last executing test programs: 2m38.293805976s ago: executing program 1 (id=441): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x3) 2m37.8749591s ago: executing program 1 (id=447): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000e80)=""/4096, 0x1000}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002180)=""/137, 0x89}], 0x1}, 0x228}], 0x2, 0x40, 0x0) 2m37.663661035s ago: executing program 1 (id=449): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="5eaa00000000000071101000000000009500000000000000c962d465c50ed9fff811ba43d94c9c1c3a396c"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2m37.434307489s ago: executing program 1 (id=453): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) syz_usb_disconnect(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/cgroup\x00') 2m36.369665799s ago: executing program 1 (id=461): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, r1, 0x40099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) 2m36.260564907s ago: executing program 1 (id=463): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5) 2m20.946417324s ago: executing program 32 (id=463): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5) 9.449050241s ago: executing program 3 (id=2215): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x22}}}}}, 0x0) 9.401900782s ago: executing program 3 (id=2216): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x40088d0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c000380080001000200000034000380080001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880) 9.341819394s ago: executing program 3 (id=2218): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058da203002a000009050502000000000009058b", @ANYRES32], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) removexattr(0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 7.757879318s ago: executing program 3 (id=2255): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2020d7, 0x0) 7.614036576s ago: executing program 3 (id=2258): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000000c0)) 7.334297468s ago: executing program 3 (id=2261): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(r0) 7.120194466s ago: executing program 33 (id=2261): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(r0) 4.363849795s ago: executing program 4 (id=2292): r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3e, 0x0) 3.429695328s ago: executing program 4 (id=2296): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 2.464697321s ago: executing program 4 (id=2304): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x3f7ff, 0x4) r1 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0x2, 0xd, 0x1, 0xfffffffa}) 2.354427309s ago: executing program 4 (id=2305): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0xd0) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001400)='(', 0x1}], 0x1}}], 0x1, 0x8004) 2.256443012s ago: executing program 4 (id=2307): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001700)={0x84, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 1.930296527s ago: executing program 2 (id=2310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100"], 0x6c}}, 0x40) 1.787029523s ago: executing program 5 (id=2312): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x4, 0x2c, 0x4, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ad0b19196c79eb5}) 1.734296948s ago: executing program 2 (id=2313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 1.584989893s ago: executing program 2 (id=2314): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) 1.182749078s ago: executing program 5 (id=2315): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xa}}}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}]}}]}, 0x3c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.085873343s ago: executing program 5 (id=2316): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r0, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb2, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.085536819s ago: executing program 6 (id=2264): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) 990.663453ms ago: executing program 5 (id=2317): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000700)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*R<\xc1\x1e\xf9p>\xf5\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f00000005c0)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xbb\r\xf1\xc7\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85\xd1\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xc3V\x88\xd1\x1f\xc8\x94\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) mq_open(&(0x7f0000000180)='$@\x00', 0x842, 0x121, 0x0) 922.313322ms ago: executing program 6 (id=2319): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 890.1738ms ago: executing program 6 (id=2321): r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x2000000}, &(0x7f0000002000), &(0x7f0000000040)) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1061, 0x80, 0x4, 0x1a4, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5", 0x2}], 0x1, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 739.318989ms ago: executing program 6 (id=2323): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x20001) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2b, 0xa1, 0xef, 0x40, 0x5ac, 0x245, 0xa3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1c, 0x0, 0x0, 0x3, 0x4a, 0x2}}]}}]}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) 586.01287ms ago: executing program 2 (id=2326): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 404.804218ms ago: executing program 2 (id=2328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x6005}, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x32, 0x14, 0x68, 0x0, 0x9, 0x84, 0x0, @multicast1, @broadcast}}}}}}, 0x26) 403.886959ms ago: executing program 0 (id=2329): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) 395.057256ms ago: executing program 4 (id=2330): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = open(&(0x7f0000000180)='./bus\x00', 0x1c3bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r2, 0x1, r1, 0x7, 0x80000}) 339.836666ms ago: executing program 0 (id=2331): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f908, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2400c044) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440), &(0x7f00000004c0)=0xe, 0x80800) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0xa, 0x20002f7}) 264.646005ms ago: executing program 2 (id=2332): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 228.240471ms ago: executing program 0 (id=2333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x32}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) 92.606154ms ago: executing program 0 (id=2334): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 91.760587ms ago: executing program 0 (id=2335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 75.032058ms ago: executing program 5 (id=2336): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000180)="ed03", 0x2, 0x3b00, 0x0, 0x0) 20.808422ms ago: executing program 0 (id=2337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000000000002"]) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x32, 0x0, 0xffffd000) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x0, 0x9}) 0s ago: executing program 5 (id=2338): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) close(0x3) kernel console output (not intermixed with test programs): usb 3-1: USB disconnect, device number 22 [ 191.492619][ T5867] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 191.653317][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 191.663801][ T5867] usb 6-1: config 0 has an invalid interface number: 216 but max is 1 [ 191.672126][ T5867] usb 6-1: config 0 has an invalid interface number: 146 but max is 1 [ 191.685996][ T5867] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.712622][ T5867] usb 6-1: config 0 has no interface number 0 [ 191.728845][ T5867] usb 6-1: config 0 has no interface number 1 [ 191.740894][ T5867] usb 6-1: config 0 interface 216 altsetting 8 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 191.780214][ T5867] usb 6-1: config 0 interface 216 altsetting 8 bulk endpoint 0x4 has invalid maxpacket 32 [ 191.800335][ T5867] usb 6-1: config 0 interface 146 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 191.833188][ T5867] usb 6-1: config 0 interface 216 has no altsetting 0 [ 191.884511][ T5867] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=62.54 [ 191.894187][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.902194][ T5867] usb 6-1: Product: syz [ 191.932616][ T5867] usb 6-1: Manufacturer: syz [ 191.937524][ T5867] usb 6-1: SerialNumber: syz [ 191.958240][ T5867] usb 6-1: config 0 descriptor?? [ 191.968425][ T9335] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 192.114206][ T9350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1344'. [ 192.123284][ T9350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1344'. [ 192.296909][ T5867] msi2500 6-1:0.216: Registered as swradio24 [ 192.312581][ T5867] msi2500 6-1:0.216: SDR API is still slightly experimental and functionality changes may follow [ 192.378731][ T5867] videodev: could not get a free minor [ 192.388154][ T5867] msi2500 6-1:0.146: Failed to register as video device (-23) [ 192.421718][ T5867] msi2500 6-1:0.146: probe with driver msi2500 failed with error -23 [ 192.504829][ T5867] usb 6-1: USB disconnect, device number 15 [ 192.842889][ T30] audit: type=1400 audit(1762224053.755:467): avc: denied { create } for pid=9381 comm="syz.3.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 193.755072][ T5867] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 193.827894][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.835590][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.856249][ T30] audit: type=1400 audit(1762224054.785:468): avc: denied { shutdown } for pid=9423 comm="syz.2.1374" laddr=172.20.20.170 lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 193.933353][ T30] audit: type=1400 audit(1762224054.865:469): avc: denied { mounton } for pid=9426 comm="syz.2.1376" path="/280/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 193.958545][ T5867] usb 1-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.981531][ T5867] usb 1-1: config 0 interface 0 has no altsetting 0 [ 193.998517][ T5867] usb 1-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 194.013506][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.035020][ T5867] usb 1-1: config 0 descriptor?? [ 194.322599][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 194.471788][ T5867] hid (null): bogus close delimiter [ 194.473337][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 194.477937][ T5867] hid (null): unknown global tag 0xc [ 194.490070][ T5867] asus 0003:0B05:1A30.0014: unknown main item tag 0x0 [ 194.491623][ T24] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 194.496886][ T5867] asus 0003:0B05:1A30.0014: unknown main item tag 0x0 [ 194.496909][ T5867] asus 0003:0B05:1A30.0014: unknown main item tag 0x0 [ 194.496928][ T5867] asus 0003:0B05:1A30.0014: unknown main item tag 0x0 [ 194.496947][ T5867] asus 0003:0B05:1A30.0014: unknown main item tag 0x0 [ 194.514088][ T24] usb 3-1: config 179 has no interface number 0 [ 194.518768][ T5867] asus 0003:0B05:1A30.0014: unknown main item tag 0x0 [ 194.526067][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 194.533270][ T5867] asus 0003:0B05:1A30.0014: unknown main item tag 0x0 [ 194.539753][ T9453] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 194.545634][ T5867] asus 0003:0B05:1A30.0014: unknown main item tag 0x0 [ 194.545658][ T5867] asus 0003:0B05:1A30.0014: unknown main item tag 0x0 [ 194.545678][ T5867] asus 0003:0B05:1A30.0014: unknown main item tag 0x0 [ 194.551156][ T5867] asus 0003:0B05:1A30.0014: bogus close delimiter [ 194.558661][ T9453] syzkaller1: Refused to change device type [ 194.589936][ T5867] asus 0003:0B05:1A30.0014: item 0 0 2 10 parsing failed [ 194.598039][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 194.609919][ T5867] asus 0003:0B05:1A30.0014: Asus hid parse failed: -22 [ 194.620818][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 194.627874][ T5867] asus 0003:0B05:1A30.0014: probe with driver asus failed with error -22 [ 194.652940][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 194.665353][ T24] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 194.678678][ T24] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 194.695713][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.711967][ T9440] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 194.770148][ T5867] usb 1-1: USB disconnect, device number 20 [ 194.877716][ T30] audit: type=1326 audit(1762224055.805:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.4.1389" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc05998f6c9 code=0x0 [ 194.975094][ T30] audit: type=1400 audit(1762224055.905:471): avc: denied { watch_reads } for pid=9465 comm="syz.5.1392" path="/127" dev="tmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 195.024606][ T5923] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input42 [ 195.242453][ T9440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.252802][ T9440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.500995][ T978] usb 3-1: USB disconnect, device number 23 [ 195.501082][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 195.520727][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 195.604948][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 195.642982][ T5867] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 195.734083][ T11] block nbd0: Possible stuck request ffff888025fe0000: control (read@0,1024B). Runtime 90 seconds [ 195.852732][ T9] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 195.862135][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.872138][ T5867] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.883885][ T9] usb 6-1: Product: syz [ 195.888443][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 195.900152][ T9] usb 6-1: Manufacturer: syz [ 195.904849][ T9] usb 6-1: SerialNumber: syz [ 195.933907][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 195.943736][ T5867] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.957932][ T9] usb 6-1: config 0 descriptor?? [ 195.978161][ T5867] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.999395][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.061740][ T5867] usb 1-1: config 0 descriptor?? [ 196.227928][ T9484] bond2: entered promiscuous mode [ 196.242726][ T9484] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.257231][ T9484] bond0: (slave bond2): Enslaving as an active interface with an up link [ 196.500027][ T5867] plantronics 0003:047F:FFFF.0015: ignoring exceeding usage max [ 196.531081][ T5867] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 196.850001][ T9503] IPVS: Unknown mcast interface: vcan0 [ 196.987323][ T9507] loop3: detected capacity change from 0 to 7 [ 196.994256][ T9] usb 6-1: non-Atmel transceiver xxxxbb54 [ 197.004085][ T9507] Dev loop3: unable to read RDB block 7 [ 197.009760][ T9507] loop3: AHDI p1 p2 p3 p4 [ 197.015329][ T9507] loop3: partition table partially beyond EOD, truncated [ 197.023359][ T9507] loop3: p2 start 134220096 is beyond EOD, truncated [ 197.030903][ T95] block nbd1: Possible stuck request ffff888026087000: control (read@0,1024B). Runtime 90 seconds [ 197.030996][ T9507] loop3: p3 start 117440512 is beyond EOD, [ 197.041576][ T95] block nbd1: Possible stuck request ffff8880260871c0: control (read@1024,1024B). Runtime 90 seconds [ 197.041630][ T95] block nbd1: Possible stuck request ffff888026087380: control (read@2048,1024B). Runtime 90 seconds [ 197.048343][ T9507] truncated [ 197.058538][ T95] block nbd1: Possible stuck request ffff888026087540: control (read@3072,1024B). Runtime 90 seconds [ 197.204105][ T9] usb 6-1: Firmware version (0.0) predates our first public release. [ 197.212338][ T9] usb 6-1: Please update to version 0.2 or newer [ 197.225688][ T9] usb 6-1: atusb_probe: initialization failed, error = -19 [ 197.252284][ T9] usb 6-1: USB disconnect, device number 16 [ 197.779488][ T5867] usb 1-1: USB disconnect, device number 21 [ 198.040026][ T30] audit: type=1400 audit(1762224058.965:472): avc: denied { ioctl } for pid=9536 comm="syz.4.1420" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 198.497147][ T30] audit: type=1400 audit(1762224059.425:473): avc: denied { name_bind 0x1000000 } for pid=9563 comm="syz.0.1430" path="socket:[32289]" dev="sockfs" ino=32289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 198.677316][ T30] audit: type=1400 audit(1762224059.605:474): avc: denied { accept } for pid=9574 comm="syz.4.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 198.872786][ T5867] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 198.923783][ T9585] kvm: kvm [9584]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 198.940033][ T9585] kvm: kvm [9584]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 199.063275][ T5867] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.071386][ T5867] usb 1-1: config 0 has no interface number 0 [ 199.078678][ T5867] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 199.092599][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 199.113017][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.123143][ T5867] usb 1-1: config 0 descriptor?? [ 199.130812][ T5867] usb 1-1: selecting invalid altsetting 1 [ 199.142701][ T5867] dvb_ttusb_budget: ttusb_init_controller: error [ 199.149045][ T5867] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 199.229223][ T5867] DVB: Unable to find symbol cx22700_attach() [ 199.264003][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.277375][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.312606][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.328552][ T5867] DVB: Unable to find symbol tda10046_attach() [ 199.340456][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.357755][ T5867] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 199.366077][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.376260][ T5867] usb 1-1: USB disconnect, device number 22 [ 199.385301][ T9] usb 3-1: config 0 descriptor?? [ 199.773804][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.801123][ T9] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 199.932950][ T5867] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 200.022726][ T5931] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 200.102632][ T5867] usb 6-1: Using ep0 maxpacket: 16 [ 200.109704][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.122642][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.132568][ T5867] usb 6-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 200.143020][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.153967][ T5867] usb 6-1: config 0 descriptor?? [ 200.182612][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 200.189637][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.202409][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.212760][ T5931] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 200.213596][ T1188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.221813][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.224482][ T5931] usb 4-1: config 0 descriptor?? [ 200.230635][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.264261][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.272781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.352730][ T1188] usb 3-1: USB disconnect, device number 24 [ 200.366748][ T5867] usbhid 6-1:0.0: can't add hid device: -71 [ 200.373534][ T5867] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 200.383940][ T5867] usb 6-1: USB disconnect, device number 17 [ 200.646066][ T5931] playstation 0003:054C:05C4.0017: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 200.712597][ T978] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 200.862600][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 200.873523][ T978] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 200.881855][ T978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.911756][ T978] usb 1-1: config 0 has no interface number 0 [ 200.920467][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.931097][ T978] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 200.940761][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.982606][ T978] usb 1-1: Product: syz [ 200.991413][ T978] usb 1-1: Manufacturer: syz [ 201.011583][ T978] usb 1-1: SerialNumber: syz [ 201.082967][ T978] usb 1-1: config 0 descriptor?? [ 201.088922][ T5931] playstation 0003:054C:05C4.0017: Failed to retrieve feature with reportID 163: -32 [ 201.099573][ T978] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 201.112727][ T978] uvcvideo 1-1:0.105: No valid video chain found. [ 201.119252][ T5931] playstation 0003:054C:05C4.0017: Failed to retrieve DualShock4 firmware info: -32 [ 201.131620][ T5931] playstation 0003:054C:05C4.0017: Failed to get firmware info from DualShock4 [ 201.140948][ T5931] playstation 0003:054C:05C4.0017: HW/FW version data in sysfs will be invalid. [ 201.152755][ T5931] input: HID 054c:05c4 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0017/input/input43 [ 201.201206][ T5931] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0017/input/input44 [ 201.227307][ T5931] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0017/input/input45 [ 201.300439][ T5931] playstation 0003:054C:05C4.0017: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 201.311857][ T24] usb 1-1: USB disconnect, device number 23 [ 201.356888][ T978] usb 4-1: USB disconnect, device number 16 [ 201.482629][ T1188] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 201.582581][ T5923] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 201.643902][ T1188] usb 6-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 201.653274][ T1188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.665734][ T1188] usb 6-1: config 0 descriptor?? [ 201.672329][ T1188] pwc: Creative Labs Webcam Pro Ex detected. [ 201.742620][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 201.749289][ T5923] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.757394][ T5923] usb 5-1: config 0 has no interface number 0 [ 201.765568][ T5923] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 201.774845][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.782862][ T5923] usb 5-1: Product: syz [ 201.787027][ T5923] usb 5-1: Manufacturer: syz [ 201.791606][ T5923] usb 5-1: SerialNumber: syz [ 201.797753][ T5923] usb 5-1: config 0 descriptor?? [ 201.804579][ T5923] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 202.062801][ T3467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.136699][ T3467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.145389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.279655][ T1188] pwc: recv_control_msg error -32 req 02 val 2b00 [ 202.298796][ T1188] pwc: recv_control_msg error -32 req 02 val 2700 [ 202.507668][ T1188] pwc: recv_control_msg error -71 req 02 val 2c00 [ 202.514166][ T978] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 202.517653][ T30] audit: type=1400 audit(1762224063.445:475): avc: denied { read write } for pid=9661 comm="syz.2.1469" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 202.526199][ T1188] pwc: recv_control_msg error -71 req 04 val 1000 [ 202.556284][ T30] audit: type=1400 audit(1762224063.445:476): avc: denied { open } for pid=9661 comm="syz.2.1469" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 202.579809][ T1188] pwc: recv_control_msg error -71 req 04 val 1300 [ 202.587460][ T1188] pwc: recv_control_msg error -71 req 04 val 1400 [ 202.594399][ T1188] pwc: recv_control_msg error -71 req 02 val 2000 [ 202.601302][ T1188] pwc: recv_control_msg error -71 req 02 val 2100 [ 202.608413][ T1188] pwc: recv_control_msg error -71 req 06 val 0600 [ 202.616299][ T1188] pwc: recv_control_msg error -71 req 04 val 1500 [ 202.624368][ T1188] pwc: recv_control_msg error -71 req 02 val 2500 [ 202.633247][ T1188] pwc: recv_control_msg error -71 req 02 val 2400 [ 202.640085][ T1188] pwc: recv_control_msg error -71 req 02 val 2600 [ 202.647079][ T1188] pwc: recv_control_msg error -71 req 02 val 2900 [ 202.654072][ T1188] pwc: recv_control_msg error -71 req 02 val 2800 [ 202.661271][ T1188] pwc: recv_control_msg error -71 req 04 val 1100 [ 202.663880][ T978] usb 1-1: config 0 has no interfaces? [ 202.668273][ T1188] pwc: recv_control_msg error -71 req 04 val 1200 [ 202.684763][ T978] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.685643][ T1188] pwc: Registered as video103. [ 202.700808][ T1188] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input46 [ 202.703053][ T978] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.714487][ T1188] usb 6-1: USB disconnect, device number 18 [ 202.752765][ T978] usb 1-1: Product: syz [ 202.758097][ T978] usb 1-1: Manufacturer: syz [ 202.774514][ T978] usb 1-1: config 0 descriptor?? [ 203.009332][ T978] usb 1-1: USB disconnect, device number 24 [ 203.035171][ T5923] gspca_spca1528: reg_w err -71 [ 203.040106][ T5923] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 203.049689][ T5923] usb 5-1: USB disconnect, device number 24 [ 203.185673][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.547012][ T9700] netlink: 'syz.5.1486': attribute type 4 has an invalid length. [ 203.633043][ T30] audit: type=1400 audit(1762224064.565:477): avc: denied { listen } for pid=9703 comm="syz.4.1488" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.672833][ T5923] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 203.899127][ T5923] usb 1-1: config 0 has no interfaces? [ 203.899907][ T9714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.907839][ T5923] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 203.920948][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 203.929415][ T5923] usb 1-1: Product: syz [ 203.933867][ T5923] usb 1-1: Manufacturer: syz [ 203.940858][ T5923] usb 1-1: config 0 descriptor?? [ 204.093369][ T978] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 204.291537][ T5923] usb 1-1: USB disconnect, device number 25 [ 204.302647][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 204.333740][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.372718][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.382475][ T978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 204.413236][ T978] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 204.422445][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.434740][ T978] usb 5-1: config 0 descriptor?? [ 204.868587][ T978] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 204.885673][ T978] microsoft 0003:045E:07DA.0018: unsupported Resolution Multiplier 0 [ 204.901370][ T30] audit: type=1400 audit(1762224065.825:478): avc: denied { mount } for pid=9738 comm="syz.0.1501" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 204.903823][ T978] microsoft 0003:045E:07DA.0018: implement() called with n (152) > 32! (kworker/0:2) [ 204.925359][ T9739] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 205.081359][ T978] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 205.109051][ T978] microsoft 0003:045E:07DA.0018: no inputs found [ 205.125233][ T9739] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 205.125263][ T978] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 205.152611][ T978] usb 5-1: USB disconnect, device number 25 [ 205.218745][ T9743] bond2: entered promiscuous mode [ 205.226422][ T9743] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.235370][ T9743] bond0: (slave bond2): Enslaving as an active interface with an up link [ 205.257263][ T9739] overlayfs: failed to look up (tracing) for ino (-66) [ 205.425195][ T30] audit: type=1400 audit(1762224066.355:479): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 205.457166][ T53] net_ratelimit: 1 callbacks suppressed [ 205.457182][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.615482][ T9755] xt_hashlimit: size too large, truncated to 1048576 [ 205.645465][ T9759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'. [ 205.794703][ T30] audit: type=1400 audit(1762224066.725:480): avc: denied { setopt } for pid=9767 comm="syz.4.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 205.948857][ T9771] mkiss: ax0: crc mode is auto. [ 205.973730][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.982011][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.152553][ T30] audit: type=1400 audit(1762224067.075:481): avc: denied { connect } for pid=9780 comm="syz.4.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 206.256576][ T30] audit: type=1400 audit(1762224067.185:482): avc: denied { read write } for pid=9788 comm="syz.4.1522" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 206.268548][ T9792] netlink: 'syz.3.1520': attribute type 4 has an invalid length. [ 206.289101][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.341648][ T30] audit: type=1400 audit(1762224067.185:483): avc: denied { open } for pid=9788 comm="syz.4.1522" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 206.884599][ T9806] syzkaller1: entered promiscuous mode [ 206.890100][ T9806] syzkaller1: entered allmulticast mode [ 206.894255][ T30] audit: type=1400 audit(1762224067.825:484): avc: denied { getopt } for pid=9807 comm="syz.4.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 207.057627][ T9815] kvm: Disabled LAPIC found during irq injection [ 207.064645][ T9815] kvm: apic: phys broadcast and lowest prio [ 207.140669][ T9814] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1532'. [ 207.236314][ T9826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.281259][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1539'. [ 207.324467][ T1188] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 207.504096][ T1188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.531811][ T1188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.560450][ T1188] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 207.582772][ T1188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.600323][ T1188] usb 5-1: config 0 descriptor?? [ 207.623940][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1546'. [ 207.648281][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1546'. [ 207.661700][ T9844] netlink: 'syz.3.1546': attribute type 6 has an invalid length. [ 207.692234][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1546'. [ 207.736939][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1546'. [ 207.747682][ T9844] netlink: 'syz.3.1546': attribute type 6 has an invalid length. [ 207.913725][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 207.913747][ T30] audit: type=1400 audit(1762224068.845:487): avc: denied { watch watch_reads } for pid=9856 comm="syz.5.1553" path="/166/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 208.092355][ T1188] arvo 0003:1E7D:30D4.0019: item fetching failed at offset 5/7 [ 208.206055][ T9866] netlink: 'syz.3.1556': attribute type 15 has an invalid length. [ 208.248375][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'. [ 208.283979][ T1188] arvo 0003:1E7D:30D4.0019: parse failed [ 208.332774][ T1188] arvo 0003:1E7D:30D4.0019: probe with driver arvo failed with error -22 [ 208.345772][ T1318] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 208.364180][ T9866] netlink: 'syz.3.1556': attribute type 15 has an invalid length. [ 208.372788][ T1318] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 208.389327][ T1188] usb 5-1: USB disconnect, device number 26 [ 208.400118][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'. [ 208.411910][ T1318] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 208.429974][ T1318] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 208.647691][ T9871] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 208.957582][ T9890] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 208.972847][ T1188] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 208.978475][ T30] audit: type=1400 audit(1762224069.905:488): avc: denied { read } for pid=9879 comm="syz.0.1564" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 209.003000][ T9890] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 209.014197][ T9890] overlayfs: failed to look up (tracing) for ino (-66) [ 209.028479][ T30] audit: type=1400 audit(1762224069.955:489): avc: denied { open } for pid=9879 comm="syz.0.1564" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 209.089772][ T30] audit: type=1400 audit(1762224069.955:490): avc: denied { ioctl } for pid=9879 comm="syz.0.1564" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 209.145774][ T9895] binder: 9894:9895 unknown command 0 [ 209.154426][ T1188] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 209.170685][ T1188] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 209.186554][ T9895] binder: 9894:9895 ioctl c0306201 2000000003c0 returned -22 [ 209.213402][ T78] kernel read not supported for file /video7 (pid: 78 comm: kworker/1:1) [ 209.232841][ T1188] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.244121][ T1188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.259336][ T9877] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 209.272752][ T9877] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 209.291599][ T1188] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.501927][ T978] usb 3-1: USB disconnect, device number 25 [ 209.698333][ T9924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.325279][ T30] audit: type=1400 audit(1762224071.255:491): avc: denied { map } for pid=9945 comm="syz.2.1592" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.348316][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.360020][ T30] audit: type=1400 audit(1762224071.255:492): avc: denied { execute } for pid=9945 comm="syz.2.1592" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.648197][ T30] audit: type=1400 audit(1762224071.575:493): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 210.767265][ T30] audit: type=1400 audit(1762224071.695:494): avc: denied { create } for pid=9969 comm="syz.2.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 210.799056][ T30] audit: type=1400 audit(1762224071.725:495): avc: denied { ioctl } for pid=9969 comm="syz.2.1603" path="socket:[35100]" dev="sockfs" ino=35100 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 210.835733][ T978] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 210.937055][ T30] audit: type=1400 audit(1762224071.865:496): avc: denied { name_bind } for pid=9977 comm="syz.5.1607" src=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 210.993984][ T978] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 211.006610][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.017777][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.027566][ T978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 211.041405][ T978] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 211.050476][ T978] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 211.059083][ T5931] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 211.066826][ T978] usb 5-1: Manufacturer: syz [ 211.073101][ T978] usb 5-1: config 0 descriptor?? [ 211.112661][ T78] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 211.232727][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 211.239282][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 211.249034][ T5931] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 211.261186][ T5931] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 211.262580][ T78] usb 3-1: Using ep0 maxpacket: 32 [ 211.270305][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.277304][ T78] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.283525][ T5931] usb 1-1: Product: syz [ 211.298602][ T5931] usb 1-1: Manufacturer: syz [ 211.303246][ T5931] usb 1-1: SerialNumber: syz [ 211.307986][ T78] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.310220][ T5931] usb 1-1: config 0 descriptor?? [ 211.317877][ T78] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 211.331842][ T78] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.341553][ T78] usb 3-1: config 0 descriptor?? [ 211.350661][ T78] hub 3-1:0.0: USB hub found [ 211.511515][ T978] hid_parser_main: 948 callbacks suppressed [ 211.511536][ T978] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 211.541726][ T9984] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1609'. [ 211.549860][ T978] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 211.555438][ T78] hub 3-1:0.0: 1 port detected [ 211.767858][ T9971] delete_channel: no stack [ 211.773188][ T24] usb 1-1: USB disconnect, device number 26 [ 211.922593][ T1188] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 212.035868][ T5931] usb 5-1: USB disconnect, device number 27 [ 212.084270][ T1188] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 212.092831][ T1188] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.103190][ T1188] usb 4-1: config 0 has no interface number 0 [ 212.109277][ T1188] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 212.119560][ T1188] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.135223][ T1188] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 212.144392][ T1188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.152402][ T1188] usb 4-1: Product: syz [ 212.156607][ T1188] usb 4-1: Manufacturer: syz [ 212.161225][ T1188] usb 4-1: SerialNumber: syz [ 212.166820][ T78] hub 3-1:0.0: activate --> -90 [ 212.172207][ T1188] usb 4-1: config 0 descriptor?? [ 212.570469][ T5923] usb 3-1: USB disconnect, device number 26 [ 212.576647][ T78] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 212.612456][T10009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.721681][T10013] binder: 10012:10013 ioctl c0306201 2000000003c0 returned -14 [ 212.792240][ T1188] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.117/input/input47 [ 212.924538][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 212.924552][ T30] audit: type=1400 audit(1762224073.855:501): avc: denied { listen } for pid=10026 comm="syz.5.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 212.958573][ T30] audit: type=1400 audit(1762224073.875:502): avc: denied { accept } for pid=10026 comm="syz.5.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 213.030905][ T1188] usb 4-1: USB disconnect, device number 17 [ 213.115178][T10035] SELinux: failed to load policy [ 213.172581][ T30] audit: type=1400 audit(1762224074.085:503): avc: denied { read } for pid=10038 comm="syz.2.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 213.211635][ T30] audit: type=1400 audit(1762224074.135:504): avc: denied { getopt } for pid=10038 comm="syz.2.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 213.248971][ T30] audit: type=1400 audit(1762224074.175:505): avc: denied { setopt } for pid=10042 comm="syz.0.1637" lport=48976 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 213.909540][T10072] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 213.957034][T10072] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 213.971095][T10072] overlayfs: failed to look up (tracing) for ino (-66) [ 214.522576][ T78] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 214.675362][ T78] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 214.686245][ T78] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 214.700974][ T78] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 214.710413][ T78] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.719154][ T78] usb 5-1: Product: syz [ 214.723658][ T78] usb 5-1: Manufacturer: syz [ 214.728298][ T78] usb 5-1: SerialNumber: syz [ 214.742610][ T5867] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 214.773638][ T78] usb 5-1: config 0 descriptor?? [ 214.780426][T10088] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 214.790114][T10088] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 214.892350][T10105] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 214.995237][ T5867] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 215.004989][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.014513][T10088] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 215.026069][ T5867] usb 3-1: config 0 descriptor?? [ 215.031170][T10088] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 215.095507][ T5867] cp210x 3-1:0.0: cp210x converter detected [ 215.137842][T10105] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 215.151292][T10105] overlayfs: failed to look up (tracing) for ino (-66) [ 215.468068][ T5867] usb 3-1: cp210x converter now attached to ttyUSB0 [ 215.498316][ T1188] IPVS: starting estimator thread 0... [ 215.592756][T10111] IPVS: using max 44 ests per chain, 105600 per kthread [ 215.670032][ T5867] usb 3-1: USB disconnect, device number 27 [ 215.688496][ T5867] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 215.737897][ T5867] cp210x 3-1:0.0: device disconnected [ 216.029219][T10135] SELinux: failed to load policy [ 216.142135][ T78] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 216.170401][ T78] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 216.204503][ T78] usb 5-1: USB disconnect, device number 28 [ 216.212012][ T78] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 216.567397][ T1188] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 216.569907][T10161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1685'. [ 216.762434][ T1188] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 216.788870][ T1188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.811931][ T1188] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 216.822181][ T1188] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 216.831168][ T1188] usb 1-1: Manufacturer: syz [ 216.843217][ T1188] usb 1-1: config 0 descriptor?? [ 216.912678][ T1188] rc_core: IR keymap rc-hauppauge not found [ 216.918610][ T1188] Registered IR keymap rc-empty [ 216.928713][ T1188] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 216.956628][ T1188] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input48 [ 217.023066][T10176] bridge_slave_0: left allmulticast mode [ 217.031572][T10176] bridge_slave_0: left promiscuous mode [ 217.037748][T10176] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.040232][T10181] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 217.057008][T10176] bridge_slave_1: left allmulticast mode [ 217.063006][T10176] bridge_slave_1: left promiscuous mode [ 217.068736][T10176] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.084076][T10176] bond0: (slave bond_slave_0): Releasing backup interface [ 217.094836][T10181] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 217.104923][T10181] overlayfs: failed to look up (tracing) for ino (-66) [ 217.112376][T10176] bond0: (slave bond_slave_1): Releasing backup interface [ 217.129593][T10176] team0: Port device team_slave_0 removed [ 217.140742][T10176] team0: Port device team_slave_1 removed [ 217.147652][T10176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.157629][T10176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.166834][T10176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.174819][T10176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.183764][T10176] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.220612][T10187] input: syz1 as /devices/virtual/input/input49 [ 217.472030][ T5931] usb 1-1: USB disconnect, device number 27 [ 217.905031][T10215] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 217.938757][T10215] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 217.949528][T10215] overlayfs: failed to look up (tracing) for ino (-66) [ 218.223176][ T30] audit: type=1400 audit(1762224079.145:506): avc: denied { write } for pid=10234 comm="syz.0.1713" path="socket:[36905]" dev="sockfs" ino=36905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 218.274657][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 218.432729][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 218.439727][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.450310][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 218.462783][ T24] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 218.472058][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.480246][ T24] usb 4-1: Product: syz [ 218.484602][ T24] usb 4-1: Manufacturer: syz [ 218.489249][ T24] usb 4-1: SerialNumber: syz [ 218.497340][ T24] usb 4-1: config 0 descriptor?? [ 218.505485][ T24] powermate 4-1:0.0: probe with driver powermate failed with error -22 [ 218.895505][T10241] kvm: kvm [10240]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 219.474013][ T978] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 219.654166][ T978] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 219.665778][ T978] usb 5-1: config 0 interface 0 has no altsetting 0 [ 219.672431][ T978] usb 5-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 219.689995][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.727268][ T978] usb 5-1: config 0 descriptor?? [ 219.754394][ T5931] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 219.772672][ T30] audit: type=1400 audit(1762224080.685:507): avc: denied { execmem } for pid=10271 comm="syz.2.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 219.834377][ T5931] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 220.207633][ T978] apple 0003:05AC:022B.001C: hidraw0: USB HID v0.00 Device [HID 05ac:022b] on usb-dummy_hcd.4-1/input0 [ 220.405430][ T5923] usb 5-1: USB disconnect, device number 29 [ 220.482650][ T1188] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 220.490303][ T24] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 220.572577][ T78] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 220.642845][ T1188] usb 6-1: Using ep0 maxpacket: 8 [ 220.649601][ T1188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.660684][ T1188] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 220.669951][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 220.677703][ T1188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.686538][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 220.696051][ T1188] usb 6-1: config 0 descriptor?? [ 220.701883][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.713920][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.724227][ T78] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 220.733462][ T78] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.743662][ T78] usb 1-1: config 0 has no interface number 0 [ 220.751074][ T78] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 220.761239][ T78] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.775836][ T24] usb 3-1: string descriptor 0 read error: -22 [ 220.782300][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.791580][ T78] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 220.800819][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.809834][ T78] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.818538][ T78] usb 1-1: Product: syz [ 220.822754][ T78] usb 1-1: Manufacturer: syz [ 220.829170][ T24] usb 3-1: 0:2 : does not exist [ 220.834531][ T78] usb 1-1: SerialNumber: syz [ 220.840669][ T78] usb 1-1: config 0 descriptor?? [ 220.923604][ T1188] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 221.051834][ T1188] usb 4-1: USB disconnect, device number 18 [ 221.134488][ T5923] usb 6-1: USB disconnect, device number 19 [ 221.395059][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1744'. [ 221.409425][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1744'. [ 221.455493][ T78] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.117/input/input50 [ 221.509953][T10320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1748'. [ 221.520325][T10320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1748'. [ 221.530826][T10320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1748'. [ 221.675768][ T5931] usb 1-1: USB disconnect, device number 28 [ 221.841187][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 221.854513][ T24] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 221.866653][ T24] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 221.883741][ T24] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 221.894544][ T24] usb 3-1: USB disconnect, device number 28 [ 221.932773][ T978] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 222.092548][ T978] usb 6-1: Using ep0 maxpacket: 32 [ 222.098888][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.110004][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.120241][ T978] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 222.129338][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.138719][ T978] usb 6-1: config 0 descriptor?? [ 222.145356][ T978] hub 6-1:0.0: USB hub found [ 222.350211][ T978] hub 6-1:0.0: 1 port detected [ 222.640406][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 223.112258][ T978] hub 6-1:0.0: activate --> -90 [ 223.506828][ T78] usb 6-1: USB disconnect, device number 20 [ 223.506846][ T978] usb 6-1-port1: config error [ 223.631168][ T30] audit: type=1400 audit(1762224084.555:508): avc: denied { watch } for pid=10390 comm="syz.2.1776" path="/370/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 223.678539][ T30] audit: type=1400 audit(1762224084.605:509): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 224.124333][ T78] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 224.326871][ T78] usb 1-1: Using ep0 maxpacket: 32 [ 224.333678][ T78] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 224.352556][ T78] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.374450][ T78] usb 1-1: config 0 descriptor?? [ 224.389575][ T78] gspca_main: sq930x-2.14.0 probing 041e:403c [ 224.498664][ T30] audit: type=1400 audit(1762224085.425:510): avc: denied { write } for pid=10414 comm="syz.4.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 224.577088][T10415] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 224.630151][T10424] xt_hashlimit: size too large, truncated to 1048576 [ 224.694307][ T5816] Bluetooth: hci6: command 0x1003 tx timeout [ 224.695009][ T5814] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 224.865595][T10425] SELinux: failed to load policy [ 225.143121][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 225.221333][ T30] audit: type=1326 audit(1762224086.145:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10439 comm="syz.4.1795" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc05998f6c9 code=0x0 [ 225.362610][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 225.371930][ T9] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 225.387291][ T9] usb 4-1: config 0 has no interface number 0 [ 225.394749][ T9] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 225.406002][ T9] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 225.422180][ T9] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 225.435971][ T9] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.460255][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 225.476345][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.485565][ T9] usb 4-1: Product: syz [ 225.489939][ T9] usb 4-1: Manufacturer: syz [ 225.491095][T10448] input: syz1 as /devices/virtual/input/input51 [ 225.495545][ T9] usb 4-1: SerialNumber: syz [ 225.513702][ T9] usb 4-1: config 0 descriptor?? [ 225.634072][ T78] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 225.639992][ T78] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 225.663711][ T78] usb 1-1: USB disconnect, device number 29 [ 225.736445][ T9] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 225.813109][ T11] block nbd0: Possible stuck request ffff888025fe0000: control (read@0,1024B). Runtime 120 seconds [ 225.861914][ T30] audit: type=1400 audit(1762224086.785:512): avc: denied { setopt } for pid=10453 comm="syz.2.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 225.940952][ T9] usb 4-1: USB disconnect, device number 19 [ 226.772896][ T30] audit: type=1400 audit(1762224087.685:513): avc: granted { setsecparam } for pid=10470 comm="syz.4.1809" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 226.792050][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.093395][ T95] block nbd1: Possible stuck request ffff888026087000: control (read@0,1024B). Runtime 120 seconds [ 227.104361][ T95] block nbd1: Possible stuck request ffff8880260871c0: control (read@1024,1024B). Runtime 120 seconds [ 227.115565][ T95] block nbd1: Possible stuck request ffff888026087380: control (read@2048,1024B). Runtime 120 seconds [ 227.126952][ T95] block nbd1: Possible stuck request ffff888026087540: control (read@3072,1024B). Runtime 120 seconds [ 227.838827][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1827'. [ 227.924035][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1827'. [ 227.985800][T10524] overlayfs: overlapping lowerdir path [ 227.995455][T10524] overlayfs: failed to verify upper (387/file0, ino=2017, err=-116) [ 227.995519][T10524] overlayfs: failed to verify index dir 'upper' xattr [ 227.995527][T10524] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 228.162652][ T9] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 228.314522][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 228.314939][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 228.333444][ T9] usb 4-1: config 56 has an invalid interface number: 90 but max is 0 [ 228.333469][ T9] usb 4-1: config 56 has no interface number 0 [ 228.333504][ T9] usb 4-1: config 56 interface 90 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 228.333530][ T9] usb 4-1: config 56 interface 90 has no altsetting 0 [ 228.335182][ T9] usb 4-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=c4.0e [ 228.391839][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.391864][ T9] usb 4-1: Product: syz [ 228.391878][ T9] usb 4-1: Manufacturer: syz [ 228.391893][ T9] usb 4-1: SerialNumber: syz [ 228.408898][T10521] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.426784][ T30] audit: type=1400 audit(1762224089.335:514): avc: denied { ioctl } for pid=10532 comm="syz.5.1844" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 228.512348][T10531] veth1_vlan (unregistering): left allmulticast mode [ 228.748294][ T9] mos7840 4-1:56.90: missing endpoints [ 228.813758][ T9] usb 4-1: USB disconnect, device number 20 [ 229.105105][ T30] audit: type=1400 audit(1762224090.035:515): avc: denied { read } for pid=10553 comm="syz.2.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 229.124754][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.172047][T10558] input: syz0 as /devices/virtual/input/input52 [ 229.326735][T10556] SELinux: failed to load policy [ 229.470693][ T5814] block nbd5: Receive control failed (result -32) [ 229.490847][T10565] block nbd5: shutting down sockets [ 229.682608][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 229.842583][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 229.850241][ T9] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 229.858716][ T9] usb 4-1: config 2 has no interface number 0 [ 229.866519][ T9] usb 4-1: config 2 interface 31 has no altsetting 0 [ 229.885878][ T9] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 229.895559][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.904589][ T9] usb 4-1: Product: syz [ 229.910098][ T9] usb 4-1: Manufacturer: syz [ 229.915476][ T9] usb 4-1: SerialNumber: syz [ 230.158716][T10606] loop3: detected capacity change from 0 to 7 [ 230.175386][T10606] Dev loop3: unable to read RDB block 7 [ 230.181287][T10606] loop3: unable to read partition table [ 230.188954][T10606] loop3: partition table beyond EOD, truncated [ 230.196359][T10606] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 230.263493][T10609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.379337][ T3467] Bluetooth: hci6: Frame reassembly failed (-84) [ 230.416797][T10615] KVM: debugfs: duplicate directory 10615-5 [ 230.576565][ T9] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 230.592570][ T5931] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 230.607993][ T9] usb 4-1: USB disconnect, device number 21 [ 230.742782][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 230.749219][ T5931] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 230.759595][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.773198][ T5931] usb 6-1: config 0 descriptor?? [ 230.780737][ T5931] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 231.004620][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.014431][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.023483][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.032121][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.041136][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.167409][T10636] syzkaller1: entered promiscuous mode [ 231.173041][T10636] syzkaller1: entered allmulticast mode [ 231.214945][T10631] chnl_net:caif_netlink_parms(): no params data found [ 231.295025][T10631] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.302236][T10631] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.310859][T10631] bridge_slave_0: entered allmulticast mode [ 231.318108][T10631] bridge_slave_0: entered promiscuous mode [ 231.326152][T10631] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.333632][T10631] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.340776][T10631] bridge_slave_1: entered allmulticast mode [ 231.348507][T10631] bridge_slave_1: entered promiscuous mode [ 231.372238][T10631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.383687][T10631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.413301][T10631] team0: Port device team_slave_0 added [ 231.420819][T10631] team0: Port device team_slave_1 added [ 231.457555][T10631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.466554][T10631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.495277][T10631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.509974][T10631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.517406][T10631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.544410][T10631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.606803][T10631] hsr_slave_0: entered promiscuous mode [ 231.613859][T10631] hsr_slave_1: entered promiscuous mode [ 231.619955][T10631] debugfs: 'hsr0' already exists in 'hsr' [ 231.620329][ T9] kernel write not supported for file 946/net/vlan/vlan1 (pid: 9 comm: kworker/0:0) [ 231.625888][ T30] audit: type=1400 audit(1762224092.545:516): avc: denied { mounton } for pid=10646 comm="syz.3.1884" path="/syzcgroup/net/syz3/devices.allow" dev="cgroup" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 231.635938][T10631] Cannot create hsr debugfs directory [ 231.791979][ T5931] gspca_sonixj: reg_w1 err -71 [ 231.794133][T10653] evm: overlay not supported [ 231.813007][ T5931] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 231.831863][ T5931] usb 6-1: USB disconnect, device number 21 [ 231.855529][T10631] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.935475][T10631] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.006112][T10631] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.064605][T10631] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.227793][T10631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.250716][T10631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.268657][T10631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.285833][T10631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.439680][T10631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.452781][ T5816] Bluetooth: hci6: command 0x1003 tx timeout [ 232.453249][ T5814] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 232.481367][T10631] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.503923][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.511064][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.523583][T10672] xt_hashlimit: size too large, truncated to 1048576 [ 232.559618][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.566775][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.046866][T10631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.093767][ T5814] Bluetooth: hci2: command tx timeout [ 233.143692][ T30] audit: type=1400 audit(1762224094.075:517): avc: denied { read } for pid=10695 comm="syz.4.1898" path="socket:[38584]" dev="sockfs" ino=38584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 233.202060][ T30] audit: type=1400 audit(1762224094.125:518): avc: denied { connect } for pid=10698 comm="syz.4.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 233.295133][T10631] veth0_vlan: entered promiscuous mode [ 233.312922][ T5923] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 233.330510][T10631] veth1_vlan: entered promiscuous mode [ 233.382965][T10631] veth0_macvtap: entered promiscuous mode [ 233.407388][T10631] veth1_macvtap: entered promiscuous mode [ 233.440919][T10631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.494914][ T5923] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 233.510180][T10631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.517664][ T5923] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 233.529941][ T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.532627][ T5923] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 233.548147][ T53] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.564235][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.583665][ T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.585944][T10690] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 233.622211][ T5923] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 233.638674][ T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.737793][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.765335][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.815573][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.831109][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.840290][ T5923] usb 6-1: USB disconnect, device number 22 [ 233.927126][ T30] audit: type=1400 audit(1762224094.855:519): avc: denied { mounton } for pid=10631 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 233.987413][T10721] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 234.514206][ T78] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 234.652741][ T5923] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 234.684241][ T78] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 234.695934][ T78] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 234.708404][ T78] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 234.717510][ T78] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.727673][T10742] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 234.735029][T10742] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 234.744734][ T78] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 234.804231][ T5923] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 234.812865][ T5923] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 234.821985][ T5923] usb 6-1: config 150 has no interface number 0 [ 234.828373][ T5923] usb 6-1: config 150 interface 204 has no altsetting 0 [ 234.837217][ T5923] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 234.846428][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.856494][ T5923] usb 6-1: Product: syz [ 234.860659][ T5923] usb 6-1: Manufacturer: syz [ 234.867025][ T5923] usb 6-1: SerialNumber: syz [ 234.964664][ T78] usb 3-1: USB disconnect, device number 29 [ 235.079364][ T5923] xr_serial 6-1:150.204: skipping garbage [ 235.085529][ T5923] xr_serial 6-1:150.204: xr_serial converter detected [ 235.172654][ T30] audit: type=1400 audit(1762224096.095:520): avc: denied { map } for pid=10741 comm="syz.2.1919" path=2F6465762F6D69646933202864656C6574656429 dev="devtmpfs" ino=3343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.172999][ T5814] Bluetooth: hci2: command tx timeout [ 235.382589][ T5867] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 235.534754][ T5867] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.545487][ T5867] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 235.554979][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.566994][ T5867] usb 4-1: config 0 descriptor?? [ 235.574913][ T5867] pwc: Askey VC010 type 2 USB webcam detected. [ 235.883004][ T5923] usb 6-1: xr_serial converter now attached to ttyUSB0 [ 235.978143][ T5867] pwc: recv_control_msg error -32 req 02 val 2b00 [ 235.985350][ T5867] pwc: recv_control_msg error -32 req 02 val 2700 [ 236.062607][ T9] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 236.070929][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059bc7000: rx timeout, send abort [ 236.079197][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059bc7400: rx timeout, send abort [ 236.087555][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059bc7000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 236.101930][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059bc7400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 236.119006][ T5931] usb 6-1: USB disconnect, device number 23 [ 236.127926][ T5931] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 236.138365][ T5931] xr_serial 6-1:150.204: device disconnected [ 236.193335][ T5867] pwc: recv_control_msg error -32 req 04 val 1000 [ 236.200138][ T5867] pwc: recv_control_msg error -71 req 04 val 1300 [ 236.206999][ T5867] pwc: recv_control_msg error -71 req 04 val 1400 [ 236.214706][ T5867] pwc: recv_control_msg error -71 req 02 val 2000 [ 236.221716][ T5867] pwc: recv_control_msg error -71 req 02 val 2100 [ 236.228839][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 236.240271][ T5867] pwc: recv_control_msg error -71 req 04 val 1500 [ 236.248158][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 236.259233][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 236.268429][ T5867] pwc: recv_control_msg error -71 req 02 val 2500 [ 236.275070][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.283200][ T5867] pwc: recv_control_msg error -71 req 02 val 2400 [ 236.290570][ T5867] pwc: recv_control_msg error -71 req 02 val 2600 [ 236.298087][ T5867] pwc: recv_control_msg error -71 req 02 val 2900 [ 236.298326][T10792] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 236.304908][ T5867] pwc: recv_control_msg error -71 req 02 val 2800 [ 236.312338][T10792] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 236.318552][ T5867] pwc: recv_control_msg error -71 req 04 val 1100 [ 236.334194][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 236.343568][ T5867] pwc: recv_control_msg error -71 req 04 val 1200 [ 236.352211][ T5867] pwc: Registered as video103. [ 236.365418][ T5867] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input54 [ 236.378379][ T5867] usb 4-1: USB disconnect, device number 22 [ 236.559318][ T5867] usb 5-1: USB disconnect, device number 30 [ 236.681053][T10799] syzkaller1: entered promiscuous mode [ 236.687176][T10799] syzkaller1: entered allmulticast mode [ 236.838730][T10807] pim6reg1: entered promiscuous mode [ 236.839039][T10805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1947'. [ 236.845592][T10807] pim6reg1: entered allmulticast mode [ 236.863544][T10805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1947'. [ 236.995326][ T53] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 237.253326][ T5814] Bluetooth: hci2: command tx timeout [ 237.349858][T10829] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1955'. [ 237.359790][T10829] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1955'. [ 237.449982][T10832] binder: 10830:10832 ioctl c0306201 200000000480 returned -14 [ 237.472668][ T24] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 237.542623][ T5867] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 237.633973][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.643889][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.657536][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.666809][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.694139][ T5867] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 237.709067][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.720615][ T5867] usb 5-1: config 0 descriptor?? [ 237.729416][ T5867] pwc: Creative Labs Webcam Pro Ex detected. [ 237.880892][ T24] usb 1-1: usb_control_msg returned -32 [ 237.886925][ T24] usbtmc 1-1:16.0: can't read capabilities [ 238.335415][ T5867] pwc: recv_control_msg error -32 req 02 val 2b00 [ 238.338805][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1962'. [ 238.343257][ T5867] pwc: recv_control_msg error -32 req 02 val 2700 [ 238.357480][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1962'. [ 238.571923][ T5867] pwc: recv_control_msg error -71 req 02 val 2c00 [ 238.579158][ T5867] pwc: recv_control_msg error -71 req 04 val 1000 [ 238.586073][ T5867] pwc: recv_control_msg error -71 req 04 val 1300 [ 238.593522][ T5867] pwc: recv_control_msg error -71 req 04 val 1400 [ 238.601127][ T5867] pwc: recv_control_msg error -71 req 02 val 2000 [ 238.608148][ T5867] pwc: recv_control_msg error -71 req 02 val 2100 [ 238.615584][ T5867] pwc: recv_control_msg error -71 req 06 val 0600 [ 238.622312][ T5867] pwc: recv_control_msg error -71 req 04 val 1500 [ 238.629150][ T5867] pwc: recv_control_msg error -71 req 02 val 2500 [ 238.635873][ T5867] pwc: recv_control_msg error -71 req 02 val 2400 [ 238.643426][ T5867] pwc: recv_control_msg error -71 req 02 val 2600 [ 238.650068][ T5867] pwc: recv_control_msg error -71 req 02 val 2900 [ 238.657104][ T5867] pwc: recv_control_msg error -71 req 02 val 2800 [ 238.664162][ T5867] pwc: recv_control_msg error -71 req 04 val 1100 [ 238.670941][ T5867] pwc: recv_control_msg error -71 req 04 val 1200 [ 238.679451][ T5867] pwc: Registered as video103. [ 238.686894][ T5867] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input55 [ 238.700786][ T5867] usb 5-1: USB disconnect, device number 31 [ 238.707680][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 238.750587][ T24] IPVS: starting estimator thread 0... [ 238.853914][T10857] IPVS: using max 43 ests per chain, 103200 per kthread [ 238.866745][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 238.882106][ T9] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 238.892634][ T9] usb 6-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 238.903257][ T9] usb 6-1: config 0 has no interface number 0 [ 238.910569][ T9] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 238.920618][ T9] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 238.931684][ T9] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 238.947307][ T9] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 238.974366][ T9] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 238.984626][ T9] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 238.996370][ T9] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 118, changing to 10 [ 239.008056][ T9] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid maxpacket 25956, setting to 1024 [ 239.034259][ T9] usb 6-1: config 0 interface 239 has no altsetting 0 [ 239.043526][T10866] netlink: 'syz.3.1970': attribute type 10 has an invalid length. [ 239.056490][ T9] usb 6-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 239.075396][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.092824][ T9] usb 6-1: Product: syz [ 239.097257][ T9] usb 6-1: Manufacturer: syz [ 239.107936][ T9] usb 6-1: SerialNumber: syz [ 239.116162][ T9] usb 6-1: config 0 descriptor?? [ 239.121772][T10852] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 239.142698][T10852] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 239.150176][T10852] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 239.333579][ T5816] Bluetooth: hci2: command tx timeout [ 239.407718][ T30] audit: type=1400 audit(1762224100.335:521): avc: denied { bind } for pid=10875 comm="syz.2.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.449945][ T9] usb 6-1: USB disconnect, device number 24 [ 239.463659][ T5814] Bluetooth: hci6: BCM: Reset failed (-71) [ 239.530587][T10881] serio: Serial port ttyS3 [ 239.574074][ T30] audit: type=1400 audit(1762224100.505:522): avc: denied { getopt } for pid=10882 comm="syz.2.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.593654][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.912609][ T78] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 240.074066][ T78] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.084289][ T78] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.094060][ T78] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 240.103217][ T78] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 240.111226][ T78] usb 5-1: SerialNumber: syz [ 240.226556][ T1188] usb 1-1: USB disconnect, device number 30 [ 240.232648][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 240.320922][ T78] usb 5-1: 0:2 : does not exist [ 240.330832][ T78] usb 5-1: USB disconnect, device number 32 [ 240.394085][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.405418][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.416473][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 240.425620][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.436347][ T9] usb 6-1: config 0 descriptor?? [ 240.538989][ T30] audit: type=1400 audit(1762224101.465:523): avc: denied { mounton } for pid=10906 comm="syz.0.1988" path="/13/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 240.560980][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.581959][ T30] audit: type=1400 audit(1762224101.505:524): avc: denied { unmount } for pid=10631 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 240.629639][T10912] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1990'. [ 240.639231][T10912] openvswitch: netlink: Missing key (keys=40, expected=80) [ 240.679451][ T30] audit: type=1400 audit(1762224101.605:525): avc: denied { bind } for pid=10913 comm="syz.0.1991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.699260][ T30] audit: type=1400 audit(1762224101.605:526): avc: denied { name_bind } for pid=10913 comm="syz.0.1991" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 240.720665][ T30] audit: type=1400 audit(1762224101.605:527): avc: denied { node_bind } for pid=10913 comm="syz.0.1991" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 240.743558][ T30] audit: type=1400 audit(1762224101.605:528): avc: denied { connect } for pid=10913 comm="syz.0.1991" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.813662][ T5868] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 240.849655][ T9] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0 [ 240.872629][ T9] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0 [ 240.879879][ T9] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0 [ 240.902548][ T9] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0 [ 240.909917][ T9] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0 [ 240.918809][T10924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1996'. [ 240.923087][T10924] xfrm1: entered promiscuous mode [ 240.934914][ T9] cm6533_jd 0003:0D8C:0022.001D: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 240.935178][T10924] xfrm1: entered allmulticast mode [ 240.953090][T10924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1996'. [ 240.982831][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 240.989472][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.000822][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.010992][ T5868] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 241.021714][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.031911][ T5868] usb 4-1: config 0 descriptor?? [ 241.039496][ T5868] hub 4-1:0.0: USB hub found [ 241.114933][ T9] usb 6-1: USB disconnect, device number 25 [ 241.142609][ T78] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 241.245220][ T5868] hub 4-1:0.0: 1 port detected [ 241.292652][ T78] usb 1-1: Using ep0 maxpacket: 16 [ 241.299485][ T78] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 241.308101][ T78] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 241.319244][ T78] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 241.327566][ T78] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 241.338224][ T78] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 241.348037][ T78] usb 1-1: config 0 has no interface number 0 [ 241.354829][ T78] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 241.366278][ T78] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 241.376750][ T78] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 241.388543][ T78] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.403938][ T78] usb 1-1: config 0 interface 125 has no altsetting 0 [ 241.410736][ T78] usb 1-1: config 0 interface 125 has no altsetting 2 [ 241.431653][ T78] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 241.455673][ T78] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.465037][ T78] usb 1-1: Product: syz [ 241.469795][ T78] usb 1-1: Manufacturer: syz [ 241.474641][ T78] usb 1-1: SerialNumber: syz [ 241.481306][ T78] usb 1-1: config 0 descriptor?? [ 241.491320][ T78] usb 1-1: selecting invalid altsetting 2 [ 241.538620][T10943] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 68 [ 241.694398][T10952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.816424][ T1188] hid-generic 1000:0003:0001.001E: unknown main item tag 0x0 [ 241.831835][ T1188] hid-generic 1000:0003:0001.001E: hidraw0: HID v4000.00 Device [syz0] on syz1 [ 241.872684][ T9] hub 4-1:0.0: activate --> -90 [ 241.992628][ T5868] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 242.143043][ T5868] usb 6-1: Using ep0 maxpacket: 8 [ 242.149919][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.162142][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.172317][ T5868] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 242.182379][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.183456][ C1] usb 1-1: async_complete: urb error -71 [ 242.193565][ T5868] usb 6-1: config 0 descriptor?? [ 242.196397][ C1] usb 1-1: async_complete: urb error -71 [ 242.206845][ C1] usb 1-1: async_complete: urb error -71 [ 242.213607][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.222027][ T78] get_1284_register: usb error -71 [ 242.223374][ T30] audit: type=1400 audit(1762224103.155:529): avc: denied { setopt } for pid=10972 comm="syz.4.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 242.228629][ T78] uss720 1-1:0.125: probe with driver uss720 failed with error -71 [ 242.261262][ T78] usb 1-1: USB disconnect, device number 31 [ 242.281841][ T5931] usb 4-1: USB disconnect, device number 23 [ 242.597596][ T30] audit: type=1400 audit(1762224103.525:530): avc: denied { create } for pid=10986 comm="syz.2.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.616189][ T5868] logitech 0003:046D:C20E.001F: rdesc size test failed for formula gp [ 242.623539][ T30] audit: type=1400 audit(1762224103.525:531): avc: denied { bind } for pid=10986 comm="syz.2.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.649496][ T5868] logitech 0003:046D:C20E.001F: unbalanced collection at end of report description [ 242.661524][ T5868] logitech 0003:046D:C20E.001F: parse failed [ 242.672621][ T5868] logitech 0003:046D:C20E.001F: probe with driver logitech failed with error -22 [ 242.836150][ T5868] usb 6-1: USB disconnect, device number 26 [ 242.907897][T10996] batman_adv: batadv0: Adding interface: dummy0 [ 242.915475][T10996] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.940720][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.950806][T10996] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 243.191697][T11009] serio: Serial port ttyS3 [ 243.472626][ T5868] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 243.622583][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 243.629193][ T5868] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 243.639661][ T5868] usb 3-1: config 0 has no interface number 0 [ 243.647128][ T5868] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 243.656362][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.670653][ T5868] usb 3-1: config 0 descriptor?? [ 243.736718][T11028] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 243.764275][T11024] SELinux: failed to load policy [ 243.785189][ T5868] viperboard 3-1:0.143: version 0.00 found at bus 003 address 030 [ 243.808689][ T5868] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 243.818568][ T5868] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 243.896754][ T1188] usb 3-1: USB disconnect, device number 30 [ 243.915085][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2040'. [ 244.427963][ T1188] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 244.602544][ T1188] usb 6-1: Using ep0 maxpacket: 16 [ 244.613977][ T1188] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.643169][ T1188] usb 6-1: config 0 interface 0 has no altsetting 0 [ 244.649805][ T1188] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 244.669702][ T1188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.689072][ T1188] usb 6-1: config 0 descriptor?? [ 244.772660][ T78] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 244.990507][ T78] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.042436][ T78] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.056082][ T78] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.070905][ T78] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.105333][ T78] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.120207][ T1188] acrux 0003:1A34:0802.0020: unknown main item tag 0x0 [ 245.138451][ T1188] acrux 0003:1A34:0802.0020: unknown main item tag 0x0 [ 245.152822][ T78] usb 4-1: config 0 descriptor?? [ 245.182693][ T1188] acrux 0003:1A34:0802.0020: unknown main item tag 0x0 [ 245.200048][ T1188] acrux 0003:1A34:0802.0020: unknown main item tag 0x0 [ 245.217943][ T1188] acrux 0003:1A34:0802.0020: hidraw0: USB HID v0.05 Device [HID 1a34:0802] on usb-dummy_hcd.5-1/input0 [ 245.265431][ T1188] acrux 0003:1A34:0802.0020: no inputs found [ 245.289300][ T1188] acrux 0003:1A34:0802.0020: Failed to enable force feedback support, error: -19 [ 245.369374][ T30] audit: type=1400 audit(1762224106.295:532): avc: denied { ioctl } for pid=11103 comm="syz.4.2075" path="socket:[40892]" dev="sockfs" ino=40892 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 245.394817][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.408639][ T1188] usb 6-1: USB disconnect, device number 27 [ 245.612303][ T78] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 245.923147][T11130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.052525][T11139] nbd: device at index 5 is going down [ 246.115935][ T30] audit: type=1400 audit(1762224107.035:533): avc: denied { read } for pid=11140 comm="syz.4.2090" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 246.153314][ T30] audit: type=1400 audit(1762224107.035:534): avc: denied { open } for pid=11140 comm="syz.4.2090" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 246.202577][ T78] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 246.227256][T11147] netlink: 'syz.2.2092': attribute type 39 has an invalid length. [ 246.235767][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2093'. [ 246.364514][ T78] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.377989][ T78] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.398029][ T78] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 246.413836][ T78] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.437352][ T78] usb 1-1: config 0 descriptor?? [ 246.455863][ T24] usb 4-1: USB disconnect, device number 24 [ 246.704254][ T5868] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 246.865300][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.886986][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.910423][ T5868] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 246.921148][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.937631][ T5868] usb 6-1: config 0 descriptor?? [ 247.127646][ T78] usb 1-1: string descriptor 0 read error: -22 [ 247.167389][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.176993][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.233478][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 247.340945][ T78] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0022/input/input56 [ 247.363615][ T78] uclogic 0003:256C:006D.0022: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 247.364683][ T5868] pyra 0003:1E7D:2CF6.0023: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 247.394181][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.407774][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.418405][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.428053][ T24] usb 3-1: Product: syz [ 247.432244][ T24] usb 3-1: Manufacturer: syz [ 247.443394][ T24] usb 3-1: SerialNumber: syz [ 247.560076][ T78] usb 1-1: USB disconnect, device number 32 [ 247.952653][ T5931] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 247.961110][ T5868] pyra 0003:1E7D:2CF6.0023: couldn't init struct pyra_device [ 247.969194][ T5868] pyra 0003:1E7D:2CF6.0023: couldn't install mouse [ 247.985532][ T5868] pyra 0003:1E7D:2CF6.0023: probe with driver pyra failed with error -71 [ 247.997272][ T5868] usb 6-1: USB disconnect, device number 28 [ 248.126332][ T5931] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 248.137957][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.148323][ T5931] usb 4-1: config 0 descriptor?? [ 248.155507][ T5931] cp210x 4-1:0.0: cp210x converter detected [ 248.296160][ T30] audit: type=1326 audit(1762224109.225:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.0.2127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3d738f6c9 code=0x0 [ 248.319013][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.352633][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 248.502598][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 248.510398][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.521905][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.532029][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 248.551702][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 248.560852][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.572005][ T5931] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 248.580260][ T9] usb 5-1: config 0 descriptor?? [ 248.592978][ T5931] usb 4-1: cp210x converter now attached to ttyUSB0 [ 248.660822][ T30] audit: type=1400 audit(1762224109.585:536): avc: denied { getopt } for pid=11235 comm="syz.5.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 248.680224][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.688745][ T24] cdc_ncm 3-1:1.0: failed to get mac address [ 248.697020][ T24] cdc_ncm 3-1:1.0: bind() failure [ 248.706244][ T24] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 248.715188][ T24] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 248.724931][ T24] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 248.736980][ T24] usb 3-1: USB disconnect, device number 31 [ 248.800897][ T1188] usb 4-1: USB disconnect, device number 25 [ 248.809536][ T1188] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 248.844653][ T1188] cp210x 4-1:0.0: device disconnected [ 248.994339][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0024/input/input57 [ 249.011377][ T9] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 249.092896][ T5867] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 249.257850][ T5867] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.275980][ T9] usb 5-1: USB disconnect, device number 33 [ 249.279756][ T30] audit: type=1400 audit(1762224110.205:537): avc: denied { write } for pid=11253 comm="syz.2.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 249.289758][ T5867] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.350970][ T5867] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 249.369413][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 249.377590][ T5867] usb 6-1: SerialNumber: syz [ 249.599018][ T5867] usb 6-1: 0:2 : does not exist [ 249.615758][ T5867] usb 6-1: USB disconnect, device number 29 [ 249.871362][T11277] input: syz0 as /devices/virtual/input/input58 [ 250.012873][ T5931] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 250.172914][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 250.179555][ T5931] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 250.188758][ T5931] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.199540][ T5931] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.211515][ T5931] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.220959][ T5867] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 250.228712][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.236911][ T5931] usb 4-1: Product: syz [ 250.242212][ T5931] usb 4-1: Manufacturer: syz [ 250.246987][ T5931] usb 4-1: SerialNumber: syz [ 250.264248][T11285] input: syz0 as /devices/virtual/input/input59 [ 250.405637][ T5867] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.416355][ T5867] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.427830][ T5867] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 250.437806][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.445865][ T5867] usb 5-1: SerialNumber: syz [ 250.522565][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 250.661442][ T5931] usb 4-1: 0:2 : does not exist [ 250.695704][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.706820][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.719609][ T9] usb 3-1: New USB device found, idVendor=0025, idProduct=a4a1, bcdDevice= 0.40 [ 250.728977][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.737037][ T9] usb 3-1: Product: syz [ 250.741220][ T9] usb 3-1: Manufacturer: syz [ 250.745825][ T9] usb 3-1: SerialNumber: syz [ 251.221205][T11301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.271897][ T5867] usb 5-1: 0:2 : does not exist [ 251.277119][ T5867] usb 5-1: unit 255 not found! [ 251.291964][ T5867] usb 5-1: USB disconnect, device number 34 [ 251.333938][ T5816] Bluetooth: hci6: command 0x1003 tx timeout [ 251.333940][ T5814] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 251.492510][ T5867] usb 4-1: USB disconnect, device number 26 [ 251.967074][ T9] cdc_ncm 3-1:1.0: bind() failure [ 251.972640][ T5814] Bluetooth: hci5: command 0x0c1a tx timeout [ 251.972641][ T24] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 251.982466][ T9] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 251.985254][ T24] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 251.994230][ T9] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 252.011735][ T9] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 252.028067][ T9] usb 3-1: USB disconnect, device number 32 [ 252.661445][T11332] loop2: detected capacity change from 0 to 7 [ 252.687966][T11332] Dev loop2: unable to read RDB block 7 [ 252.704162][T11332] loop2: AHDI p1 p2 p3 [ 252.708506][T11332] loop2: partition table partially beyond EOD, truncated [ 252.718100][T11332] loop2: p1 start 1601398130 is beyond EOD, truncated [ 252.731393][T11332] loop2: p2 start 1702059890 is beyond EOD, truncated [ 252.926804][T11343] netlink: 'syz.5.2174': attribute type 29 has an invalid length. [ 252.940783][T11343] netlink: 'syz.5.2174': attribute type 29 has an invalid length. [ 252.951352][T11343] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2174'. [ 252.952545][ T30] audit: type=1400 audit(1762224113.875:538): avc: denied { write } for pid=11342 comm="syz.5.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 252.980433][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.012767][ T30] audit: type=1400 audit(1762224113.875:539): avc: denied { nlmsg_write } for pid=11342 comm="syz.5.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 253.207727][ T30] audit: type=1400 audit(1762224114.135:540): avc: denied { execute } for pid=11351 comm="syz.5.2177" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 253.231635][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.559535][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2183'. [ 253.572577][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 253.683349][ T30] audit: type=1400 audit(1762224114.615:541): avc: denied { map } for pid=11381 comm="syz.5.2191" path="socket:[42707]" dev="sockfs" ino=42707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 253.734475][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 253.749306][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 253.773416][ T9] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 253.782616][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.791052][ T9] usb 5-1: Product: syz [ 253.798349][ T9] usb 5-1: Manufacturer: syz [ 253.804428][ T9] usb 5-1: SerialNumber: syz [ 253.811669][ T9] usb 5-1: config 0 descriptor?? [ 253.819988][T11357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 253.832426][T11357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.051588][T11357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.059525][T11357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.099346][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 254.108399][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2201'. [ 254.125203][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 254.125203][ T53] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.125240][ T53] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.135546][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2201'. [ 254.143239][ T5814] Bluetooth: hci2: command 0x0c1a tx timeout [ 254.151893][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 254.173967][ T53] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.175691][ T24] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 254.183227][ T53] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.295682][T11409] netlink: 408 bytes leftover after parsing attributes in process `syz.2.2203'. [ 254.467782][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2205'. [ 254.612025][T11426] overlayfs: invalid origin (0000) [ 254.860066][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2216'. [ 254.878952][ T9] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 254.903217][ T9] usb 5-1: USB disconnect, device number 35 [ 255.154791][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 255.256001][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.262311][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.312702][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 255.319931][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 255.330302][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 255.340188][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 255.352299][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 255.388715][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 255.406606][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 255.433898][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.464701][ T24] usb 4-1: config 0 descriptor?? [ 255.470315][T11442] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 255.482941][T11442] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 255.762575][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 255.893402][ T11] block nbd0: Possible stuck request ffff888025fe0000: control (read@0,1024B). Runtime 150 seconds [ 255.909373][ T5868] usb 4-1: USB disconnect, device number 27 [ 255.922566][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 255.929750][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 255.937628][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 255.949501][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.960632][ T9] usb 1-1: config 0 descriptor?? [ 256.381252][ T9] kye 0003:0458:5015.0025: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 256.392711][ T9] kye 0003:0458:5015.0025: item fetching failed at offset 0/3 [ 256.400733][ T9] kye 0003:0458:5015.0025: parse failed [ 256.407602][ T9] kye 0003:0458:5015.0025: probe with driver kye failed with error -22 [ 256.476491][ T30] audit: type=1400 audit(1762224117.405:542): avc: denied { watch watch_reads } for pid=11518 comm="syz.2.2254" path="/proc/1131/stat" dev="proc" ino=43646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 256.598933][ T24] usb 1-1: USB disconnect, device number 33 [ 257.016875][ T2955] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.042953][ T2955] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 257.062653][ T2955] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.182896][ T95] block nbd1: Possible stuck request ffff888026087000: control (read@0,1024B). Runtime 150 seconds [ 257.195230][ T95] block nbd1: Possible stuck request ffff8880260871c0: control (read@1024,1024B). Runtime 150 seconds [ 257.207917][ T95] block nbd1: Possible stuck request ffff888026087380: control (read@2048,1024B). Runtime 150 seconds [ 257.218950][ T95] block nbd1: Possible stuck request ffff888026087540: control (read@3072,1024B). Runtime 150 seconds [ 257.267329][ T2955] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.317036][ T2955] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 257.375955][ T2955] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.425125][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.434273][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.442749][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.450507][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.458064][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.469377][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.476697][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.483957][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.491738][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.499601][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.542724][T11562] netlink: 'syz.0.2270': attribute type 4 has an invalid length. [ 257.574757][ T5814] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 257.708430][T11555] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 257.761156][T11555] CIFS mount error: No usable UNC path provided in device string! [ 257.761156][T11555] [ 257.771877][T11555] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 258.214987][ T30] audit: type=1326 audit(1762224119.145:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11572 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97158f6c9 code=0x7ffc0000 [ 258.293973][ T2955] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.298332][ T30] audit: type=1326 audit(1762224119.165:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11572 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97158f6c9 code=0x7ffc0000 [ 258.335534][ T2955] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 258.350830][ T2955] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.384636][ T30] audit: type=1326 audit(1762224119.165:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11572 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe97158f6c9 code=0x7ffc0000 [ 258.438593][ T30] audit: type=1326 audit(1762224119.165:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11572 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97158f6c9 code=0x7ffc0000 [ 258.482715][ T30] audit: type=1326 audit(1762224119.165:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11572 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97158f6c9 code=0x7ffc0000 [ 258.506794][ T30] audit: type=1326 audit(1762224119.175:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11572 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fe97158f6c9 code=0x7ffc0000 [ 258.531083][ T30] audit: type=1326 audit(1762224119.175:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11572 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97158f6c9 code=0x7ffc0000 [ 258.536043][ T2955] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.555184][ T30] audit: type=1326 audit(1762224119.175:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11572 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97158f6c9 code=0x7ffc0000 [ 258.596038][ T2955] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 258.606680][ T2955] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.702648][ T5867] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 258.705078][T11594] netlink: 'syz.5.2283': attribute type 39 has an invalid length. [ 258.799540][T11558] chnl_net:caif_netlink_parms(): no params data found [ 258.844860][ T2955] bridge_slave_1: left allmulticast mode [ 258.850862][ T2955] bridge_slave_1: left promiscuous mode [ 258.858806][ T2955] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.869277][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.869768][ T2955] bridge_slave_0: left allmulticast mode [ 258.885835][ T5867] usb 1-1: config 0 interface 0 has no altsetting 0 [ 258.885885][ T2955] bridge_slave_0: left promiscuous mode [ 258.896380][ T5867] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 258.898721][ T2955] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.907446][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.922113][ T5867] usb 1-1: Product: syz [ 258.926429][ T5867] usb 1-1: Manufacturer: syz [ 258.931028][ T5867] usb 1-1: SerialNumber: syz [ 258.938197][ T5867] usb 1-1: config 0 descriptor?? [ 258.946111][ T5867] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 258.957560][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 258.969513][ T5867] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 258.979106][ T5867] usb 1-1: media controller created [ 258.998646][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.047138][ T5867] DVB: Unable to find symbol tda10046_attach() [ 259.057679][ T5867] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 259.057685][ T1188] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 259.067534][ T5867] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 259.166709][ T2955] bond1 (unregistering): (slave geneve2): Releasing active interface [ 259.224568][ T1188] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.238241][ T1188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.249725][ T1188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 259.259691][ T1188] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.272828][ T1188] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.281877][ T1188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.295037][ T1188] usb 3-1: config 0 descriptor?? [ 259.355862][ T2955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.366731][ T2955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.377312][ T2955] bond0 (unregistering): (slave bond2): Releasing backup interface [ 259.385901][ T2955] bond0 (unregistering): Released all slaves [ 259.476947][ T2955] bond1 (unregistering): Released all slaves [ 259.572787][ T5814] Bluetooth: hci0: command tx timeout [ 259.584835][ T2955] bond2 (unregistering): Released all slaves [ 259.740784][ T1188] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 259.766493][T11558] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.774948][T11558] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.782177][T11558] bridge_slave_0: entered allmulticast mode [ 259.792020][T11558] bridge_slave_0: entered promiscuous mode [ 259.803439][T11558] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.810695][T11558] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.818411][T11558] bridge_slave_1: entered allmulticast mode [ 259.826279][T11558] bridge_slave_1: entered promiscuous mode [ 259.911493][T11558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.923795][T11558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.973419][T11558] team0: Port device team_slave_0 added [ 259.981936][ T2955] hsr_slave_0: left promiscuous mode [ 259.988279][ T2955] hsr_slave_1: left promiscuous mode [ 259.996448][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.004595][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.013995][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.021432][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.033901][ T1188] usb 3-1: USB disconnect, device number 33 [ 260.180558][ T5867] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 260.204437][ T5867] usb 1-1: USB disconnect, device number 34 [ 260.479532][ T2955] team0 (unregistering): Port device team_slave_1 removed [ 260.563798][ T2955] team0 (unregistering): Port device team_slave_0 removed [ 261.016478][T11558] team0: Port device team_slave_1 added [ 261.061523][T11558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.071789][T11558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.097986][ T1188] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 261.108686][T11558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.126782][T11558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.136484][T11558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.166446][T11558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.211763][T11636] ip6erspan0: entered promiscuous mode [ 261.262549][ T1188] usb 1-1: Using ep0 maxpacket: 32 [ 261.274589][ T1188] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 261.289683][ T1188] usb 1-1: config 0 has no interface number 0 [ 261.305703][ T1188] usb 1-1: config 0 interface 184 has no altsetting 0 [ 261.312198][T11558] hsr_slave_0: entered promiscuous mode [ 261.320187][ T1188] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 261.324095][T11558] hsr_slave_1: entered promiscuous mode [ 261.338166][ T1188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.338184][T11558] debugfs: 'hsr0' already exists in 'hsr' [ 261.352069][T11558] Cannot create hsr debugfs directory [ 261.363769][ T1188] usb 1-1: Product: syz [ 261.367949][ T1188] usb 1-1: Manufacturer: syz [ 261.372990][ T1188] usb 1-1: SerialNumber: syz [ 261.388442][ T1188] usb 1-1: config 0 descriptor?? [ 261.404172][ T1188] smsc75xx v1.0.0 [ 261.597922][T11645] netlink: 'syz.5.2303': attribute type 21 has an invalid length. [ 261.653903][ T5814] Bluetooth: hci0: command tx timeout [ 261.728851][T11558] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 261.736250][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2303'. [ 261.765989][T11558] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 261.773618][T11645] netlink: 'syz.5.2303': attribute type 21 has an invalid length. [ 261.781911][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2303'. [ 261.794575][T11558] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 261.805417][T11558] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 261.937281][T11558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.990389][T11558] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.020423][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.027584][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.088601][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.095759][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.168508][T11663] loop2: detected capacity change from 0 to 7 [ 262.183524][T11663] loop2: p1 [ 262.186788][T11663] loop2: partition table partially beyond EOD, truncated [ 262.207067][T11663] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 262.219952][T11558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.283011][ T5882] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 262.385972][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2310'. [ 262.395069][T11667] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2310'. [ 262.409881][T11667] geneve0: entered promiscuous mode [ 262.415217][T11667] geneve0: entered allmulticast mode [ 262.448633][ T1188] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 262.466124][ T5882] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 262.484978][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.496489][T11558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.504015][ T5882] usb 5-1: Product: syz [ 262.508199][ T5882] usb 5-1: Manufacturer: syz [ 262.513941][ T5882] usb 5-1: SerialNumber: syz [ 262.660648][ T1188] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 262.683870][ T1188] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 262.693933][ T1188] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 262.716805][ T1188] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 262.732362][ T1188] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 262.748068][ T1188] usb 1-1: USB disconnect, device number 35 [ 262.814136][T11558] veth0_vlan: entered promiscuous mode [ 262.825425][T11558] veth1_vlan: entered promiscuous mode [ 262.849349][T11558] veth0_macvtap: entered promiscuous mode [ 262.859795][T11558] veth1_macvtap: entered promiscuous mode [ 262.876274][T11558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.891779][T11558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.905818][ T2937] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.914766][ T2937] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.924918][ T2937] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.934603][ T2937] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.991790][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.002993][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.028588][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.037720][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.129407][T11693] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2264'. [ 263.138720][T11693] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2264'. [ 263.148837][ T5882] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 263.150755][T11693] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2264'. [ 263.161673][T11659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.170074][T11693] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2264'. [ 263.180702][ T5882] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 263.188759][T11659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.199129][ T5882] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 263.256925][ T5882] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 263.305758][ T5882] usb 5-1: USB disconnect, device number 36 [ 263.530270][T11711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2322'. [ 263.602278][ T30] audit: type=1400 audit(1762224124.525:551): avc: denied { name_bind } for pid=11712 comm="syz.0.2324" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 263.732635][ T5814] Bluetooth: hci0: command tx timeout [ 263.764446][ T5867] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 263.792054][ T5882] IPVS: starting estimator thread 0... [ 263.886645][T11721] IPVS: using max 48 ests per chain, 115200 per kthread [ 263.944213][ T5867] usb 7-1: config 4 has an invalid interface number: 28 but max is 0 [ 263.962569][ T5867] usb 7-1: config 4 has no interface number 0 [ 263.979861][ T5867] usb 7-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 263.992756][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.006507][ T5867] usb 7-1: Product: syz [ 264.010691][ T5867] usb 7-1: Manufacturer: syz [ 264.017041][ T5867] usb 7-1: SerialNumber: syz [ 264.032901][ T5867] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:4.28/input/input61 [ 264.214500][ T31] INFO: task syz.1.463:7080 blocked for more than 143 seconds. [ 264.223862][ T31] Not tainted syzkaller #0 [ 264.236063][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 264.253037][ T31] task:syz.1.463 state:D stack:26232 pid:7080 tgid:7079 ppid:5808 task_flags:0x400040 flags:0x00080002 [ 264.282512][ T31] Call Trace: [ 264.287978][ T31] [ 264.291118][ T31] __schedule+0x1190/0x5de0 [ 264.303582][ T31] ? __lock_acquire+0x622/0x1c90 [ 264.321835][ T31] ? __pfx___schedule+0x10/0x10 [ 264.349286][ T31] ? find_held_lock+0x2b/0x80 [ 264.359173][ T31] ? schedule+0x2d7/0x3a0 [ 264.394002][ T31] schedule+0xe7/0x3a0 [ 264.398191][ T31] io_schedule+0xbf/0x130 [ 264.419090][ T31] folio_wait_bit_common+0x3d5/0x9e0 [ 264.449965][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 264.470975][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 264.492528][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 264.498106][ T31] ? __pfx___might_resched+0x10/0x10 [ 264.512672][ T31] ? compaction_free+0x148/0x3c0 [ 264.517646][ T31] migrate_pages_batch+0x1487/0x3bb0 [ 264.535421][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 264.540824][ T31] ? __pfx_compaction_free+0x10/0x10 [ 264.552636][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 264.558582][ T31] migrate_pages_sync+0x4c5/0x8a0 [ 264.568329][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 264.576507][ T31] ? __pfx_compaction_free+0x10/0x10 [ 264.581807][ T31] ? css_rstat_updated+0x1c2/0x510 [ 264.587077][ T31] ? __pfx_migrate_pages_sync+0x10/0x10 [ 264.592967][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 264.598452][ T31] migrate_pages+0x1b5f/0x23a0 [ 264.603630][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 264.609092][ T31] ? __pfx_compaction_free+0x10/0x10 [ 264.614701][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 264.619816][ T31] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 264.626398][ T31] ? pfn_to_online_page+0x1de/0x560 [ 264.631665][ T31] compact_zone+0x2018/0x4750 [ 264.636429][ T31] ? __free_object+0x286/0x410 [ 264.641197][ T31] ? __pfx_debug_object_free+0x10/0x10 [ 264.646796][ T31] ? __pfx_compact_zone+0x10/0x10 [ 264.651823][ T31] ? __flush_work+0x938/0xcc0 [ 264.656531][ T31] ? __flush_work+0x4d0/0xcc0 [ 264.661204][ T31] compact_node+0x1a3/0x2c0 [ 264.665944][ T31] ? __pfx_compact_node+0x10/0x10 [ 264.671004][ T31] ? __lru_add_drain_all+0xec/0x6f0 [ 264.676522][ T31] sysctl_compaction_handler+0x141/0x210 [ 264.682174][ T31] proc_sys_call_handler+0x445/0x570 [ 264.687617][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 264.693789][ T31] ? splice_from_pipe_next+0x1f7/0x5d0 [ 264.699264][ T31] iter_file_splice_write+0xa24/0x12e0 [ 264.704903][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 264.710796][ T31] ? __pfx_copy_splice_read+0x10/0x10 [ 264.716546][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 264.722444][ T31] direct_splice_actor+0x192/0x6c0 [ 264.727609][ T31] splice_direct_to_actor+0x345/0xa30 [ 264.733179][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 264.738813][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 264.745071][ T31] do_splice_direct+0x174/0x240 [ 264.749953][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 264.755395][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 264.761308][ T31] ? rw_verify_area+0xcf/0x6c0 [ 264.766110][ T31] do_sendfile+0xb06/0xe50 [ 264.770541][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 264.776151][ T31] __x64_sys_sendfile64+0x154/0x220 [ 264.781380][ T31] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 264.787326][ T31] do_syscall_64+0xcd/0xfa0 [ 264.791863][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.798333][ T31] RIP: 0033:0x7ff5ecf8f6c9 [ 264.802885][ T31] RSP: 002b:00007ff5ede50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 264.811308][ T31] RAX: ffffffffffffffda RBX: 00007ff5ed1e5fa0 RCX: 00007ff5ecf8f6c9 [ 264.819571][ T31] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 264.827602][ T31] RBP: 00007ff5ed011f91 R08: 0000000000000000 R09: 0000000000000000 [ 264.835655][ T31] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 264.843670][ T31] R13: 00007ff5ed1e6038 R14: 00007ff5ed1e5fa0 R15: 00007ffcef341878 [ 264.851672][ T31] [ 264.855716][ T31] [ 264.855716][ T31] Showing all locks held in the system: [ 264.864215][ T31] 4 locks held by kworker/0:0/9: [ 264.869228][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 264.889538][ T31] #1: ffffc900000e7d00 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 264.903605][ T31] #2: ffff8880b8425b18 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0 [ 264.913058][ T31] #3: ffffffff9ad46328 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 264.923724][ T31] 3 locks held by kworker/1:0/24: [ 264.928745][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 264.939597][ T31] #1: ffffc900001e7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 264.951755][ T31] #2: ffff8880553a3240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b6/0x6da0 [ 264.961896][ T31] 1 lock held by khungtaskd/31: [ 264.966772][ T31] #0: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 264.976651][ T31] 3 locks held by acpid/5169: [ 264.981308][ T31] #0: ffff888054751160 (&mousedev->mutex#2){+.+.}-{4:4}, at: mousedev_open_device+0x23/0x140 [ 264.991590][ T31] #1: ffff888057f0d2c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_open_device+0x4b/0x3d0 [ 265.001204][ T31] #2: ffff88801d761148 (&dev->pm_mutex#2){+.+.}-{4:4}, at: bcm5974_open+0xa5/0x1c0 [ 265.011772][ T31] 2 locks held by getty/5570: [ 265.021867][ T31] #0: ffff88803138c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 265.031863][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 265.042020][ T31] 8 locks held by kworker/0:3/5867: [ 265.047251][ T31] #0: ffff888023689548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 265.058063][ T31] #1: ffffc9000411fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 265.069313][ T31] #2: ffff888029221198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 265.078189][ T31] #3: ffff888054728198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 265.087540][ T31] #4: ffff888057f0c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 265.096867][ T31] #5: ffffffff8f911fe8 (input_mutex){+.+.}-{4:4}, at: input_register_device+0x992/0x1180 [ 265.106927][ T31] #6: ffff8881473f5160 (&mousedev->mutex/1){+.+.}-{4:4}, at: mousedev_connect+0x5d/0x340 [ 265.116920][ T31] #7: ffff888054751160 (&mousedev->mutex#2){+.+.}-{4:4}, at: mousedev_open_device+0x23/0x140 [ 265.127583][ T31] 1 lock held by udevd/6100: [ 265.132188][ T31] #0: ffff8881437b3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 265.141587][ T31] 1 lock held by udevd/6348: [ 265.146178][ T31] #0: ffff888025efb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 265.155531][ T31] 1 lock held by syz.1.463/7080: [ 265.160461][ T31] #0: ffff888032412420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 265.170482][ T31] 1 lock held by syz.5.1387/9458: [ 265.175632][ T31] #0: ffffffff8e3cfcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 265.185657][ T31] 1 lock held by syz.6.2323/11709: [ 265.190758][ T31] #0: ffffffff8e3cfcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 265.200760][ T31] 1 lock held by syz.0.2337/11742: [ 265.205879][ T31] #0: ffffffff8e3cfb80 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 265.218082][ T31] [ 265.220409][ T31] ============================================= [ 265.220409][ T31] [ 265.274928][ T31] NMI backtrace for cpu 1 [ 265.274945][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 265.274964][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.274972][ T31] Call Trace: [ 265.274978][ T31] [ 265.274984][ T31] dump_stack_lvl+0x116/0x1f0 [ 265.275012][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 265.275029][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 265.275051][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 265.275077][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 265.275097][ T31] watchdog+0xf3f/0x1170 [ 265.275121][ T31] ? rcu_is_watching+0x12/0xc0 [ 265.275142][ T31] ? __pfx_watchdog+0x10/0x10 [ 265.275159][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 265.275183][ T31] ? __kthread_parkme+0x19e/0x250 [ 265.275207][ T31] ? __pfx_watchdog+0x10/0x10 [ 265.275226][ T31] kthread+0x3c5/0x780 [ 265.275240][ T31] ? __pfx_kthread+0x10/0x10 [ 265.275255][ T31] ? rcu_is_watching+0x12/0xc0 [ 265.275273][ T31] ? __pfx_kthread+0x10/0x10 [ 265.275288][ T31] ret_from_fork+0x675/0x7d0 [ 265.275301][ T31] ? __pfx_kthread+0x10/0x10 [ 265.275317][ T31] ret_from_fork_asm+0x1a/0x30 [ 265.275351][ T31] [ 265.275357][ T31] Sending NMI from CPU 1 to CPUs 0: [ 265.404205][ C0] NMI backtrace for cpu 0 [ 265.404219][ C0] CPU: 0 UID: 0 PID: 2955 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 265.404238][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.404247][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 265.404270][ C0] RIP: 0010:chacha_permute+0x48e/0x6d0 [ 265.404295][ C0] Code: d7 31 fd 45 01 ee 41 01 c3 45 01 e7 c1 c5 08 45 31 f1 44 31 de 44 31 f9 41 c1 c1 07 41 01 ea c1 c6 08 44 31 d2 44 89 4c 24 08 c1 07 c1 c2 07 01 cb 41 89 d1 8b 54 24 04 45 01 c8 01 f2 31 de [ 265.404308][ C0] RSP: 0018:ffffc9000c0877c0 EFLAGS: 00000082 [ 265.404319][ C0] RAX: 00000000da2cfb33 RBX: 00000000a62e2117 RCX: 00000000a9eb4246 [ 265.404328][ C0] RDX: 00000000deface8a RSI: 0000000097c03673 RDI: 000000001a269e21 [ 265.404337][ C0] RBP: 0000000060243d05 R08: 00000000d0482819 R09: 0000000041c6fa97 [ 265.404345][ C0] R10: 00000000257f4c77 R11: 00000000348652c8 R12: 0000000052194a3b [ 265.404353][ C0] R13: 00000000508b5e24 R14: 00000000657560d0 R15: 000000007beb1c11 [ 265.404362][ C0] FS: 0000000000000000(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 265.404377][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.404386][ C0] CR2: 000056027d948ad8 CR3: 0000000028c59000 CR4: 00000000003526f0 [ 265.404394][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.404402][ C0] DR3: 0000000000004501 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 265.404411][ C0] Call Trace: [ 265.404416][ C0] [ 265.404425][ C0] chacha_block_generic+0x129/0x330 [ 265.404442][ C0] ? __pfx_chacha_block_generic+0x10/0x10 [ 265.404461][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 265.404485][ C0] crng_fast_key_erasure+0x19e/0x250 [ 265.404499][ C0] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 265.404517][ C0] crng_make_state+0x1cc/0x6d0 [ 265.404533][ C0] _get_random_bytes+0x120/0x1e0 [ 265.404546][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 265.404562][ C0] ? __alloc_skb+0x200/0x380 [ 265.404579][ C0] ? __pfx___might_resched+0x10/0x10 [ 265.404599][ C0] nsim_dev_trap_report_work+0x371/0xcf0 [ 265.404620][ C0] process_one_work+0x9cf/0x1b70 [ 265.404638][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 265.404655][ C0] ? __pfx_process_one_work+0x10/0x10 [ 265.404672][ C0] ? assign_work+0x1a0/0x250 [ 265.404686][ C0] worker_thread+0x6c8/0xf10 [ 265.404703][ C0] ? __kthread_parkme+0x19e/0x250 [ 265.404722][ C0] ? __pfx_worker_thread+0x10/0x10 [ 265.404736][ C0] kthread+0x3c5/0x780 [ 265.404748][ C0] ? __pfx_kthread+0x10/0x10 [ 265.404762][ C0] ? rcu_is_watching+0x12/0xc0 [ 265.404778][ C0] ? __pfx_kthread+0x10/0x10 [ 265.404791][ C0] ret_from_fork+0x675/0x7d0 [ 265.404803][ C0] ? __pfx_kthread+0x10/0x10 [ 265.404816][ C0] ret_from_fork_asm+0x1a/0x30 [ 265.404840][ C0] [ 265.816714][ T5814] Bluetooth: hci0: command tx timeout [ 266.195662][ T5169] bcm5974 7-1:4.28: could not read from device [ 266.205848][ T5867] bcm5974 7-1:4.28: could not read from device [ 266.214369][ T5169] bcm5974 7-1:4.28: could not read from device [ 266.222977][ T5867] input: failed to attach handler mousedev to device input61, error: -5 [ 266.245227][ T5169] bcm5974 7-1:4.28: could not read from device [ 266.277611][ T5169] bcm5974 7-1:4.28: could not read from device [ 266.314603][ T5867] usb 7-1: USB disconnect, device number 2 [ 266.344227][ T1318] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.403256][ T1318] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.455783][ T1318] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.503476][ T1318] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.583071][ T1318] bridge_slave_1: left allmulticast mode [ 266.588702][ T1318] bridge_slave_1: left promiscuous mode [ 266.595542][ T1318] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.606281][ T1318] bridge_slave_0: left allmulticast mode [ 266.611906][ T1318] bridge_slave_0: left promiscuous mode [ 266.617777][ T1318] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.844501][ T1318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.854560][ T1318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.864548][ T1318] bond0 (unregistering): Released all slaves [ 267.046488][ T1318] hsr_slave_0: left promiscuous mode [ 267.052241][ T1318] hsr_slave_1: left promiscuous mode [ 267.060127][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.067523][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.075368][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.082763][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.105220][ T1318] veth1_macvtap: left promiscuous mode [ 267.110878][ T1318] veth0_macvtap: left promiscuous mode [ 267.116637][ T1318] veth1_vlan: left promiscuous mode [ 267.121980][ T1318] veth0_vlan: left promiscuous mode [ 267.380343][ T1318] team0 (unregistering): Port device team_slave_1 removed [ 267.408975][ T1318] team0 (unregistering): Port device team_slave_0 removed [ 267.945588][ T1318] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.995050][ T1318] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.063275][ T1318] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.114896][ T1318] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.201497][ T1318] bridge_slave_1: left allmulticast mode [ 268.208209][ T1318] bridge_slave_1: left promiscuous mode [ 268.214843][ T1318] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.223413][ T1318] bridge_slave_0: left allmulticast mode [ 268.229033][ T1318] bridge_slave_0: left promiscuous mode [ 268.234766][ T1318] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.434409][ T1318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.444427][ T1318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.454640][ T1318] bond0 (unregistering): Released all slaves [ 268.643964][ T1318] hsr_slave_0: left promiscuous mode [ 268.649653][ T1318] hsr_slave_1: left promiscuous mode [ 268.655564][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.662989][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.670500][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.678284][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.694339][ T1318] veth1_macvtap: left promiscuous mode [ 268.699814][ T1318] veth0_macvtap: left promiscuous mode [ 268.705698][ T1318] veth1_vlan: left promiscuous mode [ 268.710988][ T1318] veth0_vlan: left promiscuous mode [ 268.979803][ T1318] team0 (unregistering): Port device team_slave_1 removed [ 269.010551][ T1318] team0 (unregistering): Port device team_slave_0 removed [ 269.511174][ T1318] IPVS: stop unused estimator thread 0...