last executing test programs: 50.81383879s ago: executing program 1 (id=11830): io_submit(0x0, 0xfffffffffffffeca, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x2, 0x3, "b604fb", 0x1, 0xfe}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 50.166130749s ago: executing program 1 (id=11834): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) sendmsg$netlink(r0, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003500)=ANY=[@ANYBLOB="18000000140001002dbd700000f800000a"], 0x18}], 0x1, 0x0, 0x0, 0x8841}, 0x0) 50.092817928s ago: executing program 1 (id=11835): r0 = syz_io_uring_setup(0x180f, &(0x7f00000035c0)={0x0, 0x50d1, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) 49.946287402s ago: executing program 1 (id=11838): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x9) 49.913109502s ago: executing program 1 (id=11840): io_setup(0x1, &(0x7f0000000000)=0x0) io_destroy(r0) syz_io_uring_setup(0x57ab, 0x0, 0x0, 0x0) io_pgetevents(r0, 0x1ff, 0x0, 0x0, 0x0, 0x0) 49.430260764s ago: executing program 1 (id=11849): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[], 0x13c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 49.306640186s ago: executing program 32 (id=11849): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[], 0x13c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 3.29844988s ago: executing program 4 (id=12566): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x4}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x64, 0x81, 0x4, 0x8, 0x1286, 0x1fa4, 0xbb2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x30, 0xe, [{{0x9, 0x4, 0x56, 0x1, 0x0, 0x27, 0xda, 0x5c, 0x8}}]}}]}}, 0x0) 2.279312875s ago: executing program 0 (id=12573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000800008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.241457238s ago: executing program 0 (id=12574): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc959, 0xfffffff3, 0x9, 0x7f, 0x5, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xde5, 0x3, 0xdfff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0x100e65f, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0xfffffffb, 0x3, 0xa, 0x0, 0x71, 0x20007, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x4012f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0x200d, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x7, 0x9, 0x0, 0x3ff, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8200, 0xffff, 0x5, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x401, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x6, 0x5, 0x5, 0x0, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0xe, 0x8, 0x4, 0x6d04, 0x4, 0x33, 0x3, 0x6, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x1000006, 0xb, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x8, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x2, 0x8ffff, 0xa620, 0x4, 0x5, 0x1, 0x2, 0x6, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7fffffff, 0x5, 0x8, 0xc8, 0x8, 0x4, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x7, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x1000004, 0x5, 0xb1c, 0x1, 0x200, 0xffff3440, 0x1]}, 0x45c) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) read$ptp(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 2.12032748s ago: executing program 0 (id=12577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000220100005c7ec32f26"]) 1.998338985s ago: executing program 0 (id=12580): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f00000003c0)={{@hyper}, 0x0, 0x8, 0x1}) 1.922547519s ago: executing program 0 (id=12582): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0xff3f, &(0x7f0000000240)=ANY=[@ANYBLOB="200f2e00000011c7"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 1.749773826s ago: executing program 4 (id=12585): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) 1.315142428s ago: executing program 4 (id=12590): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x0, 0x2cc}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.257758256s ago: executing program 5 (id=12592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaabb08004519001400e400524884"], 0x26) 1.029281435s ago: executing program 5 (id=12596): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}], 0x10) 962.071881ms ago: executing program 3 (id=12597): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x50, 0x15, 0x200, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x170, 0x2b8, 0x25c, 0x0, 0x7, 0x258, 0x3a8, 0x3a8, 0x258, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0xa8, 0x110, 0xa010000}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 944.949269ms ago: executing program 5 (id=12598): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000300)={0x0, @bt={0x4, 0x5, 0x1, 0x1, 0xffffffff7fffffff, 0x8, 0x8, 0xfffffff7, 0x4, 0x6, 0x0, 0x9, 0x1, 0x27d, 0x1, 0x2a, {0x8, 0x7}, 0x4, 0xe}}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb635773f07ebbefa, 0x8031, r0, 0x28f43000) setns(0xffffffffffffffff, 0x24020000) 881.590448ms ago: executing program 5 (id=12599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000300)="77729a2d3c", 0x5}, {&(0x7f00000005c0)="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", 0x115}, {&(0x7f00000003c0)="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", 0x14f}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125971357630b6f3eb4fb4064c42c2b2519a1c77824df6f0653fb116149fcb5c7e46fce32b1de7f511951d4b1ae47781250afdb11680684c1d2854810a90d", 0xe8}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb", 0x53}, {&(0x7f0000000dc0)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d623cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3", 0xd4}], 0x7, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x1c}}}}], 0x20}, 0x0) 871.886286ms ago: executing program 3 (id=12600): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 851.315912ms ago: executing program 2 (id=12601): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x4c, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0x4}, {0xc, 0x4, {0x1}}, {0xc}}}]}]}, 0x4c}}, 0x41) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) 778.349457ms ago: executing program 5 (id=12602): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x7, 0x400, 0x0, {}, {}, {}, 0x1, @can={{0x0, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "f6aa7c90788110d5"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) 722.50499ms ago: executing program 2 (id=12603): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3590bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d080000000000000014f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bdd277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabaf18647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15283217e03d02a4054f34af3a65ef6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a62bc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b391b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815501681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add38a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889581c750c34586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7004757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11c39d6fdcf5926d6ad5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a038813f2bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa500a0000000000006a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced087a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5f89557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000c, 0x10012, r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x1, 0x65, 0xc, 0x2, 0x4, @multicast}, 0x10) 662.129074ms ago: executing program 5 (id=12604): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000040)={0x0, 0xd, 0x2, "2f8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 655.256186ms ago: executing program 2 (id=12605): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000000)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x8, 0xe, 0x0, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 640.341927ms ago: executing program 4 (id=12606): creat(&(0x7f00000002c0)='./file0\x00', 0x70) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) r1 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398ee, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r1}}, 0x40) 550.378393ms ago: executing program 2 (id=12607): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000dc0)={0x44, 0x0, &(0x7f0000000b80)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 533.101029ms ago: executing program 4 (id=12608): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 452.078808ms ago: executing program 2 (id=12609): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 397.341992ms ago: executing program 4 (id=12610): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) 358.135368ms ago: executing program 2 (id=12611): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000200)={0x2c, &(0x7f0000000180)={0x0, 0x0, 0x1, "ba"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 206.278963ms ago: executing program 3 (id=12612): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r2, r3, 0x100, 0x0, 0x9, 0x2, {0x0, 0x0, 0xfffe, 0x1, 0x4, 0x3, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) 190.96011ms ago: executing program 3 (id=12613): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 143.437018ms ago: executing program 3 (id=12614): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x38}, 0x4, 0x700000000000000}, 0x0) 104.527819ms ago: executing program 3 (id=12615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000010000000000000000000d000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0x80, {0x8080000, 0x3000, 0x2}}, "a9cbc4b723986beb2541731c8831607b6ee747534f2610e68420ac50bde6dad58d04aad3777f18b4f168b3950653ce1d7740b6225b60f102dea41282032f21c3f19760a59ad876506e4e939e80e92248edfd8137e41621c1a490cf3cbb0502fa6deb4cb0efa6bc813cca06ed4828bafa15d1afd8ac82b71d1a7b410eeac6a6f31e4995b05d3f93bf80a053ae74958ed42c6c4b4d0bcaa08d3e6025a166ac6f19973f974613e0d7ca52d6a648ed23fcce9f475faa3e49d697324fa1b2cdfef7deb66a190e9185a90f5c54c88895af1a61f8c0722f0c0bf9835d8910449682cc5551ec995aec222238bb28f41ba7f99f93b785dd2d48cf389f27da125b9c3ec7f716d6b6b696a93e625f0e17b4ff3bac5eec8e2dd837254c16d8c9b2a773ac70b8dc7216980fcf1db0cd885a6f3379dfcca516b0b5771d3dfb2212fd569b8f6003dcf8478390e14a5bf73eb1a61a12ce20ea3f5fbd6d9a56a4adf6043190cc7d559e7773668d0498f6c7438917d204ed2ec53da03cc744619be3785cd8cddb678f8e90965f22242bb62fa3590dde45cacad3852a54154a90d7495cc4cfbd7baacc19604efd864cc76a7e867cd7403301f45a3ad20ed8edf412e4aae5f279eada88ee43a436dd3b1f37098b7d81759aff2d81e5593535d44035fdcbae0f45a7163c06b8ed7da27a03e266947d7f11d9e1600f1a88b99643a0b99abad360b8137415f7800f8a5a16ba306778733d5493cc73d0aacebe1cc4618847bd620034cb617c55e47ff8d8000f52c25a6b3e9272c297e6b30bed370dda4c2b56278893a4faefb28a87c40229d3f80814e128eedb7050465e1e00547a1b77ebaef78355d9867ce521138d63f147ec3de6cac38d9eeb1d167494466e00d97a32701117bbe0f95304970e632b9cf8ded044b3f1c01326095b422678d798a9c5f8ab05f4e6549639186723aa3d38927ed4ca94a9e6de3c4f5ce99d090389473455cb366c7dfcb43ebe60271a3693e80ae4948291753007f5032f518ffc832f3e819f3bdac1085a80cdd494cdcac4a874a14818b9dae534559c2c5a542a12949a22fddb9060e8a400f96512aa8eaaa6659932dc8852f5709a808604c2fda229c79933646e36255948baec6e0c2d4fbe056628157ba456603e5cb45761b5aa97c0daceb3e6d7a192d109847057cb4322c9c5e62403c921e9cebeca77d12c3ed05f5e131e3c00d9070618872ea8a1f05e4598c98739d3a9245e537ed992aa4eb8a571e4c7c0dc797f91e3258835f9db1b6501edaaf38c9fd4d718c743d30b6f1e480ce9408aa6b894055768738e3df843301d99b476ba8d30f6483022ad7fd50493e600700ef1b70c72f607feb0df9898b61a38f4f59d23779b7af4a5b5a0e7379877d8c875d1e47a9ddbac19208cd22e05f729a9175b9bf1c96618d63585204eb5ea29e0a0f17c12219fd51bc462dcff6d3ff73b64d2a5f7ebe6ebdefd841698e909cf1018a88afefc1802fc97c22a240f20ce6938ae6b2224f7ca311622695577f3e4cb8f7e87bcf5bcdcc5311815bab1499465f687903b4da5693c83cbe13ba3d94f413bbdf9886241fc1f0b9ea00e7b2d1c2fe29d8921c56919bbfa091d4542c590a18848256b7eca92114c5542356bb15e1cd59b28a5d5b86bb92c30e88ea6edc6efd3c685a7e9b840b61f445bb57d670d3dbba61da442fcdabd4c14b9dd6543aafca5bea6ca16c00bbdc0999cec79272dfd1de86bea7d830ec2deaa339c2fc57d6490ee7cf3bb4e6cb4b8dcaa4279bef0af601f96dc25a3cf926eb6c5eb9529a266e1a9d96fbb5e0ffeb472d40e3853f42d69e725d2dd570b531779a09a5f945a2dce4ddd898be60b9d38f3c305f942f8f8a3ee992de01a0d6b3db1a4174b770681d2470edd2319a9b9d04d3cadd67583a313c071f809c89134b2b714cb2d7247d4d6b5d794302e9408e946bf1cadc767a8ae918a6608f7d2dbb2d825e949c823ac6bda0c46dea864c83222f3c7f7ec020f3a6445f3762dfaae5a28c3857053b2548d11c9b9f4af5366b43012e35d14ba139085493e95ad24bcc92b835f3c72ff762fcbe3d04ee2051e959a9e680f51425d5eeeedd99767fccda20b44bbbac6989e1d6f70f030c2530b83923fbf27fbf24f62ff7a5619b39b338e165dcf66faf6092edd19216fdacfb8eb80bd7d8a7767f538c3021e20f498c8e456bc32af1157b5988950caf1c478047f132c01f53c12929f030e9d78c284e64a521350d72748ef214c05f4c8d2e47384c3cd29c99a2df1abb2e8ff5a363a488feb119e8ad5e3c39a4f24449d00b3772090b499e2c65b50a3e6ce7f1e2f2bac0ae5e58147d1d6887617ca38d12b1cc9a5e3ee47539f40179136698acd9b9e20a4f85335dcb19d4ba4a05bcd84b27a9f1897ab8f67abf78ba3ce4d87b37c129562d33bb0836c8fe830c068e7c8b6728ed585258c7d82b5c407d0532bf5ba60cfb0a6e6f3aa44bdf3bb7ac389023c3db4395c3875a3496d85640d423775d8ac0c4c3ab1831bdd785a5ca0ba2073bdf6970e4b63718944603ab32b83d7c73af090c3a941561a76f08e2235e1ea8a0b721cd6a73466664c411c33fd1a3e46e580c77034cb09ac38b6d1824f642d3354e827b6ddc0ca15c3bd7192882eaece388d428282c859fed7d280e5d81cd0252c149154e2038a3f2535781dc81d7221278c21ee819fb913fc8d97e96f3dbbf0b2cd63a0ceeadec43fca7a760f45aa53de97597b4afb3abf5921125e9f148da377556e6de1a62aab6055b10c1698649515e62c572d62d901ae7fcd417b627db64785fbdc21f0e978eb143d7abb2771de9a912466fb6e6f55a12f209e131732d45a8293f1a36ddddfad54f857016e3ab7fceb97ddfde1a8c8569dfa972ec636e7c93e603d5e1d0e98d6f109dfa6df50ce987abfc291aba0e488ba8f0596fbd1bacd58862b611250a85cd34e7d100f785286d815281b62ef2dfeea5e8ba4ee4a019af0ff59b0f4f3049f8718d0fca57de1cf88763d13ad26c50cccec4faba99d899ef079c3400052d065cc0a44e8f73dc5bef5f8681015b29c96dacd026d920f369a2b0c341b8295f5268e2d9bf80df2d9ea1017b5b41ec2060c2fecc67c040e7c37521b6d6174c4d4ed4accc5479f6fc4ddc0e45a7f8030ff8e23f000315a3565498d07bd0cc6459f5cff23b40ffb80ace2f48fe0c1a337bb4f748bb8c057089de5cd727b278b45d84a8f7df9f898b3cef2ec319b032f888c4953bfe141c8e4b67ab3f95fa133790ea17b27be21c9478da70641265045e81e28229a4dc15f59c2f18b1b9c082d1154bc9565508fc9419912b48f3b1271609006399a844f6ccedb6323ada63d3e0b340fd07cf9e3b98b1d193bd76796c2a185366b25468017d28371d8792eb42304961bc9c1f4ef4025d2814837dacc9f1d777bfeddb30eca1cacd9f5b6619c4000252ecdabf7107dff264046c111c6f5767e3486c37ec175f52bd3460a7ad49e35bb729ba76e2fa5e117c49b750000005e0abf56340740b81ea37c5df26b7c885cc5da412cf4e9932e2561aa7945945dcba0677786c9ea9b9aee47d73454df82048f021b30a817606c96415c22e1e908316f84aae52e050e31176408d35ef33091618df7d38d22bd2b626dc138f423c32362878c8f6538dcf0b96c4298668d4bb35773c952bbebd4778c964b0eae8eac9bef3469ea5da890377c500ea027180f5308585cd7941c7e3305c32d610de49b5c1acce6c285d88a99dcebb2b5972a276d416abf25b44c1712a43d3e30005a1535553e779c0f72ff519d2407214c02e7020ca479e93c3fb2b867ad73e69ba10e92f329cd54c4c80d227d0710cf384fd9a39d4c4053afce6d1e93b47137843d149e888bd868b1b2179c1fdd8291d15724db10a756300209ae4a2ed91788fe9f980af1bb00d05a8fe1a020fe4bba91fb487c8ea674a6739067a0a86b7f2a4fc141f6c864f065fc6e5effdb5a1f1d063c6888626e13ced52f3669677dad96da1cfff7d700e9f6f74131b8ac0f4fb6c8d5fd675b1ed6001bba7dd0e95567a6d06fe28e756609821312f4725c5909c6353ad385e57fb162e2f65b5e2a0100aaa356a19b9c5c183d195d0134adb8bc8d03415daafd95f3a5e44f201741e22dd905dc12469664040ce714a5d9042f58db392d6c6af1eaa4c82cd9b4996252b44334be627708463ffe52a80d8d1c8a5b1a23f9c68144c4a6c6387e542b3cb9de7765faf05fda086986d3c6a1f0906b2ea0eba741abb9514ccd57f2d8ea1d67145c5d71749b560f85093ecc265a24239078253fa0bd39bf67f8e1d78f07e167c05d808771c7b0146af368e8859273ef76f9feedf7fc69640b5e95a25076c477338e31cc9a7348b8a31a0f8d4dd9e6c46f18126279c5d1192ddee08a7057195689954b26a19dcfd2a59febb6556c18c18abc85527372919196b29a737f8bb3b97bebaf3e6c43099064e067f12772c2333be19dd4e803289430a660d68963a26ff1b1c8c664c0318a2558dec140d984837a936651906ab960b6bff8bc8b32704f3e0769e6c85c9f5bd50270bc1030ea71f2db5c43116bd0641ed31ab6db12514aec68febe59e04d2b872c9fc2173017ee6e75a18d6832c9992d1ed2ead9452dce9b2efa01dc97ea31ee5c3f5743760f2589615f45738140d0f8c148f1858d0897094a34727493e607132bc1eefa0d0ff236f9ac5a2a0f0bf06719c1d5061846e427fa36138c808741ccbd10ad3f6f54470804e656a8ab1a9ee9a523bed87cb2fd4d6db8aa6d6b80d1e9886dc12b915665101b9094a22f44437918005356fed797ebd97ec6493bd681f69321f9735ae6d3d6822818c7cfb21c5f3a0f9d5b8ef070c916fe9ccbbf04128a27e7928e3572f125b986c52ec0de078b40135b922a2feb294b0349df06d1c3e2c9d2ed2ee88b7a1673423c6baedb51beb8f8cb1b3b986d1b9632fedfaec8e9a237311beb89cb0dd7efaa5b68537641d06b7cbfda581344c87452b4d3fe96cea6143378c4dd7586a9d55c666cce828ef91a35f3f0a5c9c369bd20c1bc7cc77fcf316a567fa21863b12c43faf3b9588dce4caa151937c6ee699cf49dba041775773ae062c69783758513a178bf46d2d40e24afe8975dd768a466755af2ffbb9fa728724a18fc9f427672ad5867a72ae8caca60fcc90cf817c291a2025b5243ae36e200b5e5c9ee4e90eac775c3b29fe1df8c35716f37d11961084fc28b0f8855376ec85d7741535f88db7977629dd832f06bb258e9a88cfc8671df2763fd9383a777f768c7aaecb9a7af9e76bb719767767c3d5178e2a10765c6b2ae80753f403125a9203ede6ed44eb96a1a010842f88f020dbb7f8df8bcbea0b60f1b99dd9b9aae2dbc995edc8ed82ec5e21e8d5e4d8d9fd0bfab342db38d12bb24c20c2a579069d74624db16bb9ec501312d8de0e653e9e74668d0ed05ccb0eb99db410c0000000fc246302635630b295ccf849e45944a25baa7f4651fa37f147e0fa977c0304e7cf25fa78260ca03abe8dc32cfb461f019f7d82194a98daae521ec4eaf3e138bb95b09d8ff2f106febcc126743abc8f8b707cd2cae1548c6fe54f64bf46c9ff03975e0c37eda3d485ff76ea5ae71fa5a2ca0d9293ea0cd4186e6e2e26fc2ba5e2cdde9400d9c1717058157a8410c9cd7ca4e679f41d8932576e7b292f28dfb9775b0ac5eb5788a8ddf797e32919e7a41c305af2e4e37eb4d5600", "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"}) 0s ago: executing program 0 (id=12616): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002}) kernel console output (not intermixed with test programs): .11196'. [ 558.109028][ T9981] sp0: Synchronizing with TNC [ 558.115011][ T9980] : renamed from bond0 (while UP) [ 558.127157][ T9981] sp0: Found TNC [ 558.498766][T10016] Bluetooth: hci5: Frame reassembly failed (-84) [ 558.505908][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 558.822579][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11226'. [ 559.398979][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11243'. [ 559.655794][T10106] netlink: 'syz.2.11249': attribute type 8 has an invalid length. [ 559.730838][ T5812] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 559.785041][T10113] loop4: detected capacity change from 0 to 524255232 [ 559.911242][ T5812] usb 4-1: Using ep0 maxpacket: 8 [ 559.923270][ T5812] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 559.932593][ T5812] usb 4-1: config 179 has no interface number 0 [ 559.946874][ T5812] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 559.960878][ T5812] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 559.978812][T10129] program syz.0.11257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 559.980524][ T5812] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 560.009842][ T5812] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 560.043560][ T5812] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 560.063327][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.068243][ T30] audit: type=1326 audit(1746315245.189:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10131 comm="syz.0.11258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a938e969 code=0x7ffc0000 [ 560.111209][T10087] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 560.130773][ T30] audit: type=1326 audit(1746315245.189:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10131 comm="syz.0.11258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a938e969 code=0x7ffc0000 [ 560.165390][ T30] audit: type=1326 audit(1746315245.189:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10131 comm="syz.0.11258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f83a938e969 code=0x7ffc0000 [ 560.196252][ T30] audit: type=1326 audit(1746315245.189:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10131 comm="syz.0.11258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a938e969 code=0x7ffc0000 [ 560.225663][ T30] audit: type=1326 audit(1746315245.189:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10131 comm="syz.0.11258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a938e969 code=0x7ffc0000 [ 560.255878][ T30] audit: type=1326 audit(1746315245.189:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10131 comm="syz.0.11258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f83a938e969 code=0x7ffc0000 [ 560.287470][ T30] audit: type=1326 audit(1746315245.189:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10131 comm="syz.0.11258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a938e969 code=0x7ffc0000 [ 560.315669][ T30] audit: type=1326 audit(1746315245.189:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10131 comm="syz.0.11258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a938e969 code=0x7ffc0000 [ 560.370809][ T81] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 560.417295][T10087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.442417][T10087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.501106][ T5823] Bluetooth: hci5: command 0x1003 tx timeout [ 560.507745][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 560.520775][ T81] usb 5-1: Using ep0 maxpacket: 8 [ 560.555734][ T81] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 560.565669][ T81] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.591516][ T81] usb 5-1: config 0 descriptor?? [ 560.626665][T10153] mkiss: ax0: crc mode is auto. [ 560.670846][ T5857] usb 4-1: USB disconnect, device number 99 [ 560.670858][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 560.687228][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 560.807499][ T81] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 560.990694][ T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 561.150879][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 561.163631][ T24] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 561.174847][ T24] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 561.187724][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 561.199392][ T24] usb 2-1: config 1 has no interface number 0 [ 561.206010][ T24] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 561.217514][ T81] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 561.231261][ T81] asix 5-1:0.0: probe with driver asix failed with error -71 [ 561.239066][ T24] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 561.259043][ T81] usb 5-1: USB disconnect, device number 89 [ 561.265520][ T30] audit: type=1400 audit(1746315246.379:1251): avc: denied { nlmsg_write } for pid=10201 comm="syz.0.11271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 561.290696][ T24] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 561.305436][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.319926][ T24] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 561.525247][ T24] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 561.573032][T10232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11279'. [ 561.600315][ T30] audit: type=1400 audit(1746315246.719:1252): avc: denied { remount } for pid=10233 comm="syz.0.11280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 561.981642][ T81] usb 2-1: USB disconnect, device number 87 [ 561.988801][ T81] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 562.048978][T10263] sp0: Synchronizing with TNC [ 562.450881][ T81] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 562.603337][ T81] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 562.620670][ T81] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 562.630251][ T81] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 562.655131][ T81] usb 1-1: config 220 has no interface number 2 [ 562.661593][ T81] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 562.681429][ T81] usb 1-1: config 220 interface 0 has no altsetting 0 [ 562.706864][ T81] usb 1-1: config 220 interface 76 has no altsetting 0 [ 562.713916][ T81] usb 1-1: config 220 interface 1 has no altsetting 0 [ 562.726648][ T81] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 562.738275][ T81] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.746571][ T81] usb 1-1: Product: syz [ 562.760838][ T81] usb 1-1: Manufacturer: syz [ 562.770486][ T81] usb 1-1: SerialNumber: syz [ 562.846771][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11308'. [ 562.994381][ T81] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 563.013490][ T81] usb 1-1: No valid video chain found. [ 563.025589][ T81] usb 1-1: selecting invalid altsetting 0 [ 563.067312][ T81] usb 1-1: selecting invalid altsetting 0 [ 563.073239][ T81] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 563.088510][ T81] usb 1-1: USB disconnect, device number 99 [ 563.489427][T10380] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11327'. [ 563.622451][ T5861] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 563.644711][T10385] macvlan3: entered allmulticast mode [ 563.659089][T10385] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 563.666723][ T3956] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 563.678507][T10389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 563.688216][T10385] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 563.802628][ T5861] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 563.820489][ T5861] usb 2-1: config 0 has no interface number 0 [ 563.827393][ T3956] usb 3-1: unable to get BOS descriptor or descriptor too short [ 563.829964][ T5861] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 563.838392][T10405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11335'. [ 563.852516][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.863308][ T3956] usb 3-1: no configurations [ 563.865859][ T5861] usb 2-1: Product: syz [ 563.872044][ T3956] usb 3-1: can't read configurations, error -22 [ 563.879222][ T5861] usb 2-1: Manufacturer: syz [ 563.903332][ T5861] usb 2-1: SerialNumber: syz [ 563.919241][ T5861] usb 2-1: config 0 descriptor?? [ 563.941769][ T5861] ftdi_sio 2-1:0.23: FTDI USB Serial Device converter detected [ 563.956613][ T5861] usb 2-1: Detected SIO [ 563.968602][ T5861] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 564.014272][T10425] xt_hashlimit: size too large, truncated to 1048576 [ 564.078050][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11340'. [ 564.252088][ T5857] usb 2-1: USB disconnect, device number 88 [ 564.267462][ T5857] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 564.278666][ T5857] ftdi_sio 2-1:0.23: device disconnected [ 564.294363][T10446] QAT: failed to copy from user. [ 564.462644][ T5861] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 564.620540][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 564.635657][ T5861] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 564.646686][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.655165][ T5861] usb 5-1: Product: syz [ 564.659521][ T5861] usb 5-1: Manufacturer: syz [ 564.664751][ T5861] usb 5-1: SerialNumber: syz [ 564.676782][ T5861] usb 5-1: config 0 descriptor?? [ 564.694292][ T5861] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 564.963024][T10502] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.11363'. [ 565.030358][T10505] netlink: 47 bytes leftover after parsing attributes in process `syz.1.11365'. [ 565.100909][ T3956] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 565.109931][ T5861] usb 5-1: clie_3_5_startup: get interface number bad return length: 0 [ 565.118956][ T5861] visor 5-1:0.0: probe with driver visor failed with error -5 [ 565.260640][ T3956] usb 3-1: Using ep0 maxpacket: 32 [ 565.278266][ T3956] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 565.294838][ T3956] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 565.305701][ T3956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.315227][ T3956] usb 3-1: Product: syz [ 565.322194][ T3956] usb 3-1: Manufacturer: syz [ 565.326911][ T3956] usb 3-1: SerialNumber: syz [ 565.336668][ T3956] usb 3-1: config 0 descriptor?? [ 565.343667][ T5861] usb 5-1: USB disconnect, device number 90 [ 565.344681][T10489] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 565.367325][ T3956] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input98 [ 565.626059][ T5812] usb 3-1: USB disconnect, device number 92 [ 565.626095][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 566.404809][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 566.404824][ T30] audit: type=1400 audit(1746315251.529:1281): avc: denied { read } for pid=10592 comm="syz.1.11391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 566.430309][ C0] vkms_vblank_simulate: vblank timer overrun [ 566.605953][ T30] audit: type=1400 audit(1746315251.719:1282): avc: denied { node_bind } for pid=10599 comm="syz.2.11394" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 566.692987][ T30] audit: type=1400 audit(1746315251.819:1283): avc: denied { prog_load } for pid=10605 comm="syz.1.11397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 566.750290][ T30] audit: type=1400 audit(1746315251.839:1284): avc: denied { prog_run } for pid=10605 comm="syz.1.11397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 567.110835][ T5812] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 567.126531][ T30] audit: type=1400 audit(1746315252.229:1285): avc: denied { map_create } for pid=10634 comm="syz.2.11405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 567.152946][ T30] audit: type=1400 audit(1746315252.229:1286): avc: denied { map_read map_write } for pid=10634 comm="syz.2.11405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 567.276538][ T5812] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 567.297379][ T5812] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 567.321769][ T5812] usb 4-1: config 220 interface 0 has no altsetting 0 [ 567.338753][ T5812] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 567.350644][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.359021][ T5812] usb 4-1: Product: syz [ 567.364644][ T5812] usb 4-1: Manufacturer: syz [ 567.369308][ T5812] usb 4-1: SerialNumber: syz [ 567.469187][ T30] audit: type=1326 audit(1746315252.589:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.0.11413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a938e969 code=0x7ffc0000 [ 567.501756][ T30] audit: type=1326 audit(1746315252.589:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.0.11413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a938e969 code=0x7ffc0000 [ 567.533517][ T30] audit: type=1326 audit(1746315252.589:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.0.11413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f83a938e969 code=0x7ffc0000 [ 567.586984][ T30] audit: type=1326 audit(1746315252.589:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.0.11413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a938e969 code=0x7ffc0000 [ 567.591016][T10665] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11414'. [ 567.642374][ T5812] usb 4-1: USB disconnect, device number 100 [ 568.154608][T10713] QAT: Invalid ioctl 1075883590 [ 568.177936][T10713] QAT: Invalid ioctl 1075883590 [ 568.188023][T10713] QAT: Invalid ioctl 1075883590 [ 568.205398][T10713] QAT: Invalid ioctl 1075883590 [ 568.210520][T10713] QAT: Invalid ioctl 1075883590 [ 568.220695][T10713] QAT: Invalid ioctl 1075883590 [ 568.225663][T10713] QAT: Invalid ioctl 1075883590 [ 568.256530][T10718] QAT: Invalid ioctl 35123 [ 568.277337][T10713] QAT: Invalid ioctl 1075883590 [ 568.293954][T10713] QAT: Invalid ioctl 1075883590 [ 568.651366][ T5857] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 568.810570][ T5857] usb 3-1: Using ep0 maxpacket: 16 [ 568.821816][ T5857] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 568.840457][ T5857] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 568.859390][ T5857] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 568.880734][ T5857] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 568.889654][ T5857] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 568.926767][ T5857] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 568.928741][T10759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11440'. [ 568.946243][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.975245][ T5857] usb 3-1: Product: syz [ 568.985283][ T5857] usb 3-1: Manufacturer: syz [ 568.994314][ T5857] usb 3-1: SerialNumber: syz [ 569.452005][ T5857] usb 3-1: 0:2 : does not exist [ 569.481218][ T5857] usb 3-1: USB disconnect, device number 93 [ 569.731113][ T5812] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 569.885048][ T5812] usb 4-1: Using ep0 maxpacket: 16 [ 569.905901][ T5812] usb 4-1: config 0 interface 0 has no altsetting 0 [ 569.913814][ T5812] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 569.936462][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.951294][ T5812] usb 4-1: config 0 descriptor?? [ 570.392808][ T5812] input: HID 0458:5015 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5015.008F/input/input99 [ 570.496632][ T5812] input: HID 0458:5015 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5015.008F/input/input100 [ 570.517252][ T5812] input: HID 0458:5015 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5015.008F/input/input101 [ 570.560145][ T5812] kye 0003:0458:5015.008F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5015] on usb-dummy_hcd.3-1/input0 [ 570.580647][ T5812] usb 4-1: USB disconnect, device number 101 [ 570.690938][ T5895] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 570.780560][ T81] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 570.860453][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 570.866915][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 570.878987][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 570.890030][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 570.901040][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 570.921431][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 570.932571][ T81] usb 3-1: Using ep0 maxpacket: 16 [ 570.942862][ T81] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.943684][ T5895] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 570.964182][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.973320][ T5895] usb 5-1: Product: syz [ 570.977591][ T5895] usb 5-1: Manufacturer: syz [ 570.985988][ T81] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 570.997563][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.005588][ T5895] usb 5-1: SerialNumber: syz [ 571.011816][ T5895] usb 5-1: config 0 descriptor?? [ 571.020357][ T81] usb 3-1: config 0 descriptor?? [ 571.459759][ T81] mcp2221 0003:04D8:00DD.0090: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 571.471454][ T5895] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 571.480883][ T5895] input input102: Device does not respond to id packet M [ 571.488216][ T5895] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 571.494773][ T5895] input input102: Device does not respond to id packet P [ 571.503285][ T5895] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 571.509332][ T5895] input input102: Device does not respond to id packet B [ 571.517248][ T5895] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 571.523784][ T5895] input input102: Device does not respond to id packet N [ 571.531925][ T5895] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 571.538323][ T5895] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 571.546711][ T5895] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 571.553136][ T5895] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 571.564856][ T5895] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input102 [ 571.593468][ T5895] usb 5-1: USB disconnect, device number 91 [ 571.633099][ T5812] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 571.790733][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 571.801752][ T5812] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 571.818800][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.832317][ T5812] usb 1-1: config 0 descriptor?? [ 571.894398][ T5895] usb 3-1: USB disconnect, device number 94 [ 572.007626][T11042] SELinux: failed to load policy [ 572.041700][ T5812] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 572.058365][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 572.073998][ T5812] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 572.083822][ T5812] usb 1-1: media controller created [ 572.107815][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 572.242948][ T5812] az6027: usb out operation failed. (-71) [ 572.249867][ T5812] az6027: usb out operation failed. (-71) [ 572.265933][ T5812] stb0899_attach: Driver disabled by Kconfig [ 572.280430][ T5812] az6027: no front-end attached [ 572.280430][ T5812] [ 572.299087][ T5812] az6027: usb out operation failed. (-71) [ 572.308349][ T5812] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 572.330106][ T5812] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input103 [ 572.348010][ T5812] dvb-usb: schedule remote query interval to 400 msecs. [ 572.357020][ T5812] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 572.368583][ T5812] usb 1-1: USB disconnect, device number 101 [ 572.386300][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 572.386316][ T30] audit: type=1400 audit(1746315257.509:1305): avc: denied { read } for pid=11073 comm="syz.4.11507" path="socket:[105964]" dev="sockfs" ino=105964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 572.442709][ T5812] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 572.623136][ T5815] block nbd2: Receive control failed (result -32) [ 572.754257][ T10] kworker/0:1 (10) used greatest stack depth: 18984 bytes left [ 573.122320][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11529'. [ 573.343591][T11147] nvme_fabrics: missing parameter 'transport=%s' [ 573.361166][T11147] nvme_fabrics: missing parameter 'nqn=%s' [ 573.830812][ T81] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 573.880677][ T5812] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 573.980599][ T81] usb 3-1: Using ep0 maxpacket: 32 [ 573.989243][ T81] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 574.000118][ T81] usb 3-1: config 0 has no interface number 0 [ 574.020900][ T81] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 574.034179][ T81] usb 3-1: config 0 interface 85 has no altsetting 0 [ 574.043031][ T81] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 574.058124][ T81] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.068113][ T81] usb 3-1: Product: syz [ 574.074190][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 574.076321][ T81] usb 3-1: Manufacturer: syz [ 574.087505][ T5812] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 574.092812][ T81] usb 3-1: SerialNumber: syz [ 574.111076][ T81] usb 3-1: config 0 descriptor?? [ 574.111126][ T5812] usb 4-1: config 0 has no interface number 0 [ 574.128929][ T5812] usb 4-1: config 0 interface 184 has no altsetting 0 [ 574.137989][ T5812] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 574.147831][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.156459][ T5812] usb 4-1: Product: syz [ 574.160809][ T5812] usb 4-1: Manufacturer: syz [ 574.165412][ T5812] usb 4-1: SerialNumber: syz [ 574.177389][ T5812] usb 4-1: config 0 descriptor?? [ 574.185301][ T5812] smsc75xx v1.0.0 [ 574.189221][ T5812] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 574.199553][ T5812] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 574.324207][T11247] delete_channel: no stack [ 574.329447][T11245] delete_channel: no stack [ 574.443466][ T5812] usb 4-1: USB disconnect, device number 102 [ 574.691048][ T5895] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 574.729824][ T81] appletouch 3-1:0.85: Geyser mode initialized. [ 574.742261][ T81] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input104 [ 574.852288][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 574.858859][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.872190][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.883183][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 574.896939][ T5895] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 574.907701][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.922863][ T5895] usb 5-1: config 0 descriptor?? [ 574.938314][ T5895] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input105 [ 574.953600][ T5168] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 574.984526][ T3956] usb 3-1: USB disconnect, device number 95 [ 575.005376][ T5168] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 575.021802][ T3956] appletouch 3-1:0.85: input: appletouch disconnected [ 575.034575][ T5168] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 575.047907][ T5168] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 575.156572][ T5895] usb 5-1: USB disconnect, device number 92 [ 575.187331][T11329] loop6: detected capacity change from 0 to 524287999 [ 575.231033][T11329] support for cryptoloop has been removed. Use dm-crypt instead. [ 575.341717][ T30] audit: type=1400 audit(1746315260.459:1306): avc: denied { listen } for pid=11339 comm="syz.3.11576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 575.476883][T11350] 9pnet: p9_errstr2errno: server reported unknown error [ 575.814378][ T30] audit: type=1400 audit(1746315260.929:1307): avc: denied { read } for pid=11378 comm="syz.0.11593" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 575.844893][ T30] audit: type=1400 audit(1746315260.929:1308): avc: denied { open } for pid=11378 comm="syz.0.11593" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 575.882879][ T30] audit: type=1400 audit(1746315260.959:1309): avc: denied { ioctl } for pid=11378 comm="syz.0.11593" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 576.303415][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11609'. [ 576.312766][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11609'. [ 576.336027][T11416] batadv1: entered promiscuous mode [ 576.341873][T11416] batadv1: entered allmulticast mode [ 576.351438][T11419] vivid-000: disconnect [ 576.457333][ T30] audit: type=1400 audit(1746315261.569:1310): avc: denied { execute } for pid=11420 comm="syz.0.11610" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 576.481424][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.733435][ T30] audit: type=1400 audit(1746315261.859:1311): avc: denied { connect } for pid=11439 comm="syz.4.11618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 577.130135][T11414] vivid-000: reconnect [ 577.140485][ T5895] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 577.270028][T11477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11632'. [ 577.343097][ T5895] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 577.357106][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.365502][ T5895] usb 4-1: Product: syz [ 577.370038][ T5895] usb 4-1: Manufacturer: syz [ 577.379980][ T5895] usb 4-1: SerialNumber: syz [ 577.396920][T11484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11636'. [ 577.409154][ T5895] usb 4-1: config 0 descriptor?? [ 577.438771][ T5895] usb 4-1: selecting invalid altsetting 3 [ 577.449245][ T5895] comedi comedi0: could not set alternate setting 3 in high speed [ 577.461279][ T5895] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 577.481360][ T5895] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 577.658778][ T5895] usb 4-1: USB disconnect, device number 103 [ 578.160778][ T3956] usb 1-1: new low-speed USB device number 102 using dummy_hcd [ 578.260570][ T81] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 578.312238][ T3956] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 578.320787][ T3956] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 578.328850][ T3956] usb 1-1: config 0 has no interface number 0 [ 578.335483][ T3956] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 578.346067][ T3956] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 578.369147][ T3956] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 578.388715][ T3956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.404045][ T3956] usb 1-1: config 0 descriptor?? [ 578.414403][ T81] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.429594][ T81] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 578.447986][ T81] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 578.457829][ T81] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.466202][ T81] usb 3-1: Product: syz [ 578.471164][ T81] usb 3-1: Manufacturer: syz [ 578.471353][ T5895] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 578.475816][ T81] usb 3-1: SerialNumber: syz [ 578.539215][T11567] sp0: Synchronizing with TNC [ 578.652023][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 578.662523][ T5895] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 578.672453][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.682790][ T5895] usb 4-1: config 0 descriptor?? [ 578.699554][T11541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.709318][T11541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.736475][ T81] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 578.753957][ T81] usb 3-1: USB disconnect, device number 96 [ 578.762302][T11589] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11663'. [ 578.772056][ T5861] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 578.780051][T11589] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=50 sclass=netlink_xfrm_socket pid=11589 comm=syz.1.11663 [ 578.896752][ T5895] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 578.911489][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 578.922878][ T5895] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 578.930115][ T5895] usb 4-1: media controller created [ 578.960445][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 578.966222][T11601] batadv_slave_1: entered promiscuous mode [ 578.974217][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.984368][ T5861] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 578.990650][T11601] batadv_slave_1: left promiscuous mode [ 578.992756][ T5861] usb 5-1: config 179 has no interface number 0 [ 579.006711][ T5861] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 579.026894][ T5861] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 579.038901][ T5861] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 579.051139][ T5861] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 579.064060][ T5861] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 579.084489][ T3956] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input106 [ 579.098968][ T5861] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 579.108542][ T5895] az6027: usb out operation failed. (-71) [ 579.116194][ T5895] az6027: usb out operation failed. (-71) [ 579.123609][ T3956] input: failed to attach handler kbd to device input106, error: -5 [ 579.131976][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.140080][ T5895] stb0899_attach: Driver disabled by Kconfig [ 579.153052][T11562] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 579.160301][ T5895] az6027: no front-end attached [ 579.160301][ T5895] [ 579.175900][ T5895] az6027: usb out operation failed. (-71) [ 579.182742][ T5895] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 579.192432][ T5895] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input107 [ 579.206826][ T5895] dvb-usb: schedule remote query interval to 400 msecs. [ 579.214507][ T5895] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 579.233824][ T5895] usb 4-1: USB disconnect, device number 104 [ 579.242466][ T81] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 579.279624][ T5895] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 579.327154][ T5861] usb 1-1: USB disconnect, device number 102 [ 579.400923][ T81] usb 3-1: Using ep0 maxpacket: 8 [ 579.407451][ T81] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 579.418764][ T971] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input108 [ 579.421253][ T81] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 579.449055][ T81] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 579.467276][ T81] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 579.484661][ T81] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 579.496193][ T81] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.512284][ T81] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 579.526013][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.626697][ T24] usb 5-1: USB disconnect, device number 93 [ 579.626728][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 579.641958][ T24] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 579.642957][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 579.745676][ T81] usb 3-1: usb_control_msg returned -71 [ 579.761225][T11676] block nbd3: NBD_DISCONNECT [ 579.766544][ T81] usbtmc 3-1:16.0: can't read capabilities [ 579.807444][ T81] usb 3-1: USB disconnect, device number 97 [ 580.188379][T11715] random: crng reseeded on system resumption [ 580.348614][ T30] audit: type=1400 audit(1746315778.462:1312): avc: denied { read write } for pid=11725 comm="syz.0.11690" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 580.381308][T11726] input: syz0 as /devices/virtual/input/input109 [ 580.410714][ T30] audit: type=1400 audit(1746315778.502:1313): avc: denied { open } for pid=11725 comm="syz.0.11690" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 580.434444][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.473299][ T30] audit: type=1400 audit(1746315778.502:1314): avc: denied { ioctl } for pid=11725 comm="syz.0.11690" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 580.498550][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.547409][ T30] audit: type=1400 audit(1746315778.662:1315): avc: denied { map } for pid=11740 comm="syz.4.11694" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 580.571657][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.710843][ T24] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 580.880164][ T24] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 580.899341][ T24] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 580.914730][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 580.926477][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.976950][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11707'. [ 580.995964][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11707'. [ 581.119135][T11776] sctp: [Deprecated]: syz.2.11710 (pid 11776) Use of int in max_burst socket option. [ 581.119135][T11776] Use struct sctp_assoc_value instead [ 581.650832][T11813] bond0: option resend_igmp: invalid value (7540) [ 581.659629][T11813] bond0: option resend_igmp: allowed values 0 - 255 [ 581.911678][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11729'. [ 581.972267][ T24] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 581.980302][ T24] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input110 [ 582.007110][ T24] input: failed to attach handler kbd to device input110, error: -5 [ 582.052076][ T24] usb 1-1: USB disconnect, device number 103 [ 582.150720][ T5861] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 582.320460][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 582.326942][ T5861] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 582.336612][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.346770][ T5861] usb 5-1: config 0 descriptor?? [ 582.563748][ T5861] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 583.177241][ T5861] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 583.209094][ T5861] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 583.234259][T11907] netlink: 'syz.3.11753': attribute type 16 has an invalid length. [ 583.250696][ T5861] asix 5-1:0.0: probe with driver asix failed with error -71 [ 583.262616][T11907] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11753'. [ 583.275317][ T5861] usb 5-1: USB disconnect, device number 94 [ 583.715167][T11945] sctp: [Deprecated]: syz.3.11766 (pid 11945) Use of int in maxseg socket option. [ 583.715167][T11945] Use struct sctp_assoc_value instead [ 583.794984][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11768'. [ 583.799094][T11951] overlayfs: missing 'workdir' [ 583.810321][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11768'. [ 583.845385][ T30] audit: type=1800 audit(1746315781.962:1316): pid=11953 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.11770" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 583.867158][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.890504][ T5857] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 584.043548][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 584.068616][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.099160][ T5857] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 584.119543][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.131514][ T5857] usb 1-1: config 0 descriptor?? [ 584.141836][T11969] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 584.229835][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11780'. [ 584.240083][T11977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.252707][T11977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.271759][T11977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.294441][T11977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.312538][T11977] batman_adv: batadv0: Removing interface: gretap1 [ 584.506219][ T81] kernel write not supported for file /input/event2 (pid: 81 comm: kworker/1:1) [ 584.563628][ T5857] isku 0003:1E7D:319C.0091: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 584.613456][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11786'. [ 584.753561][ T5857] isku 0003:1E7D:319C.0091: couldn't init struct isku_device [ 584.784852][ T5857] isku 0003:1E7D:319C.0091: couldn't install keyboard [ 584.814624][ T5857] isku 0003:1E7D:319C.0091: probe with driver isku failed with error -71 [ 584.842756][ T5857] usb 1-1: USB disconnect, device number 104 [ 584.933892][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11791'. [ 584.985229][T12014] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 585.508995][T12051] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 585.650537][ T24] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 585.764499][T12072] netlink: 'syz.2.11816': attribute type 21 has an invalid length. [ 585.777863][T12072] netlink: 'syz.2.11816': attribute type 6 has an invalid length. [ 585.788340][T12072] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11816'. [ 585.808389][T12072] netlink: 'syz.2.11816': attribute type 21 has an invalid length. [ 585.816104][ T24] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 585.817383][T12072] netlink: 'syz.2.11816': attribute type 6 has an invalid length. [ 585.833787][T12072] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11816'. [ 585.834936][ T24] usb 1-1: config 0 has no interface number 0 [ 585.862475][ T24] usb 1-1: config 0 interface 255 has no altsetting 0 [ 585.869621][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 585.894328][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.918508][ T24] usb 1-1: config 0 descriptor?? [ 585.926267][ T24] cp210x 1-1:0.255: cp210x converter detected [ 586.012736][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11821'. [ 586.023918][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11821'. [ 586.041870][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11821'. [ 586.170680][ T81] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 586.332341][ T81] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.344107][ T971] hid-generic 0000:0004:0000.0092: unknown main item tag 0x0 [ 586.345999][ T24] cp210x 1-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 586.354858][ T971] hid-generic 0000:0004:0000.0092: unknown main item tag 0x0 [ 586.367583][ T971] hid-generic 0000:0004:0000.0092: unknown main item tag 0x0 [ 586.370070][ T81] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.381471][T12119] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 586.393667][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 586.394371][ T971] hid-generic 0000:0004:0000.0092: hidraw0: HID v0.00 Device [syz0] on syz1 [ 586.405051][ T81] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 586.422764][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.433494][ T24] usb 1-1: USB disconnect, device number 105 [ 586.446354][ T81] usb 3-1: config 0 descriptor?? [ 586.466285][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 586.485393][ T24] cp210x 1-1:0.255: device disconnected [ 586.494850][T12136] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 586.508232][T12136] pim6reg0: persist disabled [ 586.800501][ T971] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 586.884628][ T81] hid-steam 0003:28DE:1142.0093: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 586.950561][ T81] hid-steam 0003:28DE:1142.0093: Steam wireless receiver connected [ 586.963599][ T971] usb 5-1: Using ep0 maxpacket: 16 [ 586.976603][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.993461][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.994221][ T81] hid-steam 0003:28DE:1142.0094: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 587.019367][ T971] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 587.037059][ T971] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 587.049903][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.063736][ T971] usb 5-1: config 0 descriptor?? [ 587.182862][ T5861] usb 3-1: USB disconnect, device number 98 [ 587.198465][ T5861] hid-steam 0003:28DE:1142.0093: Steam wireless receiver disconnected [ 587.494288][ T971] microsoft 0003:045E:07DA.0095: unknown main item tag 0x0 [ 587.537638][ T971] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0095/input/input112 [ 587.639005][ T971] microsoft 0003:045E:07DA.0095: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 587.756007][ T24] usb 5-1: USB disconnect, device number 95 [ 588.076645][T12265] max out of range [ 588.110955][ T81] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 588.158785][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 588.167733][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 588.179246][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 588.192997][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 588.212330][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 588.229432][ T30] audit: type=1400 audit(1746315786.342:1317): avc: denied { mounton } for pid=12266 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 588.272003][ T81] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 588.324378][ T81] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.368356][ T81] usb 3-1: config 0 interface 0 has no altsetting 0 [ 588.401224][ T81] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 588.420491][ T5823] Bluetooth: hci2: command tx timeout [ 588.429780][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.484575][ T81] usb 3-1: config 0 descriptor?? [ 588.815403][T12266] chnl_net:caif_netlink_parms(): no params data found [ 588.916198][ T81] hid-steam 0003:28DE:1102.0096: unknown main item tag 0x0 [ 588.947385][ T81] hid-steam 0003:28DE:1102.0096: unknown main item tag 0x0 [ 588.956256][ T81] hid-steam 0003:28DE:1102.0096: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 589.021829][T12266] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.031236][ T81] hid-steam 0003:28DE:1102.0096: Steam Controller 'XXXXXXXXXX' connected [ 589.051357][T12266] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.053895][ T81] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0096/input/input113 [ 589.058567][T12266] bridge_slave_0: entered allmulticast mode [ 589.112563][T12266] bridge_slave_0: entered promiscuous mode [ 589.113047][ T81] hid-steam 0003:28DE:1102.0097: unknown main item tag 0x0 [ 589.126859][T12266] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.142257][ T81] hid-steam 0003:28DE:1102.0097: unknown main item tag 0x0 [ 589.164300][T12266] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.170632][ T81] hid-steam 0003:28DE:1102.0097: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 589.175707][T12266] bridge_slave_1: entered allmulticast mode [ 589.190323][T12266] bridge_slave_1: entered promiscuous mode [ 589.209624][ T81] usb 3-1: USB disconnect, device number 99 [ 589.313395][T12266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.332459][ T81] hid-steam 0003:28DE:1102.0096: Steam Controller 'XXXXXXXXXX' disconnected [ 589.358761][T12266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.401525][ T3956] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 589.469138][T12266] team0: Port device team_slave_0 added [ 589.498620][T12266] team0: Port device team_slave_1 added [ 589.547074][T12266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.551047][ T3956] usb 1-1: Using ep0 maxpacket: 32 [ 589.554867][T12266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.585010][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.599930][ T3956] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 589.601877][T12266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.616043][ T3956] usb 1-1: config 0 has no interface number 0 [ 589.627257][ T3956] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.645398][ T3956] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.651086][T12266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.656455][ T3956] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 589.674063][T12266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.675893][ T3956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.699936][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.724419][ T3956] usb 1-1: config 0 descriptor?? [ 589.729601][T12266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.852657][T12266] hsr_slave_0: entered promiscuous mode [ 589.868615][T12266] hsr_slave_1: entered promiscuous mode [ 590.006992][T12637] kvm: kvm [12629]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 590.031036][ T5861] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 590.176618][T12266] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 590.186279][ T5861] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 590.197050][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.208160][T12266] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 590.217378][ T5861] usb 4-1: config 0 descriptor?? [ 590.226015][T12266] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 590.235785][ T5861] pwc: Samsung MPC-C10 USB webcam detected. [ 590.245266][T12266] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 590.260584][ T5823] Bluetooth: hci0: command tx timeout [ 590.343474][T12266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.363027][ T3956] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.0098/input/input114 [ 590.383028][T12266] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.410077][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.417235][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.449211][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.453971][ T5861] pwc: send_video_command error -71 [ 590.456355][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.477407][ T30] audit: type=1400 audit(1746315788.602:1318): avc: denied { egress } for pid=81 comm="kworker/1:1" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 590.501335][ T5861] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 590.508895][ T5861] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 590.529139][ T5861] usb 4-1: USB disconnect, device number 105 [ 590.538559][ T3956] uclogic 0003:28BD:0094.0098: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 590.575244][ T3956] usb 1-1: USB disconnect, device number 106 [ 590.709864][T12266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.764714][ T30] audit: type=1400 audit(1746315788.882:1319): avc: denied { mount } for pid=12737 comm="syz.2.11888" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 590.940030][T12749] __nla_validate_parse: 3 callbacks suppressed [ 590.940041][T12749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11891'. [ 590.969871][T12266] veth0_vlan: entered promiscuous mode [ 591.001149][T12266] veth1_vlan: entered promiscuous mode [ 591.023653][ T5861] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 591.056785][T12266] veth0_macvtap: entered promiscuous mode [ 591.098552][T12266] veth1_macvtap: entered promiscuous mode [ 591.136952][T12266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.170440][T12266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.191822][ T5861] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 591.210421][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.219784][T12266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.248045][ T5861] usb 4-1: config 0 descriptor?? [ 591.256877][T12266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.280232][ T5861] pwc: Samsung MPC-C10 USB webcam detected. [ 591.292027][T12266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.305563][T12266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.319041][T12266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.329373][T12266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.340197][T12266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.353592][T12266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.378403][T12266] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.395902][T12266] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.416228][T12266] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.430749][T12266] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.684669][ T5861] pwc: recv_control_msg error -71 req 02 val 2b00 [ 591.701565][ T5861] pwc: recv_control_msg error -71 req 02 val 2700 [ 591.708599][ T5861] pwc: recv_control_msg error -71 req 04 val 1700 [ 591.721417][ T5861] pwc: recv_control_msg error -71 req 02 val 2c00 [ 591.731100][ T5861] pwc: recv_control_msg error -71 req 04 val 1000 [ 591.748856][ T5861] pwc: recv_control_msg error -71 req 04 val 1300 [ 591.758704][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.792370][T12797] netlink: 'syz.2.11896': attribute type 1 has an invalid length. [ 591.800239][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.834083][T12797] netlink: 75 bytes leftover after parsing attributes in process `syz.2.11896'. [ 591.841464][ T5861] pwc: recv_control_msg error -71 req 04 val 1400 [ 591.850283][ T5861] pwc: recv_control_msg error -71 req 02 val 2000 [ 591.867633][ T5861] pwc: recv_control_msg error -71 req 02 val 2100 [ 591.887417][ T5861] pwc: recv_control_msg error -71 req 02 val 2200 [ 591.925814][ T5861] pwc: recv_control_msg error -71 req 06 val 0600 [ 591.951722][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.972927][ T5861] pwc: recv_control_msg error -71 req 04 val 1500 [ 592.006028][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.027322][ T5861] pwc: recv_control_msg error -71 req 02 val 2500 [ 592.066357][ T30] audit: type=1400 audit(1746315790.182:1320): avc: denied { mounton } for pid=12266 comm="syz-executor" path="/root/syzkaller.HIpqtR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 592.096013][ T5861] pwc: recv_control_msg error -71 req 02 val 2400 [ 592.114901][ T5861] pwc: recv_control_msg error -71 req 02 val 2600 [ 592.130634][ T30] audit: type=1400 audit(1746315790.222:1321): avc: denied { mounton } for pid=12266 comm="syz-executor" path="/root/syzkaller.HIpqtR/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=110968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 592.159092][ T5861] pwc: recv_control_msg error -71 req 02 val 2900 [ 592.177703][ T5861] pwc: recv_control_msg error -71 req 02 val 2800 [ 592.191554][ T5861] pwc: recv_control_msg error -71 req 04 val 1100 [ 592.223582][ T5861] pwc: recv_control_msg error -71 req 04 val 1200 [ 592.243742][ T5861] pwc: Registered as video103. [ 592.272489][ T5861] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input115 [ 592.287094][ T5861] usb 4-1: USB disconnect, device number 106 [ 592.315159][T12817] batadv_slave_1: entered promiscuous mode [ 592.326209][T12811] batadv_slave_1: left promiscuous mode [ 592.342480][ T5823] Bluetooth: hci0: command tx timeout [ 593.366519][T12894] Bluetooth: MGMT ver 1.23 [ 593.518064][ T30] audit: type=1400 audit(1746315791.632:1322): avc: denied { getattr } for pid=12903 comm="syz.2.11926" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=111137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 593.577608][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11928'. [ 593.963479][T12933] vivid-000: ================= START STATUS ================= [ 594.012469][T12933] vivid-000: Radio HW Seek Mode: Bounded [ 594.018872][T12933] vivid-000: Radio Programmable HW Seek: false [ 594.076847][T12933] vivid-000: RDS Rx I/O Mode: Block I/O [ 594.115802][T12933] vivid-000: Generate RBDS Instead of RDS: false [ 594.170463][T12933] vivid-000: RDS Reception: true [ 594.205792][T12933] vivid-000: RDS Program Type: 0 inactive [ 594.225987][T12933] vivid-000: RDS PS Name: inactive [ 594.246191][T12933] vivid-000: RDS Radio Text: inactive [ 594.272598][T12933] vivid-000: RDS Traffic Announcement: false inactive [ 594.300114][T12933] vivid-000: RDS Traffic Program: false inactive [ 594.320294][T12933] vivid-000: RDS Music: false inactive [ 594.349250][T12933] vivid-000: ================== END STATUS ================== [ 594.421190][ T5823] Bluetooth: hci0: command tx timeout [ 594.871754][T12967] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.11950'. [ 595.580736][T12986] SELinux: failed to load policy [ 595.649314][ T30] audit: type=1400 audit(1746315793.762:1323): avc: denied { set_context_mgr } for pid=13000 comm="syz.0.11966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 595.707587][T13005] input: syz0 as /devices/virtual/input/input116 [ 595.800847][ T24] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 595.923627][ T30] audit: type=1400 audit(1746315794.042:1324): avc: denied { remount } for pid=13021 comm="syz.5.11974" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 595.952217][ T24] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 595.979756][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 596.010499][ T24] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 596.035785][ T24] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 596.060443][ T24] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 596.090611][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 596.099807][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 596.117568][ T24] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 596.146393][ T24] usb 3-1: Product: syz [ 596.150665][ T24] usb 3-1: Manufacturer: syz [ 596.155266][ T24] usb 3-1: SerialNumber: syz [ 596.169566][ T24] usb 3-1: config 0 descriptor?? [ 596.178108][T12996] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 596.197085][T13041] netlink: 'syz.5.11980': attribute type 58 has an invalid length. [ 596.198647][ T24] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 596.210489][T13041] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11980'. [ 596.244419][ T24] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 596.410656][ T5861] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 596.501534][ T5823] Bluetooth: hci0: command tx timeout [ 596.587815][ T5861] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 596.609187][ T971] usb 3-1: USB disconnect, device number 100 [ 596.623060][ T971] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 596.636439][ T5861] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 596.656781][ T5861] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 596.672054][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.807326][ T3956] hid-generic 0000:0004:0000.0099: unknown main item tag 0x0 [ 596.818242][ T3956] hid-generic 0000:0004:0000.0099: unknown main item tag 0x0 [ 596.833159][ T3956] hid-generic 0000:0004:0000.0099: unknown main item tag 0x0 [ 596.851518][ T30] audit: type=1400 audit(1746315794.962:1325): avc: denied { getopt } for pid=13078 comm="syz.0.11990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 596.852492][ T3956] hid-generic 0000:0004:0000.0099: hidraw0: HID v0.00 Device [syz0] on syz1 [ 597.081141][T13095] netlink: 'syz.3.11995': attribute type 1 has an invalid length. [ 597.098925][T13095] nbd: error processing sock list [ 597.117671][T13095] block nbd3: shutting down sockets [ 597.336545][ T1070] Bluetooth: hci5: Frame reassembly failed (-84) [ 597.469842][T13129] bridge_slave_0: default FDB implementation only supports local addresses [ 597.540343][T13136] vlan2: entered allmulticast mode [ 597.546147][T13136] batadv0: entered allmulticast mode [ 597.578613][T13135] tipc: New replicast peer: 255.255.255.255 [ 597.588202][T13135] tipc: Enabled bearer , priority 1 [ 597.611347][ T5861] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 597.628564][ T5861] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input117 [ 597.669221][ T5861] input: failed to attach handler kbd to device input117, error: -5 [ 597.698047][ T5861] usb 5-1: USB disconnect, device number 96 [ 597.719594][T13152] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.12014'. [ 598.289178][ T30] audit: type=1400 audit(1746315796.402:1326): avc: denied { accept } for pid=13187 comm="syz.4.12025" path="socket:[112674]" dev="sockfs" ino=112674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 598.846572][T13217] serio: Serial port ttyS3 [ 599.230545][ T24] kernel read not supported for file /dsp1 (pid: 24 comm: kworker/1:0) [ 599.380534][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 599.381184][ T5815] Bluetooth: hci5: command 0x1003 tx timeout [ 599.639828][T13264] binder: 13263:13264 ioctl c0306201 0 returned -14 [ 600.033058][T13290] loop8: detected capacity change from 0 to 1 [ 600.040290][T13290] Dev loop8: unable to read RDB block 1 [ 600.047174][T13290] loop8: unable to read partition table [ 600.061218][T13290] loop8: partition table beyond EOD, truncated [ 600.067835][T13290] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 600.522175][T13329] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 600.790617][ T5812] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 600.950465][ T5812] usb 5-1: Using ep0 maxpacket: 32 [ 600.973436][ T5812] usb 5-1: unable to get BOS descriptor set [ 600.985191][ T5812] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 601.000073][ T5812] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 601.020505][ T5812] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 601.047254][ T5812] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 601.065411][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.073859][ T971] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 601.099359][ T5812] usb 5-1: Product: syz [ 601.112043][ T5812] usb 5-1: Manufacturer: syz [ 601.154287][ T5812] usb 5-1: SerialNumber: syz [ 601.260825][ T971] usb 4-1: Using ep0 maxpacket: 16 [ 601.276481][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.288709][ T971] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 601.303596][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.320114][ T971] usb 4-1: config 0 descriptor?? [ 601.398197][ T5812] usb 5-1: 0:2 : does not exist [ 601.429533][ T5812] usb 5-1: USB disconnect, device number 97 [ 601.738934][ T971] mcp2221 0003:04D8:00DD.009A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 601.921184][ T5812] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 602.071305][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 602.083254][ T5812] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 602.098825][ T5812] usb 1-1: config 0 has no interface number 0 [ 602.107846][ T5812] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 602.121271][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.139405][ T5812] usb 1-1: Product: syz [ 602.147577][ T5812] usb 1-1: Manufacturer: syz [ 602.161731][ T971] usb 4-1: USB disconnect, device number 107 [ 602.168359][ T5812] usb 1-1: SerialNumber: syz [ 602.192934][ T5812] usb 1-1: config 0 descriptor?? [ 602.203945][ T5812] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 602.334898][ T30] audit: type=1400 audit(1746315800.452:1327): avc: denied { write } for pid=13476 comm="syz.2.12100" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 602.414903][ T5812] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 602.435906][ T5812] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 602.571022][ T5895] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 602.730969][ T5895] usb 6-1: Using ep0 maxpacket: 16 [ 602.739199][ T5895] usb 6-1: config 0 has an invalid interface number: 198 but max is 0 [ 602.755849][ T5895] usb 6-1: config 0 has no interface number 0 [ 602.767692][ T5895] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=30.1d [ 602.780505][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.788939][ T5895] usb 6-1: Product: syz [ 602.793872][ T5895] usb 6-1: Manufacturer: syz [ 602.798915][ T5895] usb 6-1: SerialNumber: syz [ 602.807050][ T5895] usb 6-1: config 0 descriptor?? [ 602.818770][ T5895] usb_ehset_test 6-1:0.198: probe with driver usb_ehset_test failed with error -32 [ 602.842804][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 602.852332][ T5895] usb 1-1: USB disconnect, device number 107 [ 602.863020][ T5895] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 602.877281][ T5895] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 602.892429][ T5895] quatech2 1-1:0.51: device disconnected [ 603.043113][ T81] usb 6-1: USB disconnect, device number 2 [ 603.082533][ T30] audit: type=1400 audit(1746315801.202:1328): avc: denied { ioctl } for pid=13549 comm="syz.2.12117" path="socket:[113410]" dev="sockfs" ino=113410 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 603.709994][ T30] audit: type=1326 audit(1746315801.822:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13591 comm="syz.3.12126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e178e969 code=0x7ffc0000 [ 603.800434][ T30] audit: type=1326 audit(1746315801.822:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13591 comm="syz.3.12126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e178e969 code=0x7ffc0000 [ 603.823981][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.900982][ T30] audit: type=1326 audit(1746315801.822:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13591 comm="syz.3.12126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fe3e178e969 code=0x7ffc0000 [ 603.924531][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.005295][ T30] audit: type=1326 audit(1746315801.822:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13591 comm="syz.3.12126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e178e969 code=0x7ffc0000 [ 604.081571][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12133'. [ 604.090568][ T30] audit: type=1326 audit(1746315801.822:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13591 comm="syz.3.12126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e178e969 code=0x7ffc0000 [ 604.090617][ T30] audit: type=1400 audit(1746315801.992:1334): avc: denied { read } for pid=13599 comm="syz.5.12129" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 604.090655][ T30] audit: type=1400 audit(1746315801.992:1335): avc: denied { open } for pid=13599 comm="syz.5.12129" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 604.090692][ T30] audit: type=1400 audit(1746315802.022:1336): avc: denied { write } for pid=13599 comm="syz.5.12129" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 604.351078][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12137'. [ 605.013850][T13666] netlink: 'syz.4.12154': attribute type 1 has an invalid length. [ 605.228536][ T5895] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 605.405673][ T5895] usb 1-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 605.425755][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.440641][ T5895] usb 1-1: Product: syz [ 605.444824][ T5895] usb 1-1: Manufacturer: syz [ 605.461203][ T5895] usb 1-1: SerialNumber: syz [ 605.501109][ T5895] usb 1-1: config 0 descriptor?? [ 605.513144][ T5895] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 605.750077][T13692] lo speed is unknown, defaulting to 1000 [ 605.769163][T13692] lo speed is unknown, defaulting to 1000 [ 605.793046][T13692] lo speed is unknown, defaulting to 1000 [ 605.853079][T13706] delete_channel: no stack [ 605.921366][ T5895] sonixb 1-1:0.0: Error writing register 01: -71 [ 605.928128][ T5895] sonixb 1-1:0.0: probe with driver sonixb failed with error -71 [ 605.962868][ T5895] usb 1-1: USB disconnect, device number 108 [ 606.016261][T13692] infiniband syz2: set down [ 606.021895][T13692] infiniband syz2: added lo [ 606.026778][ T3956] lo speed is unknown, defaulting to 1000 [ 606.057788][T13692] RDS/IB: syz2: added [ 606.062209][T13692] smc: adding ib device syz2 with port count 1 [ 606.068477][T13692] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 606.085779][T13692] lo speed is unknown, defaulting to 1000 [ 606.099713][ T24] lo speed is unknown, defaulting to 1000 [ 606.412251][ T24] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 606.618428][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 606.644139][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.682768][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 606.710262][T13692] lo speed is unknown, defaulting to 1000 [ 606.720763][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.780103][ T24] usb 3-1: config 0 descriptor?? [ 607.173541][T13692] lo speed is unknown, defaulting to 1000 [ 607.234128][ T24] isku 0003:1E7D:319C.009B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 607.245253][ T81] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 607.402222][ T81] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 607.425796][ T81] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.458726][ T81] usb 1-1: config 0 descriptor?? [ 607.468890][T13692] lo speed is unknown, defaulting to 1000 [ 607.472362][ T81] cp210x 1-1:0.0: cp210x converter detected [ 607.666801][ T5895] usb 3-1: USB disconnect, device number 101 [ 607.796444][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 607.796460][ T30] audit: type=1400 audit(1746315805.912:1348): avc: denied { name_connect } for pid=13787 comm="syz.4.12189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 607.818670][T13692] lo speed is unknown, defaulting to 1000 [ 607.885271][ T81] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 607.897189][ T81] usb 1-1: cp210x converter now attached to ttyUSB0 [ 608.073077][T13805] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 608.091520][T13805] syzkaller1: linktype set to 780 [ 608.101928][ T81] usb 1-1: USB disconnect, device number 109 [ 608.122867][ T81] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 608.149613][T13692] lo speed is unknown, defaulting to 1000 [ 608.155717][ T81] cp210x 1-1:0.0: device disconnected [ 608.210541][T13824] openvswitch: netlink: IP tunnel TTL not specified. [ 608.480925][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12205'. [ 608.518217][T13692] lo speed is unknown, defaulting to 1000 [ 608.578168][T13848] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12208'. [ 609.355136][T13900] misc userio: The device must be registered before sending interrupts [ 609.917957][T13935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12237'. [ 609.941475][T13937] can0: slcan on ttyS3. [ 610.095946][ T30] audit: type=1400 audit(1746315808.212:1349): avc: denied { bind } for pid=13945 comm="syz.5.12240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 610.371858][T13937] can0 (unregistered): slcan off ttyS3. [ 610.377540][ T30] audit: type=1400 audit(1746315808.482:1350): avc: denied { write } for pid=5861 comm="kworker/0:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=112609 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 610.524100][T13978] netlink: 408 bytes leftover after parsing attributes in process `syz.3.12244'. [ 610.540480][ T5812] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 610.555010][T13978] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12244'. [ 610.691995][ T5812] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 610.713985][ T5812] usb 5-1: config 0 has no interface number 0 [ 610.720121][ T5812] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 610.741990][ T5812] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 610.743504][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 610.753392][ T5812] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 610.775550][ T5812] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 610.787458][ T5812] usb 5-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 610.797386][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.810108][ T5812] usb 5-1: config 0 descriptor?? [ 610.817987][ T5812] hub 5-1:0.3: bad descriptor, ignoring hub [ 610.825380][ T5812] hub 5-1:0.3: probe with driver hub failed with error -5 [ 610.834690][ T5812] sierra 5-1:0.3: Sierra USB modem converter detected [ 610.941871][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.960545][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.971943][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 610.985806][ T24] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 611.010852][ T24] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 611.029852][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 611.030581][ T5861] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 611.053344][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.054575][ T5812] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 611.069370][ T24] usb 6-1: Product: syz [ 611.076122][ T5812] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 611.080746][ T24] usb 6-1: Manufacturer: syz [ 611.097608][ T24] usb 6-1: SerialNumber: syz [ 611.119086][ T24] cdc_mbim 6-1:1.0: skipping garbage [ 611.133084][ T5812] usb 5-1: USB disconnect, device number 98 [ 611.155924][ T5812] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 611.174121][ T5812] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 611.204838][ T5812] sierra 5-1:0.3: device disconnected [ 611.224329][ T5861] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 611.245782][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 611.273030][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 611.295031][ T5861] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 611.309108][ T5861] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 611.326595][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.347642][ T5861] usb 4-1: config 0 descriptor?? [ 611.359825][T13992] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 611.534958][T14048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 611.729877][T14064] kvm: kvm [14063]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4c [ 611.777815][ T5861] plantronics 0003:047F:FFFF.009C: reserved main item tag 0xd [ 611.789766][ T5861] plantronics 0003:047F:FFFF.009C: No inputs registered, leaving [ 611.800208][ T5861] plantronics 0003:047F:FFFF.009C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 612.074308][ T81] usb 4-1: USB disconnect, device number 108 [ 612.145732][ T24] cdc_mbim 6-1:1.0: bind() failure [ 612.154745][ T24] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 612.163995][ T24] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 612.175091][ T24] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 612.193111][ T24] usb 6-1: USB disconnect, device number 3 [ 612.231662][ T5857] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 612.380484][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 612.387343][ T5857] usb 5-1: config 0 has no interfaces? [ 612.393980][ T5857] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 612.403321][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 612.411519][ T5857] usb 5-1: SerialNumber: syz [ 612.417618][ T5857] usb 5-1: config 0 descriptor?? [ 612.699247][ T5857] usb 5-1: USB disconnect, device number 99 [ 612.711092][T13320] tipc: Subscription rejected, illegal request [ 612.869766][T14146] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 613.107094][ T5812] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 613.124023][ T5812] hid-generic 0000:0000:0000.009D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 613.126034][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12288'. [ 613.160969][ T5861] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 613.323407][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.339855][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.362017][ T5861] usb 4-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 613.377024][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.396307][ T5861] usb 4-1: config 0 descriptor?? [ 613.747058][T14204] netlink: 277 bytes leftover after parsing attributes in process `syz.0.12297'. [ 613.810969][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 613.815578][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12298'. [ 613.830062][T14206] openvswitch: netlink: Missing key (keys=40, expected=100) [ 613.840272][ T5861] cherry 0003:046A:0023.009E: unexpected long global item [ 613.849209][ T5861] cherry 0003:046A:0023.009E: probe with driver cherry failed with error -22 [ 613.970591][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 613.982542][ T24] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.996852][ T24] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 614.015131][ T24] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 614.029235][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 614.036231][ T24] usb 6-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 614.046401][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.062577][ T24] usb 6-1: config 0 descriptor?? [ 614.067116][ T5861] usb 4-1: USB disconnect, device number 109 [ 614.080776][ T81] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 614.230865][ T81] usb 5-1: Using ep0 maxpacket: 8 [ 614.237181][ T81] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 614.249589][ T81] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 614.259372][ T81] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 614.269433][ T81] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 614.280685][ T81] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 614.293301][ T81] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 614.305636][ T81] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.321515][ T81] usb 5-1: config 0 descriptor?? [ 614.327423][T14209] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 614.353936][ T5857] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 614.498949][ T24] nzxt-smart2 0003:1E71:2010.009F: unknown main item tag 0x0 [ 614.511809][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 614.517035][ T24] nzxt-smart2 0003:1E71:2010.009F: unknown main item tag 0x0 [ 614.518150][ T30] audit: type=1400 audit(1746315812.632:1351): avc: denied { create } for pid=14252 comm="syz.2.12308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 614.533453][ T24] nzxt-smart2 0003:1E71:2010.009F: unknown main item tag 0x0 [ 614.581149][ T5857] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 614.590247][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.590479][ T30] audit: type=1400 audit(1746315812.632:1352): avc: denied { sys_admin } for pid=14252 comm="syz.2.12308" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 614.619064][ T24] nzxt-smart2 0003:1E71:2010.009F: unknown main item tag 0x0 [ 614.639275][ T24] nzxt-smart2 0003:1E71:2010.009F: unknown main item tag 0x0 [ 614.649351][ T5857] usb 1-1: Product: syz [ 614.655224][ T5857] usb 1-1: Manufacturer: syz [ 614.694101][ T5857] usb 1-1: SerialNumber: syz [ 614.709276][ T24] nzxt-smart2 0003:1E71:2010.009F: hidraw0: USB HID v0.05 Device [HID 1e71:2010] on usb-dummy_hcd.5-1/input0 [ 614.725979][ T5857] usb 1-1: config 0 descriptor?? [ 614.738575][ T5857] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 614.812146][ T24] usb 6-1: USB disconnect, device number 4 [ 615.091663][ T30] audit: type=1326 audit(1746315813.212:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.2.12312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ef0f8e969 code=0x0 [ 615.208581][ T24] usb 5-1: USB disconnect, device number 100 [ 615.217628][T13246] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 615.551714][ T5857] gspca_stk1135: reg_w 0x5 err -71 [ 615.560784][ T5857] gspca_stk1135: serial bus timeout: status=0x00 [ 615.567132][ T5857] gspca_stk1135: Sensor write failed [ 615.578133][ T5857] gspca_stk1135: serial bus timeout: status=0x00 [ 615.584536][ T5857] gspca_stk1135: Sensor write failed [ 615.589844][ T5857] gspca_stk1135: serial bus timeout: status=0x00 [ 615.596738][ T5857] gspca_stk1135: Sensor read failed [ 615.602151][ T5857] gspca_stk1135: serial bus timeout: status=0x00 [ 615.608483][ T5857] gspca_stk1135: Sensor read failed [ 615.613931][ T5857] gspca_stk1135: Detected sensor type unknown (0x0) [ 615.621522][ T5857] gspca_stk1135: serial bus timeout: status=0x00 [ 615.627860][ T5857] gspca_stk1135: Sensor read failed [ 615.634805][ T5857] gspca_stk1135: serial bus timeout: status=0x00 [ 615.641253][ T5857] gspca_stk1135: Sensor read failed [ 615.646473][ T5857] gspca_stk1135: serial bus timeout: status=0x00 [ 615.653182][ T5857] gspca_stk1135: Sensor write failed [ 615.658878][ T5857] gspca_stk1135: serial bus timeout: status=0x00 [ 615.665284][ T5857] gspca_stk1135: Sensor write failed [ 615.670934][ T5857] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 615.693608][ T5857] usb 1-1: USB disconnect, device number 110 [ 615.826133][ T30] audit: type=1400 audit(1746315813.942:1354): avc: denied { write } for pid=14310 comm="syz.4.12317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 615.993919][T14322] tun0: tun_chr_ioctl cmd 2164298801 [ 616.000197][T14322] tun0: tun_chr_ioctl cmd 1074812118 [ 616.069842][T14336] gre0: entered promiscuous mode [ 616.083761][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12324'. [ 616.270998][ T5861] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 616.440544][ T5861] usb 3-1: Using ep0 maxpacket: 32 [ 616.447930][ T5861] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 616.456963][ T5861] usb 3-1: config 0 has no interface number 0 [ 616.466428][ T5861] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 616.482193][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.510943][ T5861] usb 3-1: Product: syz [ 616.515142][ T5861] usb 3-1: Manufacturer: syz [ 616.528859][ T5861] usb 3-1: SerialNumber: syz [ 616.554654][ T5861] usb 3-1: config 0 descriptor?? [ 616.574149][ T5861] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 616.781984][T14325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.815322][T14325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.853331][ T5861] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 616.899224][ T5861] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 617.078613][T14414] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 617.214620][T14417] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.245272][T14417] tipc: Resetting bearer [ 617.275836][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 617.276101][ T24] usb 3-1: USB disconnect, device number 102 [ 617.314700][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 617.347022][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 617.375631][ T24] quatech2 3-1:0.51: device disconnected [ 617.427269][T14417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.525281][T14417] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 617.572769][T14417] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.582076][T14417] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.591514][T14417] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.601519][T14417] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.631701][T14417] geneve2: left promiscuous mode [ 617.653896][T14417] vlan2: left promiscuous mode [ 617.658693][T14417] bridge0: left promiscuous mode [ 617.665123][T14417] vlan2: left allmulticast mode [ 617.669983][T14417] bridge0: left allmulticast mode [ 617.695108][T14417] macsec2: left promiscuous mode [ 617.739874][T14419] lo speed is unknown, defaulting to 1000 [ 617.831856][T14452] netlink: 'syz.0.12357': attribute type 10 has an invalid length. [ 617.864738][T14452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12357'. [ 618.019386][T14479] syzkaller1: entered promiscuous mode [ 618.025689][T14479] syzkaller1: entered allmulticast mode [ 618.376986][ T30] audit: type=1400 audit(1746315816.492:1355): avc: denied { setopt } for pid=14504 comm="syz.3.12371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 618.399853][T14508] syz.2.12369: attempt to access beyond end of device [ 618.399853][T14508] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 618.430543][T14508] syz.2.12369: attempt to access beyond end of device [ 618.430543][T14508] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 618.492445][T14508] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 618.503976][T14508] syz.2.12369: attempt to access beyond end of device [ 618.503976][T14508] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 618.536617][T14508] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 618.547903][T14508] syz.2.12369: attempt to access beyond end of device [ 618.547903][T14508] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 618.574219][T14508] syz.2.12369: attempt to access beyond end of device [ 618.574219][T14508] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 618.598549][T14520] block nbd2: shutting down sockets [ 618.614435][T14508] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 618.635485][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12373'. [ 618.650990][T14508] syz.2.12369: attempt to access beyond end of device [ 618.650990][T14508] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 618.681461][T14508] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 618.692365][T14508] syz.2.12369: attempt to access beyond end of device [ 618.692365][T14508] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 618.706655][T14508] syz.2.12369: attempt to access beyond end of device [ 618.706655][T14508] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 618.751111][T14508] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 618.760749][T14244] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 618.781011][T14508] syz.2.12369: attempt to access beyond end of device [ 618.781011][T14508] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 618.810646][T14508] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 618.830970][T14508] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 618.930555][T14244] usb 1-1: Using ep0 maxpacket: 32 [ 618.937513][T14244] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.959046][T14244] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.976121][T14244] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 618.986048][T14244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.006981][T14244] usb 1-1: config 0 descriptor?? [ 619.136873][ T30] audit: type=1400 audit(1746315817.252:1356): avc: denied { node_bind } for pid=14551 comm="syz.3.12385" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 619.235385][T14559] lo speed is unknown, defaulting to 1000 [ 619.464523][T14244] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.00A0/input/input119 [ 619.611727][T14244] sony 0003:054C:03D5.00A0: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 619.637584][T14244] usb 1-1: USB disconnect, device number 111 [ 619.904956][T14244] kernel write not supported for file bpf-prog (pid: 14244 comm: kworker/1:4) [ 620.761224][ T5861] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 620.781280][T13367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.794135][T13367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.808383][T13367] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 620.830114][T13367] bond0 (unregistering): (slave bond2): Releasing backup interface [ 620.851643][T13367] bond0 (unregistering): Released all slaves [ 620.875516][T13367] bond1 (unregistering): Released all slaves [ 620.930437][ T5861] usb 3-1: config 0 has an invalid interface number: 160 but max is 0 [ 620.946183][ T5861] usb 3-1: config 0 has no interface number 0 [ 620.962515][ T5861] usb 3-1: config 0 interface 160 has no altsetting 0 [ 620.997729][ T5861] usb 3-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 621.015415][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.023560][ T5861] usb 3-1: Product: syz [ 621.041295][ T5861] usb 3-1: Manufacturer: syz [ 621.046002][ T5861] usb 3-1: SerialNumber: syz [ 621.071410][ T5861] usb 3-1: config 0 descriptor?? [ 621.096061][ T5861] usb-storage 3-1:0.160: USB Mass Storage device detected [ 621.111078][T13367] bond2 (unregistering): Released all slaves [ 621.314974][T13367] ‰lm;Ê-: left promiscuous mode [ 621.334975][ T5861] usb 3-1: USB disconnect, device number 103 [ 621.425184][T14713] syzkaller1: entered promiscuous mode [ 621.450756][T14713] syzkaller1: entered allmulticast mode [ 621.463914][T13367] : left promiscuous mode [ 621.537567][T13367] tipc: Left network mode [ 621.558093][T14720] No such timeout policy "syz1" [ 621.930460][ T81] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 622.188621][ T81] usb 1-1: Using ep0 maxpacket: 16 [ 622.222707][ T81] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.265343][ T81] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.297314][ T81] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 622.300269][T13367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.327378][ T81] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 622.351902][ T81] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.361282][T13367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.377089][ T81] usb 1-1: config 0 descriptor?? [ 622.818063][ T81] shield 0003:0955:7214.00A1: unknown main item tag 0x0 [ 622.832553][ T30] audit: type=1326 audit(1746315820.962:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.2.12425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef0f8e969 code=0x7fc00000 [ 622.840584][ T81] shield 0003:0955:7214.00A1: unknown main item tag 0x0 [ 622.866922][ T81] shield 0003:0955:7214.00A1: unknown main item tag 0x0 [ 622.888533][ T81] shield 0003:0955:7214.00A1: unknown main item tag 0x0 [ 622.903621][ T81] shield 0003:0955:7214.00A1: unknown main item tag 0x0 [ 622.917716][ T81] input: HID 0955:7214 Haptics as /devices/virtual/input/input120 [ 622.993182][ T81] shield 0003:0955:7214.00A1: Registered Thunderstrike controller [ 623.003573][ T81] shield 0003:0955:7214.00A1: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 623.074743][T14244] shield 0003:0955:7214.00A1: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 623.102366][ T81] usb 1-1: USB disconnect, device number 112 [ 623.114927][T14244] shield 0003:0955:7214.00A1: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 623.171171][T14244] shield 0003:0955:7214.00A1: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 623.204017][T14244] shield 0003:0955:7214.00A1: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 623.285988][T14817] vcan0: tx drop: invalid sa for name 0x0000000000000006 [ 623.469726][T14826] input: syz1 as /devices/virtual/input/input121 [ 623.937946][T13367] IPVS: stop unused estimator thread 0... [ 624.063504][T14863] fuseblk: Bad value for 'fd' [ 624.135016][ T30] audit: type=1400 audit(1746315822.262:1358): avc: denied { write } for pid=14864 comm="syz.4.12457" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 624.422388][T14876] loop2: detected capacity change from 0 to 7 [ 624.430223][T14876] Dev loop2: unable to read RDB block 7 [ 624.437225][T14876] loop2: unable to read partition table [ 624.443450][T14876] loop2: partition table beyond EOD, truncated [ 624.449657][T14876] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 624.518199][ T30] audit: type=1400 audit(1746315822.632:1359): avc: denied { mounton } for pid=14882 comm="syz.5.12462" path="/147/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 625.790562][T13246] Bluetooth: hci0: command 0x0c1a tx timeout [ 625.794492][T14827] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 626.475492][T14827] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 626.487332][T14827] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 626.577990][T14900] GUP no longer grows the stack in syz.0.12467 (14900): 200000004000-20000000a000 (200000002000) [ 626.602262][T14902] syz.4.12468: attempt to access beyond end of device [ 626.602262][T14902] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 626.621198][T14900] CPU: 0 UID: 0 PID: 14900 Comm: syz.0.12467 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 626.621228][T14900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 626.621238][T14900] Call Trace: [ 626.621244][T14900] [ 626.621252][T14900] dump_stack_lvl+0x16c/0x1f0 [ 626.621288][T14900] gup_vma_lookup+0x1d2/0x220 [ 626.621312][T14900] __get_user_pages+0x234/0x36f0 [ 626.621348][T14900] ? __pfx___get_user_pages+0x10/0x10 [ 626.621380][T14900] get_user_pages_remote+0x258/0xb20 [ 626.621404][T14900] ? __pfx_mtree_load+0x10/0x10 [ 626.621428][T14900] ? __pfx_get_user_pages_remote+0x10/0x10 [ 626.621461][T14900] __access_remote_vm+0x233/0x9d0 [ 626.621486][T14900] ? __pfx___access_remote_vm+0x10/0x10 [ 626.621511][T14900] proc_pid_cmdline_read+0x4de/0x900 [ 626.621536][T14900] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 626.621564][T14900] ? rw_verify_area+0xcf/0x680 [ 626.621587][T14900] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 626.621610][T14900] vfs_readv+0x6bc/0x8a0 [ 626.621638][T14900] ? __pfx_vfs_readv+0x10/0x10 [ 626.621664][T14900] ? kmem_cache_free+0x2d4/0x4d0 [ 626.621706][T14900] ? __fget_files+0x20e/0x3c0 [ 626.621737][T14900] ? do_preadv+0x1af/0x270 [ 626.621758][T14900] do_preadv+0x1af/0x270 [ 626.621782][T14900] ? __pfx_do_preadv+0x10/0x10 [ 626.621803][T14900] ? rcu_is_watching+0x12/0xc0 [ 626.621832][T14900] do_syscall_64+0xcd/0x260 [ 626.621859][T14900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.621876][T14900] RIP: 0033:0x7f83a938e969 [ 626.621891][T14900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.621908][T14900] RSP: 002b:00007f83aa2c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 626.621924][T14900] RAX: ffffffffffffffda RBX: 00007f83a95b5fa0 RCX: 00007f83a938e969 [ 626.621936][T14900] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 626.621945][T14900] RBP: 00007f83a9410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 626.621956][T14900] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 626.621966][T14900] R13: 0000000000000000 R14: 00007f83a95b5fa0 R15: 00007ffdad2883f8 [ 626.621988][T14900] [ 626.848471][T14902] syz.4.12468: attempt to access beyond end of device [ 626.848471][T14902] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 626.861849][T14902] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 626.872982][T14902] syz.4.12468: attempt to access beyond end of device [ 626.872982][T14902] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 626.886307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 626.894974][T14902] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 626.926226][T14902] syz.4.12468: attempt to access beyond end of device [ 626.926226][T14902] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 626.943340][T14902] syz.4.12468: attempt to access beyond end of device [ 626.943340][T14902] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 626.970883][ T81] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 627.178365][T14902] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 627.201074][T14902] syz.4.12468: attempt to access beyond end of device [ 627.201074][T14902] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 627.215300][T14902] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 627.228734][T14902] syz.4.12468: attempt to access beyond end of device [ 627.228734][T14902] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 627.269444][T14902] syz.4.12468: attempt to access beyond end of device [ 627.269444][T14902] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 627.303323][ T81] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 627.321005][T14902] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 627.332889][T14902] syz.4.12468: attempt to access beyond end of device [ 627.332889][T14902] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 627.346338][T14902] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 627.356514][ T81] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 627.368522][T14902] syz.4.12468: attempt to access beyond end of device [ 627.368522][T14902] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 627.391448][T14902] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 627.450037][T14916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12473'. [ 627.473417][T14916] netlink: 'syz.0.12473': attribute type 7 has an invalid length. [ 627.482007][T14916] netlink: 'syz.0.12473': attribute type 8 has an invalid length. [ 627.489949][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12473'. [ 627.490724][ T81] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 627.531114][T14902] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 627.550549][T14902] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 627.584652][ T81] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 627.600463][ T81] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 627.619801][ T81] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.646316][ T81] usb 6-1: config 0 descriptor?? [ 627.728923][ T81] usbhid 6-1:0.0: can't add hid device: -71 [ 627.743677][ T81] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 627.794413][ T81] usb 6-1: USB disconnect, device number 5 [ 627.861064][T13246] Bluetooth: hci0: command 0x0c1a tx timeout [ 628.320140][ T30] audit: type=1326 audit(1746315826.432:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.12469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e178e969 code=0x7ffc0000 [ 628.350997][ T81] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 628.401039][ T30] audit: type=1326 audit(1746315826.432:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.12469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e178e969 code=0x7ffc0000 [ 628.491057][ T30] audit: type=1326 audit(1746315826.432:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.12469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e178e969 code=0x7ffc0000 [ 628.516191][ T30] audit: type=1326 audit(1746315826.432:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.12469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e178e969 code=0x7ffc0000 [ 628.540654][ T30] audit: type=1326 audit(1746315826.432:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.12469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3e172ab39 code=0x7ffc0000 [ 628.540840][ T81] usb 6-1: Using ep0 maxpacket: 8 [ 628.579567][ T30] audit: type=1326 audit(1746315826.432:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.12469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e178e969 code=0x7ffc0000 [ 628.613289][ T30] audit: type=1326 audit(1746315826.432:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.12469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e178e969 code=0x7ffc0000 [ 628.669724][ T30] audit: type=1326 audit(1746315826.432:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.12469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e178e969 code=0x7ffc0000 [ 628.726281][ T30] audit: type=1326 audit(1746315826.432:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.12469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3e172ab39 code=0x7ffc0000 [ 628.806284][ T81] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 628.810232][ T30] audit: type=1326 audit(1746315826.432:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.3.12469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e178e969 code=0x7ffc0000 [ 628.823571][ T81] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.900984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 628.927175][T14976] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.12492'. [ 628.968854][ T81] pvrusb2: Hardware description: Terratec Grabster AV400 [ 628.978519][ T81] pvrusb2: ********** [ 628.985600][ T81] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 629.015057][ T81] pvrusb2: Important functionality might not be entirely working. [ 629.053935][ T81] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 629.101321][ T81] pvrusb2: ********** [ 629.178235][ T2323] pvrusb2: Invalid write control endpoint [ 629.268357][ T2323] pvrusb2: Invalid write control endpoint [ 629.274670][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 629.284329][ T5901] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 629.295880][T14998] sctp: [Deprecated]: syz.0.12498 (pid 14998) Use of int in maxseg socket option. [ 629.295880][T14998] Use struct sctp_assoc_value instead [ 629.305562][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 629.340741][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 629.356523][T15006] vlan2: entered allmulticast mode [ 629.370758][ T2323] pvrusb2: Device being rendered inoperable [ 629.381498][T15006] bond0: entered allmulticast mode [ 629.387356][T15006] bond_slave_0: entered allmulticast mode [ 629.397292][T15006] bond_slave_1: entered allmulticast mode [ 629.403853][T15006] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 629.410723][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 629.419311][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 629.443999][T15006] bond5: entered allmulticast mode [ 629.450811][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 629.474753][ T5901] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 629.483212][ T5901] usb 3-1: config 0 has no interface number 0 [ 629.489310][ T5901] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.503968][T14954] pvrusb2: Attempted to execute control transfer when device not ok [ 629.532177][ T2323] pvrusb2: Attached sub-driver cx25840 [ 629.537666][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 629.550716][ T81] usb 6-1: USB disconnect, device number 6 [ 629.557092][ T5901] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.578107][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 629.590810][ T5901] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 629.620818][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.631864][ T5901] usb 3-1: config 0 descriptor?? [ 629.831032][ T5861] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 629.940783][T13246] Bluetooth: hci0: command 0x0c1a tx timeout [ 630.000631][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 630.007418][ T5861] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.046525][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 630.070961][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 630.090407][ T5861] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 630.100085][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 630.156118][ T5861] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 630.186750][ T5861] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 630.197463][ T5861] usb 5-1: Manufacturer: syz [ 630.207471][ T5861] usb 5-1: config 0 descriptor?? [ 630.254579][ T5901] uclogic 0003:28BD:0071.00A2: pen parameters not found [ 630.270540][ T5901] uclogic 0003:28BD:0071.00A2: interface is invalid, ignoring [ 630.288391][ T5901] usb 3-1: USB disconnect, device number 104 [ 630.471322][ T5861] rc_core: IR keymap rc-hauppauge not found [ 630.477263][ T5861] Registered IR keymap rc-empty [ 630.486240][ T5861] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 630.510552][ T5861] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 630.535841][ T5861] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 630.555194][ T5861] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input122 [ 630.580113][ T5861] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 630.600558][ T5861] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 630.621064][ T5861] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 630.652704][ T5861] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 630.660878][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 630.693270][ T5861] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 630.722278][ T5861] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 630.743658][ T5861] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 630.771214][ T5861] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 630.801117][ T5861] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 630.821045][ T5861] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 630.836523][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 630.848188][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 630.848696][ T5861] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 630.867259][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 630.867286][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.869925][T15079] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 630.904748][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 630.927487][ T5861] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 631.010142][ T5861] usb 5-1: USB disconnect, device number 101 [ 631.169065][ T5895] usb 6-1: USB disconnect, device number 7 [ 631.283603][T15132] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 631.679953][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12529'. [ 632.000310][T15192] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 632.003110][T15191] IPVS: stopping master sync thread 15192 ... [ 632.114813][ T5901] kernel write not supported for file /media1 (pid: 5901 comm: kworker/1:7) [ 632.474278][T15218] binder: 15217:15218 ioctl c018620c 2000000001c0 returned -22 [ 632.540986][ T5901] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 632.700792][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 632.708570][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.738062][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.763748][ T5901] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 632.790203][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.813493][ T5901] usb 1-1: config 0 descriptor?? [ 632.886393][T15228] lo speed is unknown, defaulting to 1000 [ 633.229551][ T5901] ft260 0003:0403:6030.00A3: unknown main item tag 0x0 [ 633.262284][T15234] lo speed is unknown, defaulting to 1000 [ 633.426496][T15208] netlink: 'syz.0.12545': attribute type 10 has an invalid length. [ 633.448229][T15247] lo speed is unknown, defaulting to 1000 [ 633.474729][T15208] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 633.496619][ T5901] ft260 0003:0403:6030.00A3: failed to retrieve chip version [ 633.514701][T15293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12562'. [ 633.519701][ T5901] ft260 0003:0403:6030.00A3: probe with driver ft260 failed with error -71 [ 633.663870][ T5901] usb 1-1: USB disconnect, device number 113 [ 633.712841][T13374] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 633.736302][T13374] bond0: (slave bond5): link status definitely down, disabling slave [ 633.891469][ T5895] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 634.063354][ T5895] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 634.090794][ T5895] usb 4-1: config 0 has no interface number 1 [ 634.109016][ T5895] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 634.127227][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.139596][ T5895] usb 4-1: config 0 descriptor?? [ 634.240777][ T24] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 634.257351][ T5861] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 634.358149][ T5895] qcserial 4-1:0.2: Qualcomm USB modem converter detected [ 634.405407][ T24] usb 5-1: config 2 has an invalid interface number: 86 but max is 0 [ 634.412485][ T5861] usb 6-1: Using ep0 maxpacket: 32 [ 634.420397][ T24] usb 5-1: config 2 has no interface number 0 [ 634.424810][ T5861] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 634.426506][ T24] usb 5-1: config 2 interface 86 has no altsetting 0 [ 634.443981][ T5861] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 634.461560][ T5861] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 634.474518][ T24] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=bb.2e [ 634.480546][ T5861] usb 6-1: config 1 has no interface number 0 [ 634.490053][ T5861] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 634.500993][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.501020][ T24] usb 5-1: Product: syz [ 634.501035][ T24] usb 5-1: Manufacturer: syz [ 634.501052][ T24] usb 5-1: SerialNumber: syz [ 634.540896][ T5861] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 634.554362][ T5861] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 634.584978][ T5895] usb 4-1: USB disconnect, device number 110 [ 634.592836][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.602818][ T5895] qcserial 4-1:0.2: device disconnected [ 634.627550][ T5861] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 634.742780][ T24] mvusb_mdio 5-1:2.86: probe with driver mvusb_mdio failed with error -5 [ 634.763569][ T24] usb 5-1: USB disconnect, device number 102 [ 634.848841][ T5861] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 635.323585][ T5895] usb 6-1: USB disconnect, device number 8 [ 635.342016][ T5895] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 635.472731][T15447] can0: slcan on ptm0. [ 635.480467][ T971] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 635.635339][T15446] can0 (unregistered): slcan off ptm0. [ 635.651754][ T30] kauditd_printk_skb: 174 callbacks suppressed [ 635.651768][ T30] audit: type=1400 audit(1746315833.772:1544): avc: denied { watch } for pid=15451 comm="syz.2.12587" path="/2601/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 635.716502][ T30] audit: type=1400 audit(1746315833.802:1545): avc: denied { watch_sb watch_reads } for pid=15451 comm="syz.2.12587" path="/2601/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 635.780455][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 635.810465][ T971] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 635.825012][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 635.880468][ T971] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 635.894073][ T971] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 635.903636][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.914085][T15466] openvswitch: netlink: IPv4 tun info is not correct [ 635.932853][ T971] usb 1-1: config 0 descriptor?? [ 636.155464][ T971] hdpvr 1-1:0.0: firmware version 0xc7 dated [ 636.165509][ T971] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 636.212996][T15483] netlink: 'syz.2.12595': attribute type 23 has an invalid length. [ 636.346876][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12601'. [ 636.598977][ T971] hdpvr 1-1:0.0: Could not setup controls [ 636.619232][ T971] hdpvr 1-1:0.0: registering videodev failed [ 636.646210][ T971] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 636.662147][ T971] usb 1-1: USB disconnect, device number 114 [ 636.701215][ T5812] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 636.859636][T15490] [U]  [ 636.867796][ T5812] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 636.877099][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.899329][ T5812] usb 6-1: Product: syz [ 636.910966][ T5812] usb 6-1: Manufacturer: syz [ 636.915576][ T5812] usb 6-1: SerialNumber: syz [ 636.952857][ T5812] usb 6-1: config 0 descriptor?? [ 636.973923][ T5812] ch341 6-1:0.0: ch341-uart converter detected [ 637.070604][ T5895] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 742.210339][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 742.217312][ C1] rcu: 0-...!: (0 ticks this GP) idle=af94/1/0x4000000000000000 softirq=157638/157638 fqs=0 [ 742.228601][ C1] rcu: (detected by 1, t=10505 jiffies, g=125873, q=188 ncpus=2) [ 742.236403][ C1] Sending NMI from CPU 1 to CPUs 0: [ 742.236426][ C0] NMI backtrace for cpu 0 [ 742.236438][ C0] CPU: 0 UID: 0 PID: 15543 Comm: syz.3.12615 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 742.236456][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 742.236464][ C0] RIP: 0010:hlock_class+0x8/0x70 [ 742.236483][ C0] Code: 01 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f b7 47 20 66 25 ff 1f <0f> b7 c0 48 0f a3 05 4d 1b 13 14 73 15 48 8d 04 80 48 8d 04 80 48 [ 742.236497][ C0] RSP: 0018:ffffc90000007c30 EFLAGS: 00000002 [ 742.236509][ C0] RAX: 00000000000001bf RBX: ffff88802a8e0b18 RCX: 00000000fffffffe [ 742.236517][ C0] RDX: 0000000000000000 RSI: ffff88802a8e0b18 RDI: ffff88802a8e0af0 [ 742.236526][ C0] RBP: ffff88802a8e0af0 R08: 0000000000080000 R09: 0000000000000001 [ 742.236535][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000f34 [ 742.236543][ C0] R13: 0000000000000001 R14: ffff88802a8e0000 R15: 0000000000000000 [ 742.236552][ C0] FS: 0000000000000000(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 742.236566][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 742.236575][ C0] CR2: 0000200000000200 CR3: 0000000070fc8000 CR4: 00000000003526f0 [ 742.236584][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 742.236592][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 742.236600][ C0] Call Trace: [ 742.236605][ C0] [ 742.236610][ C0] __lock_acquire+0x974/0x1ba0 [ 742.236634][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 742.236649][ C0] lock_acquire+0x179/0x350 [ 742.236666][ C0] ? advance_sched+0xd9/0xc80 [ 742.236686][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 742.236699][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 742.236715][ C0] ? __pfx_advance_sched+0x10/0x10 [ 742.236732][ C0] _raw_spin_lock+0x2e/0x40 [ 742.236745][ C0] ? advance_sched+0xd9/0xc80 [ 742.236761][ C0] advance_sched+0xd9/0xc80 [ 742.236778][ C0] ? find_held_lock+0x2b/0x80 [ 742.236793][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 742.236807][ C0] ? __pfx_advance_sched+0x10/0x10 [ 742.236823][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 742.236840][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 742.236853][ C0] ? read_tsc+0x9/0x20 [ 742.236872][ C0] ? rcu_is_watching+0x12/0xc0 [ 742.236888][ C0] hrtimer_interrupt+0x397/0x8e0 [ 742.236906][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 742.236922][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 742.236939][ C0] [ 742.236943][ C0] [ 742.236948][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 742.236962][ C0] RIP: 0010:__rcu_read_unlock+0xeb/0x580 [ 742.236980][ C0] Code: cc 01 00 00 8b 85 48 04 00 00 85 c0 75 57 65 48 8b 1d 51 64 02 12 48 8d bb 44 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa <48> c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 [ 742.236992][ C0] RSP: 0018:ffffc90011b3f200 EFLAGS: 00000246 [ 742.237003][ C0] RAX: dffffc0000000000 RBX: ffff88802a8e0000 RCX: ffffc90011b3f1f4 [ 742.237011][ C0] RDX: ffff88802a8e0444 RSI: ffffffff8dbbbc37 RDI: ffff88802a8e0444 [ 742.237019][ C0] RBP: ffff88802a8e0000 R08: 0000000000000001 R09: 0000000000000000 [ 742.237027][ C0] R10: 0000000000000001 R11: 00000000000113aa R12: ffff88802a8e0000 [ 742.237035][ C0] R13: ffffc90011b3f2a0 R14: ffffc90011b3f5b0 R15: ffffc90011b3f2d4 [ 742.237050][ C0] unwind_next_frame+0x3fe/0x20a0 [ 742.237065][ C0] ? free_unref_folios+0x999/0x1630 [ 742.237084][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 742.237101][ C0] arch_stack_walk+0x94/0x100 [ 742.237118][ C0] ? folios_put_refs+0x56f/0x740 [ 742.237133][ C0] stack_trace_save+0x8e/0xc0 [ 742.237147][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 742.237162][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 742.237179][ C0] save_stack+0x160/0x1f0 [ 742.237197][ C0] ? __pfx_save_stack+0x10/0x10 [ 742.237213][ C0] ? free_unref_folios+0x999/0x1630 [ 742.237233][ C0] ? page_ext_put+0x3e/0xd0 [ 742.237253][ C0] __reset_page_owner+0x84/0x1a0 [ 742.237272][ C0] free_unref_folios+0x999/0x1630 [ 742.237290][ C0] ? in_gate_area+0xe0/0x100 [ 742.237316][ C0] folios_put_refs+0x56f/0x740 [ 742.237330][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 742.237346][ C0] ? free_pages_and_swap_cache+0xf0/0x4a0 [ 742.237363][ C0] free_pages_and_swap_cache+0x245/0x4a0 [ 742.237381][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 742.237410][ C0] ? __pfx___might_resched+0x10/0x10 [ 742.237428][ C0] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 742.237448][ C0] tlb_finish_mmu+0x168/0x7b0 [ 742.237467][ C0] exit_mmap+0x403/0xb90 [ 742.237483][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 742.237501][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 742.237524][ C0] __mmput+0x12a/0x410 [ 742.237540][ C0] mmput+0x62/0x70 [ 742.237554][ C0] do_exit+0x9d1/0x2c30 [ 742.237570][ C0] ? lock_acquire+0x179/0x350 [ 742.237587][ C0] ? find_held_lock+0x2b/0x80 [ 742.237600][ C0] ? __pfx_do_exit+0x10/0x10 [ 742.237617][ C0] ? find_held_lock+0x2b/0x80 [ 742.237632][ C0] do_group_exit+0xd3/0x2a0 [ 742.237650][ C0] get_signal+0x2673/0x26d0 [ 742.237668][ C0] ? __pfx_get_signal+0x10/0x10 [ 742.237683][ C0] ? do_futex+0x122/0x350 [ 742.237698][ C0] ? __pfx_do_futex+0x10/0x10 [ 742.237714][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 742.237731][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 742.237753][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 742.237769][ C0] do_syscall_64+0xda/0x260 [ 742.237786][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.237799][ C0] RIP: 0033:0x7fe3e178e969 [ 742.237808][ C0] Code: Unable to access opcode bytes at 0x7fe3e178e93f. [ 742.237814][ C0] RSP: 002b:00007fe3e267a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 742.237831][ C0] RAX: fffffffffffffe00 RBX: 00007fe3e19b5fa8 RCX: 00007fe3e178e969 [ 742.237839][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe3e19b5fa8 [ 742.237847][ C0] RBP: 00007fe3e19b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 742.237855][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe3e19b5fac [ 742.237862][ C0] R13: 0000000000000000 R14: 00007fff67f2eb30 R15: 00007fff67f2ec18 [ 742.237875][ C0] [ 742.238422][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10504 jiffies! g125873 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 742.854954][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=47085 [ 742.862837][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g125873 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 742.874283][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 742.884239][ C1] rcu: RCU grace-period kthread stack dump: [ 742.890119][ C1] task:rcu_preempt state:I stack:28728 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 742.902037][ C1] Call Trace: [ 742.905307][ C1] [ 742.908237][ C1] __schedule+0x116f/0x5de0 [ 742.912748][ C1] ? find_held_lock+0x2b/0x80 [ 742.917423][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 742.922364][ C1] ? __pfx___schedule+0x10/0x10 [ 742.927212][ C1] ? find_held_lock+0x2b/0x80 [ 742.931884][ C1] ? schedule+0x2d7/0x3a0 [ 742.936214][ C1] schedule+0xe7/0x3a0 [ 742.940286][ C1] schedule_timeout+0x123/0x290 [ 742.945133][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 742.950500][ C1] ? __pfx_process_timeout+0x10/0x10 [ 742.955785][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 742.961586][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 742.967061][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 742.971826][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 742.977110][ C1] ? rcu_gp_init+0xc76/0x15a0 [ 742.981785][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 742.986640][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 742.992445][ C1] rcu_gp_kthread+0x270/0x380 [ 742.997128][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 743.002322][ C1] ? rcu_is_watching+0x12/0xc0 [ 743.007083][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 743.012279][ C1] ? __kthread_parkme+0x19e/0x250 [ 743.017302][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 743.022497][ C1] kthread+0x3c2/0x780 [ 743.026561][ C1] ? __pfx_kthread+0x10/0x10 [ 743.031140][ C1] ? __pfx_kthread+0x10/0x10 [ 743.035722][ C1] ? __pfx_kthread+0x10/0x10 [ 743.040301][ C1] ? __pfx_kthread+0x10/0x10 [ 743.044879][ C1] ? rcu_is_watching+0x12/0xc0 [ 743.049635][ C1] ? __pfx_kthread+0x10/0x10 [ 743.054218][ C1] ret_from_fork+0x45/0x80 [ 743.058632][ C1] ? __pfx_kthread+0x10/0x10 [ 743.063212][ C1] ret_from_fork_asm+0x1a/0x30 [ 743.067986][ C1]