last executing test programs: 3m13.677227619s ago: executing program 32 (id=2152): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) 2m51.427870753s ago: executing program 33 (id=2688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2m25.226317256s ago: executing program 4 (id=3336): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000001240)) 2m25.221070111s ago: executing program 4 (id=3337): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x6, 0x25dfdbff, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @empty}]}, 0x24}}, 0x48010) 2m25.188302622s ago: executing program 4 (id=3338): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_newneigh={0x2c, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfd3fe, {0x2, 0x0, 0x0, r1, 0x80, 0xa2, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) 2m25.148160422s ago: executing program 4 (id=3339): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) 2m25.085682414s ago: executing program 4 (id=3340): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002500010324bd7000000100250100"], 0x14}}, 0x0) bind(r0, 0x0, 0x0) 2m10.07997273s ago: executing program 34 (id=3340): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002500010324bd7000000100250100"], 0x14}}, 0x0) bind(r0, 0x0, 0x0) 2m4.41496754s ago: executing program 6 (id=3758): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0xe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6cf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) 2m4.23465206s ago: executing program 6 (id=3762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x6, 0x301}, 0x14}}, 0x0) 2m4.073803853s ago: executing program 6 (id=3765): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 2m3.869502329s ago: executing program 6 (id=3768): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) 2m3.586522295s ago: executing program 6 (id=3769): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m2.552588152s ago: executing program 6 (id=3783): r0 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8b) 2m2.123573103s ago: executing program 7 (id=3791): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @local, 0x6e}}, {{0xa, 0x800, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 2m2.074602773s ago: executing program 7 (id=3792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x205, 0xfffffffc, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}]}, 0x3c}}, 0x0) 2m2.016860955s ago: executing program 7 (id=3794): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x1, 0xdd9f83, 0x1, 0xb, 0x1, 0x2, 0x8008, 0x20000722, 0xed, 0x4, 0xff, 0x8, 0xb763599953cb090f, {0x10000, 0x6fd8e84b}, 0x3, 0xc1}}) 2m1.909588205s ago: executing program 7 (id=3796): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m1.647158091s ago: executing program 7 (id=3802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffe}, @NFTA_LOG_PREFIX={0xe, 0x2, 0x1, 0x0, ':\x01( !$)*}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 2m1.594851151s ago: executing program 7 (id=3803): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m55.222173335s ago: executing program 3 (id=3908): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init() fchmod(r0, 0x40) 1m55.089035093s ago: executing program 3 (id=3910): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) 1m54.98605697s ago: executing program 3 (id=3911): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x0, 0x46, 0x0, 0x9}, 0x28) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 1m54.373463488s ago: executing program 3 (id=3914): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000400)={0x44, r1, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 1m54.31847485s ago: executing program 3 (id=3915): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1m53.91069404s ago: executing program 3 (id=3922): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f05, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='block_bio_remap\x00', r0}, 0x18) sync() 1m47.460997109s ago: executing program 35 (id=3783): r0 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8b) 1m46.528164021s ago: executing program 36 (id=3803): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m38.873571144s ago: executing program 37 (id=3922): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f05, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='block_bio_remap\x00', r0}, 0x18) sync() 1m23.857565585s ago: executing program 9 (id=4341): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x20, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x58}}, 0x0) 1m23.742549425s ago: executing program 9 (id=4346): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d000c6c7ea60864160af365040043000a001d002b7f6f4c9ee517d34460bc060000f0a705651e6182949a3651f60a84f709d182c5bb5b64f69853362a65a113827e4b4237268a9a", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m23.632970921s ago: executing program 9 (id=4349): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendto$inet6(r0, 0x0, 0x0, 0x40, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @remote, 0x1ff}, 0x1c) 1m23.460013897s ago: executing program 9 (id=4355): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x1) 1m23.290734034s ago: executing program 9 (id=4358): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x5, 0x2}) 1m23.171449021s ago: executing program 9 (id=4361): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='sys_exit\x00', r0}, 0x18) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 1m8.118089597s ago: executing program 38 (id=4361): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='sys_exit\x00', r0}, 0x18) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 25.358520006s ago: executing program 5 (id=5274): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)={0x10, 0xfffffff5, 0x3}, 0x10) 25.18227426s ago: executing program 5 (id=5276): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0xffffffff, 0x4) 24.927377237s ago: executing program 5 (id=5279): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000040)) 24.764844254s ago: executing program 5 (id=5281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000002c0)) 24.513033095s ago: executing program 5 (id=5283): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) 24.404317534s ago: executing program 5 (id=5286): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4001, 0x0, 0x100000, 0x7}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) 12.955462819s ago: executing program 8 (id=5387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001b00850000008200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 12.793075884s ago: executing program 8 (id=5399): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x39, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x81, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x28, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0xa, 0x11}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0) 11.088824288s ago: executing program 0 (id=5419): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 10.96359532s ago: executing program 0 (id=5421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, 0x2}) 10.878478995s ago: executing program 8 (id=5423): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x9}, 0xc) 8.934293691s ago: executing program 39 (id=5286): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4001, 0x0, 0x100000, 0x7}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) 8.454896814s ago: executing program 8 (id=5425): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000d5000000c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a058c108d3a4af784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a8850c0209c00666486cce5de49a22ed54e944581d84d8a36b11a07d18b06a733e0e74bedd5bc51789235883a09bd5073072cba5301b7611831e7a59f06ff"], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 8.449451684s ago: executing program 0 (id=5429): r0 = open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x20010, r0, 0x10000000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) 8.382683643s ago: executing program 0 (id=5430): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1c0c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x20, 0xe, 0x5, {0x5, 0xb, "979938"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.247807196s ago: executing program 2 (id=5432): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x599681) 8.136749471s ago: executing program 2 (id=5433): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x39, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x81, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x28, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0xa, 0x11}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0) 7.519445834s ago: executing program 1 (id=5437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 7.392153333s ago: executing program 1 (id=5438): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) rt_sigpending(0x0, 0x1000000) 7.29912687s ago: executing program 1 (id=5439): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x109, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) 7.167865129s ago: executing program 1 (id=5440): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x644, 0x1, 0x3, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x5, 0x2800, 0x7f, 0x2, 0xba2, 0xd, 0x23, {0x5, 0xffffffff}, 0xcd, 0x9}}) 7.086025351s ago: executing program 1 (id=5441): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x1ff, 0x5, 0x1000}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48) 6.416081198s ago: executing program 8 (id=5442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x98, r1, 0x1, 0x0, 0x2000, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 6.333819192s ago: executing program 0 (id=5443): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05100000000000000109022d00010000000009040000010300000009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0) 6.191980068s ago: executing program 2 (id=5444): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.023533943s ago: executing program 2 (id=5445): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x800000000000) 5.866976824s ago: executing program 2 (id=5446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="88010000", @ANYRES16=r1, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 20.476724ms ago: executing program 4 (id=5424): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendfile(r0, r0, 0x0, 0x9) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0xa00, 0x4000a00}) 19.721529ms ago: executing program 8 (id=5456): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17.714527ms ago: executing program 1 (id=5457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}]}]}], {0x14}}, 0x98}}, 0x0) 4.170588ms ago: executing program 2 (id=5458): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x3, 0xfffffffd}]}, 0x10) syz_emit_ethernet(0x22, &(0x7f00000029c0)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x4, 0x14, 0x68, 0x0, 0x0, 0x84, 0x0, @broadcast, @multicast1}}}}}, 0x0) 0s ago: executing program 0 (id=5459): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendfile(r1, r0, 0x0, 0x80000004) kernel console output (not intermixed with test programs): mce write submit urb error = -90 [ 283.360105][ T5960] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 283.370705][ T976] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 283.381504][ T5960] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 283.388627][ T5960] usb 9-1: media controller created [ 283.404866][ T6018] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 283.412484][ T976] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 283.427051][ T5960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.440962][ T976] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input31 [ 283.472011][ T6018] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 283.473814][ T976] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 283.491293][ T6018] dib0700: firmware download failed at 7 with -22 [ 283.501021][ T6018] usb 2-1: USB disconnect, device number 46 [ 283.510875][ T976] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 283.530734][ T57] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 283.533037][ T976] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 283.549204][ T5960] zl10353_read_register: readreg error (reg=127, ret==0) [ 283.572018][ T976] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 283.595825][ T5960] usb 9-1: USB disconnect, device number 7 [ 283.601747][ T976] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 283.621362][ T976] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 283.641166][ T976] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 283.660650][ T976] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 283.680554][ T976] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 283.690668][ T57] usb 1-1: Using ep0 maxpacket: 16 [ 283.697236][ T57] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.700534][ T976] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 283.708908][ T57] usb 1-1: config 0 interface 0 has no altsetting 0 [ 283.722156][ T57] usb 1-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 283.736932][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.741034][ T976] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 283.747026][ T57] usb 1-1: config 0 descriptor?? [ 283.782642][ T976] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 283.793438][ T976] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 283.806489][ T976] usb 3-1: USB disconnect, device number 45 [ 284.160112][T15758] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4512'. [ 284.179175][ T57] logitech 0003:046D:C219.003C: unknown main item tag 0x0 [ 284.187761][ T57] logitech 0003:046D:C219.003C: unknown main item tag 0x0 [ 284.204094][ T57] logitech 0003:046D:C219.003C: unknown main item tag 0x0 [ 284.222086][ T57] logitech 0003:046D:C219.003C: unknown main item tag 0x0 [ 284.229390][ T57] logitech 0003:046D:C219.003C: unknown main item tag 0x0 [ 284.258691][ T57] logitech 0003:046D:C219.003C: hidraw0: USB HID v0.05 Device [HID 046d:c219] on usb-dummy_hcd.0-1/input0 [ 284.300833][ T57] logitech 0003:046D:C219.003C: no inputs found [ 284.481674][ T976] usb 1-1: USB disconnect, device number 16 [ 284.837405][ T5170] Bluetooth: hci1: unexpected event for opcode 0x2029 [ 285.168514][T15807] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4536'. [ 285.701887][ T976] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 285.735823][T15833] ptrace attach of "./syz-executor exec"[14838] was attempted by ""[15833] [ 285.895648][ T976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.918808][ T976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.951949][ T976] usb 9-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 285.961359][ T976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.979097][ T976] usb 9-1: config 0 descriptor?? [ 286.122147][T15848] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 286.128676][T15848] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 286.136940][T15852] netlink: 'syz.2.4556': attribute type 3 has an invalid length. [ 286.137932][T15848] vhci_hcd vhci_hcd.0: Device attached [ 286.285035][T15859] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 286.370726][ T5960] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 286.405401][ T976] saitek 0003:06A3:0CFA.003D: item fetching failed at offset 5/7 [ 286.418979][ T976] saitek 0003:06A3:0CFA.003D: parse failed [ 286.419051][ T976] saitek 0003:06A3:0CFA.003D: probe with driver saitek failed with error -22 [ 286.440540][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 286.498351][T15873] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4566'. [ 286.498376][T15873] nbd: illegal input index -28 [ 286.590666][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 286.614274][ T9] usb 1-1: config 0 has no interfaces? [ 286.619780][ T9] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 286.646389][ T976] usb 9-1: USB disconnect, device number 8 [ 286.658201][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.687772][ T9] usb 1-1: config 0 descriptor?? [ 286.823398][T15890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4571'. [ 286.906465][ T912] usb 1-1: USB disconnect, device number 17 [ 286.919008][T15849] vhci_hcd: connection closed [ 286.921071][ T36] vhci_hcd: stop threads [ 286.931902][ T36] vhci_hcd: release socket [ 286.937243][ T36] vhci_hcd: disconnect device [ 286.971048][ T5960] vhci_hcd: vhci_device speed not set [ 287.091199][ T6018] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 287.130946][ T57] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 287.272163][ T6018] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 287.281321][ T57] usb 2-1: Using ep0 maxpacket: 32 [ 287.298253][ T6018] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.307244][ T6018] usb 3-1: Product: syz [ 287.311781][ T57] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 287.327214][ T6018] usb 3-1: Manufacturer: syz [ 287.332193][ T57] usb 2-1: config 0 has no interface number 0 [ 287.338393][ T6018] usb 3-1: SerialNumber: syz [ 287.345728][ T57] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 287.357368][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.369263][ T57] usb 2-1: Product: syz [ 287.373887][ T6018] r8152-cfgselector 3-1: Unknown version 0x0000 [ 287.380485][ T57] usb 2-1: Manufacturer: syz [ 287.385074][ T57] usb 2-1: SerialNumber: syz [ 287.390296][ T6018] r8152-cfgselector 3-1: config 0 descriptor?? [ 287.408825][ T57] usb 2-1: config 0 descriptor?? [ 287.430030][ T57] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 287.476827][ T57] usb 2-1: selecting invalid altsetting 1 [ 287.486946][ T57] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 287.531886][ T57] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 287.548161][ T57] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 287.582963][ T57] usb 2-1: media controller created [ 287.640378][ T57] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.649217][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 287.649230][ T30] audit: type=1400 audit(1757731119.264:981): avc: denied { bind } for pid=15908 comm="syz.0.4583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 287.682279][ T30] audit: type=1400 audit(1757731119.264:982): avc: denied { name_bind } for pid=15908 comm="syz.0.4583" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 287.704902][ T30] audit: type=1400 audit(1757731119.264:983): avc: denied { node_bind } for pid=15908 comm="syz.0.4583" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 287.736580][ T30] audit: type=1400 audit(1757731119.264:984): avc: denied { write } for pid=15908 comm="syz.0.4583" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 287.758827][ T57] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 287.767567][ T57] zl10353_read_register: readreg error (reg=127, ret==-71) [ 287.790568][ T57] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 287.800705][T15915] vlan2: entered promiscuous mode [ 287.805744][T15915] bridge0: entered promiscuous mode [ 287.858833][ T57] usb 2-1: USB disconnect, device number 47 [ 287.908465][ T976] r8152-cfgselector 3-1: USB disconnect, device number 46 [ 287.942065][T15919] netlink: 'syz.0.4587': attribute type 10 has an invalid length. [ 287.950915][T15919] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.959462][T15919] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.989614][T15919] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.996813][T15919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.005134][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4587'. [ 288.005143][T15919] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.021155][T15919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.038747][T15919] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 288.047646][T15920] bridge_slave_1: left allmulticast mode [ 288.053790][T15920] bridge_slave_1: left promiscuous mode [ 288.059582][T15920] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.073539][T15920] bridge_slave_0: left allmulticast mode [ 288.079256][T15920] bridge_slave_0: left promiscuous mode [ 288.087245][T15920] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.106750][T15920] bond0: (slave bridge0): Releasing backup interface [ 288.482050][ T5960] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 288.537842][ T30] audit: type=1400 audit(1757731120.154:985): avc: denied { create } for pid=15935 comm="syz.8.4595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 288.569803][ T30] audit: type=1400 audit(1757731120.154:986): avc: denied { listen } for pid=15935 comm="syz.8.4595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 288.589443][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.614484][ T30] audit: type=1400 audit(1757731120.154:987): avc: denied { connect } for pid=15935 comm="syz.8.4595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 288.692110][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 288.712616][ T912] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 288.723503][ T5960] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 288.739566][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 288.749995][ T5960] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 288.766576][ T5960] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 288.775924][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.792101][ T5960] usb 1-1: config 0 descriptor?? [ 288.862354][ T5170] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 288.871738][ T5170] Bluetooth: hci1: Injecting HCI hardware error event [ 288.880508][ T5852] Bluetooth: hci1: hardware error 0x00 [ 288.887931][ T912] usb 2-1: Using ep0 maxpacket: 16 [ 288.903192][ T912] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 288.928098][ T912] usb 2-1: config 0 interface 0 has no altsetting 0 [ 288.939408][ T912] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 288.963301][ T912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.997523][ T912] usb 2-1: config 0 descriptor?? [ 289.005380][ T5960] hdpvr 1-1:0.0: firmware version 0x51 dated [ 289.015562][ T5960] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 289.074785][ T30] audit: type=1400 audit(1757731120.694:988): avc: denied { read write } for pid=15953 comm="syz.2.4603" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 289.120564][ T30] audit: type=1400 audit(1757731120.694:989): avc: denied { open } for pid=15953 comm="syz.2.4603" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 289.180801][ T30] audit: type=1400 audit(1757731120.794:990): avc: denied { create } for pid=15955 comm="syz.2.4604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.440111][ T912] zydacron 0003:13EC:0006.003E: item fetching failed at offset 2/3 [ 289.455190][ T5960] hdpvr 1-1:0.0: Could not setup controls [ 289.471147][ T5960] hdpvr 1-1:0.0: registering videodev failed [ 289.481284][ T912] zydacron 0003:13EC:0006.003E: parse failed [ 289.489106][ T912] zydacron 0003:13EC:0006.003E: probe with driver zydacron failed with error -22 [ 289.526356][ T5960] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 289.558882][ T5960] usb 1-1: USB disconnect, device number 18 [ 289.663129][ T912] usb 2-1: USB disconnect, device number 48 [ 290.902027][T16027] tipc: Enabling of bearer rejected, failed to enable media [ 290.941250][ T5852] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 291.291238][ T5960] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 291.487753][ T5960] usb 2-1: config 0 has an invalid interface number: 123 but max is 0 [ 291.499186][ T5960] usb 2-1: config 0 has no interface number 0 [ 291.532504][ T5960] usb 2-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 291.550499][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.567812][ T5960] usb 2-1: Product: syz [ 291.595205][ T5960] usb 2-1: Manufacturer: syz [ 291.599831][ T5960] usb 2-1: SerialNumber: syz [ 291.608435][T16056] support for cryptoloop has been removed. Use dm-crypt instead. [ 291.639877][ T5960] usb 2-1: config 0 descriptor?? [ 291.652868][ T912] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 291.768718][ T5170] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 291.787592][ T5170] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 291.810312][ T5170] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 291.824571][ T5170] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 291.839985][ T5170] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 291.892339][ T6019] usb 2-1: USB disconnect, device number 49 [ 291.963535][ T912] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 291.983861][ T912] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.019535][ T912] usb 9-1: Product: syz [ 292.024255][ T912] usb 9-1: Manufacturer: syz [ 292.028855][ T912] usb 9-1: SerialNumber: syz [ 292.054379][ T912] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 292.085026][ T57] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 292.224998][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4658'. [ 292.299605][T16070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4658'. [ 292.348141][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4658'. [ 292.410622][T16070] netlink: 'syz.0.4658': attribute type 5 has an invalid length. [ 292.478264][T16060] chnl_net:caif_netlink_parms(): no params data found [ 292.640627][ T6019] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 292.716990][ T976] usb 9-1: USB disconnect, device number 9 [ 292.770381][T16060] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.781210][ T5960] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 292.787023][T16060] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.798906][T16060] bridge_slave_0: entered allmulticast mode [ 292.806614][T16060] bridge_slave_0: entered promiscuous mode [ 292.816131][ T6019] usb 3-1: Using ep0 maxpacket: 16 [ 292.830406][ T6019] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.831254][T16060] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.847027][ T6019] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.850561][T16060] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.867501][T16060] bridge_slave_1: entered allmulticast mode [ 292.875742][T16060] bridge_slave_1: entered promiscuous mode [ 292.884465][ T6019] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 292.904444][ T6019] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 292.915607][ T6019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.917392][T16060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.936262][T16060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.938002][ T6019] usb 3-1: config 0 descriptor?? [ 292.951927][ T5960] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 292.960484][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.971656][ T5960] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 292.980787][ T5960] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 292.988913][ T5960] usb 1-1: Manufacturer: syz [ 293.000753][ T5960] usb 1-1: config 0 descriptor?? [ 293.015015][T16060] team0: Port device team_slave_0 added [ 293.027853][T16060] team0: Port device team_slave_1 added [ 293.063209][T16060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.070178][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.096996][ T5960] rc_core: IR keymap rc-hauppauge not found [ 293.097071][T16060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.104833][ T5960] Registered IR keymap rc-empty [ 293.117519][T16060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.127003][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.136607][ T5958] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 293.154347][T16060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.172480][ T5960] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 293.202020][ T5960] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input32 [ 293.236639][ T5960] usb 1-1: USB disconnect, device number 19 [ 293.248133][T16060] hsr_slave_0: entered promiscuous mode [ 293.272016][T16060] hsr_slave_1: entered promiscuous mode [ 293.297705][T16060] debugfs: 'hsr0' already exists in 'hsr' [ 293.310896][T16060] Cannot create hsr debugfs directory [ 293.373712][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.388421][ T5958] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 293.400681][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.422989][ T6019] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0 [ 293.431220][ T5958] usb 2-1: config 0 descriptor?? [ 293.437811][ T6019] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0 [ 293.445679][ T6019] microsoft 0003:045E:07DA.003F: ignoring exceeding usage max [ 293.478373][ T6019] microsoft 0003:045E:07DA.003F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 293.478839][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 293.478851][ T30] audit: type=1400 audit(1757731125.094:1017): avc: denied { ioctl } for pid=16097 comm="syz.8.4666" path="socket:[49263]" dev="sockfs" ino=49263 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 293.498120][ T6019] microsoft 0003:045E:07DA.003F: no inputs found [ 293.521329][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.540521][ T57] usb 9-1: Service connection timeout for: 256 [ 293.546688][ T57] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 293.576685][ T57] ath9k_htc: Failed to initialize the device [ 293.587093][ T6019] microsoft 0003:045E:07DA.003F: could not initialize ff, continuing anyway [ 293.590648][ T976] usb 9-1: ath9k_htc: USB layer deinitialized [ 293.626690][ T30] audit: type=1400 audit(1757731125.234:1018): avc: denied { create } for pid=16100 comm="syz.8.4667" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 293.684327][ T30] audit: type=1400 audit(1757731125.234:1019): avc: denied { append } for pid=16100 comm="syz.8.4667" name="file0" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 293.706859][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.724468][ T30] audit: type=1400 audit(1757731125.234:1020): avc: denied { open } for pid=16100 comm="syz.8.4667" path="/156/file0" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 293.764345][ T5960] usb 3-1: USB disconnect, device number 47 [ 293.842437][ T30] audit: type=1400 audit(1757731125.384:1021): avc: denied { unlink } for pid=14542 comm="syz-executor" name="file0" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 293.873242][ T5958] holtek 0003:1241:5015.0040: unbalanced collection at end of report description [ 293.896119][ T5958] holtek 0003:1241:5015.0040: parse failed [ 293.911645][ T5852] Bluetooth: hci10: command tx timeout [ 293.919473][ T5958] holtek 0003:1241:5015.0040: probe with driver holtek failed with error -22 [ 293.957765][ T30] audit: type=1400 audit(1757731125.564:1022): avc: denied { setopt } for pid=16104 comm="syz.8.4669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 294.104972][ T30] audit: type=1400 audit(1757731125.724:1023): avc: denied { search } for pid=16108 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.189583][ T6018] usb 2-1: USB disconnect, device number 50 [ 294.227402][ T30] audit: type=1400 audit(1757731125.724:1024): avc: denied { search } for pid=16108 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.269290][ T30] audit: type=1400 audit(1757731125.724:1025): avc: denied { search } for pid=16108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.292943][ T30] audit: type=1400 audit(1757731125.724:1026): avc: denied { search } for pid=16108 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.671672][ T976] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 294.840735][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 294.854792][ T976] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.891811][ T976] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 294.943212][ T976] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 294.978053][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.002663][T16060] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 295.035764][T16060] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 295.046784][ T976] hub 3-1:1.0: bad descriptor, ignoring hub [ 295.060951][ T976] hub 3-1:1.0: probe with driver hub failed with error -5 [ 295.071234][ T6019] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 295.103187][T16060] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 295.124344][T16060] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 295.262253][ T6019] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 295.293389][ T6019] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 295.337433][ T6019] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 295.377010][ T6019] usb 2-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00 [ 295.384832][T16060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.398541][ T6019] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.447877][T16060] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.447954][ T6019] usb 2-1: config 0 descriptor?? [ 295.495483][T16145] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 295.575102][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.582277][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.593775][ T6018] usb 3-1: reset high-speed USB device number 48 using dummy_hcd [ 295.624984][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.632140][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.965596][ T6019] wacom 0003:056A:0039.0041: hidraw0: USB HID v0.00 Device [HID 056a:0039] on usb-dummy_hcd.1-1/input0 [ 295.987423][ T5852] Bluetooth: hci10: command tx timeout [ 296.166711][ T9] usb 3-1: USB disconnect, device number 48 [ 296.270930][T16060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.281586][ T6018] usb 2-1: USB disconnect, device number 51 [ 296.290608][ T6019] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 296.412776][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4702'. [ 296.423171][T16213] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4702'. [ 296.433012][T16213] netlink: 'syz.8.4702': attribute type 7 has an invalid length. [ 296.493718][ T6019] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 296.522049][ T6019] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.552359][ T6019] usb 1-1: Product: syz [ 296.556554][ T6019] usb 1-1: Manufacturer: syz [ 296.574500][ T6019] usb 1-1: SerialNumber: syz [ 296.591231][ T6019] usb 1-1: config 0 descriptor?? [ 296.620184][ T6019] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 296.830054][ T6019] gspca_sn9c2028: read1 error -71 [ 296.846326][ T6019] gspca_sn9c2028: read1 error -71 [ 296.867539][ T6019] gspca_sn9c2028: read1 error -71 [ 296.877903][T16060] veth0_vlan: entered promiscuous mode [ 296.889923][ T6019] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 296.897008][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4715'. [ 296.921849][T16060] veth1_vlan: entered promiscuous mode [ 296.930372][ T6019] usb 1-1: USB disconnect, device number 20 [ 297.018009][T16060] veth0_macvtap: entered promiscuous mode [ 297.058860][T16060] veth1_macvtap: entered promiscuous mode [ 297.173111][T16060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.199791][T16060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.245008][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.284101][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.321224][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.413460][ T991] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.687709][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.732178][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.745387][T16271] netlink: 'syz.0.4721': attribute type 6 has an invalid length. [ 297.842869][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.854885][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.980782][ T57] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 298.061352][ T5852] Bluetooth: hci10: command tx timeout [ 298.100591][ T6019] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 298.160545][ T57] usb 2-1: Using ep0 maxpacket: 16 [ 298.174056][ T57] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 298.196597][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.214085][ T57] usb 2-1: Product: syz [ 298.228530][ T57] usb 2-1: Manufacturer: syz [ 298.237070][ T57] usb 2-1: SerialNumber: syz [ 298.275785][ T57] usb 2-1: config 0 descriptor?? [ 298.283789][ T6019] usb 3-1: Using ep0 maxpacket: 8 [ 298.298287][ T57] hub 2-1:0.0: bad descriptor, ignoring hub [ 298.316687][ T6019] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 298.335847][ T57] hub 2-1:0.0: probe with driver hub failed with error -5 [ 298.345929][ T6019] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.388545][ T6019] usb 3-1: config 0 has no interface number 0 [ 298.405094][ T6019] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 298.457793][ T6019] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 298.475275][ T6019] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 298.501013][ T6019] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.527713][ T6019] usb 3-1: config 0 interface 52 has no altsetting 0 [ 298.596734][ T6019] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 298.635496][ T6019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.677140][ T6019] usb 3-1: config 0 descriptor?? [ 298.680914][ T5960] usb 2-1: USB disconnect, device number 52 [ 298.795520][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 298.795536][ T30] audit: type=1400 audit(1757731130.414:1064): avc: denied { read } for pid=16321 comm="syz.5.4737" name="event3" dev="devtmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 298.882161][ T30] audit: type=1400 audit(1757731130.414:1065): avc: denied { open } for pid=16321 comm="syz.5.4737" path="/dev/input/event3" dev="devtmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 298.907304][ T30] audit: type=1400 audit(1757731130.414:1066): avc: denied { ioctl } for pid=16321 comm="syz.5.4737" path="/dev/input/event3" dev="devtmpfs" ino=984 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 298.960610][ T6019] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input37 [ 299.265896][ T6018] usb 3-1: USB disconnect, device number 49 [ 299.265985][ C0] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 299.351817][ T30] audit: type=1400 audit(1757731130.974:1067): avc: denied { create } for pid=16339 comm="syz.1.4744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 299.391072][T16342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4745'. [ 299.439070][ T30] audit: type=1400 audit(1757731130.994:1068): avc: denied { write } for pid=16339 comm="syz.1.4744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 299.601850][ T30] audit: type=1400 audit(1757731131.224:1069): avc: denied { append } for pid=16351 comm="syz.0.4749" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 299.822973][ T6018] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 299.830327][T16365] sp0: Synchronizing with TNC [ 299.992016][ T6018] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 300.031762][ T6018] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 300.058298][ T6018] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 300.102684][ T30] audit: type=1400 audit(1757731131.724:1070): avc: denied { write } for pid=16376 comm="syz.5.4757" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 300.126425][ T6018] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.141437][ T5852] Bluetooth: hci10: command tx timeout [ 300.157575][ T6018] usb 9-1: config 0 descriptor?? [ 300.163481][ T5960] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 300.163766][T16352] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 300.352969][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 300.379104][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.400171][ T5960] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.426774][ T5960] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 300.450616][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.489493][ T5960] usb 3-1: config 0 descriptor?? [ 300.567923][ T6019] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 300.697445][ T6018] corsair-psu 0003:1B1C:1C0C.0042: item fetching failed at offset 2/5 [ 300.721157][ T6018] corsair-psu 0003:1B1C:1C0C.0042: probe with driver corsair-psu failed with error -22 [ 300.735029][ T6019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.757682][ T6019] usb 6-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 300.778076][ T30] audit: type=1400 audit(1757731132.394:1071): avc: denied { write } for pid=16403 comm="syz.0.4764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 300.810990][ T6019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.828220][ T6019] usb 6-1: config 0 descriptor?? [ 300.898341][ T57] usb 9-1: USB disconnect, device number 10 [ 300.959628][ T5960] uclogic 0003:5543:0004.0043: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.2-1/input0 [ 301.171271][ T57] usb 3-1: USB disconnect, device number 50 [ 301.275531][ T6019] wacom 0003:056A:0000.0044: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 301.319923][ T6019] wacom 0003:056A:0000.0044: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.5-1/input0 [ 301.352071][ T6019] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0000.0044/input/input38 [ 301.589655][ T57] usb 6-1: USB disconnect, device number 3 [ 301.609879][ T30] audit: type=1400 audit(1757731133.224:1072): avc: denied { execute } for pid=16433 comm="syz.8.4774" path="/190/file0" dev="tmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 301.639688][ T30] audit: type=1804 audit(1757731133.234:1073): pid=16434 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.4774" name="/newroot/190/file0" dev="tmpfs" ino=974 res=1 errno=0 [ 301.791604][ T976] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 301.952572][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.983501][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.009839][ T976] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 302.032517][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.070325][ T976] usb 1-1: config 0 descriptor?? [ 302.112584][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 302.269438][T16464] netlink: 'syz.8.4785': attribute type 11 has an invalid length. [ 302.270882][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 302.320821][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.355286][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 302.419447][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 302.446590][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 302.478496][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.499887][ T976] arvo 0003:1E7D:30D4.0045: unbalanced collection at end of report description [ 302.530207][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 302.539736][ T976] arvo 0003:1E7D:30D4.0045: parse failed [ 302.560523][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 302.568622][ T976] arvo 0003:1E7D:30D4.0045: probe with driver arvo failed with error -22 [ 302.590509][ T9] usb 2-1: Manufacturer: syz [ 302.631902][ T9] usb 2-1: config 0 descriptor?? [ 302.736421][ T57] usb 1-1: USB disconnect, device number 21 [ 302.894484][T16494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4793'. [ 302.941901][ T9] rc_core: IR keymap rc-hauppauge not found [ 302.960648][ T9] Registered IR keymap rc-empty [ 302.980844][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.030708][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.074642][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 303.096854][T16502] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4797'. [ 303.122321][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input41 [ 303.176406][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.184238][T16502] vxcan3: entered promiscuous mode [ 303.210826][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.261264][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.280809][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.370570][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.401709][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.416367][T16517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4802'. [ 303.445848][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.490618][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.523203][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.567742][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.593316][T16524] netlink: 228 bytes leftover after parsing attributes in process `syz.8.4805'. [ 303.602569][ T57] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 303.614560][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 303.630364][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 303.645632][ T9] usb 2-1: USB disconnect, device number 53 [ 303.802410][ T57] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 303.804916][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 303.804927][ T30] audit: type=1400 audit(1757731135.424:1085): avc: denied { write } for pid=16532 comm="syz.2.4808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 303.833968][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 303.859394][ T68] tipc: Subscription rejected, illegal request [ 303.906557][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 303.949303][ T57] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 303.973919][ T30] audit: type=1400 audit(1757731135.464:1086): avc: denied { read } for pid=16532 comm="syz.2.4808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 303.980789][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.080529][ T57] usb 6-1: Product: syz [ 304.084728][ T57] usb 6-1: Manufacturer: syz [ 304.089319][ T57] usb 6-1: SerialNumber: syz [ 304.118074][T16548] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4813'. [ 304.133580][ T57] usb 6-1: config 0 descriptor?? [ 304.356676][ T57] powermate: unknown product id 0240 [ 304.396102][ T57] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 304.413756][ T57] powermate 6-1:0.0: probe with driver powermate failed with error -5 [ 304.476652][ T57] usb 6-1: USB disconnect, device number 4 [ 304.604386][ T30] audit: type=1400 audit(1757731136.224:1087): avc: denied { bind } for pid=16563 comm="syz.8.4817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 304.724887][ T30] audit: type=1400 audit(1757731136.254:1088): avc: denied { write } for pid=16563 comm="syz.8.4817" path="socket:[49938]" dev="sockfs" ino=49938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 305.010518][ T5958] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 305.200283][ T5958] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 305.232066][T16597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4827'. [ 305.241141][ T5958] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 305.265326][ T5958] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.336959][ T5958] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 305.373347][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.435513][ T5958] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.468795][ T5958] usb 3-1: invalid MIDI out EP 0 [ 305.623070][ T6122] udevd[6122]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.685997][ T5958] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 305.805663][ T5958] usb 3-1: USB disconnect, device number 51 [ 305.912821][ T30] audit: type=1400 audit(1757731137.524:1089): avc: denied { mount } for pid=16633 comm="syz.5.4840" name="/" dev="pstore" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 305.961042][ T6019] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 306.069320][T16641] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4843'. [ 306.132614][T16646] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4846'. [ 306.143408][ T6019] usb 9-1: Using ep0 maxpacket: 8 [ 306.159418][ T6019] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 306.188434][ T6019] usb 9-1: config 179 has no interface number 0 [ 306.214705][ T6019] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 306.279712][ T6019] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 306.324859][ T6019] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 306.344943][ T6019] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 306.367104][ T6019] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 306.447449][ T6019] usb 9-1: config 179 interface 65 has no altsetting 0 [ 306.458502][ T6019] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 306.507693][ T6019] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.511510][T16663] IPVS: stopping backup sync thread 16664 ... [ 306.517311][T16664] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 306.590267][ T6019] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input43 [ 306.704369][ T5205] input input43: unable to receive magic message: -110 [ 306.805903][ T5205] input input43: unable to receive magic message: -32 [ 306.826897][ T30] audit: type=1400 audit(1757731138.414:1090): avc: denied { write } for pid=16673 comm="syz.1.4856" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 306.950565][ T5205] input input43: unable to receive magic message: -32 [ 307.052260][ T5205] input input43: unable to receive magic message: -32 [ 307.108277][ T5205] input input43: unable to receive magic message: -32 [ 307.117841][ T976] usb 9-1: USB disconnect, device number 11 [ 307.117938][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 307.132352][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 307.171915][ T30] audit: type=1326 audit(1757731138.794:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16689 comm="syz.1.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3518eba9 code=0x7ffc0000 [ 307.220368][ T30] audit: type=1326 audit(1757731138.794:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16689 comm="syz.1.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3518eba9 code=0x7ffc0000 [ 307.267910][ T30] audit: type=1326 audit(1757731138.824:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16689 comm="syz.1.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcb3518eba9 code=0x7ffc0000 [ 307.342730][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4865'. [ 307.352070][ T6018] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 307.382980][ T30] audit: type=1326 audit(1757731138.824:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16689 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3518eba9 code=0x7ffc0000 [ 307.532821][ T6018] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 307.560483][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.607297][ T6018] usb 6-1: config 0 descriptor?? [ 307.736982][T16715] ALSA: seq fatal error: cannot create timer (-19) [ 307.884556][ T6018] kaweth 6-1:0.0: Firmware present in device. [ 308.055139][ T6018] kaweth 6-1:0.0: Statistics collection: 0 [ 308.090885][ T6018] kaweth 6-1:0.0: Multicast filter limit: 0 [ 308.106409][ T6018] kaweth 6-1:0.0: MTU: 0 [ 308.137767][ T6018] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 308.164698][T16741] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4880'. [ 308.259965][ T6018] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 308.297671][ T6018] usb 6-1: USB disconnect, device number 5 [ 308.493598][T16757] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4889'. [ 308.546621][T16757] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 308.560077][T16757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.570625][T16763] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 309.192313][T16801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4909'. [ 309.222318][T16801] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 309.258636][T16801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.405147][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 309.405162][ T30] audit: type=1400 audit(1757731141.024:1104): avc: denied { ioctl } for pid=16810 comm="syz.1.4916" path="socket:[50938]" dev="sockfs" ino=50938 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 309.472597][ T976] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 309.632560][ T976] usb 1-1: unable to get BOS descriptor or descriptor too short [ 309.641300][ T976] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 309.653254][ T976] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 309.662403][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.670388][ T976] usb 1-1: Product: syz [ 309.674681][ T976] usb 1-1: Manufacturer: syz [ 309.679284][ T976] usb 1-1: SerialNumber: syz [ 309.692295][ T5919] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 309.750701][ T6018] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 309.853925][ T5919] usb 9-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 309.863246][ T5919] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.881899][ T5919] usb 9-1: config 0 descriptor?? [ 309.911063][ T6018] usb 3-1: Using ep0 maxpacket: 32 [ 309.917635][ T6018] usb 3-1: unable to get BOS descriptor or descriptor too short [ 309.926626][ T6018] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 309.939322][ T6018] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 309.948537][ T6018] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.956625][ T6018] usb 3-1: Product: syz [ 309.960873][ T6018] usb 3-1: Manufacturer: syz [ 309.965475][ T6018] usb 3-1: SerialNumber: syz [ 310.103501][ T5919] kaweth 9-1:0.0: Firmware present in device. [ 310.179792][ T6018] usb 3-1: Limiting number of CPorts to U8_MAX [ 310.186470][ T6018] usb 3-1: Not enough endpoints found in device, aborting! [ 310.295286][ T5919] kaweth 9-1:0.0: Statistics collection: 0 [ 310.301717][ T5919] kaweth 9-1:0.0: Multicast filter limit: 0 [ 310.309013][ T5919] kaweth 9-1:0.0: MTU: 0 [ 310.313627][ T5919] kaweth 9-1:0.0: Read MAC address 00:00:00:00:00:00 [ 310.395977][ T6018] usb 3-1: USB disconnect, device number 52 [ 310.496653][ T5919] kaweth 9-1:0.0: probe with driver kaweth failed with error -5 [ 310.509620][ T5919] usb 9-1: USB disconnect, device number 12 [ 310.521082][ T976] usb 1-1: reset high-speed USB device number 22 using dummy_hcd [ 310.672626][ T976] usb 1-1: unable to get BOS descriptor or descriptor too short [ 310.900670][ T6018] usb 1-1: USB disconnect, device number 22 [ 311.023935][ T30] audit: type=1400 audit(1757731142.634:1105): avc: denied { create } for pid=16827 comm="syz.2.4922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 311.077223][ T30] audit: type=1400 audit(1757731142.664:1106): avc: denied { connect } for pid=16827 comm="syz.2.4922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 311.128539][ T30] audit: type=1326 audit(1757731142.744:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.2.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161818eba9 code=0x7ffc0000 [ 311.154427][T16830] netlink: 'syz.1.4923': attribute type 3 has an invalid length. [ 311.169245][ T30] audit: type=1326 audit(1757731142.784:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.2.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161818eba9 code=0x7ffc0000 [ 311.195560][ T30] audit: type=1326 audit(1757731142.784:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.2.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f161818eba9 code=0x7ffc0000 [ 311.220400][ T30] audit: type=1326 audit(1757731142.784:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161818eba9 code=0x7ffc0000 [ 311.245987][ T30] audit: type=1326 audit(1757731142.784:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161818eba9 code=0x7ffc0000 [ 311.270249][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4926'. [ 311.279448][T16836] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 311.287154][T16836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.319195][ T30] audit: type=1326 audit(1757731142.784:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f161818eba9 code=0x7ffc0000 [ 311.390775][ T30] audit: type=1326 audit(1757731142.784:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161818eba9 code=0x7ffc0000 [ 311.438009][T16841] netlink: 'syz.2.4927': attribute type 5 has an invalid length. [ 311.791653][ T5958] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 311.950574][ T5958] usb 6-1: Using ep0 maxpacket: 32 [ 311.977169][ T5958] usb 6-1: unable to get BOS descriptor or descriptor too short [ 311.990002][ T5958] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 312.009838][ T5958] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 312.020884][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.028905][ T5958] usb 6-1: Product: syz [ 312.033340][ T5958] usb 6-1: Manufacturer: syz [ 312.037940][ T5958] usb 6-1: SerialNumber: syz [ 312.044306][ T976] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 312.190954][ T6019] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 312.200536][ T976] usb 9-1: Using ep0 maxpacket: 32 [ 312.249802][ T976] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 312.270518][ T5958] usb 6-1: Limiting number of CPorts to U8_MAX [ 312.278306][ T5958] usb 6-1: Not enough endpoints found in device, aborting! [ 312.294765][ T976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.338951][ T976] usb 9-1: config 0 descriptor?? [ 312.389424][ T6019] usb 2-1: unable to get BOS descriptor or descriptor too short [ 312.422434][ T6019] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 312.444888][ T6019] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 312.465570][ T6019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.494711][ T6019] usb 2-1: Product: syz [ 312.497647][ T5958] usb 6-1: USB disconnect, device number 6 [ 312.504802][ T6019] usb 2-1: Manufacturer: syz [ 312.509395][ T6019] usb 2-1: SerialNumber: syz [ 312.582883][ T976] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 312.595713][ T976] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 312.619363][ T976] dib0700: firmware download failed at 7 with -22 [ 312.638099][ T976] usb 9-1: USB disconnect, device number 13 [ 312.917347][T16911] netlink: 'syz.0.4964': attribute type 1 has an invalid length. [ 313.360985][ T6019] usb 2-1: reset high-speed USB device number 54 using dummy_hcd [ 313.433506][T16936] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4977'. [ 313.451166][ T5919] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 313.513226][T16938] netlink: 'syz.8.4978': attribute type 3 has an invalid length. [ 313.567435][ T6019] usb 2-1: unable to get BOS descriptor or descriptor too short [ 313.621091][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 313.633513][ T5919] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.670225][ T5919] usb 6-1: config 0 interface 0 has no altsetting 0 [ 313.677455][ T5919] usb 6-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 313.692584][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.707352][ T5919] usb 6-1: config 0 descriptor?? [ 313.823291][ T5170] Bluetooth: hci6: command 0x0406 tx timeout [ 313.832284][ T5958] usb 2-1: USB disconnect, device number 54 [ 314.135459][ T5919] logitech 0003:046D:C219.0046: unknown main item tag 0x0 [ 314.143100][ T5919] logitech 0003:046D:C219.0046: unknown main item tag 0x0 [ 314.150231][ T5919] logitech 0003:046D:C219.0046: unknown main item tag 0x0 [ 314.163988][ T5919] logitech 0003:046D:C219.0046: unknown main item tag 0x0 [ 314.175055][ T5919] logitech 0003:046D:C219.0046: unknown main item tag 0x0 [ 314.187786][ T5919] logitech 0003:046D:C219.0046: hidraw0: USB HID v0.05 Device [HID 046d:c219] on usb-dummy_hcd.5-1/input0 [ 314.220360][ T5919] logitech 0003:046D:C219.0046: no inputs found [ 314.250554][ T976] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 314.318464][T16965] ptrace attach of "./syz-executor exec"[14542] was attempted by ""[16965] [ 314.379061][ T5919] usb 6-1: USB disconnect, device number 7 [ 314.411234][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 314.422110][ T976] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 314.438149][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.448534][ T976] usb 3-1: config 0 descriptor?? [ 314.696546][ T976] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 314.757504][ T976] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 314.793538][ T976] dib0700: firmware download failed at 7 with -22 [ 314.828102][ T976] usb 3-1: USB disconnect, device number 53 [ 314.997079][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 314.997094][ T30] audit: type=1326 audit(1757731146.614:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16982 comm="syz.5.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5978eba9 code=0x7ffc0000 [ 315.109921][ T30] audit: type=1326 audit(1757731146.614:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16982 comm="syz.5.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbe5978eba9 code=0x7ffc0000 [ 315.195589][ T30] audit: type=1326 audit(1757731146.614:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16982 comm="syz.5.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5978eba9 code=0x7ffc0000 [ 315.310251][ T30] audit: type=1326 audit(1757731146.614:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16982 comm="syz.5.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5978eba9 code=0x7ffc0000 [ 315.388091][ T30] audit: type=1326 audit(1757731146.634:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16982 comm="syz.5.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fbe5978eba9 code=0x7ffc0000 [ 315.421133][ T5919] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 315.446775][ T30] audit: type=1326 audit(1757731146.634:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16982 comm="syz.5.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5978eba9 code=0x7ffc0000 [ 315.482743][ T30] audit: type=1326 audit(1757731146.634:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16982 comm="syz.5.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5978eba9 code=0x7ffc0000 [ 315.507470][T17005] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5004'. [ 315.535806][T17003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5004'. [ 315.622141][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.650369][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 315.663958][ T6018] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 315.679521][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 315.693364][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 315.707112][T17015] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5013'. [ 315.716307][T17016] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 315.722806][T17016] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 315.737600][ T5919] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 315.740897][T17016] vhci_hcd vhci_hcd.0: Device attached [ 315.758993][ T5919] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 315.773005][ T5919] usb 1-1: Manufacturer: syz [ 315.791047][ T5919] usb 1-1: config 0 descriptor?? [ 315.840691][ T6018] usb 2-1: Using ep0 maxpacket: 8 [ 315.847883][ T6018] usb 2-1: unable to get BOS descriptor or descriptor too short [ 315.858192][ T6018] usb 2-1: config 4 interface 0 has no altsetting 0 [ 315.867164][T17023] netlink: 'syz.5.5016': attribute type 10 has an invalid length. [ 315.876406][T17023] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.883938][T17023] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.895577][ T6018] usb 2-1: string descriptor 0 read error: -22 [ 315.902179][ T6018] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 315.911261][T17023] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.911350][T17023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.919837][ T6018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.925783][T17023] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.940866][T17023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.942595][T17024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5016'. [ 315.962789][T17023] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 315.963009][ T6018] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 315.979512][T17024] bridge_slave_1: left allmulticast mode [ 315.986217][T17024] bridge_slave_1: left promiscuous mode [ 315.998507][ T6018] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 316.000536][ T976] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 316.008841][ T6019] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 316.034173][T17024] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.041053][ T6018] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 316.054814][ T6018] usb 2-1: media controller created [ 316.077037][ T6018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 316.110769][T17024] bridge_slave_0: left allmulticast mode [ 316.116484][T17024] bridge_slave_0: left promiscuous mode [ 316.122650][T17024] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.143640][ T5919] rc_core: IR keymap rc-hauppauge not found [ 316.143784][T17024] bond0: (slave bridge0): Releasing backup interface [ 316.149576][ T5919] Registered IR keymap rc-empty [ 316.149663][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.160590][ T5960] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 316.185562][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.193607][ T6018] zl10353_read_register: readreg error (reg=127, ret==0) [ 316.221837][ T5919] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 316.236479][ T6018] usb 2-1: USB disconnect, device number 55 [ 316.248029][ T5919] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input44 [ 316.261173][ T6019] usb 9-1: Using ep0 maxpacket: 16 [ 316.268485][ T6019] usb 9-1: config 0 has no interfaces? [ 316.274208][ T6019] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 316.292105][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.306940][ T6019] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.315561][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.332416][ T6019] usb 9-1: config 0 descriptor?? [ 316.342495][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.391005][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.418222][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.450661][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.470635][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.500690][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.530565][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.571674][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.590542][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.626960][ T6019] usb 9-1: USB disconnect, device number 14 [ 316.632946][T17017] vhci_hcd: connection closed [ 316.635663][ T36] vhci_hcd: stop threads [ 316.635663][ T5919] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 316.635684][ T5919] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 316.663804][ T36] vhci_hcd: release socket [ 316.674194][ T36] vhci_hcd: disconnect device [ 316.690830][ T976] vhci_hcd: vhci_device speed not set [ 316.709407][ T5919] usb 1-1: USB disconnect, device number 23 [ 316.873866][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.881746][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.940629][ T6018] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 317.098838][ T6018] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 317.108981][ T6018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.119036][ T6018] usb 6-1: Product: syz [ 317.129608][ T6018] usb 6-1: Manufacturer: syz [ 317.135291][ T6018] usb 6-1: SerialNumber: syz [ 317.156165][ T6018] r8152-cfgselector 6-1: Unknown version 0x0000 [ 317.167286][ T6018] r8152-cfgselector 6-1: config 0 descriptor?? [ 317.516953][T17055] netlink: 'syz.8.5030': attribute type 10 has an invalid length. [ 317.525552][T17055] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.533017][T17055] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.559402][T17055] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.566570][T17055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.574548][T17055] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.581682][T17055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.643041][T17058] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5030'. [ 317.685947][ T976] r8152-cfgselector 6-1: USB disconnect, device number 8 [ 317.697813][T17055] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 317.721102][T17058] bridge_slave_1: left allmulticast mode [ 317.729063][T17058] bridge_slave_1: left promiscuous mode [ 317.749045][T17058] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.766827][T17058] bridge_slave_0: left allmulticast mode [ 317.772761][T17058] bridge_slave_0: left promiscuous mode [ 317.778463][T17058] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.829358][T17058] bond0: (slave bridge0): Releasing backup interface [ 317.840352][ T5958] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 318.110492][ T5919] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 318.260781][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 318.276238][ T5919] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 318.294708][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.310586][ T5958] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 318.344946][ T5919] usb 1-1: config 0 descriptor?? [ 318.485740][ T5958] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.499154][ T5958] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 318.510546][ T5958] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 318.520211][ T5958] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 318.539917][ T5958] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 318.551835][ T5958] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 318.559837][ T5958] usb 9-1: Manufacturer: syz [ 318.594492][ T5958] usb 9-1: config 0 descriptor?? [ 318.751538][ T5919] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 318.783625][ T5919] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 318.798436][ T5919] dib0700: firmware download failed at 7 with -22 [ 318.826096][ T5919] usb 1-1: USB disconnect, device number 24 [ 318.950599][ T5958] rc_core: IR keymap rc-hauppauge not found [ 318.956513][ T5958] Registered IR keymap rc-empty [ 318.978548][ T5958] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 319.014498][ T5958] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 319.054092][ T5958] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 319.077499][ T5958] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input45 [ 319.124216][ T5958] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 319.160747][ T5958] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 319.184619][ T5958] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 319.240744][ T5958] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 319.267920][ T5958] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 319.300533][ T5958] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 319.324667][ T5958] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 319.364513][ T5958] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 319.400776][ T5958] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 319.470951][ T5958] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 319.510763][ T5958] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 319.520523][ T5960] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 319.558507][T17099] netlink: 'syz.1.5048': attribute type 10 has an invalid length. [ 319.572127][ T5958] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 319.594811][T17102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5048'. [ 319.625111][ T5958] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 319.641025][T17099] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.648752][T17099] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.684994][T17099] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.687296][ T5958] usb 9-1: USB disconnect, device number 15 [ 319.692150][T17099] bridge0: port 2(bridge_slave_1) entered listening state [ 319.705362][T17099] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.712506][T17099] bridge0: port 1(bridge_slave_0) entered listening state [ 319.764599][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 319.809520][ T5960] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 319.853784][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 319.864005][T17099] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.871300][T17099] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.883593][ T5960] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 319.916784][T17102] bridge_slave_1: left allmulticast mode [ 319.935506][ T5960] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 319.947344][T17102] bridge_slave_1: left promiscuous mode [ 319.968948][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.991843][ T5960] usb 3-1: config 0 descriptor?? [ 320.007759][T17102] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.015170][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 320.111258][T17102] bridge_slave_0: left allmulticast mode [ 320.126296][T17102] bridge_slave_0: left promiscuous mode [ 320.153798][T17102] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.190232][ T24] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 320.200021][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.229321][ T24] usb 1-1: Product: syz [ 320.244950][ T24] usb 1-1: Manufacturer: syz [ 320.259754][ T24] usb 1-1: SerialNumber: syz [ 320.260712][ T5960] hdpvr 3-1:0.0: firmware version 0x51 dated [ 320.296156][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 320.307002][ T5960] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 320.325007][ T24] r8152-cfgselector 1-1: config 0 descriptor?? [ 320.548125][T17125] tipc: Enabling of bearer rejected, failed to enable media [ 320.727135][ T5960] hdpvr 3-1:0.0: Could not setup controls [ 320.734228][ T5960] hdpvr 3-1:0.0: registering videodev failed [ 320.764965][ T5960] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 320.789516][ T5960] usb 3-1: USB disconnect, device number 54 [ 320.824204][ T5919] r8152-cfgselector 1-1: USB disconnect, device number 25 [ 322.730628][ T5919] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 322.903175][ T5919] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 322.928400][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.948080][ T5919] usb 2-1: Product: syz [ 322.961428][ T5919] usb 2-1: Manufacturer: syz [ 322.966050][ T9] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 322.970738][ T5919] usb 2-1: SerialNumber: syz [ 323.001661][ T5919] r8152-cfgselector 2-1: Unknown version 0x0000 [ 323.009723][ T5919] r8152-cfgselector 2-1: config 0 descriptor?? [ 323.142710][ T9] usb 3-1: config 0 has an invalid interface number: 123 but max is 0 [ 323.160526][ T9] usb 3-1: config 0 has no interface number 0 [ 323.172856][ T9] usb 3-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 323.184330][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.201568][ T9] usb 3-1: Product: syz [ 323.210303][ T9] usb 3-1: Manufacturer: syz [ 323.220742][ T9] usb 3-1: SerialNumber: syz [ 323.235569][ T9] usb 3-1: config 0 descriptor?? [ 323.498020][ T9] usb 3-1: USB disconnect, device number 55 [ 323.500693][ T24] r8152-cfgselector 2-1: USB disconnect, device number 56 [ 324.111506][T17185] netlink: 'syz.2.5082': attribute type 10 has an invalid length. [ 324.119812][T17185] bridge0: port 3(syz_tun) entered disabled state [ 324.126589][T17185] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.134141][T17185] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.173581][T17185] bridge0: port 3(syz_tun) entered blocking state [ 324.180106][T17185] bridge0: port 3(syz_tun) entered forwarding state [ 324.186953][T17185] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.194100][T17185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.201540][T17185] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.208649][T17185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.242872][T17185] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 324.339374][T17185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5082'. [ 324.372499][T17185] syz_tun: left allmulticast mode [ 324.378784][T17185] syz_tun: left promiscuous mode [ 324.394303][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 324.398151][T17185] bridge0: port 3(syz_tun) entered disabled state [ 324.421826][T17185] bridge_slave_1: left allmulticast mode [ 324.474997][T17185] bridge_slave_1: left promiscuous mode [ 324.483572][T17185] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.497770][T17185] bridge_slave_0: left allmulticast mode [ 324.516998][T17185] bridge_slave_0: left promiscuous mode [ 324.553681][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 324.573940][T17185] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.589331][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.597966][ T24] usb 2-1: Product: syz [ 324.627610][ T24] usb 2-1: Manufacturer: syz [ 324.632854][ T24] usb 2-1: SerialNumber: syz [ 324.643040][ T5919] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 324.667922][T17185] bond0: (slave bridge0): Releasing backup interface [ 324.670852][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 324.706235][ T5919] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 324.820605][ T5958] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 324.980578][ T5958] usb 9-1: Using ep0 maxpacket: 16 [ 324.987680][ T5958] usb 9-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 325.000511][ T24] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 325.008406][ T5958] usb 9-1: config 0 interface 0 has no altsetting 0 [ 325.015074][ T5958] usb 9-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 325.024352][ T5958] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.034088][ T5958] usb 9-1: config 0 descriptor?? [ 325.140485][ T9] usb 2-1: USB disconnect, device number 57 [ 325.152013][ T24] usb 1-1: config 0 has an invalid interface number: 123 but max is 0 [ 325.161524][ T24] usb 1-1: config 0 has no interface number 0 [ 325.169250][ T24] usb 1-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 325.178471][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.188294][ T24] usb 1-1: Product: syz [ 325.193222][ T24] usb 1-1: Manufacturer: syz [ 325.198518][ T24] usb 1-1: SerialNumber: syz [ 325.207170][ T24] usb 1-1: config 0 descriptor?? [ 325.430792][ T24] usb 1-1: USB disconnect, device number 26 [ 325.455837][ T5958] zydacron 0003:13EC:0006.0047: item fetching failed at offset 2/3 [ 325.467643][ T5958] zydacron 0003:13EC:0006.0047: parse failed [ 325.473874][ T5958] zydacron 0003:13EC:0006.0047: probe with driver zydacron failed with error -22 [ 325.681541][ T5958] usb 9-1: USB disconnect, device number 16 [ 325.980840][ T5919] usb 2-1: Service connection timeout for: 256 [ 326.005976][ T5919] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 326.031320][ T5919] ath9k_htc: Failed to initialize the device [ 326.050823][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 326.305047][T17254] tipc: Enabling of bearer rejected, failed to enable media [ 326.901012][ T5919] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 327.083132][ T5919] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.120492][ T5960] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 327.125767][ T5919] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 327.138872][ T5919] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.159349][ T5919] usb 9-1: config 0 descriptor?? [ 327.280664][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 327.288290][ T5960] usb 2-1: Using ep0 maxpacket: 16 [ 327.302524][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.320465][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.346073][ T5960] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 327.366398][ T5960] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 327.386662][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.397932][ T5960] usb 2-1: config 0 descriptor?? [ 327.463861][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 327.485934][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.520973][ T9] usb 3-1: Product: syz [ 327.530898][ T9] usb 3-1: Manufacturer: syz [ 327.536525][ T9] usb 3-1: SerialNumber: syz [ 327.544412][ T9] usb 3-1: config 0 descriptor?? [ 327.556254][ T9] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 327.583180][ T5919] holtek 0003:1241:5015.0048: unbalanced collection at end of report description [ 327.613809][ T5919] holtek 0003:1241:5015.0048: parse failed [ 327.619830][ T5919] holtek 0003:1241:5015.0048: probe with driver holtek failed with error -22 [ 327.727758][T17327] netlink: 'syz.0.5151': attribute type 10 has an invalid length. [ 327.738615][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5151'. [ 327.769532][ T9] gspca_sn9c2028: read1 error -71 [ 327.800956][ T9] gspca_sn9c2028: read1 error -71 [ 327.809499][ T9] gspca_sn9c2028: read1 error -71 [ 327.817504][ T9] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 327.818930][ T5919] usb 9-1: USB disconnect, device number 17 [ 327.841803][ T5960] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 327.852430][ T9] usb 3-1: USB disconnect, device number 56 [ 327.860696][ T5960] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 327.868465][ T5960] microsoft 0003:045E:07DA.0049: ignoring exceeding usage max [ 327.911311][ T5960] microsoft 0003:045E:07DA.0049: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 327.924507][ T5960] microsoft 0003:045E:07DA.0049: no inputs found [ 327.932650][ T5960] microsoft 0003:045E:07DA.0049: could not initialize ff, continuing anyway [ 328.057555][ T9] usb 2-1: USB disconnect, device number 58 [ 328.433847][T17335] bridge_slave_0: default FDB implementation only supports local addresses [ 328.625868][T17347] netlink: 'syz.5.5160': attribute type 6 has an invalid length. [ 328.873274][ T30] audit: type=1400 audit(1757731160.484:1131): avc: denied { ioctl } for pid=17360 comm="syz.1.5168" path="socket:[53501]" dev="sockfs" ino=53501 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 329.030996][ T5919] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 329.183586][T17378] syz.0.5175 (17378): drop_caches: 4 [ 329.202992][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.234049][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.242831][T17381] syz.5.5177 (17381): /proc/17380/oom_adj is deprecated, please use /proc/17380/oom_score_adj instead. [ 329.269462][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.292365][ T5919] usb 3-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 329.319136][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.346315][ T5919] usb 3-1: config 0 descriptor?? [ 329.550581][ T5960] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 329.710566][ T5960] usb 1-1: Using ep0 maxpacket: 16 [ 329.719841][ T5960] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 329.729354][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.737455][ T5960] usb 1-1: Product: syz [ 329.741784][ T5960] usb 1-1: Manufacturer: syz [ 329.746609][ T5960] usb 1-1: SerialNumber: syz [ 329.754034][ T5960] usb 1-1: config 0 descriptor?? [ 329.774367][ T5919] wacom 0003:056A:0010.004A: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 329.790091][ T5960] hub 1-1:0.0: bad descriptor, ignoring hub [ 329.801866][ T5919] wacom 0003:056A:0010.004A: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.2-1/input0 [ 329.807249][ T5960] hub 1-1:0.0: probe with driver hub failed with error -5 [ 329.856930][ T5919] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0010.004A/input/input47 [ 329.957318][T17394] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5182'. [ 330.028011][ T5919] usb 3-1: USB disconnect, device number 57 [ 330.231072][ T5960] usb 1-1: USB disconnect, device number 27 [ 330.321988][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5188'. [ 330.534100][T17418] Bluetooth: MGMT ver 1.23 [ 330.622837][ T30] audit: type=1400 audit(1757731162.244:1132): avc: denied { ioctl } for pid=17420 comm="syz.8.5197" path="socket:[52974]" dev="sockfs" ino=52974 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 330.797827][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5201'. [ 330.845257][ T30] audit: type=1400 audit(1757731162.464:1133): avc: denied { mount } for pid=17434 comm="syz.2.5203" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 330.867607][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.884759][ T30] audit: type=1400 audit(1757731162.504:1134): avc: denied { remount } for pid=17434 comm="syz.2.5203" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 330.916020][ T30] audit: type=1326 audit(1757731162.504:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="syz.5.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5978eba9 code=0x7ffc0000 [ 330.944736][ T30] audit: type=1326 audit(1757731162.504:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="syz.5.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5978eba9 code=0x7ffc0000 [ 331.044312][ T30] audit: type=1326 audit(1757731162.504:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="syz.5.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbe5978eba9 code=0x7ffc0000 [ 331.130346][ T30] audit: type=1326 audit(1757731162.504:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="syz.5.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5978eba9 code=0x7ffc0000 [ 331.227962][ T30] audit: type=1326 audit(1757731162.504:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="syz.5.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5978eba9 code=0x7ffc0000 [ 331.251429][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.340537][ T30] audit: type=1326 audit(1757731162.504:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="syz.5.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fbe5978eba9 code=0x7ffc0000 [ 331.364004][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.443959][T17465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5216'. [ 331.480061][T17465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5216'. [ 331.601569][T17472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.688804][T17479] Invalid source name [ 331.704639][T17479] UBIFS error (pid: 17479): cannot open "usrquota", error -22 [ 332.089720][T17507] SELinux: syz.1.5237 (17507) set checkreqprot to 1. This is no longer supported. [ 332.390936][ T5919] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 332.588871][ T5919] usb 9-1: Using ep0 maxpacket: 32 [ 332.610061][ T5919] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.668328][ T5919] usb 9-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 332.683937][ T5919] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.708557][ T5919] usb 9-1: config 0 descriptor?? [ 333.148257][ T5919] samsung 0003:0419:0600.004B: hidraw0: USB HID v10.00 Device [HID 0419:0600] on usb-dummy_hcd.8-1/input0 [ 333.260673][ T6019] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 333.292109][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 333.381866][ T5919] usb 9-1: USB disconnect, device number 18 [ 333.452639][ T6019] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 333.472101][ T6019] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.479417][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.497809][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 333.501205][ T6019] usb 1-1: config 0 descriptor?? [ 333.512918][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.535872][ T9] usb 2-1: config 0 descriptor?? [ 333.967431][ T6019] itetech 0003:06CB:73F6.004C: hidraw0: USB HID v0.00 Device [HID 06cb:73f6] on usb-dummy_hcd.0-1/input0 [ 333.975052][ T9] uclogic 0003:28BD:0071.004D: interface is invalid, ignoring [ 334.051292][ T976] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 334.059117][T17589] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 334.153037][ T9] usb 1-1: USB disconnect, device number 28 [ 334.198966][ T6019] usb 2-1: USB disconnect, device number 59 [ 334.219325][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 334.219339][ T30] audit: type=1400 audit(1757731165.834:1153): avc: denied { create } for pid=17590 comm="syz.5.5276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 334.246097][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.259322][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.281595][ T30] audit: type=1400 audit(1757731165.884:1154): avc: denied { setopt } for pid=17590 comm="syz.5.5276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 334.309482][ T976] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 334.333794][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.362413][ T976] usb 3-1: config 0 descriptor?? [ 334.416821][ T30] audit: type=1400 audit(1757731166.034:1155): avc: denied { getopt } for pid=17595 comm="syz.5.5279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 334.740491][ T6019] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 334.812986][ T976] hid_mf 0003:0079:1846.004E: unknown main item tag 0x1 [ 334.819980][ T976] hid_mf 0003:0079:1846.004E: unknown main item tag 0x2 [ 334.851504][ T976] hid_mf 0003:0079:1846.004E: item fetching failed at offset 6/7 [ 334.859447][ T30] audit: type=1400 audit(1757731166.474:1156): avc: denied { setattr } for pid=16060 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 334.859706][ T976] hid_mf 0003:0079:1846.004E: HID parse failed. [ 334.882703][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.919267][ T976] hid_mf 0003:0079:1846.004E: probe with driver hid_mf failed with error -22 [ 334.931810][ T6019] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.955007][ T6019] usb 9-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 334.970536][ T6019] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.999071][ T6019] usb 9-1: config 0 descriptor?? [ 335.082400][ T976] usb 3-1: USB disconnect, device number 58 [ 335.090558][ T6018] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 335.150664][ T5960] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 335.250631][ T6018] usb 2-1: Using ep0 maxpacket: 32 [ 335.265585][ T6018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.286930][ T6018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.311204][ T6018] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 335.326000][ T5960] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 335.334467][ T5960] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 335.336887][ T6018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.350664][ T5960] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 335.370567][ T5960] usb 1-1: config 220 has no interface number 2 [ 335.372114][ T6018] usb 2-1: config 0 descriptor?? [ 335.387307][ T5960] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 335.413336][ T5960] usb 1-1: config 220 interface 0 has no altsetting 0 [ 335.416336][ T6019] wacom 0003:056A:0016.004F: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 335.424073][ T5960] usb 1-1: config 220 interface 76 has no altsetting 0 [ 335.442068][ T6019] wacom 0003:056A:0016.004F: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.8-1/input0 [ 335.458368][ T5960] usb 1-1: config 220 interface 1 has no altsetting 0 [ 335.482250][ T5960] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 335.493577][ T6019] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:0016.004F/input/input51 [ 335.500465][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.554512][ T5960] usb 1-1: Product: syz [ 335.558701][ T5960] usb 1-1: Manufacturer: syz [ 335.582054][ T5960] usb 1-1: SerialNumber: syz [ 335.707866][ T6019] usb 9-1: USB disconnect, device number 19 [ 335.828298][ T6018] aquacomputer_d5next 0003:0C70:F00A.0050: unknown main item tag 0x7 [ 335.839236][ T5960] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 335.862983][ T6018] aquacomputer_d5next 0003:0C70:F00A.0050: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.1-1/input0 [ 335.871112][ T5960] usb 1-1: No valid video chain found. [ 335.888173][ T5960] usb 1-1: selecting invalid altsetting 0 [ 335.941722][ T5960] usb 1-1: selecting invalid altsetting 0 [ 335.947478][ T5960] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 335.968317][ T5960] usb 1-1: USB disconnect, device number 29 [ 336.095774][ T9] usb 2-1: USB disconnect, device number 60 [ 336.584954][T17630] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5294'. [ 336.991497][ T6019] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 337.097760][T17655] tipc: Enabling not permitted [ 337.120621][T17655] tipc: Enabling of bearer rejected, failed to enable media [ 337.198390][ T6019] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.229776][ T6019] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.250880][ T6019] usb 9-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 337.259947][ T6019] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.313252][ T6019] usb 9-1: config 0 descriptor?? [ 337.743047][ T6019] razer 0003:1532:010E.0051: unknown main item tag 0x0 [ 337.770552][ T6019] razer 0003:1532:010E.0051: unknown main item tag 0x0 [ 337.790520][ T6019] razer 0003:1532:010E.0051: unknown main item tag 0x0 [ 337.822150][ T6019] razer 0003:1532:010E.0051: unknown main item tag 0x0 [ 337.876421][ T6019] razer 0003:1532:010E.0051: unknown main item tag 0x0 [ 337.898923][ T6019] razer 0003:1532:010E.0051: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.8-1/input0 [ 337.969422][ T6019] usb 9-1: USB disconnect, device number 20 [ 338.113016][T17670] fido_id[17670]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 338.783161][T17692] Invalid source name [ 338.800870][T17692] UBIFS error (pid: 17692): cannot open "usrquota", error -22 [ 338.899874][ T30] audit: type=1400 audit(1757731170.514:1157): avc: denied { append } for pid=17696 comm="syz.1.5327" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 338.900276][T17698] random: crng reseeded on system resumption [ 338.938509][ T30] audit: type=1400 audit(1757731170.514:1158): avc: denied { open } for pid=17696 comm="syz.1.5327" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 338.962015][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.041725][ T976] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 339.115764][ T30] audit: type=1400 audit(1757731170.734:1159): avc: denied { ioctl } for pid=17696 comm="syz.1.5327" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 339.116105][T17698] Restarting kernel threads ... [ 339.191066][T17698] Done restarting kernel threads. [ 339.241881][ T976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 339.253643][ T976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.300617][ T976] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 339.368800][ T976] usb 9-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 339.403965][ T976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.446466][ T976] usb 9-1: config 0 descriptor?? [ 339.588846][ T30] audit: type=1400 audit(1757731171.204:1160): avc: denied { create } for pid=17716 comm="syz.0.5336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 339.875240][ T976] waltop 0003:172F:0500.0052: unknown main item tag 0x0 [ 339.900216][ T976] waltop 0003:172F:0500.0052: item fetching failed at offset 3/5 [ 339.929339][ T976] waltop 0003:172F:0500.0052: probe with driver waltop failed with error -22 [ 339.950584][ T6019] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 340.101672][ T24] usb 9-1: USB disconnect, device number 21 [ 340.117949][ T6019] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.142478][ T6019] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 340.159794][ T6019] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.180304][ T6019] usb 2-1: config 0 descriptor?? [ 340.610237][ T6019] hid_mf 0003:0079:1846.0053: unknown main item tag 0x1 [ 340.630563][ T6019] hid_mf 0003:0079:1846.0053: unknown main item tag 0x2 [ 340.637548][ T6019] hid_mf 0003:0079:1846.0053: item fetching failed at offset 6/7 [ 340.721674][ T6019] hid_mf 0003:0079:1846.0053: HID parse failed. [ 340.736714][ T6019] hid_mf 0003:0079:1846.0053: probe with driver hid_mf failed with error -22 [ 340.749446][T17727] Invalid source name [ 340.755800][ T30] audit: type=1326 audit(1757731172.374:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.0.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df398eba9 code=0x7ffc0000 [ 340.771422][T17727] UBIFS error (pid: 17727): cannot open "usrquota", error -22 [ 340.779306][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.821858][ T6019] usb 2-1: USB disconnect, device number 61 [ 340.874170][ T30] audit: type=1326 audit(1757731172.374:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.0.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df398eba9 code=0x7ffc0000 [ 340.897647][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.952889][ T30] audit: type=1326 audit(1757731172.374:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.0.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3df398eba9 code=0x7ffc0000 [ 340.976517][ T30] audit: type=1326 audit(1757731172.374:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.0.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df398eba9 code=0x7ffc0000 [ 340.999956][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.047629][T17729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.057196][ T30] audit: type=1326 audit(1757731172.374:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.0.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df398eba9 code=0x7ffc0000 [ 341.080672][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.122904][ T30] audit: type=1326 audit(1757731172.374:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.0.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f3df398eba9 code=0x7ffc0000 [ 341.146368][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.226395][ T30] audit: type=1326 audit(1757731172.494:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.0.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df398eba9 code=0x7ffc0000 [ 341.249871][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.290641][ T30] audit: type=1326 audit(1757731172.494:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.0.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df398eba9 code=0x7ffc0000 [ 341.314110][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.461305][ T6019] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 341.623064][ T6019] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 341.631669][ T6019] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 341.651270][ T6019] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 341.682421][ T6019] usb 9-1: config 220 has no interface number 2 [ 341.688735][ T6019] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 341.730665][ T6019] usb 9-1: config 220 interface 0 has no altsetting 0 [ 341.737469][ T6019] usb 9-1: config 220 interface 76 has no altsetting 0 [ 341.760700][ T6019] usb 9-1: config 220 interface 1 has no altsetting 0 [ 341.769310][ T6019] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 341.790487][ T6019] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.798671][ T6019] usb 9-1: Product: syz [ 341.807318][ T6019] usb 9-1: Manufacturer: syz [ 341.812322][ T6019] usb 9-1: SerialNumber: syz [ 342.038113][ T6019] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 342.057199][ T6019] usb 9-1: No valid video chain found. [ 342.070313][ T6019] usb 9-1: selecting invalid altsetting 0 [ 342.094921][ T6019] usb 9-1: selecting invalid altsetting 0 [ 342.101307][ T6019] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 342.118419][ T6019] usb 9-1: USB disconnect, device number 22 [ 342.892133][T17755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5352'. [ 343.730723][ T24] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 343.895988][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.914603][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.934717][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.948531][ T24] usb 9-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 343.965309][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.017897][ T24] usb 9-1: config 0 descriptor?? [ 344.221812][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5372'. [ 344.451020][ T24] wacom 0003:056A:0010.0054: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 344.487796][ T24] wacom 0003:056A:0010.0054: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.8-1/input0 [ 344.549690][ T24] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:0010.0054/input/input54 [ 344.663111][ T24] usb 9-1: USB disconnect, device number 23 [ 344.761835][ T9] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 344.924111][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 344.948422][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.980769][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 345.017267][ T9] usb 3-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 345.040521][ T5960] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 345.058113][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.078647][ T9] usb 3-1: config 0 descriptor?? [ 345.212123][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.230447][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.267858][ T5960] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 345.303539][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.332694][ T5960] usb 2-1: config 0 descriptor?? [ 345.521292][ T9] waltop 0003:172F:0500.0055: unknown main item tag 0x0 [ 345.561260][ T9] waltop 0003:172F:0500.0055: item fetching failed at offset 3/5 [ 345.589090][ T9] waltop 0003:172F:0500.0055: probe with driver waltop failed with error -22 [ 345.745376][ T24] usb 3-1: USB disconnect, device number 59 [ 345.759339][ T5960] razer 0003:1532:010E.0056: unknown main item tag 0x0 [ 345.776742][ T5960] razer 0003:1532:010E.0056: unknown main item tag 0x0 [ 345.789995][ T5960] razer 0003:1532:010E.0056: unknown main item tag 0x0 [ 345.808229][ T5960] razer 0003:1532:010E.0056: unknown main item tag 0x0 [ 345.817144][ T5960] razer 0003:1532:010E.0056: unknown main item tag 0x0 [ 345.848315][ T5960] razer 0003:1532:010E.0056: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.1-1/input0 [ 345.979449][ T24] usb 2-1: USB disconnect, device number 62 [ 346.628979][ T30] audit: type=1804 audit(1757731178.254:1169): pid=17840 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.5390" name="/newroot/1183/file0" dev="tmpfs" ino=5966 res=1 errno=0 [ 346.736397][T17844] netlink: 'syz.1.5394': attribute type 10 has an invalid length. [ 346.746784][T17844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5394'. [ 346.760993][ T24] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 346.947662][ T24] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 346.963494][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 346.980972][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 346.996993][ T24] usb 9-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00 [ 347.007140][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.028280][ T24] usb 9-1: config 0 descriptor?? [ 347.042658][T17834] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 347.507963][ T24] wacom 0003:056A:0039.0057: hidraw0: USB HID v0.00 Device [HID 056a:0039] on usb-dummy_hcd.8-1/input0 [ 347.730608][ T24] usb 9-1: USB disconnect, device number 24 [ 348.171046][T17895] netlink: 'syz.2.5415': attribute type 11 has an invalid length. [ 348.280607][ T5929] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 348.462166][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.486176][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.506700][ T5929] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 348.518750][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.536636][ T5929] usb 2-1: config 0 descriptor?? [ 348.976858][ T5929] arvo 0003:1E7D:30D4.0058: unbalanced collection at end of report description [ 348.993879][ T5929] arvo 0003:1E7D:30D4.0058: parse failed [ 348.999587][ T5929] arvo 0003:1E7D:30D4.0058: probe with driver arvo failed with error -22 [ 349.195561][ T5919] usb 2-1: USB disconnect, device number 63 [ 350.555103][ T5170] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 350.564097][ T5170] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 350.572447][ T5170] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 350.582122][ T5170] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 350.590644][ T5170] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 350.631028][T17908] Failed to initialize the IGMP autojoin socket (err -2) [ 350.830345][ T30] audit: type=1804 audit(1757731182.444:1170): pid=17913 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.5429" name="/newroot/295/file0" dev="tmpfs" ino=1502 res=1 errno=0 [ 350.901206][T17917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5428'. [ 350.936825][T17917] vxcan5: entered promiscuous mode [ 351.032739][ T4579] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.104888][T17908] chnl_net:caif_netlink_parms(): no params data found [ 351.111793][ T9] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 351.160734][ T24] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 351.274492][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 351.284356][ T4579] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.302687][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.315167][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 351.327421][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 351.337169][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 351.347037][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.366253][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 351.366352][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 351.408540][ T9] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 351.414569][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 351.421320][ T9] usb 9-1: Manufacturer: syz [ 351.435909][ T24] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 351.449443][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.492039][ T5960] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 351.516614][ T9] usb 9-1: config 0 descriptor?? [ 351.517390][ T24] usb 1-1: config 0 descriptor?? [ 351.561920][T17921] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 351.640103][ T4579] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.652303][ T5960] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 351.676676][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 351.687839][T17908] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.687897][ T5960] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 351.734034][T17908] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.754189][T17908] bridge_slave_0: entered allmulticast mode [ 351.760522][ T5960] usb 3-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00 [ 351.776042][T17908] bridge_slave_0: entered promiscuous mode [ 351.781102][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.805744][ T5960] usb 3-1: config 0 descriptor?? [ 351.810303][T17908] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.834477][T17936] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 351.838373][T17908] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.850534][ T9] rc_core: IR keymap rc-hauppauge not found [ 351.850549][ T9] Registered IR keymap rc-empty [ 351.850643][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 351.870698][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 351.872364][T17908] bridge_slave_1: entered allmulticast mode [ 351.886865][T17908] bridge_slave_1: entered promiscuous mode [ 351.903904][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 351.905125][ T4579] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.947083][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input60 [ 351.975348][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 352.030937][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 352.044482][ T24] corsair-psu 0003:1B1C:1C0C.0059: item fetching failed at offset 2/5 [ 352.071803][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 352.076581][ T24] corsair-psu 0003:1B1C:1C0C.0059: probe with driver corsair-psu failed with error -22 [ 352.101233][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 352.126408][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 352.164435][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 352.197857][T17908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.205203][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 352.273336][T17908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.281382][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 352.320786][ T5960] wacom 0003:056A:0039.005A: hidraw0: USB HID v0.00 Device [HID 056a:0039] on usb-dummy_hcd.2-1/input0 [ 352.332088][ T976] usb 1-1: USB disconnect, device number 30 [ 352.342638][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 352.366922][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 352.402241][ T9] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 352.424640][ T9] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 352.462481][ T9] usb 9-1: USB disconnect, device number 25 [ 352.525976][ T6019] usb 3-1: USB disconnect, device number 60 [ 352.630697][ T5170] Bluetooth: hci11: command tx timeout [ 353.231952][ T6019] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 353.361355][T17908] team0: Port device team_slave_0 added [ 353.376272][T17908] team0: Port device team_slave_1 added [ 353.453062][ T6019] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.468999][ T6019] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.485030][ T6019] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.496031][ T6019] usb 1-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 353.506114][ T6019] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.516547][ T6019] usb 1-1: config 0 descriptor?? [ 353.561287][T17908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.569716][T17908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.597228][T17908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.610999][T17908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.617936][T17908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.644997][T17908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.918207][ T4579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.932465][ T4579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.942714][ T4579] bond0 (unregistering): Released all slaves [ 353.953311][ T6019] wacom 0003:056A:0010.005B: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 353.970687][ T6019] wacom 0003:056A:0010.005B: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.0-1/input0 [ 353.995011][ T6019] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0010.005B/input/input64 [ 354.184843][ T9] usb 1-1: USB disconnect, device number 31 [ 354.237336][T17908] hsr_slave_0: entered promiscuous mode [ 354.246162][T17908] hsr_slave_1: entered promiscuous mode [ 354.255449][T17908] debugfs: 'hsr0' already exists in 'hsr' [ 354.263020][T17908] Cannot create hsr debugfs directory [ 354.426918][ T4579] hsr_slave_0: left promiscuous mode [ 354.433484][ T4579] hsr_slave_1: left promiscuous mode [ 354.439108][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.447009][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.455364][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.463187][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.483136][ T4579] veth1_macvtap: left promiscuous mode [ 354.488613][ T4579] veth0_macvtap: left promiscuous mode [ 354.494543][ T4579] veth1_vlan: left promiscuous mode [ 354.499818][ T4579] veth0_vlan: left promiscuous mode [ 354.702238][ T5852] Bluetooth: hci11: command tx timeout [ 354.793933][ T5852] Bluetooth: hci5: command 0x0406 tx timeout [ 354.864616][ T4579] team0 (unregistering): Port device team_slave_1 removed [ 354.895456][ T4579] team0 (unregistering): Port device team_slave_0 removed [ 355.382060][T17908] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.469718][T17908] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.542647][T17908] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.587526][T17908] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.759317][T17908] netdevsim netdevsim4 netdevsim0: renamed from eth5 [ 355.769710][T17908] netdevsim netdevsim4 netdevsim1: renamed from eth6 [ 355.785168][T17908] netdevsim netdevsim4 netdevsim2: renamed from eth7 [ 355.795208][T17908] netdevsim netdevsim4 netdevsim3: renamed from eth8 [ 356.005508][T17908] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.026039][ T4579] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.033182][ T4579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.068215][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.075344][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.422102][T17908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.772992][T17908] veth0_vlan: entered promiscuous mode [ 356.781221][ T5170] Bluetooth: hci11: command tx timeout [ 356.791727][T17908] veth1_vlan: entered promiscuous mode [ 356.877134][T17908] veth0_macvtap: entered promiscuous mode [ 356.898910][T17908] veth1_macvtap: entered promiscuous mode [ 356.977956][T17908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.018185][T17908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.030264][T17908] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 357.051516][T17908] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 357.071068][T17908] wireguard: wg0: Could not create IPv4 socket [ 357.080144][T17908] wireguard: wg1: Could not create IPv4 socket [ 357.089007][T17908] wireguard: wg2: Could not create IPv4 socket [ 358.371511][ T30] audit: type=1400 audit(1757731189.994:1171): avc: denied { recv } for pid=18061 comm="dhcpcd-run-hook" saddr=10.128.0.169 src=41016 daddr=10.128.10.8 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 359.297583][ T30] audit: type=1400 audit(1757731190.904:1172): avc: denied { write } for pid=18105 comm="syz.8.5456" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 359.368755][ T30] audit: type=1400 audit(1757731190.974:1173): avc: denied { write } for pid=18109 comm="syz.0.5459" path="socket:[56850]" dev="sockfs" ino=56850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 359.895711][ T5852] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 359.905515][ T5852] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 359.914383][ T5852] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 359.923363][ T5852] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 359.931742][ T5852] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 359.955827][T18126] Failed to initialize the IGMP autojoin socket (err -2) [ 360.984744][T18126] netdevsim netdevsim4 netdevsim0: renamed from eth5 [ 361.012702][T18126] netdevsim netdevsim4 netdevsim1: renamed from eth6 [ 361.034023][T18126] netdevsim netdevsim4 netdevsim2: renamed from eth7 [ 361.053508][T18126] netdevsim netdevsim4 netdevsim3: renamed from eth8 [ 361.669747][T18126] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 361.696588][T18126] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 361.716363][T18126] wireguard: wg0: Could not create IPv4 socket [ 361.725563][T18126] wireguard: wg1: Could not create IPv4 socket [ 361.734714][T18126] wireguard: wg2: Could not create IPv4 socket [ 365.510700][ T31] INFO: task syz.4.3340:13128 blocked for more than 143 seconds. [ 365.518462][ T31] Not tainted syzkaller #0 [ 365.529980][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 365.539131][ T31] task:syz.4.3340 state:D stack:27256 pid:13128 tgid:13127 ppid:5843 task_flags:0x400040 flags:0x00004004 [ 365.557665][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 365.561196][ T31] [ 365.570864][ T30] audit: type=1400 audit(1757731197.184:1174): avc: denied { write } for pid=5833 comm="syz-executor" path="pipe:[5394]" dev="pipefs" ino=5394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 365.611212][ T31] __schedule+0x1190/0x5de0 [ 365.615797][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 365.638529][ T31] ? __pfx___schedule+0x10/0x10 [ 365.643773][ T31] ? find_held_lock+0x2b/0x80 [ 365.685527][ T31] ? schedule+0x2d7/0x3a0 [ 365.689938][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170 [ 365.798103][ T31] schedule+0xe7/0x3a0 [ 365.811056][ T31] schedule_preempt_disabled+0x13/0x30 [ 365.816581][ T31] __mutex_lock+0x81b/0x1060 [ 365.840594][ T31] ? kasan_save_stack+0x42/0x60 [ 365.845504][ T31] ? kasan_save_stack+0x33/0x60 [ 365.850387][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170 [ 365.910491][ T31] ? __netlink_dump_start+0x6d6/0x990 [ 365.915964][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 365.950472][ T31] ? ____sys_sendmsg+0xa95/0xc70 [ 365.955482][ T31] ? ___sys_sendmsg+0x134/0x1d0 [ 365.960347][ T31] ? __sys_sendmsg+0x16d/0x220 [ 365.980204][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170 [ 366.000499][ T31] nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170 [ 366.006561][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 366.024501][ T31] ? rcu_is_watching+0x12/0xc0 [ 366.029324][ T31] ? trace_kmalloc+0x2b/0xd0 [ 366.040238][ T31] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 366.066137][ T31] ? __alloc_skb+0x166/0x380 [ 366.078793][ T31] ? __asan_memset+0x23/0x50 [ 366.089598][ T31] ? __build_skb_around+0x278/0x3b0 [ 366.095567][ T31] ? __alloc_skb+0x200/0x380 [ 366.100176][ T31] ? __pfx___alloc_skb+0x10/0x10 [ 366.110478][ T31] genl_dumpit+0x122/0x230 [ 366.118142][ T31] netlink_dump+0x539/0xd30 [ 366.127891][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 366.134696][ T31] ? __asan_memset+0x23/0x50 [ 366.139319][ T31] ? genl_start+0x67f/0x980 [ 366.158186][ T31] __netlink_dump_start+0x6d6/0x990 [ 366.170972][ T31] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 366.176743][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 366.189340][ T31] ? find_held_lock+0x2b/0x80 [ 366.194430][ T31] ? __pfx_genl_get_cmd+0x10/0x10 [ 366.199472][ T31] ? __pfx_genl_start+0x10/0x10 [ 366.210445][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 366.216798][ T31] ? __pfx_genl_done+0x10/0x10 [ 366.231108][ T31] ? __radix_tree_lookup+0x21f/0x2c0 [ 366.236440][ T31] genl_rcv_msg+0x46e/0x800 [ 366.247148][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 366.253018][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 366.259552][ T31] netlink_rcv_skb+0x158/0x420 [ 366.270654][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 366.275729][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 366.287207][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 366.293492][ T31] genl_rcv+0x28/0x40 [ 366.297495][ T31] netlink_unicast+0x5a7/0x870 [ 366.303003][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 366.308303][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 366.314645][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 366.321341][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.326664][ T31] ____sys_sendmsg+0xa95/0xc70 [ 366.331766][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 366.337240][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.342893][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 366.348192][ T31] ___sys_sendmsg+0x134/0x1d0 [ 366.353201][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.358450][ T31] __sys_sendmsg+0x16d/0x220 [ 366.363398][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 366.368513][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 366.373832][ T31] do_syscall_64+0xcd/0x4e0 [ 366.378350][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.384842][ T31] RIP: 0033:0x7f8135d8eba9 [ 366.389261][ T31] RSP: 002b:00007f8136c23038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.398032][ T31] RAX: ffffffffffffffda RBX: 00007f8135fd5fa0 RCX: 00007f8135d8eba9 [ 366.406290][ T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 366.414645][ T31] RBP: 00007f8135e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 366.425259][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.433488][ T31] R13: 00007f8135fd6038 R14: 00007f8135fd5fa0 R15: 00007ffedd9b9148 [ 366.441724][ T31] [ 366.444789][ T31] [ 366.444789][ T31] Showing all locks held in the system: [ 366.480476][ T31] 1 lock held by khungtaskd/31: [ 366.485355][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 366.530528][ T31] 2 locks held by getty/5604: [ 366.535230][ T31] #0: ffff88814cf1d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 366.663332][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 366.712022][ T31] 3 locks held by kworker/1:6/6018: [ 366.720714][ T31] 2 locks held by syz.0.2152/10433: [ 366.725921][ T31] #0: ffffffff90428590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 366.766628][ T31] #1: ffffffff8e9dabe8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 366.791932][ T31] 3 locks held by syz.4.3340/13128: [ 366.797149][ T31] #0: ffffffff90428590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 366.840454][ T31] #1: ffff888034bc96d8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 366.890499][ T31] #2: ffffffff8e9dabe8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170 [ 366.930762][ T31] 2 locks held by syz.6.3783/14116: [ 366.950437][ T31] #0: ffff88807f98c0e0 (&type->s_umount_key#81){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 366.981084][ T31] #1: ffffffff8e9dabe8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 367.029547][ T31] 2 locks held by syz.7.3803/14165: [ 367.035678][ T31] #0: ffffffff90428590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 367.056447][ T31] #1: ffffffff8e9dabe8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 367.070533][ T31] 1 lock held by syz.3.3922/14439: [ 367.075665][ T31] #0: ffff88807f98c0e0 (&type->s_umount_key#81){++++}-{4:4}, at: super_lock+0x31c/0x3f0 [ 367.092592][ T31] 2 locks held by syz.2.3955/14510: [ 367.097816][ T31] #0: ffffffff903850c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 367.107351][ T31] #1: ffffffff8e5ccb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 367.117522][ T31] 3 locks held by syz.8.4256/15226: [ 367.122763][ T31] #0: ffff88805d7e8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 367.135541][ T31] #1: ffff88805d7e80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 367.146506][ T31] #2: ffffffff905ed7e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 367.156810][ T31] 1 lock held by syz.9.4361/15443: [ 367.171933][ T31] #0: ffff88807f98c0e0 (&type->s_umount_key#81){++++}-{4:4}, at: super_lock+0x31c/0x3f0 [ 367.188372][ T31] 3 locks held by syz.0.4431/15590: [ 367.193886][ T31] #0: ffff88805d568dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 367.203925][ T31] #1: ffff88805d5680b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 367.213926][ T31] #2: ffffffff905ed7e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 367.224198][ T31] 1 lock held by dhcpcd-run-hook/18407: [ 367.250609][ T31] [ 367.279465][ T31] ============================================= [ 367.279465][ T31] [ 367.335687][ T31] NMI backtrace for cpu 1 [ 367.335702][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 367.335722][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 367.335731][ T31] Call Trace: [ 367.335737][ T31] [ 367.335744][ T31] dump_stack_lvl+0x116/0x1f0 [ 367.335771][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 367.335795][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 367.335815][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 367.335842][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 367.335861][ T31] watchdog+0xf0e/0x1260 [ 367.335886][ T31] ? __pfx_watchdog+0x10/0x10 [ 367.335903][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 367.335925][ T31] ? __kthread_parkme+0x19e/0x250 [ 367.335952][ T31] ? __pfx_watchdog+0x10/0x10 [ 367.335971][ T31] kthread+0x3c2/0x780 [ 367.335988][ T31] ? __pfx_kthread+0x10/0x10 [ 367.336007][ T31] ? rcu_is_watching+0x12/0xc0 [ 367.336028][ T31] ? __pfx_kthread+0x10/0x10 [ 367.336046][ T31] ret_from_fork+0x56a/0x730 [ 367.336063][ T31] ? __pfx_kthread+0x10/0x10 [ 367.336080][ T31] ret_from_fork_asm+0x1a/0x30 [ 367.336114][ T31] [ 367.336120][ T31] Sending NMI from CPU 1 to CPUs 0: [ 367.460110][ C0] NMI backtrace for cpu 0 [ 367.460123][ C0] CPU: 0 UID: 0 PID: 18413 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 367.460140][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 367.460148][ C0] RIP: 0010:copy_process+0x1b8f/0x7690 [ 367.460170][ C0] Code: 03 80 3c 02 00 0f 85 53 5a 00 00 49 8d bf 58 07 00 00 48 b8 00 00 00 00 00 fc ff df 49 c7 87 50 07 00 00 00 00 00 00 48 89 fa <48> c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 16 5a 00 00 49 8d [ 367.460182][ C0] RSP: 0018:ffffc900035cfb40 EFLAGS: 00000246 [ 367.460194][ C0] RAX: dffffc0000000000 RBX: ffff888022342b60 RCX: 0000000000000000 [ 367.460203][ C0] RDX: ffff888022342b98 RSI: 0000000000000001 RDI: ffff888022342b98 [ 367.460212][ C0] RBP: ffffc900035cfca8 R08: 0000000000000000 R09: 0000000000000000 [ 367.460221][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888022342e10 [ 367.460229][ C0] R13: ffff888022342a48 R14: 0000000001200000 R15: ffff888022342440 [ 367.460238][ C0] FS: 00007f34dfebec80(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 367.460251][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.460260][ C0] CR2: 00007f34e01227e8 CR3: 000000004c8e1000 CR4: 00000000003526f0 [ 367.460269][ C0] Call Trace: [ 367.460273][ C0] [ 367.460278][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 367.460298][ C0] ? css_rstat_updated+0x1c2/0x510 [ 367.460318][ C0] ? __pfx_copy_process+0x10/0x10 [ 367.460335][ C0] ? find_held_lock+0x2b/0x80 [ 367.460350][ C0] ? __up_read+0x1f8/0x750 [ 367.460365][ C0] kernel_clone+0xfc/0x930 [ 367.460381][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 367.460402][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 367.460426][ C0] __do_sys_clone+0xce/0x120 [ 367.460445][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 367.460467][ C0] ? dnotify_flush+0x79/0x4c0 [ 367.460487][ C0] do_syscall_64+0xcd/0x4e0 [ 367.460505][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.460519][ C0] RIP: 0033:0x7f34e0058636 [ 367.460529][ C0] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 367.460540][ C0] RSP: 002b:00007ffe6423b8c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 367.460553][ C0] RAX: ffffffffffffffda RBX: 00007ffe6423b8c8 RCX: 00007f34e0058636 [ 367.460561][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 367.460574][ C0] RBP: 000055a5efa9f810 R08: 0000000000000000 R09: 0000000000000000 [ 367.460582][ C0] R10: 00007f34dfebef50 R11: 0000000000000246 R12: 000055a5efaa1d40 [ 367.460591][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.460604][ C0] [ 367.466997][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 367.467010][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 367.467027][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 367.467036][ T31] Call Trace: [ 367.467042][ T31] [ 367.467048][ T31] dump_stack_lvl+0x3d/0x1f0 [ 367.467070][ T31] vpanic+0x6e8/0x7a0 [ 367.467092][ T31] ? __pfx_vpanic+0x10/0x10 [ 367.467115][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 367.467136][ T31] panic+0xca/0xd0 [ 367.467149][ T31] ? __pfx_panic+0x10/0x10 [ 367.467162][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 367.467184][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 367.467200][ T31] ? watchdog+0xd78/0x1260 [ 367.467217][ T31] ? watchdog+0xd6b/0x1260 [ 367.467233][ T31] watchdog+0xd89/0x1260 [ 367.467253][ T31] ? __pfx_watchdog+0x10/0x10 [ 367.467268][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 367.467288][ T31] ? __kthread_parkme+0x19e/0x250 [ 367.467310][ T31] ? __pfx_watchdog+0x10/0x10 [ 367.467331][ T31] kthread+0x3c2/0x780 [ 367.467346][ T31] ? __pfx_kthread+0x10/0x10 [ 367.467363][ T31] ? rcu_is_watching+0x12/0xc0 [ 367.467381][ T31] ? __pfx_kthread+0x10/0x10 [ 367.467397][ T31] ret_from_fork+0x56a/0x730 [ 367.467412][ T31] ? __pfx_kthread+0x10/0x10 [ 367.467427][ T31] ret_from_fork_asm+0x1a/0x30 [ 367.467453][ T31] [ 367.860065][ T31] Kernel Offset: disabled [ 367.864457][ T31] Rebooting in 86400 seconds..