last executing test programs: 8m13.755479393s ago: executing program 32 (id=2894): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) 7m30.921221222s ago: executing program 33 (id=3602): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x2}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) 5m25.615232755s ago: executing program 6 (id=6372): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2017be01}) 5m25.467553359s ago: executing program 6 (id=6375): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x0, 0x10100, 0x0, 0x312}, &(0x7f00000005c0), &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000680)=[0x6, 0x10], 0x2) 5m24.556619945s ago: executing program 6 (id=6396): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0) 5m24.395081162s ago: executing program 6 (id=6399): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) 5m24.262437143s ago: executing program 6 (id=6404): inotify_init() r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 5m23.80478354s ago: executing program 6 (id=6413): r0 = fsopen(&(0x7f00000000c0)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000400)='\xab\xde\xd2m\x87Hc,\x1cK\n\xa4Z8Fx|\xc8\xc7?\x18\xbfG\x93\x13\xd0-\xa5(@\xdf\xa5\xbb\x03\x7f$\x13\xe5\x9c&\\y\xd5\x19Q\x06\x00(\xab\xa1\x8fq0\x9b', &(0x7f0000000180)='./file0\x00', r1) 5m23.523106561s ago: executing program 34 (id=6413): r0 = fsopen(&(0x7f00000000c0)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000400)='\xab\xde\xd2m\x87Hc,\x1cK\n\xa4Z8Fx|\xc8\xc7?\x18\xbfG\x93\x13\xd0-\xa5(@\xdf\xa5\xbb\x03\x7f$\x13\xe5\x9c&\\y\xd5\x19Q\x06\x00(\xab\xa1\x8fq0\x9b', &(0x7f0000000180)='./file0\x00', r1) 5m11.322917013s ago: executing program 0 (id=6616): r0 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x73f90401a4ce04d2, 0x0}, 0x0, 0x8, &(0x7f0000000200)) rt_sigsuspend(&(0x7f0000000000), 0x8) tkill(r0, 0x16) 5m11.281883978s ago: executing program 0 (id=6617): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close_range(r0, r0, 0x2) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'gre0\x00', @link_local}) 5m11.119241744s ago: executing program 0 (id=6619): r0 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 5m11.014897628s ago: executing program 0 (id=6621): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x9) 5m10.876272369s ago: executing program 0 (id=6623): eventfd2(0x8, 0x801) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x8000}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000000000}, 0x0, 0x0, 0x0) 5m10.514854072s ago: executing program 0 (id=6625): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}]}}]}, 0x8c}, 0x1, 0x7a00, 0x0, 0x4010041}, 0x80008c0) 5m10.371564985s ago: executing program 35 (id=6625): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}]}}]}, 0x8c}, 0x1, 0x7a00, 0x0, 0x4010041}, 0x80008c0) 3m29.561112331s ago: executing program 5 (id=8349): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 3m29.492893836s ago: executing program 5 (id=8350): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x0, r1}) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) 3m29.467274477s ago: executing program 5 (id=8351): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0xf0, 0x10, 0x713, 0xffffff80, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x80ff}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}}, 0xf0}, 0x1, 0xe}, 0x0) 3m29.433259734s ago: executing program 5 (id=8352): r0 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071105000000000001d300200000000004704000001ed030407030000020000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3m29.387588967s ago: executing program 5 (id=8353): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x1ff}}, {{0xa, 0x4e23, 0x0, @private2}}}, 0x108) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 3m29.235521848s ago: executing program 5 (id=8357): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$snapshot(r0, 0x0, 0x0) 3m14.204320626s ago: executing program 36 (id=8357): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$snapshot(r0, 0x0, 0x0) 2m11.680753701s ago: executing program 7 (id=9907): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) 2m9.416827584s ago: executing program 7 (id=9947): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 2m9.239820272s ago: executing program 7 (id=9954): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) 2m9.071841194s ago: executing program 7 (id=9959): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 2m8.944335226s ago: executing program 7 (id=9963): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a00000c"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 2m7.534900066s ago: executing program 7 (id=9991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x3c, r1, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}}, 0x0) close(r0) 2m7.276916512s ago: executing program 37 (id=9991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x3c, r1, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}}, 0x0) close(r0) 1m53.280196196s ago: executing program 9 (id=10235): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@setlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8000}]}}}]}, 0x40}}, 0x0) 1m53.216260161s ago: executing program 9 (id=10236): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000198500000071000000850000005000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 1m53.113297474s ago: executing program 9 (id=10238): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 1m52.980143324s ago: executing program 9 (id=10244): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m52.871655655s ago: executing program 9 (id=10247): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0x0, 0x0}, 0x30) 1m52.542892743s ago: executing program 9 (id=10252): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x28}}, 0x0) 1m52.431528829s ago: executing program 38 (id=10252): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x28}}, 0x0) 2.375249628s ago: executing program 1 (id=12422): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="980000000000000029000000390000008910000633cee6432130c6350000000000000000000000bbfe880000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000aafc01000000000000000000000000000100000000000000000000000000000001"], 0x100}}], 0x1, 0x10) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000b000a0000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c080003400000000008000240000000140800014000000003080001400000000b08000140000000120800024000000018080003"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x30048050) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2.202039608s ago: executing program 1 (id=12424): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r1, 0x34, 0x1, 0x1, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0}, 0x40) 2.172675833s ago: executing program 4 (id=12425): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/56, 0x38}], 0x1, 0x6, 0x6) 2.148150056s ago: executing program 8 (id=12426): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c) r1 = memfd_create(&(0x7f0000000680)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4C\x80\x00\x02\x00\x00\x00\xad[\xc9\x10\x04\x00\x00\x1dz\xd0\x11\xe3\x05\x01\xb1\x84\xea\x91^%A\xf5\x9e\x13TdT\xc6^p\xcc#P\x04\x06\xae\xeb\x7f;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x03`\xf0\xc728\xfc\xfc\x00\x00?\x86\xb7\xd4\x00\x00\x00\x00\x00\x00\x80\f\xed{u[\xbd\x9d^\xffj\xa0\x14\xb7\xb6v\x1d*1>\x00\x00\x00\x00\x00\x00\x00\t\x00\x003F\xf1 \x17-\x964C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\x8c\xcd\b\xb5U\xec\x85\x9b\xe4Q>\xed\xdf\xdf\a\xd0lg\x13\r\x8c:s\x18@\xe6\x80\xb3\x9f#\x15$\x97I\xf0LC\xfc\xe7\xdf\x86\xfck\xdc\xe0\x9d\xd3[i\x1b\x9b{4)\xb9\xd8\xb8\x8f\xa22)\x8d\xec\xf0(!\xf0\xb5-e+><\xc8X\xdaNz,u\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\xb7\xe7(.9\x00\xf6\x8e\xed\x02}&\xde\xf1\xa2\\m05u6\xaf\xa6j-\x9aJ\x83\xdf1\xa3\xff\xf1\xfac}\xc8i\"2\x7f\x98\xd5SENEn\xaa\xf7\xcf<\xee\xd2\xaf\xcb\x8b\xa2\xc6(S\xb47\x9c)\x8cE\xdf\x13Kc|\x82\xc1\xaa\xdeT\x1f\xaf\xa0,\xb0ec\x03\xfd\xe4\xde&\xf8\xcd_\xaa\x9aO\x9cP\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9d\x1e\xee\xc2\xdd2\xcf\x8b\x1e\\\b\xb3\xab\xed\x17\xc8\x84\xc7\xf2\x91\x04!\xdfV\xab]Z\xc8\xca\xe9G\x88\xf5q\x9cz7\xb3\xda\xcf\xee\x1d\xdd-3\x95\x160x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 1.089986111s ago: executing program 3 (id=12444): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) 931.61254ms ago: executing program 3 (id=12446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x40) 856.032845ms ago: executing program 4 (id=12448): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 854.971572ms ago: executing program 2 (id=12458): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000740)="f5", 0x1}], 0x1}}], 0x1, 0x44810) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000002a40)=""/4111, 0x100f}], 0x1}}], 0x1, 0x10122, 0x0) 848.056013ms ago: executing program 3 (id=12449): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 779.603866ms ago: executing program 2 (id=12450): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)={[&(0x7f0000000080)=' ']}, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000100)=' ', &(0x7f0000000180)='ipvlan1\x00']}, 0x0) 778.249586ms ago: executing program 8 (id=12451): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) r0 = syz_io_uring_setup(0x893, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0x0, 0x226}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0) 643.286254ms ago: executing program 2 (id=12452): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 521.20298ms ago: executing program 8 (id=12453): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0xbe, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 427.155927ms ago: executing program 1 (id=12454): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 409.959483ms ago: executing program 2 (id=12455): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5f67, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000540)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x12002, 0x0) 394.769323ms ago: executing program 4 (id=12456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x4000, 0x0) 275.18277ms ago: executing program 8 (id=12457): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f000000a900)=[{{0x0, 0xa00, 0x0}}], 0x1, 0x0, 0x0) 274.53534ms ago: executing program 2 (id=12459): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}, 0xfe}, 0x18, &(0x7f0000000180)={0x0}}, 0x40fa) 248.390397ms ago: executing program 1 (id=12460): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) shutdown(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x80800) 111.513053ms ago: executing program 4 (id=12461): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, 0x0) read$msr(r0, &(0x7f0000000100)=""/70, 0x46) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000480)=0x7) 72.909212ms ago: executing program 1 (id=12462): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002}) 0s ago: executing program 2 (id=12463): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000680)={r2, 0x1, 0x0, 0x80, 0x6, 0x2}, 0x14) kernel console output (not intermixed with test programs): =0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c38e169 code=0x7ffc0000 [ 615.453414][ T30] audit: type=1326 audit(1745294929.679:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30825 comm="syz.2.10755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fc61c38e169 code=0x7ffc0000 [ 615.506061][ T30] audit: type=1326 audit(1745294929.789:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30825 comm="syz.2.10755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c38e169 code=0x7ffc0000 [ 615.572768][ T30] audit: type=1326 audit(1745294929.789:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30825 comm="syz.2.10755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c38e169 code=0x7ffc0000 [ 615.738765][T30854] input: syz0 as /devices/virtual/input/input105 [ 615.791113][T30856] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10771'. [ 615.920223][ T24] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 616.072927][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 616.086966][ T24] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 616.096483][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.104899][ T24] usb 5-1: Product: syz [ 616.109131][ T24] usb 5-1: Manufacturer: syz [ 616.113958][ T24] usb 5-1: SerialNumber: syz [ 616.124159][ T24] usb 5-1: config 0 descriptor?? [ 616.132158][ T24] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 616.199828][ T24] IPVS: starting estimator thread 0... [ 616.206282][T30876] IPVS: ip_vs_edit_dest(): server weight less than zero [ 616.310271][ T9] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 616.317939][T30877] IPVS: using max 41 ests per chain, 98400 per kthread [ 616.377128][ T24] usb 5-1: USB disconnect, device number 94 [ 616.480095][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 616.491164][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 616.517795][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 616.537347][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.551945][ T9] usb 9-1: config 0 descriptor?? [ 616.565714][ T9] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input106 [ 616.777205][ T9] bcm5974 9-1:0.0: could not read from device [ 616.867615][ T9] input: failed to attach handler mousedev to device input106, error: -5 [ 616.903482][ T5180] bcm5974 9-1:0.0: could not read from device [ 616.912172][ T9] usb 9-1: USB disconnect, device number 36 [ 617.185547][ T30] audit: type=1326 audit(1745294931.529:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30917 comm="syz.4.10797" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e70d8e169 code=0x0 [ 617.440862][ T3471] wlan1: Trigger new scan to find an IBSS to join [ 617.556168][T30932] ALSA: mixer_oss: invalid OSS volume '' [ 617.720119][ T971] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 617.870043][ T971] usb 2-1: Using ep0 maxpacket: 8 [ 617.879373][ T971] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.897627][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 617.918132][ T30] audit: type=1400 audit(1745294932.259:1989): avc: denied { getopt } for pid=30952 comm="syz.8.10813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 617.926193][ T971] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 617.971839][ T971] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 618.007390][ T971] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 618.040091][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.064510][ T971] usb 2-1: config 0 descriptor?? [ 618.154874][ T30] audit: type=1400 audit(1745294932.499:1990): avc: denied { accept } for pid=30967 comm="syz.3.10821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 618.354839][ T971] usb 2-1: USB disconnect, device number 27 [ 618.550319][ T5941] vhci_hcd: vhci_device speed not set [ 618.759097][T31001] loop8: detected capacity change from 0 to 1 [ 618.780534][T31001] Dev loop8: unable to read RDB block 1 [ 618.786102][T31001] loop8: unable to read partition table [ 618.820116][T31001] loop8: partition table beyond EOD, truncated [ 618.826317][T31001] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 618.974433][T31007] input: syz0 as /devices/virtual/input/input107 [ 619.133930][T31017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10842'. [ 619.470143][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 619.489100][T31033] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10851'. [ 619.645096][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.669543][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 619.697445][ T24] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 619.720000][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.740551][ T24] usb 2-1: config 0 descriptor?? [ 620.154598][ T24] kye 0003:0458:5011.00A0: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 620.190716][ T24] kye 0003:0458:5011.00A0: hidraw0: USB HID vff.fe Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 620.211874][ T24] kye 0003:0458:5011.00A0: tablet-enabling feature report not found [ 620.224376][ T30] audit: type=1400 audit(1745294934.569:1991): avc: denied { ioctl } for pid=31077 comm="syz.2.10871" path="socket:[112251]" dev="sockfs" ino=112251 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 620.249594][ T24] kye 0003:0458:5011.00A0: tablet enabling failed [ 620.379543][ T5941] usb 2-1: USB disconnect, device number 28 [ 620.480173][ T36] wlan1: Trigger new scan to find an IBSS to join [ 620.540065][ T24] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 620.700398][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 620.706633][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.716983][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 620.729027][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 620.738935][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 620.748808][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 620.763566][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 620.772928][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 620.780998][ T24] usb 3-1: Manufacturer: syz [ 620.786833][ T24] usb 3-1: config 0 descriptor?? [ 620.820308][ T5867] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 620.973372][ T5867] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 620.986355][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.994821][ T5867] usb 4-1: Product: syz [ 621.008572][ T5867] usb 4-1: Manufacturer: syz [ 621.014732][ T5867] usb 4-1: SerialNumber: syz [ 621.032693][ T5867] usb 4-1: config 0 descriptor?? [ 621.080241][ T24] rc_core: IR keymap rc-hauppauge not found [ 621.088186][ T24] Registered IR keymap rc-empty [ 621.093385][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.121442][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.140844][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 621.154608][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input108 [ 621.171042][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.190050][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.231586][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.260190][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.280389][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.300697][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.320107][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.340088][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.380084][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.401582][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.421960][ T24] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 621.440358][ T24] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 621.460616][ T5867] usb 4-1: Firmware: major: 107, minor: 86, hardware type: RZUSB (3) [ 621.472121][ T24] usb 3-1: USB disconnect, device number 107 [ 621.680364][ T5867] usb 4-1: failed to fetch extended address, random address set [ 621.752141][ T5867] usb 4-1: USB disconnect, device number 29 [ 621.941844][ T1203] kernel write not supported for file /sequencer2 (pid: 1203 comm: kworker/1:2) [ 622.245200][T31173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10910'. [ 622.320560][ T971] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 622.483384][ T971] usb 9-1: unable to get BOS descriptor or descriptor too short [ 622.497092][ T971] usb 9-1: config 6 has an invalid interface number: 200 but max is 0 [ 622.505603][ T971] usb 9-1: config 6 has no interface number 0 [ 622.519469][ T971] usb 9-1: config 6 interface 200 has no altsetting 0 [ 622.542845][ T971] usb 9-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 622.563018][ T971] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.580459][ T971] usb 9-1: Product: syz [ 622.589094][ T971] usb 9-1: Manufacturer: syz [ 622.604540][ T971] usb 9-1: SerialNumber: syz [ 623.057091][ T971] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 623.258915][ T971] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 623.293847][ T971] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 623.313084][ T971] usb 9-1: media controller created [ 623.351826][ T971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 623.440957][ T36] wlan1: Trigger new scan to find an IBSS to join [ 623.458035][ T971] dvb-usb: bulk message failed: -71 (6/0) [ 623.469973][ T971] dvb-usb: bulk message failed: -71 (6/0) [ 623.475818][ T971] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 623.519657][ T971] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input109 [ 623.541646][ T971] dvb-usb: schedule remote query interval to 150 msecs. [ 623.548622][ T971] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 623.600644][ T971] usb 9-1: USB disconnect, device number 37 [ 623.604206][T31216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10927'. [ 623.710885][ T971] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 623.925998][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.060295][ T1203] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 624.240422][ T1203] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.260015][ T1203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 624.290305][ T1203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 624.322197][ T1203] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 624.348096][ T1203] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 624.360841][ T1203] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 624.390293][ T1203] usb 3-1: Manufacturer: syz [ 624.410618][ T1203] usb 3-1: config 0 descriptor?? [ 624.416116][ T56] wlan1: Creating new IBSS network, BSSID 22:f5:0b:e6:dd:f8 [ 624.440110][ T5941] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 624.601583][ T5941] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 624.619955][ T5941] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 624.644095][ T5941] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 624.667069][ T5941] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 624.676478][ T5941] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.696672][ T5941] usb 9-1: Product: syz [ 624.704521][ T5941] usb 9-1: Manufacturer: syz [ 624.709131][ T5941] usb 9-1: SerialNumber: syz [ 624.719390][ T5941] usb 9-1: config 0 descriptor?? [ 624.720320][ T1203] rc_core: IR keymap rc-hauppauge not found [ 624.732344][T31244] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 624.732979][ T1203] Registered IR keymap rc-empty [ 624.739733][T31244] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 624.744486][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.772499][ T5941] usb 9-1: ucan: probing device on interface #0 [ 624.780482][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.810927][ T1203] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 624.823950][ T1203] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input110 [ 624.841714][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.864663][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.890095][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.910030][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.930308][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.951376][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.976984][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.984828][ T5941] usb 9-1: ucan: could not read protocol version, ret=-32 [ 625.000131][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 625.007481][ T5941] usb 9-1: ucan: probe failed; try to update the device firmware [ 625.020331][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 625.023127][ T5941] usb 9-1: USB disconnect, device number 38 [ 625.040444][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 625.062866][ T1203] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 625.072030][ T1203] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 625.137703][ T971] usb 3-1: USB disconnect, device number 108 [ 625.789854][ T30] audit: type=1400 audit(1745294940.129:1992): avc: denied { mounton } for pid=31276 comm="syz.4.10957" path="/2352/file0" dev="tmpfs" ino=11911 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 625.830247][ T1203] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 626.004762][ T30] audit: type=1326 audit(1745294940.349:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31284 comm="syz.3.10961" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3858f8e169 code=0x0 [ 626.019999][ T1203] usb 2-1: Using ep0 maxpacket: 32 [ 626.046051][ T1203] usb 2-1: unable to get BOS descriptor or descriptor too short [ 626.072890][ T1203] usb 2-1: config index 0 descriptor too short (expected 34347, got 43) [ 626.088249][ T1203] usb 2-1: config 31 has too many interfaces: 196, using maximum allowed: 32 [ 626.107775][ T1203] usb 2-1: config 31 has an invalid descriptor of length 0, skipping remainder of the config [ 626.127685][ T1203] usb 2-1: config 31 has 1 interface, different from the descriptor's value: 196 [ 626.160163][ T1203] usb 2-1: config 31 has no interface number 0 [ 626.168002][ T1203] usb 2-1: config 31 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 626.203795][ T1203] usb 2-1: config 31 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 626.218583][ T1203] usb 2-1: config 31 interface 81 has no altsetting 0 [ 626.233716][ T1203] usb 2-1: string descriptor 0 read error: -22 [ 626.243416][ T1203] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 626.262720][ T1203] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.287472][ T1203] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:31.81/input/input111 [ 626.519128][ T30] audit: type=1326 audit(1745294940.859:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.4.10978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70d8e169 code=0x7ffc0000 [ 626.542686][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.610216][ T30] audit: type=1326 audit(1745294940.899:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.4.10978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70d8e169 code=0x7ffc0000 [ 626.643541][T31328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10979'. [ 626.654777][ T1203] usb 2-1: USB disconnect, device number 29 [ 626.661906][T31328] netlink: 'syz.4.10979': attribute type 9 has an invalid length. [ 626.670609][ T30] audit: type=1326 audit(1745294940.899:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.4.10978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f4e70d8e169 code=0x7ffc0000 [ 626.704608][T31328] macvlan2: entered allmulticast mode [ 626.720028][T31328] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 626.732044][ T30] audit: type=1326 audit(1745294940.899:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.4.10978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70d8e169 code=0x7ffc0000 [ 626.755579][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.839191][ T30] audit: type=1326 audit(1745294940.899:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.4.10978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70d8e169 code=0x7ffc0000 [ 626.900811][ T30] audit: type=1326 audit(1745294940.899:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.4.10978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f4e70d8e169 code=0x7ffc0000 [ 626.951761][ T30] audit: type=1326 audit(1745294940.899:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.4.10978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70d8e169 code=0x7ffc0000 [ 627.004924][ T30] audit: type=1326 audit(1745294940.899:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.4.10978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70d8e169 code=0x7ffc0000 [ 627.044057][T31344] vlan2: entered allmulticast mode [ 627.049200][T31344] batadv0: entered allmulticast mode [ 627.511800][T31373] vivid-002: disconnect [ 627.566374][T31377] random: crng reseeded on system resumption [ 628.285717][T31372] vivid-002: reconnect [ 628.776328][T31453] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 628.840344][ T5867] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 628.895380][T31459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11040'. [ 628.981902][ T971] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 629.020053][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 629.026646][ T5867] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 629.034965][ T5867] usb 4-1: config 0 has no interface number 0 [ 629.054821][ T5867] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 629.070595][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.078938][ T5867] usb 4-1: Product: syz [ 629.090086][ T5867] usb 4-1: Manufacturer: syz [ 629.094772][ T5867] usb 4-1: SerialNumber: syz [ 629.106408][ T5867] usb 4-1: config 0 descriptor?? [ 629.117006][ T5867] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 629.151521][ T971] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 629.171709][ T971] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 629.191245][ T971] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 629.229997][ T971] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 629.267460][ T971] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 629.292275][ T971] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 629.305125][ T971] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 629.320008][ T971] usb 9-1: Product: syz [ 629.330115][ T971] usb 9-1: Manufacturer: syz [ 629.345889][ T971] cdc_wdm 9-1:1.0: skipping garbage [ 629.353782][ T5867] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 629.359916][ T971] cdc_wdm 9-1:1.0: skipping garbage [ 629.391344][ T971] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 629.398696][ T5867] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 629.413209][ T971] cdc_wdm 9-1:1.0: Unknown control protocol [ 629.601065][ T971] usb 9-1: USB disconnect, device number 39 [ 629.810857][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 629.811404][ T971] usb 4-1: USB disconnect, device number 30 [ 629.838301][ T971] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 629.872017][ T971] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 629.894947][ T971] quatech2 4-1:0.51: device disconnected [ 630.090552][T31502] SELinux: security_context_str_to_sid (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.) failed with errno=-22 [ 630.119589][T31505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11061'. [ 630.132865][T31505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11061'. [ 630.287152][T31516] delete_channel: no stack [ 630.330305][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 630.479584][T31531] trusted_key: encrypted_key: keyword 'up>J0n' not recognized [ 630.516594][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.528508][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 630.548478][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 630.566249][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 630.574667][ T24] usb 2-1: SerialNumber: syz [ 630.746744][T31547] netlink: 'syz.8.11081': attribute type 33 has an invalid length. [ 630.767616][T31547] netlink: 152 bytes leftover after parsing attributes in process `syz.8.11081'. [ 630.791222][ T24] usb 2-1: 0:2 : does not exist [ 630.818360][ T24] usb 2-1: USB disconnect, device number 30 [ 631.271804][T31568] block nbd3: server does not support multiple connections per device. [ 631.290718][T31568] block nbd3: shutting down sockets [ 631.645467][T31602] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 631.702558][ T971] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 631.787937][T31612] batman_adv: batadv0: Adding interface: gretap1 [ 631.820277][T31612] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 631.910191][ T971] usb 3-1: Using ep0 maxpacket: 16 [ 631.916773][ T971] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 631.940362][ T971] usb 3-1: config 8 has no interface number 0 [ 631.946504][ T971] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 631.963416][ T971] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 631.973844][ T971] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 631.984534][ T971] usb 3-1: config 8 interface 39 has no altsetting 0 [ 632.006956][ T971] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 632.016563][ T5941] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 632.025113][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.033705][ T971] usb 3-1: Product: syz [ 632.037888][ T971] usb 3-1: Manufacturer: syz [ 632.042665][ T971] usb 3-1: SerialNumber: syz [ 632.184843][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.208481][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.220257][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 632.228979][ T5941] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 632.270658][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.283764][ T5941] usb 5-1: config 0 descriptor?? [ 632.370401][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 632.383619][ T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 632.395700][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 632.405522][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.414014][ T24] usb 2-1: Product: syz [ 632.418175][ T24] usb 2-1: Manufacturer: syz [ 632.422826][ T24] usb 2-1: SerialNumber: syz [ 632.540156][ T1203] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 632.633464][ T24] cdc_ncm 2-1:1.0: bind() failure [ 632.641860][ T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 632.648672][ T24] cdc_ncm 2-1:1.1: bind() failure [ 632.656274][ T24] usb 2-1: USB disconnect, device number 31 [ 632.681005][ T971] ipheth 3-1:8.39: ipheth_enable_ncm: usb_control_msg: 0 [ 632.690188][ T1203] usb 9-1: Using ep0 maxpacket: 16 [ 632.697611][ T971] ipheth 3-1:8.39: Apple iPhone USB Ethernet device attached [ 632.698416][ T1203] usb 9-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 632.716375][ T1203] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.718019][ T5941] arvo 0003:1E7D:30D4.00A1: unknown main item tag 0x0 [ 632.724746][ T1203] usb 9-1: Product: syz [ 632.724763][ T1203] usb 9-1: Manufacturer: syz [ 632.724796][ T1203] usb 9-1: SerialNumber: syz [ 632.746412][ T1203] usb 9-1: config 0 descriptor?? [ 632.747406][ T5941] arvo 0003:1E7D:30D4.00A1: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 632.753920][ T1203] go7007 9-1:0.0: probe with driver go7007 failed with error -12 [ 632.905472][ T1203] usb 3-1: USB disconnect, device number 109 [ 632.961685][ T1203] ipheth 3-1:8.39: Apple iPhone USB Ethernet now disconnected [ 632.991039][ T24] usb 9-1: USB disconnect, device number 40 [ 633.148895][T20615] usb 5-1: USB disconnect, device number 95 [ 633.322085][ T24] IPVS: starting estimator thread 0... [ 633.327895][T31655] IPVS: ip_vs_edit_dest(): server weight less than zero [ 633.420284][T31657] IPVS: using max 44 ests per chain, 105600 per kthread [ 633.635485][T31677] bond0: entered promiscuous mode [ 633.650246][T31677] bond_slave_0: entered promiscuous mode [ 633.659225][T31677] bond_slave_1: entered promiscuous mode [ 633.688706][T31677] bond0: left promiscuous mode [ 633.700027][T31677] bond_slave_0: left promiscuous mode [ 633.720419][T31677] bond_slave_1: left promiscuous mode [ 634.195249][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 634.195264][ T30] audit: type=1326 audit(1745294948.539:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31713 comm="syz.1.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614a98e169 code=0x7ffc0000 [ 634.225006][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.234976][ T30] audit: type=1326 audit(1745294948.579:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31713 comm="syz.1.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614a98e169 code=0x7ffc0000 [ 634.258546][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.282892][ T30] audit: type=1326 audit(1745294948.589:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31713 comm="syz.1.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f614a98e169 code=0x7ffc0000 [ 634.306388][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.314620][ T30] audit: type=1326 audit(1745294948.589:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31713 comm="syz.1.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614a98e169 code=0x7ffc0000 [ 634.338184][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.347256][ T30] audit: type=1326 audit(1745294948.589:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31713 comm="syz.1.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614a98e169 code=0x7ffc0000 [ 634.370865][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.384602][ T30] audit: type=1326 audit(1745294948.589:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31713 comm="syz.1.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614a98e169 code=0x7ffc0000 [ 634.408142][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.418511][ T30] audit: type=1326 audit(1745294948.589:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31713 comm="syz.1.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f614a98e169 code=0x7ffc0000 [ 634.442061][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.451918][ T30] audit: type=1326 audit(1745294948.589:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31713 comm="syz.1.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614a98e169 code=0x7ffc0000 [ 634.475490][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.496695][ T30] audit: type=1326 audit(1745294948.589:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31713 comm="syz.1.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614a98e169 code=0x7ffc0000 [ 634.496708][T31723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11166'. [ 634.520295][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.569376][T31727] netlink: 'syz.8.11178': attribute type 21 has an invalid length. [ 634.580189][T31727] netlink: 'syz.8.11178': attribute type 6 has an invalid length. [ 634.599597][T31727] netlink: 132 bytes leftover after parsing attributes in process `syz.8.11178'. [ 634.612268][T31727] netlink: 'syz.8.11178': attribute type 21 has an invalid length. [ 634.621689][T31727] netlink: 'syz.8.11178': attribute type 6 has an invalid length. [ 634.630825][T31727] netlink: 132 bytes leftover after parsing attributes in process `syz.8.11178'. [ 634.761165][T31731] block nbd3: server does not support multiple connections per device. [ 634.778266][T31731] block nbd3: shutting down sockets [ 634.951281][T31747] netlink: 'syz.2.11176': attribute type 9 has an invalid length. [ 634.968116][T31747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11176'. [ 635.002064][T31747] macvlan4: entered promiscuous mode [ 635.007619][T31747] macvlan4: entered allmulticast mode [ 635.229982][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 635.290568][T31773] netlink: 56 bytes leftover after parsing attributes in process `syz.8.11191'. [ 635.390093][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 635.403376][ T24] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 635.414417][ T24] usb 4-1: config 0 has no interface number 0 [ 635.423127][ T24] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 635.447890][ T24] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 635.480579][ T24] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 635.514150][ T24] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 635.543005][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 635.566214][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.584706][ T24] usb 4-1: Product: syz [ 635.588891][ T24] usb 4-1: Manufacturer: syz [ 635.600050][ T1203] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 635.608201][ T24] usb 4-1: SerialNumber: syz [ 635.627492][ T24] usb 4-1: config 0 descriptor?? [ 635.762678][ T1203] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.783617][ T1203] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 635.796875][ T1203] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 635.810468][ T1203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 635.819607][ T1203] usb 2-1: SerialNumber: syz [ 635.847769][ T24] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 635.980141][ T30] audit: type=1326 audit(1745294950.319:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31799 comm="syz.2.11203" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc61c38e169 code=0x0 [ 636.003167][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.045585][T20615] usb 4-1: USB disconnect, device number 31 [ 636.065221][ T1203] usb 2-1: 0:2 : does not exist [ 636.098243][ T1203] usb 2-1: USB disconnect, device number 32 [ 636.540118][ T1203] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 636.640155][T20615] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 636.690299][ T1203] usb 5-1: Using ep0 maxpacket: 32 [ 636.696713][ T1203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.708099][ T1203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.718095][ T1203] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 636.727741][ T1203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.738552][ T1203] usb 5-1: config 0 descriptor?? [ 636.789974][T20615] usb 9-1: Using ep0 maxpacket: 8 [ 636.799496][T20615] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 636.820199][ T971] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 636.829484][T20615] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 636.838712][T20615] usb 9-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 636.847773][T20615] usb 9-1: Product: syz [ 636.855293][T20615] usb 9-1: Manufacturer: syz [ 636.862024][T20615] usb 9-1: SerialNumber: syz [ 636.869437][T20615] usb 9-1: config 0 descriptor?? [ 636.879038][T20615] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 636.920027][ T5867] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 636.982310][ T971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.992548][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 637.003545][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 637.013318][ T971] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 637.027166][ T971] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 637.036248][ T971] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 637.044404][ T971] usb 4-1: Manufacturer: syz [ 637.051509][ T971] usb 4-1: config 0 descriptor?? [ 637.070066][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 637.077050][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 637.088852][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 637.101755][ T5867] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 637.111055][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.119034][ T5867] usb 2-1: Product: syz [ 637.123343][ T5867] usb 2-1: Manufacturer: syz [ 637.127936][ T5867] usb 2-1: SerialNumber: syz [ 637.134691][ T5867] usb 2-1: config 0 descriptor?? [ 637.143865][ T5867] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 637.153171][ T5867] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 637.169206][ T1203] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.00A2/input/input112 [ 637.244954][ T1203] sony 0003:054C:03D5.00A2: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 637.320081][ T971] rc_core: IR keymap rc-hauppauge not found [ 637.326015][ T971] Registered IR keymap rc-empty [ 637.331056][ T971] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.350033][ T971] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.364372][ T5941] usb 5-1: USB disconnect, device number 96 [ 637.370996][ T971] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 637.388727][ T971] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input113 [ 637.404297][ T971] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.430464][ T971] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.451277][ T971] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.470787][ T971] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.488366][T20615] gspca_zc3xx: reg_w_i err -71 [ 637.493304][ T971] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.520276][ T971] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.540010][ T971] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.570469][ T971] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.591912][ T971] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.610171][ T971] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.635920][ T971] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 637.645456][ T971] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 637.748111][ T5867] em28xx 2-1:0.0: unknown em28xx chip ID (89) [ 637.755342][ T971] usb 4-1: USB disconnect, device number 32 [ 637.955654][ T5867] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 637.977478][ T5867] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 637.986379][ T5867] em28xx 2-1:0.0: No AC97 audio processor [ 637.996169][ T5867] usb 2-1: USB disconnect, device number 33 [ 638.003758][ T5867] em28xx 2-1:0.0: Disconnecting em28xx [ 638.012182][ T5867] em28xx 2-1:0.0: Freeing device [ 638.110066][T20615] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 638.116671][T20615] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 638.127302][T20615] usb 9-1: USB disconnect, device number 41 [ 638.590163][ T5867] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 638.689998][ T1203] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 638.740513][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 638.747306][ T5867] usb 4-1: unable to get BOS descriptor or descriptor too short [ 638.755907][ T5867] usb 4-1: config 1 interface 0 has no altsetting 0 [ 638.765378][ T5867] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 638.774772][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.783215][ T5867] usb 4-1: Product: syz [ 638.787378][ T5867] usb 4-1: Manufacturer: syz [ 638.792065][ T5867] usb 4-1: SerialNumber: syz [ 638.840087][ T1203] usb 3-1: Using ep0 maxpacket: 8 [ 638.848236][ T1203] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 638.859080][ T1203] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 638.868592][ T1203] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 638.876874][ T1203] usb 3-1: Product: syz [ 638.881476][ T1203] usb 3-1: Manufacturer: syz [ 638.886423][ T1203] usb 3-1: SerialNumber: syz [ 639.022813][ T5867] usbhid 4-1:1.0: can't add hid device: -71 [ 639.028944][ T5867] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 639.043681][ T5867] usb 4-1: USB disconnect, device number 33 [ 639.109195][ T1203] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 639.130247][ T1203] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 639.138095][ T1203] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 639.153983][ T1203] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 639.310452][ T1203] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 639.426865][ T1203] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 639.457792][T31876] netlink: 'syz.1.11235': attribute type 1 has an invalid length. [ 639.468513][ T1203] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 639.558340][ T5941] usb 3-1: USB disconnect, device number 110 [ 639.576916][ T5941] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 639.598637][ T5941] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 639.634757][ T5941] visor 3-1:1.0: device disconnected [ 639.731885][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 639.731900][ T30] audit: type=1326 audit(1745294954.079:2028): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31887 comm="syz.4.11242" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e70d8e169 code=0x0 [ 639.770939][ T30] audit: type=1326 audit(1745294954.119:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31894 comm="syz.8.11245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0009b8e169 code=0x7ffc0000 [ 639.803673][ T30] audit: type=1326 audit(1745294954.119:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31894 comm="syz.8.11245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0009b8e169 code=0x7ffc0000 [ 639.834823][ T30] audit: type=1326 audit(1745294954.119:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31894 comm="syz.8.11245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f0009b8e169 code=0x7ffc0000 [ 639.858356][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.880776][ T30] audit: type=1326 audit(1745294954.119:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31894 comm="syz.8.11245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0009b8e169 code=0x7ffc0000 [ 639.904321][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.915896][ T30] audit: type=1326 audit(1745294954.139:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31894 comm="syz.8.11245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0009b8e169 code=0x7ffc0000 [ 639.939445][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.965333][ T56] Bluetooth: hci5: Frame reassembly failed (-84) [ 639.976399][ T56] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 640.157974][T31908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 640.505280][T31919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11255'. [ 640.796479][T31933] vlan3: entered allmulticast mode [ 640.810079][T31933] batadv0: entered allmulticast mode [ 640.970222][T31941] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11265'. [ 641.185105][T31955] libceph: resolve '0' (ret=-3): failed [ 641.651571][T31973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 641.670830][T31976] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11279'. [ 641.694442][T31976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11279'. [ 642.000227][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 642.000240][ T5136] Bluetooth: hci5: command 0x1003 tx timeout [ 642.120020][ T5867] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 642.280296][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 642.286802][T32004] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 642.293666][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 642.308197][T32004] syzkaller1: linktype set to 780 [ 642.315603][ T5867] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 642.324980][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.338659][ T5867] usb 2-1: config 0 descriptor?? [ 642.349224][ T5867] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input114 [ 642.470509][T32010] vlan0: entered allmulticast mode [ 642.558114][ T5867] bcm5974 2-1:0.0: could not read from device [ 642.577496][ T5180] bcm5974 2-1:0.0: could not read from device [ 642.615652][ T5867] input: failed to attach handler mousedev to device input114, error: -5 [ 642.648012][ T5180] bcm5974 2-1:0.0: could not read from device [ 642.649992][ T5867] usb 2-1: USB disconnect, device number 34 [ 642.671983][T20615] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 642.798618][T32021] bridge0: port 1(vlan0) entered blocking state [ 642.807319][T32024] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11302'. [ 642.812555][T32021] bridge0: port 1(vlan0) entered disabled state [ 642.851965][T32021] vlan0: entered allmulticast mode [ 642.857112][T32021] bridge0: entered allmulticast mode [ 642.865912][T20615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 642.878240][T32021] vlan0: left allmulticast mode [ 642.883265][T20615] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 642.891898][T32021] bridge0: left allmulticast mode [ 642.916170][T20615] usb 4-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 642.927239][T32024] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11302'. [ 642.940259][T20615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.961554][T20615] usb 4-1: config 0 descriptor?? [ 643.007188][T32029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 643.091869][T32035] bond0: entered promiscuous mode [ 643.097089][T32035] bond_slave_0: entered promiscuous mode [ 643.104628][T32035] bond_slave_1: entered promiscuous mode [ 643.113803][T32035] bond0: left promiscuous mode [ 643.119679][T32035] bond_slave_0: left promiscuous mode [ 643.125634][T32035] bond_slave_1: left promiscuous mode [ 643.379237][T20615] smartjoyplus 0003:6666:8802.00A3: unknown main item tag 0x0 [ 643.390384][ T1203] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 643.398228][T20615] smartjoyplus 0003:6666:8802.00A3: unknown main item tag 0x0 [ 643.408321][T20615] smartjoyplus 0003:6666:8802.00A3: unknown main item tag 0x0 [ 643.449960][T20615] smartjoyplus 0003:6666:8802.00A3: unknown main item tag 0x0 [ 643.457605][T20615] smartjoyplus 0003:6666:8802.00A3: unknown main item tag 0x0 [ 643.472752][T20615] smartjoyplus 0003:6666:8802.00A3: hidraw0: USB HID v0.00 Device [HID 6666:8802] on usb-dummy_hcd.3-1/input0 [ 643.484693][ T5941] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 643.504858][T20615] smartjoyplus 0003:6666:8802.00A3: no output reports found [ 643.561595][ T1203] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.581124][ T1203] usb 9-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 643.592138][ T1203] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.605928][T26204] usb 4-1: USB disconnect, device number 34 [ 643.612783][ T1203] usb 9-1: config 0 descriptor?? [ 643.639989][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 643.648388][ T5941] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 643.659591][ T5941] usb 5-1: config 0 has no interface number 0 [ 643.678147][ T5941] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 643.709572][ T5941] usb 5-1: config 0 interface 85 has no altsetting 0 [ 643.721928][ T5941] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 643.732347][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.744089][ T5941] usb 5-1: Product: syz [ 643.748261][ T5941] usb 5-1: Manufacturer: syz [ 643.760302][ T5941] usb 5-1: SerialNumber: syz [ 643.771964][ T5941] usb 5-1: config 0 descriptor?? [ 643.834111][ T1203] usbhid 9-1:0.0: can't add hid device: -71 [ 643.849303][ T1203] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 643.869677][ T1203] usb 9-1: USB disconnect, device number 42 [ 643.923281][T32061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11319'. [ 644.406331][ T5941] appletouch 5-1:0.85: Geyser mode initialized. [ 644.421585][ T5941] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input115 [ 644.631279][ T1203] usb 5-1: USB disconnect, device number 97 [ 644.631303][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 644.788669][ T1203] appletouch 5-1:0.85: input: appletouch disconnected [ 644.937558][T32094] @: renamed from vlan0 (while UP) [ 644.943015][ T5867] kernel write not supported for file /video36 (pid: 5867 comm: kworker/1:4) [ 645.493597][T32124] netlink: 'syz.1.11348': attribute type 21 has an invalid length. [ 645.530044][T32124] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11348'. [ 645.552569][T32124] netlink: 'syz.1.11348': attribute type 21 has an invalid length. [ 645.560629][T32124] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11348'. [ 645.730890][T32129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11351'. [ 645.758478][T32129] bond0: option ad_select: unable to set because the bond device is up [ 645.971092][ T1203] kernel read not supported for file /dsp1 (pid: 1203 comm: kworker/1:2) [ 646.722557][T32179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11374'. [ 646.983824][T32192] sctp: [Deprecated]: syz.4.11378 (pid 32192) Use of int in max_burst socket option. [ 646.983824][T32192] Use struct sctp_assoc_value instead [ 647.058859][T32198] deleting an unspecified loop device is not supported. [ 647.134399][T32203] xt_hashlimit: size too large, truncated to 1048576 [ 647.272323][ T30] audit: type=1400 audit(1745294961.619:2034): avc: denied { getopt } for pid=32215 comm="syz.1.11390" lport=512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 647.394953][T32223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 647.486547][ T5867] kernel write not supported for file /input/event2 (pid: 5867 comm: kworker/1:4) [ 647.755127][T32247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11405'. [ 647.843713][T32252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11407'. [ 647.846299][T32253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11408'. [ 648.583943][T32300] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11430'. [ 648.734515][T32309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11435'. [ 648.809318][T32313] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11437'. [ 649.070172][T20615] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 649.086986][ T1203] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 649.181830][ T30] audit: type=1400 audit(1745294963.529:2035): avc: denied { read } for pid=32338 comm="syz.8.11450" name="cgroup.procs" dev="cgroup" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tzdata_exec_t:s0" [ 649.208822][ C0] vkms_vblank_simulate: vblank timer overrun [ 649.221273][ T30] audit: type=1400 audit(1745294963.529:2036): avc: denied { open } for pid=32338 comm="syz.8.11450" path="/syzcgroup/cpu/syz8/cgroup.procs" dev="cgroup" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tzdata_exec_t:s0" [ 649.270223][T20615] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 649.270314][ T1203] usb 2-1: Using ep0 maxpacket: 8 [ 649.279272][T20615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.294947][T20615] usb 5-1: config 0 descriptor?? [ 649.303008][ T30] audit: type=1400 audit(1745294963.559:2037): avc: denied { watch watch_reads } for pid=32338 comm="syz.8.11450" path="/syzcgroup/cpu/syz8/cgroup.procs" dev="cgroup" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tzdata_exec_t:s0" [ 649.331319][ T1203] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 649.343059][T32344] netlink: 'syz.8.11453': attribute type 46 has an invalid length. [ 649.356303][ T1203] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 649.370456][ T1203] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 649.380493][ T1203] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.394148][ T1203] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 649.403322][ T1203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.512956][ T30] audit: type=1400 audit(1745294963.859:2038): avc: denied { create } for pid=32351 comm="syz.8.11455" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 649.583614][T32354] delete_channel: no stack [ 649.601205][T26204] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 649.618839][ T1203] usb 2-1: GET_CAPABILITIES returned 0 [ 649.624510][ T1203] usbtmc 2-1:16.0: can't read capabilities [ 649.737074][T20615] ath6kl: Failed to submit usb control message: -71 [ 649.743783][T20615] ath6kl: unable to send the bmi data to the device: -71 [ 649.750954][T20615] ath6kl: Unable to send get target info: -71 [ 649.767557][T20615] ath6kl: Failed to init ath6kl core: -71 [ 649.770329][T26204] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 649.778307][T20615] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 649.788649][T26204] usb 4-1: config 0 has no interface number 0 [ 649.796490][T26204] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 649.807332][T20615] usb 5-1: USB disconnect, device number 98 [ 649.809074][T26204] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 649.832777][T26204] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 649.840247][T32362] block nbd8: not configured, cannot reconfigure [ 649.843185][ T1203] usb 2-1: USB disconnect, device number 35 [ 649.856241][T26204] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.871095][T26204] usb 4-1: Product: syz [ 649.877724][T26204] usb 4-1: Manufacturer: syz [ 649.886401][T26204] usb 4-1: SerialNumber: syz [ 649.896236][T26204] usb 4-1: config 0 descriptor?? [ 649.905475][T32345] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 649.914325][T26204] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 649.931161][T26204] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 649.977933][T32368] dummy0: entered promiscuous mode [ 650.321325][ T5941] usb 4-1: USB disconnect, device number 35 [ 650.338115][ T5941] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 650.359497][ T5941] cyberjack 4-1:0.69: device disconnected [ 650.571356][T32413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.645382][ T30] audit: type=1400 audit(1745294964.969:2039): avc: denied { accept } for pid=32414 comm="syz.4.11474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 650.964268][ T30] audit: type=1400 audit(1745294965.309:2040): avc: denied { read } for pid=32434 comm="syz.8.11480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 651.338816][T32455] : renamed from bond0 (while UP) [ 652.607545][T32533] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 652.790036][ T5941] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 652.800025][T26204] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 652.938602][T32541] vivid-000: disconnect [ 652.943938][T32539] vivid-000: reconnect [ 652.944600][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 652.970682][T26204] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 652.972186][ T5941] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 652.988121][T26204] usb 2-1: config 0 has no interface number 0 [ 652.990650][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 653.001214][T26204] usb 2-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 653.023277][T26204] usb 2-1: config 0 interface 11 has no altsetting 0 [ 653.029549][ T5941] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 653.032642][T26204] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 653.049566][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.053297][T26204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.062728][ T5941] usb 3-1: Product: syz [ 653.071562][T26204] usb 2-1: config 0 descriptor?? [ 653.078159][T32530] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 653.084000][ T5941] usb 3-1: Manufacturer: syz [ 653.091467][T26204] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 653.091986][ T5941] usb 3-1: SerialNumber: syz [ 653.103830][T26204] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 653.103912][T26204] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 653.103968][T26204] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 653.132398][ T5941] usb 3-1: config 0 descriptor?? [ 653.136021][T26204] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 653.138035][T32528] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 653.145407][T26204] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 653.153072][T32528] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 653.164673][T26204] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 653.170374][ T5941] usb 3-1: ucan: probing device on interface #0 [ 653.180456][T26204] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 653.194465][T26204] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 653.202613][T26204] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 653.210868][T26204] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 653.218601][T26204] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 653.226345][T26204] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 653.234353][T26204] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 653.245807][T26204] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 653.309718][T32530] __nla_validate_parse: 2 callbacks suppressed [ 653.309759][T32530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11521'. [ 653.325466][T32530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11521'. [ 653.335850][T20615] usb 2-1: USB disconnect, device number 36 [ 653.345695][T20615] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 653.358954][T20615] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 653.369710][T20615] keyspan 2-1:0.11: device disconnected [ 653.404188][T32547] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11528'. [ 653.422892][ T30] audit: type=1326 audit(1745294967.769:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32548 comm="syz.4.11529" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e70d8e169 code=0x0 [ 653.432884][T32547] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 653.461621][T32547] macsec1: entered allmulticast mode [ 653.466922][T32547] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 653.483904][T32547] mac80211_hwsim hwsim25 wlan0: left allmulticast mode [ 653.491048][T32547] mac80211_hwsim hwsim25 wlan0: left promiscuous mode [ 653.647311][T32554] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11531'. [ 653.825243][ T5941] ucan 3-1:0.0: probe with driver ucan failed with error -22 [ 654.082792][T20615] usb 3-1: USB disconnect, device number 111 [ 654.120560][ T5941] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 654.280099][ T5941] usb 9-1: Using ep0 maxpacket: 16 [ 654.294176][ T5941] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 654.304320][ T5941] usb 9-1: config 0 has no interface number 0 [ 654.314530][ T5941] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 654.327982][ T5941] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 654.346095][ T5941] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 654.355423][ T5941] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.363588][ T5941] usb 9-1: Product: syz [ 654.367807][ T5941] usb 9-1: Manufacturer: syz [ 654.373225][ T5941] usb 9-1: SerialNumber: syz [ 654.380629][ T5941] usb 9-1: config 0 descriptor?? [ 654.386812][T32564] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 654.400561][T32564] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 654.482201][T32388] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 654.623810][T32564] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 654.631723][T26204] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 654.639673][T32564] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 654.669682][T32588] loop2: detected capacity change from 0 to 7 [ 654.678179][T32588] Dev loop2: unable to read RDB block 7 [ 654.684056][T32588] loop2: AHDI p1 p2 p3 [ 654.688681][T32588] loop2: partition table partially beyond EOD, truncated [ 654.696216][T32588] loop2: p1 start 1601398130 is beyond EOD, truncated [ 654.703068][T32588] loop2: p2 start 1702059890 is beyond EOD, truncated [ 654.792219][T26204] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.813894][T26204] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 654.828319][T26204] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 654.837569][T26204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 654.846365][T26204] usb 2-1: SerialNumber: syz [ 654.855698][T26204] usb 2-1: bad CDC descriptors [ 654.900485][ T5867] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 655.034773][T32599] Failed to get privilege flags for destination (handle=0x2:0x0) [ 655.063797][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 655.079729][ T5867] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 655.088360][ T5867] usb 4-1: config 0 has no interface number 0 [ 655.096789][ T5867] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 655.106937][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.115253][ T5867] usb 4-1: Product: syz [ 655.120087][ T5867] usb 4-1: Manufacturer: syz [ 655.124932][ T5867] usb 4-1: SerialNumber: syz [ 655.132246][ T5867] usb 4-1: config 0 descriptor?? [ 655.139435][ T5867] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 655.256562][ T5941] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 655.271689][ T5941] asix 9-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 655.286520][ T5941] asix 9-1:0.251: probe with driver asix failed with error -71 [ 655.306061][ T5941] usb 9-1: USB disconnect, device number 43 [ 655.354366][ T5867] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 655.369668][T32610] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 655.410364][ T5867] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 655.568899][T32621] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 655.590681][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 101 [ 655.686879][T32627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11562'. [ 655.750501][T32629] netlink: 'syz.2.11563': attribute type 14 has an invalid length. [ 655.801380][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 655.810103][ T5867] usb 4-1: USB disconnect, device number 36 [ 655.823985][ T5867] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 655.851088][ T5867] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 655.888659][ T5867] quatech2 4-1:0.51: device disconnected [ 656.300066][T26204] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 656.450121][T26204] usb 3-1: Using ep0 maxpacket: 8 [ 656.457338][T26204] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 656.471989][T26204] usb 3-1: config 0 has no interface number 0 [ 656.478301][T26204] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 656.495103][T26204] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 656.507053][T26204] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 656.523970][T26204] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 656.544565][T26204] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 656.554706][T26204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.568009][T26204] usb 3-1: Product: syz [ 656.572406][T26204] usb 3-1: Manufacturer: syz [ 656.577076][T26204] usb 3-1: SerialNumber: syz [ 656.584512][T26204] usb 3-1: config 0 descriptor?? [ 656.600447][ T5941] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 656.761677][ T5941] usb 9-1: config 0 has an invalid interface number: 229 but max is 0 [ 656.770332][ T5941] usb 9-1: config 0 has no interface number 0 [ 656.780098][ T5941] usb 9-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 656.799316][ T5941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.803294][T26204] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 656.824845][ T5941] usb 9-1: config 0 descriptor?? [ 656.892130][T32663] random: crng reseeded on system resumption [ 657.040203][ T5941] usb 9-1: USB disconnect, device number 44 [ 657.048230][T26204] usb 3-1: USB disconnect, device number 112 [ 657.190886][T32671] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 657.418558][T26204] usb 2-1: USB disconnect, device number 37 [ 657.896514][T32700] vlan0: entered promiscuous mode [ 657.902039][T32700] bridge0: entered promiscuous mode [ 657.907362][T32700] vlan0: entered allmulticast mode [ 657.912610][T32700] bridge0: entered allmulticast mode [ 659.157190][T32756] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 659.157190][T32756] program syz.4.11618 not setting count and/or reply_len properly [ 659.473760][T32767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11623'. [ 659.497500][T32767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11623'. [ 659.663125][ T310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11627'. [ 659.677383][ T313] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11629'. [ 659.754094][ T313] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11629'. [ 660.096841][ T328] xfrm0 speed is unknown, defaulting to 1000 [ 660.540708][ T30] audit: type=1400 audit(1745294974.879:2042): avc: denied { write } for pid=357 comm="syz.4.11649" path="socket:[120805]" dev="sockfs" ino=120805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 660.598616][ T360] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11648'. [ 661.591391][ T405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11670'. [ 661.620186][ T405] netlink: 'syz.4.11670': attribute type 5 has an invalid length. [ 661.964767][ T429] netlink: 'syz.4.11679': attribute type 4 has an invalid length. [ 661.984861][ T429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11679'. [ 662.008237][ T429] NCSI netlink: No device for ifindex 6906736 [ 662.096215][ T435] netlink: 'syz.8.11681': attribute type 5 has an invalid length. [ 662.152580][T20615] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 662.236307][ T445] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11686'. [ 662.339973][T20615] usb 4-1: Using ep0 maxpacket: 16 [ 662.347294][T20615] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 662.360833][T20615] usb 4-1: config 0 has no interface number 0 [ 662.369015][T20615] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 662.385500][T20615] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 662.415974][T20615] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 662.427325][T20615] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 662.436559][T20615] usb 4-1: Product: syz [ 662.441587][T20615] usb 4-1: SerialNumber: syz [ 662.451042][T20615] usb 4-1: config 0 descriptor?? [ 662.459844][T20615] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 662.483997][T20615] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input116 [ 662.497125][ T453] netlink: zone id is out of range [ 662.719115][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 662.760211][ T5941] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 662.935343][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 662.942644][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 662.945878][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.952231][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 662.970267][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 662.977627][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 662.982581][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.985595][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 663.002954][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 663.010524][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 663.015871][ T5941] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 663.017672][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 663.034024][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 663.049510][T26204] usb 4-1: USB disconnect, device number 37 [ 663.055552][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 663.072573][T26204] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 663.082297][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.131343][ T5941] usb 5-1: config 0 descriptor?? [ 663.364426][ T5941] usbhid 5-1:0.0: can't add hid device: -71 [ 663.388205][ T5941] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 663.413515][ T5941] usb 5-1: USB disconnect, device number 99 [ 663.660111][ T509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11716'. [ 664.461348][ T5941] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 664.640533][ T5941] usb 5-1: Using ep0 maxpacket: 16 [ 664.653282][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.673983][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.698979][ T5941] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 664.708739][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.720811][ T5941] usb 5-1: config 0 descriptor?? [ 665.162361][ T5941] corsair 0003:1B1C:1B02.00A4: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 665.353973][ T5941] corsair 0003:1B1C:1B02.00A4: Read invalid backlight brightness: a7. [ 665.573095][T26204] usb 5-1: USB disconnect, device number 100 [ 665.794844][ T616] __nla_validate_parse: 1 callbacks suppressed [ 665.794877][ T616] netlink: 340 bytes leftover after parsing attributes in process `syz.8.11767'. [ 665.883114][ T30] audit: type=1326 audit(1745294980.219:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=618 comm="syz.8.11768" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0009b8e169 code=0x0 [ 665.905900][ C0] vkms_vblank_simulate: vblank timer overrun [ 666.455744][ T652] netlink: 87 bytes leftover after parsing attributes in process `syz.1.11782'. [ 667.341002][ T703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11806'. [ 667.843554][ T738] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 667.850108][ T738] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 667.886738][ T738] vhci_hcd vhci_hcd.0: Device attached [ 667.902160][ T739] vhci_hcd: connection closed [ 667.906207][T32403] vhci_hcd: stop threads [ 667.919070][T32403] vhci_hcd: release socket [ 667.928897][T32403] vhci_hcd: disconnect device [ 668.010017][ T5941] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 668.177496][ T5941] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 668.199438][ T5941] usb 4-1: config 0 has no interface number 0 [ 668.209515][ T5941] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 668.226294][ T5941] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 668.247724][ T5941] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 668.270104][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.281598][ T5941] usb 4-1: config 0 descriptor?? [ 668.297499][ T730] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 668.313347][ T5941] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 668.548571][ T5941] usb 4-1: USB disconnect, device number 38 [ 669.297364][ T30] audit: type=1326 audit(1745294983.639:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=776 comm="syz.8.11839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0009b8e169 code=0x7fc00000 [ 669.320793][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.404464][ T812] misc userio: Begin command sent, but we're already running [ 669.540224][T20615] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 669.710828][T20615] usb 3-1: Using ep0 maxpacket: 32 [ 669.729855][T20615] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 669.746595][T20615] usb 3-1: config 0 has no interface number 0 [ 669.763027][T20615] usb 3-1: config 0 interface 12 has no altsetting 0 [ 669.773025][T20615] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 669.788756][T20615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.810313][T20615] usb 3-1: Product: syz [ 669.825658][T20615] usb 3-1: Manufacturer: syz [ 669.834530][T20615] usb 3-1: SerialNumber: syz [ 669.858544][T20615] usb 3-1: config 0 descriptor?? [ 669.894779][ T30] audit: type=1400 audit(1745294984.239:2045): avc: denied { ioctl } for pid=840 comm="syz.3.11868" path="socket:[123529]" dev="sockfs" ino=123529 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 669.919606][ C0] vkms_vblank_simulate: vblank timer overrun [ 670.404607][ T13] wlan1: Trigger new scan to find an IBSS to join [ 670.462286][ T5941] kernel read not supported for file /dsp1 (pid: 5941 comm: kworker/0:7) [ 670.524017][T20615] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 670.545628][T20615] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 670.590145][T20615] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 670.598257][T20615] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 670.670321][T20615] usb 3-1: USB disconnect, device number 113 [ 670.770439][ T883] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11885'. [ 671.046612][ T894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 671.076332][ T895] netem: incorrect gi model size [ 671.102913][ T895] netem: change failed [ 672.056186][ T965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11915'. [ 672.065379][ T965] netlink: 92 bytes leftover after parsing attributes in process `syz.1.11915'. [ 672.074935][ T965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11915'. [ 672.084272][ T965] netlink: 92 bytes leftover after parsing attributes in process `syz.1.11915'. [ 672.156292][ T969] block nbd1: Dead connection, failed to find a fallback [ 672.175820][ T969] block nbd1: shutting down sockets [ 672.198563][ T969] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.217297][ T969] Buffer I/O error on dev nbd1, logical block 0, async page read [ 672.225399][ T1203] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 672.244805][ T969] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.254404][ T969] Buffer I/O error on dev nbd1, logical block 0, async page read [ 672.266460][ T969] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.282972][ T969] Buffer I/O error on dev nbd1, logical block 0, async page read [ 672.292301][ T969] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.303970][ T969] Buffer I/O error on dev nbd1, logical block 0, async page read [ 672.315017][ T969] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.325644][ T969] Buffer I/O error on dev nbd1, logical block 0, async page read [ 672.336631][ T969] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.367408][ T969] Buffer I/O error on dev nbd1, logical block 0, async page read [ 672.387106][ T1203] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 672.405863][ T1203] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.407386][ T969] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.418889][ T1203] usb 9-1: Product: syz [ 672.425867][ T30] audit: type=1400 audit(1745294986.759:2046): avc: denied { mount } for pid=980 comm="syz.2.11923" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 672.433260][ T1203] usb 9-1: Manufacturer: syz [ 672.450885][ C0] vkms_vblank_simulate: vblank timer overrun [ 672.458207][ T969] Buffer I/O error on dev nbd1, logical block 0, async page read [ 672.474281][ T1203] usb 9-1: SerialNumber: syz [ 672.480352][ T969] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.489856][ T969] Buffer I/O error on dev nbd1, logical block 0, async page read [ 672.508058][ T1203] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 672.509126][ T969] ldm_validate_partition_table(): Disk read failed. [ 672.525897][ T5867] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 672.543552][ T969] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.557656][ T969] Buffer I/O error on dev nbd1, logical block 0, async page read [ 672.576116][ T969] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.587891][ T969] Buffer I/O error on dev nbd1, logical block 0, async page read [ 672.596393][ T969] Dev nbd1: unable to read RDB block 0 [ 672.603443][ T969] nbd1: unable to read partition table [ 672.650205][ T971] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 672.803819][ T971] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 672.823785][ T971] usb 5-1: config 0 interface 0 has no altsetting 0 [ 672.839317][ T971] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 672.850541][ T971] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 672.869297][ T971] usb 5-1: Product: syz [ 672.879355][ T971] usb 5-1: Manufacturer: syz [ 672.891059][ T971] usb 5-1: SerialNumber: syz [ 672.900414][ T971] usb 5-1: config 0 descriptor?? [ 672.922956][ T971] usb 5-1: selecting invalid altsetting 0 [ 673.167005][T20615] usb 5-1: USB disconnect, device number 101 [ 673.168744][ T1203] usb 9-1: USB disconnect, device number 45 [ 673.450425][T32425] wlan1: Trigger new scan to find an IBSS to join [ 673.761246][ T5867] usb 9-1: Service connection timeout for: 256 [ 673.767441][ T5867] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 673.803222][ T5867] ath9k_htc: Failed to initialize the device [ 673.813931][ T1203] usb 9-1: ath9k_htc: USB layer deinitialized [ 674.081163][ T30] audit: type=1400 audit(1745294988.419:2047): avc: denied { mounton } for pid=1063 comm="syz.8.11955" path="/1080/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 674.103951][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.262012][ T1072] netlink: 'syz.8.11959': attribute type 14 has an invalid length. [ 674.420806][T32388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.710326][ T1203] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 674.880856][ T1203] usb 9-1: Using ep0 maxpacket: 8 [ 674.887966][ T1203] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.908824][ T1097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11970'. [ 674.950431][ T1203] usb 9-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 674.960515][ T1203] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.989985][ T1203] usb 9-1: Product: syz [ 674.994179][ T1203] usb 9-1: Manufacturer: syz [ 674.998774][ T1203] usb 9-1: SerialNumber: syz [ 675.027570][ T1203] usb 9-1: config 0 descriptor?? [ 675.039402][ T1203] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 675.046149][ T1203] usb 9-1: selecting invalid altsetting 1 [ 675.190049][ T971] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 675.265096][ T1203] gspca_stk014: reg_r err -71 [ 675.273250][ T1203] stk014 9-1:0.0: probe with driver stk014 failed with error -71 [ 675.301675][ T1203] usb 9-1: USB disconnect, device number 46 [ 675.377290][ T1115] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 675.391741][ T971] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.412796][ T971] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 675.430020][ T971] usb 2-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 675.465172][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.516062][ T971] usb 2-1: config 0 descriptor?? [ 675.551409][ T1121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11981'. [ 675.611358][ T1127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11981'. [ 675.768907][ T1099] netlink: 59 bytes leftover after parsing attributes in process `syz.1.11971'. [ 675.782497][ T971] usb 2-1: USB disconnect, device number 38 [ 675.825556][ T1136] macvlan0: entered allmulticast mode [ 675.841541][ T1136] veth1_vlan: entered allmulticast mode [ 675.980076][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 676.140000][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 676.148916][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 676.165922][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 676.181697][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 676.195006][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.204737][ T24] usb 4-1: Product: syz [ 676.208925][ T24] usb 4-1: Manufacturer: syz [ 676.227120][ T24] usb 4-1: SerialNumber: syz [ 676.237324][ T24] usb 4-1: config 0 descriptor?? [ 676.249669][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 676.269219][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 676.867389][ T24] em28xx 4-1:0.0: chip ID is em28174 [ 676.942375][T20615] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 676.973734][ T1171] netlink: 32 bytes leftover after parsing attributes in process `syz.8.12005'. [ 676.986686][ T1171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 676.995088][ T1171] IPv6: NLM_F_CREATE should be set when creating new route [ 677.002367][ T1171] IPv6: NLM_F_CREATE should be set when creating new route [ 677.031726][ T1171] netlink: 32 bytes leftover after parsing attributes in process `syz.8.12005'. [ 677.043497][ T1171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 677.103267][T20615] usb 3-1: Using ep0 maxpacket: 16 [ 677.115056][T20615] usb 3-1: config 0 interface 0 has no altsetting 0 [ 677.130373][T20615] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 677.131944][ T24] usb 4-1: USB disconnect, device number 39 [ 677.149543][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 677.156201][T20615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.166139][ T24] em28xx 4-1:0.0: Freeing device [ 677.176157][T20615] usb 3-1: config 0 descriptor?? [ 677.271998][ T5820] Bluetooth: hci0: Malformed Event: 0x13 [ 677.612688][T20615] hid (null): unknown global tag 0xd [ 677.838656][ T1207] xfrm0 speed is unknown, defaulting to 1000 [ 677.896966][ T1203] usb 3-1: USB disconnect, device number 114 [ 678.100016][ T24] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 678.261199][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 678.267713][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.282708][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.308929][ T24] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 678.339088][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.357997][ T24] usb 9-1: config 0 descriptor?? [ 678.787390][ T24] appleir 0003:05AC:8241.00A6: unknown main item tag 0x0 [ 678.818744][ T24] appleir 0003:05AC:8241.00A6: unknown main item tag 0x0 [ 678.829482][ T1247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.840429][ T24] appleir 0003:05AC:8241.00A6: item fetching failed at offset 2/5 [ 678.863363][ T24] appleir 0003:05AC:8241.00A6: parse failed [ 678.884395][ T24] appleir 0003:05AC:8241.00A6: probe with driver appleir failed with error -22 [ 678.985147][ T24] usb 9-1: USB disconnect, device number 47 [ 679.019458][ T1258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12039'. [ 679.113511][ T1260] kvm: kvm [1259]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000004) = 0x0 [ 679.252025][ T1266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 679.394061][ T30] audit: type=1400 audit(1745294993.739:2048): avc: denied { setattr } for pid=1274 comm="syz.2.12046" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 679.582815][ T1289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12053'. [ 679.837380][ T1306] netlink: 'syz.2.12059': attribute type 5 has an invalid length. [ 679.853798][ T5820] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 679.861277][ T5136] Bluetooth: hci0: command 0x206a tx timeout [ 680.210200][ T5867] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 680.373530][ T5867] usb 9-1: Using ep0 maxpacket: 16 [ 680.396410][ T5867] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.413854][ T5867] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.424524][ T5867] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 680.458138][ T5867] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 680.481004][ T5867] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.500786][ T5867] usb 9-1: config 0 descriptor?? [ 680.549481][ T971] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 680.612270][ T30] audit: type=1400 audit(1745294994.959:2049): avc: denied { ioctl } for pid=1342 comm="syz.1.12076" path="socket:[124928]" dev="sockfs" ino=124928 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 680.677767][ T30] audit: type=1400 audit(1745294994.959:2050): avc: denied { accept } for pid=1342 comm="syz.1.12076" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 680.731703][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.749985][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.761349][ T971] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 680.770938][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.786525][ T971] usb 5-1: config 0 descriptor?? [ 680.895746][T20615] kernel write not supported for file /dsp1 (pid: 20615 comm: kworker/0:1) [ 680.918838][ T5867] microsoft 0003:045E:07DA.00A7: unknown main item tag 0x0 [ 680.926407][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 680.938170][ T5867] microsoft 0003:045E:07DA.00A7: unknown main item tag 0x0 [ 680.959390][ T5867] microsoft 0003:045E:07DA.00A7: unknown main item tag 0x0 [ 680.976220][ T5867] microsoft 0003:045E:07DA.00A7: unknown main item tag 0x0 [ 680.983576][ T5867] microsoft 0003:045E:07DA.00A7: unknown main item tag 0x0 [ 680.991186][ T5867] microsoft 0003:045E:07DA.00A7: unknown main item tag 0x0 [ 680.998399][ T5867] microsoft 0003:045E:07DA.00A7: unknown main item tag 0x0 [ 681.006731][ T5867] microsoft 0003:045E:07DA.00A7: unknown main item tag 0x0 [ 681.014021][ T5867] microsoft 0003:045E:07DA.00A7: unknown main item tag 0x0 [ 681.022526][ T5867] microsoft 0003:045E:07DA.00A7: unknown main item tag 0x0 [ 681.033371][ T5867] microsoft 0003:045E:07DA.00A7: No inputs registered, leaving [ 681.042969][ T5867] microsoft 0003:045E:07DA.00A7: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 681.054486][ T5867] microsoft 0003:045E:07DA.00A7: no inputs found [ 681.061319][ T5867] microsoft 0003:045E:07DA.00A7: could not initialize ff, continuing anyway [ 681.131273][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 681.149242][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 681.171883][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 681.200234][ T5867] usb 9-1: USB disconnect, device number 48 [ 681.206053][ T971] cm6533_jd 0003:0D8C:0022.00A8: unknown main item tag 0x0 [ 681.211942][ T24] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 681.219741][ T971] cm6533_jd 0003:0D8C:0022.00A8: unknown main item tag 0x0 [ 681.229928][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.231752][ T24] usb 4-1: config 0 descriptor?? [ 681.248201][ T971] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.00A8/input/input119 [ 681.260707][ T1347] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 681.262423][ T24] gspca_main: spca561-2.14.0 probing abcd:cdee [ 681.296249][ T971] cm6533_jd 0003:0D8C:0022.00A8: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 681.475843][ T24] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 681.484090][ T971] usb 5-1: USB disconnect, device number 102 [ 681.484658][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 681.497424][ T24] usb 4-1: MIDIStreaming interface descriptor not found [ 681.545788][ T24] usb 4-1: USB disconnect, device number 40 [ 682.606388][ T30] audit: type=1326 audit(1745294996.949:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1400 comm="syz.2.12103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc61c38e169 code=0x0 [ 682.764042][ T1411] loop4: detected capacity change from 0 to 7 [ 682.773308][ T1411] Dev loop4: unable to read RDB block 7 [ 682.779426][ T1411] loop4: unable to read partition table [ 682.785771][ T1411] loop4: partition table beyond EOD, truncated [ 682.795112][ T1411] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 682.925006][ T1421] serio: Serial port ttyS3 [ 683.170341][ T5867] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 683.245869][ T30] audit: type=1400 audit(1745294997.589:2052): avc: denied { relabelfrom } for pid=1442 comm="syz.4.12120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 683.270877][ T30] audit: type=1400 audit(1745294997.609:2053): avc: denied { relabelto } for pid=1442 comm="syz.4.12120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 683.351562][ T5867] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 683.361699][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.373229][ T5867] usb 2-1: config 0 descriptor?? [ 683.381318][ T5867] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 683.790126][T20615] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 683.820008][ T30] audit: type=1326 audit(1745294998.159:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1467 comm="syz.8.12131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0009b8e169 code=0x7ffc0000 [ 683.873294][ T30] audit: type=1326 audit(1745294998.159:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1467 comm="syz.8.12131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0009b8e169 code=0x7ffc0000 [ 683.897609][ T30] audit: type=1326 audit(1745294998.159:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1467 comm="syz.8.12131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0009b8e169 code=0x7ffc0000 [ 683.959848][ T30] audit: type=1326 audit(1745294998.159:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1467 comm="syz.8.12131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0009b8e169 code=0x7ffc0000 [ 683.983507][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.995185][T20615] usb 5-1: config 0 interface 0 has no altsetting 0 [ 684.006090][T20615] usb 5-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 684.015916][T20615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.035237][T20615] usb 5-1: config 0 descriptor?? [ 684.092037][ T1476] loop6: detected capacity change from 0 to 32767 [ 684.175020][ T1480] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12137'. [ 684.192864][ T5867] gspca_sunplus: reg_w_riv err -71 [ 684.198079][ T5867] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 684.209679][ T5867] usb 2-1: USB disconnect, device number 39 [ 684.329561][T20615] usbhid 5-1:0.0: can't add hid device: -71 [ 684.357206][T20615] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 684.383063][T20615] usb 5-1: USB disconnect, device number 103 [ 684.734526][ T5941] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 684.864746][ T1512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12151'. [ 684.878006][ T1512] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12151'. [ 684.918483][ T5941] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.944589][ T5941] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.975902][ T5941] usb 9-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 685.000685][ T5941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.022861][ T5941] usb 9-1: config 0 descriptor?? [ 685.375685][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.390128][ T971] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 685.439067][ T5941] hid-steam 0003:28DE:1142.00A9: item fetching failed at offset 3/5 [ 685.451786][ T5941] hid-steam 0003:28DE:1142.00A9: steam_probe:parse of hid interface failed [ 685.461054][ T5941] hid-steam 0003:28DE:1142.00A9: probe with driver hid-steam failed with error -22 [ 685.509471][T32386] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 685.560035][ T971] usb 2-1: Using ep0 maxpacket: 8 [ 685.567431][ T971] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 685.575856][ T971] usb 2-1: config 0 has no interface number 0 [ 685.582441][ T971] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 685.593979][ T971] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 685.606526][ T971] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 685.619009][ T971] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 685.632923][ T971] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 685.649951][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.660559][ T5941] usb 9-1: USB disconnect, device number 49 [ 685.682838][ T971] usb 2-1: config 0 descriptor?? [ 685.694156][ T971] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 685.837839][ T1540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 685.897598][ T24] usb 2-1: USB disconnect, device number 40 [ 685.920916][ T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 686.045337][ T1548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12167'. [ 686.063647][ T1548] bridge0: port 4(vlan2) entered blocking state [ 686.070490][ T1548] bridge0: port 4(vlan2) entered disabled state [ 686.090438][ T1548] vlan2: entered allmulticast mode [ 686.095988][ T1548] bridge0: entered allmulticast mode [ 686.113069][ T1548] vlan2: left allmulticast mode [ 686.118825][ T1548] bridge0: left allmulticast mode [ 686.271404][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 686.271419][ T30] audit: type=1400 audit(1745295000.619:2067): avc: denied { accept } for pid=1557 comm="syz.3.12172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 686.358602][ T1564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 686.537175][ T1577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12180'. [ 686.669975][ T1203] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 686.730076][ T5941] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 686.819957][ T1203] usb 3-1: Using ep0 maxpacket: 16 [ 686.826519][ T1203] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.847750][ T1203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 686.869081][ T1203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 686.889401][ T1203] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 686.913238][ T5941] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 686.915410][ T1203] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.927694][ T5941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.967069][ T1596] CIFS: VFS: Malformed UNC in devname [ 686.977106][ T1203] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 686.992280][ T5941] usb 9-1: config 0 descriptor?? [ 687.007326][ T5941] cp210x 9-1:0.0: cp210x converter detected [ 687.012273][ T1203] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 687.032514][ T1203] usb 3-1: Manufacturer: syz [ 687.056858][ T1203] usb 3-1: config 0 descriptor?? [ 687.331877][ T971] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 687.380201][ T1203] rc_core: IR keymap rc-hauppauge not found [ 687.386150][ T1203] Registered IR keymap rc-empty [ 687.400093][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.431737][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.471006][ T1203] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 687.497762][ T1203] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input120 [ 687.520705][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.526119][ T971] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 687.537760][ T971] usb 4-1: config 0 has no interface number 0 [ 687.550079][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.554206][ T971] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 687.591167][ T971] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 687.600542][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.616987][ T5941] cp210x 9-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 687.630426][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.635550][ T971] usb 4-1: config 0 interface 255 has no altsetting 0 [ 687.645162][ T5941] cp210x 9-1:0.0: GPIO initialisation failed: -71 [ 687.665666][ T5941] usb 9-1: cp210x converter now attached to ttyUSB0 [ 687.672013][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.680738][ T971] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 687.697640][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.707794][ T5941] usb 9-1: USB disconnect, device number 50 [ 687.710022][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.726659][ T5941] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 687.735069][ T971] usb 4-1: Product: syz [ 687.749586][ T971] usb 4-1: Manufacturer: syz [ 687.762728][ T5941] cp210x 9-1:0.0: device disconnected [ 687.769103][ T971] usb 4-1: SerialNumber: syz [ 687.770585][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.787348][ T971] usb 4-1: config 0 descriptor?? [ 687.795030][ T971] peak_usb 4-1:0.255: probe with driver peak_usb failed with error 255 [ 687.830036][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.873312][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.902845][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.930408][ T1203] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.971198][ T1203] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 687.983575][ T1203] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 687.996710][ T1203] usb 3-1: USB disconnect, device number 115 [ 688.060548][ T971] usb 4-1: USB disconnect, device number 41 [ 688.425755][ T1648] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12213'. [ 688.619265][ T5941] kernel read not supported for file /dsp (pid: 5941 comm: kworker/0:7) [ 688.774479][ T1662] xfrm0 speed is unknown, defaulting to 1000 [ 688.811840][ T971] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 688.835455][ T30] audit: type=1400 audit(1745295003.179:2068): avc: denied { ioctl } for pid=1664 comm="syz.2.12220" path="socket:[127571]" dev="sockfs" ino=127571 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 688.965043][ T30] audit: type=1400 audit(1745295003.299:2069): avc: denied { append } for pid=1673 comm="syz.1.12223" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 688.988066][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.073436][ T971] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.096674][ T971] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 689.170044][ T971] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 689.190607][ T5941] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 689.204753][ T971] usb 9-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 689.219404][ T971] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.228592][ T971] usb 9-1: Product: syz [ 689.233645][ T971] usb 9-1: Manufacturer: syz [ 689.238483][ T971] usb 9-1: SerialNumber: syz [ 689.268450][ T971] usb 9-1: config 0 descriptor?? [ 689.293804][ T971] usb 9-1: Found UVC 34.00 device syz (8086:0b5b) [ 689.312458][ T971] usb 9-1: No valid video chain found. [ 689.391939][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 689.407775][ T5941] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 689.432571][ T5941] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 689.467871][ T5941] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 689.497005][ T5941] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 689.499075][ T5867] usb 9-1: USB disconnect, device number 51 [ 689.510280][ T5941] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 689.529675][ T5941] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 689.576123][ T1692] delete_channel: no stack [ 689.581103][ T5941] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 689.619951][ T5941] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 689.650138][ T5941] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 689.671156][ T5941] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 689.684519][ T5941] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 689.701958][ T30] audit: type=1400 audit(1745295004.039:2070): avc: denied { read } for pid=1695 comm="syz.1.12233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 689.719340][ T5941] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 689.752277][ T5941] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 689.785258][ T5941] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 689.815790][ T5941] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 689.844329][ T5941] usb 4-1: string descriptor 0 read error: -22 [ 689.857190][ T30] audit: type=1400 audit(1745295004.199:2071): avc: denied { ioctl } for pid=1702 comm="syz.4.12236" path="socket:[127645]" dev="sockfs" ino=127645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 689.890083][ T5941] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 689.899514][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.931206][ T5941] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 690.153326][ T1709] xfrm0 speed is unknown, defaulting to 1000 [ 690.230094][ T5867] usb 4-1: USB disconnect, device number 42 [ 690.423799][ T5941] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 690.461677][ T1725] input: syz1 as /devices/virtual/input/input121 [ 690.618808][ T5941] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 690.639958][ T5941] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.680452][ T5941] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 690.700911][ T5941] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 690.731966][ T5941] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 690.754027][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 690.779965][ T5941] usb 5-1: Product: syz [ 690.784376][ T5941] usb 5-1: Manufacturer: syz [ 690.828274][ T5941] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 691.116826][ T5867] usb 5-1: USB disconnect, device number 104 [ 691.196936][ T1748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12257'. [ 691.234316][ T1748] bridge0: port 1(vlan0) entered blocking state [ 691.250234][ T1748] bridge0: port 1(vlan0) entered disabled state [ 691.256678][ T1748] vlan0: entered allmulticast mode [ 691.295254][ T1748] vlan0: left allmulticast mode [ 691.725110][ T1766] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 692.019122][ T1777] netlink: 'syz.4.12269': attribute type 11 has an invalid length. [ 692.059941][ T1777] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12269'. [ 692.104539][ T1781] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12271'. [ 692.152184][ T1781] bridge0: port 3(vlan0) entered blocking state [ 692.180118][ T1781] bridge0: port 3(vlan0) entered disabled state [ 692.186578][ T1781] vlan0: entered allmulticast mode [ 692.214183][ T1781] bridge0: entered allmulticast mode [ 692.230927][ T1781] vlan0: left allmulticast mode [ 692.238714][ T1781] bridge0: left allmulticast mode [ 692.361375][ T1788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12274'. [ 692.391224][ T1788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12274'. [ 692.435836][ T1788] netlink: 'syz.4.12274': attribute type 13 has an invalid length. [ 692.484661][ T1788] netlink: 'syz.4.12274': attribute type 14 has an invalid length. [ 692.546437][ T1796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12278'. [ 693.028658][ T30] audit: type=1800 audit(1745295007.369:2072): pid=1806 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.12281" name="cgroup.controllers" dev="tmpfs" ino=13301 res=0 errno=0 [ 693.506918][ T1835] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 693.515553][ T1835] SELinux: failed to load policy [ 693.934878][ T1855] xfrm0 speed is unknown, defaulting to 1000 [ 694.432892][ T1877] SELinux: failed to load policy [ 694.608182][ T30] audit: type=1326 audit(1745295008.949:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1888 comm="syz.4.12314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e70d8e169 code=0x0 [ 695.030208][T20615] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 695.067477][ T1910] sp0: Synchronizing with TNC [ 695.153829][ T1203] kernel write not supported for file /1045/attr/exec (pid: 1203 comm: kworker/1:2) [ 695.210194][T20615] usb 4-1: Using ep0 maxpacket: 16 [ 695.226835][T20615] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 695.259946][T20615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 695.273971][T20615] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 695.284148][T20615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.298109][T20615] usb 4-1: Product: syz [ 695.304434][T20615] usb 4-1: Manufacturer: syz [ 695.309554][T20615] usb 4-1: SerialNumber: syz [ 695.317370][T20615] usb 4-1: config 0 descriptor?? [ 695.327762][T20615] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 695.337724][T20615] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 695.530384][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 695.811600][ T1936] xfrm0 speed is unknown, defaulting to 1000 [ 695.920587][ T5136] Bluetooth: hci4: command 0x206a tx timeout [ 695.921079][T27954] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 695.945890][T20615] em28xx 4-1:0.0: chip ID is em2874 [ 696.209237][T20615] usb 4-1: USB disconnect, device number 43 [ 696.214658][ T1960] netlink: 60 bytes leftover after parsing attributes in process `syz.8.12343'. [ 696.228233][T20615] em28xx 4-1:0.0: Disconnecting em28xx [ 696.269013][T20615] em28xx 4-1:0.0: Freeing device [ 696.447559][ T30] audit: type=1400 audit(1745295010.789:2074): avc: denied { setattr } for pid=1973 comm="syz.1.12348" name="/" dev="configfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 696.530320][ T5867] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 696.690474][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 696.715001][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.727613][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 696.745028][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 696.754830][ T5867] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 696.794398][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 696.832892][ T5867] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 696.855574][ T5867] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 696.876035][ T5867] usb 3-1: Manufacturer: syz [ 696.900968][ T5867] usb 3-1: config 0 descriptor?? [ 697.080659][ T5941] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 697.096547][ T2005] block nbd8: NBD_DISCONNECT [ 697.103178][ T2004] block nbd8: Disconnected due to user request. [ 697.110032][T20615] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 697.110450][ T2004] block nbd8: shutting down sockets [ 697.200057][ T5867] rc_core: IR keymap rc-hauppauge not found [ 697.205987][ T5867] Registered IR keymap rc-empty [ 697.211517][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 697.240255][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 697.262123][ T5941] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 697.267621][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 697.272254][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.296352][T20615] usb 4-1: Using ep0 maxpacket: 16 [ 697.321151][T20615] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 697.324102][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input122 [ 697.337250][T20615] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.354704][ T5941] usb 2-1: config 0 descriptor?? [ 697.380616][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 697.383229][T20615] usb 4-1: config 0 has no interface number 0 [ 697.400989][T20615] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 697.433615][T20615] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 697.440237][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 697.475381][T20615] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 697.480002][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 697.510545][T20615] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 697.531073][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 697.548363][T20615] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 697.564535][T20615] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 697.568684][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 697.576784][T20615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.597787][T20615] usb 4-1: config 0 descriptor?? [ 697.604277][ T1996] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 697.616240][T20615] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 697.620213][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 697.680122][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 697.710207][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 697.751760][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 697.794734][ T5941] usb 2-1: Cannot set MAC address [ 697.800791][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 697.824473][ T5867] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 697.829699][ T5941] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 697.843802][ T5867] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 697.876762][ T5867] usb 3-1: USB disconnect, device number 116 [ 697.878889][ T5941] usb 2-1: USB disconnect, device number 41 [ 697.937019][T20615] usb 4-1: USB disconnect, device number 44 [ 698.083078][ T2028] netlink: 'syz.4.12372': attribute type 4 has an invalid length. [ 698.590083][ T2056] netlink: 'syz.4.12383': attribute type 8 has an invalid length. [ 699.077285][ T2088] netlink: 'syz.3.12398': attribute type 10 has an invalid length. [ 699.138527][ T2088] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 699.147819][ T2090] netlink: 'syz.4.12399': attribute type 1 has an invalid length. [ 699.156486][ T2090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 699.163774][ T2090] IPv6: NLM_F_CREATE should be set when creating new route [ 699.177011][ T2090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2090 comm=syz.4.12399 [ 699.190525][ T2090] netlink: 'syz.4.12399': attribute type 1 has an invalid length. [ 699.199304][ T2090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 699.495280][ T2113] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 699.507068][ T2113] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 700.415440][ T30] audit: type=1400 audit(1745295014.759:2075): avc: denied { create } for pid=2145 comm="syz.8.12423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 700.506391][ T30] audit: type=1400 audit(1745295014.799:2076): avc: denied { write } for pid=2145 comm="syz.8.12423" path="socket:[128889]" dev="sockfs" ino=128889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 700.890278][ T2160] SELinux: ebitmap start bit (3957488994) is not a multiple of the map unit size (64) [ 700.918850][ T2160] SELinux: failed to load policy [ 701.019695][ T2171] random: crng reseeded on system resumption [ 701.020041][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 701.203925][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 701.217985][ T24] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 701.243459][ T24] usb 2-1: config 0 has no interface number 0 [ 701.252884][ T24] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 701.269090][ T24] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 701.282870][ T24] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 701.294897][ T24] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 701.304296][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.313448][ T24] usb 2-1: Product: syz [ 701.317732][ T24] usb 2-1: Manufacturer: syz [ 701.322399][ T24] usb 2-1: SerialNumber: syz [ 701.338463][ T24] usb 2-1: config 0 descriptor?? [ 701.345551][ T2158] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 701.357765][ T24] ums-sddr09 2-1:0.20: USB Mass Storage device detected [ 701.415157][ T24] ums-sddr09 2-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 701.537549][ T2190] ip_vti0: Master is either lo or non-ether device [ 701.627894][T20615] usb 2-1: USB disconnect, device number 42 [ 701.911410][ T2202] xfrm0 speed is unknown, defaulting to 1000 [ 702.129991][ T1203] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 702.327058][ T1203] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 702.361621][ T1203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.411669][ T1203] usb 4-1: config 0 descriptor?? [ 702.635400][ T1203] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 702.651081][ T1203] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 702.687227][ T1203] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 807.629841][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 807.636802][ C1] rcu: (detected by 1, t=10502 jiffies, g=133441, q=493 ncpus=2) [ 807.644591][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10500 (4295017923-4295007423), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 807.657943][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g133441 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 807.669207][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 807.679162][ C1] rcu: RCU grace-period kthread stack dump: [ 807.685034][ C1] task:rcu_preempt state:R running task stack:27304 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 807.698514][ C1] Call Trace: [ 807.701781][ C1] [ 807.704705][ C1] __schedule+0x116f/0x5de0 [ 807.709210][ C1] ? find_held_lock+0x2b/0x80 [ 807.713885][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 807.718816][ C1] ? __pfx___schedule+0x10/0x10 [ 807.723665][ C1] ? find_held_lock+0x2b/0x80 [ 807.728335][ C1] ? schedule+0x2d7/0x3a0 [ 807.732658][ C1] schedule+0xe7/0x3a0 [ 807.736722][ C1] schedule_timeout+0x123/0x290 [ 807.741563][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 807.746927][ C1] ? __pfx_process_timeout+0x10/0x10 [ 807.752214][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 807.758011][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 807.763472][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 807.768230][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 807.773507][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 807.778351][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 807.784154][ C1] rcu_gp_kthread+0x270/0x380 [ 807.788818][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 807.794002][ C1] ? rcu_is_watching+0x12/0xc0 [ 807.798760][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 807.803955][ C1] ? __kthread_parkme+0x19e/0x250 [ 807.808979][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 807.814167][ C1] kthread+0x3c2/0x780 [ 807.818231][ C1] ? __pfx_kthread+0x10/0x10 [ 807.822810][ C1] ? __pfx_kthread+0x10/0x10 [ 807.827388][ C1] ? __pfx_kthread+0x10/0x10 [ 807.831966][ C1] ? __pfx_kthread+0x10/0x10 [ 807.836544][ C1] ? rcu_is_watching+0x12/0xc0 [ 807.841301][ C1] ? __pfx_kthread+0x10/0x10 [ 807.845879][ C1] ret_from_fork+0x45/0x80 [ 807.850284][ C1] ? __pfx_kthread+0x10/0x10 [ 807.854863][ C1] ret_from_fork_asm+0x1a/0x30 [ 807.859638][ C1] [ 807.862646][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 807.868953][ C1] Sending NMI from CPU 1 to CPUs 0: [ 807.874146][ C0] NMI backtrace for cpu 0 [ 807.874157][ C0] CPU: 0 UID: 0 PID: 32388 Comm: kworker/u8:11 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 807.874173][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 807.874183][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 807.874206][ C0] RIP: 0010:do_raw_spin_unlock+0x152/0x230 [ 807.874222][ C0] Code: 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 95 00 00 00 48 c7 c0 10 1a 22 8e c7 43 08 ff ff ff ff 48 ba 00 00 00 00 00 fc ff df <48> c1 e8 03 80 3c 10 00 0f 85 ba 00 00 00 48 83 3d d8 9b 89 0c 00 [ 807.874234][ C0] RSP: 0018:ffffc90000007d18 EFLAGS: 00000046 [ 807.874244][ C0] RAX: ffffffff8e221a10 RBX: ffffffff9ade1278 RCX: ffffffff81987d23 [ 807.874253][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffffff9ade1278 [ 807.874261][ C0] RBP: ffffffff9ade1280 R08: 0000000000000000 R09: fffffbfff35bc24f [ 807.874270][ C0] R10: ffffffff9ade127b R11: 0000000000000000 R12: ffffffff9ade1288 [ 807.874278][ C0] R13: dffffc0000000000 R14: ffff88807b6f6340 R15: 1ffff92000000fac [ 807.874286][ C0] FS: 0000000000000000(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 807.874300][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 807.874308][ C0] CR2: 0000001b2fa1bff8 CR3: 000000007a638000 CR4: 00000000003526f0 [ 807.874316][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 807.874324][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 807.874332][ C0] Call Trace: [ 807.874336][ C0] [ 807.874342][ C0] _raw_spin_unlock_irqrestore+0x22/0x80 [ 807.874362][ C0] debug_object_deactivate+0x1ec/0x3a0 [ 807.874379][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 807.874395][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 807.874413][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 807.874429][ C0] __hrtimer_run_queues+0x46f/0xad0 [ 807.874446][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 807.874460][ C0] ? read_tsc+0x9/0x20 [ 807.874479][ C0] hrtimer_interrupt+0x397/0x8e0 [ 807.874498][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 807.874515][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 807.874530][ C0] [ 807.874534][ C0] [ 807.874539][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 807.874553][ C0] RIP: 0010:fsqr+0x17d/0x1d0 [ 807.874566][ C0] Code: 38 f6 4e 08 c4 62 ab f6 6e 30 66 4c 0f 38 f6 d3 f3 4c 0f 38 f6 56 10 c4 e2 a3 f6 46 38 66 4d 0f 38 f6 dd f3 4c 0f 38 f6 5e 18 <66> 48 0f 38 f6 c1 f3 48 0f 38 f6 c1 48 0f af c2 49 01 c0 66 4c 0f [ 807.874578][ C0] RSP: 0018:ffffc90010a4f440 EFLAGS: 00000a46 [ 807.874587][ C0] RAX: 0000000000000010 RBX: 000000000000000e RCX: 0000000000000000 [ 807.874595][ C0] RDX: 0000000000000026 RSI: ffffc90010a4f600 RDI: ffffc90010a4f4f8 [ 807.874603][ C0] RBP: ffffc90010a4f4f8 R08: bdc6ce07cd4f4f36 R09: a2b2b5bb802afe55 [ 807.874614][ C0] R10: 748851290b373041 R11: 482f20f50fb69620 R12: ffffc90010a4f600 [ 807.874623][ C0] R13: 0000000000000004 R14: 72119cbbe57817f4 R15: 0000000000000000 [ 807.874638][ C0] finv+0x19d/0x450 [ 807.874651][ C0] ? __pfx_finv+0x10/0x10 [ 807.874670][ C0] encode_point+0xbc/0x360 [ 807.874684][ C0] ? __pfx_encode_point+0x10/0x10 [ 807.874704][ C0] ? point_double+0x115/0x440 [ 807.874718][ C0] curve25519_ever64_base+0x6ad/0x770 [ 807.874735][ C0] ? __pfx_curve25519_ever64_base+0x10/0x10 [ 807.874750][ C0] ? crng_fast_key_erasure+0x1ce/0x250 [ 807.874764][ C0] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 807.874789][ C0] ? __pfx_down_write+0x10/0x10 [ 807.874809][ C0] curve25519_base_arch+0x23/0x50 [ 807.874823][ C0] wg_noise_handshake_create_initiation+0x27c/0x650 [ 807.874842][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 807.874859][ C0] ? find_held_lock+0x2b/0x80 [ 807.874876][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 807.874891][ C0] ? ktime_get_coarse_with_offset+0x1f3/0x270 [ 807.874908][ C0] ? ktime_get_coarse_with_offset+0x176/0x270 [ 807.874927][ C0] wg_packet_send_handshake_initiation+0x19a/0x360 [ 807.874948][ C0] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 807.874967][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 807.874986][ C0] wg_packet_handshake_send_worker+0x1c/0x30 [ 807.875005][ C0] process_one_work+0x9cc/0x1b70 [ 807.875024][ C0] ? __pfx_process_one_work+0x10/0x10 [ 807.875040][ C0] ? assign_work+0x1a0/0x250 [ 807.875055][ C0] worker_thread+0x6c8/0xf10 [ 807.875073][ C0] ? __pfx_worker_thread+0x10/0x10 [ 807.875086][ C0] kthread+0x3c2/0x780 [ 807.875099][ C0] ? __pfx_kthread+0x10/0x10 [ 807.875111][ C0] ? __pfx_kthread+0x10/0x10 [ 807.875122][ C0] ? __pfx_kthread+0x10/0x10 [ 807.875133][ C0] ? __pfx_kthread+0x10/0x10 [ 807.875145][ C0] ? rcu_is_watching+0x12/0xc0 [ 807.875160][ C0] ? __pfx_kthread+0x10/0x10 [ 807.875172][ C0] ret_from_fork+0x45/0x80 [ 807.875184][ C0] ? __pfx_kthread+0x10/0x10 [ 807.875197][ C0] ret_from_fork_asm+0x1a/0x30 [ 807.875219][ C0]