last executing test programs: 20.810900281s ago: executing program 2 (id=2348): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 20.028549613s ago: executing program 2 (id=2350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.317935404s ago: executing program 2 (id=2353): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x21, 0x0, 0xa, 0x0, 0x2108}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 18.029666626s ago: executing program 2 (id=2362): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x103) 17.946140656s ago: executing program 2 (id=2364): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)='|', 0x1}], 0x1, 0x0, 0x170}}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) 17.612206056s ago: executing program 2 (id=2367): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="04", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r3, &(0x7f0000000780)}, 0x20) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000016290cfc2f45ceb11d0ed9000000000c0000000c000000"], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r4, 0x5608) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200fffc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000"], 0x110) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e22, @empty}}}, 0x108) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240), 0x0, 0x0) 16.787331809s ago: executing program 32 (id=2367): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="04", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r3, &(0x7f0000000780)}, 0x20) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000016290cfc2f45ceb11d0ed9000000000c0000000c000000"], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r4, 0x5608) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200fffc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000"], 0x110) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e22, @empty}}}, 0x108) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240), 0x0, 0x0) 12.685818085s ago: executing program 3 (id=2402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'pimreg1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 12.580237249s ago: executing program 3 (id=2404): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00001b4000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) 11.10159749s ago: executing program 3 (id=2409): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="0001a4005bc20008") preadv(r1, &(0x7f0000000200)=[{&(0x7f00000012c0)=""/181, 0xb5}], 0x1, 0x7fb, 0x234) 10.976543947s ago: executing program 1 (id=2413): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000340)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 10.839412533s ago: executing program 1 (id=2415): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="4f2d04d02fb4526bd7a1ac"], 0xb) 9.602859503s ago: executing program 1 (id=2417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x10, 0x8}, {0x8, 0x9}, {0x1, 0xf}}}, 0x24}}, 0x20040054) 8.257196221s ago: executing program 1 (id=2422): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2e}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xc4}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x3, "5fb94a"}, &(0x7f0000000440)={0x20, 0x84, 0x1, "01"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000400)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000480)={0x40, 0x8, 0x2, "aa85"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.900084326s ago: executing program 3 (id=2424): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 7.732727414s ago: executing program 5 (id=2428): syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x28) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x3}, 0x3}) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000200)={0x1000000d}) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x458, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xa0, 0x1c8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(r8, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r8, &(0x7f0000003740)={0xb8, 0x0, r9, [{{0x7, 0x2, 0x2, 0x7, 0x3, 0x9, {0x2, 0xfffffffffffff430, 0x5, 0x7, 0x1, 0x66c, 0x4, 0x10000, 0x5, 0x4000, 0x8, 0x0, r10, 0xfffffffb, 0x4}}, {0x6, 0x1, 0xc, 0x9, '/dev/video#\x00'}}]}, 0xb8) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 6.833238968s ago: executing program 5 (id=2430): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 5.79587937s ago: executing program 5 (id=2433): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x0, 0x6}, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2000000, 0x0) fstat(r3, &(0x7f0000000440)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000004c0)=0xc) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000640)={[], [{@fowner_lt}, {@appraise_type}, {@smackfshat={'smackfshat', 0x3d, 'sched_switch\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x65, 0x55, 0x31, 0x34, 0x30, 0x39, 0x66], 0x2d, [0x63, 0x33, 0x36, 0x38], 0x2d, [0x66, 0x6fedb0ad667a3716, 0x34, 0x4bbc10f19dea590f], 0x2d, [0x37, 0x66, 0x61, 0x39], 0x2d, [0x36, 0x65, 0x39, 0x65, 0x33, 0x62, 0x36, 0x36]}}}, {@permit_directio}, {@uid_lt={'uid<', r4}}, {@euid_lt}, {@flag='nolazytime'}], 0x2f}) r5 = memfd_create(&(0x7f0000000840)='[\v\xdbX\xae[\x1a\xa9\x00\xc2\x9aml\r\xcf\xaa\x13\x99\x85B\xc3\x06<\xc2\xa9\xc3\xdb\x88\xee\x85md\xc8\x85HX\xa9%\f\x8fe\xe0\x00\x00\xa8\xfdn\xbe \a\x0e\xa3\xb9\x1d\x9dO\xbdj\x00\x00\xfb\xff\x00c\xb2\xc9\ap\xd0\xa2\x82\x1e\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcb\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2\xa75\x9d\xcb\x1e\x80\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x00uNh\xc5(\xbc\xf3\xac{\x04D2\xf2\xcd\xc2{E\xae\x89\xddI\xc8\xc6\xe9\xef\x98\xf0\x8b\xac\xa7R\x10\x011\x9fi\x00\x00\x00\x00\x00\x00\x00\x00\x002?D\x86\x14\xa52<\x87n\xf4\x04R\x15\t\xb8\xbeT\xb8\xe7K)\x1fP\xb6\xce8\xcc\xabe\xcb\xd0\xf9\xc9\xfe_\v\xaa#\x8f\x8asu\xb2\xfe\xc4\xbe\x03\xd3\x93E\x1d\xaf}\x9b\xac\xc2\x9a\xe6W\x92sD\fn\x9e\xc2s\xc6_4\f\xc1\x8b\x9a\xa4_\xad\x9b\xb9 \v\x0f{>\xdf^.\xb8\x96\x1d\x99vY\xa8\xfa\xd7i\x94i^;\xaa\xe7XA\xd2\xc5\x02\x12I\xbe\xd0Ksq\x96 \xbf\xed\x1c\x91\xeeN\xda&\xddtG\xc2\xa8j\xae\xac)\xfdNu\x19\x91\xa7z\x1b\x0e\xab\xd2k\x16\x87#\xf6p#\x8d\xdd?\x9fXV\x12\xa9\xc7v\x02\x98g:4\xb6\xcaY\xc2~k\xcb\xef]h/\xa2\xaf\xc4\xec\xdc\xd4H\xed\x94qNY\x85\x87&\xf1\xbb\f\x02\x0fo\xae\xf4\x19|\xc4\xfcL\xdb\x00\xedrK\x13\xb5J?s\x93\xe6\xda\xf0\xf3B\x8d\xb4\xd8>\x12\xb0\x8e\x8d\xdaQ\xa2\xd0\xbc\x92d\x9e^\xbc\xd5\x8aNf\xefa\v*\xb08\xfc\xd2\xa4\x11`\xae\x98\xcc\xe1\xea\xc2\x1dKR\x0e\x1cK\x86\v\xba\xdfz\xa8\xdf\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xe9\xb3@\xe8\a0\x1e\xb8L\x83\xc4\xa8\xb2\xc1\xf8\xae\x1d\x198\x0f\xfa\t\x88+\xdc\xe1\x01@\xbd\x8ba\"|\x14\x1bF\x9b\xd3\xff7\a\x1c:U\xba\xf4\t\xdc\xef\xe3\x11\xdb^\xee\x8c0\xee\xde6:\x80t\xfb\xbc^K\xb4\x8c9\xb0\xec\x82\x127!\x0e\xa3\xc9\xe0\xea\xfa\x0f\xbb\x0e \xc3\xef\xb20xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2000000, 0x0) fstat(r3, &(0x7f0000000440)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000004c0)=0xc) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000640)={[], [{@fowner_lt}, {@appraise_type}, {@smackfshat={'smackfshat', 0x3d, 'sched_switch\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x65, 0x55, 0x31, 0x34, 0x30, 0x39, 0x66], 0x2d, [0x63, 0x33, 0x36, 0x38], 0x2d, [0x66, 0x6fedb0ad667a3716, 0x34, 0x4bbc10f19dea590f], 0x2d, [0x37, 0x66, 0x61, 0x39], 0x2d, [0x36, 0x65, 0x39, 0x65, 0x33, 0x62, 0x36, 0x36]}}}, {@permit_directio}, {@uid_lt={'uid<', r4}}, {@euid_lt}, {@flag='nolazytime'}], 0x2f}) r5 = memfd_create(&(0x7f0000000840)='[\v\xdbX\xae[\x1a\xa9\x00\xc2\x9aml\r\xcf\xaa\x13\x99\x85B\xc3\x06<\xc2\xa9\xc3\xdb\x88\xee\x85md\xc8\x85HX\xa9%\f\x8fe\xe0\x00\x00\xa8\xfdn\xbe \a\x0e\xa3\xb9\x1d\x9dO\xbdj\x00\x00\xfb\xff\x00c\xb2\xc9\ap\xd0\xa2\x82\x1e\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcb\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2\xa75\x9d\xcb\x1e\x80\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x00uNh\xc5(\xbc\xf3\xac{\x04D2\xf2\xcd\xc2{E\xae\x89\xddI\xc8\xc6\xe9\xef\x98\xf0\x8b\xac\xa7R\x10\x011\x9fi\x00\x00\x00\x00\x00\x00\x00\x00\x002?D\x86\x14\xa52<\x87n\xf4\x04R\x15\t\xb8\xbeT\xb8\xe7K)\x1fP\xb6\xce8\xcc\xabe\xcb\xd0\xf9\xc9\xfe_\v\xaa#\x8f\x8asu\xb2\xfe\xc4\xbe\x03\xd3\x93E\x1d\xaf}\x9b\xac\xc2\x9a\xe6W\x92sD\fn\x9e\xc2s\xc6_4\f\xc1\x8b\x9a\xa4_\xad\x9b\xb9 \v\x0f{>\xdf^.\xb8\x96\x1d\x99vY\xa8\xfa\xd7i\x94i^;\xaa\xe7XA\xd2\xc5\x02\x12I\xbe\xd0Ksq\x96 \xbf\xed\x1c\x91\xeeN\xda&\xddtG\xc2\xa8j\xae\xac)\xfdNu\x19\x91\xa7z\x1b\x0e\xab\xd2k\x16\x87#\xf6p#\x8d\xdd?\x9fXV\x12\xa9\xc7v\x02\x98g:4\xb6\xcaY\xc2~k\xcb\xef]h/\xa2\xaf\xc4\xec\xdc\xd4H\xed\x94qNY\x85\x87&\xf1\xbb\f\x02\x0fo\xae\xf4\x19|\xc4\xfcL\xdb\x00\xedrK\x13\xb5J?s\x93\xe6\xda\xf0\xf3B\x8d\xb4\xd8>\x12\xb0\x8e\x8d\xdaQ\xa2\xd0\xbc\x92d\x9e^\xbc\xd5\x8aNf\xefa\v*\xb08\xfc\xd2\xa4\x11`\xae\x98\xcc\xe1\xea\xc2\x1dKR\x0e\x1cK\x86\v\xba\xdfz\xa8\xdf\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xe9\xb3@\xe8\a0\x1e\xb8L\x83\xc4\xa8\xb2\xc1\xf8\xae\x1d\x198\x0f\xfa\t\x88+\xdc\xe1\x01@\xbd\x8ba\"|\x14\x1bF\x9b\xd3\xff7\a\x1c:U\xba\xf4\t\xdc\xef\xe3\x11\xdb^\xee\x8c0\xee\xde6:\x80t\xfb\xbc^K\xb4\x8c9\xb0\xec\x82\x127!\x0e\xa3\xc9\xe0\xea\xfa\x0f\xbb\x0e \xc3\xef\xb20xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000780), 0xffffffffffffffff, 0x2}}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x100) r5 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r5, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/121, 0x79}], 0x1, 0x80000000, 0x5) setresgid(0x0, 0x0, 0xffffffffffffffff) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x7, 0x4) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x60e080, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0xce, 0x0) lseek(r6, 0x6, 0x3) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x0, 0x532}, {0x3, 0x3}, {0x4000, 0x6ca6}, {0x4383, 0x401}, {0x10, 0x2}, {0x400, 0x8000}]}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) socket$nl_route(0x10, 0x3, 0x0) 2.959460027s ago: executing program 4 (id=2447): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x100a, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2.948322284s ago: executing program 3 (id=2448): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "835ae5da"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 2.72293016s ago: executing program 4 (id=2449): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r1 = syz_io_uring_setup(0x690b, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x3, 0x251}, &(0x7f0000000300), &(0x7f0000000400)=0x0) syz_io_uring_setup(0x1866, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f0000000500)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, &(0x7f0000002c00)=ANY=[], 0x3d8}}], 0x1, 0x40884) 2.672317647s ago: executing program 0 (id=2450): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) shutdown(r0, 0x1) 2.145021647s ago: executing program 0 (id=2451): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r3], 0x20}}, 0x0) 2.102674426s ago: executing program 4 (id=2452): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000020c0), 0x0, 0x82c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000180)) 2.003939588s ago: executing program 0 (id=2453): syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x28) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x3}, 0x3}) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000200)={0x1000000d}) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x458, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xa0, 0x1c8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(r8, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r8, &(0x7f0000003740)={0xb8, 0x0, r9, [{{0x7, 0x2, 0x2, 0x7, 0x3, 0x9, {0x2, 0xfffffffffffff430, 0x5, 0x7, 0x1, 0x66c, 0x4, 0x10000, 0x5, 0x4000, 0x8, 0x0, r10, 0xfffffffb, 0x4}}, {0x6, 0x1, 0xc, 0x9, '/dev/video#\x00'}}]}, 0xb8) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 1.973419709s ago: executing program 5 (id=2454): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x0, 0x0, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ftruncate(r0, 0x9) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) lseek(r3, 0x1000000000931f, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) connect$ax25(r6, &(0x7f0000000000)={{0x3, @default, 0x6}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null]}, 0x48) 1.319994937s ago: executing program 4 (id=2455): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="04", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r3, &(0x7f0000000780)}, 0x20) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000016290cfc2f45ceb11d0ed9000000000c0000000c000000"], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r4, 0x5608) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200fffc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000"], 0x110) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e22, @empty}}}, 0x108) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240), 0x0, 0x0) 1.169437068s ago: executing program 1 (id=2456): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) dup(r1) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "741cb976"}]}}, 0x0}, 0x0) 1.090604483s ago: executing program 0 (id=2457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101005, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}}, 0x24}}, 0x4008000) 860.23446ms ago: executing program 0 (id=2458): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=ANY=[@ANYBLOB="4001000010003306000000000400000000000000000000000000000000000001fe8000"/53, @ANYRES32=0x0, @ANYRES32=0x0], 0x140}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080002010900680000800900456f009100660000401190780a010102ac1414aa4f204e22007d9078c10200169c79cb22459ff50866ff829694a603d3c443eead4100af7b350c12fa15932138ee8f6a6d2afdde33d5a4298b32860f7d3d68030697e95d9cff97f976b3ac6d8c10e10601a959b4bf18b7d52cd3b5a4c19759c5e155c033fbf5a6b311de39eb228702b8bf55388a273db8f23105e37c"], 0x9f) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xa294}) symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) 0s ago: executing program 0 (id=2459): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x57, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000001c0)={0x1f, 0x4}, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) kernel console output (not intermixed with test programs): oduct=2, SerialNumber=3 [ 674.985419][ T5963] usb 4-1: Product: syz [ 674.990050][ T5963] usb 4-1: Manufacturer: syz [ 674.994861][ T5963] usb 4-1: SerialNumber: syz [ 675.010861][ T5963] usb 4-1: config 0 descriptor?? [ 675.018705][ T5963] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 675.223829][T12264] ipvlan6: entered promiscuous mode [ 675.731065][ T978] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 675.741621][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 675.834191][T12268] ubi: mtd0 is already attached to ubi31 [ 676.165794][ T5963] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 676.178413][ T5963] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 676.299601][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 676.305067][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 676.312938][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 676.324290][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.335825][ T978] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 676.346825][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.356428][ T978] usb 3-1: Product: syz [ 676.361602][ T978] usb 3-1: Manufacturer: syz [ 676.368657][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 676.376138][ T9] pvrusb2: ********** [ 676.380729][ T978] usb 3-1: SerialNumber: syz [ 676.385785][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 676.389282][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 676.397712][ T9] pvrusb2: Important functionality might not be entirely working. [ 676.408143][ T5963] usb 4-1: USB disconnect, device number 23 [ 676.413192][ T978] usb 3-1: config 0 descriptor?? [ 676.428589][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 676.429248][ T5963] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 676.440672][ T9] pvrusb2: ********** [ 676.508431][ T978] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 676.510090][ T5963] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 676.527681][ T5963] quatech2 4-1:0.51: device disconnected [ 676.657715][ T2326] pvrusb2: Invalid write control endpoint [ 676.693375][ T2326] pvrusb2: Invalid write control endpoint [ 676.701365][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 676.711186][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 677.189159][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 677.200188][ T978] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 677.212403][ T2326] pvrusb2: Device being rendered inoperable [ 677.220078][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 677.237211][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 677.247217][ T2326] pvrusb2: Attached sub-driver cx25840 [ 677.254341][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 677.265023][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 677.572030][ T978] usb 3-1: USB disconnect, device number 23 [ 677.630409][ T9] usb 1-1: USB disconnect, device number 28 [ 677.642892][ T978] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 677.673388][ T978] visor 3-1:0.0: device disconnected [ 679.301972][T12311] ubi: mtd0 is already attached to ubi31 [ 681.291022][ T30] audit: type=1400 audit(1754274688.061:1073): avc: denied { write } for pid=12343 comm="syz.3.1439" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 681.888268][T12357] ubi: mtd0 is already attached to ubi31 [ 682.499808][T12367] cgroup2: Unknown parameter 'me' [ 685.249998][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.257043][ T5896] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 685.265246][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.831609][T12413] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 685.929398][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 686.243170][ T5896] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 686.278585][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.301931][ T5896] usb 2-1: Product: syz [ 686.306325][ T5896] usb 2-1: Manufacturer: syz [ 686.316686][ T5896] usb 2-1: SerialNumber: syz [ 686.334196][ T5896] usb 2-1: config 0 descriptor?? [ 686.358563][ T5896] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 686.565592][ T5896] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 686.599632][ T5896] visor 2-1:0.0: probe with driver visor failed with error -5 [ 686.760866][ T43] usb 2-1: USB disconnect, device number 25 [ 686.773599][T12429] ubi: mtd0 is already attached to ubi31 [ 686.830437][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 686.899471][ T5963] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 687.001548][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 687.008091][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.022472][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.035373][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 687.051835][ T24] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 687.061680][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.072568][ T5963] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 687.081393][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.092866][ T5963] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 687.125955][ T5963] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 687.134123][ T5963] usb 1-1: Manufacturer: syz [ 687.143044][ T24] usb 4-1: config 0 descriptor?? [ 687.148596][ T5963] usb 1-1: config 0 descriptor?? [ 687.290181][ T5963] rc_core: IR keymap rc-hauppauge not found [ 687.296137][ T5963] Registered IR keymap rc-empty [ 687.297235][ T5963] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 687.298143][ T5963] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input25 [ 687.593283][ T24] sony 0003:1345:3008.000C: hiddev0,hidraw0: USB HID v80.04 Device [HID 1345:3008] on usb-dummy_hcd.3-1/input0 [ 687.613557][ T24] sony 0003:1345:3008.000C: failed to claim input [ 687.624547][ T30] audit: type=1400 audit(1754274694.391:1074): avc: denied { listen } for pid=12449 comm="syz.1.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 687.648153][ C1] igorplugusb 1-1:0.0: receive overflow, at least 30 lost [ 687.966975][ T5896] usb 1-1: USB disconnect, device number 29 [ 688.263950][ T978] usb 4-1: USB disconnect, device number 24 [ 688.769804][ T978] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 689.303704][ T978] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 689.315065][ T978] usb 2-1: config 0 has no interface number 1 [ 689.324121][ T978] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 689.335928][ T978] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 689.351501][ T978] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 689.366037][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 689.383432][ T978] usb 2-1: SerialNumber: syz [ 689.401556][ T978] usb 2-1: config 0 descriptor?? [ 689.422093][ T978] usb 2-1: Found UVC 0.00 device (0002:0000) [ 689.482691][ T978] usb 2-1: No valid video chain found. [ 689.527961][T12501] xt_limit: Overflow, try lower: 604147548/4200216962 [ 689.625283][ T24] usb 2-1: USB disconnect, device number 26 [ 689.809514][ T5963] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 690.043197][T12513] ipvlan12: entered promiscuous mode [ 690.299480][ T5963] usb 4-1: Using ep0 maxpacket: 32 [ 690.306471][ T5963] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 690.314781][ T5963] usb 4-1: config 0 has no interface number 0 [ 690.323597][ T5963] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 690.332766][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.341556][ T5963] usb 4-1: Product: syz [ 690.345801][ T5963] usb 4-1: Manufacturer: syz [ 690.350458][ T5963] usb 4-1: SerialNumber: syz [ 690.356869][ T5963] usb 4-1: config 0 descriptor?? [ 690.366312][ T5963] smsc95xx v2.0.0 [ 690.839944][ T5963] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 690.854415][ T5963] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 690.944907][T12527] ubi: mtd0 is already attached to ubi31 [ 691.395533][ T5963] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 691.422417][ T5963] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 691.441971][ T43] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 691.450900][ T5963] usb 4-1: USB disconnect, device number 25 [ 691.749574][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 691.763430][ T43] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 691.913599][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.942516][ T43] pvrusb2: Hardware description: Terratec Grabster AV400 [ 691.952094][ T43] pvrusb2: ********** [ 691.956115][ T43] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 691.980121][ T43] pvrusb2: Important functionality might not be entirely working. [ 691.987974][ T43] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 692.118213][ T43] pvrusb2: ********** [ 692.145923][ T2326] pvrusb2: Invalid write control endpoint [ 692.729157][ T2326] pvrusb2: Invalid write control endpoint [ 692.735145][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 692.746088][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 692.757070][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 692.783008][ T2326] pvrusb2: Device being rendered inoperable [ 692.798283][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 692.820950][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 692.833857][ T2326] pvrusb2: Attached sub-driver cx25840 [ 692.849476][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 692.869420][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 693.173478][T12560] ipvlan9: entered promiscuous mode [ 693.610844][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1516'. [ 693.659492][ T5896] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 693.863856][ T43] usb 2-1: USB disconnect, device number 27 [ 693.909454][ T30] audit: type=1400 audit(1754274700.681:1075): avc: denied { connect } for pid=12566 comm="syz.0.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 693.971522][ T5896] usb 4-1: unable to get BOS descriptor or descriptor too short [ 693.984263][ T5896] usb 4-1: not running at top speed; connect to a high speed hub [ 694.013429][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.029540][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 694.039764][ T30] audit: type=1400 audit(1754274700.811:1076): avc: denied { write } for pid=12568 comm="syz.0.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 694.067997][ T5896] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 694.089650][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.151242][ T5896] usb 4-1: Product: syz [ 694.179447][ T5896] usb 4-1: Manufacturer: syz [ 694.184144][ T5896] usb 4-1: SerialNumber: syz [ 694.579466][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 694.761346][T12584] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 695.372635][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 695.387741][ T5896] usb 4-1: invalid UAC_HEADER (v1) [ 695.398246][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.445321][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.461944][ T5896] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 695.479810][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 695.492021][ T5896] usb 4-1: USB disconnect, device number 26 [ 695.499204][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.631863][ T9] usb 1-1: config 0 descriptor?? [ 695.689239][T12598] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1529'. [ 695.843172][T12608] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1534'. [ 695.924832][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1531'. [ 695.969119][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1536'. [ 696.060701][ T9] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0 [ 696.070319][ T9] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0 [ 696.077834][ T9] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0 [ 696.085149][ T9] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0 [ 696.092653][ T9] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0 [ 696.103765][ T9] koneplus 0003:1E7D:2D51.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 696.324448][ T9] koneplus 0003:1E7D:2D51.000D: couldn't init struct koneplus_device [ 696.332878][ T9] koneplus 0003:1E7D:2D51.000D: couldn't install mouse [ 696.345836][ T9] koneplus 0003:1E7D:2D51.000D: probe with driver koneplus failed with error -71 [ 696.359167][ T9] usb 1-1: USB disconnect, device number 30 [ 696.379529][ T43] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 696.920675][ T30] audit: type=1400 audit(1754274703.701:1077): avc: denied { setopt } for pid=12624 comm="syz.2.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 696.951559][ T43] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 696.961768][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.979480][ T43] usb 4-1: Product: syz [ 696.990040][ T43] usb 4-1: Manufacturer: syz [ 697.019413][ T43] usb 4-1: SerialNumber: syz [ 697.039199][ T43] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 697.105538][ T5963] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 697.585175][T12642] Bluetooth: MGMT ver 1.23 [ 697.692594][ T43] usb 4-1: USB disconnect, device number 27 [ 698.227853][ T5963] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 698.263648][ T5963] ath9k_htc: Failed to initialize the device [ 698.386625][ T43] usb 4-1: ath9k_htc: USB layer deinitialized [ 698.779954][ T30] audit: type=1400 audit(1754274705.531:1078): avc: denied { connect } for pid=12658 comm="syz.2.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 699.369610][ T5963] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 699.990194][T12682] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1562'. [ 700.041203][ T5963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.052166][T12682] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1562'. [ 700.080224][ T5963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.090355][ T5963] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 700.100235][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.124999][T12688] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1563'. [ 700.275356][ T5963] usb 4-1: config 0 descriptor?? [ 700.584408][T12692] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 700.936405][ T30] audit: type=1400 audit(1754274707.711:1079): avc: denied { shutdown } for pid=12697 comm="syz.4.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 701.091655][ T5963] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 701.098889][ T5963] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 701.148629][ T5963] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 701.164772][ T5963] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 701.178849][ T5963] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 701.192906][ T5963] greenasia 0003:0E8F:0012.000E: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 701.206071][ T5963] greenasia 0003:0E8F:0012.000E: no inputs found [ 701.244727][ T30] audit: type=1400 audit(1754274708.021:1080): avc: denied { write } for pid=12705 comm="syz.2.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 701.301509][ T5963] usb 4-1: USB disconnect, device number 28 [ 701.316664][T12716] overlayfs: failed to resolve './file1': -2 [ 701.519415][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 701.749643][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 702.005595][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 702.034739][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 702.062069][ T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 702.071489][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.081709][ T9] usb 2-1: Product: syz [ 702.085902][ T9] usb 2-1: Manufacturer: syz [ 702.090610][ T9] usb 2-1: SerialNumber: syz [ 702.101681][ T9] usb 2-1: config 0 descriptor?? [ 702.108346][T12714] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 702.115846][T12714] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 702.133762][ T9] usb 2-1: ucan: probing device on interface #0 [ 702.543065][T12734] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 703.229462][ T5963] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 703.312208][ T9] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 703.342476][ T9] usb 2-1: USB disconnect, device number 28 [ 703.658387][T12757] netlink: 212388 bytes leftover after parsing attributes in process `syz.4.1590'. [ 703.680510][T12757] openvswitch: netlink: Message has 5 unknown bytes. [ 703.729538][ T5963] usb 4-1: Using ep0 maxpacket: 8 [ 703.737143][ T5963] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 703.761507][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.838418][T12761] program syz.0.1589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 703.895027][ T5963] pvrusb2: Hardware description: Terratec Grabster AV400 [ 703.997426][ T5963] pvrusb2: ********** [ 704.079936][ T5963] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 704.272067][ T5963] pvrusb2: Important functionality might not be entirely working. [ 704.282184][ T5963] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 704.296962][ T5963] pvrusb2: ********** [ 704.302687][ T2326] pvrusb2: Invalid write control endpoint [ 704.508780][ T2326] pvrusb2: Invalid write control endpoint [ 704.516480][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 704.528491][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 704.536224][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 704.548842][ T2326] pvrusb2: Device being rendered inoperable [ 704.848889][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 704.856150][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 704.866728][ T2326] pvrusb2: Attached sub-driver cx25840 [ 704.872300][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 704.882511][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 705.835769][T12796] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1601'. [ 705.845010][T12796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1601'. [ 705.854048][T12796] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1601'. [ 705.863098][T12796] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1601'. [ 706.006928][ T9] usb 4-1: USB disconnect, device number 29 [ 706.143341][T12801] ipvlan8: entered promiscuous mode [ 706.506758][T12805] program syz.4.1603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 706.876360][T12807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1605'. [ 707.055585][T12821] overlayfs: failed to resolve './file0': -2 [ 707.227641][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1609'. [ 707.237192][T12828] gre0: left promiscuous mode [ 707.244484][T12828] gre0: left allmulticast mode [ 708.541534][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 708.709562][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 708.711018][T12856] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 708.734353][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 708.764543][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.841324][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 708.848650][ T9] pvrusb2: ********** [ 708.895002][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 708.903918][T12865] overlayfs: failed to resolve './file0': -2 [ 709.412611][ T9] pvrusb2: Important functionality might not be entirely working. [ 709.463347][ T43] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 709.509185][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 709.520636][ T9] pvrusb2: ********** [ 709.527128][ T2326] pvrusb2: Invalid write control endpoint [ 709.962712][ T9] usb 1-1: USB disconnect, device number 31 [ 710.034518][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 710.057821][ T43] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 710.097071][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.098546][T12877] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1630'. [ 710.125600][ T2326] pvrusb2: Invalid write control endpoint [ 710.133723][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 710.145072][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 710.150019][ T43] usb 2-1: Product: syz [ 710.154386][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 710.159436][ T43] usb 2-1: Manufacturer: syz [ 710.168498][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 710.209471][ T43] usb 2-1: SerialNumber: syz [ 710.227651][ T43] usb 2-1: config 0 descriptor?? [ 710.235371][ T2326] pvrusb2: Device being rendered inoperable [ 710.249150][ T43] mcba_usb 2-1:0.0: Can't find endpoints [ 710.249736][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 710.264187][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 710.274375][ T2326] pvrusb2: Attached sub-driver cx25840 [ 710.281301][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 710.291756][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 710.935382][ T43] usb 2-1: USB disconnect, device number 29 [ 711.042402][ T30] audit: type=1400 audit(1754274717.821:1081): avc: denied { write } for pid=12895 comm="syz.0.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 711.071857][ T5927] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 711.299675][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 711.338957][ T5927] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 711.447464][ T5927] usb 3-1: config 0 has no interface number 0 [ 711.458034][ T5927] usb 3-1: config 0 interface 31 has no altsetting 0 [ 711.470418][ T5927] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=66.80 [ 711.483059][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.496367][ T5927] usb 3-1: Product: syz [ 711.503794][ T5927] usb 3-1: Manufacturer: syz [ 711.513735][ T5927] usb 3-1: SerialNumber: syz [ 711.530919][ T5927] usb 3-1: config 0 descriptor?? [ 711.553464][ T5927] legousbtower 3-1:0.31: interrupt endpoints not found [ 711.746021][T12909] ipvlan7: entered promiscuous mode [ 712.047255][ T5963] usb 3-1: USB disconnect, device number 24 [ 712.356173][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1646'. [ 712.858321][T12931] pim6reg: entered allmulticast mode [ 712.875280][T12931] pim6reg: left allmulticast mode [ 713.543715][ T43] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 713.607067][T12942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1653'. [ 713.616894][T12942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1653'. [ 713.628778][T12942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1653'. [ 713.641355][T12942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1653'. [ 714.034486][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.201278][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 714.210049][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.220434][ T43] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 714.230289][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.243048][ T43] usb 4-1: config 0 descriptor?? [ 714.359525][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 714.424780][ T24] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 714.717016][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 714.774390][ T24] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 714.790595][ T24] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 714.802379][ T24] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 714.816912][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 714.827073][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 714.837160][ T24] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 714.847278][ T24] usb 1-1: Product: syz [ 714.852577][ T24] usb 1-1: Manufacturer: syz [ 714.857401][ T24] usb 1-1: SerialNumber: syz [ 714.867362][ T24] usb 1-1: config 0 descriptor?? [ 714.884703][ T24] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 714.916324][ T24] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 715.019564][ T43] hid-picolcd 0003:04D8:C002.000F: No report with id 0x11 found [ 715.188551][ T24] usb 4-1: USB disconnect, device number 30 [ 715.409606][ T43] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 715.592898][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 715.600322][ T43] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 715.610495][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.630587][ T43] usb 2-1: config 0 descriptor?? [ 715.775414][ T30] audit: type=1326 audit(1754274722.551:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.3.1667" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb5f98eb69 code=0x0 [ 716.055388][ T43] elecom 0003:056E:00E6.0010: item fetching failed at offset 0/3 [ 716.064323][ T43] elecom 0003:056E:00E6.0010: probe with driver elecom failed with error -22 [ 716.267293][ T5963] usb 2-1: USB disconnect, device number 30 [ 716.339433][ T43] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 716.503550][ T43] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 716.512743][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.522760][ T43] usb 3-1: config 0 descriptor?? [ 716.529266][ T43] cp210x 3-1:0.0: cp210x converter detected [ 716.590879][ T978] usb 1-1: USB disconnect, device number 32 [ 716.602141][ T978] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 716.759072][T12983] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1671'. [ 716.768389][T12983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1671'. [ 716.777842][T12983] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1671'. [ 716.786844][T12983] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1671'. [ 716.916184][T12985] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1669'. [ 717.200605][ T43] usb 3-1: cp210x converter now attached to ttyUSB0 [ 717.224336][ T978] usb 3-1: USB disconnect, device number 25 [ 717.235756][ T978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 717.250056][ T978] cp210x 3-1:0.0: device disconnected [ 719.168495][T13027] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1685'. [ 721.262575][ T978] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 721.319839][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 721.401495][T13063] ubi: mtd0 is already attached to ubi31 [ 721.444083][ T978] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.464298][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 721.476802][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 721.483104][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.489306][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 721.592922][ T978] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 721.605464][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.624316][ T978] usb 3-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 721.634118][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.656408][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 721.657794][ T978] usb 3-1: config 0 descriptor?? [ 721.674915][ T24] pvrusb2: ********** [ 721.690781][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 721.723067][ T24] pvrusb2: Important functionality might not be entirely working. [ 721.740743][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 721.753643][ T24] pvrusb2: ********** [ 721.870826][ T2326] pvrusb2: Invalid write control endpoint [ 722.905553][ T2326] pvrusb2: Invalid write control endpoint [ 722.918613][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 722.938794][ T978] nzxt-smart2 0003:1E71:2019.0011: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.2-1/input0 [ 722.951589][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 722.959498][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 722.970808][ T2326] pvrusb2: Device being rendered inoperable [ 722.976874][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 722.984186][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 723.248801][ T978] usb 3-1: USB disconnect, device number 26 [ 723.261169][ T2326] pvrusb2: Attached sub-driver cx25840 [ 723.755826][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 723.880727][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 724.088818][T13093] support for cryptoloop has been removed. Use dm-crypt instead. [ 724.861994][ T5963] usb 2-1: USB disconnect, device number 31 [ 725.269775][ T5927] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 725.884592][T13121] ubi: mtd0 is already attached to ubi31 [ 726.213157][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 726.244513][ T5927] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 726.285112][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.372788][T13144] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1720'. [ 726.380477][ T5927] usb 3-1: config 0 descriptor?? [ 726.435404][T13106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 726.741924][T13146] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1724'. [ 726.756525][T13144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1720'. [ 726.767223][T13144] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1720'. [ 726.783891][T13144] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1720'. [ 726.928636][ T5927] pantherlord 0003:0E8F:0003.0012: unknown main item tag 0x6 [ 726.949502][ T5927] pantherlord 0003:0E8F:0003.0012: unknown global tag 0xd [ 726.969202][ T5927] pantherlord 0003:0E8F:0003.0012: item 0 0 1 13 parsing failed [ 726.989979][ T5927] pantherlord 0003:0E8F:0003.0012: parse failed [ 727.000581][ T5927] pantherlord 0003:0E8F:0003.0012: probe with driver pantherlord failed with error -22 [ 727.068053][T13157] overlayfs: missing 'lowerdir' [ 727.130282][ T5927] usb 3-1: USB disconnect, device number 27 [ 727.544613][T13163] ubi: mtd0 is already attached to ubi31 [ 727.642887][T13168] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1733'. [ 728.562258][T13183] program syz.1.1736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 728.737776][T13195] netlink: 'syz.3.1743': attribute type 1 has an invalid length. [ 728.746342][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1743'. [ 729.660998][T13207] ubi: mtd0 is already attached to ubi31 [ 730.226184][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'. [ 730.235604][T13221] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 730.243624][T13221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.259074][T13228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1753'. [ 732.082066][T13248] program syz.2.1756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 732.223952][T13251] new mount options do not match the existing superblock, will be ignored [ 732.255121][ T30] audit: type=1400 audit(1754274739.031:1083): avc: denied { remount } for pid=13249 comm="syz.3.1763" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 732.281143][T13251] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 732.450603][T13257] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1764'. [ 733.299728][ T5963] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 733.460919][ T5963] usb 4-1: Using ep0 maxpacket: 8 [ 733.496892][ T5963] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 733.510239][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.526192][ T5963] pvrusb2: Hardware description: Terratec Grabster AV400 [ 733.544153][ T5963] pvrusb2: ********** [ 733.548268][ T5963] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 733.708271][ T5963] pvrusb2: Important functionality might not be entirely working. [ 733.716486][ T5963] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 733.726196][T13284] netlink: 'syz.0.1773': attribute type 12 has an invalid length. [ 733.732452][ T5963] pvrusb2: ********** [ 733.746597][ T2326] pvrusb2: Invalid write control endpoint [ 733.854517][T13287] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1771'. [ 734.312239][ T2326] pvrusb2: Invalid write control endpoint [ 734.318636][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 734.328371][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 734.336567][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 734.347714][ T2326] pvrusb2: Device being rendered inoperable [ 734.356088][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 734.844864][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 734.854151][ T5963] usb 4-1: USB disconnect, device number 31 [ 734.872470][ T2326] pvrusb2: Attached sub-driver cx25840 [ 734.899420][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 734.937610][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 735.504830][T13317] overlayfs: missing 'lowerdir' [ 735.542472][T13319] overlayfs: missing 'lowerdir' [ 736.221980][T13335] ipvlan13: entered promiscuous mode [ 737.236804][T13352] ipvlan14: entered promiscuous mode [ 737.889476][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 738.051690][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 738.064997][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.088975][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.126007][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 738.145380][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 738.170700][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.195048][ T24] usb 4-1: config 0 descriptor?? [ 738.277404][T13375] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 738.564140][T13382] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1805'. [ 738.573288][T13382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1805'. [ 738.582351][T13382] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1805'. [ 738.591317][T13382] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1805'. [ 738.725948][ T24] kye 0003:0458:0138.0013: unknown main item tag 0x0 [ 738.734421][ T24] kye 0003:0458:0138.0013: unknown main item tag 0x0 [ 738.741418][ T24] kye 0003:0458:0138.0013: unknown main item tag 0x0 [ 738.750986][ T24] kye 0003:0458:0138.0013: unknown main item tag 0x0 [ 738.768051][ T24] kye 0003:0458:0138.0013: unknown main item tag 0x0 [ 738.777580][ T24] kye 0003:0458:0138.0013: unknown main item tag 0x0 [ 738.784411][ T24] kye 0003:0458:0138.0013: unknown main item tag 0x0 [ 738.793172][ T24] kye 0003:0458:0138.0013: unknown main item tag 0x0 [ 738.801022][ T24] kye 0003:0458:0138.0013: unknown main item tag 0x0 [ 738.859943][ T24] kye 0003:0458:0138.0013: unknown main item tag 0x0 [ 738.868083][ T24] kye 0003:0458:0138.0013: unexpected long global item [ 738.877188][ T24] kye 0003:0458:0138.0013: parse failed [ 738.883927][ T24] kye 0003:0458:0138.0013: probe with driver kye failed with error -22 [ 738.900542][T13387] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1810'. [ 738.994990][ T9] usb 4-1: USB disconnect, device number 32 [ 739.247653][ T30] audit: type=1400 audit(1754274746.021:1084): avc: denied { remount } for pid=13400 comm="syz.1.1817" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 739.269407][ T978] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 739.431833][ T978] usb 1-1: Using ep0 maxpacket: 8 [ 739.445118][ T978] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 739.464509][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.496486][ T978] pvrusb2: Hardware description: Terratec Grabster AV400 [ 739.523998][ T978] pvrusb2: ********** [ 739.528015][ T978] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 739.565481][ T978] pvrusb2: Important functionality might not be entirely working. [ 739.582116][ T978] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 739.855671][ T978] pvrusb2: ********** [ 740.336632][ T2326] pvrusb2: Invalid write control endpoint [ 740.346478][ T978] usb 1-1: USB disconnect, device number 33 [ 740.626335][ T2326] pvrusb2: Invalid write control endpoint [ 740.645506][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 740.667445][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 740.696951][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 740.716501][ T2326] pvrusb2: Device being rendered inoperable [ 740.726627][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 740.733969][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 740.746098][ T2326] pvrusb2: Attached sub-driver cx25840 [ 740.746642][T13440] usb usb8: usbfs: process 13440 (syz.3.1831) did not claim interface 2 before use [ 740.752502][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 740.875389][T13442] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1826'. [ 740.884817][T13442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1826'. [ 740.893880][T13442] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1826'. [ 740.902873][T13442] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1826'. [ 741.005397][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 741.057384][T13444] Bluetooth: MGMT ver 1.23 [ 741.179754][T13448] usb usb9: usbfs: process 13448 (syz.3.1834) did not claim interface 0 before use [ 742.704570][T13464] ipvlan8: entered promiscuous mode [ 742.736406][T13461] ipvlan15: entered promiscuous mode [ 743.861802][ T5963] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 744.265932][ T5963] usb 3-1: Using ep0 maxpacket: 8 [ 744.445757][ T5963] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 744.475846][ T5963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.505875][ T5963] pvrusb2: Hardware description: Terratec Grabster AV400 [ 744.520721][ T5963] pvrusb2: ********** [ 744.527897][ T5963] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 744.554083][ T5963] pvrusb2: Important functionality might not be entirely working. [ 744.578624][ T5963] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 744.672067][ T5963] pvrusb2: ********** [ 744.715242][T13500] overlayfs: missing 'lowerdir' [ 744.920947][T13504] netlink: 'syz.3.1851': attribute type 2 has an invalid length. [ 745.193927][T13507] ipvlan10: entered promiscuous mode [ 745.265435][ T2326] pvrusb2: Invalid write control endpoint [ 745.266809][ T5963] usb 3-1: USB disconnect, device number 28 [ 745.355547][ T2326] pvrusb2: Invalid write control endpoint [ 745.370724][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 745.391819][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 745.416185][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 745.440725][ T2326] pvrusb2: Device being rendered inoperable [ 745.447929][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 745.461778][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 745.471740][ T2326] pvrusb2: Attached sub-driver cx25840 [ 745.477389][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 745.495817][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 745.505201][ T30] audit: type=1400 audit(1754274752.281:1085): avc: denied { bind } for pid=13519 comm="syz.1.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 746.684973][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.692186][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.879620][ T30] audit: type=1400 audit(1754274753.621:1086): avc: denied { read } for pid=13549 comm="syz.1.1868" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 746.969677][ T30] audit: type=1400 audit(1754274753.621:1087): avc: denied { open } for pid=13549 comm="syz.1.1868" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 747.293989][T13558] ubi: mtd0 is already attached to ubi31 [ 747.497077][T13559] ipvlan9: entered promiscuous mode [ 748.165871][ T30] audit: type=1400 audit(1754274754.941:1088): avc: denied { append } for pid=13570 comm="syz.1.1876" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 748.440231][ T24] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 748.639761][ T5963] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 748.650612][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 748.658746][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.674147][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.686415][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 748.696645][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.713826][ T24] usb 1-1: config 0 descriptor?? [ 748.790860][ T5963] usb 3-1: Using ep0 maxpacket: 8 [ 748.802076][ T5963] usb 3-1: config 0 interface 0 has no altsetting 0 [ 748.819091][ T5963] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 748.849531][ T5963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.868686][ T5963] usb 3-1: config 0 descriptor?? [ 749.247037][T13589] ubi: mtd0 is already attached to ubi31 [ 749.667281][ T24] hid_parser_main: 74 callbacks suppressed [ 749.667305][ T24] apple 0003:05AC:024B.0014: unknown main item tag 0x6 [ 749.683931][ T5963] aquacomputer_d5next 0003:0C70:F003.0015: unknown main item tag 0x0 [ 749.708740][ T5963] aquacomputer_d5next 0003:0C70:F003.0015: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.2-1/input0 [ 749.769200][ T24] apple 0003:05AC:024B.0014: ignoring exceeding usage max [ 749.848377][ T24] apple 0003:05AC:024B.0014: invalid report_size 16640 [ 749.855693][ T24] apple 0003:05AC:024B.0014: item 0 2 1 7 parsing failed [ 749.864335][ T24] apple 0003:05AC:024B.0014: parse failed [ 749.872219][ T24] apple 0003:05AC:024B.0014: probe with driver apple failed with error -22 [ 749.893045][ T24] usb 1-1: USB disconnect, device number 34 [ 750.043112][ T5963] usb 3-1: USB disconnect, device number 29 [ 750.088396][T13600] program syz.1.1886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 750.884323][T13607] ipvlan16: entered promiscuous mode [ 753.927212][T13636] overlayfs: missing 'lowerdir' [ 755.494603][ T5963] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 755.626380][T13654] ipvlan17: entered promiscuous mode [ 756.151465][ T5963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.173646][ T5963] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 756.196288][ T5963] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 756.206498][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.225591][ T5963] usb 1-1: config 0 descriptor?? [ 756.284021][ T5963] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 756.294492][T13670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 756.314824][ T5963] dvb-usb: bulk message failed: -22 (3/0) [ 756.378895][ T5963] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 756.389003][ T5963] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 756.399025][ T5963] usb 1-1: media controller created [ 756.407188][ T5963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 756.422111][T13674] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 756.444318][ T5963] dvb-usb: bulk message failed: -22 (6/0) [ 756.540421][ T5963] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 756.651752][ T5963] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26 [ 756.669021][ T5963] dvb-usb: schedule remote query interval to 150 msecs. [ 756.678506][ T5963] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 756.694194][ T5963] usb 1-1: USB disconnect, device number 35 [ 756.721299][T13678] smc: net device bond0 applied user defined pnetid SYZ0 [ 756.726376][ T5963] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 756.745632][T13678] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 757.154482][ T30] audit: type=1400 audit(1754274763.931:1089): avc: denied { bind } for pid=13684 comm="syz.1.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 757.229531][ T24] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 757.397908][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 757.428376][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.756546][T13706] ipvlan11: entered promiscuous mode [ 757.843735][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 757.980550][ T24] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 757.989136][ T24] usb 3-1: Product: syz [ 757.993850][ T24] usb 3-1: Manufacturer: syz [ 758.002432][ T24] hub 3-1:4.0: USB hub found [ 758.097028][T13709] lo: entered promiscuous mode [ 758.103444][T13709] lo: entered allmulticast mode [ 758.126729][T13709] gre0: entered promiscuous mode [ 758.132123][T13709] gre0: entered allmulticast mode [ 758.149209][T13709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 758.166873][ T5896] lo speed is unknown, defaulting to 1000 [ 758.173983][ T5896] 3yz0: Port: 1 Link ACTIVE [ 758.219095][ T24] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 758.563302][T13717] ubi: mtd0 is already attached to ubi31 [ 758.943992][ T5896] usb 3-1: USB disconnect, device number 30 [ 759.289573][T13719] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 759.428877][T13721] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 759.436970][T13721] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 759.444872][T13721] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 759.452749][T13721] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 759.460631][T13721] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 759.468856][T13721] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 759.476864][T13721] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 759.484757][T13721] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 759.966863][ T5963] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 760.119461][T13739] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1932'. [ 760.288932][T13741] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1933'. [ 760.298095][T13741] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1933'. [ 760.307213][T13741] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1933'. [ 760.316576][T13741] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1933'. [ 760.895276][ T5963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.913903][ T5963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.924152][ T5963] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 760.934427][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.944841][ T5963] usb 4-1: config 0 descriptor?? [ 761.062813][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1936'. [ 761.444597][T13751] ipvlan10: entered promiscuous mode [ 761.617093][ T30] audit: type=1400 audit(1754274768.391:1090): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 761.746026][ T5963] uclogic 0003:28BD:0071.0016: interface is invalid, ignoring [ 761.985229][ T5963] usb 4-1: USB disconnect, device number 33 [ 762.002089][T13764] QAT: Invalid ioctl 1075883590 [ 762.099663][T13764] QAT: Invalid ioctl 1075883590 [ 762.128776][T13764] QAT: Invalid ioctl 1075883590 [ 762.138867][T13764] QAT: Invalid ioctl 1075883590 [ 762.156069][T13764] QAT: Invalid ioctl 1075883590 [ 762.176391][T13764] QAT: Invalid ioctl 1075883590 [ 762.183892][T13764] QAT: Invalid ioctl 1075883590 [ 762.188932][T13764] QAT: Invalid ioctl 1075883590 [ 762.194087][T13764] QAT: Invalid ioctl 1075883590 [ 762.200690][T13764] QAT: Invalid ioctl 1075883590 [ 762.645974][T13778] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1946'. [ 762.655118][T13778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1946'. [ 762.664228][T13778] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1946'. [ 762.673791][T13778] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1946'. [ 763.515226][T13799] ipvlan9: entered promiscuous mode [ 764.177204][T13811] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 764.188702][T13811] SELinux: failed to load policy [ 765.617165][T13822] ubi: mtd0 is already attached to ubi31 [ 765.908181][T13836] __nla_validate_parse: 6 callbacks suppressed [ 765.908213][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1968'. [ 765.969091][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 767.124074][ T30] audit: type=1400 audit(1754274773.891:1091): avc: denied { map } for pid=13863 comm="syz.1.1978" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 767.303640][ T30] audit: type=1400 audit(1754274773.891:1092): avc: denied { execute } for pid=13863 comm="syz.1.1978" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 767.415901][T13870] ubi: mtd0 is already attached to ubi31 [ 767.788794][ T24] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 767.809235][T13869] overlayfs: missing 'lowerdir' [ 767.986299][T13872] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 768.090652][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 768.098187][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 768.138805][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 768.160397][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 768.178680][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 768.191139][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 768.198562][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 768.233744][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 768.280338][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 768.310606][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 768.325266][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 768.334683][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 768.347035][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 768.358799][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 768.375847][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 768.393871][ T24] usb 4-1: string descriptor 0 read error: -22 [ 768.420416][ T24] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 768.451230][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.779026][ T24] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 769.304615][T13895] ipvlan11: entered promiscuous mode [ 769.748029][ T5963] usb 4-1: USB disconnect, device number 34 [ 770.291952][T13908] program syz.0.1990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 770.327671][T13906] program syz.2.1991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 770.498294][T13913] overlayfs: missing 'lowerdir' [ 772.059206][T13940] ipvlan12: entered promiscuous mode [ 774.158581][T13959] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 774.792700][T13967] program syz.2.2011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 775.654913][T13980] ipvlan8: entered promiscuous mode [ 776.421063][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2023'. [ 777.711740][T14022] net_ratelimit: 46 callbacks suppressed [ 777.711761][T14022] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 777.741292][T14013] program syz.1.2031 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 778.137846][T14035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.897190][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 779.211195][T14056] program syz.0.2048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 779.220586][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 779.233496][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 779.245286][ T24] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 779.255121][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.270357][ T24] usb 3-1: config 0 descriptor?? [ 780.016038][ T24] holtek_kbd 0003:04D9:A055.0017: hidraw0: USB HID v0.06 Device [HID 04d9:a055] on usb-dummy_hcd.2-1/input0 [ 780.035511][T14068] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 780.044388][T14068] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 780.056184][T14068] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 780.111134][ T24] usb 3-1: USB disconnect, device number 31 [ 780.375578][T14079] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 780.870161][ T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 780.988582][T14097] ipvlan18: entered promiscuous mode [ 781.461077][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 781.478229][ T24] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 781.502603][ T24] usb 1-1: config 0 has no interface number 0 [ 781.516416][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 781.530546][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.622973][ T24] usb 1-1: Product: syz [ 781.627604][ T24] usb 1-1: Manufacturer: syz [ 781.633474][ T24] usb 1-1: SerialNumber: syz [ 781.650921][ T24] usb 1-1: config 0 descriptor?? [ 781.663776][ T24] smsc95xx v2.0.0 [ 781.892335][ T30] audit: type=1326 audit(1754274788.671:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14109 comm="syz.2.2067" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb4a58eb69 code=0x0 [ 782.013904][T14112] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2065'. [ 782.022952][T14112] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2065'. [ 782.032006][T14112] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2065'. [ 782.041359][T14112] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2065'. [ 782.390002][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 782.407388][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 782.422612][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 782.442340][ T24] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 782.455239][T14115] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 782.461856][ T24] usb 1-1: USB disconnect, device number 36 [ 782.475199][T14115] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 782.561069][T14115] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 783.266176][T14131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 783.553534][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2075'. [ 783.576150][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2075'. [ 783.815168][T14139] vivid-000: disconnect [ 783.838118][T14138] vivid-000: reconnect [ 784.077188][T14147] ipvlan10: entered promiscuous mode [ 784.340225][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 784.640248][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 784.655140][ T24] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 784.678067][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.699255][ T24] usb 1-1: Product: syz [ 784.712146][ T24] usb 1-1: Manufacturer: syz [ 784.720186][ T24] usb 1-1: SerialNumber: syz [ 784.726877][ T24] usb 1-1: config 0 descriptor?? [ 784.969394][ T5896] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 784.970391][ T24] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 784.989869][ T24] usb 1-1: USB disconnect, device number 37 [ 785.177067][T14163] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 785.511518][ T5896] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.521584][ T5896] usb 4-1: config 0 interface 0 has no altsetting 0 [ 785.528188][ T5896] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 785.537319][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.546604][ T5896] usb 4-1: config 0 descriptor?? [ 785.551626][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 785.713628][ T9] usb 3-1: config 1 has an invalid interface number: 246 but max is 1 [ 785.739380][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 785.756836][ T9] usb 3-1: config 1 has no interface number 0 [ 785.783667][ T9] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 785.805587][ T9] usb 3-1: config 1 interface 246 has no altsetting 0 [ 785.954742][ T9] usb 3-1: config 1 interface 1 has no altsetting 0 [ 785.964260][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 785.973414][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.981636][ T9] usb 3-1: Product: syz [ 785.985810][ T9] usb 3-1: Manufacturer: syz [ 785.993518][ T9] usb 3-1: SerialNumber: syz [ 785.999051][ T5896] apple 0003:05AC:027A.0018: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.3-1/input0 [ 786.477832][ T24] usb 4-1: USB disconnect, device number 35 [ 786.579473][ T975] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 786.712523][ T43] usb 3-1: USB disconnect, device number 32 [ 786.730324][ T975] usb 2-1: Using ep0 maxpacket: 8 [ 786.736719][ T975] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 786.745358][ T975] usb 2-1: config 179 has no interface number 0 [ 786.752800][ T975] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 786.764352][ T975] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 786.776581][ T975] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 786.787978][ T975] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 786.798660][ T975] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 786.812703][ T975] usb 2-1: config 179 interface 65 has no altsetting 0 [ 786.819676][ T975] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 786.828725][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.846996][ T975] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input27 [ 786.959491][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 787.076179][ T9] usb 2-1: USB disconnect, device number 32 [ 787.110265][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 787.121787][ T24] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.133662][ T24] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.143756][ T24] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 787.157807][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 787.164555][ T24] usb 1-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 787.176294][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.186879][ T24] usb 1-1: config 0 descriptor?? [ 787.818683][T14196] ubi: mtd0 is already attached to ubi31 [ 788.506964][ T24] elecom 0003:056E:011C.0019: item fetching failed at offset 3/5 [ 788.515758][ T24] elecom 0003:056E:011C.0019: probe with driver elecom failed with error -22 [ 788.785974][T14213] ubi: mtd0 is already attached to ubi31 [ 789.702621][ T43] usb 1-1: USB disconnect, device number 38 [ 789.791467][T14217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2107'. [ 790.846280][T14233] ubi: mtd0 is already attached to ubi31 [ 791.383719][T14245] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 791.766310][T14246] netlink: 'syz.3.2117': attribute type 6 has an invalid length. [ 791.796597][T14246] netlink: 'syz.3.2117': attribute type 1 has an invalid length. [ 791.805111][T14246] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2117'. [ 792.169441][ T30] audit: type=1400 audit(1754274798.921:1094): avc: denied { accept } for pid=14253 comm="syz.3.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 793.570576][T14271] netlink: 'syz.2.2125': attribute type 8 has an invalid length. [ 793.671417][T14278] block nbd3: not configured, cannot reconfigure [ 793.839420][ T30] audit: type=1400 audit(1754274800.611:1095): avc: denied { rename } for pid=14281 comm="syz.3.2131" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 793.933583][T14287] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2132'. [ 794.314621][T14294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2130'. [ 794.323707][T14294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2130'. [ 794.332891][T14294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2130'. [ 794.342380][T14294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2130'. [ 794.636581][T14300] 9pnet_fd: Insufficient options for proto=fd [ 794.946072][T14301] ipvlan19: entered promiscuous mode [ 795.248142][T14312] ubi: mtd0 is already attached to ubi31 [ 796.476212][T14319] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 796.509432][T14319] CIFS mount error: No usable UNC path provided in device string! [ 796.509432][T14319] [ 796.520381][T14319] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 797.052175][T14343] ipvlan9: entered promiscuous mode [ 797.470865][ T43] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 797.553519][T14344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 797.710278][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.726253][ T43] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 797.769475][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.932917][ T43] usb 3-1: config 0 descriptor?? [ 797.940294][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 798.594876][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 798.897606][ T43] pwc: recv_control_msg error -71 req 02 val 2c00 [ 798.904928][ T43] pwc: recv_control_msg error -71 req 04 val 1000 [ 798.940160][ T43] pwc: recv_control_msg error -71 req 04 val 1300 [ 799.595424][ T43] pwc: recv_control_msg error -71 req 04 val 1400 [ 799.603126][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 799.612675][T14363] program syz.3.2156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 799.622625][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 799.649697][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 799.677603][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 799.716685][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 799.740434][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 799.748994][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 799.768006][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 799.777015][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 799.794481][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 799.815053][ T43] pwc: Registered as video103. [ 799.834960][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 799.882202][ T43] usb 3-1: USB disconnect, device number 33 [ 800.939065][T14379] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 801.351299][T14378] Falling back ldisc for ttyS3. [ 801.698971][T14399] ipvlan20: entered promiscuous mode [ 801.720444][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 802.062811][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 802.078828][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 802.107051][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 802.127338][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 802.152664][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 802.166362][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 802.282601][ T9] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 802.390093][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.398801][ T9] usb 2-1: Product: syz [ 802.481152][ T9] usb 2-1: Manufacturer: syz [ 802.485914][ T9] usb 2-1: SerialNumber: syz [ 802.494546][ T9] usb 2-1: config 0 descriptor?? [ 802.500731][T14390] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 802.523259][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input29 [ 802.550521][ T5202] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 802.569661][ T975] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 802.580324][ T5202] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 802.600880][ T5202] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 802.613213][ T5202] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 802.748671][ T975] usb 3-1: config 0 has no interfaces? [ 802.748726][T14390] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 802.763290][ T975] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 802.776255][ T975] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 802.790518][ T9] usb 2-1: USB disconnect, device number 33 [ 802.793540][ T975] usb 3-1: Product: syz [ 802.802895][ T975] usb 3-1: Manufacturer: syz [ 802.812818][ T975] usb 3-1: config 0 descriptor?? [ 803.025264][T14411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.036013][T14411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.051036][ T9] usb 3-1: USB disconnect, device number 34 [ 803.568047][T14435] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2178'. [ 803.577575][T14435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2178'. [ 803.586656][T14435] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2178'. [ 803.596380][T14435] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2178'. [ 804.068413][T14446] netlink: 'syz.2.2185': attribute type 1 has an invalid length. [ 804.080306][T14446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2185'. [ 804.169588][ T9] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 804.484164][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 804.495857][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 804.675687][T14463] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2189'. [ 804.684854][T14463] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2189'. [ 804.693946][T14463] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2189'. [ 804.703501][T14463] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2189'. [ 804.769759][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 804.909815][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.937137][ T9] usb 2-1: Product: syz [ 804.941657][ T9] usb 2-1: Manufacturer: syz [ 804.946371][ T9] usb 2-1: SerialNumber: syz [ 804.972082][ T9] usb 2-1: config 0 descriptor?? [ 805.016700][ T9] usb 2-1: selecting invalid altsetting 0 [ 805.473887][T14470] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 806.197549][ T43] usb 2-1: USB disconnect, device number 34 [ 806.847435][T14497] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2198'. [ 806.929984][ T5896] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 807.161246][ T5896] usb 1-1: not running at top speed; connect to a high speed hub [ 807.178411][ T5896] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 807.190216][ T5896] usb 1-1: config 1 has no interface number 1 [ 807.225504][ T5896] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 807.356248][ T5896] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 807.369936][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.378186][ T5896] usb 1-1: Product: syz [ 807.382576][ T5896] usb 1-1: Manufacturer: syz [ 807.387200][ T5896] usb 1-1: SerialNumber: syz [ 807.607037][ T5896] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 807.750337][ T5896] usb 1-1: USB disconnect, device number 39 [ 807.835436][T14526] ubi: mtd0 is already attached to ubi31 [ 808.228309][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.234738][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.681473][T14536] netlink: 'syz.0.2215': attribute type 8 has an invalid length. [ 808.711064][T14536] netem: change failed [ 808.879495][ T5896] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 809.054194][T14545] ipvlan12: entered promiscuous mode [ 809.071909][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 809.090688][ T5896] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 809.165353][ T5896] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 809.318807][ T5896] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 809.506854][ T5896] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 809.521045][ T5896] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 809.530229][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.121358][ T5896] usb 4-1: GET_CAPABILITIES returned 0 [ 810.150702][ T5896] usbtmc 4-1:16.0: can't read capabilities [ 810.382512][ T5896] usb 4-1: USB disconnect, device number 36 [ 810.509952][T14564] __nla_validate_parse: 3 callbacks suppressed [ 810.509975][T14564] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2224'. [ 810.697043][T14573] ipvlan13: entered promiscuous mode [ 811.395649][T14578] ubi: mtd0 is already attached to ubi31 [ 812.820916][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 812.991688][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 813.017444][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 813.052666][ T9] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 813.072132][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.090984][ T9] usb 3-1: Product: syz [ 813.095194][ T9] usb 3-1: Manufacturer: syz [ 813.110919][ T9] usb 3-1: SerialNumber: syz [ 813.131618][ T9] usb 3-1: config 0 descriptor?? [ 813.140230][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 813.156445][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 813.174966][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 813.846390][ T9] usb 3-1: USB disconnect, device number 35 [ 814.137539][T14606] ubi: mtd0 is already attached to ubi31 [ 814.871634][T14611] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 815.529715][ T43] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 815.709439][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 815.718907][ T43] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 815.752426][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 815.806364][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 815.833321][ T43] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 815.882094][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 815.926875][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.303306][ T43] usb 1-1: GET_CAPABILITIES returned 0 [ 816.317558][ T43] usbtmc 1-1:16.0: can't read capabilities [ 816.416073][T14633] ipvlan14: entered promiscuous mode [ 816.874595][ T43] usb 1-1: USB disconnect, device number 40 [ 817.504333][ T975] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 817.931381][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 818.030982][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 818.052637][ T975] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 818.065318][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 818.080972][ T975] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 818.494403][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.508135][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 818.511304][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.517423][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.536077][ T975] usb 2-1: Product: syz [ 818.543742][ T975] usb 2-1: Manufacturer: syz [ 818.544900][ T9] usb 4-1: config 0 descriptor?? [ 818.548485][ T975] usb 2-1: SerialNumber: syz [ 818.575577][ T975] usb 2-1: config 0 descriptor?? [ 818.690440][T14637] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 818.698478][T14637] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 818.707191][ T975] usb 2-1: ucan: probing device on interface #0 [ 818.810328][T14655] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 819.184236][ T9] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 819.248379][ T975] usb 2-1: ucan: could not read protocol version, ret=-32 [ 819.254092][ T9] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 819.263780][ T975] usb 2-1: ucan: probe failed; try to update the device firmware [ 819.268838][T14657] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2254'. [ 819.290676][ T9] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 819.298062][ T9] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 819.307014][ T9] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 819.323393][ T9] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 819.330825][ T9] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 819.344270][ T9] lg-g15 0003:046D:C222.001A: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 819.361539][ T9] usb 4-1: USB disconnect, device number 37 [ 819.689601][ T43] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 819.733344][T14669] ipvlan10: entered promiscuous mode [ 819.907138][ T43] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 819.956130][ T43] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 820.041454][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 820.051733][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.267729][ T43] usb 1-1: usb_control_msg returned -32 [ 820.274083][ T43] usbtmc 1-1:16.0: can't read capabilities [ 820.632303][ T43] usb 2-1: USB disconnect, device number 35 [ 820.661352][ T30] audit: type=1400 audit(1754274827.441:1096): avc: denied { append } for pid=14684 comm="syz.1.2264" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 820.836353][T14690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2263'. [ 820.845440][T14690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2263'. [ 820.854498][T14690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2263'. [ 820.863606][T14690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2263'. [ 821.551912][ T30] audit: type=1400 audit(1754274828.331:1097): avc: denied { append } for pid=14698 comm="syz.2.2267" name="event3" dev="devtmpfs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 822.456518][ T43] usb 1-1: USB disconnect, device number 41 [ 822.958863][T14724] ipvlan21: entered promiscuous mode [ 823.683607][T14758] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 823.700748][ T9] IPVS: starting estimator thread 0... [ 823.786589][T14764] ubi: mtd0 is already attached to ubi31 [ 824.267692][T14762] IPVS: using max 74 ests per chain, 177600 per kthread [ 825.464093][T14782] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 825.668608][T14789] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2298'. [ 825.669390][ T30] audit: type=1400 audit(1754274832.441:1098): avc: denied { nlmsg_read } for pid=14788 comm="syz.0.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 826.613233][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 826.684825][T14802] ubi: mtd0 is already attached to ubi31 [ 827.051099][ T9] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 827.082706][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.123091][ T9] usb 3-1: config 0 has no interface number 0 [ 827.152826][ T9] usb 3-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 827.159491][ T975] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 827.256009][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.269198][ T9] usb 3-1: config 0 descriptor?? [ 827.279918][ T9] usb 3-1: bad CDC descriptors [ 827.330103][ T975] usb 2-1: Using ep0 maxpacket: 8 [ 827.355195][ T975] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 827.367514][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.381963][ T975] usb 2-1: Product: syz [ 827.386477][ T975] usb 2-1: Manufacturer: syz [ 827.392617][ T975] usb 2-1: SerialNumber: syz [ 827.408317][ T975] usb 2-1: config 0 descriptor?? [ 827.424945][ T975] gspca_main: se401-2.14.0 probing 047d:5003 [ 827.505084][ T9] usb 3-1: USB disconnect, device number 36 [ 827.827144][ T975] gspca_se401: ExtraFeatures: 255 [ 827.832404][ T975] gspca_se401: Frame size: 2314x0 bayer [ 827.838035][ T975] gspca_se401: Frame size: 0x0 1/16th janggu [ 827.844186][ T975] gspca_se401: Frame size: 0x47872 bayer [ 827.850470][ T975] gspca_se401: Frame size: 8x0 bayer [ 827.856190][ T975] gspca_se401: Frame size: 0x0 1/16th janggu [ 827.862620][ T975] gspca_se401: Frame size: 0x0 1/16th janggu [ 827.868755][ T975] gspca_se401: Frame size: 0x0 1/16th janggu [ 827.875289][ T975] gspca_se401: Frame size: 0x0 1/16th janggu [ 827.919568][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 828.072025][ T30] audit: type=1400 audit(1754274834.831:1099): avc: denied { mounton } for pid=14831 comm="syz.4.2315" path="/proc/1615/cgroup" dev="proc" ino=39965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 828.097169][ T975] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 828.113841][ T975] usb 2-1: USB disconnect, device number 36 [ 828.120523][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 828.137466][ T24] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 828.156072][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.177623][ T24] usb 4-1: config 0 descriptor?? [ 828.256400][ T24] as10x_usb: device has been detected [ 828.275095][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 828.330724][ T24] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 828.446181][T14845] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 828.875227][ T24] as10x_usb: error during firmware upload part1 [ 828.881688][ T30] audit: type=1400 audit(1754274835.651:1100): avc: denied { firmware_load } for pid=24 comm="kworker/1:0" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 828.908244][ T24] Registered device nBox DVB-T Dongle [ 828.910798][ T24] usb 4-1: USB disconnect, device number 38 [ 828.944854][T14849] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2321'. [ 828.949184][ T24] Unregistered device nBox DVB-T Dongle [ 828.965059][ T24] as10x_usb: device has been disconnected [ 829.343732][T14861] ubi: mtd0 is already attached to ubi31 [ 829.527090][T14862] ubi: mtd0 is already attached to ubi31 [ 830.156639][T14872] netlink: 'syz.2.2331': attribute type 11 has an invalid length. [ 830.164640][T14872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2331'. [ 830.187539][T14872] netlink: 'syz.2.2331': attribute type 11 has an invalid length. [ 830.189659][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.205735][T14872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2331'. [ 830.257083][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.268571][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.287660][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.569551][T14884] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 831.139447][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 831.197005][T14888] input: syz0 as /devices/virtual/input/input31 [ 831.379990][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 831.386562][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 831.396966][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 831.411999][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 831.421893][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.439357][ T24] usb 4-1: Product: syz [ 831.443545][ T24] usb 4-1: Manufacturer: syz [ 831.448137][ T24] usb 4-1: SerialNumber: syz [ 831.486016][T14895] netlink: 432 bytes leftover after parsing attributes in process `syz.1.2340'. [ 831.734323][T14899] ubi: mtd0 is already attached to ubi31 [ 832.198052][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 832.216251][ T24] usb 4-1: 0:2 : does not exist [ 832.407035][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 832.423279][T14905] lo: entered promiscuous mode [ 832.428491][T14905] lo: entered allmulticast mode [ 832.436939][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 832.455268][T14905] tunl0: entered promiscuous mode [ 832.460709][ T9] usb 1-1: config 179 has no interface number 0 [ 832.467418][T14905] tunl0: entered allmulticast mode [ 832.473744][T14905] gre0: entered promiscuous mode [ 832.478705][T14905] gre0: entered allmulticast mode [ 832.485270][T14905] gretap0: entered promiscuous mode [ 832.491201][T14905] gretap0: entered allmulticast mode [ 832.497257][T14905] erspan0: entered promiscuous mode [ 832.503263][T14905] erspan0: entered allmulticast mode [ 832.509465][T14905] ip_vti0: entered promiscuous mode [ 832.514800][T14905] ip_vti0: entered allmulticast mode [ 832.521405][T14905] ip6_vti0: entered promiscuous mode [ 832.526809][T14905] ip6_vti0: entered allmulticast mode [ 832.532322][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 832.535610][ T5860] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 832.546066][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 832.578443][T14905] sit0: entered promiscuous mode [ 832.599399][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 832.614192][T14905] sit0: entered allmulticast mode [ 832.634996][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 832.654817][T14905] ip6tnl0: entered promiscuous mode [ 832.660416][T14905] ip6tnl0: entered allmulticast mode [ 832.669039][T14905] ip6gre0: entered promiscuous mode [ 832.676542][T14905] ip6gre0: entered allmulticast mode [ 832.684106][T14910] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2345'. [ 832.704630][T14905] syz_tun: entered promiscuous mode [ 832.711252][T14905] syz_tun: entered allmulticast mode [ 832.721571][T14905] ip6gretap0: entered promiscuous mode [ 832.727292][T14905] ip6gretap0: entered allmulticast mode [ 832.738405][T14905] vcan0: entered promiscuous mode [ 832.743999][T14905] vcan0: entered allmulticast mode [ 832.751310][T14910] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2345'. [ 832.760411][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 832.761624][T14905] bond0: entered promiscuous mode [ 832.773558][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.775931][T14910] netlink: 'syz.2.2345': attribute type 6 has an invalid length. [ 832.797431][T14892] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 832.806215][T14905] bond0: entered allmulticast mode [ 832.816202][T14905] team0: entered promiscuous mode [ 832.822891][T14905] team0: entered allmulticast mode [ 832.828517][T14910] netlink: 'syz.2.2345': attribute type 5 has an invalid length. [ 832.838409][T14905] nlmon0: entered promiscuous mode [ 832.845774][T14905] nlmon0: entered allmulticast mode [ 832.852980][T14910] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2345'. [ 832.856999][ T9] usb 4-1: USB disconnect, device number 39 [ 832.871704][T14905] caif0: entered promiscuous mode [ 832.882824][T14905] caif0: entered allmulticast mode [ 832.897501][T14905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 833.015799][ T5896] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input32 [ 833.219291][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 833.227609][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 833.258270][ T5896] usb 1-1: USB disconnect, device number 42 [ 833.349077][T14921] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2349'. [ 833.358179][T14921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2349'. [ 833.367291][T14921] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2349'. [ 833.376451][T14921] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2349'. [ 834.048614][T14929] program syz.3.2351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 834.764903][T14937] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 835.192621][ T9] Process accounting resumed [ 835.529436][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 835.748720][ T30] audit: type=1400 audit(1754274842.521:1101): avc: denied { watch watch_reads } for pid=14954 comm="syz.0.2361" path="/480/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 835.773390][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 835.781088][ T24] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 835.790903][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 835.804755][ T24] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 835.816201][ T24] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 835.831674][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 835.841214][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 835.869216][ T24] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 835.915873][ T24] usb 4-1: Product: syz [ 835.949719][ T24] usb 4-1: Manufacturer: syz [ 835.954357][ T24] usb 4-1: SerialNumber: syz [ 835.977697][ T24] usb 4-1: config 0 descriptor?? [ 835.986270][ T24] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 835.997245][ T24] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 836.760533][ T9] usb 4-1: USB disconnect, device number 40 [ 836.768556][ T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 837.070354][ T30] audit: type=1400 audit(1754274843.851:1102): avc: denied { mounton } for pid=14973 comm="syz.1.2371" path="/493/file0" dev="autofs" ino=40430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 837.208185][T14978] hsr0: entered allmulticast mode [ 837.232578][T14978] hsr_slave_0: entered allmulticast mode [ 837.250985][T14978] hsr_slave_1: entered allmulticast mode [ 837.263556][T14980] hsr_slave_0: left promiscuous mode [ 837.307900][T14980] hsr_slave_1: left promiscuous mode [ 837.331990][T14983] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 837.343088][T14983] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 837.343293][T14980] hsr0 (unregistering): left allmulticast mode [ 837.357802][T14983] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 837.376496][T14983] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 837.386293][T14983] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 837.402124][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 837.410249][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 837.420916][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 837.432994][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 837.440726][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 837.454937][ T30] audit: type=1400 audit(1754274844.231:1103): avc: denied { mounton } for pid=14981 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 837.512397][T14981] lo speed is unknown, defaulting to 1000 [ 837.518282][ T30] audit: type=1400 audit(1754274844.281:1104): avc: denied { getopt } for pid=14984 comm="syz.1.2374" lport=56837 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 837.557943][T14981] geneve1 speed is unknown, defaulting to 1000 [ 837.721591][T14981] wlan0 speed is unknown, defaulting to 1000 [ 837.731623][T14981] lo speed is unknown, defaulting to 1000 [ 837.829457][ T5896] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 837.902728][T14981] lo speed is unknown, defaulting to 1000 [ 837.991487][ T5896] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 838.002195][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 838.007077][T14981] chnl_net:caif_netlink_parms(): no params data found [ 838.011557][ T5896] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 838.029797][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 838.037738][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 838.047234][ T5896] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 838.058396][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 838.067191][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 838.076333][ T5896] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 838.087522][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 838.098683][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 838.108002][ T5896] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 838.119388][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 838.127794][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 838.137156][ T5896] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 838.148889][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 838.157111][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 838.157604][T14981] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.166288][ T5896] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 838.166318][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 838.167282][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 838.202825][T14981] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.204594][ T5896] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 838.210295][T14981] bridge_slave_0: entered allmulticast mode [ 838.227924][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 838.229140][T14981] bridge_slave_0: entered promiscuous mode [ 838.235839][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 838.243747][T14981] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.251810][ T5896] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 838.258655][T14981] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.267894][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 838.277294][T14981] bridge_slave_1: entered allmulticast mode [ 838.291508][T14981] bridge_slave_1: entered promiscuous mode [ 838.291537][ T5896] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 838.306604][ T5896] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 838.317236][ T5896] usb 2-1: Product: syz [ 838.321549][ T5896] usb 2-1: Manufacturer: syz [ 838.326192][ T5896] usb 2-1: SerialNumber: syz [ 838.333272][ T5896] usb 2-1: config 0 descriptor?? [ 838.344255][ T5896] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 838.345334][T14981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.365875][T14981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.428406][T14981] team0: Port device team_slave_0 added [ 838.438896][T14981] team0: Port device team_slave_1 added [ 838.467256][T14981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.474311][T14981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.500270][ C1] vkms_vblank_simulate: vblank timer overrun [ 838.506806][T14981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.521670][T14981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.528642][T14981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.557203][T14981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.625202][ T5963] usb 2-1: USB disconnect, device number 37 [ 838.637919][ T5963] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 838.666974][T14981] hsr_slave_0: entered promiscuous mode [ 838.673546][T14981] hsr_slave_1: entered promiscuous mode [ 838.680034][ T5896] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 838.829851][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 838.847356][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.868715][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.886505][ T5896] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 838.895809][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.905368][T14981] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 838.906034][ T5896] usb 4-1: config 0 descriptor?? [ 838.924314][T14981] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 838.933962][T14981] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 838.946636][T14981] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 839.127401][T14981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.187184][T14981] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.238647][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.245835][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.481802][T14983] Bluetooth: hci4: command tx timeout [ 839.729613][ T5896] appleir 0003:05AC:8241.001B: unknown main item tag 0x0 [ 839.736800][ T5896] appleir 0003:05AC:8241.001B: unknown main item tag 0x0 [ 839.748982][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.756209][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.764257][ T5896] appleir 0003:05AC:8241.001B: unknown main item tag 0x0 [ 839.777957][ T5896] appleir 0003:05AC:8241.001B: unknown main item tag 0x0 [ 839.797706][ T5896] appleir 0003:05AC:8241.001B: unknown main item tag 0x0 [ 839.816368][ T5896] appleir 0003:05AC:8241.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 839.844371][ T5896] usb 4-1: USB disconnect, device number 41 [ 840.044565][T15044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2391'. [ 840.044991][T15046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.073923][T14981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.129396][ T5964] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 840.282326][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.300944][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.316242][ T5964] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 840.326439][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.336846][ T5964] usb 2-1: config 0 descriptor?? [ 840.421670][T14981] veth0_vlan: entered promiscuous mode [ 840.433933][T14981] veth1_vlan: entered promiscuous mode [ 840.461154][T14981] veth0_macvtap: entered promiscuous mode [ 840.470002][T14981] veth1_macvtap: entered promiscuous mode [ 840.487293][T14981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.501509][T14981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.516409][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.527125][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.538167][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.551475][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.619598][ T5896] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 840.637769][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.646529][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.672440][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.682660][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.698046][ T30] audit: type=1400 audit(1754274847.471:1105): avc: denied { mounton } for pid=14981 comm="syz-executor" path="/root/syzkaller.YPWZdH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 840.705638][T15066] kernel read not supported for file /dsp (pid: 15066 comm: kworker/0:1) [ 840.745664][ T30] audit: type=1400 audit(1754274847.521:1106): avc: denied { mounton } for pid=14981 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 840.786368][ T5964] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 840.796598][ T5964] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 840.807157][ T5964] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.001C/input/input33 [ 840.822945][ T5896] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 840.837033][ T5896] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 840.860247][ T5964] cm6533_jd 0003:0D8C:0022.001C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 840.874309][ T5896] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 840.892206][ T5896] usb 1-1: config 0 interface 0 has no altsetting 0 [ 840.900283][ T5896] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 840.909201][ T5896] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 840.928910][ T5896] usb 1-1: config 0 interface 0 has no altsetting 0 [ 840.937275][ T5896] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 840.991201][T15037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.997035][ T5896] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 841.010420][T15037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.015608][ T24] usb 2-1: USB disconnect, device number 38 [ 841.034669][ T5896] usb 1-1: config 0 interface 0 has no altsetting 0 [ 841.043827][ T5896] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 841.056824][ T5896] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 841.070842][ T5896] usb 1-1: config 0 interface 0 has no altsetting 0 [ 841.085902][ T5896] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 841.253725][ T5896] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 841.265802][ T5896] usb 1-1: config 0 interface 0 has no altsetting 0 [ 841.275909][ T5896] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 841.285438][ T5896] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 841.427646][T15087] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 842.219593][T14983] Bluetooth: hci4: command tx timeout [ 842.260918][ T5896] usb 1-1: config 0 interface 0 has no altsetting 0 [ 842.290755][ T5896] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 842.304615][ T5896] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 842.325411][T15086] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2405'. [ 842.334518][T15086] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2405'. [ 842.343584][T15086] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2405'. [ 842.352690][T15086] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2405'. [ 842.375029][ T5896] usb 1-1: config 0 interface 0 has no altsetting 0 [ 842.384085][ T5896] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 842.405796][ T5896] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 842.417453][ T5896] usb 1-1: config 0 interface 0 has no altsetting 0 [ 842.430946][ T5896] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 842.442331][ T5896] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 842.450926][ T5896] usb 1-1: Product: syz [ 842.455179][ T5896] usb 1-1: Manufacturer: syz [ 842.462262][ T5896] usb 1-1: SerialNumber: syz [ 842.543360][ T5896] usb 1-1: config 0 descriptor?? [ 842.597503][ T5896] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 842.818457][ T5896] usb 1-1: USB disconnect, device number 43 [ 842.830132][ T5896] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 842.879691][T15066] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 843.122765][T15117] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 843.928475][ T1150] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 844.026303][T15119] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 844.231967][T15066] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 844.241131][T15066] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 844.264794][T15066] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 844.281345][T14983] Bluetooth: hci4: command tx timeout [ 844.446171][T15066] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 844.457729][T15066] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 844.476121][T15066] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 844.485447][T15066] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 844.494954][T15066] usb 4-1: Product: syz [ 844.518989][T15066] usb 4-1: Manufacturer: syz [ 845.550660][T15129] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 845.706070][T15066] cdc_wdm 4-1:1.0: skipping garbage [ 845.711390][T15066] cdc_wdm 4-1:1.0: skipping garbage [ 845.718310][T15066] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 845.724723][T15066] cdc_wdm 4-1:1.0: Unknown control protocol [ 845.822022][T15066] usb 4-1: USB disconnect, device number 42 [ 845.888636][T15138] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 845.895193][T15138] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 845.908098][T15138] vhci_hcd vhci_hcd.0: Device attached [ 846.283154][ T5963] vhci_hcd: vhci_device speed not set [ 846.391980][T15154] ubi: mtd0 is already attached to ubi31 [ 846.778173][ T5964] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 846.778207][ T5963] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 846.796637][T14983] Bluetooth: hci4: command tx timeout [ 846.805486][ T975] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 846.857089][T15066] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 846.980927][ T5964] usb 1-1: config 0 has no interfaces? [ 846.987100][ T5964] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 846.999228][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.010283][ T5964] usb 1-1: config 0 descriptor?? [ 847.069496][T15066] usb 4-1: Using ep0 maxpacket: 32 [ 847.070058][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 847.077863][T15066] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 847.081963][ T975] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 847.088885][T15066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.092359][T15066] usb 4-1: config 0 descriptor?? [ 847.098024][ T975] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 847.110688][T15066] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 847.111831][ T975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 847.145327][ T975] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 847.189009][T15160] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 847.205029][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.225684][ T975] usb 2-1: Product: syz [ 847.230054][ T975] usb 2-1: Manufacturer: syz [ 847.235172][ T975] usb 2-1: SerialNumber: syz [ 847.500127][T15139] usb 33-1: recv xbuf, 0 [ 847.502178][ T5964] usb 1-1: USB disconnect, device number 44 [ 847.508497][ T1150] vhci_hcd: stop threads [ 847.518087][ T1150] vhci_hcd: release socket [ 847.522971][ T1150] vhci_hcd: disconnect device [ 847.589487][ T5963] vhci_hcd: vhci_device speed not set [ 847.720660][ T975] usb 2-1: 0:2 : does not exist [ 848.018808][T15169] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 848.032876][T15169] overlayfs: failed to set xattr on upper [ 848.038836][T15169] overlayfs: ...falling back to redirect_dir=nofollow. [ 848.046815][T15169] overlayfs: ...falling back to index=off. [ 848.102435][ T30] audit: type=1400 audit(1754274854.791:1107): avc: denied { mounton } for pid=15168 comm="syz.4.2434" path="/482/file0/bus" dev="ramfs" ino=42189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 848.620140][T15175] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 848.638599][ T975] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 848.687057][ T975] usb 2-1: USB disconnect, device number 39 [ 848.842689][T15066] gspca_vc032x: reg_w err -71 [ 848.896500][T15066] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.919064][T15066] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.932499][T15066] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.937834][T15066] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.648183][T15066] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.653869][T15066] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.690052][T15066] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.695380][T15066] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.726476][T15066] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.743891][T15066] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.773875][T15066] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.779207][T15066] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.794598][T15066] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.801147][T15066] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.806626][T15066] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.812082][T15066] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.817347][T15066] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.823861][T15066] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.829393][T15066] gspca_vc032x: Unknown sensor... [ 849.834558][T15066] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 849.855448][T15066] usb 4-1: USB disconnect, device number 43 [ 850.031562][ T978] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 850.133629][T15199] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 850.677899][ T30] audit: type=1400 audit(1754274857.451:1108): avc: denied { mounton } for pid=15200 comm="syz.4.2444" path="/proc/1701/task/1702/ns/pid" dev="proc" ino=42234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 850.808939][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 850.826125][ T978] usb 2-1: config 252 interface 0 has no altsetting 0 [ 850.839311][ T978] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 850.877931][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.926124][ T978] pvrusb2: Hardware description: Terratec Grabster AV400 [ 850.941368][ T978] pvrusb2: ********** [ 850.950495][ T978] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 850.957866][ T30] audit: type=1400 audit(1754274857.641:1109): avc: denied { map } for pid=15206 comm="syz.4.2447" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 850.979318][ T978] pvrusb2: Important functionality might not be entirely working. [ 850.985740][ T30] audit: type=1400 audit(1754274857.641:1110): avc: denied { execute } for pid=15206 comm="syz.4.2447" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 851.038947][ T978] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 851.057112][ T978] pvrusb2: ********** [ 851.069435][ T978] usb 2-1: selecting invalid altsetting 0 [ 851.086352][ T2326] pvrusb2: Invalid write control endpoint [ 851.149368][T15066] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 851.406816][T15066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.432416][T15195] pvrusb2: Invalid write control endpoint [ 851.528260][ T24] usb 2-1: USB disconnect, device number 40 [ 851.539013][T15066] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 851.572767][T15066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.575038][ T30] audit: type=1400 audit(1754274858.351:1111): avc: denied { read } for pid=15213 comm="syz.4.2449" path="socket:[42266]" dev="sockfs" ino=42266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 851.583829][ T2326] pvrusb2: Invalid write control endpoint [ 851.624120][T15066] usb 4-1: config 0 descriptor?? [ 851.632040][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 851.648481][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 851.658456][ T30] audit: type=1400 audit(1754274858.391:1112): avc: denied { write } for pid=15213 comm="syz.4.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 851.666188][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 851.703979][ T2326] pvrusb2: Device being rendered inoperable [ 851.725125][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 851.733240][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 851.774999][ T2326] pvrusb2: Attached sub-driver cx25840 [ 851.780997][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 851.791167][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 852.042563][T15231] ubi: mtd0 is already attached to ubi31 [ 852.406851][T15066] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 852.437475][T15066] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001D/input/input34 [ 852.569004][T15066] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 852.982594][T15066] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 853.143131][T15246] program syz.0.2458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 853.172749][T15066] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 853.227185][T15066] usb 2-1: config 0 has no interface number 0 [ 853.484375][T15066] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.512418][T15066] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.699942][ T9] [ 853.699954][ T9] ====================================================== [ 853.699961][ T9] WARNING: possible circular locking dependency detected [ 853.699968][ T9] 6.16.0-syzkaller-11364-g3c4a063b1f8a #0 Not tainted [ 853.699979][ T9] ------------------------------------------------------ [ 853.699985][ T9] kworker/0:0/9 is trying to acquire lock: [ 853.699994][ T9] ffff88801b8990b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 853.700045][ T9] [ 853.700045][ T9] but task is already holding lock: [ 853.700050][ T9] ffffffff8e5aeb80 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 853.700086][ T9] [ 853.700086][ T9] which lock already depends on the new lock. [ 853.700086][ T9] [ 853.700091][ T9] [ 853.700091][ T9] the existing dependency chain (in reverse order) is: [ 853.700097][ T9] [ 853.700097][ T9] -> #2 (console_lock){+.+.}-{0:0}: [ 853.700119][ T9] console_lock+0x7a/0xa0 [ 853.700136][ T9] con_flush_chars+0x5e/0x80 [ 853.700156][ T9] n_tty_write+0xc6c/0x11e0 [ 853.700172][ T9] file_tty_write.constprop.0+0x501/0x9b0 [ 853.700196][ T9] vfs_write+0x6c4/0x1150 [ 853.700212][ T9] ksys_write+0x12a/0x250 [ 853.700226][ T9] do_syscall_64+0xcd/0x4c0 [ 853.700251][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.700267][ T9] [ 853.700267][ T9] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 853.700288][ T9] down_write+0x92/0x200 [ 853.700302][ T9] n_tty_flush_buffer+0x25/0x1b0 [ 853.700317][ T9] tty_buffer_flush+0x236/0x310 [ 853.700339][ T9] tty_ldisc_flush+0x64/0xe0 [ 853.700359][ T9] tty_port_close_start+0x337/0x540 [ 853.700373][ T9] tty_port_close+0x26/0x160 [ 853.700386][ T9] uart_close+0x7b/0x220 [ 853.700404][ T9] tty_release+0x3af/0x1430 [ 853.700434][ T9] __fput+0x402/0xb70 [ 853.700453][ T9] task_work_run+0x150/0x240 [ 853.700469][ T9] exit_to_user_mode_loop+0xeb/0x110 [ 853.700486][ T9] do_syscall_64+0x3f6/0x4c0 [ 853.700508][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.700524][ T9] [ 853.700524][ T9] -> #0 (&buf->lock){+.+.}-{4:4}: [ 853.700544][ T9] __lock_acquire+0x12a6/0x1ce0 [ 853.700569][ T9] lock_acquire+0x179/0x350 [ 853.700592][ T9] __mutex_lock+0x193/0x10b0 [ 853.700615][ T9] tty_buffer_flush+0x72/0x310 [ 853.700637][ T9] tty_ldisc_flush+0x64/0xe0 [ 853.700657][ T9] __do_SAK+0x713/0x880 [ 853.700669][ T9] vc_SAK+0x7f/0x310 [ 853.700685][ T9] process_one_work+0x9cc/0x1b70 [ 853.700701][ T9] worker_thread+0x6c8/0xf10 [ 853.700716][ T9] kthread+0x3c5/0x780 [ 853.700729][ T9] ret_from_fork+0x5d7/0x6f0 [ 853.700744][ T9] ret_from_fork_asm+0x1a/0x30 [ 853.700763][ T9] [ 853.700763][ T9] other info that might help us debug this: [ 853.700763][ T9] [ 853.700768][ T9] Chain exists of: [ 853.700768][ T9] &buf->lock --> &tty->termios_rwsem --> console_lock [ 853.700768][ T9] [ 853.700792][ T9] Possible unsafe locking scenario: [ 853.700792][ T9] [ 853.700797][ T9] CPU0 CPU1 [ 853.700802][ T9] ---- ---- [ 853.700806][ T9] lock(console_lock); [ 853.700817][ T9] lock(&tty->termios_rwsem); [ 853.700828][ T9] lock(console_lock); [ 853.700840][ T9] lock(&buf->lock); [ 853.700849][ T9] [ 853.700849][ T9] *** DEADLOCK *** [ 853.700849][ T9] [ 853.700853][ T9] 4 locks held by kworker/0:0/9: [ 853.700862][ T9] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 853.700913][ T9] #1: ffffc900000e7d10 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 853.700953][ T9] #2: ffffffff8e5aeb80 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 853.700991][ T9] #3: ffff88806ef990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xe0 [ 853.701032][ T9] [ 853.701032][ T9] stack backtrace: [ 853.701040][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-syzkaller-11364-g3c4a063b1f8a #0 PREEMPT(full) [ 853.701061][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 853.701072][ T9] Workqueue: events vc_SAK [ 853.701089][ T9] Call Trace: [ 853.701094][ T9] [ 853.701101][ T9] dump_stack_lvl+0x116/0x1f0 [ 853.701125][ T9] print_circular_bug+0x275/0x350 [ 853.701149][ T9] check_noncircular+0x14c/0x170 [ 853.701175][ T9] __lock_acquire+0x12a6/0x1ce0 [ 853.701203][ T9] lock_acquire+0x179/0x350 [ 853.701226][ T9] ? tty_buffer_flush+0x72/0x310 [ 853.701249][ T9] ? __pfx___might_resched+0x10/0x10 [ 853.701271][ T9] ? tty_buffer_flush+0x72/0x310 [ 853.701293][ T9] __mutex_lock+0x193/0x10b0 [ 853.701316][ T9] ? tty_buffer_flush+0x72/0x310 [ 853.701341][ T9] ? __pfx___mutex_lock+0x10/0x10 [ 853.701370][ T9] ? tty_buffer_flush+0x72/0x310 [ 853.701393][ T9] tty_buffer_flush+0x72/0x310 [ 853.701422][ T9] tty_ldisc_flush+0x64/0xe0 [ 853.701443][ T9] __do_SAK+0x713/0x880 [ 853.701456][ T9] ? mark_held_locks+0x49/0x80 [ 853.701481][ T9] vc_SAK+0x7f/0x310 [ 853.701498][ T9] process_one_work+0x9cc/0x1b70 [ 853.701518][ T9] ? __pfx_console_callback+0x10/0x10 [ 853.701542][ T9] ? __pfx_process_one_work+0x10/0x10 [ 853.701562][ T9] ? assign_work+0x1a0/0x250 [ 853.701577][ T9] worker_thread+0x6c8/0xf10 [ 853.701598][ T9] ? __pfx_worker_thread+0x10/0x10 [ 853.701615][ T9] kthread+0x3c5/0x780 [ 853.701630][ T9] ? __pfx_kthread+0x10/0x10 [ 853.701645][ T9] ? rcu_is_watching+0x12/0xc0 [ 853.701664][ T9] ? __pfx_kthread+0x10/0x10 [ 853.701677][ T9] ret_from_fork+0x5d7/0x6f0 [ 853.701691][ T9] ? __pfx_kthread+0x10/0x10 [ 853.701705][ T9] ret_from_fork_asm+0x1a/0x30 [ 853.701739][ T9] [ 853.702927][ T9] tty tty1: SAK: killed process 15234 (syz.4.2455): by fd#7 [ 853.702979][ T9] tty tty1: SAK: killed process 15235 (syz.4.2455): by fd#7 [ 853.702992][ T9] tty tty1: SAK: killed process 15248 (syz.4.2455): by fd#7 [ 853.703003][ T9] tty tty1: SAK: killed process 15249 (syz.4.2455): by fd#7 [ 853.746070][T15066] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 853.746099][T15066] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.754831][T15066] usb 2-1: config 0 descriptor?? [ 853.930771][ T5964] usb 4-1: USB disconnect, device number 44 [ 854.187914][T15066] uclogic 0003:256C:006D.001E: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input1 [ 854.404291][ T5963] usb 2-1: USB disconnect, device number 41