last executing test programs: 3m10.650783097s ago: executing program 2 (id=1134): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setitimer(0x2, &(0x7f0000000080)={{0xfffffffffffffffc, 0x4}, {0x0, 0x6}}, 0x0) 3m10.62449665s ago: executing program 2 (id=1126): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000002600), &(0x7f0000002640)=0x4) 3m10.548653711s ago: executing program 2 (id=1127): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)={0x40, 0x30, 0x6, "008000010a01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x1c, &(0x7f00000003c0)={0x20, 0x16, 0xc, "4552d7422576d215fbd98eaa"}, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x2c002080, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0x0, 0x0], 0x2}, 0x58) 3m9.963238232s ago: executing program 2 (id=1131): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 3m9.809867962s ago: executing program 2 (id=1132): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x10, 0x70bd2e, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x4}, {0xe, 0xf}, {0xffff, 0xb}}}, 0x24}}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000002"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3m9.580471699s ago: executing program 2 (id=1133): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 3m9.399185406s ago: executing program 32 (id=1133): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2m30.861655813s ago: executing program 5 (id=1868): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r0, &(0x7f00000002c0), 0x0}, 0x20) 2m30.478771412s ago: executing program 5 (id=1873): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r2, 0x2}, 0x8) 2m30.233140943s ago: executing program 5 (id=1878): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) 2m30.038545994s ago: executing program 5 (id=1884): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) 2m29.897205812s ago: executing program 5 (id=1888): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x80000001}) dup3(r0, r1, 0x0) 2m28.334628118s ago: executing program 5 (id=1897): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) semctl$SEM_INFO(0x0, 0x4, 0x13, 0x0) 2m27.939794797s ago: executing program 33 (id=1897): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) semctl$SEM_INFO(0x0, 0x4, 0x13, 0x0) 4.783374675s ago: executing program 0 (id=4176): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.570610215s ago: executing program 0 (id=4181): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000dc0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000480)='U', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[], 0x210, 0x2040050}], 0x1, 0x4c001) sendmsg$nl_route_sched_retired(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f00000099c0)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x90) 4.476046545s ago: executing program 0 (id=4183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88203, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000005c0)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0xfff, 0x4, 0x0, 0x0, @irqchip={0x9, 0x8}}]}) 4.242696253s ago: executing program 0 (id=4190): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 4.241821219s ago: executing program 1 (id=4191): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x2ff, [0x5], 0x6}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 4.181683068s ago: executing program 0 (id=4193): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2}, 0x0) 4.159939064s ago: executing program 4 (id=4194): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x490802, 0x10a) read$FUSE(r0, 0x0, 0x0) write$FUSE_LK(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, {{0x100, 0x29, 0x1}}}, 0x28) 3.933541395s ago: executing program 6 (id=4198): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.885330803s ago: executing program 6 (id=4199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[]) 3.84830337s ago: executing program 6 (id=4200): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000300)={0x50, 0xffff, 0x0, {0x0, 0x68bd}, {}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) 3.687401831s ago: executing program 0 (id=4203): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040), &(0x7f000009de80), 0x0) 3.553267281s ago: executing program 34 (id=4203): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040), &(0x7f000009de80), 0x0) 3.23101072s ago: executing program 6 (id=4208): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) 3.223753262s ago: executing program 4 (id=4209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000700)="2e3665f2af6766c74424005f0000006766c7442402000000006766c744240600000000670f011c2466b9030100c066b85bd1e45366bad6062a620f3066b9370200000f320f01d1440f20c066350f000000440f22c066660f383b8032500fe99400003e2e660fc7b302000f20e06635200000000f22e0", 0x76}], 0xaaaaaaaaaaaaaae, 0x54, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000500)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.011750065s ago: executing program 3 (id=4210): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) epoll_pwait2(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)={0x20000005}) 2.849209723s ago: executing program 3 (id=4211): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0) 2.848882058s ago: executing program 4 (id=4212): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 2.597922733s ago: executing program 6 (id=4213): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 2.597635851s ago: executing program 4 (id=4214): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4006001}, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x2000000}, 0x9}], 0x1, 0xcb, 0x0) 2.513538001s ago: executing program 4 (id=4215): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0xe4c}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 2.398602525s ago: executing program 3 (id=4216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0xffe0}, {0x5, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) 1.885106706s ago: executing program 1 (id=4217): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x40000001, r1, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0xc2) 1.639832841s ago: executing program 1 (id=4218): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x8, &(0x7f0000002240)={0x2b, 0x1, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x180) 1.519149017s ago: executing program 1 (id=4219): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80008, 0xc, 0x414}, 0x50) 1.419346011s ago: executing program 3 (id=4220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x19383fb31bd4d798}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 1.36350743s ago: executing program 6 (id=4221): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0xf6, r2, 0x1, 0x55, 0x6, @multicast}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.244152075s ago: executing program 3 (id=4222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x23b) write(r1, 0x0, 0x0) 244.755439ms ago: executing program 3 (id=4223): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fstat(r0, 0x0) 54.41706ms ago: executing program 1 (id=4224): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2040400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r0, 0x0, 0x0) 7.357479ms ago: executing program 4 (id=4225): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 0s ago: executing program 1 (id=4226): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r1 = fcntl$dupfd(r0, 0x0, r0) read$snapshot(r1, 0x0, 0xffffffbf) kernel console output (not intermixed with test programs): t(1756493972.948:693): avc: denied { relabelto } for pid=12740 comm="syz.4.2961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 251.473550][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.575279][ T93] usb 7-1: USB disconnect, device number 11 [ 251.621608][ T30] audit: type=1400 audit(1756493973.138:694): avc: denied { map } for pid=12747 comm="syz.4.2964" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 252.142506][T12780] syzkaller1: entered promiscuous mode [ 252.154582][T12780] syzkaller1: entered allmulticast mode [ 253.144352][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 253.311292][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 253.338838][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 253.349209][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.377024][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 253.385211][ T9] pvrusb2: ********** [ 253.389187][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 253.416873][T12835] mmap: syz.3.3002 (12835): VmData 37457920 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 253.419513][ T9] pvrusb2: Important functionality might not be entirely working. [ 253.457589][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 253.475916][ T9] pvrusb2: ********** [ 253.587161][ T2327] pvrusb2: Invalid write control endpoint [ 253.663581][ T2327] pvrusb2: Invalid write control endpoint [ 253.675363][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 253.687111][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 253.695417][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 253.724880][ T2327] pvrusb2: Device being rendered inoperable [ 253.733838][ T2327] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 253.759136][ T2327] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 253.771165][ T2327] pvrusb2: Attached sub-driver cx25840 [ 253.776671][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 253.788350][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 253.795508][ T10] usb 2-1: USB disconnect, device number 32 [ 254.054644][ T93] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 254.209219][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3023'. [ 254.219580][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3023'. [ 254.242329][ T93] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.254928][ T93] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.283136][ T93] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.292608][ T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.300631][ T93] usb 4-1: Product: syz [ 254.310222][ T93] usb 4-1: Manufacturer: syz [ 254.314879][ T93] usb 4-1: SerialNumber: syz [ 254.430714][T12896] syzkaller1: entered promiscuous mode [ 254.436893][T12896] syzkaller1: entered allmulticast mode [ 254.611547][ T43] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 254.662775][ T10] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 254.771207][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 254.782366][ T43] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 254.796168][ T43] usb 7-1: config 0 has no interface number 0 [ 254.802960][ T43] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 254.813128][ T43] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 254.823092][ T10] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 254.823115][ T10] usb 5-1: config 0 has no interface number 0 [ 254.823148][ T10] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.823172][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 254.832950][ T43] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 254.845702][ T10] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 254.851584][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.864475][ T10] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 254.895284][ T43] usb 7-1: Product: syz [ 254.896507][ T10] usb 5-1: Product: syz [ 254.899474][ T43] usb 7-1: Manufacturer: syz [ 254.910682][ T10] usb 5-1: SerialNumber: syz [ 254.917432][ T43] usb 7-1: SerialNumber: syz [ 254.921741][ T10] usb 5-1: config 0 descriptor?? [ 254.927124][ T43] usb 7-1: config 0 descriptor?? [ 254.927637][T12895] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 254.932701][T12888] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 254.942126][ T10] cm109 5-1:0.8: invalid payload size 64, expected 4 [ 254.949799][T12888] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 254.955959][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input40 [ 255.050210][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 255.050226][ T30] audit: type=1400 audit(1756493976.568:704): avc: denied { map } for pid=12916 comm="syz.1.3039" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 255.080217][ T30] audit: type=1400 audit(1756493976.568:705): avc: denied { execute } for pid=12916 comm="syz.1.3039" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 255.202909][ C0] cm109_urb_ctl_callback: 47 callbacks suppressed [ 255.202930][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 255.203277][ T5905] usb 5-1: USB disconnect, device number 33 [ 255.209372][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 255.216855][T12888] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 255.216969][T12888] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 255.261093][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.274930][ T5905] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 255.333124][ T30] audit: type=1326 audit(1756493976.858:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12920 comm="syz.0.3041" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa69018ebe9 code=0x0 [ 255.363158][ T93] cdc_ncm 4-1:1.0: bind() failure [ 255.373391][ T93] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 255.387620][ T93] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 255.397498][ T93] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 255.413400][ T93] usb 4-1: USB disconnect, device number 33 [ 255.826413][ T43] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 255.836856][ T43] asix 7-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 255.848182][ T43] asix 7-1:0.251: probe with driver asix failed with error -71 [ 255.861279][ T43] usb 7-1: USB disconnect, device number 12 [ 256.012368][ T30] audit: type=1400 audit(1756493977.538:707): avc: denied { shutdown } for pid=12951 comm="syz.3.3055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 256.101960][T12956] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 256.193736][T12964] input: syz0 as /devices/virtual/input/input41 [ 256.269540][T12970] overlayfs: failed to clone lowerpath [ 256.277948][ T30] audit: type=1400 audit(1756493977.788:708): avc: denied { mounton } for pid=12969 comm="syz.1.3064" path="/file0" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 256.331097][ T43] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 256.379846][T12978] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3066'. [ 256.492564][ T43] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 256.502938][ T43] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 256.526773][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 256.540011][ T43] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 256.549649][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.561425][ T43] usb 4-1: Product: syz [ 256.565595][ T43] usb 4-1: Manufacturer: syz [ 256.576831][ T43] usb 4-1: SerialNumber: syz [ 256.588971][T12958] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 256.596475][T12958] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 256.671173][ T10] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 256.691174][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 256.835622][ T10] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 256.845502][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.853756][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 256.858976][ T10] usb 5-1: Product: syz [ 256.863936][ T10] usb 5-1: Manufacturer: syz [ 256.868715][ T10] usb 5-1: SerialNumber: syz [ 256.874060][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 256.887350][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 256.901760][ T10] usb 5-1: config 0 descriptor?? [ 256.913107][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.926849][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.939997][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 256.949129][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.151221][ T93] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 257.169453][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 257.176891][ T9] usbtmc 2-1:16.0: can't read capabilities [ 257.301393][ T93] usb 7-1: Using ep0 maxpacket: 16 [ 257.308401][ T93] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.318699][ T93] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.329645][ T93] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 257.345819][ T93] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.354916][ T93] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 257.363909][ T93] usb 7-1: SerialNumber: syz [ 257.380199][ T93] hub 7-1:1.0: bad descriptor, ignoring hub [ 257.387273][ T5905] usb 2-1: USB disconnect, device number 33 [ 257.393366][ T93] hub 7-1:1.0: probe with driver hub failed with error -5 [ 257.411869][ T93] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 257.636735][ T43] (unnamed net_device) (uninitialized): Assigned a random MAC address: 1e:9f:aa:7c:a6:35 [ 257.669536][ T43] rtl8150 4-1:1.0: eth9: rtl8150 is detected [ 257.683191][ T43] usb 4-1: USB disconnect, device number 34 [ 257.764582][ T5905] usb 7-1: USB disconnect, device number 13 [ 257.957698][ T10] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 257.986131][ T10] dm9601 5-1:0.0 eth9: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 7e:a1:8a:d2:7b:3e [ 258.001365][ T10] usb 5-1: USB disconnect, device number 34 [ 258.013586][ T10] dm9601 5-1:0.0 eth9: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 258.203441][T13045] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3098'. [ 258.218348][T13045] netlink: 'syz.6.3098': attribute type 7 has an invalid length. [ 258.227311][T13045] netlink: 'syz.6.3098': attribute type 8 has an invalid length. [ 258.235354][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3098'. [ 258.741527][T13066] loop5: detected capacity change from 0 to 6863 [ 258.776464][T13066] loop5: detected capacity change from 6863 to 8495 [ 258.951174][ T5905] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 259.121804][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 259.138541][ T5905] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.159480][ T5905] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.190091][ T5905] usb 5-1: config 0 interface 0 has no altsetting 0 [ 259.198041][ T5905] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 259.219462][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.236318][ T5905] usb 5-1: config 0 descriptor?? [ 259.670745][T13045] gretap0: entered promiscuous mode [ 259.674085][ T5905] cougar 0003:060B:500A.0029: unknown main item tag 0x0 [ 259.683099][ T5905] cougar 0003:060B:500A.0029: unknown main item tag 0x0 [ 259.683128][T13045] gretap0: left promiscuous mode [ 259.690060][ T5905] cougar 0003:060B:500A.0029: unknown main item tag 0x0 [ 259.690083][ T5905] cougar 0003:060B:500A.0029: unknown main item tag 0x0 [ 259.709317][ T5905] cougar 0003:060B:500A.0029: unknown main item tag 0x0 [ 259.716915][ T5905] cougar 0003:060B:500A.0029: unknown main item tag 0x0 [ 259.740959][ T5905] cougar 0003:060B:500A.0029: unknown main item tag 0x0 [ 259.748136][ T5905] cougar 0003:060B:500A.0029: unknown main item tag 0x0 [ 259.771053][ T5905] cougar 0003:060B:500A.0029: unknown main item tag 0x0 [ 259.778041][ T5905] cougar 0003:060B:500A.0029: unknown main item tag 0x0 [ 259.794852][ T5905] cougar 0003:060B:500A.0029: collection stack underflow [ 259.810618][ T5905] cougar 0003:060B:500A.0029: item 0 0 0 12 parsing failed [ 259.828609][ T5905] cougar 0003:060B:500A.0029: parse failed [ 259.844045][ T5905] cougar 0003:060B:500A.0029: probe with driver cougar failed with error -22 [ 259.874249][ T5905] usb 5-1: USB disconnect, device number 35 [ 259.912879][T13090] syzkaller1: entered promiscuous mode [ 259.918377][T13090] syzkaller1: entered allmulticast mode [ 259.963059][ T30] audit: type=1400 audit(1756493981.488:709): avc: denied { map } for pid=13092 comm="syz.0.3121" path="socket:[44943]" dev="sockfs" ino=44943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 260.114632][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3126'. [ 260.783151][T13132] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3138'. [ 260.941077][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 261.103679][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 261.112773][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 261.129362][ T9] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 261.139824][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.174640][ T9] usb 4-1: Product: syz [ 261.180765][ T9] usb 4-1: Manufacturer: syz [ 261.204024][ T9] usb 4-1: SerialNumber: syz [ 261.211507][ T9] usb 4-1: config 0 descriptor?? [ 261.221888][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 261.227864][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 261.239819][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 261.261248][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 261.433289][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 261.441136][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 261.449481][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 261.477105][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 261.510521][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 261.528784][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 261.564384][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 261.600338][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 261.622234][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.655944][ T10] usb 1-1: config 0 descriptor?? [ 261.818119][T13191] syzkaller1: entered promiscuous mode [ 261.823766][T13191] syzkaller1: entered allmulticast mode [ 261.869744][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 261.932147][ T5905] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 261.970778][T13195] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3166'. [ 261.979891][T13195] nbd: must specify at least one socket [ 262.088140][ T43] usb 1-1: USB disconnect, device number 31 [ 262.104672][ T43] usblp0: removed [ 262.112043][ T5905] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 262.124300][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.137025][ T5905] usb 7-1: Product: syz [ 262.142067][ T5905] usb 7-1: Manufacturer: syz [ 262.146774][ T5905] usb 7-1: SerialNumber: syz [ 262.491186][ T93] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 262.644863][T13210] loop8: detected capacity change from 0 to 8 [ 262.653626][ T93] usb 5-1: Using ep0 maxpacket: 32 [ 262.661407][T13210] Dev loop8: unable to read RDB block 8 [ 262.667274][T13210] loop8: unable to read partition table [ 262.676654][T13210] loop8: partition table beyond EOD, truncated [ 262.683102][ T93] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.694818][T13210] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 262.704157][ T93] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 262.714063][ T93] usb 5-1: config 0 interface 0 has no altsetting 0 [ 262.736645][ T93] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 262.752023][ T93] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 262.761585][ T93] usb 5-1: Product: syz [ 262.765823][ T93] usb 5-1: Manufacturer: syz [ 262.770474][ T93] usb 5-1: SerialNumber: syz [ 262.781556][ T93] usb 5-1: config 0 descriptor?? [ 263.010671][ T10] IPVS: starting estimator thread 0... [ 263.018100][T13226] tipc: Started in network mode [ 263.025263][T13226] tipc: Node identity ac1414aa, cluster identity 4711 [ 263.038974][T13226] tipc: Enabled bearer , priority 10 [ 263.092404][T13231] input: syz0 as /devices/virtual/input/input42 [ 263.121264][T13227] IPVS: using max 39 ests per chain, 93600 per kthread [ 263.164290][ T5905] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 263.180400][ T5905] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 263.192605][ T5905] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 263.203558][ T5905] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 263.214547][ T93] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 263.223794][ T5905] usb 7-1: USB disconnect, device number 14 [ 263.577573][T13249] ALSA: mixer_oss: invalid OSS volume 'ؤ¿ßnhè‹{%¼ÿOBÁ›eb' [ 263.723000][ T5905] usb 4-1: USB disconnect, device number 35 [ 263.827426][ T93] usb 5-1: USB disconnect, device number 36 [ 264.153547][ T10] tipc: Node number set to 2886997162 [ 264.607398][T13275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3200'. [ 264.849611][ T30] audit: type=1400 audit(1756493986.368:710): avc: denied { watch_sb } for pid=13285 comm="syz.3.3205" path="/726" dev="tmpfs" ino=3724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 264.961064][ T5905] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 264.977924][T13270] syz.0.3198 (13270): drop_caches: 2 [ 265.057154][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3208'. [ 265.122006][ T5905] usb 7-1: Using ep0 maxpacket: 16 [ 265.135238][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.155395][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.169324][ T5905] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 265.183977][T13303] input: syz0 as /devices/virtual/input/input43 [ 265.185685][ T5905] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 265.199763][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.223039][ T5905] usb 7-1: config 0 descriptor?? [ 265.240388][T13306] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3215'. [ 265.307146][T13311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3217'. [ 265.450212][ T30] audit: type=1400 audit(1756493986.968:711): avc: denied { write } for pid=13316 comm="syz.3.3219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 265.611298][T13334] sg_write: data in/out 4059/182 bytes for SCSI command 0x0-- guessing data in; [ 265.611298][T13334] program syz.0.3225 not setting count and/or reply_len properly [ 265.662686][ T5905] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.002A/input/input44 [ 265.692596][ T5905] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 265.982484][ T5905] usb 7-1: USB disconnect, device number 15 [ 266.055554][T13367] netlink: 'syz.4.3239': attribute type 13 has an invalid length. [ 266.068476][T13367] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 266.082254][T13367] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 266.099533][T13367] gretap1: entered promiscuous mode [ 266.111214][T13367] gretap1: entered allmulticast mode [ 266.179938][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3242'. [ 266.203291][T13371] syzkaller1: entered promiscuous mode [ 266.218954][T13371] syzkaller1: entered allmulticast mode [ 266.468282][T13392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13392 comm=syz.3.3252 [ 266.620105][T13407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.981175][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 267.041911][T13418] tracefs: Invalid gid '0x00000000ffffffff' [ 267.047884][ T30] audit: type=1400 audit(1756493988.568:712): avc: denied { remount } for pid=13417 comm="syz.0.3262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 267.133533][ T30] audit: type=1400 audit(1756493988.658:713): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 267.164756][ T10] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 267.176452][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.184957][ T10] usb 7-1: Product: syz [ 267.189138][ T10] usb 7-1: Manufacturer: syz [ 267.196793][ T10] usb 7-1: SerialNumber: syz [ 267.230427][ T10] usb 7-1: config 0 descriptor?? [ 267.275264][T13424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3265'. [ 267.941214][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 267.963763][T13451] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 267.970291][T13451] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 267.980555][T13451] vhci_hcd vhci_hcd.0: Device attached [ 267.992661][T13453] vhci_hcd: connection closed [ 267.992895][ T3518] vhci_hcd: stop threads [ 268.002927][ T3518] vhci_hcd: release socket [ 268.007372][ T3518] vhci_hcd: disconnect device [ 268.045098][T13458] input: syz0 as /devices/virtual/input/input45 [ 268.083181][T13460] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3281'. [ 268.093756][T13460] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3281'. [ 268.111265][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 268.121200][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.132399][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 268.141601][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.154590][ T9] usb 5-1: config 0 descriptor?? [ 268.291096][ T10] usb 7-1: f81604_read: reg: 100f failed: -EPROTO [ 268.306565][ T10] usb 7-1: f81604_read: reg: 200f failed: -EPROTO [ 268.315165][ T10] usb 7-1: USB disconnect, device number 16 [ 268.324669][ T10] usb 7-1: f81604_read: reg: 100f failed: -ENODEV [ 268.377283][T13468] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3285'. [ 268.388191][ T10] usb 7-1: f81604_read: reg: 200f failed: -ENODEV [ 268.587861][ T9] mcp2221 0003:04D8:00DD.002B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 268.673593][ T30] audit: type=1400 audit(1756493990.188:714): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 268.972875][T13500] netlink: 'syz.1.3301': attribute type 1 has an invalid length. [ 268.980761][T13500] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3301'. [ 268.989848][T13500] netlink: 'syz.1.3301': attribute type 2 has an invalid length. [ 268.998889][T13500] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3301'. [ 269.009368][ T9] usb 5-1: USB disconnect, device number 37 [ 269.170438][T13509] Invalid logical block size (530) [ 269.220512][T13514] netlink: 'syz.0.3308': attribute type 1 has an invalid length. [ 269.231352][T13514] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3308'. [ 269.284113][ T30] audit: type=1400 audit(1756493990.808:715): avc: denied { accept } for pid=13515 comm="syz.6.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 269.545329][T13534] pim6reg: entered allmulticast mode [ 269.553723][T13534] pim6reg: left allmulticast mode [ 269.621125][ T43] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 269.712043][T10713] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 269.771073][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 269.777473][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.788881][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.790227][ T30] audit: type=1400 audit(1756493991.318:716): avc: denied { accept } for pid=13541 comm="syz.4.3321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 269.798643][ T43] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 269.798667][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.805111][ T43] usb 4-1: config 0 descriptor?? [ 269.894145][T10713] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 269.903336][T10713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.911348][T10713] usb 7-1: Product: syz [ 269.915495][T10713] usb 7-1: Manufacturer: syz [ 269.920057][T10713] usb 7-1: SerialNumber: syz [ 269.927920][T10713] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 269.937773][ T30] audit: type=1400 audit(1756493991.458:717): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 269.947160][ T9] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 270.249646][ T43] ft260 0003:0403:6030.002C: unknown main item tag 0x0 [ 270.256776][ T43] ft260 0003:0403:6030.002C: unknown main item tag 0x0 [ 270.449511][ T43] ft260 0003:0403:6030.002C: chip code: 6424 8183 [ 270.621794][ T10] usb 7-1: USB disconnect, device number 17 [ 270.858088][T10713] usb 4-1: USB disconnect, device number 36 [ 271.161321][ T5860] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 271.164994][ T5855] Bluetooth: hci5: command 0x1003 tx timeout [ 271.242668][ T9] usb 7-1: Service connection timeout for: 256 [ 271.248853][ T9] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 271.269391][ T9] ath9k_htc: Failed to initialize the device [ 271.277669][ T10] usb 7-1: ath9k_htc: USB layer deinitialized [ 271.455142][T13575] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.607249][T13587] input: syz0 as /devices/virtual/input/input46 [ 271.652124][T10715] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 271.771371][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 271.832738][T10715] usb 4-1: Using ep0 maxpacket: 8 [ 271.844946][T10715] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 271.857766][T10715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.868902][T13606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.879389][T10715] usb 4-1: Product: syz [ 271.891610][T10715] usb 4-1: Manufacturer: syz [ 271.903663][T10715] usb 4-1: SerialNumber: syz [ 271.916355][T10715] usb 4-1: config 0 descriptor?? [ 271.938210][T10715] gspca_main: sq905-2.14.0 probing 2770:9120 [ 271.966815][ T9] usb 2-1: config 0 has no interfaces? [ 271.978705][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 272.008562][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.028479][ T9] usb 2-1: config 0 descriptor?? [ 272.248836][T13582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.259334][T13582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.270095][T13582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.281296][T13582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.290366][T10713] usb 2-1: USB disconnect, device number 34 [ 272.311270][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 272.483191][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.494363][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.504614][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.517563][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.538595][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.552089][ T9] usb 1-1: config 0 descriptor?? [ 272.720523][ T30] audit: type=1400 audit(1756493994.238:718): avc: denied { write } for pid=13621 comm="syz.6.3357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 272.720530][T13622] block nbd6: Send control failed (result -22) [ 272.749970][T13622] block nbd6: Request send failed, requeueing [ 272.750900][T10715] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 272.756502][ T43] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 272.766578][ T96] block nbd6: Dead connection, failed to find a fallback [ 272.779705][ T96] block nbd6: shutting down sockets [ 272.785060][ T96] blk_print_req_error: 2 callbacks suppressed [ 272.785072][ T96] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 272.810666][T10715] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 272.821172][T10715] usb 4-1: USB disconnect, device number 37 [ 272.855335][T13629] syzkaller1: entered promiscuous mode [ 272.863445][T13629] syzkaller1: entered allmulticast mode [ 272.922318][ T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.930437][ T43] usb 2-1: config 0 has no interface number 0 [ 272.940544][ T43] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 272.950664][ T43] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 272.960610][ T43] usb 2-1: config 0 interface 1 has no altsetting 0 [ 272.967509][ T43] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 272.977444][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.991664][ T43] usb 2-1: config 0 descriptor?? [ 273.004003][ T43] hso 2-1:0.1: Failed to find BULK IN ep [ 273.018391][ T9] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 273.181526][T13645] loop5: detected capacity change from 0 to 7767 [ 273.199887][T13645] loop5: detected capacity change from 7767 to 10479 [ 273.215099][ T43] usb 2-1: USB disconnect, device number 35 [ 273.239849][ T9] usb 1-1: USB disconnect, device number 32 [ 273.496274][ T30] audit: type=1400 audit(1756493995.018:719): avc: denied { name_connect } for pid=13652 comm="syz.4.3368" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 273.534799][T13655] binder: 13654:13655 ioctl c0306201 200000000080 returned -14 [ 273.544887][ T30] audit: type=1400 audit(1756493995.068:720): avc: denied { ioctl } for pid=13654 comm="syz.4.3370" path="socket:[47959]" dev="sockfs" ino=47959 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 273.711112][ T43] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 273.865446][ T43] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 273.874390][ T43] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 273.885927][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 273.897024][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 273.908567][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 273.922604][ T43] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 273.931802][ T43] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 273.939784][ T43] usb 4-1: Product: syz [ 273.944437][ T43] usb 4-1: Manufacturer: syz [ 273.955420][ T43] cdc_wdm 4-1:1.0: skipping garbage [ 273.960627][ T43] cdc_wdm 4-1:1.0: skipping garbage [ 273.966879][ T43] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 273.976157][ T43] cdc_wdm 4-1:1.0: Unknown control protocol [ 274.159934][ T30] audit: type=1400 audit(1756493995.678:721): avc: denied { remount } for pid=13683 comm="syz.6.3382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 274.807970][T13712] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 275.027120][T13717] __nla_validate_parse: 1 callbacks suppressed [ 275.027138][T13717] netlink: 14528 bytes leftover after parsing attributes in process `syz.6.3397'. [ 275.551276][ T5905] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 275.573156][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 275.581140][ T43] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 275.591972][T13743] syzkaller1: entered promiscuous mode [ 275.597425][T13743] syzkaller1: entered allmulticast mode [ 275.701176][ T5905] usb 7-1: Using ep0 maxpacket: 8 [ 275.707921][ T5905] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 275.719424][ T5905] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 275.731723][ T5905] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.740390][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.741684][ T5905] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.741723][ T5905] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.741744][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.743874][ T43] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 275.782739][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 275.792148][ T43] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 275.813307][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.816013][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 275.835306][ T9] usb 1-1: config 0 descriptor?? [ 275.840080][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 275.851337][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 275.864477][ T43] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 275.873551][ T43] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 275.881893][ T43] usb 2-1: Product: syz [ 275.886061][ T43] usb 2-1: Manufacturer: syz [ 275.893911][ T43] cdc_wdm 2-1:1.0: skipping garbage [ 275.899146][ T43] cdc_wdm 2-1:1.0: skipping garbage [ 275.905449][ T43] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 275.911430][ T43] cdc_wdm 2-1:1.0: Unknown control protocol [ 276.019058][ T5905] usb 7-1: GET_CAPABILITIES returned 0 [ 276.024757][ T5905] usbtmc 7-1:16.0: can't read capabilities [ 276.081172][ T93] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 276.223543][ T5905] usb 7-1: USB disconnect, device number 18 [ 276.232599][ T93] usb 5-1: Using ep0 maxpacket: 16 [ 276.240363][ T93] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 276.249117][ T93] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.259756][ T93] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.270660][ T93] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.272597][ T9] keytouch 0003:0926:3333.002E: fixing up Keytouch IEC report descriptor [ 276.280571][ T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.293892][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002E/input/input47 [ 276.296930][ T93] usb 5-1: Product: syz [ 276.312596][ T93] usb 5-1: Manufacturer: syz [ 276.317188][ T93] usb 5-1: SerialNumber: syz [ 276.325418][T10713] usb 2-1: USB disconnect, device number 36 [ 276.384573][ T9] keytouch 0003:0926:3333.002E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 276.499295][ T5905] usb 4-1: USB disconnect, device number 38 [ 276.731750][ T93] usb 5-1: 0:2 : does not exist [ 276.847504][T10713] usb 1-1: USB disconnect, device number 33 [ 276.920499][T13762] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.934949][T13762] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.991043][ T5905] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 277.027569][T13762] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.038386][T13762] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.152470][ T5905] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 277.176307][ T5905] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 277.205566][ T5905] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 277.215703][T13762] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.226071][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.234188][ T5905] usb 4-1: Product: syz [ 277.238389][ T5905] usb 4-1: Manufacturer: syz [ 277.243370][ T5905] usb 4-1: SerialNumber: syz [ 277.249537][T13762] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.260752][ T5905] usb 4-1: config 0 descriptor?? [ 277.266966][T13757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 277.286948][T13757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 277.347534][T13762] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.359524][ T93] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 277.367819][T13762] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.408896][ T93] usb 5-1: USB disconnect, device number 38 [ 277.523232][T13757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 277.541183][T13757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 277.563479][ T36] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.587271][ T36] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.632723][ T36] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.640915][ T36] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.673160][ T36] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.683694][ T36] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.702982][ T36] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.714703][ T36] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.731910][T13785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.980432][ T5905] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 278.167855][ T30] audit: type=1400 audit(1756493999.688:722): avc: denied { connect } for pid=13797 comm="syz.6.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 278.187516][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.390064][ T5905] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 278.405439][ T5905] usb 4-1: USB disconnect, device number 39 [ 278.720383][T13810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3438'. [ 278.774523][T13810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3438'. [ 278.791346][T13810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3438'. [ 278.809482][T13810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3438'. [ 279.041329][ T30] audit: type=1400 audit(1756494000.558:723): avc: denied { bind } for pid=13825 comm="syz.6.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.201072][ T93] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 279.260300][T13839] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 279.275949][T10713] kernel write not supported for file /uhid (pid: 10713 comm: kworker/0:9) [ 279.309963][ T5860] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 279.320800][ T5860] CPU: 0 UID: 0 PID: 5860 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 279.320827][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.320839][ T5860] Workqueue: hci4 hci_rx_work [ 279.320862][ T5860] Call Trace: [ 279.320870][ T5860] [ 279.320877][ T5860] dump_stack_lvl+0x16c/0x1f0 [ 279.320901][ T5860] sysfs_warn_dup+0x7f/0xa0 [ 279.320927][ T5860] sysfs_create_dir_ns+0x24b/0x2b0 [ 279.320950][ T5860] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 279.320977][ T5860] ? find_held_lock+0x2b/0x80 [ 279.321010][ T5860] ? do_raw_spin_unlock+0x172/0x230 [ 279.321033][ T5860] kobject_add_internal+0x2c4/0x9b0 [ 279.321062][ T5860] kobject_add+0x16e/0x240 [ 279.321083][ T5860] ? __pfx_kobject_add+0x10/0x10 [ 279.321108][ T5860] ? do_raw_spin_unlock+0x172/0x230 [ 279.321128][ T5860] ? kobject_put+0xab/0x5a0 [ 279.321157][ T5860] device_add+0x288/0x1aa0 [ 279.321182][ T5860] ? __pfx_dev_set_name+0x10/0x10 [ 279.321209][ T5860] ? __pfx_device_add+0x10/0x10 [ 279.321233][ T5860] ? mgmt_send_event_skb+0x2fb/0x460 [ 279.321269][ T5860] hci_conn_add_sysfs+0x17e/0x230 [ 279.321291][ T5860] le_conn_complete_evt+0x1075/0x1d70 [ 279.321318][ T5860] ? preempt_count_sub+0xe0/0x160 [ 279.321347][ T5860] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 279.321374][ T5860] ? hci_event_packet+0x459/0x11c0 [ 279.321409][ T5860] hci_le_conn_complete_evt+0x23c/0x370 [ 279.321444][ T5860] hci_le_meta_evt+0x357/0x5e0 [ 279.321461][ T5860] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 279.321494][ T5860] hci_event_packet+0x685/0x11c0 [ 279.321522][ T5860] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 279.321542][ T5860] ? __pfx_hci_event_packet+0x10/0x10 [ 279.321573][ T5860] ? kcov_remote_start+0x3c9/0x6d0 [ 279.321593][ T5860] ? lockdep_hardirqs_on+0x7c/0x110 [ 279.321620][ T5860] hci_rx_work+0x2c5/0x16b0 [ 279.321640][ T5860] ? rcu_is_watching+0x12/0xc0 [ 279.321668][ T5860] process_one_work+0x9cf/0x1b70 [ 279.321700][ T5860] ? __pfx_process_one_work+0x10/0x10 [ 279.321730][ T5860] ? assign_work+0x1a0/0x250 [ 279.321751][ T5860] worker_thread+0x6c8/0xf10 [ 279.321779][ T5860] ? __kthread_parkme+0x19e/0x250 [ 279.321806][ T5860] ? __pfx_worker_thread+0x10/0x10 [ 279.321826][ T5860] kthread+0x3c5/0x780 [ 279.321845][ T5860] ? __pfx_kthread+0x10/0x10 [ 279.321864][ T5860] ? rcu_is_watching+0x12/0xc0 [ 279.321886][ T5860] ? __pfx_kthread+0x10/0x10 [ 279.321905][ T5860] ret_from_fork+0x5d7/0x6f0 [ 279.321922][ T5860] ? __pfx_kthread+0x10/0x10 [ 279.321941][ T5860] ret_from_fork_asm+0x1a/0x30 [ 279.321978][ T5860] [ 279.566638][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.578015][ T5860] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 279.593513][ T5860] Bluetooth: hci4: failed to register connection device [ 279.612176][ T93] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.623586][ T93] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.638102][T13839] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 279.659476][ T93] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 279.677226][ T93] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 279.698294][ T93] usb 1-1: SerialNumber: syz [ 279.725559][T13839] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 279.786026][T13839] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 279.814846][T13852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3455'. [ 279.820126][T13856] loop6: detected capacity change from 0 to 524288000 [ 279.832611][T13856] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.840523][T13856] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.849254][T13856] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.860322][T13856] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.868510][T13856] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.877440][T13856] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.885835][T13856] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.894200][T13856] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.902520][T13856] ldm_validate_partition_table(): Disk read failed. [ 279.909193][T13856] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.917573][T13856] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.926816][T13856] Dev loop6: unable to read RDB block 0 [ 279.934571][T13856] loop6: unable to read partition table [ 279.940408][T13856] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜C) failed (rc=-5) [ 279.941645][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 279.968052][ T3518] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 279.979985][ T93] usb 1-1: 0:2 : does not exist [ 280.006606][ T3518] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 280.024234][ T93] usb 1-1: USB disconnect, device number 34 [ 280.031123][ T3518] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 280.205773][T13872] netlink: 'syz.4.3465': attribute type 4 has an invalid length. [ 280.218910][T13872] netlink: 209028 bytes leftover after parsing attributes in process `syz.4.3465'. [ 280.351333][ T5905] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 280.501181][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 280.508053][ T5905] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 280.527299][ T5905] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.542061][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 280.557527][ T5905] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 280.572008][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.585301][ T5905] usb 2-1: Product: syz [ 280.589467][ T5905] usb 2-1: Manufacturer: syz [ 280.597360][ T5905] usb 2-1: SerialNumber: syz [ 280.716194][T13904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3478'. [ 280.753966][T13906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.871069][ T93] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 281.011418][ T5905] usb 2-1: 0:2 : does not exist [ 281.031179][ T93] usb 5-1: Using ep0 maxpacket: 32 [ 281.037418][ T93] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 281.041118][T10713] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 281.045522][ T93] usb 5-1: config 0 has no interface number 0 [ 281.061593][ T93] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 281.070653][ T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.078747][ T93] usb 5-1: Product: syz [ 281.082953][ T93] usb 5-1: Manufacturer: syz [ 281.087553][ T93] usb 5-1: SerialNumber: syz [ 281.095378][ T93] usb 5-1: config 0 descriptor?? [ 281.102110][ T93] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 281.201063][T10713] usb 4-1: Using ep0 maxpacket: 32 [ 281.207692][T10713] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 281.216367][T10713] usb 4-1: config 0 has no interface number 0 [ 281.224406][T10713] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 281.233585][T10713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.241678][T10713] usb 4-1: Product: syz [ 281.245829][T10713] usb 4-1: Manufacturer: syz [ 281.250721][T10713] usb 4-1: SerialNumber: syz [ 281.257903][T10713] usb 4-1: config 0 descriptor?? [ 281.265028][T10713] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 281.304637][ T93] etas_es58x 5-1:0.2: could not parse product info: '424242424242' [ 281.468807][T10713] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 281.479917][T10713] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 281.512179][T10713] usb 5-1: USB disconnect, device number 39 [ 281.519375][T10713] etas_es58x 5-1:0.2: Disconnecting syz syz [ 281.623847][ T5905] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 281.646406][ T5905] usb 2-1: USB disconnect, device number 37 [ 281.874738][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 281.884351][ T9] usb 4-1: USB disconnect, device number 40 [ 281.895554][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 281.909053][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 281.922369][ T9] quatech2 4-1:0.51: device disconnected [ 282.007290][ T36] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 282.016200][ T36] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 282.025721][ T36] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 282.038542][ T36] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 282.219342][ T30] audit: type=1326 audit(1756494003.738:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.1.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671098ebe9 code=0x7ffc0000 [ 282.243659][T10713] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 282.254943][ T30] audit: type=1326 audit(1756494003.738:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.1.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671098ebe9 code=0x7ffc0000 [ 282.282630][ T30] audit: type=1326 audit(1756494003.738:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.1.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f671098ebe9 code=0x7ffc0000 [ 282.306356][ T30] audit: type=1326 audit(1756494003.738:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.1.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671098ebe9 code=0x7ffc0000 [ 282.350717][ T30] audit: type=1326 audit(1756494003.738:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.1.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671098ebe9 code=0x7ffc0000 [ 282.390962][ T30] audit: type=1326 audit(1756494003.738:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.1.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f671098ebe9 code=0x7ffc0000 [ 282.416669][ T30] audit: type=1326 audit(1756494003.738:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.1.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671098ebe9 code=0x7ffc0000 [ 282.443814][T10713] usb 7-1: config 0 has no interfaces? [ 282.449521][ T30] audit: type=1326 audit(1756494003.738:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.1.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671098ebe9 code=0x7ffc0000 [ 282.472926][T10713] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 282.472951][T10713] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.481678][T10713] usb 7-1: config 0 descriptor?? [ 282.482848][T13953] syzkaller1: entered promiscuous mode [ 282.524155][T13953] syzkaller1: entered allmulticast mode [ 282.536169][T13959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3503'. [ 282.707325][T13931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.716122][T13931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.726406][T13931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.735105][T13931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.745315][ T9] usb 7-1: USB disconnect, device number 19 [ 282.821064][T10713] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 282.972314][T10713] usb 4-1: Using ep0 maxpacket: 16 [ 282.985244][T10713] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 283.003253][T10713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.020459][T10713] usb 4-1: Product: syz [ 283.032959][T10713] usb 4-1: Manufacturer: syz [ 283.047872][T10713] usb 4-1: SerialNumber: syz [ 283.060324][T10713] usb 4-1: config 0 descriptor?? [ 283.185596][T13986] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3516'. [ 283.221780][ T93] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 283.265744][T13986] syz.0.3516 (13986) used greatest stack depth: 19752 bytes left [ 283.392660][ T93] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 283.400739][ T93] usb 7-1: config 0 has no interface number 0 [ 283.407829][ T93] usb 7-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 283.417501][ T93] usb 7-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 283.427404][ T93] usb 7-1: config 0 interface 1 has no altsetting 0 [ 283.434053][ T93] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 283.443120][ T93] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.452751][ T93] usb 7-1: config 0 descriptor?? [ 283.458879][ T93] hub 7-1:0.1: bad descriptor, ignoring hub [ 283.464819][ T93] hub 7-1:0.1: probe with driver hub failed with error -5 [ 283.475145][T10713] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 283.501457][T10713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 283.512095][T10715] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 283.525475][T10713] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 283.538181][T10713] usb 4-1: media controller created [ 283.565866][T10713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.658686][T13998] netlink: 'syz.0.3521': attribute type 13 has an invalid length. [ 283.676204][T13998] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 283.692091][T10715] usb 5-1: Using ep0 maxpacket: 8 [ 283.695745][ T93] usb 7-1: USB disconnect, device number 20 [ 283.701525][T10715] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 283.714932][T10713] zl10353_read_register: readreg error (reg=127, ret==0) [ 283.723073][T10713] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 283.731207][T10715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.739450][T10713] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 283.750402][T10715] usb 5-1: config 0 descriptor?? [ 283.757680][T10713] usb 4-1: USB disconnect, device number 41 [ 283.785165][T10713] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 283.893238][T14008] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 283.904405][T14008] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 283.968095][T10715] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 284.363231][ T93] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 284.393357][ T5860] Bluetooth: hci5: sending frame failed (-49) [ 284.400693][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 284.524243][ T93] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.553828][ T93] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 284.573655][ T93] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.594824][ T93] usb 2-1: config 0 descriptor?? [ 284.786566][T10715] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 284.801812][T10715] asix 5-1:0.0: probe with driver asix failed with error -71 [ 284.813298][T10715] usb 5-1: USB disconnect, device number 40 [ 285.013917][ T93] sony 0003:054C:024B.002F: unknown main item tag 0x0 [ 285.021200][ T93] sony 0003:054C:024B.002F: item fetching failed at offset 3/5 [ 285.029261][ T93] sony 0003:054C:024B.002F: parse failed [ 285.041220][ T93] sony 0003:054C:024B.002F: probe with driver sony failed with error -22 [ 285.224150][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 285.224164][ T30] audit: type=1400 audit(1756494006.728:738): avc: denied { accept } for pid=14058 comm="syz.3.3549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 285.225869][ T93] usb 2-1: USB disconnect, device number 38 [ 285.577830][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3558'. [ 286.174642][T14112] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3574'. [ 286.201283][ T93] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 286.261158][T10715] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 286.304892][T14116] pim6reg1: entered promiscuous mode [ 286.310270][T14116] pim6reg1: entered allmulticast mode [ 286.351114][ T93] usb 5-1: Using ep0 maxpacket: 32 [ 286.357453][ T93] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 286.366788][ T93] usb 5-1: config 0 has no interface number 0 [ 286.375796][ T93] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 286.385155][ T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.393322][ T93] usb 5-1: Product: syz [ 286.397473][ T93] usb 5-1: Manufacturer: syz [ 286.404820][ T93] usb 5-1: SerialNumber: syz [ 286.412363][ T93] usb 5-1: config 0 descriptor?? [ 286.419292][ T93] smsc95xx v2.0.0 [ 286.425707][ T93] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 286.436398][T10715] usb 4-1: Using ep0 maxpacket: 8 [ 286.436718][ T93] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 286.450118][T10715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.461311][T10715] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 286.470379][T10715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.482850][T10715] usb 4-1: config 0 descriptor?? [ 286.650803][T14099] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3568'. [ 286.665122][T14099] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3568'. [ 286.678016][ T9] usb 5-1: USB disconnect, device number 41 [ 286.899650][T10715] megaworld 0003:07B5:0312.0030: unknown main item tag 0x0 [ 286.907047][T10715] megaworld 0003:07B5:0312.0030: unknown main item tag 0x0 [ 286.914712][T10715] megaworld 0003:07B5:0312.0030: unknown main item tag 0x0 [ 286.922004][T10715] megaworld 0003:07B5:0312.0030: unknown main item tag 0x0 [ 286.929202][T10715] megaworld 0003:07B5:0312.0030: unknown main item tag 0x0 [ 286.936572][T10715] megaworld 0003:07B5:0312.0030: unknown main item tag 0x0 [ 286.943937][T10715] megaworld 0003:07B5:0312.0030: unknown main item tag 0x0 [ 286.951219][T10715] megaworld 0003:07B5:0312.0030: unknown main item tag 0x0 [ 286.958418][T10715] megaworld 0003:07B5:0312.0030: unknown main item tag 0x0 [ 286.965778][T10715] megaworld 0003:07B5:0312.0030: collection stack underflow [ 286.973157][T10713] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 286.980814][T10715] megaworld 0003:07B5:0312.0030: item 0 0 0 12 parsing failed [ 286.993835][T10715] megaworld 0003:07B5:0312.0030: parse failed [ 287.000376][T10715] megaworld 0003:07B5:0312.0030: probe with driver megaworld failed with error -22 [ 287.105667][ T9] usb 4-1: USB disconnect, device number 42 [ 287.141247][T10713] usb 2-1: Using ep0 maxpacket: 8 [ 287.149082][T10713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.170628][T10713] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 287.192721][T10713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.221772][T10713] usb 2-1: config 0 descriptor?? [ 287.372490][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 287.663218][T10713] hid-multitouch 0003:0EEF:72C4.0031: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 287.878013][T10713] usb 2-1: USB disconnect, device number 39 [ 287.935795][T14176] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 287.946801][ T30] audit: type=1400 audit(1756494009.478:739): avc: denied { getopt } for pid=14175 comm="syz.3.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 287.948300][T14177] netlink: 13 bytes leftover after parsing attributes in process `syz.4.3601'. [ 288.096970][ T30] audit: type=1400 audit(1756494009.618:740): avc: denied { mounton } for pid=14181 comm="syz.0.3605" path="/719/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 288.145762][ T30] audit: type=1400 audit(1756494009.648:741): avc: denied { read } for pid=14181 comm="syz.0.3605" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 288.167904][ T30] audit: type=1400 audit(1756494009.648:742): avc: denied { open } for pid=14181 comm="syz.0.3605" path="/719/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 288.192384][ T30] audit: type=1400 audit(1756494009.648:743): avc: denied { read } for pid=14181 comm="syz.0.3605" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 288.233735][ T30] audit: type=1400 audit(1756494009.648:744): avc: denied { read } for pid=14181 comm="syz.0.3605" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 288.375004][T14197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3611'. [ 288.635405][ T30] audit: type=1400 audit(1756494010.158:745): avc: denied { read } for pid=14210 comm="syz.3.3617" path="socket:[51181]" dev="sockfs" ino=51181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 288.721091][T10713] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 288.938513][T10713] usb 2-1: Using ep0 maxpacket: 32 [ 288.960192][T10713] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 288.972577][T10713] usb 2-1: config 0 has no interface number 0 [ 288.978706][T10713] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 289.003632][T10713] usb 2-1: config 0 interface 85 has no altsetting 0 [ 289.012362][T10713] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 289.024276][T10713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.044436][T10713] usb 2-1: Product: syz [ 289.053722][T10713] usb 2-1: Manufacturer: syz [ 289.058896][T10713] usb 2-1: SerialNumber: syz [ 289.065502][T10713] usb 2-1: config 0 descriptor?? [ 289.193334][T14230] all (unregistering): Released all slaves [ 289.326588][T14239] syz_tun: entered allmulticast mode [ 289.339521][T14239] dvmrp8: entered allmulticast mode [ 289.356223][T14239] syz_tun: left allmulticast mode [ 289.362624][T14239] dvmrp8: left allmulticast mode [ 289.401766][ T5860] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 289.402396][ T5855] Bluetooth: hci5: command 0x1003 tx timeout [ 289.465242][T14243] netlink: 'syz.6.3632': attribute type 39 has an invalid length. [ 289.683813][T10713] appletouch 2-1:0.85: Geyser mode initialized. [ 289.691123][T10713] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input48 [ 289.821194][T10715] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 289.895724][T10713] usb 2-1: USB disconnect, device number 40 [ 289.907146][T10713] appletouch 2-1:0.85: input: appletouch disconnected [ 289.981051][ T93] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 289.985711][T10715] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 290.000350][T10715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.008757][T10715] usb 5-1: Product: syz [ 290.016041][T10715] usb 5-1: Manufacturer: syz [ 290.020638][T10715] usb 5-1: SerialNumber: syz [ 290.105088][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3642'. [ 290.132759][ T93] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 290.141421][ T93] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.152304][ T93] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 290.163083][ T93] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 290.171421][ T93] usb 7-1: Manufacturer: syz [ 290.177485][ T93] usb 7-1: config 0 descriptor?? [ 290.231051][ T93] rc_core: IR keymap rc-hauppauge not found [ 290.237010][ T93] Registered IR keymap rc-empty [ 290.244541][ T93] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 290.255727][ T93] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input49 [ 290.422840][ C1] igorplugusb 7-1:0.0: Error: urb status = -32 [ 290.436087][ T93] usb 7-1: USB disconnect, device number 21 [ 290.679973][ T30] audit: type=1400 audit(1756494012.198:746): avc: denied { bind } for pid=14295 comm="syz.1.3656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 290.723443][T14294] block nbd3: NBD_DISCONNECT [ 290.732541][T14294] block nbd3: Send disconnect failed -22 [ 290.739351][T14293] block nbd3: Disconnected due to user request. [ 290.748456][T14293] block nbd3: shutting down sockets [ 291.048419][T10715] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 291.101900][T10715] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 291.111142][ T93] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 291.138204][T10715] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 291.160310][T10715] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 291.203460][T10715] usb 5-1: USB disconnect, device number 42 [ 291.261271][ T93] usb 4-1: Using ep0 maxpacket: 16 [ 291.275718][ T93] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 291.287473][ T93] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.309674][ T93] usb 4-1: config 0 has no interface number 0 [ 291.324486][ T93] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 291.353359][ T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.374131][ T93] usb 4-1: Product: syz [ 291.378295][ T93] usb 4-1: Manufacturer: syz [ 291.395504][ T93] usb 4-1: SerialNumber: syz [ 291.406353][ T93] usb 4-1: config 0 descriptor?? [ 291.415231][ T93] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 291.426813][ T93] usb 4-1: No valid video chain found. [ 291.500938][ T30] audit: type=1400 audit(1756494013.018:747): avc: denied { remount } for pid=14353 comm="syz.1.3680" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 291.640906][ T93] usb 4-1: USB disconnect, device number 43 [ 291.711092][ T9] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 291.907050][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 291.931436][ T9] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 291.940833][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.966885][ T9] usb 1-1: config 0 descriptor?? [ 291.982757][T14350] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 292.019753][T14382] input: syz1 as /devices/virtual/input/input50 [ 292.026562][T14382] input: failed to attach handler leds to device input50, error: -6 [ 292.402843][ T30] audit: type=1400 audit(1756494013.928:748): avc: denied { unmount } for pid=10263 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 292.435970][ T9] chicony 0003:04F2:1421.0032: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.0-1/input0 [ 292.481177][ T93] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 292.518155][T14410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3706'. [ 292.572797][T14410] bond0: (slave bond_slave_1): Releasing backup interface [ 292.580298][T14410] bond_slave_1 (unregistering): left allmulticast mode [ 292.641120][ T93] usb 4-1: Using ep0 maxpacket: 8 [ 292.655363][ T93] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 292.673575][ T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.682802][ T9] usb 1-1: USB disconnect, device number 35 [ 292.691166][ T93] usb 4-1: Product: syz [ 292.701092][ T93] usb 4-1: Manufacturer: syz [ 292.706194][ T93] usb 4-1: SerialNumber: syz [ 292.715447][ T93] usb 4-1: config 0 descriptor?? [ 292.722979][ T93] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 292.763555][T14422] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 292.775968][T14422] overlayfs: maximum fs stacking depth exceeded [ 293.200580][ T30] audit: type=1400 audit(1756494014.718:749): avc: denied { bind } for pid=14447 comm="syz.1.3724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 293.239089][T14451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3725'. [ 293.325873][ T30] audit: type=1400 audit(1756494014.848:750): avc: denied { watch } for pid=14456 comm="syz.0.3728" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 293.370865][T14459] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 293.390794][T14459] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 293.442961][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 293.464042][ T30] audit: type=1400 audit(1756494014.978:751): avc: denied { execute } for pid=14462 comm="syz.1.3731" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 293.606359][ T9] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 293.615663][ T9] usb 7-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 293.646013][ T9] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 293.665206][ T9] usb 7-1: config 1 has no interface number 1 [ 293.681154][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 293.694857][ T9] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.729493][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.739780][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.748716][ T9] usb 7-1: Product: syz [ 293.753060][ T9] usb 7-1: Manufacturer: syz [ 293.757675][ T9] usb 7-1: SerialNumber: syz [ 293.775572][ T93] usb 4-1: USB disconnect, device number 44 [ 293.979689][ T9] usb 7-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 294.001395][ T9] usb 7-1: MIDIStreaming interface descriptor not found [ 294.048102][ T9] usb 7-1: USB disconnect, device number 22 [ 294.481363][T10715] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 294.656495][T10715] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 294.674460][T10715] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.684059][T10715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 294.692560][T10715] usb 1-1: SerialNumber: syz [ 294.800862][T14523] netem: incorrect ge model size [ 294.808086][T14523] netem: change failed [ 294.919567][ T30] audit: type=1400 audit(1756494016.438:752): avc: denied { remount } for pid=14529 comm="syz.3.3760" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 294.984592][T14536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3762'. [ 294.997056][T14536] netlink: 'syz.3.3762': attribute type 7 has an invalid length. [ 295.005079][T14536] netlink: 'syz.3.3762': attribute type 8 has an invalid length. [ 295.013766][T14536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3762'. [ 295.030377][T14536] gretap0: entered promiscuous mode [ 295.036758][T14536] batadv_slave_1: entered promiscuous mode [ 295.048502][T14536] erspan0: entered promiscuous mode [ 295.151189][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 295.326537][T10715] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 295.338293][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 295.351264][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 295.364771][ T9] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 295.375037][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 295.388592][ T9] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 295.406466][ T9] usb 7-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 295.414851][ T9] usb 7-1: Product: syz [ 295.419035][ T9] usb 7-1: Manufacturer: syz [ 295.423711][ T9] usb 7-1: SerialNumber: syz [ 295.433874][ T9] usb 7-1: config 0 descriptor?? [ 295.511356][ T93] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 295.585912][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3776'. [ 295.596192][T14567] chnl_net:caif_netlink_parms(): no params data found [ 295.674430][ T93] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.690666][ T93] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 295.709842][ T93] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 295.715171][T14573] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3779'. [ 295.722887][ T93] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.739902][T10715] usb 1-1: USB disconnect, device number 36 [ 295.751665][T10715] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 295.765036][ T93] usb 2-1: config 0 descriptor?? [ 295.781263][ T93] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 295.796021][ T93] dvb-usb: bulk message failed: -22 (3/0) [ 295.809104][ T93] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 295.824361][ T93] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 295.841162][ T93] usb 2-1: media controller created [ 295.855860][ T9] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 295.858137][ T93] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.895548][ T93] dvb-usb: bulk message failed: -22 (6/0) [ 295.907339][ T93] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 295.928100][ T93] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input52 [ 295.949842][ T93] dvb-usb: schedule remote query interval to 150 msecs. [ 295.965648][ T93] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 295.996869][T14585] bridge_slave_0: left allmulticast mode [ 296.005348][T14585] bridge_slave_0: left promiscuous mode [ 296.017657][T14585] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.029126][T14585] bridge_slave_1: left allmulticast mode [ 296.058769][T14585] bridge_slave_1: left promiscuous mode [ 296.081602][T14585] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.109152][T14585] bond0: (slave bond_slave_0): Releasing backup interface [ 296.122559][ T93] dvb-usb: bulk message failed: -22 (1/0) [ 296.131275][T14585] bond0: (slave bond_slave_1): Releasing backup interface [ 296.143055][ T93] dvb-usb: error while querying for an remote control event. [ 296.162577][T14585] team0: Port device team_slave_0 removed [ 296.169186][T10715] usb 2-1: USB disconnect, device number 41 [ 296.176549][T14585] team0: Port device team_slave_1 removed [ 296.182749][T14585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.188263][T10715] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 296.257550][ T9] gs_usb 7-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 296.274213][ T9] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -22 [ 296.470774][ T9] usb 7-1: USB disconnect, device number 23 [ 296.953377][T14637] netlink: 'syz.1.3808': attribute type 12 has an invalid length. [ 296.961353][T14637] netlink: 'syz.1.3808': attribute type 29 has an invalid length. [ 296.969213][T14637] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3808'. [ 296.978429][T14637] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3808'. [ 297.354943][T14647] IPv6: sit1: Disabled Multicast RS [ 297.366303][T14647] sit1: entered allmulticast mode [ 297.530368][ T30] audit: type=1326 audit(1756494019.048:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14650 comm="syz.6.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6338b8ebe9 code=0x50000 [ 297.579630][ T30] audit: type=1326 audit(1756494019.048:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14650 comm="syz.6.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6338b8ebe9 code=0x50000 [ 297.611078][ T30] audit: type=1326 audit(1756494019.048:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14650 comm="syz.6.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6338b8ebe9 code=0x50000 [ 297.735765][T14657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3816'. [ 297.913656][ T30] audit: type=1326 audit(1756494019.048:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14650 comm="syz.6.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6338b8ebe9 code=0x50000 [ 297.936797][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.031232][ T30] audit: type=1326 audit(1756494019.048:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14650 comm="syz.6.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6338b8ebe9 code=0x50000 [ 298.076988][ T30] audit: type=1326 audit(1756494019.048:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14650 comm="syz.6.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6338b8ebe9 code=0x50000 [ 298.103221][ T30] audit: type=1326 audit(1756494019.048:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14650 comm="syz.6.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6338b8ebe9 code=0x50000 [ 298.156889][ T30] audit: type=1326 audit(1756494019.048:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14650 comm="syz.6.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6338b8ebe9 code=0x50000 [ 298.215918][ T30] audit: type=1326 audit(1756494019.048:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14650 comm="syz.6.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6338b8ebe9 code=0x50000 [ 298.256649][T14666] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.276064][ T30] audit: type=1326 audit(1756494019.048:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14650 comm="syz.6.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6338b8ebe9 code=0x50000 [ 299.335579][T14733] netlink: 212164 bytes leftover after parsing attributes in process `syz.6.3853'. [ 299.353153][T14730] netlink: 'syz.4.3852': attribute type 1 has an invalid length. [ 299.431067][ T5905] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 299.546176][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3859'. [ 299.592714][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 299.602670][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.620157][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.633307][ T5905] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 299.642606][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.651877][T14754] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3862'. [ 299.681773][ T5905] usb 4-1: config 0 descriptor?? [ 299.689085][ T5905] hub 4-1:0.0: USB hub found [ 299.900318][ T5905] hub 4-1:0.0: 1 port detected [ 300.431120][ T5973] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 300.454615][ T3518] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 300.510725][ T5905] hub 4-1:0.0: activate --> -90 [ 300.617425][ T5973] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 300.636759][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.661192][ T5973] usb 1-1: Product: syz [ 300.664578][T14789] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3877'. [ 300.681123][ T5973] usb 1-1: Manufacturer: syz [ 300.685737][ T5973] usb 1-1: SerialNumber: syz [ 300.697287][T14789] batadv_slave_1: entered promiscuous mode [ 300.704907][ T5973] usb 1-1: config 0 descriptor?? [ 300.744860][ T5973] gspca_main: sq930x-2.14.0 probing 2770:930c [ 300.929750][ T5905] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 300.937362][ T93] usb 4-1: USB disconnect, device number 45 [ 301.781277][ T5973] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 301.796542][ T5973] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 301.813236][ T5973] usb 1-1: USB disconnect, device number 37 [ 301.910263][ T9] hid_parser_main: 2 callbacks suppressed [ 301.910282][ T9] hid-generic 0005:16BF:5505.0033: unknown main item tag 0x0 [ 301.924022][ T9] hid-generic 0005:16BF:5505.0033: unknown main item tag 0x0 [ 301.933698][ T9] hid-generic 0005:16BF:5505.0033: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 302.131216][T10715] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 302.291173][ T5973] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 302.301111][T10715] usb 5-1: Using ep0 maxpacket: 16 [ 302.311974][T10715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.329984][T10715] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 302.351059][T10715] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 302.364542][T10715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.374923][T10715] usb 5-1: config 0 descriptor?? [ 302.396211][T14842] netlink: 'syz.0.3898': attribute type 22 has an invalid length. [ 302.407144][T14842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3898'. [ 302.425715][ T3491] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.434419][T14842] netlink: 'syz.0.3898': attribute type 22 has an invalid length. [ 302.444813][ T3491] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.453504][T14842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3898'. [ 302.463067][ T3491] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.471729][ T3491] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.480395][ T5973] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 302.488637][ T5973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 302.512237][ T5973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 302.536905][ T5973] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 302.559522][ T5973] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 302.568811][ T5973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.597877][ T5905] usb 5-1: USB disconnect, device number 43 [ 302.617608][ T5973] usb 4-1: config 0 descriptor?? [ 302.623385][T14837] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 303.056728][ T5973] plantronics 0003:047F:FFFF.0034: reserved main item tag 0xd [ 303.084857][ T5973] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 303.231047][T10718] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 303.308332][ T5973] usb 4-1: USB disconnect, device number 46 [ 303.358591][T14862] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3907'. [ 303.372829][T14862] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3907'. [ 303.391376][T10718] usb 2-1: Using ep0 maxpacket: 32 [ 303.412752][T10718] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 303.431256][T10718] usb 2-1: config 0 has no interface number 0 [ 303.443001][T10718] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 303.461595][T10718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.471201][T10718] usb 2-1: Product: syz [ 303.500028][T10718] usb 2-1: Manufacturer: syz [ 303.504668][T10718] usb 2-1: SerialNumber: syz [ 303.512208][T10718] usb 2-1: config 0 descriptor?? [ 303.523505][T10718] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 303.523725][T10715] kernel write not supported for file [eventfd] (pid: 10715 comm: kworker/0:11) [ 303.726035][T10718] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 303.744414][T10718] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 303.802859][ T5973] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 303.892042][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 303.964362][ T5973] usb 7-1: unable to get BOS descriptor or descriptor too short [ 303.975667][ T5973] usb 7-1: not running at top speed; connect to a high speed hub [ 303.984827][ T5973] usb 7-1: config 1 has an invalid interface number: 138 but max is 0 [ 303.993590][ T5973] usb 7-1: config 1 has no interface number 0 [ 303.999859][ T5973] usb 7-1: config 1 interface 138 has no altsetting 0 [ 304.008907][ T5973] usb 7-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 304.018867][ T5973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.026987][ T5973] usb 7-1: Product: syz [ 304.031364][ T5973] usb 7-1: Manufacturer: syz [ 304.036032][ T5973] usb 7-1: SerialNumber: syz [ 304.141098][T10718] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 304.149590][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 304.149643][ T9] usb 2-1: USB disconnect, device number 42 [ 304.166124][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 304.178785][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 304.194406][ T9] quatech2 2-1:0.51: device disconnected [ 304.252744][ T5973] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 304.273025][ T5973] usb 7-1: USB disconnect, device number 24 [ 304.306171][T10718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.319866][T10718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.329838][T10718] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 304.331088][T10715] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 304.343269][T10718] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 304.359567][T10718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.368793][T10718] usb 4-1: config 0 descriptor?? [ 304.501076][T10715] usb 1-1: Using ep0 maxpacket: 8 [ 304.507575][T10715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 304.518670][T10715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 304.529234][T10715] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 304.538950][T10715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 304.548780][T10715] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 304.558568][T10715] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 304.567951][T10715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.579645][T10715] usb 1-1: config 0 descriptor?? [ 304.594486][ T5860] Bluetooth: hci5: urb ffff8881467f1e00 submission failed (90) [ 304.783998][T10718] plantronics 0003:047F:FFFF.0035: reserved main item tag 0xd [ 304.805369][T10718] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 304.826205][T10715] usb 1-1: USB disconnect, device number 38 [ 305.039072][T10715] usb 4-1: USB disconnect, device number 47 [ 305.060717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 305.349995][T14899] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.3921'. [ 305.617928][T14915] netlink: 'syz.1.3928': attribute type 1 has an invalid length. [ 305.629900][T14915] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3928'. [ 305.641386][T10715] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 305.805611][T10715] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 305.829169][T10715] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.855220][T10715] usb 7-1: config 0 descriptor?? [ 305.888325][T10715] cp210x 7-1:0.0: cp210x converter detected [ 306.312324][T10715] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 306.501064][ T93] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 306.525967][T10715] usb 7-1: cp210x converter now attached to ttyUSB0 [ 306.671063][ T93] usb 1-1: Using ep0 maxpacket: 8 [ 306.701729][ T93] usb 1-1: config 0 has no interfaces? [ 306.721824][ T93] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 306.730865][ T93] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.734599][T10715] usb 7-1: USB disconnect, device number 25 [ 306.765229][T10715] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 306.775761][ T93] usb 1-1: Product: syz [ 306.779934][ T93] usb 1-1: Manufacturer: syz [ 306.792662][ T93] usb 1-1: SerialNumber: syz [ 306.799052][ T93] usb 1-1: config 0 descriptor?? [ 306.816522][T10715] cp210x 7-1:0.0: device disconnected [ 306.869217][T14945] tls_set_device_offload: netdev not found [ 307.058832][T10718] usb 1-1: USB disconnect, device number 39 [ 307.298372][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 307.298388][ T30] audit: type=1400 audit(1756494028.818:830): avc: denied { module_load } for pid=14952 comm="syz.4.3944" path="/sys/power/wakeup_count" dev="sysfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 307.328821][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.584593][T10715] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 307.777974][T10715] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.801713][T10715] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 307.842087][T10715] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 307.863309][T10715] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 307.897912][T10715] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 307.916975][T10715] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 307.934930][T10715] usb 7-1: Manufacturer: syz [ 307.952553][T10715] usb 7-1: config 0 descriptor?? [ 308.251189][T10715] rc_core: IR keymap rc-hauppauge not found [ 308.257604][T10715] Registered IR keymap rc-empty [ 308.273551][T10715] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 308.293773][T10715] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 308.312608][T10715] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 308.345947][T10715] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input55 [ 308.383750][T10715] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 308.424845][T10715] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 308.461484][T10715] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 308.491479][T10715] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 308.544335][T10715] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 308.585311][T10715] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 308.611739][T10715] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 308.631674][T10715] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 308.651480][T10715] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 308.673739][T10715] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 308.694996][T10715] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 308.721117][T10715] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 308.739715][T10715] usb 7-1: USB disconnect, device number 26 [ 308.806059][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3963'. [ 308.815783][T15002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3963'. [ 308.836812][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3963'. [ 308.836837][ T3518] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.853265][T15002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3963'. [ 308.866165][ T3518] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.874493][ T3518] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.885470][ T3518] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.987077][ T3518] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 308.988564][T15009] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 309.361806][T15023] pim6reg1: entered promiscuous mode [ 309.391109][T15023] pim6reg1: entered allmulticast mode [ 309.663637][T10715] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 309.825571][T10715] usb 2-1: Using ep0 maxpacket: 16 [ 309.855235][T10715] usb 2-1: unable to get BOS descriptor or descriptor too short [ 309.873194][T10715] usb 2-1: too many configurations: 233, using maximum allowed: 8 [ 309.896392][T10715] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 309.905864][T10715] usb 2-1: can't read configurations, error -71 [ 310.551275][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 310.713361][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.731106][ T10] usb 7-1: config 0 has no interface number 0 [ 310.737267][ T10] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 310.747248][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.761868][ T10] usb 7-1: config 0 descriptor?? [ 310.768703][ T10] cp210x 7-1:0.1: cp210x converter detected [ 310.951503][T10715] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 311.101308][T10718] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 311.111883][T10715] usb 2-1: Using ep0 maxpacket: 16 [ 311.119401][T10715] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.142294][T10715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 311.174951][T10715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 311.199101][ T10] cp210x 7-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 311.217369][T10715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 311.227317][T10715] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.246692][T10715] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 311.264825][T10715] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 311.281195][T10715] usb 2-1: Manufacturer: syz [ 311.288080][T10715] usb 2-1: config 0 descriptor?? [ 311.293817][T10718] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.321702][T10718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 311.351302][T10718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 311.389480][T10718] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 311.413573][T10718] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.447012][T10718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.448975][ T10] usb 7-1: cp210x converter now attached to ttyUSB0 [ 311.470175][T10718] usb 5-1: config 0 descriptor?? [ 311.476854][T15065] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 311.591196][T10715] rc_core: IR keymap rc-hauppauge not found [ 311.597110][T10715] Registered IR keymap rc-empty [ 311.614692][T10715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 311.641203][T10715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 311.666077][T15073] input: syz1 as /devices/virtual/input/input57 [ 311.676300][T10715] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 311.678826][T15073] input: failed to attach handler leds to device input57, error: -6 [ 311.704734][T10715] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input56 [ 311.711193][ T5973] usb 7-1: USB disconnect, device number 27 [ 311.725627][T10715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 311.731490][ T5973] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 311.751207][T10715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 311.776127][T10715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 311.794022][ T5973] cp210x 7-1:0.1: device disconnected [ 311.801189][T10715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 311.821115][T10715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 311.841195][T10715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 311.861053][T10715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 311.881129][T10715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 311.906542][T10718] plantronics 0003:047F:FFFF.0036: reserved main item tag 0xd [ 311.922292][T10715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 311.922415][T10718] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 311.951481][T10715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 311.972749][T10715] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 311.990728][T10715] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 312.004379][T10715] usb 2-1: USB disconnect, device number 44 [ 312.148888][ T5973] usb 5-1: USB disconnect, device number 44 [ 312.811056][ T30] audit: type=1400 audit(1756494034.328:831): avc: denied { bind } for pid=15089 comm="syz.1.3992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 313.401330][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 313.992601][T15125] kernel read not supported for file /!sel (pid: 15125 comm: syz.3.4007) [ 314.036865][ T30] audit: type=1800 audit(1756494035.558:832): pid=15125 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.4007" name="!sel" dev="mqueue" ino=57053 res=0 errno=0 [ 314.057808][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.231239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 314.250644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 314.512804][ T30] audit: type=1400 audit(1756494036.028:833): avc: denied { search } for pid=15144 comm="syz.1.4015" name="/" dev="configfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 314.561447][ T30] audit: type=1400 audit(1756494036.038:834): avc: denied { setattr } for pid=15144 comm="syz.1.4015" name="/" dev="configfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 314.971129][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 315.116153][ T30] audit: type=1400 audit(1756494036.628:835): avc: denied { read } for pid=15150 comm="syz.1.4017" path="socket:[57640]" dev="sockfs" ino=57640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 315.161120][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 315.174625][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.231343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 315.239906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 315.264054][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 315.303888][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 315.333990][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 315.352701][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 315.404057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 315.412576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 315.467314][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 315.497363][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.516058][ T10] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 315.543213][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.563986][ T10] usb 1-1: Product: syz [ 315.568128][ T10] usb 1-1: Manufacturer: syz [ 315.599564][ T10] usb 1-1: SerialNumber: syz [ 315.618781][ T10] usb 1-1: config 0 descriptor?? [ 315.625161][T15142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 315.646336][ T10] ati_remote 1-1:0.0: Initializing ati_remote hardware failed. [ 315.656850][ T10] ati_remote 1-1:0.0: probe with driver ati_remote failed with error -5 [ 315.751104][T10715] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 315.847585][ T5973] usb 1-1: USB disconnect, device number 40 [ 315.911057][T10718] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 315.911073][T10715] usb 7-1: Using ep0 maxpacket: 16 [ 315.912663][T10715] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 315.932035][T10715] usb 7-1: config 0 has no interface number 0 [ 315.939773][T10715] usb 7-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 315.948888][T10715] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.956920][T10715] usb 7-1: Product: syz [ 315.961224][T10715] usb 7-1: Manufacturer: syz [ 315.965803][T10715] usb 7-1: SerialNumber: syz [ 315.972416][T10715] usb 7-1: config 0 descriptor?? [ 315.979286][T10715] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 315.992175][T10715] snd-usb-audio 7-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 316.061052][T10718] usb 4-1: Using ep0 maxpacket: 16 [ 316.075420][T10718] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 316.083632][T10718] usb 4-1: config 0 has no interface number 0 [ 316.089774][T10718] usb 4-1: config 0 interface 128 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 316.103993][T10718] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01d3, bcdDevice= 1.16 [ 316.113252][T10718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.125438][T10718] usb 4-1: Product: syz [ 316.127703][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 316.129591][T10718] usb 4-1: Manufacturer: syz [ 316.141817][T10718] usb 4-1: SerialNumber: syz [ 316.148277][T10718] usb 4-1: config 0 descriptor?? [ 316.153775][T15165] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 316.162392][T10718] ftdi_sio 4-1:0.128: FTDI USB Serial Device converter detected [ 316.170503][T10718] usb 4-1: Detected SIO [ 316.175767][T10718] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 316.211543][ T9] usb 7-1: USB disconnect, device number 28 [ 316.292441][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 316.303542][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 316.313375][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 316.322495][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.332817][T15175] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 316.342418][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.398950][T10718] usb 4-1: USB disconnect, device number 48 [ 316.409349][T10718] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 316.426557][T10718] ftdi_sio 4-1:0.128: device disconnected [ 316.556252][ T9] usb 5-1: USB disconnect, device number 45 [ 316.688548][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.881138][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 317.301567][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 317.344619][T15206] overlayfs: failed to set uuid (792/file1, err=-1); falling back to uuid=null. [ 317.410320][ T10] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 317.441586][T15206] overlayfs: failed to verify upper root origin [ 317.448475][ T10] usb 1-1: config 127 has no interface number 1 [ 317.472567][ T10] usb 1-1: config 127 interface 0 altsetting 10 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 317.504038][ T10] usb 1-1: config 127 interface 0 altsetting 10 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 317.543973][T15212] netlink: 'syz.3.4045': attribute type 19 has an invalid length. [ 317.564058][T15212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4045'. [ 317.571080][ T10] usb 1-1: config 127 interface 0 altsetting 10 endpoint 0x8F has invalid wMaxPacketSize 0 [ 317.609331][ T10] usb 1-1: config 127 interface 171 has no altsetting 0 [ 317.614888][T15212] netlink: 'syz.3.4045': attribute type 19 has an invalid length. [ 317.624631][ T3518] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.626559][ T10] usb 1-1: config 127 interface 0 has no altsetting 0 [ 317.641116][ T3518] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.650064][T15212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4045'. [ 317.667214][ T3518] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.671728][ T10] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 317.685113][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.695370][ T10] usb 1-1: Product: syz [ 317.699646][ T10] usb 1-1: Manufacturer: syz [ 317.700431][ T3518] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.704343][ T10] usb 1-1: SerialNumber: syz [ 317.920277][ T10] xr_serial 1-1:127.171: xr_serial converter detected [ 317.928518][ T10] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 317.935233][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 317.971439][ T10] usb 1-1: USB disconnect, device number 41 [ 317.981090][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 317.992317][ T10] xr_serial 1-1:127.171: device disconnected [ 318.035428][T15217] veth3: entered allmulticast mode [ 318.151103][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 318.157738][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.170331][T15224] netlink: 'syz.3.4050': attribute type 21 has an invalid length. [ 318.184051][T15224] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4050'. [ 318.186326][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.195270][T15224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4050'. [ 318.205070][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.220412][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.235899][ T9] usb 5-1: Product: syz [ 318.244449][ T9] usb 5-1: Manufacturer: syz [ 318.255106][ T9] usb 5-1: SerialNumber: syz [ 318.609125][ T10] libceph: connect (1)[c::]:6789 error -101 [ 318.619827][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 318.641663][ T10] libceph: connect (1)[c::]:6789 error -101 [ 318.649159][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 318.677135][ T9] usb 5-1: 0:2 : does not exist [ 318.690852][ T9] usb 5-1: USB disconnect, device number 46 [ 318.913416][ T9] libceph: connect (1)[c::]:6789 error -101 [ 318.931555][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 319.393800][T15245] ceph: No mds server is up or the cluster is laggy [ 319.626627][T15303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.721070][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 319.735670][ T30] audit: type=1326 audit(1756494041.258:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15310 comm="syz.3.4086" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41ff98ebe9 code=0x0 [ 319.882578][ T9] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 319.935223][ T30] audit: type=1400 audit(1756494041.458:837): avc: denied { append } for pid=15315 comm="syz.0.4088" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 319.958692][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.043539][ T9] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 320.055562][ T9] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 320.074179][ T9] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 320.084280][ T9] usb 5-1: Product: syz [ 320.088501][ T9] usb 5-1: SerialNumber: syz [ 320.098928][ T9] usb 5-1: bad CDC descriptors [ 320.106790][ T9] option 5-1:7.0: GSM modem (1-port) converter detected [ 320.306243][T15327] input: syz0 as /devices/virtual/input/input60 [ 320.314339][ T9] usb 5-1: USB disconnect, device number 47 [ 320.323307][ T9] option 5-1:7.0: device disconnected [ 320.606273][ T30] audit: type=1400 audit(1756494042.128:838): avc: denied { read } for pid=15339 comm="syz.3.4098" lport=44654 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 320.656846][ T30] audit: type=1400 audit(1756494042.178:839): avc: denied { setopt } for pid=15339 comm="syz.3.4098" lport=44654 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 320.941062][ T93] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 321.104367][ T93] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.130326][ T93] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.142652][ T93] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 321.156489][ T93] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.165790][ T93] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.183246][ T93] usb 4-1: config 0 descriptor?? [ 321.300765][T15368] binder: 15367:15368 ioctl c0306201 2000000003c0 returned -14 [ 321.623647][ T93] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 321.969481][T15383] overlay: filesystem on ./bus not supported [ 322.001294][ T30] audit: type=1400 audit(1756494043.488:840): avc: denied { mounton } for pid=15382 comm="syz.1.4117" path="/854/file1/bus" dev="autofs" ino=58669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 322.445808][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 322.508789][T15400] vivid-000: disconnect [ 322.591298][ T5973] vivid-000: reconnect [ 323.068980][T15370] kexec: Could not allocate control_code_buffer [ 323.736973][ T5973] usb 4-1: USB disconnect, device number 49 [ 323.785689][T15433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.626706][ T30] audit: type=1400 audit(1756494046.148:841): avc: denied { create } for pid=15448 comm="syz.1.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 324.654235][ T30] audit: type=1400 audit(1756494046.168:842): avc: denied { listen } for pid=15448 comm="syz.1.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 324.704129][ T30] audit: type=1400 audit(1756494046.178:843): avc: denied { accept } for pid=15448 comm="syz.1.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 324.844049][T15460] netlink: 'syz.4.4151': attribute type 1 has an invalid length. [ 324.922154][T15460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.977267][T15467] bond1: (slave ip6erspan0): making interface the new active one [ 325.007936][T15467] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 325.443465][T15479] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3158390087 (12633560348 ns) > initial count (8550536452 ns). Using initial count to start timer. [ 325.479334][T15479] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=973695338 (124633003264 ns) > initial count (92511176448 ns). Using initial count to start timer. [ 325.606461][T15485] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.4169'. [ 326.624194][T15532] netlink: 'syz.0.4176': attribute type 13 has an invalid length. [ 326.651253][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4176'. [ 326.660240][T15532] netlink: 'syz.0.4176': attribute type 13 has an invalid length. [ 326.693400][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4176'. [ 326.979355][T15550] bridge: RTM_NEWNEIGH with invalid ether address [ 327.123480][T15558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.656349][ T3518] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.708859][ T3518] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.784975][ T3518] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.836479][ T3518] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.985810][ T3518] bridge_slave_1: left allmulticast mode [ 328.001146][ T3518] bridge_slave_1: left promiscuous mode [ 328.010135][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.031713][ T3518] bridge_slave_0: left allmulticast mode [ 328.042826][ T3518] bridge_slave_0: left promiscuous mode [ 328.058798][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.175620][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.185437][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.193732][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.210725][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.218559][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.244507][T15600] netlink: 'syz.6.4208': attribute type 4 has an invalid length. [ 328.296240][T15602] netlink: 'syz.6.4208': attribute type 4 has an invalid length. [ 328.559602][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.578512][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.588929][ T3518] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 328.597518][ T3518] bond0 (unregistering): Released all slaves [ 328.615768][ T3518] bond1 (unregistering): Released all slaves [ 328.751204][ T3518] tipc: Disabling bearer [ 328.767070][ T3518] tipc: Left network mode [ 329.266117][ T5860] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 329.503097][ T5973] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 329.711050][ T5973] usb 5-1: Using ep0 maxpacket: 16 [ 329.717534][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.728791][ T5973] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 329.769029][T15594] chnl_net:caif_netlink_parms(): no params data found [ 329.793590][ T5973] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 329.814842][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.824874][ T5973] usb 5-1: config 0 descriptor?? [ 329.918979][ T3518] hsr_slave_0: left promiscuous mode [ 329.946222][ T3518] hsr_slave_1: left promiscuous mode [ 329.973331][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.068734][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.076384][T15643] netlink: 'syz.6.4221': attribute type 10 has an invalid length. [ 330.192885][ T5973] usbhid 5-1:0.0: can't add hid device: -71 [ 330.198882][ T5973] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 330.214209][ T5973] usb 5-1: USB disconnect, device number 48 [ 330.311079][ T5860] Bluetooth: hci0: command tx timeout [ 331.153719][ T30] audit: type=1326 audit(1756494052.678:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15647 comm="syz.3.4223" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41ff98ebe9 code=0x0 [ 331.353092][T15653] [ 331.355444][T15653] ===================================================== [ 331.362357][T15653] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 331.369804][T15653] syzkaller #0 Not tainted [ 331.374193][T15653] ----------------------------------------------------- [ 331.381094][T15653] syz.4.4225/15653 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 331.388786][T15653] ffff888074834750 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 331.397466][T15653] [ 331.397466][T15653] and this task is already holding: [ 331.404803][T15653] ffff888074114028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 331.414611][T15653] which would create a new lock dependency: [ 331.420470][T15653] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 331.428540][T15653] [ 331.428540][T15653] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 331.437965][T15653] (&client->buffer_lock){..-.}-{3:3} [ 331.437984][T15653] [ 331.437984][T15653] ... which became SOFTIRQ-irq-safe at: [ 331.451016][T15653] lock_acquire+0x179/0x350 [ 331.455604][T15653] _raw_spin_lock+0x2e/0x40 [ 331.460181][T15653] evdev_pass_values+0x10e/0x9b0 [ 331.465186][T15653] evdev_events+0x1bb/0x390 [ 331.469756][T15653] input_pass_values+0x74b/0x880 [ 331.474759][T15653] input_handle_event+0xb29/0x14d0 [ 331.479940][T15653] input_inject_event+0x1e8/0x3b0 [ 331.485033][T15653] kd_sound_helper+0x20f/0x280 [ 331.489866][T15653] input_handler_for_each_handle+0xd4/0x250 [ 331.495828][T15653] call_timer_fn+0x197/0x620 [ 331.500489][T15653] __run_timers+0x6ef/0x960 [ 331.505060][T15653] run_timer_base+0x114/0x190 [ 331.509805][T15653] run_timer_softirq+0x1a/0x40 [ 331.514654][T15653] handle_softirqs+0x216/0x8e0 [ 331.519483][T15653] __irq_exit_rcu+0x109/0x170 [ 331.524226][T15653] irq_exit_rcu+0x9/0x30 [ 331.528533][T15653] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 331.534230][T15653] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 331.540284][T15653] lock_acquire+0x62/0x350 [ 331.544786][T15653] unwind_next_frame+0xd1/0x20a0 [ 331.549796][T15653] arch_stack_walk+0x94/0x100 [ 331.554559][T15653] stack_trace_save+0x8e/0xc0 [ 331.559326][T15653] kasan_save_stack+0x33/0x60 [ 331.564074][T15653] kasan_save_track+0x14/0x30 [ 331.568819][T15653] __kasan_slab_alloc+0x89/0x90 [ 331.573738][T15653] kmem_cache_alloc_lru_noprof+0x1d0/0x3b0 [ 331.579622][T15653] sock_alloc_inode+0x25/0x1c0 [ 331.584462][T15653] alloc_inode+0x64/0x240 [ 331.588863][T15653] sock_alloc+0x40/0x280 [ 331.593171][T15653] __sock_create+0xc1/0x8d0 [ 331.597742][T15653] __sys_socket+0x14d/0x260 [ 331.602320][T15653] __x64_sys_socket+0x72/0xb0 [ 331.607075][T15653] do_syscall_64+0xcd/0x4c0 [ 331.611663][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.617626][T15653] [ 331.617626][T15653] to a SOFTIRQ-irq-unsafe lock: [ 331.624620][T15653] (tasklist_lock){.+.+}-{3:3} [ 331.624642][T15653] [ 331.624642][T15653] ... which became SOFTIRQ-irq-unsafe at: [ 331.637227][T15653] ... [ 331.637233][T15653] lock_acquire+0x179/0x350 [ 331.644364][T15653] _raw_read_lock+0x5f/0x70 [ 331.648939][T15653] __do_wait+0x105/0x890 [ 331.653255][T15653] do_wait+0x21e/0x5a0 [ 331.657393][T15653] kernel_wait+0x9f/0x160 [ 331.661789][T15653] call_usermodehelper_exec_work+0xf1/0x170 [ 331.667750][T15653] process_one_work+0x9cf/0x1b70 [ 331.672752][T15653] worker_thread+0x6c8/0xf10 [ 331.677409][T15653] kthread+0x3c5/0x780 [ 331.681543][T15653] ret_from_fork+0x5d7/0x6f0 [ 331.686194][T15653] ret_from_fork_asm+0x1a/0x30 [ 331.691022][T15653] [ 331.691022][T15653] other info that might help us debug this: [ 331.691022][T15653] [ 331.701226][T15653] Chain exists of: [ 331.701226][T15653] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 331.701226][T15653] [ 331.714322][T15653] Possible interrupt unsafe locking scenario: [ 331.714322][T15653] [ 331.722612][T15653] CPU0 CPU1 [ 331.727948][T15653] ---- ---- [ 331.733284][T15653] lock(tasklist_lock); [ 331.737504][T15653] local_irq_disable(); [ 331.744231][T15653] lock(&client->buffer_lock); [ 331.751575][T15653] lock(&new->fa_lock); [ 331.758311][T15653] [ 331.761739][T15653] lock(&client->buffer_lock); [ 331.766739][T15653] [ 331.766739][T15653] *** DEADLOCK *** [ 331.766739][T15653] [ 331.774852][T15653] 7 locks held by syz.4.4225/15653: [ 331.780019][T15653] #0: ffff88802aff6118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 331.789135][T15653] #1: ffff88801fb33230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 331.799213][T15653] #2: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 331.808871][T15653] #3: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 331.818423][T15653] #4: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 331.827537][T15653] #5: ffff888074114028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 331.837779][T15653] #6: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 331.846810][T15653] [ 331.846810][T15653] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 331.857189][T15653] -> (&client->buffer_lock){..-.}-{3:3} { [ 331.862896][T15653] IN-SOFTIRQ-W at: [ 331.866851][T15653] lock_acquire+0x179/0x350 [ 331.872989][T15653] _raw_spin_lock+0x2e/0x40 [ 331.879126][T15653] evdev_pass_values+0x10e/0x9b0 [ 331.885693][T15653] evdev_events+0x1bb/0x390 [ 331.891829][T15653] input_pass_values+0x74b/0x880 [ 331.898404][T15653] input_handle_event+0xb29/0x14d0 [ 331.905146][T15653] input_inject_event+0x1e8/0x3b0 [ 331.911803][T15653] kd_sound_helper+0x20f/0x280 [ 331.918203][T15653] input_handler_for_each_handle+0xd4/0x250 [ 331.925726][T15653] call_timer_fn+0x197/0x620 [ 331.931951][T15653] __run_timers+0x6ef/0x960 [ 331.938085][T15653] run_timer_base+0x114/0x190 [ 331.944399][T15653] run_timer_softirq+0x1a/0x40 [ 331.950796][T15653] handle_softirqs+0x216/0x8e0 [ 331.957189][T15653] __irq_exit_rcu+0x109/0x170 [ 331.963496][T15653] irq_exit_rcu+0x9/0x30 [ 331.969368][T15653] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 331.976636][T15653] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 331.984257][T15653] lock_acquire+0x62/0x350 [ 331.990313][T15653] unwind_next_frame+0xd1/0x20a0 [ 331.996883][T15653] arch_stack_walk+0x94/0x100 [ 332.003192][T15653] stack_trace_save+0x8e/0xc0 [ 332.009504][T15653] kasan_save_stack+0x33/0x60 [ 332.015809][T15653] kasan_save_track+0x14/0x30 [ 332.022117][T15653] __kasan_slab_alloc+0x89/0x90 [ 332.028599][T15653] kmem_cache_alloc_lru_noprof+0x1d0/0x3b0 [ 332.036033][T15653] sock_alloc_inode+0x25/0x1c0 [ 332.042428][T15653] alloc_inode+0x64/0x240 [ 332.048392][T15653] sock_alloc+0x40/0x280 [ 332.054265][T15653] __sock_create+0xc1/0x8d0 [ 332.060407][T15653] __sys_socket+0x14d/0x260 [ 332.066570][T15653] __x64_sys_socket+0x72/0xb0 [ 332.072881][T15653] do_syscall_64+0xcd/0x4c0 [ 332.079013][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.086532][T15653] INITIAL USE at: [ 332.090400][T15653] lock_acquire+0x179/0x350 [ 332.096448][T15653] _raw_spin_lock_irqsave+0x3a/0x60 [ 332.103189][T15653] evdev_do_ioctl+0x347/0x1b30 [ 332.109498][T15653] evdev_ioctl+0x16f/0x1a0 [ 332.115459][T15653] __x64_sys_ioctl+0x18b/0x210 [ 332.121769][T15653] do_syscall_64+0xcd/0x4c0 [ 332.127900][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.135331][T15653] } [ 332.137805][T15653] ... key at: [] __key.1+0x0/0x40 [ 332.144897][T15653] [ 332.144897][T15653] the dependencies between the lock to be acquired [ 332.144903][T15653] and SOFTIRQ-irq-unsafe lock: [ 332.158361][T15653] -> (tasklist_lock){.+.+}-{3:3} { [ 332.163637][T15653] HARDIRQ-ON-R at: [ 332.167766][T15653] lock_acquire+0x179/0x350 [ 332.174251][T15653] _raw_read_lock+0x5f/0x70 [ 332.180726][T15653] __do_wait+0x105/0x890 [ 332.186951][T15653] do_wait+0x21e/0x5a0 [ 332.193000][T15653] kernel_wait+0x9f/0x160 [ 332.199299][T15653] call_usermodehelper_exec_work+0xf1/0x170 [ 332.207170][T15653] process_one_work+0x9cf/0x1b70 [ 332.214102][T15653] worker_thread+0x6c8/0xf10 [ 332.220673][T15653] kthread+0x3c5/0x780 [ 332.226716][T15653] ret_from_fork+0x5d7/0x6f0 [ 332.233277][T15653] ret_from_fork_asm+0x1a/0x30 [ 332.240018][T15653] SOFTIRQ-ON-R at: [ 332.244145][T15653] lock_acquire+0x179/0x350 [ 332.250629][T15653] _raw_read_lock+0x5f/0x70 [ 332.257103][T15653] __do_wait+0x105/0x890 [ 332.263327][T15653] do_wait+0x21e/0x5a0 [ 332.269377][T15653] kernel_wait+0x9f/0x160 [ 332.275676][T15653] call_usermodehelper_exec_work+0xf1/0x170 [ 332.283546][T15653] process_one_work+0x9cf/0x1b70 [ 332.290459][T15653] worker_thread+0x6c8/0xf10 [ 332.297023][T15653] kthread+0x3c5/0x780 [ 332.303065][T15653] ret_from_fork+0x5d7/0x6f0 [ 332.309627][T15653] ret_from_fork_asm+0x1a/0x30 [ 332.316366][T15653] INITIAL USE at: [ 332.320407][T15653] lock_acquire+0x179/0x350 [ 332.326802][T15653] _raw_write_lock_irq+0x36/0x50 [ 332.333623][T15653] copy_process+0x4caf/0x7690 [ 332.340190][T15653] kernel_clone+0xfc/0x930 [ 332.346496][T15653] user_mode_thread+0xc7/0x110 [ 332.353151][T15653] rest_init+0x23/0x2b0 [ 332.359199][T15653] start_kernel+0x3ee/0x4d0 [ 332.365590][T15653] x86_64_start_reservations+0x18/0x30 [ 332.372935][T15653] x86_64_start_kernel+0x130/0x190 [ 332.379930][T15653] common_startup_64+0x13e/0x148 [ 332.386755][T15653] INITIAL READ USE at: [ 332.391232][T15653] lock_acquire+0x179/0x350 [ 332.398076][T15653] _raw_read_lock+0x5f/0x70 [ 332.404896][T15653] __do_wait+0x105/0x890 [ 332.411470][T15653] do_wait+0x21e/0x5a0 [ 332.417863][T15653] kernel_wait+0x9f/0x160 [ 332.424512][T15653] call_usermodehelper_exec_work+0xf1/0x170 [ 332.432729][T15653] process_one_work+0x9cf/0x1b70 [ 332.439986][T15653] worker_thread+0x6c8/0xf10 [ 332.446897][T15653] kthread+0x3c5/0x780 [ 332.453285][T15653] ret_from_fork+0x5d7/0x6f0 [ 332.460192][T15653] ret_from_fork_asm+0x1a/0x30 [ 332.467279][T15653] } [ 332.469926][T15653] ... key at: [] tasklist_lock+0x18/0x40 [ 332.477801][T15653] ... acquired at: [ 332.481760][T15653] _raw_read_lock+0x5f/0x70 [ 332.486414][T15653] send_sigio+0xb8/0x3e0 [ 332.490813][T15653] dnotify_handle_event+0x15e/0x2b0 [ 332.496164][T15653] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 332.502730][T15653] fsnotify+0x13d6/0x1dc0 [ 332.507210][T15653] vfs_mkdir+0x71d/0x8c0 [ 332.511601][T15653] do_mkdirat+0x304/0x3e0 [ 332.516080][T15653] __x64_sys_mkdirat+0x83/0xb0 [ 332.520994][T15653] do_syscall_64+0xcd/0x4c0 [ 332.525650][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.531693][T15653] [ 332.533994][T15653] -> (&f_owner->lock){....}-{3:3} { [ 332.539278][T15653] INITIAL USE at: [ 332.543234][T15653] lock_acquire+0x179/0x350 [ 332.549464][T15653] _raw_write_lock_irq+0x36/0x50 [ 332.556112][T15653] __f_setown+0x61/0x3c0 [ 332.562070][T15653] fcntl_dirnotify+0x7b1/0xb60 [ 332.568551][T15653] do_fcntl+0xe62/0x15a0 [ 332.574509][T15653] __x64_sys_fcntl+0x163/0x200 [ 332.581003][T15653] do_syscall_64+0xcd/0x4c0 [ 332.587222][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.594829][T15653] INITIAL READ USE at: [ 332.599217][T15653] lock_acquire+0x179/0x350 [ 332.605883][T15653] _raw_read_lock_irqsave+0x74/0x90 [ 332.613238][T15653] send_sigio+0x31/0x3e0 [ 332.619632][T15653] dnotify_handle_event+0x15e/0x2b0 [ 332.626979][T15653] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 332.635552][T15653] fsnotify+0x13d6/0x1dc0 [ 332.642029][T15653] path_openat+0x1b50/0x2cb0 [ 332.648767][T15653] do_filp_open+0x20b/0x470 [ 332.655431][T15653] do_sys_openat2+0x11b/0x1d0 [ 332.662263][T15653] __x64_sys_open+0x153/0x1e0 [ 332.669091][T15653] do_syscall_64+0xcd/0x4c0 [ 332.675744][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.683782][T15653] } [ 332.686346][T15653] ... key at: [] __key.1+0x0/0x40 [ 332.693532][T15653] ... acquired at: [ 332.697395][T15653] _raw_read_lock_irqsave+0x74/0x90 [ 332.702742][T15653] send_sigio+0x31/0x3e0 [ 332.707139][T15653] kill_fasync+0x214/0x510 [ 332.711709][T15653] lease_break_callback+0x23/0x30 [ 332.716889][T15653] __break_lease+0x674/0x1810 [ 332.721724][T15653] do_dentry_open+0x91f/0x1530 [ 332.726641][T15653] vfs_open+0x82/0x3f0 [ 332.730862][T15653] path_openat+0x1de4/0x2cb0 [ 332.735603][T15653] do_filp_open+0x20b/0x470 [ 332.740254][T15653] do_sys_openat2+0x11b/0x1d0 [ 332.745083][T15653] __x64_sys_open+0x153/0x1e0 [ 332.749914][T15653] do_syscall_64+0xcd/0x4c0 [ 332.754576][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.760629][T15653] [ 332.762933][T15653] -> (&new->fa_lock){....}-{3:3} { [ 332.768036][T15653] INITIAL USE at: [ 332.771908][T15653] lock_acquire+0x179/0x350 [ 332.778050][T15653] _raw_write_lock_irq+0x36/0x50 [ 332.784535][T15653] fasync_remove_entry+0xb2/0x1e0 [ 332.791115][T15653] fasync_helper+0xaf/0xd0 [ 332.797081][T15653] sock_fasync+0x92/0x140 [ 332.802955][T15653] __fput+0x968/0xb70 [ 332.808484][T15653] task_work_run+0x14d/0x240 [ 332.814617][T15653] exit_to_user_mode_loop+0xeb/0x110 [ 332.821446][T15653] do_syscall_64+0x3f6/0x4c0 [ 332.827585][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.835022][T15653] INITIAL READ USE at: [ 332.839324][T15653] lock_acquire+0x179/0x350 [ 332.845805][T15653] _raw_read_lock_irqsave+0x74/0x90 [ 332.852976][T15653] kill_fasync+0x138/0x510 [ 332.859369][T15653] sock_wake_async+0x132/0x160 [ 332.866115][T15653] mptcp_close_wake_up+0x2eb/0x600 [ 332.873209][T15653] __mptcp_close_ssk+0xd54/0x14d0 [ 332.880213][T15653] mptcp_destroy_common+0x65a/0xaf0 [ 332.887394][T15653] mptcp_disconnect+0x228/0x870 [ 332.894227][T15653] inet_shutdown+0x26c/0x440 [ 332.900805][T15653] __sys_shutdown+0x113/0x1b0 [ 332.907457][T15653] __x64_sys_shutdown+0x53/0x80 [ 332.914282][T15653] do_syscall_64+0xcd/0x4c0 [ 332.920763][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.928632][T15653] } [ 332.931105][T15653] ... key at: [] __key.0+0x0/0x40 [ 332.938194][T15653] ... acquired at: [ 332.941968][T15653] lock_acquire+0x179/0x350 [ 332.946632][T15653] _raw_read_lock_irqsave+0x74/0x90 [ 332.951983][T15653] kill_fasync+0x138/0x510 [ 332.956557][T15653] evdev_pass_values+0x619/0x9b0 [ 332.961647][T15653] evdev_events+0x1bb/0x390 [ 332.966312][T15653] input_pass_values+0x74b/0x880 [ 332.971405][T15653] input_handle_event+0xf00/0x14d0 [ 332.976688][T15653] input_inject_event+0x1e8/0x3b0 [ 332.981867][T15653] evdev_write+0x457/0x750 [ 332.986439][T15653] vfs_write+0x29d/0x11d0 [ 332.990918][T15653] ksys_write+0x1f8/0x250 [ 332.995396][T15653] do_syscall_64+0xcd/0x4c0 [ 333.000050][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.006093][T15653] [ 333.008390][T15653] [ 333.008390][T15653] stack backtrace: [ 333.014251][T15653] CPU: 0 UID: 0 PID: 15653 Comm: syz.4.4225 Not tainted syzkaller #0 PREEMPT(full) [ 333.014269][T15653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.014278][T15653] Call Trace: [ 333.014283][T15653] [ 333.014288][T15653] dump_stack_lvl+0x116/0x1f0 [ 333.014305][T15653] check_irq_usage+0x7dc/0x920 [ 333.014329][T15653] ? check_path.constprop.0+0x24/0x50 [ 333.014350][T15653] ? __lock_acquire+0x12bc/0x1ce0 [ 333.014370][T15653] __lock_acquire+0x12bc/0x1ce0 [ 333.014394][T15653] lock_acquire+0x179/0x350 [ 333.014414][T15653] ? kill_fasync+0x138/0x510 [ 333.014435][T15653] _raw_read_lock_irqsave+0x74/0x90 [ 333.014449][T15653] ? kill_fasync+0x138/0x510 [ 333.014467][T15653] kill_fasync+0x138/0x510 [ 333.014487][T15653] evdev_pass_values+0x619/0x9b0 [ 333.014508][T15653] evdev_events+0x1bb/0x390 [ 333.014527][T15653] input_pass_values+0x74b/0x880 [ 333.014547][T15653] input_handle_event+0xf00/0x14d0 [ 333.014565][T15653] ? _copy_from_user+0x59/0xd0 [ 333.014585][T15653] input_inject_event+0x1e8/0x3b0 [ 333.014605][T15653] evdev_write+0x457/0x750 [ 333.014625][T15653] ? __pfx_evdev_write+0x10/0x10 [ 333.014645][T15653] ? bpf_lsm_file_permission+0x9/0x10 [ 333.014663][T15653] ? security_file_permission+0x71/0x210 [ 333.014685][T15653] ? rw_verify_area+0xcf/0x6c0 [ 333.014705][T15653] ? __pfx_evdev_write+0x10/0x10 [ 333.014724][T15653] vfs_write+0x29d/0x11d0 [ 333.014739][T15653] ? __pfx_vfs_write+0x10/0x10 [ 333.014756][T15653] ? find_held_lock+0x2b/0x80 [ 333.014772][T15653] ? __fget_files+0x204/0x3c0 [ 333.014788][T15653] ? __fget_files+0x20e/0x3c0 [ 333.014804][T15653] ksys_write+0x1f8/0x250 [ 333.014818][T15653] ? __pfx_ksys_write+0x10/0x10 [ 333.014834][T15653] do_syscall_64+0xcd/0x4c0 [ 333.014850][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.014863][T15653] RIP: 0033:0x7f4a3a78ebe9 [ 333.014874][T15653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.014888][T15653] RSP: 002b:00007f4a389ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 333.014902][T15653] RAX: ffffffffffffffda RBX: 00007f4a3a9b5fa0 RCX: 00007f4a3a78ebe9 [ 333.014911][T15653] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 333.014920][T15653] RBP: 00007f4a3a811e19 R08: 0000000000000000 R09: 0000000000000000 [ 333.014928][T15653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.014936][T15653] R13: 00007f4a3a9b6038 R14: 00007f4a3a9b5fa0 R15: 00007ffd221415d8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 333.014949][T15653] [ 333.333924][ T5860] Bluetooth: hci0: command tx timeout [ 333.409778][T10740] PM: hibernation: Basic memory bitmaps freed [ 333.880850][T15594] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 333.890930][T15643] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.908963][T15643] bond0: (slave team0): Enslaving as an active interface with an up link [ 334.284236][ T3518] IPVS: stop unused estimator thread 0... [ 334.346885][ T3518] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.357057][ T3518] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.403880][ T3518] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.413677][ T3518] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.453273][ T3518] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.463301][ T3518] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.513501][ T3518] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.523302][ T3518] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.594611][ T3518] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.605161][ T3518] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.643303][ T3518] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.653585][ T3518] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.693759][ T3518] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.704039][ T3518] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.763718][ T3518] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.773976][ T3518] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.834684][ T3518] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.873320][ T3518] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.924200][ T3518] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.973682][ T3518] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.034394][ T3518] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.044219][ T3518] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 335.092266][ T3518] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.102144][ T3518] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 335.162736][ T3518] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.172498][ T3518] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 335.232758][ T3518] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.242603][ T3518] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 335.292353][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.300028][ T3518] bridge_slave_0: left allmulticast mode [ 335.305888][ T3518] bridge_slave_0: left promiscuous mode [ 335.311498][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.319515][ T3518] bridge_slave_1: left allmulticast mode [ 335.325929][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.333822][ T3518] bridge_slave_0: left allmulticast mode [ 335.339439][ T3518] bridge_slave_0: left promiscuous mode [ 335.345081][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.353789][ T3518] bridge_slave_1: left allmulticast mode [ 335.359403][ T3518] bridge_slave_1: left promiscuous mode [ 335.365277][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.373138][ T3518] bridge_slave_0: left allmulticast mode [ 335.378749][ T3518] bridge_slave_0: left promiscuous mode [ 335.384551][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.396111][ T3518] bond_slave_0: left promiscuous mode [ 335.494635][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.504487][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.513856][ T3518] bond0 (unregistering): (slave team0): Releasing backup interface [ 335.522669][ T3518] bond0 (unregistering): Released all slaves [ 335.543538][ T3518] erspan0 (unregistering): left promiscuous mode [ 335.551272][ T3518] gretap0 (unregistering): left promiscuous mode [ 335.652251][ T3518] bond1 (unregistering): Released all slaves [ 335.704108][ T3518] bond0 (unregistering): Released all slaves [ 335.892439][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.901278][ T3518] bond_slave_0: left allmulticast mode [ 335.907089][ T3518] bond0 (unregistering): Released all slaves [ 335.925066][ T3518] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 336.118578][ T3518] bond0 (unregistering): Released all slaves [ 336.183965][ T3518] bond1 (unregistering): Released all slaves [ 336.729899][ T3518] hsr_slave_0: left promiscuous mode [ 336.735443][ T3518] hsr_slave_1: left promiscuous mode [ 336.740887][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.748564][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.755932][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.763414][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.770789][ T3518] batadv_slave_1: left promiscuous mode [ 336.777998][ T3518] hsr_slave_0: left promiscuous mode [ 336.784119][ T3518] hsr_slave_1: left promiscuous mode [ 336.789625][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.796989][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.804456][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.811854][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.820505][ T3518] hsr_slave_0: left promiscuous mode [ 336.826261][ T3518] hsr_slave_1: left promiscuous mode [ 336.831875][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.839219][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.846822][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.854270][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.863454][ T3518] hsr_slave_0: left promiscuous mode [ 336.868932][ T3518] hsr_slave_1: left promiscuous mode [ 336.878617][ T3518] veth1_macvtap: left promiscuous mode [ 336.884167][ T3518] veth0_macvtap: left promiscuous mode [ 336.889647][ T3518] veth1_vlan: left promiscuous mode [ 336.894930][ T3518] veth0_vlan: left promiscuous mode [ 336.900512][ T3518] veth1_macvtap: left promiscuous mode [ 336.906033][ T3518] veth1_vlan: left promiscuous mode [ 336.911884][ T3518] veth0_vlan: left promiscuous mode [ 336.917454][ T3518] veth1_macvtap: left promiscuous mode [ 336.922963][ T3518] veth0_macvtap: left promiscuous mode [ 336.928441][ T3518] veth1_vlan: left promiscuous mode [ 336.933737][ T3518] veth0_vlan: left promiscuous mode [ 337.057721][ T3518] team0 (unregistering): Port device team_slave_1 removed [ 337.075104][ T3518] team0 (unregistering): Port device team_slave_0 removed [ 337.198976][ T3518] team0 (unregistering): Port device team_slave_1 removed [ 337.215788][ T3518] team0 (unregistering): Port device team_slave_0 removed [ 337.403694][ T3518] team0 (unregistering): Port device team_slave_1 removed [ 337.423565][ T3518] team0 (unregistering): Port device team_slave_0 removed [ 338.899440][ T3518] IPVS: stop unused estimator thread 0... [ 338.905685][ T3518] IPVS: stop unused estimator thread 0... [ 338.912399][ T3518] IPVS: stop unused estimator thread 0...