last executing test programs: 25.172067901s ago: executing program 2 (id=2156): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 24.973017464s ago: executing program 2 (id=2158): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) fcntl$notify(r0, 0x402, 0x80000013) r1 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x40) fcntl$notify(r1, 0x402, 0x8000003d) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r2, 0x402, 0x8000003d) 24.865391169s ago: executing program 2 (id=2159): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xfff1}, {0x1}}}, 0x24}}, 0x0) 24.486374944s ago: executing program 2 (id=2162): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 24.367411797s ago: executing program 2 (id=2163): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r0, 0x0, 0x51}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 23.880459868s ago: executing program 2 (id=2168): personality(0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x8008af83, &(0x7f0000000000)={0x1, r0}) 23.439321789s ago: executing program 32 (id=2168): personality(0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x8008af83, &(0x7f0000000000)={0x1, r0}) 1.925302908s ago: executing program 5 (id=2432): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0xfffffffd, 0x1, 0xfffffffffffffff9, 0x3ffffffff, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffe, 0x2}) 1.680175866s ago: executing program 0 (id=2439): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000007c0)="92bf9971b5f9753ab708948b023168fd", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x1}], 0x1, 0xc812) recvmsg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001880)=""/4122, 0x101a}], 0x1}, 0x2000) 1.50997952s ago: executing program 4 (id=2443): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1.27228293s ago: executing program 5 (id=2445): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.150850384s ago: executing program 5 (id=2447): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xc020) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.031062865s ago: executing program 5 (id=2449): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x2) lseek(r2, 0x3, 0x1) 916.547755ms ago: executing program 5 (id=2451): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000300, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0x0, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 757.661495ms ago: executing program 0 (id=2453): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 691.802645ms ago: executing program 3 (id=2455): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x1) 603.745213ms ago: executing program 0 (id=2456): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 597.875805ms ago: executing program 4 (id=2458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg2\x00', 0x0}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="2400030000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fcffffff0100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r2], 0x40}}, 0x0) 539.694313ms ago: executing program 3 (id=2459): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000180), 0x1, r1, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x2, r3, r1}) 538.927915ms ago: executing program 4 (id=2460): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 493.828238ms ago: executing program 3 (id=2461): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x8602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000240)={0x0, 0x0}) 465.39726ms ago: executing program 0 (id=2463): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x82401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000680)="3e263666460f7fe8470f2108b9800000c00f3235002000000f3066b8b5008ec0430fc72d5d35171e6466410f6bdcc462b99e64e14f65f3410f100666430fe6c53664f346a5", 0x45}], 0x1, 0x22, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 413.725164ms ago: executing program 4 (id=2464): syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa000, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0xb83, 0x7, 0x5, 0x0, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xed2d, 0x4, 0x0, 0x5, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x1, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x8, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0xfffffff7, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 366.688946ms ago: executing program 1 (id=2465): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x80}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 366.538141ms ago: executing program 3 (id=2466): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r1 = accept(r0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[], 0x64}}, 0x80) recvmmsg$unix(r1, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/17, 0x11}, {&(0x7f00000004c0)=""/207, 0xcf}], 0x2}}], 0x1, 0x20c0, 0x0) 318.305607ms ago: executing program 4 (id=2467): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000003c0)={@local}, &(0x7f0000000400)=0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5e, 0x0, 0x0, 0x8, 0xffffffffffffff75, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 303.714994ms ago: executing program 1 (id=2468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='.\x00\x00\x00', 0x4}], 0x1}, 0x0) 275.902188ms ago: executing program 3 (id=2469): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0x0, 0xf0, 0x40, 0xfd, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x6}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0xfc, 0x1}, {0x100000, 0x0, 0x3, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6e, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeef0000, 0x5}, {0xdddd1000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x9, 0x0, 0xeeef0000, [0xffffffffffffff47, 0x401, 0x7, 0x10800000000000c5]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x4000, 0x0, 0x49, 0x1, 0x7, 0x4, 0xe, 0x0, 0x0, 0x8, 0x2}, {0xf000, 0xdddd0000, 0x0, 0x5, 0xbb, 0x5, 0x38, 0x8, 0x5, 0xfd, 0xd9, 0x2}, {0xeeef0000, 0x10000, 0xd, 0xe4, 0x3, 0xd, 0x6, 0x9, 0x0, 0x5, 0x0, 0xa}, {0x0, 0x8000000, 0xc, 0x9, 0x4, 0xcb, 0x5, 0x9, 0x40, 0x9, 0x1, 0x5}, {0xffff1000, 0x2000, 0xb, 0x7, 0xe, 0x2, 0x7, 0x8f, 0x1, 0xd, 0x5, 0x1}, {0x80a0001, 0x80a0000, 0xc, 0x5, 0x61, 0x18, 0x7, 0xfc, 0xc, 0x9, 0x6, 0x4}, {0x3000, 0xeeee0000, 0x1b, 0xff, 0xbc, 0x80, 0x1, 0x4, 0x5, 0x0, 0xbf, 0x9}, {0x8000000, 0x2000, 0xf, 0x3, 0x4, 0x6, 0x9, 0xfa, 0x7, 0xc6, 0x0, 0x81}, {0xf000, 0x3}, {0x2000, 0x8}, 0x14, 0x0, 0xeeee8000, 0x20, 0x0, 0x4801, 0x33339800, [0x6, 0x1ff, 0x86d, 0x8001]}) 190.655895ms ago: executing program 4 (id=2470): syz_open_dev$usbfs(0x0, 0x77, 0x101301) r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000380)={&(0x7f0000000100)=[{0x2, 0x4000, 0x0, 0x0}], 0x1}) 190.488747ms ago: executing program 1 (id=2471): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r2, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) 155.663169ms ago: executing program 1 (id=2472): gettid() bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) 94.227957ms ago: executing program 0 (id=2473): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x400}, &(0x7f0000000300)=0x8) 34.577333ms ago: executing program 1 (id=2474): sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_tos_u8={{0xffffffffffffff0d, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}], 0x30}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 33.220417ms ago: executing program 3 (id=2475): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000f80)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"ca7692adb4080f7bc6500ec1af0b23d9612a76787c60992c5e9057e7ebce5cc3", r4}) 23.659965ms ago: executing program 0 (id=2476): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 2.195122ms ago: executing program 5 (id=2477): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 0s ago: executing program 1 (id=2478): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000700)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000016c0)=[{{&(0x7f0000000fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001040)="cf6dc169", 0x4}], 0x1, 0x0, 0x0, 0x40000}}, {{&(0x7f0000001340)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x2, 0x800) kernel console output (not intermixed with test programs): [ 144.407038][ T5956] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 144.456930][ T1214] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 144.466738][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 144.472999][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.483354][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.494306][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 144.506450][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 144.516261][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.542212][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 144.551501][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 144.559865][ T5956] cp2112 0003:10C4:EA90.0013: Part Number: 0x00 Device Version: 0x00 [ 144.573139][ T10] usb 1-1: Manufacturer: syz [ 144.580558][ T10] usb 1-1: config 0 descriptor?? [ 144.618173][ T1214] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 144.626393][ T1214] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.638834][ T1214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 144.649773][ T1214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 144.660906][ T1214] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.674080][ T1214] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.683140][ T1214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.692931][ T1214] usb 2-1: config 0 descriptor?? [ 144.698616][ T8622] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 144.848152][ T10] rc_core: IR keymap rc-hauppauge not found [ 144.859039][ T10] Registered IR keymap rc-empty [ 144.864006][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 144.889071][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 144.907810][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 144.924507][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input26 [ 144.944978][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 144.961693][ T5956] cp2112 0003:10C4:EA90.0013: error setting SMBus config [ 144.968958][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 144.982443][ T5956] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -71 [ 144.995385][ T5956] usb 4-1: USB disconnect, device number 15 [ 145.005385][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.036958][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.057969][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.087048][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.106790][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.113051][ T1214] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd [ 145.126877][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.128010][ T1214] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 145.167442][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.189635][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.221571][ T10] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 145.230700][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 145.264209][ T10] usb 1-1: USB disconnect, device number 18 [ 145.316180][ T5847] usb 2-1: USB disconnect, device number 12 [ 145.398773][ T8649] kvm: MWAIT instruction emulated as NOP! [ 145.641311][ T30] audit: type=1400 audit(1756426841.418:1459): avc: denied { bind } for pid=8666 comm="syz.3.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.825328][ T5847] Process accounting resumed [ 145.859566][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 145.882102][ T8683] pim6reg1: entered promiscuous mode [ 145.887559][ T8683] pim6reg1: entered allmulticast mode [ 145.925452][ T8686] syzkaller1: entered promiscuous mode [ 145.933207][ T30] audit: type=1400 audit(1756426841.708:1460): avc: denied { associate } for pid=8688 comm="syz.1.1203" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 145.933320][ T8686] syzkaller1: entered allmulticast mode [ 145.967640][ T30] audit: type=1400 audit(1756426841.738:1461): avc: denied { mounton } for pid=8685 comm="syz.1.1203" path="/proc/558/task" dev="proc" ino=23337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 146.038033][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.049372][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 146.058291][ T10] usb 5-1: config 1 has no interface number 0 [ 146.064445][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.086144][ T10] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 146.095687][ T5956] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 146.108175][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 146.118125][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 146.129647][ T8692] tipc: Started in network mode [ 146.135044][ T8692] tipc: Node identity , cluster identity 4711 [ 146.141511][ T10] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.158575][ T8692] tipc: Failed to obtain node identity [ 146.164120][ T8692] tipc: Enabling of bearer rejected, failed to enable media [ 146.197469][ T30] audit: type=1400 audit(1756426841.948:1462): avc: denied { append } for pid=8693 comm="syz.2.1207" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 146.257127][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.262018][ T30] audit: type=1400 audit(1756426841.948:1463): avc: denied { map } for pid=8693 comm="syz.2.1207" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 146.276998][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.316837][ T5956] usb 1-1: Using ep0 maxpacket: 32 [ 146.322052][ T10] usb 5-1: Product: syz [ 146.326637][ T10] usb 5-1: Manufacturer: syz [ 146.331646][ T10] usb 5-1: SerialNumber: syz [ 146.336480][ T5956] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 146.348972][ T5956] usb 1-1: config 0 has no interface number 0 [ 146.354702][ T30] audit: type=1400 audit(1756426841.948:1464): avc: denied { execute } for pid=8693 comm="syz.2.1207" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 146.355077][ T5956] usb 1-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 146.428224][ T8704] openvswitch: netlink: IPv4 tun info is not correct [ 146.490629][ T5956] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 146.499945][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.507988][ T5956] usb 1-1: Product: syz [ 146.512873][ T5956] usb 1-1: Manufacturer: syz [ 146.517540][ T5956] usb 1-1: SerialNumber: syz [ 146.527839][ T5956] usb 1-1: config 0 descriptor?? [ 146.536264][ T5956] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 146.663814][ T30] audit: type=1400 audit(1756426842.428:1465): avc: denied { write } for pid=8711 comm="syz.3.1214" path="socket:[23399]" dev="sockfs" ino=23399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 147.237745][ T10] cdc_ncm 5-1:1.1: bind() failure [ 147.355981][ T5956] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input28 [ 147.574171][ T5847] usb 5-1: USB disconnect, device number 25 [ 147.648531][ T10] usb 1-1: USB disconnect, device number 19 [ 147.780143][ T8760] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1236'. [ 147.935064][ T8774] netlink: 'syz.1.1241': attribute type 1 has an invalid length. [ 147.944800][ T8774] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1241'. [ 148.055658][ T8786] lo speed is unknown, defaulting to 1000 [ 148.266772][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 148.428453][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.441600][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.461710][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.479373][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.488953][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.499772][ T10] usb 2-1: config 0 descriptor?? [ 148.546784][ T5956] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 148.574459][ T8815] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 148.627484][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 148.698102][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 148.707885][ T5956] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 148.726467][ T8823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.733510][ T5956] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 148.749614][ T5956] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.760289][ T5956] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.774709][ T5956] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.783869][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.802198][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 148.813746][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.828887][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 148.857064][ T9] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 148.873071][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.893514][ T9] usb 4-1: config 0 descriptor?? [ 148.935528][ T10] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 149.054824][ T5956] usb 5-1: GET_CAPABILITIES returned 0 [ 149.063232][ T5956] usbtmc 5-1:16.0: can't read capabilities [ 149.119671][ T1214] usb 4-1: USB disconnect, device number 16 [ 149.170262][ T5956] usb 2-1: USB disconnect, device number 13 [ 149.290223][ T5847] usb 5-1: USB disconnect, device number 26 [ 149.360198][ T8848] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[8848] [ 149.707562][ T8864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.873668][ T8877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1286'. [ 149.936881][ T8877] netlink: 'syz.4.1286': attribute type 7 has an invalid length. [ 149.964255][ T8877] netlink: 'syz.4.1286': attribute type 8 has an invalid length. [ 149.987403][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1286'. [ 150.006868][ T8877] gretap0: entered promiscuous mode [ 150.052117][ T8877] batadv_slave_1: entered promiscuous mode [ 150.060459][ T8877] erspan0: entered promiscuous mode [ 150.079530][ T8887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.184183][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 150.184200][ T30] audit: type=1400 audit(1756426845.958:1485): avc: denied { mounton } for pid=8894 comm="syz.0.1295" path="/258/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 150.225495][ T30] audit: type=1400 audit(1756426845.998:1486): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 150.307013][ T1214] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 150.478408][ T1214] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 150.486894][ T1214] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 150.505120][ T1214] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 150.523182][ T1214] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 150.538849][ T1214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 150.546497][ T8915] netlink: 'syz.0.1304': attribute type 2 has an invalid length. [ 150.554216][ T1214] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 150.574394][ T1214] usb 3-1: string descriptor 0 read error: -22 [ 150.582943][ T1214] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 150.592062][ T1214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.602011][ T1214] usb 3-1: config 0 descriptor?? [ 150.616727][ T30] audit: type=1400 audit(1756426846.388:1487): avc: denied { remount } for pid=8917 comm="syz.0.1305" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 150.636854][ T5905] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 150.653593][ T8885] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.656869][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 150.663236][ T1214] hub 3-1:0.0: bad descriptor, ignoring hub [ 150.686728][ T1214] hub 3-1:0.0: probe with driver hub failed with error -5 [ 150.701887][ T1214] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input30 [ 150.816864][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 150.818092][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57088, setting to 8 [ 150.836285][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 150.836316][ T10] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 150.856729][ T5905] usb 4-1: New USB device found, idVendor=0486, idProduct=0185, bcdDevice= 0.00 [ 150.868050][ T10] usb 5-1: config 0 has no interface number 0 [ 150.873957][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.888719][ T10] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 150.910150][ T10] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 150.918890][ T5905] usb 4-1: config 0 descriptor?? [ 150.921970][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.924657][ T8906] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 150.934574][ T10] usb 5-1: Product: syz [ 150.953515][ T10] usb 5-1: Manufacturer: syz [ 150.965768][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 150.978027][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1312'. [ 150.984998][ T10] usb 5-1: SerialNumber: syz [ 151.001590][ T10] usb 5-1: config 0 descriptor?? [ 151.038141][ T5951] usb 3-1: USB disconnect, device number 16 [ 151.159071][ T8945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.185011][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 151.205401][ T8947] bond_slave_0: entered promiscuous mode [ 151.211713][ T8947] bond_slave_1: entered promiscuous mode [ 151.219812][ T8947] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 151.374240][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1322'. [ 151.383973][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1322'. [ 151.400513][ T5905] hid-generic 0003:0486:0185.0016: hidraw0: USB HID v0.08 Device [HID 0486:0185] on usb-dummy_hcd.3-1/input0 [ 151.637724][ T10] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 151.664448][ T5951] usb 4-1: USB disconnect, device number 17 [ 151.684017][ T10] usb 5-1: USB disconnect, device number 27 [ 152.383938][ T8976] input: syz0 as /devices/virtual/input/input32 [ 152.393291][ T8959] syz.1.1324 (8959): drop_caches: 2 [ 152.566354][ T30] audit: type=1400 audit(1756426848.338:1488): avc: denied { write } for pid=8988 comm="syz.4.1337" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 152.599606][ T30] audit: type=1400 audit(1756426848.338:1489): avc: denied { read } for pid=8988 comm="syz.4.1337" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 152.777000][ T10] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 152.841681][ T9001] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.933063][ T9001] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.968042][ T10] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 152.976431][ T10] usb 2-1: config 0 has no interface number 0 [ 152.995901][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 153.011915][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.027843][ T10] usb 2-1: Product: syz [ 153.027864][ T10] usb 2-1: Manufacturer: syz [ 153.027879][ T10] usb 2-1: SerialNumber: syz [ 153.031167][ T10] usb 2-1: config 0 descriptor?? [ 153.042059][ T9001] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.140807][ T9001] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.354865][ T190] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.400673][ T190] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.426546][ T190] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.445098][ T10] usb 2-1: Firmware version (0.0) predates our first public release. [ 153.478377][ T10] usb 2-1: Please update to version 0.2 or newer [ 153.488865][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.502837][ T10] usb 2-1: Firmware: build [ 153.688869][ T9042] netlink: 'syz.3.1358': attribute type 1 has an invalid length. [ 153.698653][ T9042] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1358'. [ 153.709172][ T9042] netlink: 'syz.3.1358': attribute type 2 has an invalid length. [ 153.716973][ T9042] netlink: 'syz.3.1358': attribute type 1 has an invalid length. [ 153.728726][ T10] usb 2-1: USB disconnect, device number 14 [ 154.346744][ T5847] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 154.537379][ T5847] usb 1-1: Using ep0 maxpacket: 16 [ 154.545407][ T5847] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 154.554494][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.563795][ T5847] usb 1-1: Product: syz [ 154.566839][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 154.568097][ T5847] usb 1-1: Manufacturer: syz [ 154.580146][ T5847] usb 1-1: SerialNumber: syz [ 154.588704][ T5847] usb 1-1: config 0 descriptor?? [ 154.748220][ T10] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 154.760687][ T10] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 154.776786][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 154.787585][ T10] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 154.798268][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.815733][ T10] usb 2-1: Product: syz [ 154.824461][ T10] usb 2-1: Manufacturer: syz [ 154.833520][ T10] usb 2-1: SerialNumber: syz [ 154.846260][ T9082] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 154.853810][ T9082] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.004000][ T5847] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 155.031278][ T5847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.050954][ T5847] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 155.066940][ T5847] usb 1-1: media controller created [ 155.098558][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.205219][ T5847] zl10353_read_register: readreg error (reg=127, ret==0) [ 155.212342][ T5847] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 155.223532][ T5847] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 155.248954][ T5847] usb 1-1: USB disconnect, device number 20 [ 155.280322][ T5847] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 155.474497][ T9131] loop8: detected capacity change from 0 to 7 [ 155.487278][ T9131] Dev loop8: unable to read RDB block 7 [ 155.492856][ T9131] loop8: unable to read partition table [ 155.502670][ T9131] loop8: partition table beyond EOD, truncated [ 155.512614][ T9131] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 155.578204][ T9131] Dev loop8: unable to read RDB block 7 [ 155.583792][ T9131] loop8: unable to read partition table [ 155.597424][ T9131] loop8: partition table beyond EOD, truncated [ 155.603642][ T9131] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 155.881597][ T10] (unnamed net_device) (uninitialized): Assigned a random MAC address: 02:b6:c2:81:bc:10 [ 155.923171][ T10] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 155.940771][ T10] usb 2-1: USB disconnect, device number 15 [ 156.023562][ T9155] sp0: Synchronizing with TNC [ 156.034820][ T9155] sp0: Found TNC [ 156.364204][ T30] audit: type=1400 audit(1756426852.138:1490): avc: denied { create } for pid=9169 comm="syz.0.1416" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 156.537057][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1418'. [ 156.655144][ T30] audit: type=1326 audit(1756426852.428:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3518ebe9 code=0x7ffc0000 [ 156.700689][ T30] audit: type=1326 audit(1756426852.428:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3518ebe9 code=0x7ffc0000 [ 156.744767][ T30] audit: type=1326 audit(1756426852.468:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab3518ebe9 code=0x7ffc0000 [ 156.774375][ T30] audit: type=1326 audit(1756426852.468:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3518ebe9 code=0x7ffc0000 [ 156.798759][ T30] audit: type=1326 audit(1756426852.468:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab3518ebe9 code=0x7ffc0000 [ 156.822615][ T30] audit: type=1326 audit(1756426852.478:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3518ebe9 code=0x7ffc0000 [ 156.846728][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 156.867513][ T30] audit: type=1326 audit(1756426852.478:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab3518ebe9 code=0x7ffc0000 [ 156.896815][ T5951] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 156.938270][ T30] audit: type=1326 audit(1756426852.578:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3518ebe9 code=0x7ffc0000 [ 156.966025][ T30] audit: type=1326 audit(1756426852.578:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3518ebe9 code=0x7ffc0000 [ 157.016891][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 157.023862][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 157.035203][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 157.076775][ T5951] usb 1-1: Using ep0 maxpacket: 16 [ 157.086148][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.104144][ T5951] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 157.116397][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 157.127340][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.172656][ T5951] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 157.181879][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.197801][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.205796][ T5951] usb 1-1: Product: syz [ 157.212446][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.222500][ T5951] usb 1-1: Manufacturer: syz [ 157.229488][ T5951] usb 1-1: SerialNumber: syz [ 157.241493][ T5951] usb 1-1: config 0 descriptor?? [ 157.252824][ T5951] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 157.263187][ T5951] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 157.446907][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 157.453579][ T10] usbtmc 2-1:16.0: can't read capabilities [ 157.670596][ T10] usb 2-1: USB disconnect, device number 16 [ 157.868622][ T5951] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 157.879434][ T5951] em28xx 1-1:0.0: Config register raw data: 0xdc [ 158.079781][ T5951] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 158.094206][ T5951] em28xx 1-1:0.0: No AC97 audio processor [ 158.113880][ T5951] usb 1-1: USB disconnect, device number 21 [ 158.125048][ T5951] em28xx 1-1:0.0: Disconnecting em28xx [ 158.146337][ T5951] em28xx 1-1:0.0: Freeing device [ 158.781769][ T9273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.045326][ T9282] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005 [ 159.260233][ T9299] input: syz0 as /devices/virtual/input/input33 [ 159.375497][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'. [ 159.451345][ T9303] bond0: (slave bond_slave_1): Releasing backup interface [ 159.458656][ T5905] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 159.479276][ T5847] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 159.480862][ T9312] bridge_slave_0: left allmulticast mode [ 159.492737][ T9312] bridge_slave_0: left promiscuous mode [ 159.499200][ T9312] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.513286][ T9312] bridge_slave_1: left allmulticast mode [ 159.522710][ T9312] bridge_slave_1: left promiscuous mode [ 159.540919][ T9312] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.574487][ T9312] bond0: (slave bond_slave_0): Releasing backup interface [ 159.583150][ T9316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.608951][ T9312] bond0: (slave bond_slave_1): Releasing backup interface [ 159.616867][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 159.631559][ T5905] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 159.641327][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 159.651674][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.652538][ T9312] team0: Port device team_slave_0 removed [ 159.669669][ T5847] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.683629][ T9312] team0: Port device team_slave_1 removed [ 159.684852][ T5905] usb 1-1: Product: syz [ 159.693959][ T5847] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.694755][ T9312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.707215][ T5905] usb 1-1: Manufacturer: syz [ 159.716079][ T5847] usb 4-1: config 0 interface 0 has no altsetting 0 [ 159.718574][ T9320] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1481'. [ 159.725915][ T5905] usb 1-1: SerialNumber: syz [ 159.742605][ T5847] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 159.746578][ T9312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.753471][ T5905] usb 1-1: config 0 descriptor?? [ 159.764105][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.777560][ T5847] usb 4-1: config 0 descriptor?? [ 159.777572][ T9312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.777591][ T9312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.076751][ T1171] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 160.206006][ T5905] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 160.221327][ T5847] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 160.230714][ T5905] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 160.236863][ T5951] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 160.240409][ T5847] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 160.254498][ T5847] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 160.261746][ T5905] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 160.266862][ T10] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 160.269668][ T1171] usb 3-1: Using ep0 maxpacket: 32 [ 160.282306][ T5905] usb 1-1: media controller created [ 160.287774][ T5847] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 160.294727][ T5847] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 160.308871][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.317461][ T5847] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 160.324454][ T5847] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 160.332356][ T1171] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 160.346031][ T1171] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 160.354876][ T5847] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 160.361848][ T1171] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 160.370960][ T5847] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 160.377995][ T1171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 160.387668][ T5847] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 160.394609][ T5847] cougar 0003:060B:500A.0017: collection stack underflow [ 160.398087][ T5951] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.401686][ T1171] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 160.417601][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.422886][ T5847] cougar 0003:060B:500A.0017: item 0 0 0 12 parsing failed [ 160.436077][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 160.441134][ T5905] zl10353_read_register: readreg error (reg=127, ret==0) [ 160.441178][ T5905] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 160.441190][ T5905] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 160.443693][ T5905] usb 1-1: USB disconnect, device number 22 [ 160.466384][ T10] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 160.474973][ T1171] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 160.475013][ T1171] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 160.504373][ T5951] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.511926][ T5847] cougar 0003:060B:500A.0017: parse failed [ 160.526608][ T10] usb 2-1: config 150 has no interface number 0 [ 160.542059][ T10] usb 2-1: config 150 interface 204 has no altsetting 0 [ 160.543780][ T5847] cougar 0003:060B:500A.0017: probe with driver cougar failed with error -22 [ 160.549240][ T10] usb 2-1: config 150 interface 1 has no altsetting 0 [ 160.564872][ T5951] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.574032][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.582707][ T1171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.584084][ T10] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 160.601525][ T5951] usb 5-1: config 0 descriptor?? [ 160.606606][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.609172][ T5847] usb 4-1: USB disconnect, device number 18 [ 160.619021][ T10] usb 2-1: Product: syz [ 160.629472][ T1171] usb 3-1: config 0 descriptor?? [ 160.635463][ T5905] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 160.656789][ T10] usb 2-1: Manufacturer: syz [ 160.661497][ T10] usb 2-1: SerialNumber: syz [ 160.853673][ T1171] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 160.881950][ T10] xr_serial 2-1:150.204: xr_serial converter detected [ 161.023281][ T5951] plantronics 0003:047F:FFFF.0018: ignoring exceeding usage max [ 161.049141][ T5951] plantronics 0003:047F:FFFF.0018: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 161.101102][ T5951] usb 3-1: USB disconnect, device number 17 [ 161.111040][ T5951] usblp0: removed [ 161.235722][ T9] usb 5-1: USB disconnect, device number 28 [ 161.398589][ T5847] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 161.557215][ T5847] usb 1-1: Using ep0 maxpacket: 16 [ 161.565774][ T5847] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.581608][ T5847] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 161.587417][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 161.587431][ T30] audit: type=1400 audit(1756426857.358:1506): avc: denied { watch } for pid=9366 comm="syz.3.1503" path="/373/net_prio.prioidx" dev="tmpfs" ino=1916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 161.591691][ T5847] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.599185][ T30] audit: type=1400 audit(1756426857.378:1507): avc: denied { watch_sb watch_reads } for pid=9366 comm="syz.3.1503" path="/373/net_prio.prioidx" dev="tmpfs" ino=1916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 161.621411][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.624298][ T5847] usb 1-1: config 1 interface 0 has no altsetting 0 [ 161.675434][ T5847] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 161.686734][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.696363][ T10] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 161.698197][ T5847] usb 1-1: Product: syz [ 161.702919][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 161.707525][ T5847] usb 1-1: Manufacturer: syz [ 161.707542][ T5847] usb 1-1: SerialNumber: syz [ 161.756426][ T10] usb 2-1: USB disconnect, device number 17 [ 161.778387][ T10] xr_serial 2-1:150.204: device disconnected [ 161.916995][ T5847] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 162.279180][ T9411] syzkaller1: entered promiscuous mode [ 162.285060][ T9411] syzkaller1: entered allmulticast mode [ 162.347588][ T9414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.373079][ T9414] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 162.390504][ T9414] batman_adv: batadv0: Removing interface: ipvlan2 [ 162.406848][ T9414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.431812][ T9418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1527'. [ 162.718273][ T9435] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 162.725270][ T9] IPVS: starting estimator thread 0... [ 162.814629][ T30] audit: type=1326 audit(1756426858.588:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.3.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3518ebe9 code=0x7ffc0000 [ 162.838009][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.846896][ T9441] IPVS: using max 50 ests per chain, 120000 per kthread [ 162.876763][ T30] audit: type=1326 audit(1756426858.588:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.3.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fab3518ebe9 code=0x7ffc0000 [ 162.900133][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.936361][ T30] audit: type=1326 audit(1756426858.588:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.3.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3518ebe9 code=0x7ffc0000 [ 163.017498][ T30] audit: type=1326 audit(1756426858.588:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.3.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3518ebe9 code=0x7ffc0000 [ 163.072809][ T30] audit: type=1400 audit(1756426858.708:1512): avc: denied { read } for pid=9451 comm="syz.3.1541" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 163.109466][ T30] audit: type=1400 audit(1756426858.708:1513): avc: denied { open } for pid=9451 comm="syz.3.1541" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 163.137235][ T30] audit: type=1400 audit(1756426858.708:1514): avc: denied { ioctl } for pid=9451 comm="syz.3.1541" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 163.428478][ T5854] Bluetooth: hci3: Malformed Event: 0x2f [ 163.447009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 163.487952][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1554'. [ 163.873576][ T9504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1565'. [ 163.945184][ T9509] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 164.162498][ T10] usb 1-1: USB disconnect, device number 23 [ 164.180353][ T10] usblp0: removed [ 164.381282][ T30] audit: type=1400 audit(1756426860.158:1515): avc: denied { connect } for pid=9534 comm="syz.2.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 164.842675][ T9569] kvm: kvm [9568]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 164.851522][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 164.859383][ T9569] kvm: kvm [9568]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 165.026929][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 165.033624][ T10] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 165.042044][ T10] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 165.051576][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 165.060600][ T10] usb 5-1: config 1 has no interface number 0 [ 165.066932][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.077876][ T10] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 165.094376][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 165.103461][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.115155][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 165.320415][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 165.336858][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 165.336923][ T5854] Bluetooth: hci5: command 0x1003 tx timeout [ 165.485409][ T9582] tipc: Started in network mode [ 165.490839][ T9582] tipc: Node identity ac1414aa, cluster identity 4711 [ 165.498757][ T9582] tipc: Enabled bearer , priority 10 [ 165.762883][ T9597] netlink: 'syz.1.1607': attribute type 13 has an invalid length. [ 165.770929][ T9] usb 5-1: USB disconnect, device number 29 [ 165.776995][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 165.802128][ T9597] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 165.833489][ T9597] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 165.851426][ T9597] gretap1: entered promiscuous mode [ 165.864725][ T9597] gretap1: entered allmulticast mode [ 166.059791][ T9618] pim6reg: entered allmulticast mode [ 166.084388][ T9618] pim6reg: left allmulticast mode [ 166.571050][ T9657] netlink: 'syz.0.1633': attribute type 9 has an invalid length. [ 166.586935][ T5847] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 166.612335][ T9657] netlink: 'syz.0.1633': attribute type 7 has an invalid length. [ 166.622834][ T9657] netlink: 'syz.0.1633': attribute type 8 has an invalid length. [ 166.638087][ T5905] tipc: Node number set to 2886997162 [ 166.674805][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 166.674820][ T30] audit: type=1400 audit(1756426862.448:1520): avc: denied { watch_sb } for pid=9664 comm="syz.3.1637" path="/403" dev="tmpfs" ino=2067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 166.703075][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.739467][ T5847] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 166.760409][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 166.794495][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 166.812244][ T5847] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.838840][ T5847] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.866705][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.903305][ T5847] usb 3-1: config 0 descriptor?? [ 166.913882][ T9638] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 167.226965][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 167.352348][ T5847] plantronics 0003:047F:FFFF.0019: reserved main item tag 0xd [ 167.379731][ T9709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.388827][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.397844][ T5847] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 167.400888][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 167.441128][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.460025][ T9] usb 4-1: config 0 descriptor?? [ 167.467641][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 167.470555][ T30] audit: type=1400 audit(1756426863.238:1521): avc: denied { connect } for pid=9712 comm="syz.1.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.532189][ T30] audit: type=1400 audit(1756426863.268:1522): avc: denied { read } for pid=9712 comm="syz.1.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.551389][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.625005][ T5847] usb 3-1: USB disconnect, device number 18 [ 167.792492][ T30] audit: type=1400 audit(1756426863.568:1523): avc: denied { write } for pid=9723 comm="syz.0.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 167.792571][ T9725] block nbd0: Send control failed (result -22) [ 167.822748][ T9725] block nbd0: Request send failed, requeueing [ 167.823922][ T5847] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5847 comm: kworker/1:4) [ 167.831913][ T55] block nbd0: Dead connection, failed to find a fallback [ 167.847337][ T55] block nbd0: shutting down sockets [ 167.852841][ T55] blk_print_req_error: 10 callbacks suppressed [ 167.852855][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 167.877989][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 168.090458][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 168.099052][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 168.105993][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 168.115187][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 168.124376][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 168.133657][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 168.141576][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 168.150648][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 168.158181][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 168.165023][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 168.174413][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 168.182427][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 168.192735][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 168.199462][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 168.214871][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 168.226276][ T9] pwc: Registered as video103. [ 168.235220][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input35 [ 168.251089][ T9] usb 4-1: USB disconnect, device number 19 [ 168.357239][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 168.363837][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.378201][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 168.394921][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.408735][ T10] usb 1-1: config 0 descriptor?? [ 168.446895][ T5847] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 168.568268][ T30] audit: type=1326 audit(1756426864.348:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.4.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f178ebe9 code=0x7fc00000 [ 168.616962][ T5847] usb 3-1: Using ep0 maxpacket: 16 [ 168.623817][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.636408][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.646524][ T5847] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 168.656122][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.668781][ T5847] usb 3-1: config 0 descriptor?? [ 168.679231][ T9] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 168.703529][ T9757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1673'. [ 168.755059][ T9759] sctp: [Deprecated]: syz.3.1674 (pid 9759) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.755059][ T9759] Use struct sctp_sack_info instead [ 168.827984][ T10] mcp2221 0003:04D8:00DD.001A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 168.847329][ T5905] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 168.855078][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 168.866266][ T9] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 168.875592][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.895536][ T9] usb 2-1: config 0 descriptor?? [ 168.901481][ T9753] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 168.996533][ T30] audit: type=1400 audit(1756426864.768:1525): avc: denied { create } for pid=9768 comm="syz.3.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 169.016322][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.018644][ T5905] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 169.046822][ T5905] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 169.069439][ T5905] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 169.080856][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.090120][ T5905] usb 5-1: Product: syz [ 169.098068][ T5847] hid-multitouch 0003:1FD2:6007.001B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 169.109923][ T5905] usb 5-1: Manufacturer: syz [ 169.114519][ T5905] usb 5-1: SerialNumber: syz [ 169.125104][ T5905] usb 5-1: config 0 descriptor?? [ 169.130763][ T9755] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 169.138348][ T9755] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 169.268704][ T5847] usb 1-1: USB disconnect, device number 24 [ 169.306836][ T10] usb 3-1: USB disconnect, device number 19 [ 169.316891][ T5904] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 169.332051][ T9] elan 0003:04F3:0755.001C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 169.353587][ T9755] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 169.362244][ T9755] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 169.466728][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 169.473127][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.482972][ T5904] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 169.492154][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.501491][ T5904] usb 4-1: config 0 descriptor?? [ 169.774068][ T5905] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 169.919215][ T5904] hid-multitouch 0003:0EEF:72C4.001D: unknown main item tag 0x0 [ 169.939293][ T5904] hid-multitouch 0003:0EEF:72C4.001D: hidraw1: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 170.051421][ T9785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.128317][ T10] usb 4-1: USB disconnect, device number 20 [ 170.179472][ T5905] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 170.200739][ T5905] usb 5-1: USB disconnect, device number 30 [ 170.306224][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 170.390492][ T9797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1692'. [ 170.738550][ T5904] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 170.776509][ T30] audit: type=1400 audit(1756426866.548:1526): avc: denied { map } for pid=9812 comm="syz.3.1699" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 170.799860][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.810364][ T30] audit: type=1400 audit(1756426866.548:1527): avc: denied { execute } for pid=9812 comm="syz.3.1699" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 170.833994][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.852758][ T9813] lo speed is unknown, defaulting to 1000 [ 170.928630][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 170.942343][ T5904] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 170.959973][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.977229][ T5904] usb 1-1: config 0 descriptor?? [ 170.985378][ T5904] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 171.189059][ T9835] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1707'. [ 171.200499][ T9835] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1707'. [ 171.232353][ T5905] usb 2-1: USB disconnect, device number 18 [ 171.285337][ T9841] veth1_macvtap: left promiscuous mode [ 171.293963][ T9841] macsec0: entered promiscuous mode [ 171.299709][ T9841] macsec0: entered allmulticast mode [ 171.317135][ T9841] veth1_macvtap: entered promiscuous mode [ 171.322894][ T9841] veth1_macvtap: entered allmulticast mode [ 171.334387][ T9841] macsec0: left promiscuous mode [ 171.339579][ T9841] macsec0: left allmulticast mode [ 171.344602][ T9841] veth1_macvtap: left allmulticast mode [ 171.925845][ T9855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.005122][ T5904] usb 1-1: USB disconnect, device number 25 [ 172.041077][ T9863] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.1720'. [ 172.521166][ T30] audit: type=1326 audit(1756426868.298:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9890 comm="syz.2.1733" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe880b8ebe9 code=0x0 [ 172.820972][ T30] audit: type=1400 audit(1756426868.598:1529): avc: denied { mounton } for pid=9904 comm="syz.0.1739" path="/332/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 173.188594][ T9916] syzkaller1: entered promiscuous mode [ 173.194202][ T9916] syzkaller1: entered allmulticast mode [ 173.262711][ T9918] input: syz1 as /devices/virtual/input/input36 [ 173.368837][ T30] audit: type=1400 audit(1756426869.138:1530): avc: denied { append } for pid=9923 comm="syz.1.1748" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 173.369300][ T5904] kernel write not supported for file /sg0 (pid: 5904 comm: kworker/1:5) [ 173.588342][ T9939] syzkaller1: entered promiscuous mode [ 173.594340][ T9939] syzkaller1: entered allmulticast mode [ 174.216622][ T30] audit: type=1400 audit(1756426869.988:1531): avc: denied { ioctl } for pid=9972 comm="syz.2.1768" path="socket:[30762]" dev="sockfs" ino=30762 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 174.220035][ T9973] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1768'. [ 174.322806][ T30] audit: type=1400 audit(1756426870.098:1532): avc: denied { accept } for pid=9978 comm="syz.0.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 174.367032][ T5956] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 174.374766][ T5854] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 174.381849][ T5849] Bluetooth: hci5: command 0x1003 tx timeout [ 174.473931][ T9983] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1773'. [ 174.536831][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 174.553315][ T5956] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 174.566757][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.585959][ T5956] usb 4-1: Product: syz [ 174.590383][ T5956] usb 4-1: Manufacturer: syz [ 174.595095][ T5956] usb 4-1: SerialNumber: syz [ 174.610486][ T5956] usb 4-1: config 0 descriptor?? [ 174.622987][ T5956] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 174.648506][ T30] audit: type=1400 audit(1756426870.428:1533): avc: denied { module_request } for pid=9991 comm="syz.4.1777" kmod="netdev-wg0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 174.829170][ T5956] gp8psk: usb in 128 operation failed. [ 174.985007][ T5956] gp8psk: usb in 137 operation failed. [ 174.994296][ T5956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.007261][ T5956] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 175.026717][ T5956] usb 4-1: media controller created [ 175.046030][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.076995][ T5956] gp8psk_fe: Frontend revision 1 attached [ 175.094614][ T5956] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 175.105630][ T5956] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 175.339976][ T5956] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 175.354503][ T5956] gp8psk: found Genpix USB device pID = 201 (hex) [ 175.586097][ T5956] usb 4-1: USB disconnect, device number 21 [ 175.644999][ T5956] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 175.804234][T10016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 175.906366][T10020] netlink: 'syz.4.1787': attribute type 12 has an invalid length. [ 175.959468][ T30] audit: type=1326 audit(1756426871.738:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10023 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f178ebe9 code=0x7ffc0000 [ 175.982992][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.004382][T10026] input: syz1 as /devices/virtual/input/input37 [ 176.009482][ T30] audit: type=1326 audit(1756426871.738:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10023 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f178ebe9 code=0x7ffc0000 [ 176.034104][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.043725][ T30] audit: type=1326 audit(1756426871.738:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10023 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb7f178ebe9 code=0x7ffc0000 [ 176.067102][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.083957][ T30] audit: type=1326 audit(1756426871.738:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10023 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f178ebe9 code=0x7ffc0000 [ 176.150484][T10033] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1792'. [ 176.283789][T10044] syzkaller1: entered promiscuous mode [ 176.289866][T10044] syzkaller1: entered allmulticast mode [ 176.347993][T10048] netlink: 212924 bytes leftover after parsing attributes in process `syz.0.1799'. [ 176.924085][T10091] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1819'. [ 176.957585][T10091] nbd: must specify at least one socket [ 177.484958][T10106] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1825'. [ 177.943959][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 177.943976][ T30] audit: type=1400 audit(1756426873.708:1548): avc: denied { write } for pid=10128 comm="syz.4.1837" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 178.166166][T10141] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 178.204385][T10141] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 178.368730][T10161] ALSA: mixer_oss: invalid OSS volume 'ؤ¿ßnhè‹{%¼ÿOBÁ›eb' [ 178.461903][T10167] ref_ctr_offset mismatch. inode: 0x619 offset: 0x0 ref_ctr_offset(old): 0xa0 ref_ctr_offset(new): 0x0 [ 178.597345][ T5904] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 178.612864][ T30] audit: type=1400 audit(1756426874.388:1549): avc: denied { mounton } for pid=10172 comm="syz.4.1857" path=2F3330322FE91F7189591E9233614B dev="tmpfs" ino=1567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 178.746745][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 178.756765][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.772165][ T30] audit: type=1400 audit(1756426874.528:1550): avc: denied { watch } for pid=10177 comm="syz.3.1860" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 178.772263][ T5904] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 178.811911][T10180] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 178.849764][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.869673][ T5904] usb 2-1: config 0 descriptor?? [ 179.173102][T10195] syzkaller1: entered promiscuous mode [ 179.211430][T10195] syzkaller1: entered allmulticast mode [ 179.296399][ T5904] megaworld 0003:07B5:0312.001E: unknown main item tag 0x0 [ 179.334897][ T5904] megaworld 0003:07B5:0312.001E: unknown main item tag 0x0 [ 179.357100][ T5904] megaworld 0003:07B5:0312.001E: unknown main item tag 0x0 [ 179.376767][ T5904] megaworld 0003:07B5:0312.001E: unknown main item tag 0x0 [ 179.384434][ T5904] megaworld 0003:07B5:0312.001E: unknown main item tag 0x0 [ 179.410605][ T5904] megaworld 0003:07B5:0312.001E: unknown main item tag 0x0 [ 179.426729][ T5904] megaworld 0003:07B5:0312.001E: unknown main item tag 0x0 [ 179.435260][ T5904] megaworld 0003:07B5:0312.001E: unknown main item tag 0x0 [ 179.456330][ T5904] megaworld 0003:07B5:0312.001E: unknown main item tag 0x0 [ 179.479034][ T5904] megaworld 0003:07B5:0312.001E: unknown main item tag 0x0 [ 179.508815][ T5904] megaworld 0003:07B5:0312.001E: collection stack underflow [ 179.523215][ T5904] megaworld 0003:07B5:0312.001E: item 0 0 0 12 parsing failed [ 179.553293][ T5904] megaworld 0003:07B5:0312.001E: parse failed [ 179.571454][ T5904] megaworld 0003:07B5:0312.001E: probe with driver megaworld failed with error -22 [ 179.611129][ T5904] usb 2-1: USB disconnect, device number 19 [ 179.682651][ T5847] IPVS: starting estimator thread 0... [ 179.751141][T10220] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 179.776770][T10218] IPVS: using max 42 ests per chain, 100800 per kthread [ 180.417025][ T5847] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 180.433352][ T30] audit: type=1400 audit(1756426876.208:1551): avc: denied { read } for pid=10255 comm="syz.2.1894" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 180.550268][ T30] audit: type=1400 audit(1756426876.328:1552): avc: denied { ioctl } for pid=10260 comm="syz.0.1896" path="socket:[32957]" dev="sockfs" ino=32957 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 180.577780][ T5847] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 180.599500][ T5847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.613420][ T5847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.629519][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.649591][T10264] syzkaller1: entered promiscuous mode [ 180.649922][ T5847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.664714][T10264] syzkaller1: entered allmulticast mode [ 180.670184][ T5847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.675476][T10264] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 180.695508][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.707044][ T5847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.723002][ T5847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.745502][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.761019][ T5847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.770256][ T5847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.785970][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.799692][ T5847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.810081][ T5847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.821663][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.831067][ T5847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.840708][ T5847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.855543][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.864294][ T5847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.873399][ T5847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.888768][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.903084][ T5847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.914345][ T5847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.935835][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.950381][ T5847] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 180.960246][ T5847] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 180.972742][ T5847] usb 5-1: Product: syz [ 180.979099][ T5847] usb 5-1: Manufacturer: syz [ 180.984049][ T5847] usb 5-1: SerialNumber: syz [ 181.000907][ T5847] usb 5-1: config 0 descriptor?? [ 181.015587][ T5847] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 181.038839][T10285] unknown channel width for channel at 909000KHz? [ 181.272319][ T30] audit: type=1400 audit(1756427133.030:1553): avc: denied { bind } for pid=10299 comm="syz.1.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 181.292750][ T5847] usb 5-1: USB disconnect, device number 31 [ 181.302359][ T5847] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 181.386105][ T30] audit: type=1400 audit(1756427133.150:1554): avc: denied { remount } for pid=10309 comm="syz.2.1919" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 181.496609][ T5956] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 181.646612][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 181.654897][ T5956] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 181.664515][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 181.672261][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.683123][ T5956] usb 4-1: Product: syz [ 181.687386][ T5956] usb 4-1: Manufacturer: syz [ 181.692370][ T5956] usb 4-1: SerialNumber: syz [ 181.826658][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 181.833515][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.845322][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.855333][ T9] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 181.864621][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.875270][ T9] usb 3-1: config 0 descriptor?? [ 181.911875][ T5956] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 181.980090][ T30] audit: type=1326 audit(1756427133.751:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10323 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c658ebe9 code=0x7fc00000 [ 182.003567][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.565108][T10347] lo speed is unknown, defaulting to 1000 [ 182.636206][ T30] audit: type=1326 audit(1756427134.401:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10323 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10c652ade9 code=0x7fc00000 [ 182.694182][ T9] letsketch 0003:6161:4D15.001F: Device info: â·· [ 182.933504][ T9] usb 3-1: Max retries (5) exceeded reading string descriptor 201 [ 182.954285][ T9] letsketch 0003:6161:4D15.001F: probe with driver letsketch failed with error -71 [ 182.985045][ T9] usb 3-1: USB disconnect, device number 20 [ 183.575508][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 183.735511][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 183.744556][ T9] usb 5-1: config 8 has an invalid interface number: 49 but max is 0 [ 183.760878][ T9] usb 5-1: config 8 has no interface number 0 [ 183.772768][ T9] usb 5-1: config 8 interface 49 has no altsetting 0 [ 183.783093][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice=ba.d7 [ 183.792455][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.800648][ T9] usb 5-1: Product: syz [ 183.804979][ T9] usb 5-1: Manufacturer: syz [ 183.816456][ T9] usb 5-1: SerialNumber: syz [ 183.967885][T10430] syzkaller1: entered promiscuous mode [ 183.973691][T10430] syzkaller1: entered allmulticast mode [ 184.043577][ T9] uvcvideo 5-1:8.49: probe with driver uvcvideo failed with error -22 [ 184.065361][ T9] usb 5-1: USB disconnect, device number 32 [ 184.271175][ T9] usb 4-1: USB disconnect, device number 22 [ 184.284061][ T9] usblp0: removed [ 184.593299][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1967'. [ 185.140858][T10492] lo speed is unknown, defaulting to 1000 [ 185.174770][T10500] veth0: entered promiscuous mode [ 185.219334][T10499] veth0: left promiscuous mode [ 185.454616][T10511] netlink: 'syz.2.1989': attribute type 21 has an invalid length. [ 185.614351][T10492] netlink: 'syz.3.1981': attribute type 13 has an invalid length. [ 185.640878][T10492] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 185.900582][T10535] netlink: 'syz.4.2000': attribute type 4 has an invalid length. [ 185.908485][ T5847] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 185.947299][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2001'. [ 186.021250][ T5904] lo speed is unknown, defaulting to 1000 [ 186.027314][ T5904] syz0: Port: 1 Link DOWN [ 186.164216][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 186.170952][ T5847] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 186.179103][ T5847] usb 3-1: config 0 has no interface number 0 [ 186.194887][ T5847] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 186.204831][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.214845][ T5847] usb 3-1: Product: syz [ 186.239079][ T5847] usb 3-1: Manufacturer: syz [ 186.243701][ T5847] usb 3-1: SerialNumber: syz [ 186.258871][ T5847] usb 3-1: config 0 descriptor?? [ 186.265708][ T30] audit: type=1400 audit(1756427138.033:1557): avc: denied { connect } for pid=10546 comm="syz.1.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 186.285423][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.293656][ T5847] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 186.314618][ T30] audit: type=1400 audit(1756427138.073:1558): avc: denied { read } for pid=10546 comm="syz.1.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 186.519572][ T5847] etas_es58x 3-1:0.2: could not parse product info: '424242424242' [ 186.597297][T10567] (syz.1.2014,10567,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 186.604123][ T30] audit: type=1400 audit(1756427138.363:1559): avc: denied { add_name } for pid=10566 comm="syz.1.2014" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.649247][ T30] audit: type=1400 audit(1756427138.373:1560): avc: denied { create } for pid=10566 comm="syz.1.2014" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 186.690695][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.701386][ T30] audit: type=1400 audit(1756427138.373:1561): avc: denied { associate } for pid=10566 comm="syz.1.2014" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 186.744350][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.772130][ T5847] usb 3-1: USB disconnect, device number 21 [ 186.773904][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 186.779822][ T5847] etas_es58x 3-1:0.2: Disconnecting syz syz [ 186.933808][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 186.948422][ T9] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 186.973818][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.981973][ T9] usb 5-1: Product: syz [ 186.993763][ T9] usb 5-1: Manufacturer: syz [ 186.998358][ T9] usb 5-1: SerialNumber: syz [ 187.014432][ T9] usb 5-1: config 0 descriptor?? [ 187.427093][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 187.454577][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.469876][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 187.488582][ T9] usb 5-1: media controller created [ 187.508286][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.529443][ T30] audit: type=1400 audit(1756427139.303:1562): avc: denied { accept } for pid=10575 comm="syz.1.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 187.644454][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 187.660476][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 187.669141][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 187.683139][ T9] usb 5-1: USB disconnect, device number 33 [ 187.725264][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 187.816210][T10591] vivid-000: ================= START STATUS ================= [ 187.825954][T10591] vivid-000: Test Pattern: 75% Colorbar [ 187.831803][T10591] vivid-000: Fill Percentage of Frame: 100 [ 187.838905][T10591] vivid-000: Horizontal Movement: No Movement [ 187.845433][T10591] vivid-000: Vertical Movement: No Movement [ 187.852772][T10591] vivid-000: OSD Text Mode: All [ 187.857852][T10591] vivid-000: Show Border: false [ 187.862701][T10591] vivid-000: Show Square: false [ 187.867766][T10591] vivid-000: Sensor Flipped Horizontally: false [ 187.874271][T10591] vivid-000: Sensor Flipped Vertically: false [ 187.881405][T10591] vivid-000: Insert SAV Code in Image: false [ 187.887638][T10591] vivid-000: Insert EAV Code in Image: false [ 187.894321][T10591] vivid-000: Insert Video Guard Band: false [ 187.900230][T10591] vivid-000: Reduced Framerate: false [ 187.905809][T10591] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 187.914827][T10591] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 187.923189][T10591] vivid-000: Enable Capture Cropping: true grabbed [ 187.930670][T10591] vivid-000: Enable Capture Composing: true grabbed [ 187.937315][T10591] vivid-000: Enable Capture Scaler: true grabbed [ 187.943501][ T5904] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 187.951454][T10591] vivid-000: Timestamp Source: End of Frame [ 187.957372][T10591] vivid-000: Colorspace: sRGB [ 187.963021][T10591] vivid-000: Transfer Function: Default [ 187.970626][T10591] vivid-000: Y'CbCr Encoding: Default [ 187.977108][T10591] vivid-000: HSV Encoding: Hue 0-179 [ 187.982869][T10591] vivid-000: Quantization: Default [ 187.988263][T10591] vivid-000: Apply Alpha To Red Only: false [ 187.994222][T10591] vivid-000: Standard Aspect Ratio: 4x3 [ 187.999759][T10591] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 188.007578][T10591] vivid-000: DV Timings: 640x480p59 inactive [ 188.014003][T10591] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 188.021287][T10591] vivid-000: Maximum EDID Blocks: 2 [ 188.026986][T10591] vivid-000: Limited RGB Range (16-235): false [ 188.033428][T10591] vivid-000: Rx RGB Quantization Range: Automatic [ 188.039984][T10591] vivid-000: Power Present: 0x00000001 [ 188.045830][T10591] tpg source WxH: 320x240 (Y'CbCr) [ 188.051367][T10591] tpg field: 1 [ 188.054872][T10591] tpg crop: (0,0)/320x240 [ 188.059279][T10591] tpg compose: (0,0)/320x240 [ 188.064362][T10591] tpg colorspace: 8 [ 188.068502][T10591] tpg transfer function: 0/2 [ 188.073536][T10591] tpg Y'CbCr encoding: 0/1 [ 188.078131][T10591] tpg quantization: 0/2 [ 188.082722][T10591] tpg RGB range: 0/2 [ 188.087704][T10591] vivid-000: ================== END STATUS ================== [ 188.103284][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 188.115952][ T5904] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 188.126178][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.137721][ T5904] pvrusb2: Hardware description: Terratec Grabster AV400 [ 188.144767][ T5904] pvrusb2: ********** [ 188.148808][ T5904] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 188.159081][ T5904] pvrusb2: Important functionality might not be entirely working. [ 188.167119][ T5904] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 188.178739][ T5904] pvrusb2: ********** [ 188.349183][ T2336] pvrusb2: Invalid write control endpoint [ 188.409631][ T2336] pvrusb2: Invalid write control endpoint [ 188.416133][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 188.430262][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 188.441141][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 188.451304][ T2336] pvrusb2: Device being rendered inoperable [ 188.459924][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 188.467099][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 188.476019][ T2336] pvrusb2: Attached sub-driver cx25840 [ 188.481855][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 188.492277][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 188.494195][T10610] block nbd2: NBD_DISCONNECT [ 188.509757][T10610] block nbd2: Send disconnect failed -22 [ 188.526995][T10609] block nbd2: Disconnected due to user request. [ 188.535971][T10609] block nbd2: shutting down sockets [ 188.566844][ T5904] usb 4-1: USB disconnect, device number 23 [ 188.711728][ T30] audit: type=1400 audit(1756427140.484:1563): avc: denied { connect } for pid=10621 comm="syz.2.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.105037][T10638] netlink: 'syz.3.2044': attribute type 29 has an invalid length. [ 189.114969][T10638] netlink: 'syz.3.2044': attribute type 29 has an invalid length. [ 189.124681][T10638] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2044'. [ 189.170491][ T30] audit: type=1400 audit(1756427140.944:1564): avc: denied { create } for pid=10639 comm="syz.3.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 189.934918][ T30] audit: type=1400 audit(1756427141.705:1565): avc: denied { remount } for pid=10672 comm="syz.1.2059" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 190.188195][T10682] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2205475325 (8821901300 ns) > initial count (6564024732 ns). Using initial count to start timer. [ 190.495384][ T51] Bluetooth: hci5: Frame reassembly failed (-84) [ 190.861993][ T5847] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 191.013028][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.024091][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.033894][ T5847] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 191.043021][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.053007][ T5847] usb 3-1: config 0 descriptor?? [ 191.612473][T10721] netlink: 'syz.1.2079': attribute type 3 has an invalid length. [ 191.621190][T10721] netlink: 'syz.1.2079': attribute type 1 has an invalid length. [ 191.629464][T10721] netlink: 'syz.1.2079': attribute type 2 has an invalid length. [ 191.637426][T10721] netlink: 'syz.1.2079': attribute type 8 has an invalid length. [ 191.645371][T10721] netlink: 'syz.1.2079': attribute type 10 has an invalid length. [ 191.653301][T10721] netlink: 'syz.1.2079': attribute type 11 has an invalid length. [ 191.661108][T10721] netlink: 198236 bytes leftover after parsing attributes in process `syz.1.2079'. [ 191.941351][ T1171] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 192.086148][ T5847] usb 3-1: USB disconnect, device number 22 [ 192.094633][ T1171] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 192.104227][ T1171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.114922][ T1171] usb 2-1: config 0 descriptor?? [ 192.521221][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 192.522409][ T5854] Bluetooth: hci5: command 0x1003 tx timeout [ 192.566836][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2082'. [ 192.871069][T10742] block nbd0: server does not support multiple connections per device. [ 192.879710][T10742] block nbd0: shutting down sockets [ 192.933626][T10747] vcan0: entered allmulticast mode [ 192.939398][T10747] vcan0: left allmulticast mode [ 193.130204][ T1171] usb 2-1: Cannot set autoneg [ 193.135393][ T1171] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 193.169100][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2095'. [ 193.180933][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 193.217174][ T30] audit: type=1400 audit(1756427144.996:1566): avc: denied { load_policy } for pid=10756 comm="syz.2.2096" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 193.219172][T10757] SELinux: failed to load policy [ 193.338901][ T1171] usb 2-1: USB disconnect, device number 20 [ 193.354085][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.367854][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.378262][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.393241][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.403907][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.417060][ T9] usb 4-1: config 0 descriptor?? [ 193.458400][T10767] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.2101'. [ 193.573365][T10773] evm: overlay not supported [ 193.814437][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.833684][ T9] plantronics 0003:047F:FFFF.0021: reserved main item tag 0xd [ 193.853628][ T9] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 194.052156][ T5847] usb 4-1: USB disconnect, device number 24 [ 194.168736][T10796] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2115'. [ 194.672814][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2120'. [ 194.899649][T10824] lo speed is unknown, defaulting to 1000 [ 195.224973][ T30] audit: type=1400 audit(1756427147.007:1567): avc: denied { create } for pid=10836 comm="syz.3.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 195.247113][ T30] audit: type=1400 audit(1756427147.007:1568): avc: denied { map } for pid=10836 comm="syz.3.2130" path="socket:[35083]" dev="sockfs" ino=35083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 195.271042][ T30] audit: type=1400 audit(1756427147.007:1569): avc: denied { read } for pid=10836 comm="syz.3.2130" path="socket:[35083]" dev="sockfs" ino=35083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 195.368959][T10840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.379685][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 195.418484][T10842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.529547][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 195.554219][ T10] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 195.563588][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.572215][ T10] usb 3-1: Product: syz [ 195.576448][ T10] usb 3-1: Manufacturer: syz [ 195.583049][ T10] usb 3-1: SerialNumber: syz [ 195.599561][ T10] usb 3-1: config 0 descriptor?? [ 195.608132][ T10] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 195.617137][ T30] audit: type=1400 audit(1756427147.387:1570): avc: denied { bind } for pid=10847 comm="syz.1.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 195.688056][T10852] syzkaller1: entered promiscuous mode [ 195.693923][T10852] syzkaller1: entered allmulticast mode [ 195.819630][ T10] gp8psk: usb in 128 operation failed. [ 195.825666][ T10] gp8psk: usb in 137 operation failed. [ 195.833869][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 195.852143][ T10] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 195.869546][ T10] usb 3-1: media controller created [ 195.909242][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.921328][T10859] smc: net device bond0 applied user defined pnetid SYZ2 [ 195.936710][ T10] gp8psk_fe: Frontend revision 1 attached [ 195.942943][T10859] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2140'. [ 195.952169][ T10] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 195.960487][ T10] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 196.016375][T10859] smc: removing net device bond0 with user defined pnetid SYZ2 [ 196.028204][T10859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.041615][T10859] bond0 (unregistering): Released all slaves [ 196.178897][ T10] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 196.181595][T10861] loop2: detected capacity change from 0 to 7 [ 196.199765][ T10] gp8psk: found Genpix USB device pID = 201 (hex) [ 196.203809][T10861] Dev loop2: unable to read RDB block 7 [ 196.214621][T10861] loop2: unable to read partition table [ 196.220486][T10861] loop2: partition table beyond EOD, truncated [ 196.226695][T10861] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 196.426942][ T5904] usb 3-1: USB disconnect, device number 23 [ 196.486186][ T5904] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 196.529040][ T5956] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 196.549269][ T5847] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 196.680850][ T5956] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 196.691834][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.702767][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.713266][ T5956] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 196.729214][ T5956] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 196.732860][ T5847] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 196.748937][ T5956] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 196.755518][ T5847] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.759391][ T5956] usb 2-1: Manufacturer: syz [ 196.774395][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 196.774968][ T5956] usb 2-1: config 0 descriptor?? [ 196.785186][ T5847] usb 4-1: SerialNumber: syz [ 196.901855][T10875] netlink: 'syz.0.2147': attribute type 13 has an invalid length. [ 196.909994][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 196.925515][ T2928] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.925533][T10875] netlink: 'syz.0.2147': attribute type 13 has an invalid length. [ 196.935939][ T2928] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.942628][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 196.959676][ T2928] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.968092][ T2928] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.153225][T10887] netlink: 'syz.2.2152': attribute type 12 has an invalid length. [ 197.161662][T10887] netlink: 'syz.2.2152': attribute type 29 has an invalid length. [ 197.169748][T10887] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2152'. [ 197.178942][T10887] netlink: 'syz.2.2152': attribute type 2 has an invalid length. [ 197.187257][T10887] netlink: 'syz.2.2152': attribute type 1 has an invalid length. [ 197.195487][T10887] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2152'. [ 197.215032][ T5956] appleir 0003:05AC:8243.0022: unknown main item tag 0x0 [ 197.264550][ T30] audit: type=1400 audit(1756427149.048:1571): avc: denied { read } for pid=10888 comm="syz.2.2153" lport=60603 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 197.293052][ T5956] appleir 0003:05AC:8243.0022: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 197.339650][ T30] audit: type=1400 audit(1756427149.128:1572): avc: denied { setopt } for pid=10888 comm="syz.2.2153" lport=60603 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 197.445401][ T5847] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 197.458215][T10892] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2154'. [ 197.485742][T10892] netlink: 'syz.2.2154': attribute type 7 has an invalid length. [ 197.497512][ T1214] usb 2-1: USB disconnect, device number 21 [ 197.499618][T10892] netlink: 'syz.2.2154': attribute type 8 has an invalid length. [ 197.511782][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2154'. [ 197.528045][T10892] erspan0: entered promiscuous mode [ 197.534486][T10892] gretap0: entered promiscuous mode [ 197.540783][T10892] debugfs: 'hsr1' already exists in 'hsr' [ 197.546551][T10892] Cannot create hsr debugfs directory [ 197.913708][ T1214] usb 4-1: USB disconnect, device number 25 [ 197.929680][ T1214] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 198.026493][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2159'. [ 199.007786][ T5904] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 199.130019][T10417] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.210303][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 199.222720][ T5904] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 199.244844][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.284033][ T5904] usb 4-1: Product: syz [ 199.294171][ T5904] usb 4-1: Manufacturer: syz [ 199.314458][ T5904] usb 4-1: SerialNumber: syz [ 199.335238][ T5904] usb 4-1: config 0 descriptor?? [ 199.355610][ T5904] gspca_main: sq905-2.14.0 probing 2770:9120 [ 199.355904][T10417] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.606967][T10417] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.754627][T10417] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.767756][ T5956] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 199.937641][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 199.958780][ T5956] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 199.977805][ T5956] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.989619][T10417] bridge_slave_1: left allmulticast mode [ 199.994307][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.003020][T10417] bridge_slave_1: left promiscuous mode [ 200.004390][T10417] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.010918][ T5956] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.026626][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.034469][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.046649][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.055348][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.063573][ T5956] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.073426][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.081917][ T5956] usb 2-1: Product: syz [ 200.083665][ T30] audit: type=1400 audit(1756427151.860:1573): avc: denied { mounton } for pid=10938 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 200.086088][ T5956] usb 2-1: Manufacturer: syz [ 200.112374][ T5956] usb 2-1: SerialNumber: syz [ 200.117928][T10417] bridge_slave_0: left allmulticast mode [ 200.123563][T10417] bridge_slave_0: left promiscuous mode [ 200.131422][T10417] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.192221][ T5904] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 200.203120][ T5904] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 200.218807][ T5904] usb 4-1: USB disconnect, device number 26 [ 200.324654][T10417] erspan0 (unregistering): left promiscuous mode [ 200.347128][T10417] gretap0 (unregistering): left promiscuous mode [ 200.554411][ T5956] usb 2-1: 0:2 : does not exist [ 200.587185][T10417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.601052][T10417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.612385][T10417] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 200.632786][T10417] bond0 (unregistering): Released all slaves [ 200.658668][T10938] lo speed is unknown, defaulting to 1000 [ 200.850739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 200.859210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 200.978585][T10938] chnl_net:caif_netlink_parms(): no params data found [ 201.056320][T10417] hsr_slave_0: left promiscuous mode [ 201.066130][T10417] hsr_slave_1: left promiscuous mode [ 201.082218][T10417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.097108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 201.170162][T10417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.237429][T10417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.247357][ T5956] usb 2-1: USB disconnect, device number 22 [ 201.260242][T10417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.281000][T10417] veth1_macvtap: left promiscuous mode [ 201.290036][T10417] veth0_macvtap: left promiscuous mode [ 201.328882][T10417] veth1_vlan: left promiscuous mode [ 201.339265][T10417] veth0_vlan: left promiscuous mode [ 202.126337][ T5854] Bluetooth: hci3: command tx timeout [ 202.171301][T10959] ptrace attach of ""[10960] was attempted by "./syz-executor exec"[10959] [ 202.400962][T10967] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2183'. [ 202.438509][ T5956] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 202.473258][T10417] team0 (unregistering): Port device team_slave_1 removed [ 202.519615][T10417] team0 (unregistering): Port device team_slave_0 removed [ 202.597477][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 202.605486][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.618377][ T5956] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 202.627406][T10971] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 202.634777][ T5956] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 202.652911][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.671571][ T5956] usb 5-1: config 0 descriptor?? [ 202.881358][T10953] ªªªªªª: renamed from wg2 (while UP) [ 203.003411][T10938] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.014017][T10982] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 203.016019][T10938] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.016186][T10938] bridge_slave_0: entered allmulticast mode [ 203.018713][T10938] bridge_slave_0: entered promiscuous mode [ 203.021259][T10938] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.021384][T10938] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.021509][T10938] bridge_slave_1: entered allmulticast mode [ 203.022874][T10938] bridge_slave_1: entered promiscuous mode [ 203.049892][ T5956] usbhid 5-1:0.0: can't add hid device: -71 [ 203.049984][ T5956] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 203.052926][ T5956] usb 5-1: USB disconnect, device number 34 [ 203.095451][T10938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.098199][T10938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.198396][T10938] team0: Port device team_slave_0 added [ 203.201657][T10938] team0: Port device team_slave_1 added [ 203.250206][ T30] audit: type=1400 audit(1756427155.031:1574): avc: denied { watch } for pid=10988 comm="syz.3.2189" path="/510/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 203.300852][T10938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.300868][T10938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.300889][T10938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.303517][T10938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.303533][T10938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.303554][T10938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.415311][T10938] hsr_slave_0: entered promiscuous mode [ 203.423708][T10938] hsr_slave_1: entered promiscuous mode [ 203.423983][T10938] debugfs: 'hsr0' already exists in 'hsr' [ 203.423993][T10938] Cannot create hsr debugfs directory [ 203.467570][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.482356][T10417] IPVS: stop unused estimator thread 0... [ 203.922409][T11000] syzkaller1: entered promiscuous mode [ 203.930724][T11000] syzkaller1: entered allmulticast mode [ 204.120111][T11018] io-wq is not configured for unbound workers [ 204.196105][ T5849] Bluetooth: hci3: command tx timeout [ 204.313778][T10938] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 204.331184][T10938] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 204.332102][T11027] XFS (nullb0): Invalid superblock magic number [ 204.361955][T10938] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 204.389299][T10938] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 204.473298][ T30] audit: type=1400 audit(1756427156.252:1575): avc: denied { mounton } for pid=11046 comm="syz.4.2209" path="/file0" dev="ramfs" ino=37179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 204.588243][T10938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.607401][T10938] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.620506][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.627661][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.643275][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.650466][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.955422][T10938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.321215][T10938] veth0_vlan: entered promiscuous mode [ 205.342744][T10938] veth1_vlan: entered promiscuous mode [ 205.398434][T10938] veth0_macvtap: entered promiscuous mode [ 205.465449][T10938] veth1_macvtap: entered promiscuous mode [ 205.531539][T10938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.570014][T10938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.627133][ T2928] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.643915][ T2928] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.681318][ T2928] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.778405][ T2928] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.984822][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.000713][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.015311][ T5905] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 206.053339][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.089031][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.186030][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 206.222229][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.267786][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.282714][ T5849] Bluetooth: hci3: command 0x040f tx timeout [ 206.296580][ T5905] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 206.306641][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.340560][ T5905] usb 5-1: config 0 descriptor?? [ 206.393280][T11121] vivid-000: disconnect [ 206.444888][ T9] vivid-000: reconnect [ 206.453798][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2236'. [ 206.563030][T11123] smc: adding net device bond0 with user defined pnetid SYZ2 [ 206.572174][T11123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.621459][T11130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.634544][T11130] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 206.665943][T11130] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 206.748864][T11136] pim6reg1: entered promiscuous mode [ 206.763370][ T5905] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0023/input/input40 [ 206.774073][T11136] pim6reg1: entered allmulticast mode [ 206.832596][ T5905] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0023/input/input41 [ 206.929156][ T5905] kye 0003:0458:5012.0023: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.4-1/input0 [ 207.069517][ T5905] kernel write not supported for file /12/attr/exec (pid: 5905 comm: kworker/1:6) [ 207.144382][ T5847] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 207.193200][ T5905] usb 5-1: USB disconnect, device number 35 [ 207.330080][ T5847] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 207.346233][ T5847] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 207.355613][ T5847] usb 2-1: Product: syz [ 207.359972][ T5847] usb 2-1: Manufacturer: syz [ 207.386330][ T5847] usb 2-1: SerialNumber: syz [ 207.394253][ T5847] usb 2-1: config 0 descriptor?? [ 207.402177][ T5847] ch341 2-1:0.0: ch341-uart converter detected [ 207.446941][T11164] kvm: user requested TSC rate below hardware speed [ 207.579248][T11173] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 207.612476][T11175] Bluetooth: hci0: unsupported parameter 10704 [ 207.618749][T11175] Bluetooth: hci0: unsupported parameter 262 [ 207.625195][T11175] Bluetooth: hci0: unsupported parameter 10704 [ 207.631729][T11175] Bluetooth: hci0: unsupported parameter 262 [ 208.364198][ T5849] Bluetooth: hci3: command 0x040f tx timeout [ 208.665632][ T5847] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 208.764008][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'. [ 208.775107][T11211] IPVS: Error joining to the multicast group [ 208.873456][ T9] usb 2-1: USB disconnect, device number 23 [ 208.887319][ T9] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 208.900941][ T30] audit: type=1400 audit(1756427160.684:1576): avc: denied { map } for pid=11212 comm="syz.4.2273" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 208.939475][ T9] ch341 2-1:0.0: device disconnected [ 209.435030][T11233] syz_tun: entered allmulticast mode [ 209.447134][T11232] syz_tun: left allmulticast mode [ 209.692545][ T5956] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 209.852477][ T5956] usb 6-1: Using ep0 maxpacket: 8 [ 209.860707][ T5956] usb 6-1: unable to get BOS descriptor or descriptor too short [ 209.872740][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 209.880867][ T5956] usb 6-1: config 1 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.895474][ T5956] usb 6-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 57943, setting to 1024 [ 209.908064][ T5956] usb 6-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.923927][ T5956] usb 6-1: config 1 interface 0 has no altsetting 0 [ 209.934658][ T5956] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 209.945951][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.958164][ T5956] usb 6-1: Product: syz [ 209.964862][ T5956] usb 6-1: Manufacturer: syz [ 209.969505][ T5956] usb 6-1: SerialNumber: syz [ 210.052280][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 210.059844][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.086879][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.096998][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 210.106655][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.131242][ T9] usb 2-1: config 0 descriptor?? [ 210.149551][ T9] hub 2-1:0.0: USB hub found [ 210.205373][T11250] syz_tun: entered promiscuous mode [ 210.213758][T11250] batadv_slave_0: entered promiscuous mode [ 210.220276][T11250] debugfs: 'hsr1' already exists in 'hsr' [ 210.226813][T11250] Cannot create hsr debugfs directory [ 210.232756][T11250] hsr1: entered allmulticast mode [ 210.237851][T11250] syz_tun: entered allmulticast mode [ 210.243264][T11250] batadv_slave_0: entered allmulticast mode [ 210.374546][ T9] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 210.433264][ T5849] Bluetooth: hci3: command 0x040f tx timeout [ 210.541890][T11198] Set syz1 is full, maxelem 65536 reached [ 210.590828][ T9] hid-generic 0003:046D:C31C.0024: unknown main item tag 0x7 [ 210.617761][ T9] hid-generic 0003:046D:C31C.0024: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 210.696510][T11257] gtp0: left promiscuous mode [ 210.726158][T10417] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.746322][T10417] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.770031][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.788235][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.831955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.918766][T11273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2298'. [ 210.943148][T11273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2298'. [ 210.963300][ T5847] usb 2-1: USB disconnect, device number 24 [ 211.000784][ T5956] steelseries 0003:1038:1410.0025: invalid report_count 58840 [ 211.009420][ T5956] steelseries 0003:1038:1410.0025: item 0 2 1 9 parsing failed [ 211.022616][ T5956] steelseries 0003:1038:1410.0025: parse failed [ 211.028972][ T5956] steelseries 0003:1038:1410.0025: probe with driver steelseries failed with error -22 [ 211.157798][T11286] input: syz1 as /devices/virtual/input/input42 [ 211.207137][ T5956] usb 6-1: USB disconnect, device number 2 [ 211.432512][T11301] netlink: 'syz.3.2309': attribute type 5 has an invalid length. [ 211.573465][T11311] input: syz0 as /devices/virtual/input/input43 [ 211.724355][ T30] audit: type=1400 audit(1756427163.515:1577): avc: denied { accept } for pid=11317 comm="syz.1.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 211.801627][ T30] audit: type=1400 audit(1756427163.595:1578): avc: denied { listen } for pid=11317 comm="syz.1.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 213.478093][T11374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.670448][ T5905] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 213.837610][ T30] audit: type=1400 audit(1756427165.627:1579): avc: denied { listen } for pid=11385 comm="syz.5.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 213.860393][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 213.869657][ T5905] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 213.886711][ T5905] usb 2-1: config 0 has no interface number 0 [ 213.890360][ T30] audit: type=1400 audit(1756427165.657:1580): avc: denied { accept } for pid=11385 comm="syz.5.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 213.900021][ T5905] usb 2-1: config 0 interface 12 has no altsetting 0 [ 213.928602][ T5905] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 213.938750][ T5905] usb 2-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 213.956960][ T5905] usb 2-1: Product: syz [ 213.966920][ T5905] usb 2-1: Manufacturer: syz [ 213.977551][ T5905] usb 2-1: SerialNumber: syz [ 213.991607][ T5905] usb 2-1: config 0 descriptor?? [ 214.133270][T11344] kexec: Could not allocate control_code_buffer [ 214.254371][T11397] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 214.577284][T11410] unknown channel width for channel at 909000KHz? [ 214.584508][T11410] unknown channel width for channel at 909000KHz? [ 214.592198][T11410] unknown channel width for channel at 909000KHz? [ 214.819241][ T5905] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 214.827792][ T5905] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 214.836653][ T5905] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 214.853238][ T5905] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 214.876065][ T5905] usb 2-1: USB disconnect, device number 25 [ 215.263793][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2363'. [ 216.099254][ T5847] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 216.169455][ T5905] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 216.252616][ T5847] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 216.260909][ T5847] usb 5-1: config 0 has no interface number 0 [ 216.268423][ T5847] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 216.277935][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.286333][ T5847] usb 5-1: Product: syz [ 216.290571][ T5847] usb 5-1: Manufacturer: syz [ 216.295161][ T5847] usb 5-1: SerialNumber: syz [ 216.302130][ T5847] usb 5-1: config 0 descriptor?? [ 216.321058][ T5905] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 216.333460][ T5905] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 216.343519][ T5905] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.354076][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.366887][T11451] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 216.402349][ T5905] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 216.516043][ T5847] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 216.525382][ T5847] usb 5-1: No valid video chain found. [ 216.533144][ T5847] usb 5-1: USB disconnect, device number 36 [ 216.603991][ T5905] usb 6-1: USB disconnect, device number 3 [ 216.679043][ T5951] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 216.768916][ T5956] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 216.829343][ T5951] usb 4-1: Using ep0 maxpacket: 16 [ 216.836563][ T5951] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 216.845837][ T5951] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.855929][ T5951] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.867032][ T5951] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.876153][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.884179][ T5951] usb 4-1: Product: syz [ 216.888312][ T5951] usb 4-1: Manufacturer: syz [ 216.892899][ T5951] usb 4-1: SerialNumber: syz [ 216.930312][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 216.938633][ T5956] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 216.947993][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.956155][ T5956] usb 2-1: Product: syz [ 216.960354][ T5956] usb 2-1: Manufacturer: syz [ 216.964953][ T5956] usb 2-1: SerialNumber: syz [ 216.972124][ T5956] usb 2-1: config 0 descriptor?? [ 217.285384][ T30] audit: type=1400 audit(1756427169.078:1581): avc: denied { shutdown } for pid=11472 comm="syz.4.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.322066][ T5951] usb 4-1: 0:2 : does not exist [ 217.390702][ T5956] airspy 2-1:0.0: Board ID: 00 [ 217.395521][ T5956] airspy 2-1:0.0: Firmware version: [ 217.471038][ T30] audit: type=1400 audit(1756427169.268:1582): avc: denied { listen } for pid=11484 comm="syz.0.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 217.471777][ T30] audit: type=1400 audit(1756427169.268:1583): avc: denied { accept } for pid=11484 comm="syz.0.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 217.491595][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.519079][T11486] raw_sendmsg: syz.5.2387 forgot to set AF_INET. Fix it! [ 217.658563][ T5847] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 217.795808][ T5956] airspy 2-1:0.0: usb_control_msg() failed -71 request 0e [ 217.808383][ T5847] usb 5-1: Using ep0 maxpacket: 8 [ 217.809698][ T5847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.809739][ T5847] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 217.809759][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.811501][ T5847] usb 5-1: config 0 descriptor?? [ 217.815643][ T5956] airspy 2-1:0.0: Registered as swradio24 [ 217.830758][ T5847] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 217.835126][ T5956] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 217.878421][ T5956] usb 2-1: USB disconnect, device number 26 [ 218.164348][ T5905] usb 4-1: USB disconnect, device number 27 [ 218.480241][T11498] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2394'. [ 218.493375][T11498] gretap0: entered promiscuous mode [ 218.510406][T11498] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2394'. [ 218.519562][T11498] 0ªî{X¹¦: renamed from gretap0 [ 218.526047][T11498] 0ªî{X¹¦: left promiscuous mode [ 218.531124][T11498] 0ªî{X¹¦: entered allmulticast mode [ 218.537832][T11498] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 218.688825][ T5956] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 218.748421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.869920][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.896986][ T5956] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 218.915427][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.935168][ T5956] usb 6-1: config 0 descriptor?? [ 219.047225][ T5847] gspca_vc032x: reg_w err -71 [ 219.053710][ T5847] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 219.073823][ T5847] usb 5-1: USB disconnect, device number 37 [ 219.183800][ T30] audit: type=1400 audit(1756427170.969:1584): avc: denied { bind } for pid=11532 comm="syz.3.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 219.243887][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'. [ 219.284685][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'. [ 219.393159][T11546] tls_set_device_offload: netdev not found [ 219.412068][ T5956] holtek 0003:1241:5015.0026: item fetching failed at offset 1/5 [ 219.430700][ T5956] holtek 0003:1241:5015.0026: parse failed [ 219.436569][ T5956] holtek 0003:1241:5015.0026: probe with driver holtek failed with error -22 [ 219.604198][ T1214] usb 6-1: USB disconnect, device number 4 [ 220.121721][ T30] audit: type=1400 audit(1756427171.890:1585): avc: denied { create } for pid=11561 comm="syz.0.2423" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 220.654551][ T9] libceph: connect (1)[c::]:6789 error -101 [ 220.672749][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 220.688318][ T1214] libceph: connect (1)[c::]:6789 error -101 [ 220.704687][ T1214] libceph: mon0 (1)[c::]:6789 connect error [ 220.967995][ T1214] libceph: connect (1)[c::]:6789 error -101 [ 220.974081][ T1214] libceph: mon0 (1)[c::]:6789 connect error [ 220.990440][ T9] libceph: connect (1)[c::]:6789 error -101 [ 221.000021][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 221.434813][T11571] ceph: No mds server is up or the cluster is laggy [ 221.439687][T11577] ceph: No mds server is up or the cluster is laggy [ 221.618863][T11618] lo speed is unknown, defaulting to 1000 [ 221.701890][T11618] SELinux: ebitmap start bit (402653440) is beyond the end of the bitmap (1472) [ 221.716654][T11618] SELinux: failed to load policy [ 221.822812][ T30] audit: type=1400 audit(1756427173.620:1586): avc: denied { search } for pid=11624 comm="syz.5.2449" name="/" dev="configfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.857593][ T30] audit: type=1400 audit(1756427173.641:1587): avc: denied { search } for pid=11624 comm="syz.5.2449" name="/" dev="configfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.861513][T11627] netlink: 'syz.3.2450': attribute type 22 has an invalid length. [ 221.892916][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2450'. [ 221.908926][ T30] audit: type=1400 audit(1756427173.641:1588): avc: denied { read open } for pid=11624 comm="syz.5.2449" path="/" dev="configfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.914238][T10417] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.940216][T11627] netlink: 'syz.3.2450': attribute type 22 has an invalid length. [ 221.951225][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2450'. [ 221.963794][T10417] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.974694][T10417] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.983585][T10417] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.022335][T11632] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 222.031394][T11632] SELinux: failed to load policy [ 222.091340][T11634] netlink: 'syz.0.2453': attribute type 1 has an invalid length. [ 222.149516][T11634] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.157881][T11634] bond2: (slave bond3): making interface the new active one [ 222.167492][T11634] bond2: (slave bond3): Enslaving as an active interface with an up link [ 222.343211][T11650] veth0_to_bridge: entered promiscuous mode [ 222.353326][T11649] veth0_to_bridge: left promiscuous mode [ 222.856246][ T5905] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 222.867671][T11685] [ 222.870011][T11685] ===================================================== [ 222.876935][T11685] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 222.884368][T11685] syzkaller #0 Not tainted [ 222.888759][T11685] ----------------------------------------------------- [ 222.895659][T11685] syz.0.2476/11685 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 222.903352][T11685] ffff8880511ee600 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 222.912036][T11685] [ 222.912036][T11685] and this task is already holding: [ 222.919373][T11685] ffff888034bc0028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 222.929183][T11685] which would create a new lock dependency: [ 222.935042][T11685] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 222.943110][T11685] [ 222.943110][T11685] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 222.952539][T11685] (&dev->event_lock#2){..-.}-{3:3} [ 222.952564][T11685] [ 222.952564][T11685] ... which became SOFTIRQ-irq-safe at: [ 222.965416][T11685] lock_acquire+0x179/0x350 [ 222.970003][T11685] _raw_spin_lock_irqsave+0x3a/0x60 [ 222.975281][T11685] input_event+0x74/0xd0 [ 222.979600][T11685] hidinput_hid_event+0x1d55/0x2420 [ 222.984870][T11685] hid_process_event+0x4b7/0x5e0 [ 222.989881][T11685] hid_report_raw_event+0xa0a/0x1290 [ 222.995230][T11685] __hid_input_report.constprop.0+0x33f/0x450 [ 223.001358][T11685] hid_irq_in+0x35e/0x870 [ 223.005754][T11685] __usb_hcd_giveback_urb+0x388/0x610 [ 223.011204][T11685] usb_hcd_giveback_urb+0x39b/0x450 [ 223.016472][T11685] dummy_timer+0x1814/0x3a30 [ 223.021126][T11685] __hrtimer_run_queues+0x1ff/0xad0 [ 223.026408][T11685] hrtimer_run_softirq+0x17d/0x350 [ 223.031584][T11685] handle_softirqs+0x216/0x8e0 [ 223.036424][T11685] __irq_exit_rcu+0x109/0x170 [ 223.041168][T11685] irq_exit_rcu+0x9/0x30 [ 223.045475][T11685] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 223.051172][T11685] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.057214][T11685] finish_task_switch.isra.0+0x22a/0xc10 [ 223.062912][T11685] __schedule+0x1198/0x5de0 [ 223.067477][T11685] preempt_schedule_common+0x44/0xc0 [ 223.072827][T11685] preempt_schedule_thunk+0x16/0x30 [ 223.078093][T11685] _raw_spin_unlock+0x3e/0x50 [ 223.082833][T11685] copy_page_range+0x1f7d/0x5c80 [ 223.087839][T11685] dup_mmap+0xe88/0x21d0 [ 223.092163][T11685] copy_process+0x4081/0x7690 [ 223.096993][T11685] kernel_clone+0xfc/0x930 [ 223.101474][T11685] __do_sys_clone+0xce/0x120 [ 223.106133][T11685] do_syscall_64+0xcd/0x4c0 [ 223.110706][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.116660][T11685] [ 223.116660][T11685] to a SOFTIRQ-irq-unsafe lock: [ 223.123648][T11685] (tasklist_lock){.+.+}-{3:3} [ 223.123668][T11685] [ 223.123668][T11685] ... which became SOFTIRQ-irq-unsafe at: [ 223.136250][T11685] ... [ 223.136255][T11685] lock_acquire+0x179/0x350 [ 223.143378][T11685] _raw_read_lock+0x5f/0x70 [ 223.147943][T11685] __do_wait+0x105/0x890 [ 223.152254][T11685] do_wait+0x21e/0x5a0 [ 223.156390][T11685] kernel_wait+0x9f/0x160 [ 223.160780][T11685] call_usermodehelper_exec_work+0xf1/0x170 [ 223.166739][T11685] process_one_work+0x9cf/0x1b70 [ 223.171740][T11685] worker_thread+0x6c8/0xf10 [ 223.176391][T11685] kthread+0x3c5/0x780 [ 223.180523][T11685] ret_from_fork+0x5d7/0x6f0 [ 223.185172][T11685] ret_from_fork_asm+0x1a/0x30 [ 223.190002][T11685] [ 223.190002][T11685] other info that might help us debug this: [ 223.190002][T11685] [ 223.200247][T11685] Chain exists of: [ 223.200247][T11685] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 223.200247][T11685] [ 223.213794][T11685] Possible interrupt unsafe locking scenario: [ 223.213794][T11685] [ 223.222097][T11685] CPU0 CPU1 [ 223.227437][T11685] ---- ---- [ 223.232775][T11685] lock(tasklist_lock); [ 223.236994][T11685] local_irq_disable(); [ 223.243720][T11685] lock(&dev->event_lock#2); [ 223.250895][T11685] lock(&client->buffer_lock); [ 223.258244][T11685] [ 223.261671][T11685] lock(&dev->event_lock#2); [ 223.266501][T11685] [ 223.266501][T11685] *** DEADLOCK *** [ 223.266501][T11685] [ 223.274615][T11685] 7 locks held by syz.0.2476/11685: [ 223.279783][T11685] #0: ffff88802b344118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 223.288903][T11685] #1: ffff888022310230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 223.298996][T11685] #2: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 223.308632][T11685] #3: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 223.318180][T11685] #4: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 223.327294][T11685] #5: ffff888034bc0028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 223.337536][T11685] #6: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 223.346562][T11685] [ 223.346562][T11685] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 223.356938][T11685] -> (&dev->event_lock#2){..-.}-{3:3} { [ 223.362567][T11685] IN-SOFTIRQ-W at: [ 223.366607][T11685] lock_acquire+0x179/0x350 [ 223.372916][T11685] _raw_spin_lock_irqsave+0x3a/0x60 [ 223.379925][T11685] input_event+0x74/0xd0 [ 223.385975][T11685] hidinput_hid_event+0x1d55/0x2420 [ 223.392975][T11685] hid_process_event+0x4b7/0x5e0 [ 223.399717][T11685] hid_report_raw_event+0xa0a/0x1290 [ 223.406801][T11685] __hid_input_report.constprop.0+0x33f/0x450 [ 223.414667][T11685] hid_irq_in+0x35e/0x870 [ 223.420799][T11685] __usb_hcd_giveback_urb+0x388/0x610 [ 223.427976][T11685] usb_hcd_giveback_urb+0x39b/0x450 [ 223.434979][T11685] dummy_timer+0x1814/0x3a30 [ 223.441368][T11685] __hrtimer_run_queues+0x1ff/0xad0 [ 223.448366][T11685] hrtimer_run_softirq+0x17d/0x350 [ 223.455278][T11685] handle_softirqs+0x216/0x8e0 [ 223.461846][T11685] __irq_exit_rcu+0x109/0x170 [ 223.468327][T11685] irq_exit_rcu+0x9/0x30 [ 223.474370][T11685] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 223.481803][T11685] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.489583][T11685] finish_task_switch.isra.0+0x22a/0xc10 [ 223.497023][T11685] __schedule+0x1198/0x5de0 [ 223.503323][T11685] preempt_schedule_common+0x44/0xc0 [ 223.510406][T11685] preempt_schedule_thunk+0x16/0x30 [ 223.517409][T11685] _raw_spin_unlock+0x3e/0x50 [ 223.523885][T11685] copy_page_range+0x1f7d/0x5c80 [ 223.530627][T11685] dup_mmap+0xe88/0x21d0 [ 223.536673][T11685] copy_process+0x4081/0x7690 [ 223.543153][T11685] kernel_clone+0xfc/0x930 [ 223.549385][T11685] __do_sys_clone+0xce/0x120 [ 223.555781][T11685] do_syscall_64+0xcd/0x4c0 [ 223.562087][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.569780][T11685] INITIAL USE at: [ 223.573738][T11685] lock_acquire+0x179/0x350 [ 223.579960][T11685] _raw_spin_lock_irqsave+0x3a/0x60 [ 223.586880][T11685] input_inject_event+0x9f/0x3b0 [ 223.593537][T11685] led_set_brightness+0x217/0x290 [ 223.600279][T11685] kbd_led_trigger_activate+0xcb/0x110 [ 223.607456][T11685] led_trigger_set+0x59a/0xc50 [ 223.613941][T11685] led_trigger_set_default+0x1e0/0x2e0 [ 223.621125][T11685] led_classdev_register_ext+0x7b8/0xa10 [ 223.628478][T11685] input_leds_connect+0x552/0x8e0 [ 223.635218][T11685] input_attach_handler.isra.0+0x176/0x250 [ 223.642758][T11685] input_register_device+0xab9/0x1180 [ 223.649848][T11685] atkbd_connect+0x5f8/0xa40 [ 223.656166][T11685] serio_driver_probe+0x7c/0xd0 [ 223.662732][T11685] really_probe+0x241/0xa90 [ 223.668953][T11685] __driver_probe_device+0x1de/0x440 [ 223.675954][T11685] driver_probe_device+0x4c/0x1b0 [ 223.682692][T11685] __driver_attach+0x283/0x580 [ 223.689169][T11685] bus_for_each_dev+0x13e/0x1d0 [ 223.695742][T11685] serio_handle_event+0x335/0xc30 [ 223.702483][T11685] process_one_work+0x9cf/0x1b70 [ 223.709138][T11685] worker_thread+0x6c8/0xf10 [ 223.715459][T11685] kthread+0x3c5/0x780 [ 223.721243][T11685] ret_from_fork+0x5d7/0x6f0 [ 223.727545][T11685] ret_from_fork_asm+0x1a/0x30 [ 223.734026][T11685] } [ 223.736588][T11685] ... key at: [] __key.7+0x0/0x40 [ 223.743767][T11685] -> (&client->buffer_lock){....}-{3:3} { [ 223.749474][T11685] INITIAL USE at: [ 223.753344][T11685] lock_acquire+0x179/0x350 [ 223.759395][T11685] _raw_spin_lock+0x2e/0x40 [ 223.765461][T11685] evdev_pass_values+0x10e/0x9b0 [ 223.771962][T11685] evdev_events+0x1bb/0x390 [ 223.778010][T11685] input_pass_values+0x74e/0x880 [ 223.784495][T11685] input_handle_event+0xf00/0x14d0 [ 223.791152][T11685] input_inject_event+0x1e8/0x3b0 [ 223.797722][T11685] evdev_write+0x457/0x750 [ 223.803685][T11685] vfs_write+0x29d/0x11d0 [ 223.809555][T11685] ksys_write+0x1f8/0x250 [ 223.815424][T11685] do_syscall_64+0xcd/0x4c0 [ 223.821469][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.828902][T11685] } [ 223.831376][T11685] ... key at: [] __key.1+0x0/0x40 [ 223.838466][T11685] ... acquired at: [ 223.842241][T11685] _raw_spin_lock+0x2e/0x40 [ 223.846902][T11685] evdev_pass_values+0x10e/0x9b0 [ 223.851997][T11685] evdev_events+0x1bb/0x390 [ 223.856669][T11685] input_pass_values+0x74e/0x880 [ 223.861761][T11685] input_handle_event+0xf00/0x14d0 [ 223.867030][T11685] input_inject_event+0x1e8/0x3b0 [ 223.872209][T11685] evdev_write+0x457/0x750 [ 223.876780][T11685] vfs_write+0x29d/0x11d0 [ 223.881259][T11685] ksys_write+0x1f8/0x250 [ 223.885737][T11685] do_syscall_64+0xcd/0x4c0 [ 223.890391][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.896433][T11685] [ 223.898734][T11685] [ 223.898734][T11685] the dependencies between the lock to be acquired [ 223.898740][T11685] and SOFTIRQ-irq-unsafe lock: [ 223.912203][T11685] -> (tasklist_lock){.+.+}-{3:3} { [ 223.917476][T11685] HARDIRQ-ON-R at: [ 223.921603][T11685] lock_acquire+0x179/0x350 [ 223.928087][T11685] _raw_read_lock+0x5f/0x70 [ 223.934629][T11685] __do_wait+0x105/0x890 [ 223.940853][T11685] do_wait+0x21e/0x5a0 [ 223.946903][T11685] kernel_wait+0x9f/0x160 [ 223.953207][T11685] call_usermodehelper_exec_work+0xf1/0x170 [ 223.961082][T11685] process_one_work+0x9cf/0x1b70 [ 223.967997][T11685] worker_thread+0x6c8/0xf10 [ 223.974562][T11685] kthread+0x3c5/0x780 [ 223.980605][T11685] ret_from_fork+0x5d7/0x6f0 [ 223.987169][T11685] ret_from_fork_asm+0x1a/0x30 [ 223.993914][T11685] SOFTIRQ-ON-R at: [ 223.998048][T11685] lock_acquire+0x179/0x350 [ 224.004541][T11685] _raw_read_lock+0x5f/0x70 [ 224.011017][T11685] __do_wait+0x105/0x890 [ 224.017242][T11685] do_wait+0x21e/0x5a0 [ 224.023293][T11685] kernel_wait+0x9f/0x160 [ 224.029601][T11685] call_usermodehelper_exec_work+0xf1/0x170 [ 224.037488][T11685] process_one_work+0x9cf/0x1b70 [ 224.044404][T11685] worker_thread+0x6c8/0xf10 [ 224.050968][T11685] kthread+0x3c5/0x780 [ 224.057010][T11685] ret_from_fork+0x5d7/0x6f0 [ 224.063574][T11685] ret_from_fork_asm+0x1a/0x30 [ 224.070312][T11685] INITIAL USE at: [ 224.074356][T11685] lock_acquire+0x179/0x350 [ 224.080755][T11685] _raw_write_lock_irq+0x36/0x50 [ 224.087581][T11685] copy_process+0x4caf/0x7690 [ 224.094151][T11685] kernel_clone+0xfc/0x930 [ 224.100460][T11685] user_mode_thread+0xc7/0x110 [ 224.107117][T11685] rest_init+0x23/0x2b0 [ 224.113180][T11685] start_kernel+0x3ee/0x4d0 [ 224.119570][T11685] x86_64_start_reservations+0x18/0x30 [ 224.126915][T11685] x86_64_start_kernel+0x130/0x190 [ 224.133930][T11685] common_startup_64+0x13e/0x148 [ 224.140760][T11685] INITIAL READ USE at: [ 224.145237][T11685] lock_acquire+0x179/0x350 [ 224.152068][T11685] _raw_read_lock+0x5f/0x70 [ 224.158892][T11685] __do_wait+0x105/0x890 [ 224.165463][T11685] do_wait+0x21e/0x5a0 [ 224.171861][T11685] kernel_wait+0x9f/0x160 [ 224.178508][T11685] call_usermodehelper_exec_work+0xf1/0x170 [ 224.186726][T11685] process_one_work+0x9cf/0x1b70 [ 224.193986][T11685] worker_thread+0x6c8/0xf10 [ 224.200898][T11685] kthread+0x3c5/0x780 [ 224.207289][T11685] ret_from_fork+0x5d7/0x6f0 [ 224.214199][T11685] ret_from_fork_asm+0x1a/0x30 [ 224.221290][T11685] } [ 224.223950][T11685] ... key at: [] tasklist_lock+0x18/0x40 [ 224.231821][T11685] ... acquired at: [ 224.235786][T11685] _raw_read_lock+0x5f/0x70 [ 224.240439][T11685] send_sigurg+0xed/0xc80 [ 224.244925][T11685] sk_send_sigurg+0x76/0x360 [ 224.249667][T11685] unix_stream_sendmsg+0xfa5/0x1340 [ 224.255035][T11685] ____sys_sendmsg+0xa98/0xc70 [ 224.259966][T11685] ___sys_sendmsg+0x134/0x1d0 [ 224.264794][T11685] __sys_sendmmsg+0x200/0x420 [ 224.269620][T11685] __x64_sys_sendmmsg+0x9c/0x100 [ 224.274710][T11685] do_syscall_64+0xcd/0x4c0 [ 224.279365][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.285411][T11685] [ 224.287711][T11685] -> (&f_owner->lock){....}-{3:3} { [ 224.292989][T11685] INITIAL USE at: [ 224.296945][T11685] lock_acquire+0x179/0x350 [ 224.303172][T11685] _raw_write_lock_irq+0x36/0x50 [ 224.309823][T11685] __f_setown+0x61/0x3c0 [ 224.315787][T11685] do_fcntl+0x1098/0x15a0 [ 224.321836][T11685] __x64_sys_fcntl+0x163/0x200 [ 224.328317][T11685] do_syscall_64+0xcd/0x4c0 [ 224.334537][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.342148][T11685] INITIAL READ USE at: [ 224.346537][T11685] lock_acquire+0x179/0x350 [ 224.353196][T11685] _raw_read_lock_irq+0x67/0x80 [ 224.360193][T11685] f_getown+0x57/0x300 [ 224.366413][T11685] sock_ioctl+0x1f2/0x6b0 [ 224.372945][T11685] __x64_sys_ioctl+0x18b/0x210 [ 224.379864][T11685] do_syscall_64+0xcd/0x4c0 [ 224.386517][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.394575][T11685] } [ 224.397134][T11685] ... key at: [] __key.1+0x0/0x40 [ 224.404311][T11685] ... acquired at: [ 224.408176][T11685] _raw_read_lock_irqsave+0x74/0x90 [ 224.413530][T11685] send_sigio+0x31/0x3e0 [ 224.417928][T11685] kill_fasync+0x214/0x510 [ 224.422505][T11685] lease_break_callback+0x23/0x30 [ 224.427687][T11685] __break_lease+0x674/0x1810 [ 224.432513][T11685] do_dentry_open+0x91f/0x1530 [ 224.437439][T11685] vfs_open+0x82/0x3f0 [ 224.441664][T11685] path_openat+0x1de4/0x2cb0 [ 224.446406][T11685] do_filp_open+0x20b/0x470 [ 224.451062][T11685] do_sys_openat2+0x11b/0x1d0 [ 224.455897][T11685] __x64_sys_open+0x153/0x1e0 [ 224.460744][T11685] do_syscall_64+0xcd/0x4c0 [ 224.465415][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.471459][T11685] [ 224.473759][T11685] -> (&new->fa_lock){....}-{3:3} { [ 224.478858][T11685] INITIAL USE at: [ 224.482727][T11685] lock_acquire+0x179/0x350 [ 224.488776][T11685] _raw_write_lock_irq+0x36/0x50 [ 224.495255][T11685] fasync_remove_entry+0xb2/0x1e0 [ 224.501826][T11685] fasync_helper+0xaf/0xd0 [ 224.507789][T11685] fuse_dev_fasync+0x6f/0xa0 [ 224.513921][T11685] __fput+0x968/0xb70 [ 224.519451][T11685] task_work_run+0x14d/0x240 [ 224.525584][T11685] exit_to_user_mode_loop+0xeb/0x110 [ 224.532412][T11685] do_syscall_64+0x3f6/0x4c0 [ 224.538547][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.545985][T11685] INITIAL READ USE at: [ 224.550290][T11685] lock_acquire+0x179/0x350 [ 224.556776][T11685] _raw_read_lock_irqsave+0x74/0x90 [ 224.563950][T11685] kill_fasync+0x138/0x510 [ 224.570344][T11685] do_tee+0xc78/0x1020 [ 224.576388][T11685] __x64_sys_tee+0x136/0x1f0 [ 224.582950][T11685] do_syscall_64+0xcd/0x4c0 [ 224.589429][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.597300][T11685] } [ 224.599774][T11685] ... key at: [] __key.0+0x0/0x40 [ 224.606866][T11685] ... acquired at: [ 224.610643][T11685] lock_acquire+0x179/0x350 [ 224.615302][T11685] _raw_read_lock_irqsave+0x74/0x90 [ 224.620648][T11685] kill_fasync+0x138/0x510 [ 224.625218][T11685] evdev_pass_values+0x619/0x9b0 [ 224.630312][T11685] evdev_events+0x1bb/0x390 [ 224.634971][T11685] input_pass_values+0x74e/0x880 [ 224.640063][T11685] input_handle_event+0xf00/0x14d0 [ 224.645330][T11685] input_inject_event+0x1e8/0x3b0 [ 224.650509][T11685] evdev_write+0x457/0x750 [ 224.655080][T11685] vfs_write+0x29d/0x11d0 [ 224.659560][T11685] ksys_write+0x1f8/0x250 [ 224.664039][T11685] do_syscall_64+0xcd/0x4c0 [ 224.668695][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.674741][T11685] [ 224.677042][T11685] [ 224.677042][T11685] stack backtrace: [ 224.682906][T11685] CPU: 1 UID: 0 PID: 11685 Comm: syz.0.2476 Not tainted syzkaller #0 PREEMPT(full) [ 224.682925][T11685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.682938][T11685] Call Trace: [ 224.682944][T11685] [ 224.682949][T11685] dump_stack_lvl+0x116/0x1f0 [ 224.682966][T11685] check_irq_usage+0x7dc/0x920 [ 224.682986][T11685] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 224.683006][T11685] ? check_path.constprop.0+0x24/0x50 [ 224.683028][T11685] ? __lock_acquire+0x12bc/0x1ce0 [ 224.683048][T11685] __lock_acquire+0x12bc/0x1ce0 [ 224.683072][T11685] lock_acquire+0x179/0x350 [ 224.683092][T11685] ? kill_fasync+0x138/0x510 [ 224.683113][T11685] _raw_read_lock_irqsave+0x74/0x90 [ 224.683127][T11685] ? kill_fasync+0x138/0x510 [ 224.683145][T11685] kill_fasync+0x138/0x510 [ 224.683164][T11685] evdev_pass_values+0x619/0x9b0 [ 224.683185][T11685] evdev_events+0x1bb/0x390 [ 224.683204][T11685] input_pass_values+0x74e/0x880 [ 224.683224][T11685] input_handle_event+0xf00/0x14d0 [ 224.683242][T11685] ? _copy_from_user+0x59/0xd0 [ 224.683262][T11685] input_inject_event+0x1e8/0x3b0 [ 224.683282][T11685] evdev_write+0x457/0x750 [ 224.683302][T11685] ? __pfx_evdev_write+0x10/0x10 [ 224.683321][T11685] ? bpf_lsm_file_permission+0x9/0x10 [ 224.683339][T11685] ? security_file_permission+0x71/0x210 [ 224.683361][T11685] ? rw_verify_area+0xcf/0x6c0 [ 224.683382][T11685] ? __pfx_evdev_write+0x10/0x10 [ 224.683401][T11685] vfs_write+0x29d/0x11d0 [ 224.683415][T11685] ? __pfx_vfs_write+0x10/0x10 [ 224.683428][T11685] ? find_held_lock+0x2b/0x80 [ 224.683444][T11685] ? __fget_files+0x204/0x3c0 [ 224.683460][T11685] ? __fget_files+0x20e/0x3c0 [ 224.683477][T11685] ksys_write+0x1f8/0x250 [ 224.683490][T11685] ? __pfx_ksys_write+0x10/0x10 [ 224.683506][T11685] do_syscall_64+0xcd/0x4c0 [ 224.683521][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.683535][T11685] RIP: 0033:0x7f10c658ebe9 [ 224.683547][T11685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.683561][T11685] RSP: 002b:00007f10c74b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 224.683575][T11685] RAX: ffffffffffffffda RBX: 00007f10c67b5fa0 RCX: 00007f10c658ebe9 [ 224.683584][T11685] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 224.683593][T11685] RBP: 00007f10c6611e19 R08: 0000000000000000 R09: 0000000000000000 [ 224.683601][T11685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.683610][T11685] R13: 00007f10c67b6038 R14: 00007f10c67b5fa0 R15: 00007ffe94e95b08 [ 224.683623][T11685] [ 225.114726][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 225.121048][ T5905] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.129050][ T5905] usb 5-1: config 0 has no interface number 0 [ 225.136803][ T5905] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 225.145916][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.153884][ T5905] usb 5-1: Product: syz [ 225.158100][ T5905] usb 5-1: Manufacturer: syz [ 225.162690][ T5905] usb 5-1: SerialNumber: syz [ 225.168068][ T5905] usb 5-1: config 0 descriptor?? [ 225.174196][ T5905] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 225.183006][ T5905] usb 5-1: selecting invalid altsetting 1 [ 225.188771][ T5905] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 225.196490][ T5905] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 225.206751][ T5905] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 225.215676][ T5905] usb 5-1: media controller created [ 225.224801][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.375143][ T5905] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 225.382153][ T5905] zl10353_read_register: readreg error (reg=127, ret==-71) [ 225.390287][ T5905] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 225.404370][ T5905] usb 5-1: USB disconnect, device number 38