid=9776 comm="syz.0.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 327.939831][ T9768] kvm: pic: level sensitive irq not supported [ 327.972635][ T30] audit: type=1400 audit(1755055110.264:359): avc: denied { name_bind } for pid=9776 comm="syz.0.1238" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 327.988432][ T9768] kvm: pic: non byte read [ 328.009538][ T9768] kvm: pic: level sensitive irq not supported [ 328.009600][ T9768] kvm: pic: non byte read [ 328.009928][ T5959] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 328.034079][ T9768] kvm: pic: level sensitive irq not supported [ 328.034153][ T9768] kvm: pic: non byte read [ 328.069619][ T30] audit: type=1400 audit(1755055110.264:360): avc: denied { node_bind } for pid=9776 comm="syz.0.1238" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 328.094201][ T9768] kvm: pic: level sensitive irq not supported [ 328.094264][ T9768] kvm: pic: non byte read [ 328.129198][ T9768] kvm: pic: level sensitive irq not supported [ 328.129263][ T9768] kvm: pic: non byte read [ 328.135434][ T30] audit: type=1400 audit(1755055110.264:361): avc: denied { connect } for pid=9776 comm="syz.0.1238" laddr=::1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 328.174193][ T9768] kvm: pic: level sensitive irq not supported [ 328.174259][ T9768] kvm: pic: non byte read [ 328.213943][ T9768] kvm: pic: level sensitive irq not supported [ 328.214006][ T9768] kvm: pic: non byte read [ 328.350399][ T5959] usb 4-1: config 0 has an invalid interface number: 115 but max is 0 [ 328.360343][ T5959] usb 4-1: config 0 has no interface number 0 [ 328.366899][ T5959] usb 4-1: too many endpoints for config 0 interface 115 altsetting 104: 97, using maximum allowed: 30 [ 328.378338][ T5959] usb 4-1: config 0 interface 115 altsetting 104 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 328.400443][ T5959] usb 4-1: config 0 interface 115 has no altsetting 0 [ 328.412376][ T5959] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 328.448014][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.696606][ T5959] usb 4-1: config 0 descriptor?? [ 328.721894][ T5959] cp210x 4-1:0.115: cp210x converter detected [ 329.022801][ T9815] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1235'. [ 329.027352][ T5959] cp210x 4-1:0.115: failed to get vendor val 0x370b size 1: -32 [ 329.392944][ T5959] cp210x 4-1:0.115: querying part number failed [ 329.417266][ T5959] usb 4-1: cp210x converter now attached to ttyUSB0 [ 329.453703][ T5959] usb 4-1: USB disconnect, device number 17 [ 329.487701][ T5959] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 329.535276][ T5959] cp210x 4-1:0.115: device disconnected [ 331.259628][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 331.266425][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.688319][ T976] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 333.888463][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 333.909402][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 334.278148][ T976] usb 5-1: config 0 has an invalid interface number: 115 but max is 0 [ 334.289599][ T976] usb 5-1: config 0 has no interface number 0 [ 334.297841][ T976] usb 5-1: too many endpoints for config 0 interface 115 altsetting 104: 97, using maximum allowed: 30 [ 334.309509][ T976] usb 5-1: config 0 interface 115 altsetting 104 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 334.323675][ T976] usb 5-1: config 0 interface 115 has no altsetting 0 [ 334.330525][ T976] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 334.339643][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.349159][ T976] usb 5-1: config 0 descriptor?? [ 334.356471][ T976] cp210x 5-1:0.115: cp210x converter detected [ 334.432004][ T9915] overlayfs: failed to resolve './bus': -2 [ 334.772917][ T976] cp210x 5-1:0.115: failed to get vendor val 0x370b size 1: -32 [ 334.817290][ T9920] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1272'. [ 335.034312][ T976] cp210x 5-1:0.115: querying part number failed [ 335.248738][ T976] usb 5-1: cp210x converter now attached to ttyUSB0 [ 335.293653][ T976] usb 5-1: USB disconnect, device number 15 [ 335.324471][ T976] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 335.505449][ T976] cp210x 5-1:0.115: device disconnected [ 336.745679][ T5910] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 336.991982][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 337.005938][ T5910] usb 3-1: no configurations [ 337.025209][ T5910] usb 3-1: can't read configurations, error -22 [ 337.269816][ T5910] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 337.381993][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1291'. [ 337.395389][ T9953] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 337.403383][ T9953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.505676][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 337.552983][ T5910] usb 3-1: no configurations [ 337.657529][ T5910] usb 3-1: can't read configurations, error -22 [ 337.677585][ T5910] usb usb3-port1: attempt power cycle [ 338.030650][ T92] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 338.050269][ T5910] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 338.094917][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 338.106231][ T5910] usb 3-1: no configurations [ 338.110854][ T5910] usb 3-1: can't read configurations, error -22 [ 338.259206][ T30] audit: type=1400 audit(1755055119.918:362): avc: denied { write } for pid=9971 comm="syz.1.1298" path="socket:[28881]" dev="sockfs" ino=28881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 338.282987][ T92] usb 1-1: Using ep0 maxpacket: 16 [ 338.307410][ T92] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 338.338052][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.348652][ T5910] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 338.360794][ T92] usb 1-1: config 0 descriptor?? [ 338.373856][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 338.380204][ T5910] usb 3-1: no configurations [ 338.386195][ T5910] usb 3-1: can't read configurations, error -22 [ 338.394874][ T5910] usb usb3-port1: unable to enumerate USB device [ 338.430098][ T92] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 339.717304][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'. [ 339.726932][ T9996] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 339.735258][ T9996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.792613][ T976] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 340.021533][ T976] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 340.051504][ T976] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 340.064102][ T976] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 340.077180][ T976] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.088609][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.099268][ T976] usb 4-1: Product: syz [ 340.103526][ T976] usb 4-1: Manufacturer: syz [ 340.108313][ T976] usb 4-1: SerialNumber: syz [ 340.131402][ T9993] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 340.368182][ T9993] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 340.997228][ T24] usb 1-1: USB disconnect, device number 15 [ 341.249798][ T9993] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 341.359848][T10027] overlayfs: missing 'lowerdir' [ 341.641422][ T5910] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 341.673701][ T976] cdc_ncm 4-1:1.0: bind() failure [ 341.714946][ T976] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 341.726543][ T976] cdc_ncm 4-1:1.1: bind() failure [ 341.855187][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 341.864553][ T5910] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 341.873662][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.903169][ T5910] usb 3-1: config 0 has no interface number 0 [ 341.912791][ T5958] usb 4-1: USB disconnect, device number 18 [ 341.968874][ T5910] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 341.987181][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.054026][T10037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1317'. [ 342.076678][T10037] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 342.076678][T10037] program syz.1.1317 not setting count and/or reply_len properly [ 342.438082][ T5910] usb 3-1: Product: syz [ 342.442543][ T5910] usb 3-1: Manufacturer: syz [ 342.447275][ T5910] usb 3-1: SerialNumber: syz [ 342.511495][ T5910] usb 3-1: config 0 descriptor?? [ 342.637534][ T5910] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 342.777118][T10041] netlink: 'syz.0.1319': attribute type 10 has an invalid length. [ 343.218886][ T5910] usb 3-1: No valid video chain found. [ 343.557215][ T5910] usb 3-1: USB disconnect, device number 13 [ 344.571645][ T30] audit: type=1400 audit(1755055125.820:363): avc: denied { bind } for pid=10060 comm="syz.4.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 344.912809][ T30] audit: type=1400 audit(1755055126.054:364): avc: denied { kexec_image_load } for pid=10060 comm="syz.4.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 345.646486][T10090] No control pipe specified [ 345.742301][T10092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 345.749597][T10092] IPv6: NLM_F_CREATE should be set when creating new route [ 346.025491][ T5959] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 346.402472][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'. [ 346.414049][T10116] netlink: 'syz.1.1349': attribute type 1 has an invalid length. [ 346.549445][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 346.947058][ T5959] usb 3-1: no configurations [ 346.954531][ T5959] usb 3-1: can't read configurations, error -22 [ 347.443663][ T5959] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 347.639415][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 348.434771][ T5959] usb 3-1: no configurations [ 348.439373][ T5959] usb 3-1: can't read configurations, error -22 [ 348.462040][ T5959] usb usb3-port1: attempt power cycle [ 348.837684][ T5959] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 348.883202][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 348.884929][ T5958] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 348.889020][ T5959] usb 3-1: no configurations [ 348.935848][ T5959] usb 3-1: can't read configurations, error -22 [ 349.129935][ T5958] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 349.176821][ T5958] usb 4-1: config 0 has no interface number 0 [ 349.197675][ T5958] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 349.207732][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.313493][ T5865] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 349.681228][ T5958] usb 4-1: Product: syz [ 349.685482][ T5958] usb 4-1: Manufacturer: syz [ 349.690159][ T5958] usb 4-1: SerialNumber: syz [ 349.708558][ T5958] usb 4-1: config 0 descriptor?? [ 349.747376][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1360'. [ 350.044940][ T30] audit: type=1400 audit(1755055130.937:365): avc: denied { ioctl } for pid=10136 comm="syz.3.1354" path="socket:[29171]" dev="sockfs" ino=29171 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 350.558726][ T5958] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 350.580042][ T5958] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 350.588421][ T5958] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 350.597901][ T5958] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 350.619898][ T5958] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 351.043195][ T5958] usb 4-1: USB disconnect, device number 19 [ 351.059897][ T5958] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 351.070086][ T5958] keyspan 4-1:0.133: device disconnected [ 352.150526][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1372'. [ 354.829943][T10229] IPVS: Error joining to the multicast group [ 360.092756][T10277] netlink: 'syz.0.1397': attribute type 10 has an invalid length. [ 364.411242][T10329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.418498][T10329] IPv6: NLM_F_CREATE should be set when creating new route [ 365.691177][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1416'. [ 368.565232][T10368] input: syz0 as /devices/virtual/input/input13 [ 369.462177][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1429'. [ 369.496624][ T61] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.557448][ T61] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.570763][ T61] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.624204][ T61] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.821661][ T5958] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 369.995325][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.039742][ T30] audit: type=1400 audit(1755055149.617:366): avc: denied { shutdown } for pid=10398 comm="syz.3.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 370.119851][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.290657][ T5958] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 370.439473][ T5958] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 370.500773][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.718306][ T5958] usb 2-1: config 0 descriptor?? [ 370.916087][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1442'. [ 370.937648][ T7877] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.987921][ T61] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.131760][ T61] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.156676][T10414] netlink: 'syz.0.1445': attribute type 10 has an invalid length. [ 371.295176][ T61] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.544040][ T5958] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 371.577776][T10414] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 372.006361][ T30] audit: type=1400 audit(1755055151.488:367): avc: denied { read } for pid=10433 comm="syz.2.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 372.348762][T10436] ISOFS: Unable to identify CD-ROM format. [ 372.383559][ T30] audit: type=1400 audit(1755055151.768:368): avc: denied { setopt } for pid=10433 comm="syz.2.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 373.961245][ T976] usb 2-1: USB disconnect, device number 30 [ 375.409564][T10474] IPVS: Error joining to the multicast group [ 375.495574][ T30] audit: type=1400 audit(1755055154.724:369): avc: denied { connect } for pid=10479 comm="syz.2.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 376.108299][T10485] comedi: valid board names for 8255 driver are: [ 376.114686][T10485] 8255 [ 376.117487][T10485] comedi: valid board names for vmk80xx driver are: [ 376.124745][T10485] vmk80xx [ 376.127783][T10485] comedi: valid board names for usbduxsigma driver are: [ 376.135629][T10485] usbduxsigma [ 376.139015][T10485] comedi: valid board names for usbduxfast driver are: [ 376.145914][T10485] usbduxfast [ 376.149213][T10485] comedi: valid board names for usbdux driver are: [ 376.156343][T10485] usbdux [ 376.159298][T10485] comedi: valid board names for ni6501 driver are: [ 376.166736][T10485] ni6501 [ 376.169692][T10485] comedi: valid board names for dt9812 driver are: [ 376.176284][T10485] dt9812 [ 376.179238][T10485] comedi: valid board names for ni_labpc_cs driver are: [ 376.186802][T10485] ni_labpc_cs [ 376.190181][T10485] comedi: valid board names for ni_daq_700 driver are: [ 376.198252][T10485] ni_daq_700 [ 376.201559][T10485] comedi: valid board names for labpc_pci driver are: [ 376.237796][T10485] labpc_pci [ 376.241051][T10485] comedi: valid board names for adl_pci9118 driver are: [ 376.248627][T10485] pci9118dg [ 376.251855][T10485] pci9118hg [ 376.255063][T10485] pci9118hr [ 376.259209][T10485] comedi: valid board names for 8255_pci driver are: [ 376.265896][T10485] 8255_pci [ 376.269059][T10485] comedi: valid board names for s526 driver are: [ 376.275397][T10485] s526 [ 376.278179][T10485] comedi: valid board names for multiq3 driver are: [ 376.285412][T10485] multiq3 [ 376.288458][T10485] comedi: valid board names for pcmuio driver are: [ 376.295882][T10485] pcmuio48 [ 376.299240][T10485] pcmuio96 [ 376.302582][T10485] comedi: valid board names for pcmmio driver are: [ 376.309095][T10485] pcmmio [ 376.312649][T10485] comedi: valid board names for pcmda12 driver are: [ 376.319250][T10485] pcmda12 [ 376.323182][T10485] comedi: valid board names for pcmad driver are: [ 376.329610][T10485] pcmad12 [ 376.332675][T10485] pcmad16 [ 376.335714][T10485] comedi: valid board names for ni_labpc driver are: [ 376.342405][T10485] lab-pc-1200 [ 376.349358][T10485] lab-pc-1200ai [ 376.352954][T10485] lab-pc+ [ 376.356905][T10485] comedi: valid board names for atmio16 driver are: [ 376.363506][T10485] atmio16 [ 376.366587][T10485] atmio16d [ 376.370032][T10485] comedi: valid board names for ni_at_ao driver are: [ 376.377329][T10485] at-ao-6 [ 376.380368][T10485] at-ao-10 [ 376.383495][T10485] comedi: valid board names for ni_at_a2150 driver are: [ 376.391363][T10485] ni_at_a2150 [ 376.394753][T10485] comedi: valid board names for adq12b driver are: [ 376.401290][T10485] adq12b [ 376.404247][T10485] comedi: valid board names for mpc624 driver are: [ 376.411625][T10485] mpc624 [ 376.414778][T10485] comedi: valid board names for c6xdigio driver are: [ 376.422387][T10485] c6xdigio [ 376.425506][T10485] comedi: valid board names for aio_iiro_16 driver are: [ 376.432516][T10485] aio_iiro_16 [ 376.435903][T10485] comedi: valid board names for aio_aio12_8 driver are: [ 376.443460][T10485] aio_aio12_8 [ 376.446856][T10485] aio_ai12_8 [ 376.451116][T10485] aio_ao12_4 [ 376.454433][T10485] comedi: valid board names for fl512 driver are: [ 376.460883][T10485] fl512 [ 376.463758][T10485] comedi: valid board names for dmm32at driver are: [ 376.470361][T10485] dmm32at [ 376.474020][T10485] comedi: valid board names for dt282x driver are: [ 376.480537][T10485] dt2821 [ 376.484401][T10485] dt2821-f [ 376.487529][T10485] dt2821-g [ 376.490659][T10485] dt2823 [ 376.493648][T10485] dt2824-pgh [ 376.496946][T10485] dt2824-pgl [ 376.500241][T10485] dt2825 [ 376.503198][T10485] dt2827 [ 376.506748][T10485] dt2828 [ 376.509700][T10485] dt2829 [ 376.512649][T10485] dt21-ez [ 376.516704][T10485] dt23-ez [ 376.519961][T10485] dt24-ez [ 376.522977][T10485] dt24-ez-pgl [ 376.526401][T10485] comedi: valid board names for dt2817 driver are: [ 376.559396][T10485] dt2817 [ 376.562365][T10485] comedi: valid board names for dt2815 driver are: [ 376.569606][T10485] dt2815 [ 376.572568][T10485] comedi: valid board names for dt2814 driver are: [ 376.580103][T10485] dt2814 [ 376.583046][T10485] comedi: valid board names for dt2811 driver are: [ 376.589585][T10485] dt2811-pgh [ 376.592870][T10485] dt2811-pgl [ 376.596166][T10485] comedi: valid board names for dt2801 driver are: [ 376.685825][T10485] dt2801 [ 376.688788][T10485] comedi: valid board names for das6402 driver are: [ 376.695368][T10485] das6402-12 [ 376.699250][T10485] das6402-16 [ 376.702523][T10485] comedi: valid board names for das1800 driver are: [ 376.710008][T10485] das-1701st [ 376.713279][T10485] das-1701st-da [ 376.716813][T10485] das-1702st [ 376.720123][T10485] das-1702st-da [ 376.723655][T10485] das-1702hr [ 376.726921][T10485] das-1702hr-da [ 376.731056][T10485] das-1701ao [ 376.734750][T10485] das-1702ao [ 376.738021][T10485] das-1801st [ 376.742219][T10485] das-1801st-da [ 376.745750][T10485] das-1802st [ 376.749024][T10485] das-1802st-da [ 376.752591][T10485] das-1802hr [ 376.755860][T10485] das-1802hr-da [ 376.759441][T10485] das-1801hc [ 376.763318][T10485] das-1802hc [ 376.766590][T10485] das-1801ao [ 376.769856][T10485] das-1802ao [ 376.774043][T10485] comedi: valid board names for das800 driver are: [ 376.780529][T10485] das-800 [ 376.783574][T10485] cio-das800 [ 376.786843][T10485] das-801 [ 376.789853][T10485] cio-das801 [ 376.793932][T10485] das-802 [ 376.796947][T10485] cio-das802 [ 376.800224][T10485] cio-das802/16 [ 376.804665][T10485] comedi: valid board names for isa-das08 driver are: [ 376.811410][T10485] isa-das08 [ 376.814670][T10485] das08-pgm [ 376.817870][T10485] das08-pgh [ 376.821080][T10485] das08-pgl [ 376.824872][T10485] das08-aoh [ 376.828065][T10485] das08-aol [ 376.831290][T10485] das08-aom [ 376.834488][T10485] das08/jr-ao [ 376.838783][T10485] das08jr-16-ao [ 376.842329][T10485] pc104-das08 [ 376.846125][T10485] das08jr/16 [ 376.849403][T10485] comedi: valid board names for das16m1 driver are: [ 376.855983][T10485] das16m1 [ 376.859702][T10485] comedi: valid board names for dac02 driver are: [ 376.866102][T10485] dac02 [ 376.870157][T10485] comedi: valid board names for rti802 driver are: [ 376.876714][T10485] rti802 [ 376.879697][T10485] comedi: valid board names for rti800 driver are: [ 376.886195][T10485] rti800 [ 376.889736][T10485] rti815 [ 376.892663][T10485] comedi: valid board names for pcm3724 driver are: [ 376.900333][T10485] pcm3724 [ 376.903343][T10485] comedi: valid board names for pcl818 driver are: [ 376.909865][T10485] pcl818l [ 376.912874][T10485] pcl818h [ 376.915881][T10485] pcl818hd [ 376.918977][T10485] pcl818hg [ 376.922683][T10485] pcl818 [ 376.925606][T10485] pcl718 [ 376.928525][T10485] pcm3718 [ 376.932439][T10485] comedi: valid board names for pcl816 driver are: [ 376.938929][T10485] pcl816 [ 376.941903][T10485] pcl814b [ 376.944911][T10485] comedi: valid board names for pcl812 driver are: [ 376.951390][T10485] pcl812 [ 376.955359][T10485] pcl812pg [ 376.958469][T10485] acl8112pg [ 376.961651][T10485] acl8112dg [ 376.965791][T10485] acl8112hg [ 376.968977][T10485] a821pgl [ 376.971996][T10485] a821pglnda [ 376.975303][T10485] a821pgh [ 376.978313][T10485] a822pgl [ 376.981321][T10485] a822pgh [ 376.984944][T10485] a823pgl [ 376.987955][T10485] a823pgh [ 376.990966][T10485] pcl813 [ 376.993886][T10485] pcl813b [ 376.997806][T10485] acl8113 [ 377.000817][T10485] iso813 [ 377.003739][T10485] acl8216 [ 377.006784][T10485] a826pg [ 377.009705][T10485] comedi: valid board names for pcl730 driver are: [ 377.016192][T10485] pcl730 [ 377.019713][T10485] iso730 [ 377.022636][T10485] acl7130 [ 377.025643][T10485] pcm3730 [ 377.029623][T10485] pcl725 [ 377.032551][T10485] p8r8dio [ 377.035561][T10485] acl7225b [ 377.038688][T10485] p16r16dio [ 377.041868][T10485] pcl733 [ 377.044787][T10485] pcl734 [ 377.047710][T10485] opmm-1616-xt [ 377.051766][T10485] pearl-mm-p [ 377.055035][T10485] ir104-pbf [ 377.058216][T10485] comedi: valid board names for pcl726 driver are: [ 377.066027][T10485] pcl726 [ 377.068957][T10485] pcl727 [ 377.071915][T10485] pcl728 [ 377.074837][T10485] acl6126 [ 377.077842][T10485] acl6128 [ 377.081462][T10485] comedi: valid board names for pcl724 driver are: [ 377.087949][T10485] pcl724 [ 377.090877][T10485] pcl722 [ 377.094786][T10485] pcl731 [ 377.097712][T10485] acl7122 [ 377.100717][T10485] acl7124 [ 377.103759][T10485] pet48dio [ 377.106853][T10485] pcmio48 [ 377.109861][T10485] onyx-mm-dio [ 377.113910][T10485] comedi: valid board names for pcl711 driver are: [ 377.120412][T10485] pcl711 [ 377.124244][T10485] pcl711b [ 377.127253][T10485] acl8112hg [ 377.130435][T10485] acl8112dg [ 377.133625][T10485] comedi: valid board names for amplc_pc263 driver are: [ 377.140595][T10485] pc263 [ 377.143429][T10485] comedi: valid board names for amplc_pc236 driver are: [ 377.150948][T10485] pc36at [ 377.153873][T10485] comedi: valid board names for amplc_dio200 driver are: [ 377.161775][T10485] pc212e [ 377.164697][T10485] pc214e [ 377.167658][T10485] pc215e [ 377.170579][T10485] pc218e [ 377.173921][T10485] pc272e [ 377.177464][T10485] comedi: valid board names for comedi_parport driver are: [ 377.184643][T10485] comedi_parport [ 377.189229][T10485] comedi: valid board names for comedi_test driver are: [ 377.196155][T10485] comedi_test [ 377.199576][T10485] comedi: valid board names for comedi_bond driver are: [ 377.206582][T10485] comedi_bond [ 378.627335][T10511] syz.3.1475 (10511): drop_caches: 2 [ 380.069753][T10520] overlayfs: failed to resolve './bus': -2 [ 383.035260][T10556] macsec1: entered promiscuous mode [ 383.059745][T10556] bond0: entered promiscuous mode [ 383.071639][T10556] bond_slave_0: entered promiscuous mode [ 383.093665][T10556] bond_slave_1: entered promiscuous mode [ 383.114318][T10556] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 383.186581][T10556] bond0: left promiscuous mode [ 383.201778][T10556] bond_slave_0: left promiscuous mode [ 383.269250][T10556] bond_slave_1: left promiscuous mode [ 383.381619][T10556] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 383.450055][T10562] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1493'. [ 383.751186][T10568] tipc: Started in network mode [ 383.775081][T10568] tipc: Node identity 4, cluster identity 4711 [ 383.792060][T10568] tipc: Node number set to 4 [ 383.859567][T10575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1498'. [ 384.771010][T10595] netlink: 'syz.4.1506': attribute type 10 has an invalid length. [ 384.792418][T10595] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 384.831887][ T5917] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 384.852691][ T5958] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 385.002624][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 385.163088][ T5958] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 385.175468][ T5958] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 385.187686][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 385.199239][ T5958] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 385.210060][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 385.221391][ T5917] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 385.231446][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.245046][ T5958] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 385.259154][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.267459][ T5958] usb 2-1: Product: syz [ 385.315383][ T5917] usb 4-1: config 0 descriptor?? [ 385.344560][ T5958] usb 2-1: Manufacturer: syz [ 385.357285][T10591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 385.420177][ T5958] usb 2-1: SerialNumber: syz [ 385.494325][ T5917] hub 4-1:0.0: USB hub found [ 385.568853][T10593] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 385.670085][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1512'. [ 385.850176][T10593] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 385.860219][T10613] ALSA: mixer_oss: invalid OSS volume 'DIGIT' [ 385.867627][T10593] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 386.000655][ T5917] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 386.237642][ T5917] usbhid 4-1:0.0: can't add hid device: -71 [ 386.248128][ T5917] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 386.288822][ T5917] usb 4-1: USB disconnect, device number 20 [ 386.399259][T10630] netlink: 'syz.4.1522': attribute type 10 has an invalid length. [ 386.536353][T10593] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 386.544498][T10593] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 386.855019][ T5958] cdc_ncm 2-1:1.0: failed to get mac address [ 386.950821][ T5958] cdc_ncm 2-1:1.0: bind() failure [ 386.977128][ T5958] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 386.992008][ T5958] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 387.001239][ T5958] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 387.025711][ T5958] usb 2-1: USB disconnect, device number 31 [ 387.308381][ T30] audit: type=1326 audit(1755055165.799:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35558ebe9 code=0x7ffc0000 [ 387.332929][ T5931] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 387.347076][ T30] audit: type=1326 audit(1755055165.799:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35558ebe9 code=0x7ffc0000 [ 387.350341][ T78] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 387.372417][ T30] audit: type=1326 audit(1755055165.799:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd35558ebe9 code=0x7ffc0000 [ 387.431649][ T30] audit: type=1326 audit(1755055165.799:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35558ebe9 code=0x7ffc0000 [ 387.456791][ T30] audit: type=1326 audit(1755055165.799:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35558ebe9 code=0x7ffc0000 [ 387.491417][ T30] audit: type=1326 audit(1755055165.799:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd355590a7c code=0x7ffc0000 [ 387.518680][ T30] audit: type=1326 audit(1755055165.799:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd3555909b4 code=0x7ffc0000 [ 387.546166][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 387.709593][ T78] usb 5-1: config 0 has an invalid interface number: 115 but max is 0 [ 387.719136][ T78] usb 5-1: config 0 has no interface number 0 [ 387.719358][T10647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.725243][ T78] usb 5-1: too many endpoints for config 0 interface 115 altsetting 104: 97, using maximum allowed: 30 [ 387.725276][ T78] usb 5-1: config 0 interface 115 altsetting 104 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 387.759937][ T78] usb 5-1: config 0 interface 115 has no altsetting 0 [ 387.767140][ T78] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 387.776554][ T78] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.786664][T10647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.029056][ T78] usb 5-1: config 0 descriptor?? [ 388.052177][ T5931] usb 3-1: unable to get BOS descriptor or descriptor too short [ 388.062097][ T78] cp210x 5-1:0.115: cp210x converter detected [ 388.097717][ T30] audit: type=1326 audit(1755055165.799:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd3555909b4 code=0x7ffc0000 [ 388.123173][ T5931] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 388.132036][ T30] audit: type=1326 audit(1755055165.799:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35558ebe9 code=0x7ffc0000 [ 388.158974][ T30] audit: type=1326 audit(1755055165.799:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35558ebe9 code=0x7ffc0000 [ 388.190158][ T5931] usb 3-1: can't read configurations, error -71 [ 388.281854][ T78] cp210x 5-1:0.115: failed to get vendor val 0x370b size 1: -32 [ 388.317117][ T78] cp210x 5-1:0.115: querying part number failed [ 388.333938][T10672] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1529'. [ 388.343443][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 388.455217][ T78] usb 5-1: cp210x converter now attached to ttyUSB0 [ 388.565197][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 388.586611][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.675225][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.698813][ T78] usb 5-1: USB disconnect, device number 16 [ 388.722133][ T78] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 388.734921][ T24] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 388.745756][ T78] cp210x 5-1:0.115: device disconnected [ 388.756438][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.787617][ T24] usb 1-1: config 0 descriptor?? [ 389.016435][T10683] loop8: detected capacity change from 0 to 7 [ 389.057966][T10683] Dev loop8: unable to read RDB block 7 [ 389.086967][T10684] No control pipe specified [ 389.476269][ T24] ft260 0003:0403:6030.000C: unknown main item tag 0x7 [ 389.490877][T10683] loop8: unable to read partition table [ 389.497351][T10683] loop8: partition table beyond EOD, truncated [ 389.504266][T10683] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 389.548471][ T24] ft260 0003:0403:6030.000C: failed to retrieve chip version [ 389.565547][ T24] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -32 [ 389.996268][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 390.312377][T10701] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 390.626566][ T5958] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 391.381538][ T78] usb 1-1: USB disconnect, device number 16 [ 391.431401][ T5958] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 391.447330][ T5958] usb 3-1: config 0 has no interface number 0 [ 391.457731][ T5958] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 391.476785][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.484991][ T5958] usb 3-1: Product: syz [ 391.489327][ T5958] usb 3-1: Manufacturer: syz [ 391.800440][ T5958] usb 3-1: SerialNumber: syz [ 391.807780][ T5958] usb 3-1: config 0 descriptor?? [ 391.946573][T10723] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1553'. [ 391.991952][T10725] loop8: detected capacity change from 0 to 7 [ 392.001093][T10725] Dev loop8: unable to read RDB block 7 [ 392.007744][ T78] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 392.015851][T10725] loop8: unable to read partition table [ 392.021679][T10725] loop8: partition table beyond EOD, truncated [ 392.028797][T10725] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 392.165973][ T78] usb 1-1: Using ep0 maxpacket: 16 [ 392.174534][ T78] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.203437][ T78] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 392.225281][ T78] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 392.238749][ T78] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.249848][ T78] usb 1-1: config 0 descriptor?? [ 392.269273][ T78] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 392.409661][ T5958] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 392.420244][ T5958] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 392.428326][ T5958] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 392.436741][ T5958] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 392.448740][ T5958] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 393.281770][ T78] usb 3-1: USB disconnect, device number 20 [ 393.481553][ T78] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 393.508621][ T78] keyspan 3-1:0.133: device disconnected [ 394.453564][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 394.453579][ T30] audit: type=1400 audit(1755055172.478:387): avc: denied { connect } for pid=10760 comm="syz.2.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 394.822196][T10770] syz.1.1568 (10770): drop_caches: 2 [ 394.842694][ T78] usb 1-1: USB disconnect, device number 17 [ 395.973493][ T30] audit: type=1400 audit(1755055173.787:388): avc: denied { mounton } for pid=10773 comm="syz.0.1571" path="/proc/912/task" dev="proc" ino=31830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 396.411679][ T30] audit: type=1400 audit(1755055173.853:389): avc: denied { ioctl } for pid=10781 comm="syz.3.1574" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 396.892614][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.900331][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.222902][ T30] audit: type=1400 audit(1755055176.004:390): avc: denied { ioctl } for pid=10805 comm="syz.3.1580" path="socket:[31884]" dev="sockfs" ino=31884 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 398.338858][ T30] audit: type=1400 audit(1755055176.117:391): avc: denied { write } for pid=10805 comm="syz.3.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 398.672800][T10818] syz.4.1583 (10818): drop_caches: 2 [ 398.688358][ T5931] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 399.680607][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 399.690301][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.710997][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 399.737331][ T5931] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 399.775062][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.794907][ T5931] usb 3-1: config 0 descriptor?? [ 399.841591][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'. [ 399.850634][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1590'. [ 399.946869][ T5931] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 399.979619][T10838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.990576][T10838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.999319][T10838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.007650][T10838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.140717][T10839] IPVS: Error joining to the multicast group [ 400.455117][ T30] audit: type=1400 audit(1755055178.100:392): avc: denied { write } for pid=10842 comm="syz.0.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 400.457094][T10843] tipc: Enabled bearer , priority 0 [ 400.522131][T10845] overlayfs: failed to resolve './bus': -2 [ 400.918688][T10851] tipc: Enabled bearer , priority 0 [ 400.926984][T10851] syzkaller0: entered promiscuous mode [ 400.933567][T10851] syzkaller0: entered allmulticast mode [ 400.953972][T10851] tipc: Resetting bearer [ 400.962547][T10850] tipc: Resetting bearer [ 400.976119][T10850] tipc: Disabling bearer [ 401.376503][ T5931] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 401.482564][T10862] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 401.553275][ T5931] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 401.561620][ T5931] usb 2-1: config 0 has no interface number 0 [ 401.569638][ T5931] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 401.578881][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.587698][ T5931] usb 2-1: Product: syz [ 401.591939][ T5931] usb 2-1: Manufacturer: syz [ 401.596782][ T5931] usb 2-1: SerialNumber: syz [ 401.603150][ T5931] usb 2-1: config 0 descriptor?? [ 402.116849][ T78] usb 3-1: USB disconnect, device number 21 [ 402.417546][ T5931] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 402.478404][ T5931] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 402.501499][ T5931] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 402.565412][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1603'. [ 402.624329][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1603'. [ 403.419618][ T5931] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 403.491857][ T5931] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 403.506645][ T5931] usb 2-1: USB disconnect, device number 32 [ 403.518719][ T5931] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 403.529816][ T5931] keyspan 2-1:0.133: device disconnected [ 403.830935][T10888] overlayfs: failed to resolve './bus': -2 [ 405.518984][ T5931] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 407.426908][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1618'. [ 407.440166][T10916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1618'. [ 407.559544][ T5865] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 407.566856][ T5859] Bluetooth: hci5: command 0x1003 tx timeout [ 407.589936][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 408.313799][ T5931] usb 2-1: device descriptor read/all, error -71 [ 408.960742][ T92] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 409.145261][ T92] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 409.164104][ T92] usb 1-1: config 0 has no interface number 0 [ 409.224431][ T92] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 409.288811][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.369220][ T92] usb 1-1: Product: syz [ 409.411868][ T92] usb 1-1: Manufacturer: syz [ 409.450689][ T92] usb 1-1: SerialNumber: syz [ 409.606669][ T92] usb 1-1: config 0 descriptor?? [ 410.870672][ T92] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 410.882890][ T92] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 410.892462][ T92] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 410.921973][ T92] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 411.038294][ T92] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 411.673019][ T5931] usb 1-1: USB disconnect, device number 18 [ 412.712964][ T5931] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 412.990768][ T92] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 413.553579][ T5931] keyspan 1-1:0.133: device disconnected [ 413.717834][ T5865] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 413.725713][ T5859] Bluetooth: hci5: command 0x1003 tx timeout [ 413.815882][ T92] usb 2-1: Using ep0 maxpacket: 16 [ 413.851360][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.879416][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.907959][ T92] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 414.001446][ T92] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 414.077396][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.745734][T10966] netlink: 'syz.3.1633': attribute type 10 has an invalid length. [ 414.949993][ T92] usb 2-1: config 0 descriptor?? [ 414.971133][ T30] audit: type=1400 audit(1755055191.672:393): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 415.062698][ T92] usb 2-1: can't set config #0, error -71 [ 415.140356][ T92] usb 2-1: USB disconnect, device number 35 [ 415.231211][T10971] netlink: 'syz.4.1635': attribute type 10 has an invalid length. [ 416.168055][T10975] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1638'. [ 416.439865][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 416.452300][T10982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1638'. [ 417.164315][ T30] audit: type=1400 audit(1755055193.730:394): avc: denied { setopt } for pid=10989 comm="syz.3.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 417.191090][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1641'. [ 417.204258][ T30] audit: type=1400 audit(1755055193.749:395): avc: denied { ioctl } for pid=10989 comm="syz.3.1641" path="socket:[32952]" dev="sockfs" ino=32952 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 418.478488][ T30] audit: type=1400 audit(1755055194.497:396): avc: denied { listen } for pid=10997 comm="syz.0.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 418.534427][ T30] audit: type=1400 audit(1755055194.507:397): avc: denied { accept } for pid=10997 comm="syz.0.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 419.501653][T11012] tipc: Started in network mode [ 419.581526][T11012] tipc: Node identity 4, cluster identity 4711 [ 419.777880][T11012] tipc: Node number set to 4 [ 422.135050][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 422.450322][ T5865] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 422.709829][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 422.729343][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 423.176387][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 423.302260][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 423.409131][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.512518][ T24] usb 5-1: config 0 descriptor?? [ 423.522632][T11059] syz.0.1664 (11059): drop_caches: 2 [ 423.529681][T11035] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 423.566736][ T24] hub 5-1:0.0: USB hub found [ 423.885935][ T24] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 424.998368][ T24] usbhid 5-1:0.0: can't add hid device: -32 [ 425.012448][T11083] netlink: 'syz.0.1672': attribute type 5 has an invalid length. [ 425.022373][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 425.263206][ T24] usb 5-1: USB disconnect, device number 17 [ 425.334371][T11090] netlink: 'syz.1.1675': attribute type 10 has an invalid length. [ 426.555700][T11099] syz.4.1677 (11099): drop_caches: 2 [ 426.931963][ T5910] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 427.711731][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 427.769595][ T5910] usb 1-1: config 0 has no interfaces? [ 427.793446][ T5910] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 427.851680][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.965836][ T5910] usb 1-1: Product: syz [ 427.970652][ T5910] usb 1-1: Manufacturer: syz [ 427.979722][ T5910] usb 1-1: SerialNumber: syz [ 427.997375][ T5910] usb 1-1: config 0 descriptor?? [ 428.437606][ T5931] usb 1-1: USB disconnect, device number 19 [ 428.840492][ T30] audit: type=1400 audit(1755055204.637:398): avc: denied { ioctl } for pid=11128 comm="syz.4.1689" path="socket:[32567]" dev="sockfs" ino=32567 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 429.264539][ T30] audit: type=1400 audit(1755055205.049:399): avc: denied { ioctl } for pid=11138 comm="syz.1.1692" path="socket:[32612]" dev="sockfs" ino=32612 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 429.295006][ T30] audit: type=1400 audit(1755055205.049:400): avc: denied { write } for pid=11138 comm="syz.1.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 431.209703][T11166] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 432.615782][T11184] syzkaller1: entered promiscuous mode [ 432.623937][T11184] syzkaller1: entered allmulticast mode [ 432.789603][ T5917] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 432.877161][T11193] syz.4.1710 (11193): drop_caches: 2 [ 432.904955][T11185] kvm: faulting far call emulation tainted memory [ 432.950086][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 432.964800][ T5917] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 432.978595][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.019281][ T5917] usb 1-1: config 0 has no interface number 0 [ 433.044545][ T5917] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 433.064811][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.089683][ T5917] usb 1-1: Product: syz [ 433.125046][ T5917] usb 1-1: Manufacturer: syz [ 433.141797][ T5917] usb 1-1: SerialNumber: syz [ 433.172628][ T5917] usb 1-1: config 0 descriptor?? [ 433.212809][ T5917] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 433.244643][ T5917] usb 1-1: No valid video chain found. [ 433.587477][ T5910] usb 1-1: USB disconnect, device number 20 [ 435.239263][ T5910] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 435.800804][ T5910] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 435.819430][ T5910] usb 3-1: config 0 has no interface number 0 [ 435.857355][ T5910] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 436.402851][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.416710][ T5910] usb 3-1: Product: syz [ 436.431221][ T5910] usb 3-1: Manufacturer: syz [ 436.465951][ T5910] usb 3-1: SerialNumber: syz [ 436.492188][ T5910] usb 3-1: config 0 descriptor?? [ 438.533986][ T5910] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 438.556280][ T5910] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 438.567666][ T5910] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 438.612224][ T5910] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 438.642140][ T5910] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 438.990902][ T5910] usb 3-1: USB disconnect, device number 22 [ 438.998737][ T5910] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 439.010865][ T5910] keyspan 3-1:0.133: device disconnected [ 439.332140][ T5931] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 439.503364][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 439.531472][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.561153][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.574617][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 439.590693][ T5931] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 439.600605][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.699620][ T5931] usb 1-1: config 0 descriptor?? [ 439.735529][ T30] audit: type=1400 audit(1755055214.833:401): avc: denied { write } for pid=11264 comm="syz.2.1734" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 440.273847][T11265] trusted_key: encrypted_key: insufficient parameters specified [ 440.419848][ T5931] usbhid 1-1:0.0: can't add hid device: -71 [ 440.426000][ T30] audit: type=1400 audit(1755055215.067:402): avc: denied { bind } for pid=11261 comm="syz.3.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 440.460849][ T5931] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 440.541368][ T5931] usb 1-1: USB disconnect, device number 21 [ 440.671837][T11269] bridge0: port 3(gretap0) entered blocking state [ 440.678297][T11269] bridge0: port 3(gretap0) entered disabled state [ 440.684824][T11269] gretap0: entered allmulticast mode [ 440.747789][T11269] gretap0: entered promiscuous mode [ 440.754277][T11269] bridge0: port 3(gretap0) entered blocking state [ 440.760732][T11269] bridge0: port 3(gretap0) entered forwarding state [ 441.307709][ T92] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 441.739609][T11288] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1742'. [ 441.970247][T11293] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1744'. [ 442.065597][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1744'. [ 442.079143][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1744'. [ 442.227551][ T92] usb 4-1: Using ep0 maxpacket: 32 [ 443.011939][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.051970][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.107954][ T92] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 443.132921][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.159128][ T92] usb 4-1: config 0 descriptor?? [ 444.198134][ T92] usbhid 4-1:0.0: can't add hid device: -71 [ 444.204194][ T92] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 444.321782][ T92] usb 4-1: USB disconnect, device number 21 [ 444.476463][T11329] netlink: 'syz.2.1752': attribute type 10 has an invalid length. [ 444.602297][T11329] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 444.624171][ T78] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 445.265992][ T78] usb 1-1: Using ep0 maxpacket: 16 [ 445.310506][ T78] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 445.804346][ T78] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.834903][ T78] usb 1-1: config 0 has no interface number 0 [ 445.851204][ T78] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 445.905438][ T78] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.947204][ T78] usb 1-1: Product: syz [ 445.953991][ T78] usb 1-1: Manufacturer: syz [ 445.958713][ T78] usb 1-1: SerialNumber: syz [ 445.996663][ T78] usb 1-1: config 0 descriptor?? [ 446.958186][ T78] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 446.964550][ T78] usb 1-1: No valid video chain found. [ 447.216357][T11358] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 447.222999][T11358] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 447.259582][T11358] vhci_hcd vhci_hcd.0: Device attached [ 447.412147][ T78] usb 1-1: USB disconnect, device number 22 [ 447.426857][T11361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1759'. [ 448.458007][T11359] vhci_hcd: connection closed [ 448.464276][ T3507] vhci_hcd: stop threads [ 448.483618][ T3507] vhci_hcd: release socket [ 448.489166][ T3507] vhci_hcd: disconnect device [ 448.558979][ T5910] vhci_hcd: vhci_device speed not set [ 450.799144][T11395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1773'. [ 451.479762][ T5910] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 451.712503][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 451.819845][ T5910] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 451.892851][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.020831][ T5910] usb 2-1: config 0 has no interface number 0 [ 452.047240][ T5910] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 452.068188][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.076602][ T5910] usb 2-1: Product: syz [ 452.084568][ T5910] usb 2-1: Manufacturer: syz [ 453.012446][ T5910] usb 2-1: SerialNumber: syz [ 453.082327][ T5910] usb 2-1: config 0 descriptor?? [ 453.091820][ T5910] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 453.098225][ T5910] usb 2-1: No valid video chain found. [ 453.284173][T11425] ISOFS: Unable to identify CD-ROM format. [ 454.160084][ T5910] usb 2-1: USB disconnect, device number 36 [ 455.300012][T11440] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1790'. [ 456.097651][T11448] netlink: 'syz.1.1793': attribute type 10 has an invalid length. [ 456.410363][T11459] overlayfs: failed to resolve './bus': -2 [ 457.085300][T11470] ISOFS: Unable to identify CD-ROM format. [ 458.746454][T11482] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1804'. [ 459.408455][ T92] IPVS: starting estimator thread 0... [ 459.552494][T11491] IPVS: using max 81 ests per chain, 194400 per kthread [ 459.662865][T11497] ALSA: mixer_oss: invalid OSS volume 'DIGIT' [ 461.224072][T11521] ISOFS: Unable to identify CD-ROM format. [ 462.568065][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.574421][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.768450][ T24] IPVS: starting estimator thread 0... [ 462.863461][T11537] IPVS: using max 44 ests per chain, 105600 per kthread [ 463.572247][T11550] overlayfs: failed to resolve './bus': -2 [ 465.140287][T11588] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 465.146828][T11588] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 465.184776][T11588] vhci_hcd vhci_hcd.0: Device attached [ 465.614552][T11589] vhci_hcd: connection closed [ 465.658491][ T12] vhci_hcd: stop threads [ 465.756211][ T12] vhci_hcd: release socket [ 465.842583][ T12] vhci_hcd: disconnect device [ 467.426900][ T5917] IPVS: starting estimator thread 0... [ 467.506925][T11623] overlayfs: failed to resolve './bus': -2 [ 467.741512][T11622] IPVS: using max 39 ests per chain, 93600 per kthread [ 467.772958][T11633] netlink: 'syz.3.1855': attribute type 10 has an invalid length. [ 471.148312][T11645] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 471.154860][T11645] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 471.162952][T11646] vhci_hcd: connection closed [ 471.163232][T11645] vhci_hcd vhci_hcd.0: Device attached [ 471.186342][ T12] vhci_hcd: stop threads [ 471.297478][ T12] vhci_hcd: release socket [ 471.302234][ T12] vhci_hcd: disconnect device [ 472.175560][ T5931] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 472.259168][T11673] netlink: 'syz.1.1867': attribute type 10 has an invalid length. [ 472.451571][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 472.460777][ T5931] usb 5-1: config 0 has no interfaces? [ 472.471857][ T5931] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 472.483560][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.491563][ T5931] usb 5-1: Product: syz [ 472.507063][ T5931] usb 5-1: Manufacturer: syz [ 472.511684][ T5931] usb 5-1: SerialNumber: syz [ 472.519401][ T5931] usb 5-1: config 0 descriptor?? [ 473.324885][ T5865] Bluetooth: hci3: unexpected event for opcode 0x6683 [ 473.351232][ T5910] usb 5-1: USB disconnect, device number 18 [ 473.747003][T11700] bridge0: port 3(gretap0) entered blocking state [ 473.753507][T11700] bridge0: port 3(gretap0) entered disabled state [ 473.760140][T11700] gretap0: entered allmulticast mode [ 473.766218][T11700] gretap0: entered promiscuous mode [ 473.772381][T11700] bridge0: port 3(gretap0) entered blocking state [ 473.778882][T11700] bridge0: port 3(gretap0) entered forwarding state [ 473.804046][T11703] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 473.810587][T11703] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 473.935988][T11703] vhci_hcd vhci_hcd.0: Device attached [ 474.076438][ C1] hrtimer: interrupt took 22627 ns [ 475.029462][T11704] vhci_hcd: connection closed [ 475.030774][ T12] vhci_hcd: stop threads [ 475.055850][ T12] vhci_hcd: release socket [ 475.071769][ T12] vhci_hcd: disconnect device [ 475.094610][T11715] netlink: 'syz.0.1879': attribute type 10 has an invalid length. [ 475.158487][ T5910] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 475.166003][ T5910] usb 39-1: enqueue for inactive port 0 [ 475.243272][ T5910] vhci_hcd: vhci_device speed not set [ 477.215116][T11742] tipc: Enabled bearer , priority 0 [ 477.239831][T11742] syzkaller0: entered promiscuous mode [ 477.249095][T11742] syzkaller0: entered allmulticast mode [ 477.329130][T11749] ALSA: mixer_oss: invalid OSS volume 'DIGIT' [ 477.349582][T11742] tipc: Resetting bearer [ 477.377414][T11740] tipc: Resetting bearer [ 477.400768][T11740] tipc: Disabling bearer [ 477.606183][ T5865] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 477.617093][ T5865] Bluetooth: hci3: Injecting HCI hardware error event [ 477.625495][ T5865] Bluetooth: hci3: hardware error 0x00 [ 477.640223][ T5917] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 477.667992][T11759] nbd: must specify at least one socket [ 477.819295][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 477.843393][ T5917] usb 3-1: config 0 has no interfaces? [ 478.015943][ T5917] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 478.019621][T11764] tipc: Enabled bearer , priority 0 [ 478.031991][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.053830][ T5917] usb 3-1: Product: syz [ 478.062656][ T5917] usb 3-1: Manufacturer: syz [ 478.075031][ T5917] usb 3-1: SerialNumber: syz [ 478.111747][ T5917] usb 3-1: config 0 descriptor?? [ 478.275878][T11768] netlink: 'syz.3.1899': attribute type 10 has an invalid length. [ 479.573188][T11773] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 479.579729][T11773] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 479.587841][T11773] vhci_hcd vhci_hcd.0: Device attached [ 479.724465][T11774] vhci_hcd: connection closed [ 479.734072][ T7879] vhci_hcd: stop threads [ 479.791311][ T5910] usb 3-1: USB disconnect, device number 23 [ 479.833838][T11768] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 479.846617][ T5865] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 479.880172][ T7879] vhci_hcd: release socket [ 479.952391][ T7879] vhci_hcd: disconnect device [ 482.787981][T11800] ISOFS: Unable to identify CD-ROM format. [ 484.375224][T11812] netlink: 'syz.4.1913': attribute type 10 has an invalid length. [ 484.828046][T11829] netlink: 'syz.4.1916': attribute type 10 has an invalid length. [ 485.082500][ T5931] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 485.113526][T11834] [ 485.115886][T11834] ====================================================== [ 485.122886][T11834] WARNING: possible circular locking dependency detected [ 485.129906][T11834] 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 Not tainted [ 485.136994][T11834] ------------------------------------------------------ [ 485.143990][T11834] syz.3.1918/11834 is trying to acquire lock: [ 485.150035][T11834] ffff88801c6f5188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x2f/0x50 [ 485.159247][T11834] [ 485.159247][T11834] but task is already holding lock: [ 485.166582][T11834] ffff8880265ae2c8 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x363/0x11a0 [ 485.177949][T11834] [ 485.177949][T11834] which lock already depends on the new lock. [ 485.177949][T11834] [ 485.188348][T11834] [ 485.188348][T11834] the existing dependency chain (in reverse order) is: [ 485.197341][T11834] [ 485.197341][T11834] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 485.205918][T11834] blk_alloc_queue+0x619/0x760 [ 485.211215][T11834] blk_mq_alloc_queue+0x172/0x280 [ 485.216734][T11834] __blk_mq_alloc_disk+0x29/0x120 [ 485.222256][T11834] nbd_dev_add+0x492/0xbb0 [ 485.227184][T11834] nbd_init+0x181/0x320 [ 485.231834][T11834] do_one_initcall+0x120/0x6e0 [ 485.237097][T11834] kernel_init_freeable+0x5c2/0x910 [ 485.242799][T11834] kernel_init+0x1c/0x2b0 [ 485.247650][T11834] ret_from_fork+0x5d7/0x6f0 [ 485.252735][T11834] ret_from_fork_asm+0x1a/0x30 [ 485.258003][T11834] [ 485.258003][T11834] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 485.265194][T11834] fs_reclaim_acquire+0x102/0x150 [ 485.270719][T11834] kmem_cache_alloc_lru_noprof+0x58/0x3b0 [ 485.276945][T11834] alloc_inode+0xc3/0x240 [ 485.281774][T11834] iget_locked+0x2e4/0x830 [ 485.286690][T11834] kernfs_get_inode+0x48/0x460 [ 485.291955][T11834] kernfs_get_tree+0x5fd/0xb00 [ 485.297235][T11834] sysfs_get_tree+0x41/0x140 [ 485.302332][T11834] vfs_get_tree+0x8b/0x340 [ 485.307281][T11834] path_mount+0x1482/0x1fd0 [ 485.312289][T11834] __x64_sys_mount+0x28d/0x310 [ 485.317564][T11834] do_syscall_64+0xcd/0x4c0 [ 485.322569][T11834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.328965][T11834] [ 485.328965][T11834] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 485.336935][T11834] __lock_acquire+0x12a6/0x1ce0 [ 485.342299][T11834] lock_acquire+0x179/0x350 [ 485.347308][T11834] down_write+0x92/0x200 [ 485.352055][T11834] kernfs_remove+0x2f/0x50 [ 485.356980][T11834] sysfs_remove_dir+0xc8/0x100 [ 485.362247][T11834] __kobject_del+0xe2/0x1f0 [ 485.367252][T11834] kobject_del+0x3f/0x60 [ 485.371993][T11834] elevator_change_done+0x56b/0x6a0 [ 485.377698][T11834] elevator_change+0x30b/0x580 [ 485.382962][T11834] elevator_set_none+0xaa/0x120 [ 485.388318][T11834] __blk_mq_update_nr_hw_queues+0x531/0x11a0 [ 485.394805][T11834] blk_mq_update_nr_hw_queues+0x3b/0x60 [ 485.400849][T11834] nbd_start_device+0x1b0/0xd70 [ 485.406204][T11834] nbd_ioctl+0x219/0xda0 [ 485.410958][T11834] blkdev_ioctl+0x277/0x6d0 [ 485.415971][T11834] __x64_sys_ioctl+0x18b/0x210 [ 485.421238][T11834] do_syscall_64+0xcd/0x4c0 [ 485.426238][T11834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.432632][T11834] [ 485.432632][T11834] other info that might help us debug this: [ 485.432632][T11834] [ 485.442835][T11834] Chain exists of: [ 485.442835][T11834] &root->kernfs_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#52 [ 485.442835][T11834] [ 485.456718][T11834] Possible unsafe locking scenario: [ 485.456718][T11834] [ 485.464140][T11834] CPU0 CPU1 [ 485.469482][T11834] ---- ---- [ 485.474822][T11834] lock(&q->q_usage_counter(io)#52); [ 485.480177][T11834] lock(fs_reclaim); [ 485.486655][T11834] lock(&q->q_usage_counter(io)#52); [ 485.494531][T11834] lock(&root->kernfs_rwsem); [ 485.499272][T11834] [ 485.499272][T11834] *** DEADLOCK *** [ 485.499272][T11834] [ 485.507395][T11834] 4 locks held by syz.3.1918/11834: [ 485.512563][T11834] #0: ffff8880267a1188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x27/0x60 [ 485.523763][T11834] #1: ffff8880267a10d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x31/0x60 [ 485.534541][T11834] #2: ffff8880265ae2c8 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x363/0x11a0 [ 485.546438][T11834] #3: ffff8880265ae300 (&q->q_usage_counter(queue)#4){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x363/0x11a0 [ 485.558416][T11834] [ 485.558416][T11834] stack backtrace: [ 485.564283][T11834] CPU: 1 UID: 0 PID: 11834 Comm: syz.3.1918 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 485.564301][T11834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 485.564310][T11834] Call Trace: [ 485.564315][T11834] [ 485.564320][T11834] dump_stack_lvl+0x116/0x1f0 [ 485.564335][T11834] print_circular_bug+0x275/0x350 [ 485.564356][T11834] check_noncircular+0x14c/0x170 [ 485.564378][T11834] __lock_acquire+0x12a6/0x1ce0 [ 485.564401][T11834] lock_acquire+0x179/0x350 [ 485.564421][T11834] ? kernfs_remove+0x2f/0x50 [ 485.564442][T11834] ? __pfx___might_resched+0x10/0x10 [ 485.564460][T11834] down_write+0x92/0x200 [ 485.564475][T11834] ? kernfs_remove+0x2f/0x50 [ 485.564495][T11834] ? __pfx_down_write+0x10/0x10 [ 485.564511][T11834] kernfs_remove+0x2f/0x50 [ 485.564531][T11834] sysfs_remove_dir+0xc8/0x100 [ 485.564547][T11834] __kobject_del+0xe2/0x1f0 [ 485.564562][T11834] kobject_del+0x3f/0x60 [ 485.564576][T11834] elevator_change_done+0x56b/0x6a0 [ 485.564599][T11834] elevator_change+0x30b/0x580 [ 485.564618][T11834] elevator_set_none+0xaa/0x120 [ 485.564636][T11834] ? __pfx_elevator_set_none+0x10/0x10 [ 485.564654][T11834] ? find_held_lock+0x2b/0x80 [ 485.564671][T11834] ? do_raw_spin_unlock+0x172/0x230 [ 485.564685][T11834] __blk_mq_update_nr_hw_queues+0x531/0x11a0 [ 485.564702][T11834] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 485.564717][T11834] ? __mutex_unlock_slowpath+0x163/0x800 [ 485.564733][T11834] ? __pfx_down_write+0x10/0x10 [ 485.564750][T11834] blk_mq_update_nr_hw_queues+0x3b/0x60 [ 485.564764][T11834] nbd_start_device+0x1b0/0xd70 [ 485.564780][T11834] ? bpf_lsm_capable+0x9/0x10 [ 485.564801][T11834] nbd_ioctl+0x219/0xda0 [ 485.564815][T11834] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 485.564836][T11834] ? __pfx_nbd_ioctl+0x10/0x10 [ 485.564849][T11834] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 485.564874][T11834] ? __pfx_nbd_ioctl+0x10/0x10 [ 485.564888][T11834] blkdev_ioctl+0x277/0x6d0 [ 485.564907][T11834] ? __pfx_blkdev_ioctl+0x10/0x10 [ 485.564926][T11834] ? selinux_file_ioctl+0x180/0x270 [ 485.564944][T11834] ? selinux_file_ioctl+0xb4/0x270 [ 485.564962][T11834] ? __pfx_blkdev_ioctl+0x10/0x10 [ 485.564981][T11834] __x64_sys_ioctl+0x18b/0x210 [ 485.565001][T11834] do_syscall_64+0xcd/0x4c0 [ 485.565016][T11834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.565029][T11834] RIP: 0033:0x7fd35558ebe9 [ 485.565042][T11834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.565056][T11834] RSP: 002b:00007fd3537f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.565068][T11834] RAX: ffffffffffffffda RBX: 00007fd3557b5fa0 RCX: 00007fd35558ebe9 [ 485.565077][T11834] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 485.565085][T11834] RBP: 00007fd355611e19 R08: 0000000000000000 R09: 0000000000000000 [ 485.565094][T11834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.565102][T11834] R13: 00007fd3557b6038 R14: 00007fd3557b5fa0 R15: 00007ffffee36008 [ 485.565114][T11834] [ 485.565242][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 485.629505][T11836] block nbd3: shutting down sockets [ 485.633000][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.889650][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.894022][T11837] block nbd3: NBD_DISCONNECT [ 485.899368][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 485.899409][ T5931] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 485.925911][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.939700][T11837] block nbd3: Send disconnect failed -32 [ 485.944113][ T5931] usb 1-1: config 0 descriptor?? [ 485.947880][T11837] block nbd3: Send disconnect failed -32 [ 486.605934][ T5931] usbhid 1-1:0.0: can't add hid device: -71 [ 486.611912][ T5931] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 486.621972][ T5931] usb 1-1: USB disconnect, device number 23