last executing test programs: 52.099391931s ago: executing program 4 (id=4966): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000004500)={0x2020}, 0x2020) 51.938652559s ago: executing program 4 (id=4971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f00000006c0)={'\x00', 0x0, 0x1, 0xcc, 0x0, 0xfe00, 0x6000, 0xeeef0000, '\x00', 0x8}) 51.758197994s ago: executing program 4 (id=4973): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x401}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xffffffffffffffff}}, 0x30) 51.731585918s ago: executing program 4 (id=4974): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101081, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)={0x101841, 0x3, 0x8}, 0x18) 51.671410227s ago: executing program 4 (id=4975): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) faccessat(0xffffffffffffffff, 0x0, 0x0) 50.725787449s ago: executing program 4 (id=4979): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) close(r0) 50.494873275s ago: executing program 32 (id=4979): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) close(r0) 2.107766985s ago: executing program 1 (id=5826): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002180)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r1}, 0x20) 2.031529161s ago: executing program 1 (id=5829): r0 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7f, 0x7, 0x40}, {0x9, 0x5, 0x0, 0x2, 0x8, 0x2, 0x1, 0x7f}, {0x9, 0x5, 0xd, 0x3, 0x200, 0xe, 0x3, 0x6}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 1.554636137s ago: executing program 2 (id=5839): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) chdir(&(0x7f0000000140)='./file0\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8) 1.470746157s ago: executing program 2 (id=5841): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) 1.393600363s ago: executing program 2 (id=5843): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)={r2, 0x3, 0x1, '\x00'}, 0x9) 1.318812752s ago: executing program 2 (id=5845): unshare(0x8040480) unshare(0x8040480) unshare(0xe040400) unshare(0x8000000) 1.240572391s ago: executing program 0 (id=5847): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x40, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}]}}]}, 0x3c}}, 0x44080) 1.211603263s ago: executing program 2 (id=5848): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) creat(&(0x7f00000000c0)='./file0\x00', 0x10) 1.042433132s ago: executing program 0 (id=5851): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sysfs$1(0x1, 0x0) 937.80975ms ago: executing program 5 (id=5852): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) setuid(0xee01) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 832.185811ms ago: executing program 5 (id=5854): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x1002c841) 780.711184ms ago: executing program 3 (id=5855): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001f40)={0x14, r1, 0x1, 0x0, 0x0, {0x23}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48084) 671.240368ms ago: executing program 3 (id=5856): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 623.952665ms ago: executing program 2 (id=5857): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvlan1\x00'}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\"\f\x00\x00\x00'], 0x0}, 0x0) 551.077317ms ago: executing program 3 (id=5858): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x4000000) 550.469001ms ago: executing program 0 (id=5859): prctl$PR_MCE_KILL(0x21, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) syz_clone(0x2004011, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) 537.226616ms ago: executing program 5 (id=5860): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x3}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 412.094559ms ago: executing program 3 (id=5861): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 410.57945ms ago: executing program 1 (id=5862): openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x181901) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 373.893018ms ago: executing program 5 (id=5863): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x9000, &(0x7f0000000540)={0x20, 0x7f, 0x20000}, 0x20) 328.362743ms ago: executing program 1 (id=5864): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 296.078199ms ago: executing program 5 (id=5865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0xe1, 0x0, 0x8000000a}]}) 214.258506ms ago: executing program 0 (id=5866): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x1003ff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) 213.443211ms ago: executing program 3 (id=5867): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 164.466368ms ago: executing program 1 (id=5868): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0xf, 0x1ff, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x81, 0x2, 0x80000001, 0x4b, 0x9}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x15}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x8}, 0x3c) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 163.507312ms ago: executing program 0 (id=5869): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x20}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 58.211225ms ago: executing program 0 (id=5870): socket(0x2b, 0x1, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 57.633595ms ago: executing program 1 (id=5871): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x14000000, 0xffffffff}) 55.099869ms ago: executing program 3 (id=5872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x48, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x10000, 0x200070}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x24044804) 0s ago: executing program 5 (id=5873): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r0 = syz_open_dev$media(&(0x7f0000000380), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, 0x0, &(0x7f00000002c0)=[{{0x80000000, 0x0}}, {{0x80000000}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000001c0)={{r2, r1, 0x1, [0x104, 0xf7df]}, {r3, r4, 0x4, [0x6, 0xfffff7ff]}, 0x2, [0x2, 0x3]}) kernel console output (not intermixed with test programs): sb 3-1: config 0 interface 0 has no altsetting 0 [ 307.104960][ T5887] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 307.115366][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.132337][ T5887] usb 3-1: config 0 descriptor?? [ 307.252852][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.263891][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.274269][ T5871] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 307.283662][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.301631][ T5871] usb 4-1: config 0 descriptor?? [ 307.552964][ T5887] hid (null): invalid report_size 918321780 [ 307.560647][ T5887] bigben 0003:146B:0902.004D: unexpected rdesc, please submit for review [ 307.571117][ T5887] hid_parser_main: 637 callbacks suppressed [ 307.571136][ T5887] bigben 0003:146B:0902.004D: unknown main item tag 0x0 [ 307.585211][ T5887] bigben 0003:146B:0902.004D: unknown main item tag 0x0 [ 307.593385][ T5887] bigben 0003:146B:0902.004D: unknown main item tag 0x0 [ 307.600366][ T5887] bigben 0003:146B:0902.004D: unknown main item tag 0x0 [ 307.607400][ T5887] bigben 0003:146B:0902.004D: unknown main item tag 0x0 [ 307.614512][ T5887] bigben 0003:146B:0902.004D: unknown main item tag 0x0 [ 307.621488][ T5887] bigben 0003:146B:0902.004D: reserved main item tag 0xe [ 307.628521][ T5887] bigben 0003:146B:0902.004D: unknown main item tag 0x2 [ 307.635505][ T5887] bigben 0003:146B:0902.004D: unknown main item tag 0x1 [ 307.642503][ T5887] bigben 0003:146B:0902.004D: unknown main item tag 0x1 [ 307.642661][T16465] usb 2-1: dvb_usb_ec168: I2C read not implemented [ 307.649577][ T5887] bigben 0003:146B:0902.004D: invalid report_size 918321780 [ 307.657961][ T792] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 307.664095][ T5887] bigben 0003:146B:0902.004D: item 0 4 1 7 parsing failed [ 307.670354][ T5872] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 307.678481][ T5887] bigben 0003:146B:0902.004D: parse failed [ 307.691120][ T5887] bigben 0003:146B:0902.004D: probe with driver bigben failed with error -22 [ 307.720504][ T5871] playstation 0003:054C:0DF2.004E: unknown main item tag 0x0 [ 307.744203][ T5871] playstation 0003:054C:0DF2.004E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 307.772139][ T42] usb 3-1: USB disconnect, device number 39 [ 307.781304][ T792] usb 2-1: USB disconnect, device number 56 [ 307.876161][ T5872] usb 5-1: unable to get BOS descriptor or descriptor too short [ 307.884814][ T5872] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 307.892580][ T5872] usb 5-1: can't read configurations, error -71 [ 307.922157][ T5871] playstation 0003:054C:0DF2.004E: Invalid byte count transferred, expected 20 got 0 [ 307.931903][ T5871] playstation 0003:054C:0DF2.004E: Failed to retrieve DualSense pairing info: -22 [ 307.941436][ T5871] playstation 0003:054C:0DF2.004E: Failed to get MAC address from DualSense [ 307.950104][ T5871] playstation 0003:054C:0DF2.004E: Failed to create dualsense. [ 307.959782][ T5871] playstation 0003:054C:0DF2.004E: probe with driver playstation failed with error -22 [ 308.143916][ T5887] usb 4-1: USB disconnect, device number 39 [ 308.413602][T16542] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4765'. [ 308.550389][T16552] tmpfs: Too few inodes for current use [ 308.596656][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 308.596672][ T29] audit: type=1400 audit(1076.572:783): avc: denied { map } for pid=16553 comm="syz.0.4771" path="socket:[51591]" dev="sockfs" ino=51591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 308.638800][ T29] audit: type=1400 audit(1076.572:784): avc: denied { accept } for pid=16553 comm="syz.0.4771" path="socket:[51591]" dev="sockfs" ino=51591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 308.658077][T16556] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 308.669475][T16556] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 308.908680][ T29] audit: type=1400 audit(1076.882:785): avc: denied { map } for pid=16577 comm="syz.4.4782" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 309.104431][T16590] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4788'. [ 309.141166][ T5887] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 309.321278][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 309.342534][ T5887] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 309.350654][ T5887] usb 2-1: config 0 has no interface number 0 [ 309.366186][ T5887] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 309.381005][ T5887] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 309.426189][ T5887] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 309.449035][T16612] netlink: 'syz.4.4797': attribute type 1 has an invalid length. [ 309.467369][ T5887] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 309.483695][T16612] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4797'. [ 309.501160][ T5887] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 309.532152][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.572220][ T5887] usb 2-1: config 0 descriptor?? [ 309.604221][ T5887] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 309.844349][ T5871] usb 2-1: USB disconnect, device number 57 [ 309.864352][ T5871] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 309.911770][ T5872] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 310.019802][ T1162] Bluetooth: hci5: Frame reassembly failed (-84) [ 310.028538][T16635] Bluetooth: hci5: Frame reassembly failed (-84) [ 310.072936][ T5872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 310.081809][ T5872] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 310.094777][ T5872] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 310.101123][ T5887] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 310.103943][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.119529][ T5872] usb 3-1: Product: syz [ 310.124056][ T5872] usb 3-1: Manufacturer: syz [ 310.128628][ T5872] usb 3-1: SerialNumber: syz [ 310.151392][ T42] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 310.261123][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 310.267883][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.279485][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.289324][ T5887] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 310.298399][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.301978][ T42] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 310.312264][ T5887] usb 5-1: config 0 descriptor?? [ 310.315380][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.328211][ T42] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 310.340231][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 310.360799][ T5872] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 310.369774][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.379835][ T42] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 310.392377][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 310.400192][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.409648][ T42] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 310.420795][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 310.428970][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.438131][ T42] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 310.449654][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 310.458143][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.467228][ T42] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 310.478296][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 310.486476][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.495830][ T42] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 310.507089][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 310.515290][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.524349][ T42] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 310.535371][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 310.544317][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.553487][ T5872] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 310.562432][ T5872] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 310.570325][ T42] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 310.581695][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 310.590283][ T42] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 310.599782][ T42] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 310.608222][ T42] usb 4-1: Product: syz [ 310.613098][ T42] usb 4-1: Manufacturer: syz [ 310.617723][ T42] usb 4-1: SerialNumber: syz [ 310.634131][ T42] usb 4-1: config 0 descriptor?? [ 310.655771][ T42] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 310.718067][T16645] tipc: New replicast peer: 255.255.255.255 [ 310.725767][T16645] tipc: Enabled bearer , priority 10 [ 310.734721][ T5887] koneplus 0003:1E7D:2D51.004F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 310.747337][T16645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4813'. [ 310.756463][T16645] tipc: Disabling bearer [ 310.863297][ T5922] usb 4-1: USB disconnect, device number 40 [ 310.886783][ T5922] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 310.935831][ T5887] koneplus 0003:1E7D:2D51.004F: couldn't init struct koneplus_device [ 310.944172][ T5887] koneplus 0003:1E7D:2D51.004F: couldn't install mouse [ 310.954977][ T5887] koneplus 0003:1E7D:2D51.004F: probe with driver koneplus failed with error -32 [ 310.966807][ T5872] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 310.983088][ T5887] usb 5-1: USB disconnect, device number 42 [ 311.033333][ T5872] usb 3-1: USB disconnect, device number 40 [ 311.064130][ T6025] udevd[6025]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.787495][T16663] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 311.794741][ T5887] kernel read not supported for file /comedi4 (pid: 5887 comm: kworker/0:4) [ 311.806227][ T5922] kernel write not supported for file /input/event2 (pid: 5922 comm: kworker/0:7) [ 312.031301][ T5130] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 312.351477][ T5872] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 312.522622][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.535532][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 312.548978][ T5872] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 312.558168][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.578277][ T5872] usb 1-1: config 0 descriptor?? [ 312.689120][T16713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.706119][T16713] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 312.992828][ T5872] hid_parser_main: 4 callbacks suppressed [ 312.992843][ T5872] kye 0003:0458:4018.0050: unknown main item tag 0x0 [ 313.009316][ T5872] kye 0003:0458:4018.0050: unknown main item tag 0x0 [ 313.016556][ T5872] kye 0003:0458:4018.0050: unknown main item tag 0x0 [ 313.023536][ T5872] kye 0003:0458:4018.0050: unknown main item tag 0x0 [ 313.030692][ T5872] kye 0003:0458:4018.0050: unknown main item tag 0x0 [ 313.039021][ T5872] kye 0003:0458:4018.0050: unknown main item tag 0x0 [ 313.046416][ T5872] kye 0003:0458:4018.0050: unknown main item tag 0x0 [ 313.054660][ T5872] kye 0003:0458:4018.0050: unknown main item tag 0x0 [ 313.065169][ T5872] kye 0003:0458:4018.0050: unknown main item tag 0x0 [ 313.073773][ T5872] kye 0003:0458:4018.0050: unknown main item tag 0x0 [ 313.084489][ T5872] kye 0003:0458:4018.0050: hidraw0: USB HID v0.00 Device [HID 0458:4018] on usb-dummy_hcd.0-1/input0 [ 313.128513][ T29] audit: type=1800 audit(1081.102:786): pid=16727 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4848" name="file0" dev="tmpfs" ino=4983 res=0 errno=0 [ 313.213381][ T5871] usb 1-1: USB disconnect, device number 56 [ 313.421169][ T5872] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 313.484752][ T29] audit: type=1400 audit(1081.462:787): avc: denied { connect } for pid=16742 comm="syz.1.4855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 313.523211][T16745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4856'. [ 313.532455][ T42] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 313.534516][T16745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4856'. [ 313.582467][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 313.594298][ T5872] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 313.603975][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.615435][ T5872] usb 5-1: config 0 descriptor?? [ 313.630750][T16731] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 313.689872][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.701244][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.712057][ T42] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 313.721653][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.742775][ T42] usb 3-1: config 0 descriptor?? [ 314.031394][ T5812] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 314.031914][ T5805] Bluetooth: hci6: command 0x1003 tx timeout [ 314.073526][ T5872] acrux 0003:1A34:F705.0051: report_id 2022860571 is invalid [ 314.089733][ T5872] acrux 0003:1A34:F705.0051: item 0 4 1 8 parsing failed [ 314.103068][ T5872] acrux 0003:1A34:F705.0051: parse failed [ 314.108887][ T5872] acrux 0003:1A34:F705.0051: probe with driver acrux failed with error -22 [ 314.159665][ T42] cp2112 0003:10C4:EA90.0052: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 314.265465][ T5922] usb 5-1: USB disconnect, device number 43 [ 314.356512][ T42] cp2112 0003:10C4:EA90.0052: Part Number: 0x82 Device Version: 0xFE [ 314.557659][ T42] cp2112 0003:10C4:EA90.0052: error requesting SMBus config [ 314.570413][ T42] cp2112 0003:10C4:EA90.0052: probe with driver cp2112 failed with error -71 [ 314.582465][ T42] usb 3-1: USB disconnect, device number 41 [ 315.101383][ T5922] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 315.135234][T16796] loop9: detected capacity change from 0 to 8 [ 315.145431][T16796] Dev loop9: unable to read RDB block 8 [ 315.154668][T16796] loop9: unable to read partition table [ 315.160610][T16796] loop9: partition table beyond EOD, truncated [ 315.167280][T16796] loop_reread_partitions: partition scan of loop9 (■швлx№        ) failed (rc=-5) [ 315.252104][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 315.262440][ T5922] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 315.274855][ T5922] usb 5-1: config 0 has no interface number 0 [ 315.291220][ T5922] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 315.303174][ T5922] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 315.314541][ T42] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 315.315303][ T5922] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 315.345789][ T5922] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 315.360287][ T5922] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 315.370024][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.381890][ T5922] usb 5-1: config 0 descriptor?? [ 315.396536][ T5922] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 315.482888][ T42] usb 4-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 315.493648][ T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.512319][ T42] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 315.521986][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 315.529994][ T42] usb 4-1: SerialNumber: syz [ 315.547109][T16807] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 315.719376][ T5872] kernel read not supported for file /rfkill (pid: 5872 comm: kworker/1:7) [ 315.763253][ T42] usb 4-1: 0:2 : does not exist [ 315.787620][ T42] usb 4-1: unit 108 not found! [ 315.799174][ T42] usb 4-1: unit 219 not found! [ 315.812084][ T42] usb 4-1: unit 169 not found! [ 315.851969][T16816] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 315.871312][ T42] usb 4-1: USB disconnect, device number 41 [ 316.380765][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-1) [ 316.394295][ T5922] usb 5-1: USB disconnect, device number 44 [ 316.450060][ T5922] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 316.756563][T16845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4901'. [ 316.836112][ T29] audit: type=1400 audit(1084.812:788): avc: denied { connect } for pid=16849 comm="syz.2.4903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 316.891704][ T29] audit: type=1400 audit(1084.872:789): avc: denied { connect } for pid=16852 comm="syz.1.4905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 316.925756][ T42] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 316.965927][ T79] Bluetooth: hci5: Frame reassembly failed (-84) [ 316.976247][T16858] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 317.191123][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 317.202159][ T42] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 317.212448][ T42] usb 1-1: config 0 has no interface number 0 [ 317.218567][ T42] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 317.249932][ T42] usb 1-1: config 0 interface 85 has no altsetting 0 [ 317.272468][ T42] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 317.282776][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.290786][ T42] usb 1-1: Product: syz [ 317.311131][ T42] usb 1-1: Manufacturer: syz [ 317.315835][ T42] usb 1-1: SerialNumber: syz [ 317.333357][ T42] usb 1-1: config 0 descriptor?? [ 317.950509][ T42] appletouch 1-1:0.85: Geyser mode initialized. [ 317.959332][ T42] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input59 [ 318.169292][ T42] usb 1-1: USB disconnect, device number 57 [ 318.188670][ T42] appletouch 1-1:0.85: input: appletouch disconnected [ 318.719448][T16910] netlink: 'syz.0.4929': attribute type 1 has an invalid length. [ 318.727382][T16910] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4929'. [ 319.002140][ T5812] Bluetooth: hci5: command 0x1003 tx timeout [ 319.002393][ T5805] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 319.011570][ T5872] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 319.211525][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 319.223984][ T5872] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 319.244129][ T5872] usb 1-1: config 0 has no interface number 0 [ 319.262124][ T5872] usb 1-1: config 0 interface 12 has no altsetting 0 [ 319.302384][ T5872] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 319.327628][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.346284][ T5872] usb 1-1: Product: syz [ 319.352484][ T5872] usb 1-1: Manufacturer: syz [ 319.357322][ T5872] usb 1-1: SerialNumber: syz [ 319.374455][ T5872] usb 1-1: config 0 descriptor?? [ 319.676086][T16936] binder: 16935:16936 ioctl c0306201 200000000040 returned -22 [ 320.032919][T16949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.107149][T16953] netlink: 'syz.4.4949': attribute type 11 has an invalid length. [ 320.117936][T16953] netem: change failed [ 320.194891][ T5872] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 320.203570][ T5872] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 320.219032][ T5872] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 320.227036][ T5872] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 320.250687][ T5872] usb 1-1: USB disconnect, device number 58 [ 320.581521][ T42] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 320.703354][T16988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.731941][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 320.754816][ T42] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 320.773612][ T42] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 320.783601][ T42] usb 2-1: config 0 has no interface number 0 [ 320.790799][ T42] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 320.800868][ T42] usb 2-1: config 0 has no interface number 0 [ 320.834176][ T42] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 320.842937][ T42] usb 2-1: config 0 has no interface number 0 [ 320.864149][ T42] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 320.872831][ T42] usb 2-1: config 0 has no interface number 0 [ 320.882053][ T42] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 320.898356][ T42] usb 2-1: config 0 has no interface number 0 [ 320.913045][ T42] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 320.923351][ T42] usb 2-1: config 0 has no interface number 0 [ 320.930564][ T42] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 320.939593][ T42] usb 2-1: config 0 has no interface number 0 [ 320.972082][ T42] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 320.980118][ T42] usb 2-1: config 0 has no interface number 0 [ 320.993406][ T42] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 321.003134][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.021151][ T5922] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 321.021804][ T42] usb 2-1: Product: syz [ 321.041088][ T42] usb 2-1: Manufacturer: syz [ 321.051423][ T42] usb 2-1: SerialNumber: syz [ 321.063253][ T42] usb 2-1: config 0 descriptor?? [ 321.080798][ T42] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 321.192992][ T5922] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 321.201981][ T5922] usb 4-1: config 0 has no interface number 0 [ 321.208196][ T5922] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 321.220303][ T5922] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 321.232162][ T5922] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 321.244567][ T5922] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 321.255970][ T5922] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 321.267907][ T5922] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 321.282427][ T5922] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 321.291913][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.295454][ T42] etas_es58x 2-1:0.2: could not parse product info: '424242424242' [ 321.315761][ T5922] usb 4-1: config 0 descriptor?? [ 321.321844][T16994] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 321.330897][T16994] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 321.344559][ T5922] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 321.575084][ T5922] usb 4-1: USB disconnect, device number 42 [ 321.613161][ T5922] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 321.946519][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 321.957696][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 321.965696][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 321.979020][ T5474] etas_es58x 2-1:0.2 can1: bit-timing not yet defined [ 322.175101][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 322.184325][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 322.193489][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 322.202633][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 322.211777][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 322.220931][ C0] etas_es58x 2-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 322.237541][ T5887] usb 2-1: USB disconnect, device number 58 [ 322.245878][ T5887] etas_es58x 2-1:0.2: Disconnecting syz syz [ 322.252240][ T5474] etas_es58x 2-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 322.338901][ T157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.379585][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.390173][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.400353][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.408838][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.418828][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.432484][ T29] audit: type=1400 audit(1090.412:790): avc: denied { mounton } for pid=17033 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 322.478405][ T157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.573688][ T157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.645285][ T157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.042094][ T5922] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 323.062694][ T5887] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 323.104160][ T157] bridge_slave_1: left allmulticast mode [ 323.112573][ T157] bridge_slave_1: left promiscuous mode [ 323.120778][ T157] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.135563][ T157] bridge_slave_0: left allmulticast mode [ 323.142943][ T157] bridge_slave_0: left promiscuous mode [ 323.149185][ T157] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.224030][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 323.229162][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 323.245061][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.258030][ T5887] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 323.286960][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.295985][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.310270][ T5922] usb 1-1: config 0 has no interfaces? [ 323.319196][ T5922] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 323.339741][ T5887] usb 3-1: config 0 descriptor?? [ 323.358891][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.392331][ T5922] usb 1-1: config 0 descriptor?? [ 323.537935][ T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.556052][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.565106][ T5887] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 323.583988][ T157] bond0 (unregistering): Released all slaves [ 323.604757][ T157] bond1 (unregistering): Released all slaves [ 323.614591][ T5887] usb 1-1: USB disconnect, device number 59 [ 323.629450][T17033] chnl_net:caif_netlink_parms(): no params data found [ 323.766151][ T29] audit: type=1400 audit(1091.742:791): avc: denied { listen } for pid=17098 comm="syz.3.4999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 323.775180][ T5810] usb 3-1: USB disconnect, device number 42 [ 323.824508][ T29] audit: type=1400 audit(1091.742:792): avc: denied { ioctl } for pid=17098 comm="syz.3.4999" path="socket:[54744]" dev="sockfs" ino=54744 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 324.049526][T17033] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.060837][T17033] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.068949][T17033] bridge_slave_0: entered allmulticast mode [ 324.079182][T17033] bridge_slave_0: entered promiscuous mode [ 324.087475][T17033] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.095997][T17033] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.103331][T17033] bridge_slave_1: entered allmulticast mode [ 324.110852][T17033] bridge_slave_1: entered promiscuous mode [ 324.287584][T17033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.328345][T17122] tipc: Resetting bearer [ 324.347120][T17122] netlink: 'syz.1.5006': attribute type 2 has an invalid length. [ 324.398180][T17033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.470712][ T157] hsr_slave_0: left promiscuous mode [ 324.490283][ T157] hsr_slave_1: left promiscuous mode [ 324.500199][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.521411][ T5812] Bluetooth: hci4: command tx timeout [ 324.528651][ T157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.560306][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.572270][ T157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.601869][ T157] veth1_macvtap: left promiscuous mode [ 324.608802][ T157] veth0_macvtap: left promiscuous mode [ 324.614896][ T157] veth1_vlan: left promiscuous mode [ 324.620438][ T157] veth0_vlan: left promiscuous mode [ 324.621621][ T42] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 324.782042][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 324.792544][ T42] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 324.816673][ T42] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 324.831208][ T5810] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 324.843447][ T42] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 324.877634][ T42] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.901125][ T42] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 324.922966][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.950783][ T157] team0 (unregistering): Port device team_slave_1 removed [ 324.965277][ T157] team0 (unregistering): Port device team_slave_0 removed [ 325.004898][ T5810] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 325.012599][ T5810] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 325.023914][ T5810] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 325.036370][ T5810] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 325.048778][ T5810] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 325.061624][ T5810] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 325.069235][ T5810] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 325.085707][ T5810] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 325.098005][ T5810] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 325.109716][ T5810] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 325.121942][T17033] team0: Port device team_slave_0 added [ 325.150101][ T5810] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 325.156208][ T42] usb 4-1: GET_CAPABILITIES returned 0 [ 325.158176][ T5810] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 325.164063][ T42] usbtmc 4-1:16.0: can't read capabilities [ 325.174414][ T5810] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 325.174446][ T5810] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 325.174471][ T5810] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 325.177165][ T5810] usb 1-1: string descriptor 0 read error: -22 [ 325.222137][ T5810] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 325.254259][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.270286][T17033] team0: Port device team_slave_1 added [ 325.310830][ T5810] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 325.337344][T17033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.346733][T17033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.381483][T17033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.422283][T17033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.429253][T17033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.469351][ T5810] usb 4-1: USB disconnect, device number 43 [ 325.497871][T17033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.544127][ T42] usb 1-1: USB disconnect, device number 60 [ 325.636144][T17033] hsr_slave_0: entered promiscuous mode [ 325.655110][T17033] hsr_slave_1: entered promiscuous mode [ 325.674279][T17033] debugfs: 'hsr0' already exists in 'hsr' [ 325.688141][T17033] Cannot create hsr debugfs directory [ 326.001473][T17033] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.018695][T17033] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 326.037861][T17033] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 326.062669][T17033] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 326.229578][T17033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.260667][T17033] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.286413][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.293582][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.320863][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.328058][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.593526][ T5872] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 326.602266][ T5812] Bluetooth: hci4: command tx timeout [ 326.755235][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 326.759533][T17033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.766710][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 326.794784][T17228] netlink: 'syz.2.5033': attribute type 2 has an invalid length. [ 326.811381][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 326.844110][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 326.894360][ T5872] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 326.924457][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.954412][ T5872] usb 2-1: Product: syz [ 326.968778][ T5872] usb 2-1: Manufacturer: syz [ 326.974548][T17239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5036'. [ 326.990976][ T5872] usb 2-1: SerialNumber: syz [ 327.015165][ T5872] usb 2-1: config 0 descriptor?? [ 327.037189][ T5872] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input60 [ 327.385961][ T5872] usb 2-1: USB disconnect, device number 59 [ 327.385968][ C0] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 327.386101][ C0] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 327.453189][T17033] veth0_vlan: entered promiscuous mode [ 327.507704][T17033] veth1_vlan: entered promiscuous mode [ 327.570371][ T29] audit: type=1400 audit(1095.532:793): avc: denied { execute } for pid=17252 comm="syz.2.5039" path="/dev/dsp1" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 327.611427][T17033] veth0_macvtap: entered promiscuous mode [ 327.634058][T17033] veth1_macvtap: entered promiscuous mode [ 327.685760][T17033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.716845][T17033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.748482][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.779497][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.797092][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.817036][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.829066][T17259] netlink: 'syz.2.5041': attribute type 1 has an invalid length. [ 327.846025][T17259] netlink: 'syz.2.5041': attribute type 7 has an invalid length. [ 327.860836][T17259] netlink: 'syz.2.5041': attribute type 8 has an invalid length. [ 327.878080][T17259] netlink: 208 bytes leftover after parsing attributes in process `syz.2.5041'. [ 327.921624][T17259] NCSI netlink: No device for ifindex 1245232 [ 327.978643][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.997145][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.074981][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.084110][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.107896][ T29] audit: type=1400 audit(1096.072:794): avc: denied { mounton } for pid=17033 comm="syz-executor" path="/root/syzkaller.XJgEMS/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 328.180297][ T29] audit: type=1400 audit(1096.112:795): avc: denied { mounton } for pid=17033 comm="syz-executor" path="/root/syzkaller.XJgEMS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 328.221498][ T29] audit: type=1400 audit(1096.112:796): avc: denied { mounton } for pid=17033 comm="syz-executor" path="/root/syzkaller.XJgEMS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=55339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 328.275403][ T5887] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 328.314873][ T29] audit: type=1400 audit(1096.132:797): avc: denied { mounton } for pid=17033 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 328.391152][ T29] audit: type=1400 audit(1096.132:798): avc: denied { mounton } for pid=17033 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 328.461546][ T5887] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.473741][ T5887] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.494852][ T5887] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 328.508089][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 328.531225][ T5887] usb 4-1: SerialNumber: syz [ 328.537321][ T29] audit: type=1400 audit(1096.162:799): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 328.577803][ T29] audit: type=1400 audit(1096.552:800): avc: denied { create } for pid=17290 comm="syz.5.5055" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 328.607879][ T29] audit: type=1400 audit(1096.582:801): avc: denied { unlink } for pid=17033 comm="syz-executor" name="file1" dev="tmpfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 328.641438][ T5872] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 328.672082][ T5812] Bluetooth: hci4: command tx timeout [ 328.779241][ T5887] usb 4-1: 0:2 : does not exist [ 328.781240][ T5871] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 328.815205][ T5872] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 328.824340][ T5887] usb 4-1: USB disconnect, device number 44 [ 328.828687][ T5872] usb 2-1: config 0 has no interface number 0 [ 328.836814][ T5872] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 328.849499][ T5872] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.880766][ T5872] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.902761][ T5872] usb 2-1: config 0 interface 1 has no altsetting 0 [ 328.909521][ T5872] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 328.911630][ T29] audit: type=1400 audit(1096.882:802): avc: denied { setopt } for pid=17306 comm="syz.5.5063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 328.920276][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.951779][ T5856] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 328.962908][ T5871] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 328.971655][ T5871] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 328.983443][ T5871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 328.990154][ T5872] usb 2-1: config 0 descriptor?? [ 329.004439][ T5871] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 329.014673][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 329.025151][ T5871] usb 3-1: Product: syz [ 329.029327][T17309] bond1: ARP target 9.0.0.0 is already present [ 329.029352][T17309] bond1: option arp_ip_target: invalid value (9) [ 329.036780][ T5871] usb 3-1: Manufacturer: syz [ 329.048384][T17309] bond1 (unregistering): Released all slaves [ 329.050087][ T5871] usb 3-1: SerialNumber: syz [ 329.066767][ T5871] usb 3-1: config 0 descriptor?? [ 329.074772][ T5871] hub 3-1:0.0: bad descriptor, ignoring hub [ 329.080723][ T5871] hub 3-1:0.0: probe with driver hub failed with error -5 [ 329.090183][ T5871] usb 3-1: selecting invalid altsetting 0 [ 329.101310][ T5856] usb 1-1: Using ep0 maxpacket: 8 [ 329.110853][ T5856] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 329.120794][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.210927][ T5856] pvrusb2: Hardware description: Terratec Grabster AV400 [ 329.227979][ T5856] pvrusb2: ********** [ 329.235441][ T5856] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 329.246574][ T5856] pvrusb2: Important functionality might not be entirely working. [ 329.254948][ T5856] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 329.267374][ T5856] pvrusb2: ********** [ 329.347201][T17314] erspan0: entered promiscuous mode [ 329.408854][ T2341] pvrusb2: Invalid write control endpoint [ 329.419582][ T5872] hid (null): invalid report_count 252767622 [ 329.480795][ T2341] pvrusb2: Invalid write control endpoint [ 329.489036][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 329.500879][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 329.516777][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 329.527941][ T2341] pvrusb2: Device being rendered inoperable [ 329.534587][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 329.543309][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 329.559978][ T2341] pvrusb2: Attached sub-driver cx25840 [ 329.566818][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 329.577796][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 329.613653][T17301] pvrusb2: Attempted to execute control transfer when device not ok [ 329.630536][ T792] usb 1-1: USB disconnect, device number 61 [ 329.647515][ T5872] uclogic 0003:145F:0212.0053: failed retrieving string descriptor #100: -71 [ 329.659625][ T5872] uclogic 0003:145F:0212.0053: failed retrieving pen parameters: -71 [ 329.669017][ T5872] uclogic 0003:145F:0212.0053: pen probing failed: -71 [ 329.679511][ T5872] uclogic 0003:145F:0212.0053: failed probing parameters: -71 [ 329.688119][ T5872] uclogic 0003:145F:0212.0053: probe with driver uclogic failed with error -71 [ 329.701435][ T5872] usb 2-1: USB disconnect, device number 60 [ 329.702714][T12025] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 329.883871][T12025] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 329.893019][T12025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.901498][T12025] usb 6-1: Product: syz [ 329.905656][T12025] usb 6-1: Manufacturer: syz [ 329.910225][T12025] usb 6-1: SerialNumber: syz [ 329.916477][T12025] usb 6-1: config 0 descriptor?? [ 330.062991][T17292] usb 3-1: reset high-speed USB device number 43 using dummy_hcd [ 330.101273][ T5887] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 330.126856][T12025] usb 6-1: ignoring: probably an ADSL modem [ 330.228543][T17292] usb 3-1: device firmware changed [ 330.248983][ T5856] usb 3-1: USB disconnect, device number 43 [ 330.261106][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 330.288580][ T5887] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 330.313455][ T5887] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 330.334540][ T5887] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 330.345202][ T5887] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 330.361607][ T5887] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.374848][ T5887] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 330.385029][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.433609][ T5856] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 330.529758][T12025] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 330.571859][ T5810] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 330.610563][ T5887] usb 4-1: GET_CAPABILITIES returned 0 [ 330.615539][ T5856] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 330.617828][ T5887] usbtmc 4-1:16.0: can't read capabilities [ 330.628813][ T5856] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 330.641650][ T5856] usb 3-1: config 0 interface 0 has no altsetting 0 [ 330.650461][ T5856] usb 3-1: string descriptor 0 read error: -22 [ 330.657227][ T5856] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 330.668512][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 330.678425][ T5856] usb 3-1: config 0 descriptor?? [ 330.685830][ T5856] hub 3-1:0.0: bad descriptor, ignoring hub [ 330.699462][ T5856] hub 3-1:0.0: probe with driver hub failed with error -5 [ 330.709974][ T5856] usb 3-1: selecting invalid altsetting 0 [ 330.725809][ T5810] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 330.746380][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.761725][ T5812] Bluetooth: hci4: command tx timeout [ 330.774721][ T5810] usb 2-1: Product: syz [ 330.796217][ T5810] usb 2-1: Manufacturer: syz [ 330.805075][ T5887] usb 6-1: USB disconnect, device number 2 [ 330.821145][ T5810] usb 2-1: SerialNumber: syz [ 330.856289][ T5810] usb 2-1: config 0 descriptor?? [ 330.894278][T12025] usb 4-1: USB disconnect, device number 45 [ 331.052811][ T5922] usb 3-1: USB disconnect, device number 44 [ 331.314821][ T5810] usb 2-1: Firmware: major: 195, minor: 0, hardware type: ATUSB (0) [ 331.591823][ T5810] usb 2-1: failed to fetch extended address, random address set [ 331.655425][ T5810] usb 2-1: USB disconnect, device number 61 [ 331.938858][T17384] input: syz0 as /devices/virtual/input/input61 [ 332.461197][ T5872] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 332.641636][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 332.648371][ T5872] usb 2-1: config 8 has an invalid interface number: 243 but max is 1 [ 332.663045][ T5872] usb 2-1: config 8 has an invalid interface number: 165 but max is 1 [ 332.681117][ T5872] usb 2-1: config 8 has no interface number 0 [ 332.694228][ T5872] usb 2-1: config 8 has no interface number 1 [ 332.721090][ T5872] usb 2-1: config 8 interface 243 has no altsetting 0 [ 332.733705][ T5872] usb 2-1: config 8 interface 165 has no altsetting 0 [ 332.743286][ T5872] usb 2-1: New USB device found, idVendor=0bda, idProduct=b82b, bcdDevice=ac.6e [ 332.753876][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.762208][ T5872] usb 2-1: Product: syz [ 332.766606][ T5872] usb 2-1: Manufacturer: syz [ 332.773334][ T5872] usb 2-1: SerialNumber: syz [ 332.828689][T17423] block nbd1: Unsupported socket: should be TCP or UNIX. [ 332.861448][ T5922] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 333.006344][ T5872] hub 2-1:8.165: Invalid hub with more than one config or interface [ 333.017621][ T5872] hub 2-1:8.165: probe with driver hub failed with error -22 [ 333.032244][ T5872] usb 2-1: USB disconnect, device number 62 [ 333.049583][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.070684][T17435] syz.5.5118 uses obsolete (PF_INET,SOCK_PACKET) [ 333.080421][ T5922] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 333.104400][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.135528][ T5922] usb 1-1: config 0 descriptor?? [ 333.406855][T17452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5125'. [ 333.432682][T17452] netlink: 'syz.3.5125': attribute type 30 has an invalid length. [ 333.471924][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5125'. [ 333.492862][T17457] netlink: 'syz.3.5125': attribute type 30 has an invalid length. [ 333.522523][ T79] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.557215][ T79] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.585094][ T79] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.603343][ T79] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.683826][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 333.756570][ T5922] ath6kl: mismatched byte count 0 vs. expected 12 [ 333.781689][ T5922] ath6kl: Failed to init ath6kl core: -22 [ 333.804482][ T5922] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 333.987017][ T5872] usb 1-1: USB disconnect, device number 62 [ 334.342208][T17504] netlink: 'syz.1.5147': attribute type 8 has an invalid length. [ 334.352009][T17504] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.359246][T17504] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.611206][ T5872] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 334.681720][ T5856] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 334.781313][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 334.792595][ T5872] usb 3-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 334.802713][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.816240][ T5872] usb 3-1: config 0 descriptor?? [ 334.836432][ T5872] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 334.845654][ T5856] usb 4-1: Using ep0 maxpacket: 8 [ 334.854591][ T5856] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.866083][ T5872] ftdi_sio ttyUSB0: unknown device type: 0x256 [ 334.875283][ T5856] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 334.889925][ T5856] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 334.903407][ T5856] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 334.919054][ T5856] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 7 [ 334.933485][ T5856] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 334.943060][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.951300][ T5856] usb 4-1: Product: syz [ 334.955459][ T5856] usb 4-1: Manufacturer: syz [ 334.960047][ T5856] usb 4-1: SerialNumber: syz [ 334.961122][ T5810] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 335.035874][T17537] bond0: entered promiscuous mode [ 335.040954][T17537] bond_slave_0: entered promiscuous mode [ 335.048108][T17537] bond_slave_1: entered promiscuous mode [ 335.056638][T17537] bond0: left promiscuous mode [ 335.061724][T17537] bond_slave_0: left promiscuous mode [ 335.068169][T17537] bond_slave_1: left promiscuous mode [ 335.122055][ T5810] usb 1-1: Using ep0 maxpacket: 8 [ 335.130016][ T5810] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 335.138747][ T5810] usb 1-1: config 179 has no interface number 0 [ 335.145224][ T5810] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 335.156319][ T5872] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 335.181386][ T5810] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 335.193910][ T5810] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 335.194565][ T5856] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 335.205732][ T5810] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 335.213755][ T5856] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 335.235170][ T5810] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 335.248946][ T5810] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 335.258165][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.271432][ T5856] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 335.276464][T17525] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 335.282203][ T5856] usb 4-1: 0:2 : does not exist [ 335.331611][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 335.338917][ T5872] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 335.356680][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.367075][ T5856] usb 4-1: USB disconnect, device number 46 [ 335.413606][ T5872] pvrusb2: Hardware description: Terratec Grabster AV400 [ 335.433790][ T6025] udevd[6025]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.453514][ T5872] pvrusb2: ********** [ 335.457516][ T5872] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 335.467701][ T5872] pvrusb2: Important functionality might not be entirely working. [ 335.477468][ T5872] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 335.491083][ T5872] pvrusb2: ********** [ 335.550919][T12025] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input62 [ 335.609357][ T2341] pvrusb2: Invalid write control endpoint [ 335.621090][ T5810] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 335.669467][ T2341] pvrusb2: Invalid write control endpoint [ 335.680048][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 335.690204][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 335.697894][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 335.710349][ T2341] pvrusb2: Device being rendered inoperable [ 335.716682][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 335.723825][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 335.732888][ T2341] pvrusb2: Attached sub-driver cx25840 [ 335.738377][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 335.756486][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 335.769374][ T5872] usb 1-1: USB disconnect, device number 63 [ 335.769374][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 335.787811][ T5810] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 335.810060][ T5810] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.820440][ T5810] usb 2-1: config 0 interface 0 has no altsetting 0 [ 335.827341][ T5810] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 335.839979][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.852295][ T5810] usb 2-1: config 0 descriptor?? [ 335.863547][T17529] pvrusb2: Attempted to execute control transfer when device not ok [ 335.874425][T12025] usb 6-1: USB disconnect, device number 3 [ 336.266039][ T5810] hid_parser_main: 339 callbacks suppressed [ 336.266063][ T5810] hid-steam 0003:28DE:1102.0054: unknown main item tag 0x6 [ 336.279693][ T5810] hid-steam 0003:28DE:1102.0054: item fetching failed at offset 3/5 [ 336.289353][ T5810] hid-steam 0003:28DE:1102.0054: steam_probe:parse of hid interface failed [ 336.298963][ T5810] hid-steam 0003:28DE:1102.0054: probe with driver hid-steam failed with error -22 [ 336.496731][ T5810] usb 2-1: USB disconnect, device number 63 [ 336.517735][ T29] audit: type=1400 audit(1104.492:803): avc: denied { mounton } for pid=17564 comm="syz.5.5176" path="/26/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 336.673244][ T5872] kernel read not supported for file /dsp1 (pid: 5872 comm: kworker/1:7) [ 336.987263][T17591] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5189'. [ 337.283725][T17610] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5198'. [ 337.301313][T17610] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5198'. [ 337.401905][ T5922] usb 3-1: USB disconnect, device number 45 [ 337.408990][ T5922] ftdi_sio 3-1:0.0: device disconnected [ 337.664330][ T29] audit: type=1400 audit(1105.632:804): avc: denied { ioctl } for pid=17635 comm="syz.1.5211" path="socket:[57125]" dev="sockfs" ino=57125 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 337.745820][T17640] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5213'. [ 337.747918][T17631] raw_sendmsg: syz.0.5209 forgot to set AF_INET. Fix it! [ 338.131393][ T5922] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 338.146246][T17659] binder: 17658:17659 ioctl c0306201 200000000640 returned -22 [ 338.292983][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.308400][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.330630][ T5922] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 338.349206][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.366689][ T5922] usb 2-1: config 0 descriptor?? [ 338.511987][ T5872] kernel read not supported for file /dsp1 (pid: 5872 comm: kworker/1:7) [ 338.601111][ T5856] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 338.732603][T17693] bridge0: entered promiscuous mode [ 338.738902][T17693] bridge0: port 3(vlan2) entered blocking state [ 338.768029][ T5856] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 338.784928][ T5856] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 338.797925][T17693] bridge0: port 3(vlan2) entered disabled state [ 338.812607][ T5922] arvo 0003:1E7D:30D4.0055: unknown main item tag 0x0 [ 338.817850][T17693] vlan2: entered allmulticast mode [ 338.819421][ T5922] arvo 0003:1E7D:30D4.0055: unknown main item tag 0x0 [ 338.824625][ T5856] usb 3-1: config 8 has no interface number 0 [ 338.824667][ T5856] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 338.826495][ T5856] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 338.870891][T17693] bridge0: entered allmulticast mode [ 338.875687][ T5922] arvo 0003:1E7D:30D4.0055: unknown main item tag 0x0 [ 338.886011][T17693] vlan2: left allmulticast mode [ 338.891371][T17693] bridge0: left allmulticast mode [ 338.901282][ T5922] arvo 0003:1E7D:30D4.0055: unknown main item tag 0x0 [ 338.907129][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.918755][T17693] bridge0: left promiscuous mode [ 338.932570][ T5922] arvo 0003:1E7D:30D4.0055: unknown main item tag 0x0 [ 338.939668][ T5856] usb 3-1: Product: syz [ 338.950877][ T5856] usb 3-1: Manufacturer: syz [ 338.953977][ T5922] arvo 0003:1E7D:30D4.0055: unknown main item tag 0x0 [ 338.961079][ T5856] usb 3-1: SerialNumber: syz [ 338.982431][ T5922] arvo 0003:1E7D:30D4.0055: unknown main item tag 0x0 [ 339.003281][ T5922] arvo 0003:1E7D:30D4.0055: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 339.226472][ T5856] usb 3-1: USB disconnect, device number 46 [ 339.299905][T17713] input: syz1 as /devices/virtual/input/input63 [ 339.366935][ T5810] usb 2-1: USB disconnect, device number 64 [ 339.921456][ T5810] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 340.093111][ T5810] usb 6-1: Using ep0 maxpacket: 8 [ 340.118037][ T5810] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 340.137450][ T5810] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 340.152757][ T5810] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 340.171115][ T5810] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 340.198034][ T5810] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.226113][ T5810] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 340.250323][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.271181][ T5922] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 340.434322][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 340.451534][ T5922] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 340.480140][ T5922] usb 3-1: config 179 has no interface number 0 [ 340.505122][ T5810] usb 6-1: GET_CAPABILITIES returned 0 [ 340.510706][ T5922] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 340.532170][ T5810] usbtmc 6-1:16.0: can't read capabilities [ 340.543749][ T5922] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 340.579263][ T5922] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 340.614704][ T5922] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 340.641677][ T5922] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 340.666695][ T5922] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 340.697293][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.724693][T17759] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 340.747058][ T5810] usb 6-1: USB disconnect, device number 4 [ 341.011406][ T5810] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input64 [ 341.225100][ T5856] usb 3-1: USB disconnect, device number 47 [ 341.225116][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 341.617366][ T29] audit: type=1400 audit(1109.592:805): avc: denied { kexec_image_load } for pid=17810 comm="syz.3.5266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 341.703291][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5275'. [ 341.719203][T17831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5275'. [ 341.988653][T17853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17853 comm=syz.2.5285 [ 342.031858][ T5810] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 342.081802][ T5856] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 342.193123][ T5810] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 342.201733][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.218392][ T5810] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 342.229493][ T5810] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 342.238124][ T5810] usb 6-1: Manufacturer: syz [ 342.244903][ T5810] usb 6-1: config 0 descriptor?? [ 342.251228][ T5856] usb 2-1: Using ep0 maxpacket: 32 [ 342.269888][ T5856] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 342.278700][ T5856] usb 2-1: config 0 has no interface number 0 [ 342.291537][ T5856] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 342.300629][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.309274][ T5856] usb 2-1: Product: syz [ 342.311091][ T5810] rc_core: IR keymap rc-hauppauge not found [ 342.313575][ T5856] usb 2-1: Manufacturer: syz [ 342.319465][ T5810] Registered IR keymap rc-empty [ 342.324093][ T5856] usb 2-1: SerialNumber: syz [ 342.339527][ T5810] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 342.342139][ T5856] usb 2-1: config 0 descriptor?? [ 342.354325][ T5810] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input65 [ 342.372934][ T5856] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 342.411131][ T5871] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 342.418910][ T5872] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 342.496389][T17839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.507915][T17839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.523152][ T792] usb 6-1: USB disconnect, device number 5 [ 342.586506][ T5856] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 342.596926][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.608415][ T5871] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 342.616815][ T5871] usb 1-1: config 0 has no interface number 0 [ 342.625725][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.636214][ T5856] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 342.646038][ T5872] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 342.657643][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.668108][ T5871] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 342.678728][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.688666][ T5871] usb 1-1: Product: syz [ 342.693282][ T5871] usb 1-1: Manufacturer: syz [ 342.698782][ T5872] usb 3-1: config 0 descriptor?? [ 342.705297][ T5871] usb 1-1: SerialNumber: syz [ 342.715517][ T5871] usb 1-1: config 0 descriptor?? [ 342.930198][ T5871] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 342.940716][ T5871] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 342.951794][ T5871] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 342.959879][ T5871] usb 1-1: media controller created [ 342.970406][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.001480][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 343.002180][ T5810] usb 2-1: USB disconnect, device number 65 [ 343.018704][ T5810] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 343.034342][ T5810] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 343.046047][ T5810] quatech2 2-1:0.51: device disconnected [ 343.130494][ T5872] playstation 0003:054C:0DF2.0056: unknown main item tag 0x0 [ 343.148927][ T5872] playstation 0003:054C:0DF2.0056: unknown main item tag 0x0 [ 343.160391][ T5872] playstation 0003:054C:0DF2.0056: unknown main item tag 0x0 [ 343.172635][ T5872] playstation 0003:054C:0DF2.0056: unknown main item tag 0x0 [ 343.184858][ T5872] playstation 0003:054C:0DF2.0056: unknown main item tag 0x0 [ 343.204662][ T5872] playstation 0003:054C:0DF2.0056: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 343.421946][ T5871] usb 1-1: USB disconnect, device number 64 [ 343.534001][ T5872] playstation 0003:054C:0DF2.0056: Failed to retrieve feature with reportID 32: -71 [ 343.558676][ T5872] playstation 0003:054C:0DF2.0056: Failed to retrieve DualSense firmware info: -71 [ 343.571506][ T5872] playstation 0003:054C:0DF2.0056: Failed to get firmware info from DualSense [ 343.598589][ T5872] playstation 0003:054C:0DF2.0056: Failed to create dualsense. [ 343.624130][ T5872] playstation 0003:054C:0DF2.0056: probe with driver playstation failed with error -71 [ 343.676356][ T5872] usb 3-1: USB disconnect, device number 48 [ 343.838745][T17904] netlink: 236 bytes leftover after parsing attributes in process `syz.5.5309'. [ 343.852190][T17904] netlink: 236 bytes leftover after parsing attributes in process `syz.5.5309'. [ 343.911474][T17902] loop6: detected capacity change from 0 to 7 [ 343.928582][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 343.938205][ C0] buffer_io_error: 28 callbacks suppressed [ 343.938218][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 343.965394][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 343.975047][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 343.984373][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 343.993969][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 344.002831][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.012437][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 344.022751][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.032346][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 344.041910][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.051552][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 344.067420][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.077144][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 344.085043][T17902] ldm_validate_partition_table(): Disk read failed. [ 344.091885][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.101491][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 344.109722][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.119407][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 344.127663][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.137250][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 344.151942][T17902] Dev loop6: unable to read RDB block 0 [ 344.178220][T17902] loop6: unable to read partition table [ 344.185032][T17902] loop6: partition table beyond EOD, truncated [ 344.200839][T17902] loop_reread_partitions: partition scan of loop6 (░┤[{B╤╖Н╢ЮM▄╛`*╬юZ┤╟5Бб]Пz(┐┼дю4+hG╦pXППД╧gm [ 344.200839][T17902] №аЄцЇ╪.B╩L_se╘) failed (rc=-5) [ 344.300223][ T5179] ldm_validate_partition_table(): Disk read failed. [ 344.309393][ T5179] Dev loop6: unable to read RDB block 0 [ 344.332789][ T5179] loop6: unable to read partition table [ 344.351494][ T5179] loop6: partition table beyond EOD, truncated [ 344.428014][T17924] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.5318'. [ 344.791368][ T5871] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 344.916118][T17950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5330'. [ 344.954558][ T5871] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 344.963043][T17950] hsr_slave_0: left promiscuous mode [ 344.978206][ T5871] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 344.995498][ T5871] usb 3-1: config 0 has no interface number 0 [ 345.012736][ T5871] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 345.047695][ T5871] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 8 [ 345.069270][ T5871] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 345.080703][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.092280][ T5871] usb 3-1: config 0 descriptor?? [ 345.099222][T17927] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 345.107022][T17950] hsr_slave_1: left promiscuous mode [ 345.591173][ T5872] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 345.661256][ T792] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 345.681728][ T5856] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 345.738034][ T5871] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input66 [ 345.762971][ T5872] usb 2-1: config 9 interface 0 has no altsetting 0 [ 345.774086][ T5872] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 345.784347][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.792623][ T5872] usb 2-1: Product: syz [ 345.796893][ T5872] usb 2-1: Manufacturer: syz [ 345.801741][ T5872] usb 2-1: SerialNumber: syz [ 345.831220][ T5856] usb 1-1: Using ep0 maxpacket: 32 [ 345.836563][ T792] usb 6-1: Using ep0 maxpacket: 32 [ 345.843606][ T792] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 345.851980][ T5856] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 345.861924][ T792] usb 6-1: config 0 has no interface number 0 [ 345.868028][ T792] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 345.879406][ T792] usb 6-1: config 0 interface 85 has no altsetting 0 [ 345.888108][ T5856] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 345.897692][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 345.906251][ T5856] usb 1-1: Product: syz [ 345.910555][ T792] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 345.919735][ T5856] usb 1-1: Manufacturer: syz [ 345.924394][ T5856] usb 1-1: SerialNumber: syz [ 345.930208][ T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.939538][ T5856] usb 1-1: config 0 descriptor?? [ 345.944588][ T792] usb 6-1: Product: syz [ 345.948807][ T792] usb 6-1: Manufacturer: syz [ 345.953858][ T792] usb 6-1: SerialNumber: syz [ 345.961780][T17974] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 345.962500][ T792] usb 6-1: config 0 descriptor?? [ 345.990193][ T5922] usb 3-1: USB disconnect, device number 49 [ 345.990334][ C1] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 346.205500][ T5922] usb 1-1: USB disconnect, device number 65 [ 346.421768][ T5872] snd-usb-caiaq 2-1:9.0: invalid EPs [ 346.427492][ T5872] usb 2-1: unable to init card! (ret=-22) [ 346.434464][ T5872] snd-usb-caiaq 2-1:9.0: probe with driver snd-usb-caiaq failed with error -22 [ 346.579586][ T792] appletouch 6-1:0.85: Geyser mode initialized. [ 346.593524][ T792] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input67 [ 346.614044][T17986] input: syz1 as /devices/virtual/input/input68 [ 346.647993][ T5810] usb 2-1: USB disconnect, device number 66 [ 346.790097][ T5922] usb 6-1: USB disconnect, device number 6 [ 346.811952][ T5922] appletouch 6-1:0.85: input: appletouch disconnected [ 346.973961][T17996] input: syz1 as /devices/virtual/input/input69 [ 347.179249][T18006] netlink: 'syz.3.5356': attribute type 9 has an invalid length. [ 347.196070][T18006] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5356'. [ 347.356744][ T5872] kernel write not supported for file /vbi1 (pid: 5872 comm: kworker/1:7) [ 347.521446][ T792] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 347.632035][ T5922] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 347.661181][ T5810] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 347.682507][ T792] usb 1-1: Using ep0 maxpacket: 16 [ 347.689499][ T792] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.700911][ T792] usb 1-1: config 0 interface 0 has no altsetting 0 [ 347.707929][ T792] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 347.717558][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.732476][ T792] usb 1-1: config 0 descriptor?? [ 347.792828][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 347.799572][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 347.812197][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 347.823925][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 347.834026][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 347.845855][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 347.862495][ T5810] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 347.875513][ T5810] usb 6-1: config 0 interface 0 has no altsetting 0 [ 347.885259][ T5810] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 347.890734][T18046] kvm: kvm [18045]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x4000003e) = 0x100000000 [ 347.895085][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 347.916012][ T5922] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 347.925734][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.934363][ T5922] usb 4-1: Product: syz [ 347.938571][ T5810] usb 6-1: Product: syz [ 347.942803][ T5922] usb 4-1: Manufacturer: syz [ 347.947613][ T5810] usb 6-1: Manufacturer: syz [ 347.952399][ T5922] usb 4-1: SerialNumber: syz [ 347.957018][ T5810] usb 6-1: SerialNumber: syz [ 347.968676][ T5810] usb 6-1: config 0 descriptor?? [ 347.974041][ T5922] usb 4-1: config 0 descriptor?? [ 347.979877][T18024] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 347.995967][ T5810] usb 6-1: selecting invalid altsetting 0 [ 348.149643][T18053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5378'. [ 348.152769][ T792] mcp2221 0003:04D8:00DD.0057: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 348.208941][T18056] netlink: 'syz.1.5379': attribute type 7 has an invalid length. [ 348.228537][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.249234][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.279683][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.289477][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.305455][ T792] usb 6-1: USB disconnect, device number 7 [ 348.420447][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 348.427301][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 348.437633][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 348.444923][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 348.452249][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 348.458581][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 348.465975][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 348.472585][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 348.479876][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 348.487552][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 348.496006][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 348.503599][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 348.510044][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 348.517028][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 348.517907][T18063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.523716][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 348.546507][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 348.561440][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 348.571560][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 348.582493][ T5922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 348.588508][ T5922] input input70: Timeout waiting for response from device. [ 348.606894][ T5887] usb 1-1: USB disconnect, device number 66 [ 348.621409][ T5922] usb 4-1: USB disconnect, device number 47 [ 348.747439][T18068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.922876][T18076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5388'. [ 349.362001][ T5887] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 349.376033][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5399'. [ 349.385245][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5399'. [ 349.395313][T18097] netlink: 'syz.0.5399': attribute type 12 has an invalid length. [ 349.408674][T18097] netlink: 'syz.0.5399': attribute type 11 has an invalid length. [ 349.543826][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 349.550556][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.562578][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.573038][ T5887] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 349.582188][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.632028][ T5887] usb 3-1: config 0 descriptor?? [ 349.651360][ T5872] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 349.751112][ T29] audit: type=1400 audit(1117.722:806): avc: denied { write } for pid=18114 comm="syz.5.5407" path="socket:[58299]" dev="sockfs" ino=58299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 349.824679][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 349.843057][ T5872] usb 2-1: config 9 has an invalid interface number: 221 but max is 1 [ 349.863455][ T5872] usb 2-1: config 9 has an invalid interface number: 221 but max is 1 [ 349.876332][T18083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.901873][ T5872] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 349.927530][T18083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.941459][ T5872] usb 2-1: config 9 has no interface number 0 [ 349.962821][ T5872] usb 2-1: config 9 interface 221 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 349.997469][ T5872] usb 2-1: config 9 interface 221 has no altsetting 0 [ 350.017060][ T5872] usb 2-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 350.030983][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.049872][ T5872] usb 2-1: Product: syz [ 350.054953][ T5872] usb 2-1: Manufacturer: syz [ 350.059554][ T5872] usb 2-1: SerialNumber: syz [ 350.164826][ T5887] hid-multitouch 0003:1FD2:6007.0058: unknown main item tag 0x0 [ 350.184506][ T5887] hid-multitouch 0003:1FD2:6007.0058: unknown main item tag 0x4 [ 350.221103][ T5887] hid-multitouch 0003:1FD2:6007.0058: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 350.240688][T18129] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.248265][T18129] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.367417][ T5856] usb 3-1: USB disconnect, device number 50 [ 350.411432][ T5872] usb 2-1: USB disconnect, device number 67 [ 350.473492][ T6025] udevd[6025]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:9.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.763228][T18145] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5418'. [ 350.766769][T18147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5420'. [ 350.772442][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5418'. [ 350.898951][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5423'. [ 351.461233][ T5922] kernel read not supported for file /dsp1 (pid: 5922 comm: kworker/0:7) [ 352.001249][ T5887] kernel read not supported for file /adsp1 (pid: 5887 comm: kworker/0:4) [ 352.192127][T18220] overlayfs: conflicting lowerdir path [ 352.444691][ T29] audit: type=1400 audit(1120.412:807): avc: denied { read } for pid=18230 comm="syz.2.5460" path="socket:[59693]" dev="sockfs" ino=59693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 352.651953][ T29] audit: type=1400 audit(1120.632:808): avc: denied { bind } for pid=18242 comm="syz.5.5464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 352.951070][ T29] audit: type=1400 audit(1120.922:809): avc: denied { connect } for pid=18263 comm="syz.3.5475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 353.461354][ T5887] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 353.611102][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 353.617556][ T5887] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 353.625732][ T5887] usb 1-1: config 0 has no interface number 0 [ 353.632019][ T5887] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.643017][ T5887] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.653189][ T5887] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 353.662272][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.671987][ T5887] usb 1-1: config 0 descriptor?? [ 354.285726][ T5887] uclogic 0003:28BD:0071.0059: pen parameters not found [ 354.294687][ T5887] uclogic 0003:28BD:0071.0059: interface is invalid, ignoring [ 354.423457][T18328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5504'. [ 354.436847][T18328] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5504'. [ 354.449498][T18328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5504'. [ 354.458731][T18328] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5504'. [ 354.531426][ T5856] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 354.538630][ T5887] usb 1-1: USB disconnect, device number 67 [ 354.638240][ T29] audit: type=1400 audit(1122.612:810): avc: denied { recv } for pid=5807 comm="syz-executor" saddr=10.128.0.169 src=37694 daddr=10.128.0.57 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 354.692649][ T5856] usb 4-1: Using ep0 maxpacket: 32 [ 354.705388][ T5856] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 354.714152][ T5856] usb 4-1: config 0 has no interface number 0 [ 354.723018][ T5856] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 354.732403][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.742190][ T5856] usb 4-1: Product: syz [ 354.746660][ T5856] usb 4-1: Manufacturer: syz [ 354.769236][ T5856] usb 4-1: SerialNumber: syz [ 354.779663][ T5856] usb 4-1: config 0 descriptor?? [ 354.789854][ T5856] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 354.931418][ T5872] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 355.004236][ T5856] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 355.024319][ T5856] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 355.112450][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 355.120368][ T5872] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.140962][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 355.163052][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 355.173728][ T5872] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 355.214413][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.246561][ T5872] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 355.263931][T18362] 9p: Unknown uid 00000000004294967295 [ 355.277515][ T5872] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 355.287604][ T5872] usb 2-1: Manufacturer: syz [ 355.313754][ T5872] usb 2-1: config 0 descriptor?? [ 355.358454][T18368] netlink: 'syz.5.5520': attribute type 1 has an invalid length. [ 355.376531][T18368] netlink: 212 bytes leftover after parsing attributes in process `syz.5.5520'. [ 355.473055][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 355.483039][ T792] usb 4-1: USB disconnect, device number 48 [ 355.506211][ T792] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 355.546275][ T792] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 355.568831][ T792] quatech2 4-1:0.51: device disconnected [ 355.661519][ T5872] rc_core: IR keymap rc-hauppauge not found [ 355.667831][ T5872] Registered IR keymap rc-empty [ 355.677741][ T5872] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 355.711640][ T5872] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 355.729041][T18382] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.736238][T18382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.753179][ T5872] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 355.754416][T18382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.774916][T18382] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.783043][ T5872] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input72 [ 355.804869][ T5872] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 355.812870][T18382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.831626][ T5872] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 355.851743][ T5872] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 355.901155][ T5872] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 355.935849][T18385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.956746][T18395] tipc: Started in network mode [ 355.962802][T18395] tipc: Node identity ff, cluster identity 4711 [ 355.964865][ T5872] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 355.979288][T18395] tipc: Enabling of bearer rejected, failed to enable media [ 355.993636][ T5872] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.031234][ T5872] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.061859][ T5872] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.087265][T18400] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5535'. [ 356.102490][ T5872] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.132281][ T5872] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.171163][ T5872] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 356.179192][ T5872] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 356.219862][ T5872] usb 2-1: USB disconnect, device number 68 [ 356.361146][ T5887] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 356.521279][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 356.554798][ T5887] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 356.570887][ T5887] usb 3-1: config 0 has no interface number 0 [ 356.599011][ T5887] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 356.625545][ T5887] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 356.643688][ T5887] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 356.678610][ T5887] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 356.709568][ T5887] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 356.738495][ T5887] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 356.763118][ T5887] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 356.790755][ T5887] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25446, setting to 1024 [ 356.825396][ T5887] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 356.857166][ T5887] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.894989][ T5887] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 356.905545][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.925729][ T5887] usb 3-1: Product: syz [ 356.930470][ T5887] usb 3-1: Manufacturer: syz [ 356.938513][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5559'. [ 356.938594][ T5887] usb 3-1: SerialNumber: syz [ 356.972627][ T5887] usb 3-1: config 0 descriptor?? [ 356.994515][T18401] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.011836][T18401] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.028907][ T5887] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 357.050917][ T5887] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 357.118503][ T5887] scsi host1: microtekX6 [ 357.123819][T18463] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5564'. [ 357.282295][ T5872] usb 3-1: USB disconnect, device number 51 [ 357.291183][ T2479] microtek usb (rev 0.4.3): error -19 submitting URB [ 357.562878][T18483] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5572'. [ 357.651435][ T5856] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 357.807639][ T5856] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 357.820160][ T5856] usb 1-1: config 0 has no interface number 0 [ 357.835756][ T5856] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 357.859350][ T5856] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.876275][ T5856] usb 1-1: config 0 interface 1 has no altsetting 0 [ 357.885793][ T5856] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 357.897167][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.908430][ T5856] usb 1-1: config 0 descriptor?? [ 358.051231][ T5887] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 358.212397][ T5887] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 358.219850][ T5887] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 358.251234][ T5887] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.281117][ T5887] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 358.294953][ T5887] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 358.315489][ T5887] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 358.323026][ T5887] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 358.337448][ T5887] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.349555][ T5887] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 358.363077][ T5887] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 358.375920][ T5887] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 358.391267][ T5887] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 358.414045][ T5887] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.436934][ T5887] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 358.450803][ T5887] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 358.465171][ T5887] usb 6-1: string descriptor 0 read error: -22 [ 358.472302][ T5887] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 358.492418][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.532599][ T5887] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 358.533129][ T5856] input: HID 2179:0053 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:2179:0053.005A/input/input73 [ 358.642445][ T5856] uclogic 0003:2179:0053.005A: input,hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.0-1/input1 [ 358.728551][ T5856] usb 1-1: USB disconnect, device number 68 [ 358.773394][T18540] fido_id[18540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 358.811004][ T5887] usb 6-1: USB disconnect, device number 8 [ 358.944769][T18548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5603'. [ 359.473307][ T29] audit: type=1400 audit(1127.442:811): avc: denied { bind } for pid=18572 comm="syz.2.5614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 359.620541][T18581] can0: slcan on ttyS3. [ 359.713156][T18581] can0 (unregistered): slcan off ttyS3. [ 359.810328][T18592] __nla_validate_parse: 1 callbacks suppressed [ 359.810345][T18592] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5622'. [ 359.836438][T18592] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5622'. [ 359.953985][T18589] nbd1: detected capacity change from 0 to 63 [ 359.979130][ T5812] block nbd1: Receive control failed (result -32) [ 359.983509][ T6025] block nbd1: Send control failed (result -32) [ 359.988828][ T5805] block nbd1: Receive control failed (result -32) [ 360.018510][ T6025] block nbd1: Request send failed, requeueing [ 360.059174][ T2479] block nbd1: Dead connection, failed to find a fallback [ 360.068587][ T2479] block nbd1: shutting down sockets [ 360.074645][ T2479] blk_print_req_error: 151 callbacks suppressed [ 360.074660][ T2479] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.092777][ T2479] buffer_io_error: 150 callbacks suppressed [ 360.092794][ T2479] Buffer I/O error on dev nbd1, logical block 0, async page read [ 360.107489][ T6025] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.118062][ T6025] Buffer I/O error on dev nbd1, logical block 1, async page read [ 360.126288][ T6025] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.144307][ T6025] Buffer I/O error on dev nbd1, logical block 2, async page read [ 360.154494][ T6025] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.173287][ T6025] Buffer I/O error on dev nbd1, logical block 3, async page read [ 360.191285][ T6025] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.200788][ T6025] Buffer I/O error on dev nbd1, logical block 0, async page read [ 360.221184][ T6025] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.230709][ T6025] Buffer I/O error on dev nbd1, logical block 1, async page read [ 360.257731][ T6025] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.277803][ T6025] Buffer I/O error on dev nbd1, logical block 2, async page read [ 360.307881][ T6025] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.311154][T18617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5630'. [ 360.361136][ T6025] Buffer I/O error on dev nbd1, logical block 3, async page read [ 360.368969][ T6025] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.390092][ T6025] Buffer I/O error on dev nbd1, logical block 0, async page read [ 360.404303][ T6025] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.415630][ T6025] Buffer I/O error on dev nbd1, logical block 1, async page read [ 360.424011][ T6025] ldm_validate_partition_table(): Disk read failed. [ 360.432269][ T6025] Dev nbd1: unable to read RDB block 0 [ 360.438255][ T6025] nbd1: unable to read partition table [ 360.480799][ T6025] ldm_validate_partition_table(): Disk read failed. [ 360.498369][ T6025] Dev nbd1: unable to read RDB block 0 [ 360.513328][ T6025] nbd1: unable to read partition table [ 360.622147][ T5871] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 360.622147][ T5922] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 360.768216][T18644] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5640'. [ 360.781672][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 360.789154][ T5871] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 360.812531][ T5922] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 360.819130][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.847273][ T5922] usb 2-1: config 0 has no interface number 0 [ 360.851421][ T5871] usb 1-1: config 0 descriptor?? [ 360.866057][ T5922] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 360.881066][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.922100][ T5922] usb 2-1: Product: syz [ 360.926324][ T5922] usb 2-1: Manufacturer: syz [ 360.942274][ T5922] usb 2-1: SerialNumber: syz [ 360.966558][ T5922] usb 2-1: config 0 descriptor?? [ 360.990794][T18656] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5643'. [ 361.068690][ T5871] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 361.101837][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 361.161574][ T5871] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 361.176011][ T5871] usb 1-1: media controller created [ 361.197100][ T5922] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 361.204018][T18665] bridge_slave_1: invalid flags given to default FDB implementation [ 361.219470][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.249298][ T5922] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 361.306066][ T5871] az6027: usb out operation failed. (-71) [ 361.311985][ T5922] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 361.312036][ T5922] usb 2-1: media controller created [ 361.319498][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.349662][ T5871] az6027: usb out operation failed. (-71) [ 361.368190][ T5871] stb0899_attach: Driver disabled by Kconfig [ 361.409263][ T5871] az6027: no front-end attached [ 361.409263][ T5871] [ 361.435413][ T5871] az6027: usb out operation failed. (-71) [ 361.453801][ T5871] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 361.454520][ T5922] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 361.487007][ T5871] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input74 [ 361.539868][ T5871] dvb-usb: schedule remote query interval to 400 msecs. [ 361.549454][ T5922] usb 2-1: USB disconnect, device number 69 [ 361.555715][ T5871] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 361.603607][ T5871] usb 1-1: USB disconnect, device number 69 [ 361.675525][ T5871] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 362.045688][T18698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5659'. [ 362.505351][ T5805] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 362.590499][T18730] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5674'. [ 362.731289][T18734] block nbd2: server does not support multiple connections per device. [ 362.741990][T18734] block nbd2: shutting down sockets [ 362.804467][T18739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5679'. [ 362.815339][ T5856] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 362.825918][T18739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5679'. [ 362.907125][T18745] overlayfs: conflicting options: userxattr,metacopy=on [ 362.981749][ T5856] usb 4-1: Using ep0 maxpacket: 32 [ 362.994335][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.011688][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.031490][ T5856] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 363.042836][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.053255][ T5856] usb 4-1: config 0 descriptor?? [ 363.062239][ T5856] hub 4-1:0.0: USB hub found [ 363.171886][T18760] kvm: kvm [18758]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xeb7 [ 363.283444][ T5856] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 363.551173][ T5922] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 363.687886][ T5856] hid-generic 0003:046D:C31C.005B: item fetching failed at offset 0/1 [ 363.707817][ T5856] hid-generic 0003:046D:C31C.005B: probe with driver hid-generic failed with error -22 [ 363.718895][ T5922] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 363.740129][ T29] audit: type=1400 audit(1387.714:812): avc: denied { map } for pid=18793 comm="syz.0.5705" path="socket:[62219]" dev="sockfs" ino=62219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 363.759068][ T5922] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.801100][ T5922] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 363.810118][ T5922] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.825212][ T5922] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 363.834691][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 363.843694][ T5922] usb 3-1: Product: syz [ 363.848009][ T5922] usb 3-1: Manufacturer: syz [ 363.858354][ T5922] cdc_wdm 3-1:1.0: skipping garbage [ 363.863715][ T5922] cdc_wdm 3-1:1.0: skipping garbage [ 363.870787][ T5922] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 363.878796][ T5922] cdc_wdm 3-1:1.0: Unknown control protocol [ 364.022452][ T5871] usb 4-1: USB disconnect, device number 49 [ 364.601375][ T5871] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 364.710997][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 364.729659][T18838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5722'. [ 364.771555][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 364.783921][ T5871] usb 6-1: unable to get BOS descriptor or descriptor too short [ 364.801946][ T5871] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 364.809549][ T5871] usb 6-1: can't read configurations, error -71 [ 365.153333][T18857] vcan0: tx address claim with dest, not broadcast [ 365.570495][T18878] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5741'. [ 365.926511][T18901] No memory to map [ 365.935145][ T29] audit: type=1400 audit(1389.904:813): avc: denied { execute } for pid=18898 comm="syz.3.5751" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 366.091279][ T5871] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 366.208723][T18908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5754'. [ 366.273483][ T5871] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 366.285995][ T5871] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 366.307065][ T5871] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 366.328022][ T5871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 366.339663][ T5871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 366.359992][ T5856] usb 3-1: USB disconnect, device number 52 [ 366.404427][ T5871] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 366.427203][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 366.437351][ T5871] usb 1-1: Product: syz [ 366.443247][ T5871] usb 1-1: Manufacturer: syz [ 366.462285][ T5871] cdc_wdm 1-1:1.0: skipping garbage [ 366.472704][ T5871] cdc_wdm 1-1:1.0: skipping garbage [ 366.514775][ T5871] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 366.521533][ T5871] cdc_wdm 1-1:1.0: Unknown control protocol [ 366.556249][T18916] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5758'. [ 366.583957][T18918] 9p: Unknown access argument A: -22 [ 366.920162][ T5856] usb 1-1: USB disconnect, device number 70 [ 366.985084][ T5871] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 367.174030][ T5871] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.207915][ T5871] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.243633][ T5871] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 367.274906][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 367.300214][ T5871] usb 6-1: SerialNumber: syz [ 367.328332][ T5871] usb 6-1: 0:2 : does not exist [ 367.430558][T18959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5771'. [ 367.465325][T18959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5771'. [ 367.711844][T12017] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 367.737083][ T5871] usb 6-1: USB disconnect, device number 11 [ 367.770625][ T29] audit: type=1400 audit(1391.734:814): avc: denied { create } for pid=18974 comm="syz.0.5777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 367.865947][ T29] audit: type=1800 audit(1391.844:815): pid=18982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.5779" name="bus" dev="tmpfs" ino=6553 res=0 errno=0 [ 367.911353][T12017] usb 2-1: config 2 has an invalid interface number: 97 but max is 0 [ 367.919469][T12017] usb 2-1: config 2 has no interface number 0 [ 367.931127][T12017] usb 2-1: config 2 interface 97 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 367.982530][T12017] usb 2-1: config 2 interface 97 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 64 [ 368.013827][T12017] usb 2-1: config 2 interface 97 has no altsetting 0 [ 368.036230][T12017] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 368.061172][T12017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.069234][T12017] usb 2-1: Product: syz [ 368.083320][T12017] usb 2-1: Manufacturer: syz [ 368.087950][T12017] usb 2-1: SerialNumber: syz [ 368.103814][T18962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 368.116191][T18962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 368.551382][ T5871] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 368.554610][T12017] usb-storage 2-1:2.97: USB Mass Storage device detected [ 368.568206][T12017] usb-storage 2-1:2.97: Quirks match for vid 04e6 pid 000b: 4 [ 368.671412][ T792] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 368.701443][ T5871] usb 6-1: Using ep0 maxpacket: 16 [ 368.708046][ T5871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.719299][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 368.730292][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 368.740304][ T5871] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 368.750247][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.764684][ T5871] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 368.771303][T12017] scsi host1: usb-storage 2-1:2.97 [ 368.773793][ T5871] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 368.790171][ T5871] usb 6-1: Manufacturer: syz [ 368.804671][ T5871] usb 6-1: config 0 descriptor?? [ 368.852825][ T792] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 368.864776][ T792] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 368.878568][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.899223][ T792] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 368.992627][T12017] usb 2-1: USB disconnect, device number 70 [ 369.061397][ T5871] rc_core: IR keymap rc-hauppauge not found [ 369.067470][ T5871] Registered IR keymap rc-empty [ 369.074295][ T5871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 369.101175][ T5871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 369.122282][ T5871] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 369.138483][ T5871] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input75 [ 369.153733][ T5871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 369.191604][ T5871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 369.221976][ T5871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 369.241546][ T5871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 369.271357][ T5871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 369.306792][ T5871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 369.331605][ T5871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 369.373662][ T5871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 369.391228][ T5871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 369.411998][ T5871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 369.416419][T19045] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5803'. [ 369.452935][ T5871] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 369.474824][ T5871] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 369.501774][ T5871] usb 6-1: USB disconnect, device number 12 [ 369.673975][T19060] netlink: 'syz.1.5809': attribute type 12 has an invalid length. [ 369.683707][T19060] netlink: 'syz.1.5809': attribute type 29 has an invalid length. [ 369.692096][T19060] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5809'. [ 369.701822][T19060] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5809'. [ 369.801933][T19064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5812'. [ 369.816492][T19064] ipvlan2: entered allmulticast mode [ 369.822204][T19064] syz_tun: entered allmulticast mode [ 369.831906][ T5856] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 369.954762][ T792] stv0680 1-1:4.0: Could not get descriptor 0200 [ 369.994519][ T5856] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 370.007010][ T5856] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.021462][ T5856] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 370.034064][ T5856] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.053160][ T5856] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 370.073981][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 370.082686][ T5856] usb 3-1: Product: syz [ 370.097151][ T5856] usb 3-1: Manufacturer: syz [ 370.144964][ T5856] cdc_wdm 3-1:1.0: skipping garbage [ 370.160436][ T5856] cdc_wdm 3-1:1.0: skipping garbage [ 370.166717][ T792] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 370.189634][ T792] stv0680 1-1:4.0: last error: 53, command = 0x2 [ 370.209935][ T5856] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 370.222365][ T792] usb 1-1: USB disconnect, device number 71 [ 370.228376][ T5856] cdc_wdm 3-1:1.0: Unknown control protocol [ 370.369128][T12017] usb 3-1: USB disconnect, device number 53 [ 370.557793][T19096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5823'. [ 370.785233][T19110] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5830'. [ 370.851507][ T792] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 370.991151][ T5856] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 371.001150][ T792] usb 4-1: Using ep0 maxpacket: 32 [ 371.010034][ T792] usb 4-1: unable to get BOS descriptor or descriptor too short [ 371.020095][ T792] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 33491, setting to 1024 [ 371.048924][ T792] usb 4-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 371.068934][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.078878][ T792] usb 4-1: Product: syz [ 371.088110][ T792] usb 4-1: Manufacturer: syz [ 371.099551][ T792] usb 4-1: SerialNumber: syz [ 371.155221][ T5856] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 371.156454][ T29] audit: type=1400 audit(1395.134:816): avc: denied { ioctl } for pid=19127 comm="syz.2.5838" path="socket:[63847]" dev="sockfs" ino=63847 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 371.165265][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.258624][ T5856] usb 2-1: Product: syz [ 371.269656][ T5856] usb 2-1: Manufacturer: syz [ 371.277389][ T5856] usb 2-1: SerialNumber: syz [ 371.357059][ T792] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 371.392424][ T792] usb 4-1: USB disconnect, device number 50 [ 371.564254][ T5856] rtl8150 2-1:1.0: couldn't reset the device [ 371.580847][ T5856] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 371.621326][ T5856] usb 2-1: USB disconnect, device number 71 [ 372.244348][ T29] audit: type=1400 audit(1396.224:817): avc: denied { connect } for pid=19173 comm="syz.5.5860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 372.246103][T19172] netlink: 'syz.3.5858': attribute type 4 has an invalid length. [ 372.376453][T12017] kernel write not supported for file /snd/seq (pid: 12017 comm: kworker/0:8) [ 372.402401][ T5922] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 372.562785][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 372.572952][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.598362][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.618574][ T5922] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 372.619936][T19195] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.5868'. [ 372.628437][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.651962][T19193] binder: 19192:19193 ioctl 541b 0 returned -22 [ 372.690121][ T5922] usb 3-1: config 0 descriptor?? [ 372.772761][T19202] [ 372.775135][T19202] ====================================================== [ 372.782142][T19202] WARNING: possible circular locking dependency detected [ 372.789234][T19202] syzkaller #0 Tainted: G L [ 372.795202][T19202] ------------------------------------------------------ [ 372.802209][T19202] syz.3.5872/19202 is trying to acquire lock: [ 372.808265][T19202] ffffffff8e9ab8a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x4c/0x6e0 [ 372.817659][T19202] [ 372.817659][T19202] but task is already holding lock: [ 372.825008][T19202] ffffffff8e9794e8 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x420 [ 372.834486][T19202] [ 372.834486][T19202] which lock already depends on the new lock. [ 372.834486][T19202] [ 372.844873][T19202] [ 372.844873][T19202] the existing dependency chain (in reverse order) is: [ 372.853877][T19202] [ 372.853877][T19202] -> #8 (slab_mutex){+.+.}-{4:4}: [ 372.861072][T19202] __mutex_lock+0x1a2/0x1b90 [ 372.866186][T19202] kmem_cache_destroy+0x59/0x180 [ 372.871633][T19202] p9_client_destroy+0x20c/0x3a0 [ 372.877072][T19202] v9fs_session_close+0x49/0x2d0 [ 372.882517][T19202] v9fs_kill_super+0x4d/0xa0 [ 372.887619][T19202] deactivate_locked_super+0xc1/0x1b0 [ 372.893503][T19202] v9fs_get_tree+0x68c/0xb50 [ 372.898613][T19202] vfs_get_tree+0x92/0x320 [ 372.903552][T19202] path_mount+0x7d0/0x23d0 [ 372.908481][T19202] __x64_sys_mount+0x293/0x310 [ 372.913767][T19202] do_syscall_64+0x106/0xf80 [ 372.918866][T19202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.925268][T19202] [ 372.925268][T19202] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 372.932989][T19202] cpus_read_lock+0x42/0x170 [ 372.938087][T19202] static_key_slow_inc+0x12/0x30 [ 372.943529][T19202] tcp_md5_do_add+0x296/0x430 [ 372.948719][T19202] tcp_v6_parse_md5_keys+0x4e0/0x860 [ 372.954516][T19202] do_tcp_setsockopt+0x1a2d/0x2ac0 [ 372.960136][T19202] tcp_setsockopt+0xe2/0x100 [ 372.965242][T19202] do_sock_setsockopt+0xf3/0x1d0 [ 372.970682][T19202] __sys_setsockopt+0x195/0x220 [ 372.976042][T19202] __x64_sys_setsockopt+0xbd/0x160 [ 372.981665][T19202] do_syscall_64+0x106/0xf80 [ 372.986764][T19202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.993164][T19202] [ 372.993164][T19202] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 373.000883][T19202] lock_sock_nested+0x41/0xf0 [ 373.006072][T19202] inet_shutdown+0x67/0x410 [ 373.011105][T19202] nbd_mark_nsock_dead+0xae/0x5c0 [ 373.016638][T19202] sock_shutdown+0x16b/0x200 [ 373.021738][T19202] nbd_config_put+0x1eb/0x750 [ 373.026915][T19202] nbd_genl_connect+0xaf8/0x1a40 [ 373.032352][T19202] genl_family_rcv_msg_doit+0x214/0x300 [ 373.038407][T19202] genl_rcv_msg+0x560/0x800 [ 373.043414][T19202] netlink_rcv_skb+0x159/0x420 [ 373.048677][T19202] genl_rcv+0x28/0x40 [ 373.053166][T19202] netlink_unicast+0x5aa/0x870 [ 373.058428][T19202] netlink_sendmsg+0x8b0/0xda0 [ 373.063694][T19202] ____sys_sendmsg+0x9e1/0xb70 [ 373.069007][T19202] ___sys_sendmsg+0x190/0x1e0 [ 373.074190][T19202] __sys_sendmsg+0x170/0x220 [ 373.079288][T19202] do_syscall_64+0x106/0xf80 [ 373.084554][T19202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.090949][T19202] [ 373.090949][T19202] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 373.098572][T19202] __mutex_lock+0x1a2/0x1b90 [ 373.103665][T19202] nbd_queue_rq+0x428/0x1080 [ 373.108758][T19202] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 373.114898][T19202] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 373.121732][T19202] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 373.128219][T19202] blk_mq_run_hw_queue+0x23c/0x670 [ 373.133835][T19202] blk_mq_dispatch_list+0x51d/0x1360 [ 373.139628][T19202] blk_mq_flush_plug_list+0x130/0x600 [ 373.145508][T19202] __blk_flush_plug+0x2c4/0x4b0 [ 373.150863][T19202] __submit_bio+0x584/0x6c0 [ 373.155873][T19202] submit_bio_noacct_nocheck+0x562/0xc10 [ 373.162012][T19202] submit_bio_noacct+0xd17/0x2010 [ 373.167544][T19202] submit_bh_wbc+0x59c/0x770 [ 373.172638][T19202] block_read_full_folio+0x264/0x8e0 [ 373.178433][T19202] filemap_read_folio+0xfc/0x3b0 [ 373.183877][T19202] do_read_cache_folio+0x2d7/0x6b0 [ 373.189501][T19202] read_part_sector+0xd1/0x370 [ 373.194770][T19202] adfspart_check_ICS+0x93/0x910 [ 373.200212][T19202] bdev_disk_changed+0x7f8/0xc80 [ 373.205652][T19202] blkdev_get_whole+0x187/0x290 [ 373.211006][T19202] bdev_open+0x2c7/0xe40 [ 373.215754][T19202] blkdev_open+0x34e/0x4f0 [ 373.220675][T19202] do_dentry_open+0x6d8/0x1660 [ 373.225938][T19202] vfs_open+0x82/0x3f0 [ 373.230513][T19202] path_openat+0x208c/0x31a0 [ 373.235608][T19202] do_file_open+0x20e/0x430 [ 373.240612][T19202] do_sys_openat2+0x10d/0x1e0 [ 373.245793][T19202] __x64_sys_openat+0x12d/0x210 [ 373.251151][T19202] do_syscall_64+0x106/0xf80 [ 373.256243][T19202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.262637][T19202] [ 373.262637][T19202] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 373.269829][T19202] __mutex_lock+0x1a2/0x1b90 [ 373.274920][T19202] nbd_queue_rq+0xba/0x1080 [ 373.279935][T19202] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 373.285989][T19202] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 373.292820][T19202] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 373.299306][T19202] blk_mq_run_hw_queue+0x23c/0x670 [ 373.304926][T19202] blk_mq_dispatch_list+0x51d/0x1360 [ 373.310727][T19202] blk_mq_flush_plug_list+0x130/0x600 [ 373.316606][T19202] __blk_flush_plug+0x2c4/0x4b0 [ 373.321961][T19202] __submit_bio+0x584/0x6c0 [ 373.326968][T19202] submit_bio_noacct_nocheck+0x562/0xc10 [ 373.333105][T19202] submit_bio_noacct+0xd17/0x2010 [ 373.338646][T19202] submit_bh_wbc+0x59c/0x770 [ 373.343747][T19202] block_read_full_folio+0x264/0x8e0 [ 373.349539][T19202] filemap_read_folio+0xfc/0x3b0 [ 373.354985][T19202] do_read_cache_folio+0x2d7/0x6b0 [ 373.360605][T19202] read_part_sector+0xd1/0x370 [ 373.365874][T19202] adfspart_check_ICS+0x93/0x910 [ 373.371318][T19202] bdev_disk_changed+0x7f8/0xc80 [ 373.376762][T19202] blkdev_get_whole+0x187/0x290 [ 373.382116][T19202] bdev_open+0x2c7/0xe40 [ 373.386863][T19202] blkdev_open+0x34e/0x4f0 [ 373.391783][T19202] do_dentry_open+0x6d8/0x1660 [ 373.397049][T19202] vfs_open+0x82/0x3f0 [ 373.401622][T19202] path_openat+0x208c/0x31a0 [ 373.406714][T19202] do_file_open+0x20e/0x430 [ 373.411718][T19202] do_sys_openat2+0x10d/0x1e0 [ 373.416899][T19202] __x64_sys_openat+0x12d/0x210 [ 373.422254][T19202] do_syscall_64+0x106/0xf80 [ 373.427343][T19202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.433736][T19202] [ 373.433736][T19202] -> #3 (set->srcu){.+.+}-{0:0}: [ 373.440837][T19202] __synchronize_srcu+0xa2/0x300 [ 373.446278][T19202] blk_mq_quiesce_queue+0x149/0x1c0 [ 373.451980][T19202] elevator_switch+0x17b/0x7e0 [ 373.457244][T19202] elevator_change+0x352/0x530 [ 373.462513][T19202] elevator_set_default+0x29e/0x360 [ 373.468216][T19202] blk_register_queue+0x412/0x590 [ 373.473756][T19202] __add_disk+0x73f/0xe40 [ 373.478592][T19202] add_disk_fwnode+0x118/0x5c0 [ 373.483865][T19202] nbd_dev_add+0x77a/0xb10 [ 373.488786][T19202] nbd_init+0x291/0x2b0 [ 373.493450][T19202] do_one_initcall+0x11d/0x760 [ 373.498718][T19202] kernel_init_freeable+0x6e5/0x7a0 [ 373.504428][T19202] kernel_init+0x1f/0x1e0 [ 373.509261][T19202] ret_from_fork+0x754/0xd80 [ 373.514351][T19202] ret_from_fork_asm+0x1a/0x30 [ 373.519617][T19202] [ 373.519617][T19202] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 373.527417][T19202] __mutex_lock+0x1a2/0x1b90 [ 373.532510][T19202] elevator_change+0x1bc/0x530 [ 373.537777][T19202] elevator_set_none+0x92/0xf0 [ 373.543046][T19202] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 373.549363][T19202] nbd_start_device+0x1a6/0xbd0 [ 373.554716][T19202] nbd_genl_connect+0xff2/0x1a40 [ 373.560169][T19202] genl_family_rcv_msg_doit+0x214/0x300 [ 373.566243][T19202] genl_rcv_msg+0x560/0x800 [ 373.571351][T19202] netlink_rcv_skb+0x159/0x420 [ 373.576625][T19202] genl_rcv+0x28/0x40 [ 373.581112][T19202] netlink_unicast+0x5aa/0x870 [ 373.586383][T19202] netlink_sendmsg+0x8b0/0xda0 [ 373.591647][T19202] ____sys_sendmsg+0x9e1/0xb70 [ 373.596917][T19202] ___sys_sendmsg+0x190/0x1e0 [ 373.602095][T19202] __sys_sendmsg+0x170/0x220 [ 373.607191][T19202] do_syscall_64+0x106/0xf80 [ 373.612282][T19202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.618679][T19202] [ 373.618679][T19202] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 373.627265][T19202] blk_alloc_queue+0x610/0x790 [ 373.632535][T19202] blk_mq_alloc_queue+0x174/0x290 [ 373.638071][T19202] __blk_mq_alloc_disk+0x29/0x120 [ 373.643603][T19202] nbd_dev_add+0x492/0xb10 [ 373.648533][T19202] nbd_init+0x291/0x2b0 [ 373.653199][T19202] do_one_initcall+0x11d/0x760 [ 373.658464][T19202] kernel_init_freeable+0x6e5/0x7a0 [ 373.664172][T19202] kernel_init+0x1f/0x1e0 [ 373.669007][T19202] ret_from_fork+0x754/0xd80 [ 373.674100][T19202] ret_from_fork_asm+0x1a/0x30 [ 373.679370][T19202] [ 373.679370][T19202] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 373.686558][T19202] __lock_acquire+0x14b8/0x2630 [ 373.691937][T19202] lock_acquire+0x1cf/0x380 [ 373.697027][T19202] fs_reclaim_acquire+0xc4/0x100 [ 373.702466][T19202] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 373.708347][T19202] __kmem_cache_create_args+0x366/0x420 [ 373.714409][T19202] ieee80211_mesh_init_sdata+0x596/0x690 [ 373.720722][T19202] ieee80211_setup_sdata+0xabd/0xcf0 [ 373.726531][T19202] ieee80211_if_add+0xa30/0x1860 [ 373.731977][T19202] ieee80211_add_iface+0xaf/0x5d0 [ 373.737514][T19202] nl80211_new_interface+0x65f/0x11d0 [ 373.743398][T19202] genl_family_rcv_msg_doit+0x214/0x300 [ 373.749454][T19202] genl_rcv_msg+0x560/0x800 [ 373.754462][T19202] netlink_rcv_skb+0x159/0x420 [ 373.759725][T19202] genl_rcv+0x28/0x40 [ 373.764207][T19202] netlink_unicast+0x5aa/0x870 [ 373.769469][T19202] netlink_sendmsg+0x8b0/0xda0 [ 373.774734][T19202] ____sys_sendmsg+0x9e1/0xb70 [ 373.780000][T19202] ___sys_sendmsg+0x190/0x1e0 [ 373.785178][T19202] __sys_sendmsg+0x170/0x220 [ 373.790280][T19202] do_syscall_64+0x106/0xf80 [ 373.795370][T19202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.801768][T19202] [ 373.801768][T19202] other info that might help us debug this: [ 373.801768][T19202] [ 373.811974][T19202] Chain exists of: [ 373.811974][T19202] fs_reclaim --> cpu_hotplug_lock --> slab_mutex [ 373.811974][T19202] [ 373.824205][T19202] Possible unsafe locking scenario: [ 373.824205][T19202] [ 373.831630][T19202] CPU0 CPU1 [ 373.836981][T19202] ---- ---- [ 373.842323][T19202] lock(slab_mutex); [ 373.846287][T19202] lock(cpu_hotplug_lock); [ 373.853296][T19202] lock(slab_mutex); [ 373.859775][T19202] lock(fs_reclaim); [ 373.863738][T19202] [ 373.863738][T19202] *** DEADLOCK *** [ 373.863738][T19202] [ 373.871859][T19202] 4 locks held by syz.3.5872/19202: [ 373.877034][T19202] #0: ffffffff906c0a70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 373.885204][T19202] #1: ffffffff90614728 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xae0 [ 373.894431][T19202] #2: ffff888074568788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_new_interface+0xac/0x11d0 [ 373.904681][T19202] #3: ffffffff8e9794e8 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x420 [ 373.914582][T19202] [ 373.914582][T19202] stack backtrace: [ 373.920452][T19202] CPU: 0 UID: 0 PID: 19202 Comm: syz.3.5872 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.920473][T19202] Tainted: [L]=SOFTLOCKUP [ 373.920478][T19202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 373.920487][T19202] Call Trace: [ 373.920492][T19202] [ 373.920498][T19202] dump_stack_lvl+0x100/0x190 [ 373.920521][T19202] print_circular_bug.cold+0x178/0x1c7 [ 373.920548][T19202] check_noncircular+0x146/0x160 [ 373.920573][T19202] __lock_acquire+0x14b8/0x2630 [ 373.920588][T19202] ? __kmem_cache_create_args+0x44/0x420 [ 373.920608][T19202] lock_acquire+0x1cf/0x380 [ 373.920621][T19202] ? kmem_cache_alloc_noprof+0x4c/0x6e0 [ 373.920644][T19202] fs_reclaim_acquire+0xc4/0x100 [ 373.920660][T19202] ? kmem_cache_alloc_noprof+0x4c/0x6e0 [ 373.920680][T19202] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 373.920699][T19202] ? __kmem_cache_create_args+0x366/0x420 [ 373.920720][T19202] __kmem_cache_create_args+0x366/0x420 [ 373.920740][T19202] ieee80211_mesh_init_sdata+0x596/0x690 [ 373.920758][T19202] ? __pfx_ieee80211_mesh_init_sdata+0x10/0x10 [ 373.920776][T19202] ? __pfx___debug_object_init+0x10/0x10 [ 373.920800][T19202] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 373.920820][T19202] ? lockdep_init_map_type+0x5c/0x250 [ 373.920835][T19202] ieee80211_setup_sdata+0xabd/0xcf0 [ 373.920855][T19202] ieee80211_if_add+0xa30/0x1860 [ 373.920877][T19202] ieee80211_add_iface+0xaf/0x5d0 [ 373.920898][T19202] ? __pfx_ieee80211_add_iface+0x10/0x10 [ 373.920919][T19202] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 373.920940][T19202] nl80211_new_interface+0x65f/0x11d0 [ 373.920960][T19202] ? __pfx_nl80211_new_interface+0x10/0x10 [ 373.920980][T19202] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 373.920998][T19202] ? nl80211_pre_doit+0x19a/0xae0 [ 373.921020][T19202] genl_family_rcv_msg_doit+0x214/0x300 [ 373.921038][T19202] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 373.921057][T19202] ? bpf_lsm_capable+0x9/0x10 [ 373.921071][T19202] ? security_capable+0x80/0x260 [ 373.921089][T19202] ? ns_capable+0xd2/0xf0 [ 373.921106][T19202] genl_rcv_msg+0x560/0x800 [ 373.921122][T19202] ? __pfx_genl_rcv_msg+0x10/0x10 [ 373.921137][T19202] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 373.921155][T19202] ? __pfx_nl80211_new_interface+0x10/0x10 [ 373.921172][T19202] ? __pfx_nl80211_post_doit+0x10/0x10 [ 373.921195][T19202] netlink_rcv_skb+0x159/0x420 [ 373.921208][T19202] ? __pfx_genl_rcv_msg+0x10/0x10 [ 373.921223][T19202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 373.921240][T19202] ? netlink_deliver_tap+0x1ae/0xcc0 [ 373.921262][T19202] genl_rcv+0x28/0x40 [ 373.921274][T19202] netlink_unicast+0x5aa/0x870 [ 373.921289][T19202] ? __pfx_netlink_unicast+0x10/0x10 [ 373.921306][T19202] netlink_sendmsg+0x8b0/0xda0 [ 373.921320][T19202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.921332][T19202] ? __might_fault+0x30/0x140 [ 373.921355][T19202] ____sys_sendmsg+0x9e1/0xb70 [ 373.921370][T19202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.921384][T19202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.921400][T19202] ? __pfx_futex_wake_mark+0x10/0x10 [ 373.921419][T19202] ___sys_sendmsg+0x190/0x1e0 [ 373.921435][T19202] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.921461][T19202] __sys_sendmsg+0x170/0x220 [ 373.921481][T19202] ? __pfx___sys_sendmsg+0x10/0x10 [ 373.921500][T19202] ? __x64_sys_futex+0x34f/0x4d0 [ 373.921520][T19202] do_syscall_64+0x106/0xf80 [ 373.921538][T19202] ? clear_bhb_loop+0x40/0x90 [ 373.921554][T19202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.921568][T19202] RIP: 0033:0x7fc37659c819 [ 373.921581][T19202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.921595][T19202] RSP: 002b:00007fc3774f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.921609][T19202] RAX: ffffffffffffffda RBX: 00007fc376815fa0 RCX: 00007fc37659c819 [ 373.921618][T19202] RDX: 0000000024044804 RSI: 0000200000000200 RDI: 0000000000000003 [ 373.921627][T19202] RBP: 00007fc376632c91 R08: 0000000000000000 R09: 0000000000000000 [ 373.921635][T19202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.921644][T19202] R13: 00007fc376816038 R14: 00007fc376815fa0 R15: 00007fff7190ac48 [ 373.921658][T19202] [ 374.551670][ T5922] koneplus 0003:1E7D:2D51.005C: unknown main item tag 0x0 [ 374.558834][ T5922] koneplus 0003:1E7D:2D51.005C: unknown main item tag 0x0 [ 374.566755][ T5922] koneplus 0003:1E7D:2D51.005C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 374.753074][ T5922] koneplus 0003:1E7D:2D51.005C: couldn't init struct koneplus_device [ 374.761303][ T5922] koneplus 0003:1E7D:2D51.005C: couldn't install mouse [ 374.769319][ T5922] koneplus 0003:1E7D:2D51.005C: probe with driver koneplus failed with error -71 [ 374.780644][ T5922] usb 3-1: USB disconnect, device number 54