last executing test programs: 1m53.607558247s ago: executing program 4 (id=1361): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000020000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e0ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, 0x0, 0x88882, 0x0) 1m53.459935155s ago: executing program 4 (id=1363): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m53.42081843s ago: executing program 4 (id=1364): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000020679e08720c140076c7010203010902121901000010000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="201480000000ac1612a89cf0048a7d5d"], 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m51.508438789s ago: executing program 4 (id=1375): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c00010000000000000000000400048008"], 0x9c}, 0x1, 0xba01}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00"], 0x528}}, 0xc000) 1m51.295973435s ago: executing program 4 (id=1376): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r1, r3, r4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 1m51.290031552s ago: executing program 4 (id=1377): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = syz_io_uring_setup(0x1f8, &(0x7f0000000080)={0x0, 0x6c0e, 0x10100}, &(0x7f0000000440), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x5e9, &(0x7f00000017c0), &(0x7f0000000040)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) 1m36.134286196s ago: executing program 32 (id=1377): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = syz_io_uring_setup(0x1f8, &(0x7f0000000080)={0x0, 0x6c0e, 0x10100}, &(0x7f0000000440), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x5e9, &(0x7f00000017c0), &(0x7f0000000040)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) 3.303913245s ago: executing program 3 (id=2417): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x44010}, 0x1) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f00000001c0)=""/116, 0x74}], 0x2}, 0x0) 3.262518779s ago: executing program 3 (id=2419): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe) sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000240)=0x5, 0x4) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x20, 0x0) 3.12794652s ago: executing program 3 (id=2421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x7, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) 2.963918852s ago: executing program 3 (id=2426): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008aec1, &(0x7f0000000000)) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 2.835879681s ago: executing program 1 (id=2427): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 2.764090344s ago: executing program 1 (id=2428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.711532262s ago: executing program 1 (id=2429): mkdir(&(0x7f0000000380)='./file0\x00', 0x1b3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000140)='./file1\x00') mknod(&(0x7f0000000300)='./bus/file0\x00', 0x4, 0x5) 2.603198853s ago: executing program 1 (id=2440): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)=""/202, 0xca}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.007557803s ago: executing program 5 (id=2435): r0 = fanotify_init(0xf00, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x5, 0x31, 0xffffffffffffffff, 0xf983e000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fanotify_mark(r0, 0x105, 0x4800003a, r1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902"], 0x0) read$FUSE(r0, &(0x7f0000002f00)={0x2020}, 0x2020) 1.527991081s ago: executing program 0 (id=2439): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1.488637461s ago: executing program 0 (id=2441): socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 1.139872325s ago: executing program 1 (id=2444): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r0, &(0x7f0000000740)={@void, @void, @llc={@snap={0x155, 0x1, "e8", "c312bc", 0x147c2}}}, 0x8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) 1.136923638s ago: executing program 0 (id=2446): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) ppoll(&(0x7f00000000c0)=[{r1, 0x402}], 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000100)="0f", 0x1, 0xabc12b3054869407, 0x0, 0x0) read$alg(r1, &(0x7f0000000980)=""/4087, 0xff7) 1.045199623s ago: executing program 1 (id=2448): r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x792, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) 895.800763ms ago: executing program 3 (id=2450): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000500000000000400040054ef0000100002000000000020"], 0x24, 0x2) syz_fuse_handle_req(r0, &(0x7f0000004300)="e05acff62a41134e0f28a6ba227995b05776c837ab3a066a329e33b775d4586b7a0c48f3471ede96c5e03e1f347acdb576b1b8c75ad4fe76f3ceb2331adb9676968ebcc8bc70b50acd984f9067e2499ec9e28061d978efb1ebbb90d82d973c7b4bdadf6dcf1cd1ba8a4b8882779ab3c5a956791fcf5097ee4b0da8d910938b1edf34fbb493d106ad0270110e14f0c94d02e722ba66bc7e3d90197f4fc676d18723513482dbaa39e68b3a4c0d23f9706f67f76202f16de2f3a40b48a2de184a15f89b2935a65017dbd8783a3d9153c275b72470d0fc15920a659c531d6ca85c36012deb6bf650f9d0a598707c1798a3636b7339a0a5b0a3a62073dbc94eaeecccc58722b8d76d0a447fe0ec7c122ee5d028f5dd17813e62da599f209c621c06c98e0440c008b8678dd65ec6ae2b0b659d6883ff1170ff904db86d0748e8dd1e870c6255ddfc90cbb5aba594c593f64f518d69ab7e02425299303d7d37d5ed28afde8fa2daa4627855dba7c4ab12209d5a836ea0c4592cba568dabd5453382eb5f7e6ce5bd0489b876d4d1dabe18f0440190f5898675bff139d7e8c953abb31383b932a67808cc2a2f67cb714b9a2c8e75f68c21fbe56ecb49f39136b7a0b7b6a53a93f33f9987fb7e7437a0852b9194cb75bb84f3b40f4617ae8ce9a8da6ca74d4e7c737bbc5126b0b8bd0c86f4fb861fea02fd7b8649fb1c0523b30f28a24bd7f58495f29cd2e092f5b6ff29f4de5ce56894fbd9fa78df0fb93efe2192e966e14bc9bd4671b0a2c6873d7750773a8aef7f1d35cad742e64664dcd277b2d604f564fdc519911c0749575c7136226cd68f2ec02a1563c727c1eac916cc426da130ac5c5fd6c0169161c2d7f79fb16b9d8025a6c74e14abccaaf30e5e39806a8b1866cc62e8e238c38036cbcb0abf003861103634409202ffac458605f599ae67db8f4cbd45f72ac9bfd126783135f552dd6639937ff0f77e15ebf8a49fe3d6a7da4fd6faf018b62956957c13ae52537c5ffbb4b2c28f3076468b1d11b018b6af74ff706f17c4babd4987bf9afe98a4b9aa357137d9383b8fb6ca370dd2fdc582aa701e85d926bf3087565231d6089911b2cf578786607ec5849d3d58dd423ff4558092c9a22a1153b787f37c9075555e1d06bc99b95b03bb0862da5be4f8d4718b1c6b892c1ad1138cded558e910553a70699e9d6ac935c227bd3326bfe40f389b16517801826d0ba7a1d74528fa273eca268a74e11423f0ea00e2745abbb7342c846566cf067b38a308babc8a45e607f39b66ddd2e772867cee3e14b3e7dd8844c3651330d15db8aa51d94c98ece900f4443bcbbf8849c3fafd4e5d4e1e5ea4306c081438e1694c59bdafa3b6bf80302b48f09a541dd30db6026ac247303db3facce171b64b48a74a1865db29a15db73f6989f7e5d6b6f39431511246b2ac2873dcdbea3fa5636af6813c83a7fe8b3b7936911a6a47f10823188d0ad18dbf3e4c45c296210e5bfc3abc3dc3836fd60a691005857db271290243709c57fc1ca3ad9a7938550b81b473c66e614fdf7ff35b8e19e60f7616ed19af91e4818c5b2c30f5ff903a3da9c7b7debc5d1b9e41f4a12f122a727a627cc5e6a0f8d81161088a93e4d0e592b7e977287833ec9446a6b44aba303e12ecc19c7fda316f6049db6bf1617f6fefeebcded95f75371fbd6db605ed7b77f8f91ea27468a68e068d1aad50a4118bd619aa85d1f5ee0eb9bbdfcad7335628e3ae1340681ce824204a9997f8aad87c8ce0534482cd748148689ec331002203b94af4ecd11d5b75d80838478c26cfee0fa076c5baaa82483b04898ead705bdb37247956ee25db667ea6668a4f3082332070489da02c3b5d25091e3a00f884265185a28757cdeedb3a1e4a0ada801d4a386fbab0c1de6f35fbb6c7d81fd15370909a387eabd3415f146129647a13f20ccfa69e436ce067ed1a9e0dfb877c85f0b8032e64f5379a9f5a92967533f9b45584ce1a04b962306d2d707e0e462d9d2ce94dbf4c52835c2bc005d1c21fd4e64b0f2578a072d8c442c49bb9450a8fcb49a4b2167912ff1f5946585983087deffee403a0c079ba90a0b644584137c58626afc604ab684650aac5ede8632f3e035da41c511bfb25a62d0a283e35fdd67dc0ef135d428297805b5fd0ad62294531f46171f546c61eb6475fd9fc7c8357e65737d39a741417f8a0a7e035f696c1a83d44837e360592db9ae7afd2ae7be9859f062d274b0862746c9ad804eb1c72aecf6ef9cfbbed33f68f38f25eb493d165f3012c04ec02d42421e2232aa4b30910f9d4fb91b9ba2e7b40ea4fdb60f6957e3afed8cab6d076b2f5ac59ea53bd1e9d944cb53deaa2b8ba097664fca77ab97666c6add05e7556b92d8ad11d19887e83a8ae9dc086bbb4d23cabb3615fdc05e35c61fc3e28315659509df1cbaf449ac909f36c69f5366f1bbe9b3bf9899533f06a6161c986607292a202bfcfeb2508aa18dd993d2d239b32e4f06ba1321d607c154965b9d1f52c940777e69430967d456cafabf236a2f8cea019cc87b350a5bc2aed7f1469ae6cadbcd579864d2194e3bc71e2596c690226b15c86aa0c2aede98cec57c4e752edb6fbe58046ca59546511805a71aa187ce4bcd5399c36eb3f76681a63e5a1d948a9cf98703aebda62c0759477f1be96841d60256bb2d7140fe4481d4d5180df9595fae750da2a9178c89fab47766ae30cd3d8ffcb94eb4b4245ef19ee3d95b89094f528c16ed7289703afd5805e923ce48bb5e451a93ceadbef1443e61b6b59fc13e79ed418dc73cf12b302ff40aa09994374eeabec532bc98b820c21d15f2cd10f755132b12c824a8875387c6682e991dfc01280ce1619c23593659de590b080c7f2eac12ec00704ab8b3bc2052ba9ba6f59a2312b9ebf62c6ea1ec5250435c25215f87350903140a4a12d8e3f8e233f0d63002dbbbd12a7ba9282768dc2b2b9aceb9e45e9da4a2d4a8da83e72bf0cf91bc12324b544a1d6145525dd9cf44199d7448d839bc67b1d33d7da10a9abc08f8f08a894edbd42c1baf8482feb06d68f25c4405a624998bd4c28cb9b845712ba307ca9b9ff56131617ceccd2927ecd57796eb103b6b15dfa12b3e8e9aa2ac8af20cde7877501a98d8b04dbd96d606661066dd80ef55d45fbd5c410d4a0d59ad53cfe3779350e71f109118bccb61121bb8eefced8feaa72c95ed737490c7318e7db86d94eda2ce5f9b04f2308dadbd8a2be6991309a56959c6be4312623a04483bd72a64c210bc6ea600d887aeb3781030a0c4a6ee06f38896bb95688ba5c735180ed50f1fce6c321aa0503f714a000b6e10f22d019e0c5bdbf982bc0a3b15ee59e9c573f77073ac64394f3610f68eca10092a7b7544bc1e643c30017133fec103af1111536ec6b37472157ef7a57186d4b64812ee20f51257d2cdaa19b5508fc40824aeb678c368149387f9083d645c9b616fdf08459aa792897293e7dabfab1144ea74d39a2f0d3632d16ce1b1973717eb83d217250646903207ccd9804e584c12bd98be5096c2a43f21161547f6b2fcf244f12a3c6863a90b45901379a1df5948dba63c34aedb7b877c675dec404acdc0348482502c3e9a886d0829a17c06457a2bb3b6c843285b1aecb4c917d9d586b5b47be2895dad99e620cc824f4d0c577f8b737c20c39c40b77db27e8e72d83c6d220011e7e304c97e281697afe31e077f490f0e632a3fb5125351051543125d7895e86007e0be5527f57f98db8235bfaa3c4d25514ae88d06289261b49013f25326461a5672c0fd975af977d9e9725d14c923decf5b60cb800a267644e0fb5e8dfc734c5b1ba810ff276f24f8fd0608bda3ab335252fbfce4e75c533bf44d2f6a2d14314b5bf24ab3d3dc0794a120379264d2bdfb4111e614b4f68d36f930b4802863bd47dc7b8520f8e95b9673a9bac79dd4e68b7dd9e095d87eb8004f19763459171142145ff6ba160709fa7732579c48bbd4ace904fed83603de20179c6d230b1b098b2800749c1836b222b52da56a2d47dcd9a87e4ea2a2fc3da46b05fb446d1b6e134d5979c43c1e79b00ce0909a020fa2e0377e19bbbeb5c4453a0f04a09242a477bcf0fdf824b58b196d7ee987ed68092c6696cf2dbf942310ed22d674512a4428e9e194127eb44828f9a812c762460486889d715dc6dc4377e557834f31cab1db1b276a5e3c14618c233ae523f1e3f3c0078fe150354855b3c31d0f333928efff70c7383cf65880420cf7ec307b708307fed0745032cb81891b85d67fb55303a30da8f4b3bedeabddc6bd38d92edeec80aff10f0d29f116cfe31f1b1a96962a713300635329c04977ab606e50b93cb1305f5a82c826febf41318f1ddb7e6fd0eaf37936f6950f841c8853bf1acbb96ba04dcc4fa5a23d8eb8e5b22fea5b5784453d51799442c665df83b45ed6fa99401ceec8e0f62b89fab9fadaa0d51e845fcf2ec20676b3d867304b7f893054490af7a0080bdaacfddd54fee4349e03dff156c9f08ceffa31e3701d333251f7cd4b07c52a9901d4fd32bb01261544c7842df78b420b99645e7c2695fcc6dc4e402ddc0ac039bdaf4129a4ae70b37b1c61ebd47e6cb7d6dfde13e7e972c74b706e8a3ad7fddd50cf581d2055ff5b127695d6f5c8fc67df49aaa56afb789a9fa384125f13d928feea35139cd9153b254c6b39f838c0f0367c5efa13c5fbdcbec5c9f88d7d2ff54aaf8d0c4db4cada8b74ea780d32aa0e66942e936061692182be3c5b21fcd99dfbfd22467d4d3ce3d78e88f1481bc2ed388f0dc3f262a079bdcf41d2f21f1de75202fac6b4f8f9f8a7ee0bdb646ce582f6fd358461fc4266f980f33138c41daa3c8a82088eccb8a2944b6dc432f8149414115f209282945e51e5d0a999d518a32fec37e64e8618879f7d65e088514efed5104ead3fab91c017447a645575a50dba5f28a3a6359a9d591ee2c7eadd08b86e733a6a8723880890d3158e527b4d9a676b02ef0faabff71865c487641c6c104c15178106d878c6cd588b2c6f834a4a2ebb9d129ab28eb7dc6a556f3d868e2765034bb146c7be493d19302b31881a11257ed202bd20d53f05d7b5c96954b55cfb933fcf0945a10b460bf7e276ddb6fa313225b7bee647e8e6d5c1ef68dae19d4cca98f00d3a860602b66b09a1392ad01739a5ddb7117dcb0053e9c31602727101225c627225674aa1e49f3c3abeffada9f5ac76b5f10a2de55951de24b1fb144f4c1eae80e27bc36e5da70e01ff37ca465190180644a27eb9a96a15d6fb4eace5e652176a02d4ef8228bd72df5142351a6f1b08981a5c66eeab943983277c1bb192b668ff25cecae19229da67e2d8e3655c409f597b68260c70c47c5843082d94a94e72fc42ed11eed5a0cc5c9eb57de53947d2823cedbd9e417682b7b19ed3be8d27b3a887795b062c88317a0dc04bd6a62cf05fb78b2955af0514a99e3fe0e0f382c9fc2ff820af6451e0915722162c53b060250890c381ebe2edbb63359643ebd780a32770e78c6af810f341f3e07781ee25c92275ab427de063326239514c6623c9a3a2ee2c80da4c77404607cd208e2e9a273cfff2cf9c6cac6ed4cd6641d8890ce82f229cec11b483db0e4fe70161829bebcdc65351e75eef29d4ec70495415927aa6be603dfb8c5c34f4d2a0afe0bd0700540b8ccd9e0421efb4d449225fe38cf4ea8145e7e1ecdcfda0c1b8a6439b3535a7c853065f665cd28c86fcf4b47ce321edc9ba1bed1a6e4160e62819cc8f9d0914ca7c8f54c6392d9b8d8a9e23e6877e240cf50208b5dc085cbf5932d730dde94314d269f8e4730e72c62ebf1100b423e7c02c0c7b3d579fe738a75bf3d29264bc27009673ebc5fd0d777e2b43d4b738addf5e1c1d084270f5ad6441d10e723331ef5d41d1da2597817968e3c33324fd876bb2c4829921fb5c835ed01e78d0fa88d1f4043693a5cbf592f350505d37efd84845feb77ed38a25df0e98678047f320080972ae011d5ecc9b9cb1aa519fc661c3c909ccf1002844a4f3a9ff21dcb3e861cec427cea26eb765e3d30c532f3c67aead616cca4ed0ef627e3edec6a98e0f0866af49b0019ef8c50104b4e21c17b17b36b0bd5d785c0a46dd5e84dc7327d46c73637602f159900ddc1e6bd3f9afddf45ca54cc7958a6fc0a7e9b93c7e91da8afba0a63238f3847860ebe9403ff3b80e067493d34c55e7562b8b0fb06a2f8c1ddc9cd0f785aa9814cd40aa66ded541de15e647303864b27b5cb7631666f4166b6daf929fbff41fd95bf16994a6f9bc8ce579da13442357cd500f10c392ec78b0c161c99742c03b4d745262d86500e2a981586627350cfe1bcf4710b0824070abca21e1a53a36bfbc12ea7fe8336f741784746abef46f52ad131eafd02ac24c1d1636fa30337251a5f169cdb8c57fa214f2a900af0ee866748661f1a67a6c2c6a6e49ce1939139e45a456c7dbbec8a09be48853cd9b1feeefc6729740dde9de04dd1e0f9c774d387a902174274729e6349a7effd237e63c40bdbccb72e44dab5ac1eab96eb75a6ea8f2f7dd362159131072dd8d733fe9c54d1ea4771e85e7cc0b0455dae0a5c8ece44aeff7e2d247e94639c9a74f48e690c02e89d0377fe3afce5d6abc706dd3e23d19809dfa948b010b6d66556ea81ca3690c3322478dfa1e9ef6de5e4d21b6e9867c611fc4e78abc94bd3c9f112739f8d2996834f54d1137f34ff5442c2432746c37031bc7e9201fdeb7d73a24163fe423fdf3e8e22b655ec159664e905675d8bb80d651d4dda22dfed198d02c2b8ff5b0760fd2aea35e519619393cb66b048b59d4e6cf398652a4726925c8a1936ee29cde1bd70fdeeec0aa1e9289711c57ab8ba170c427173fada71e9a1f0fc4cbe23c248f5340db3f9ba4f8c23da230ef4c1013ba0ffaaf5bfc58cc2eb5084f96bcdce7c1ce76c4206189bfbc9d8f1238aed641c39693363762f2cbb1b3433cb01fba42dfbc7b1aa6a46cb9bfcc98a8d8f46cde8a5dc9d74de7fc73aa22420acd949a26c2bd0c8c6f05fcac03a88e622c851454f583623b35f825038ab1aaa3091d05018c2179f473a889219e3414bbbf4eb62333df13ca9eef4dd987358c90d6bdc113aa2972cbff9b7d7e5a76fa182609401567889febe7f2443b338982c3be4328caa199f4b14652ff609b3012fc66cd7a02d8e837bf85f7d2ee7f5061b359104a90e5a74179f6fe7ea44acaf2e8531b05875e041a7f42f6551e89518dd06f04ceaa5140fee9535cc3de18ca42721661d395e23828b07d449e4e09614c8aa753d28215608a56dbb66a929a47fe1beddc6123afad8d4f64cc5602138a289ef1287548d914647d144c3010cb5e3a90753aafebb70703a4f0eb4edbb991f47ed529b219a9fd421782a8a9d73d18e9ac69768791f408ee65af8f78ca3986e878276993c8dc140949f7410c8aee7b57739ffd57e5096ef3c1edc9d242d8ed7d0b5c8f7d4ff37b4ef76a6d4ca8960793508313c751a194ce0dcd0b08e3c3b91f06cb9f158347af1689fa86e9229970ab49bd44bf99da76818f7deb102bffbc575cf53966e247ce3558f77937d822ab74a437c5575dbcbd907199d5b645ee6ee122dc77090960302f8fce044fcb5d19a803b92a95950c262ea117522e6cbe44f5c277d6d7e36890eb7702136dc78abfdc5105f138b9415ee6ed0b4e1f805b3bdb5d0e7aba7d0aaf7c6c100edae89b8496804a7cc9e61d002ba42abb6ada2fdb12f672a15f2f3ef7d23330a5d411195bd2e3caf54d7c29a4ac9e13db64d88c35587059465e59507acd1ed7393f3557b8991116fdbb675f7f4a30acfa0cce3e31b817834a3037a18479aa764a83820f7186460fb96e07adcd529cdf66d0f6dad80260f51d3a9a1ebe213d03b9b71c9c522b4b8bdfe40b06a9da4c722f9a73d43423b456b2464bbb546b0527f71cbe600478169bab6caab15b98d4383552cf0dbf3c4b5208d901873f79901d174410ccd887073c1c9c6091f01c1772123f8354efdd6646d1e5373ef0e7750406b2c9acc1315c9fe1e9b0dba050717ee4f1ed17fc73357150921e5092c8edeb79f25a5b5e142e6813f20871252ebf52752d643a2965058509271b370bf98ef0fe8983a4725d39685647416757b85f87cef3ed7265d67a479d7752dcb3fb78447e6dff107a51365cba79fdf6edba21db2d3b52bf70579a398c36847bb3ec5e8ced0ad82c68c22d422335f73ea5297a95c5263d2403e06b7fb1d30804efd4d535894e0e0fb4747bd77caf3e92fd23d0bc8c73e08374ca42b52fa8c02f1ff3d19d8eaa78ef2ba7b3b1bea75faabf2658cf0a49f59bdd1fc49618fb60260053033184ede8c6a10fbf5f295a8a96553d469b160b17d9dbef52a651afd41fa87a169e5b34c8f3f0299aab066bcfadb07055502432b285f42e369606c4217f10f947fab6bd24889ca0aafad8be5ecbf11462b3a1cfd0c93c80e0a5611d6248a0a4fcc3a2307a7de22d1e301aae233155bd10d11f6b37d89a34c5104049bfe242ceba72e5968ead5ec6ec6b7056c8a1c390f6c6640ec92afbd76fb1072784ad7349ca30b605d6e755f0a21703724394a7681709f7b73aa34f6f44dea15264ef10e86a1079d64f98f6f7bb50bd2e0caca18df8b09a51ca436834ddc235d60fa9500bfb09fbb1dba93c95e1406086f83f6950a0cb9a4cd8ba97333b0de1e658d42469ac93529c596712231f8e0410992d789d326a127bc8c0d901f4dc99b36948c782410052229769f5177b328a6ca68df9e4fc4638cf090d17a4704cf142271418c5a85c7cd292b6fe1ac9e1f2a1858d17e5318d4d75cad3c4e7f2b3d3da458e4581217a07b28ca94043cd0d31d1af5264b8170ef325855a5b5863f01541dd1428cac12793e9080919f6d4b6f9f1255032b44daf64d2ae7b1084384d0d9eb76b7aa18c70b8ce5a174f2a3f73b31f98a9dc329c3f5e1a4ff04c6b85ab3e2eb95f8e265915937b5bad0088c7ab15e2c9cc97707039045758b56f613f58d8100ab0a829c2672e99624494ae81983c23dced6381e718454e714c00d6df6d76f502bc2bc7dd8dd67279418cc4855e33d9250dfd9eff61c98fb06d578d92d1510c1589025dc2bba8208b8d4554d9718bc846666c984ecd7442c60c3437dc9adb4a8bb671cb828ae0a1be34a4db662ef440fce64a6194a296726e7fd6c2b0d2dd52c785d01b26c66b363c6be384471c0e5e60aacb8c1c47751f8c689892ea1ead15f157dc7b567243cc298583e5f37a6bd4ff9d947e2ae56a466f0c27408cdb8b2b7036598aaef45c995b4b1bcb7f110b5c5aa87fdd652e30998796982fcfa0911558395ec8f63e7fc898221d6a9b904951600f1caf077870db43f5e1c59907e4d5c50c9b51e365cf82f4a77c5bccbfaf90b1ce51aef03675e7c45e2bf46f98bfc0d140273dc2ad2e1c25c74ca2edd2efca89aa1432d1c5450125b8a0c19326b0a8c845e657bf69481918a75502de4fff5db8c706fb0e6d0d7263f3b213171f478b71a67257924a8f5ffbf29215783d21d379f50722972cd7c96c4577dfd958155d15214fe704e73effd98092f640b4e376804013028539422407156de850d0cf7797383d0c9c7e7a0c79718003d5748b5393eb3cd8c18f314cd94139f432f4bc82f908533cdaa7c80d0d6d26e1228f8d00a8882b9b07fc6a177d20231e7f42eb40eaa029a1576cd0cd32d7da652d01824077bcf175d7f9540522f38a815aa0e2267588d9ddc6ab5188e45decb68c93091a3607c0d8f158387e0e152bb4a8da4e66fc3c6fde1fb8f4d00f03885b7822a8587abd72c36d10c77e1c7222d24e2bf1992a17c07d586540a0ae2631687cb9197a655fb66690c3b0a0de8808945ba66ffa1e60e0d9623d067fc6f8a233ab53332478d538597fd798f0abfcc97182ff22249f95bce4a07d9f410ae919fd3e0d313a5b12c03f58de66ff5d211e25c791c108ff82ade5be2d59cdb15c6a4759dca915ddf3c07bda00b13018bdb95caea0bf170a15b6cf53a230ef717e1c90233735b9693379e7ef711a367ce42fd7c3ffe25496789342517332a68350a46a3a8da15bfbb63c45f8dc7c5d25db7ab473da177398443857e81bb58d9aa6d97e0bc685e1b40a0704c330e1c0850b9e799207be79508f927fcd5df193b929e0aad5a426990f7c19c50c50427c66a73347fc0937f091c98668f1ece95fa029dcce72977d51a836b6d7e5c93084968ffbca70619eee8700b1a9cc5056b5485ae3d5440b4711b8600fd10fd814cadde2ed11cc6b241464a002fb06ade3ceb7e89fb74462c9abdeb9e57eb4f9abbabd23fea5f970417a7fa8a0e78f96b233ec75c6ff89c0068dac52bbafbdc1636f8156a1681acc405b52c65960ad32bac32189c074390c11385dec2b6bad34e95de5e848845adab92a7edf2e60f3c70fda609cb76662a4b98b187b93a739bbe139054b09f5488428b2c8b462e8f5cea5df40290f2dab5ed51cf9e719688ecec4ab1c72b8497efa1746d1bc9b3dff2dabfcb1092f1856f17c2a9a7c37656eb3ec485ffdb0f51149391d6131dd1d8554310c60598e49afad834f5e5255f21c432abb377f54cdf2ea82148d73475214e28346785d797bc4e657d9a2f1f4ce54da741f8caf8262335e284e2f8a04a823de564e553474c39ec1e763700bce1bf030eacaedd345fbe3c3af2120f3fa962ceb2b1427663d791b5936a80b336941c6079f468f92d5c10deab0dfefe9593b76b673a71ad499c5d0fff4a9db2a5f5a0eca0c2c5620abf503deb905d8cb7b6c66865ee69bf31982ef6d9ae8834d361dce14d535a2025db065f5429f3945d5615886163892e1e41fd34c44949cd97592f1a378027de0e81637c11594609c1808da0cdb64de43a871b2b2640f2642d6c1aae34d83b0b0eb73aedf94ce7c1daeddf8cf684672edaf1ce0c7757f163dae3a4350cef5803a60f1e1f3d5eb277a17d38cc32ca8b6fdf536720ce186e7be6507d720810ce8801be2cc5488c7a6f0e398878ebb2ee530d62b61bf67fd4a7fdc811ecb119e4a6e7c6555685850656cf52dbc2a1da93d8550a7941a8a7716fa348f2cbcd6f58489051bf01c0ad0745b8a1e9a10fb748a9ae9f7897dfa81efc7fe240959a3857385f8be3a8102efb0791e1e01e539b370b8ea57d3b7b747bfce3a206612410c0a9aa9130320d80a912434c5a47048c1ab6901e7806c72fef1f4f59322bbf5a79f444a0eec2397a76ae63a22c5bc76a98c4e65212258f963709c07c54dc36ac15d16d7f34c6becd2de54a3ca98babdbe1068275e18585abd3a1fb4e889ea087d918ce2e791098a3e337926a408e9301f2e8f681c50b700cfc240d2a692516e491b7f4774309953b34372fc5425832d4206079872e4387f2343de66525c63c71b1c9625e7649adcc92f279d51d55fc771f7c8b81c02e8a7a6b2bb6f0170d6e5552882434382163f07ea5e4c5971bff35f530e04ca0247f5bdd27929eee90e2078141cfd2d45a1cc2a1bf47012025fa808b9e849978011e482fb7e851e5efcb02796b6a4ce2b72e8e83bba54670b912668723803b00", 0x2000, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0xfffffffffffffffe, {0x7, 0x29, 0x25c17c22, 0x40000, 0x2, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6838}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 895.598928ms ago: executing program 2 (id=2451): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0xfdbb, 0x0, 0x0, &(0x7f0000000440)=""/217, 0xcd}, 0x218}], 0x40000ee, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x7c5c7000) 821.122143ms ago: executing program 3 (id=2452): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x40, 0xf, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000840)={0x20, 0xe, 0x28, "f4aacec3362af1dd528df8fecdc4a32736c4c123e97d09406b8983621cf5091465fa0160441ce727"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB=' \nx'], 0x0, 0x0, 0x0, 0x0}) 807.64402ms ago: executing program 2 (id=2453): socket$inet_tcp(0x2, 0x1, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x18, 0x28b}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 668.037876ms ago: executing program 5 (id=2454): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f00000000002000000000000000010021"]) 652.636023ms ago: executing program 5 (id=2455): r0 = socket(0x28, 0x5, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 630.207795ms ago: executing program 2 (id=2456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r3, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000004c0)={0x5000, 0x100000}) 536.402611ms ago: executing program 5 (id=2457): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 451.804958ms ago: executing program 5 (id=2458): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000440)="63c4fcf1", 0x4, 0x4008801, &(0x7f0000000100)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) 382.705478ms ago: executing program 2 (id=2459): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x7, 0x1}, 0x0, {0xfd, 0x8}, 0xfe, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0xc0bc5310, &(0x7f0000000040)={0x87, @time={0xbc, 0x7}, 0x0, {0x71, 0x6}, 0x6, 0x0, 0x1}) tkill(r0, 0x7) 331.965007ms ago: executing program 5 (id=2460): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = io_uring_setup(0x243f, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.upper\x00') io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) syz_usb_connect(0x2, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201510329fbf04038074045cec60102030109023d0002020610780904d40901786d3d400905010000020904020904e20002b22618bb0905010000027c9e09070585e371932d0905070b"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 242.792313ms ago: executing program 0 (id=2461): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 157.060125ms ago: executing program 2 (id=2462): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, r0}, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x6d7069a227a0467, 0x11, r1, 0xcc9bd000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xe6da) 105.458232ms ago: executing program 0 (id=2463): r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x22) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) 100.389439ms ago: executing program 2 (id=2464): syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000240)="b9") r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 0s ago: executing program 0 (id=2465): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x42, 0x0, 0x0) kernel console output (not intermixed with test programs): 2] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.550777][ T92] usb 4-1: config 0 has no interface number 0 [ 245.557778][ T5868] usb 1-1: config 0 descriptor?? [ 245.563079][ T92] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.575504][ T92] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 245.592614][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.604653][ T92] usb 4-1: config 0 descriptor?? [ 245.623472][ T92] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 245.886548][ T92] usb 4-1: USB disconnect, device number 26 [ 245.984862][ T5871] usb 6-1: USB disconnect, device number 8 [ 246.056446][ T5868] kovaplus 0003:1E7D:2D50.001A: unknown main item tag 0x0 [ 246.076514][ T5868] kovaplus 0003:1E7D:2D50.001A: unknown main item tag 0x0 [ 246.085609][ T5868] kovaplus 0003:1E7D:2D50.001A: unknown main item tag 0x0 [ 246.096935][ T5868] kovaplus 0003:1E7D:2D50.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 246.418886][ T5868] kovaplus 0003:1E7D:2D50.001A: couldn't init struct kovaplus_device [ 246.448551][ T5868] kovaplus 0003:1E7D:2D50.001A: couldn't install mouse [ 246.482704][ T5830] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 246.492881][ T5830] Bluetooth: hci0: Injecting HCI hardware error event [ 246.501630][ T5824] Bluetooth: hci0: hardware error 0x00 [ 246.514657][ T5868] kovaplus 0003:1E7D:2D50.001A: probe with driver kovaplus failed with error -32 [ 246.527206][ T5868] usb 1-1: USB disconnect, device number 22 [ 247.123538][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 247.129658][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 247.166376][ T5935] libceph: connect (1)[b::]:6789 error -101 [ 247.196740][ T5935] libceph: mon0 (1)[b::]:6789 connect error [ 247.303981][T10253] block nbd3: shutting down sockets [ 247.443118][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 247.450585][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 247.473256][ T5871] libceph: connect (1)[b::]:6789 error -101 [ 247.486622][ T5871] libceph: mon0 (1)[b::]:6789 connect error [ 247.523578][ T5935] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 247.592644][ T5868] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 247.682200][T10263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.683138][ T5935] usb 3-1: Using ep0 maxpacket: 32 [ 247.701203][ T5935] usb 3-1: config 0 interface 0 has no altsetting 0 [ 247.710654][ T5935] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 247.720879][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.729035][ T5935] usb 3-1: Product: syz [ 247.733723][ T5935] usb 3-1: Manufacturer: syz [ 247.738410][ T5935] usb 3-1: SerialNumber: syz [ 247.748053][ T5935] usb 3-1: config 0 descriptor?? [ 247.777350][ T5868] usb 6-1: Using ep0 maxpacket: 8 [ 247.813933][ T5868] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 247.831619][ T5868] usb 6-1: config 0 has no interface number 0 [ 247.837880][ T5868] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 247.849916][ T5868] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 247.855844][T10263] bond1 (unregistering): Released all slaves [ 247.861531][ T5868] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 247.879139][ T5868] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 247.881251][T10240] ceph: No mds server is up or the cluster is laggy [ 247.892172][ T5868] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 247.892206][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.902831][T10247] ceph: No mds server is up or the cluster is laggy [ 247.948135][ T5868] usb 6-1: config 0 descriptor?? [ 247.979509][ T5868] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 248.004211][ T1202] libceph: connect (1)[b::]:6789 error -101 [ 248.018431][ T1202] libceph: mon0 (1)[b::]:6789 connect error [ 248.191924][ T5935] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 248.514706][ T5868] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 248.564306][ T5824] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 248.574428][ T1202] usb 6-1: USB disconnect, device number 9 [ 248.574694][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 248.587888][ T1202] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 248.599042][ T5935] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 248.612741][ T92] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 248.678078][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.689898][ T5868] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 248.700705][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.729551][ T5868] usb 1-1: config 0 descriptor?? [ 248.762829][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 248.773510][ T92] usb 2-1: unable to get BOS descriptor or descriptor too short [ 248.787245][ T92] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 248.796197][ T92] usb 2-1: config 8 has no interface number 0 [ 248.802335][ T92] usb 2-1: config 8 interface 255 has no altsetting 0 [ 248.816619][ T92] usb 2-1: string descriptor 0 read error: -22 [ 248.826037][ T92] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 248.855720][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.887005][ T1202] usb 3-1: USB disconnect, device number 25 [ 249.150105][ T5868] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 249.171041][ T5868] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001B/input/input22 [ 249.327649][ T92] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.1-1, 00:00:00:00:00:00. [ 249.380202][ T5868] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 249.435713][ T92] usb 2-1: USB disconnect, device number 23 [ 249.819542][ C1] Mem-Info: [ 249.823175][ C1] active_anon:30175 inactive_anon:0 isolated_anon:0 [ 249.823175][ C1] active_file:16863 inactive_file:40724 isolated_file:0 [ 249.823175][ C1] unevictable:768 dirty:594 writeback:0 [ 249.823175][ C1] slab_reclaimable:9851 slab_unreclaimable:105249 [ 249.823175][ C1] mapped:30438 shmem:17709 pagetables:1297 [ 249.823175][ C1] sec_pagetables:0 bounce:0 [ 249.823175][ C1] kernel_misc_reclaimable:0 [ 249.823175][ C1] free:1293036 free_pcp:355 free_cma:0 [ 249.868498][ C1] Node 0 active_anon:120700kB inactive_anon:0kB active_file:67396kB inactive_file:162700kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121596kB dirty:2320kB writeback:0kB shmem:69300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:11924kB pagetables:5188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 249.902345][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:56kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 249.933836][ C1] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 249.960908][ C1] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 249.966708][ C1] Node 0 DMA32 free:1247924kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:120676kB inactive_anon:0kB active_file:67396kB inactive_file:160880kB unevictable:1536kB writepending:2320kB present:3129332kB managed:2543896kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:36kB free_cma:0kB [ 249.997011][ C1] lowmem_reserve[]: 0 0 1 1 1 [ 250.001773][ C1] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 250.029098][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 250.033828][ C1] Node 1 Normal free:3910424kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:196kB unevictable:1536kB writepending:56kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.062801][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 250.067534][ C1] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 250.080292][ C1] Node 0 DMA32: 517*4kB (UM) 445*8kB (UME) 230*16kB (UME) 339*32kB (UME) 261*64kB (UME) 200*128kB (UME) 169*256kB (UME) 81*512kB (UME) 19*1024kB (UM) 4*2048kB (M) 262*4096kB (UM) = 1247996kB [ 250.099232][ C1] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 250.111921][ C1] Node 1 Normal: 190*4kB (UME) 42*8kB (UME) 36*16kB (UME) 219*32kB (UME) 96*64kB (UME) 31*128kB (UME) 16*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3910504kB [ 250.130420][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.139964][ C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.149240][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.158784][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.168065][ C1] 75292 total pagecache pages [ 250.172747][ C1] 0 pages in swap cache [ 250.176906][ C1] Free swap = 124996kB [ 250.181056][ C1] Total swap = 124996kB [ 250.185205][ C1] 2097051 pages RAM [ 250.189003][ C1] 0 pages HighMem/MovableOnly [ 250.193667][ C1] 428971 pages reserved [ 250.197811][ C1] 0 pages cma reserved [ 250.664782][T10320] block nbd5: not configured, cannot reconfigure [ 250.822622][ T1202] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 250.829344][ T92] usb 1-1: USB disconnect, device number 23 [ 250.992655][ T1202] usb 2-1: Using ep0 maxpacket: 8 [ 251.004419][ T1202] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 251.026920][ T1202] usb 2-1: config 179 has no interface number 0 [ 251.043778][ T1202] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 251.075618][ T1202] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 251.105127][ T1202] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 251.134768][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1749'. [ 251.148496][ T1202] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 251.162627][ T53] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 251.182713][ T1202] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 251.219059][ T1202] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 251.239201][ T1202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.260454][T10315] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.354552][T10338] SELinux: failed to load policy [ 251.372579][ T53] usb 6-1: Using ep0 maxpacket: 16 [ 251.381756][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.412084][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.432313][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.455276][ T53] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 251.480230][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.535121][ T1202] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input23 [ 251.537069][ T53] usb 6-1: config 0 descriptor?? [ 251.929948][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.952992][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.055298][ T53] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.001C/input/input24 [ 252.110257][ T53] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 252.203174][ T1202] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 252.226713][ T53] usb 2-1: USB disconnect, device number 24 [ 252.226790][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 252.241279][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 252.314430][ T5935] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 252.352305][ T92] usb 6-1: USB disconnect, device number 10 [ 252.374143][ T1202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.392162][T10355] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 252.409947][ T1202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.426365][ T1202] usb 1-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 252.444605][ T1202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.456673][ T1202] usb 1-1: config 0 descriptor?? [ 252.505284][ T5935] usb 3-1: config 0 has no interfaces? [ 252.510798][ T5935] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 252.519930][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.530553][ T5935] usb 3-1: config 0 descriptor?? [ 252.776446][T10350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.826456][T10350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.851635][T10350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.871068][T10350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.885899][ T1202] logitech-hidpp-device 0003:046D:C090.001D: unbalanced delimiter at end of report description [ 252.908237][ T5935] usb 3-1: USB disconnect, device number 26 [ 252.919372][ T1202] logitech-hidpp-device 0003:046D:C090.001D: hidpp_probe:parse failed [ 252.919537][ T1202] logitech-hidpp-device 0003:046D:C090.001D: probe with driver logitech-hidpp-device failed with error -22 [ 253.149346][T10369] netlink: 'syz.1.1763': attribute type 4 has an invalid length. [ 253.159252][ T92] usb 1-1: USB disconnect, device number 24 [ 253.203346][T10369] netlink: 'syz.1.1763': attribute type 4 has an invalid length. [ 253.331768][ T30] audit: type=1326 audit(1882227574.246:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09958e969 code=0x7ffc0000 [ 253.352637][ T5935] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 253.385408][ T30] audit: type=1326 audit(1882227574.246:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09958e969 code=0x7ffc0000 [ 253.415678][ T30] audit: type=1326 audit(1882227574.256:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb09958e969 code=0x7ffc0000 [ 253.455316][ T30] audit: type=1326 audit(1882227574.256:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09958e969 code=0x7ffc0000 [ 253.478712][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.486934][ T53] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 253.495628][ T30] audit: type=1326 audit(1882227574.256:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fb09958e969 code=0x7ffc0000 [ 253.529395][ T30] audit: type=1326 audit(1882227574.256:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09958e969 code=0x7ffc0000 [ 253.555237][ T5935] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.565882][ T30] audit: type=1326 audit(1882227574.256:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fb09958e969 code=0x7ffc0000 [ 253.591439][ T30] audit: type=1326 audit(1882227574.256:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09958e969 code=0x7ffc0000 [ 253.628736][ T5935] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 253.651807][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.673977][ T5935] usb 3-1: Product: syz [ 253.678178][ T5935] usb 3-1: Manufacturer: syz [ 253.683176][ T5935] usb 3-1: SerialNumber: syz [ 253.689196][ T30] audit: type=1326 audit(1882227574.256:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fb09958e969 code=0x7ffc0000 [ 253.743032][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.744216][ T5935] usb 3-1: selecting invalid altsetting 1 [ 253.764341][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.780054][ T30] audit: type=1326 audit(1882227574.256:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09958e969 code=0x7ffc0000 [ 253.842579][ T53] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 253.885428][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.928922][ T53] usb 4-1: config 0 descriptor?? [ 253.978036][ T5935] cdc_ncm 3-1:1.0: bind() failure [ 254.050432][ T5935] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 254.240395][ T5935] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 254.305299][ T5935] usb 3-1: USB disconnect, device number 27 [ 254.357160][ T7002] udevd[7002]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.368139][ T53] pyra 0003:1E7D:2CF6.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 255.166931][ T53] pyra 0003:1E7D:2CF6.001E: couldn't init struct pyra_device [ 255.188331][ T53] pyra 0003:1E7D:2CF6.001E: couldn't install mouse [ 255.212631][ T92] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 255.225302][T10427] netlink: 79 bytes leftover after parsing attributes in process `syz.1.1789'. [ 255.234244][ T53] pyra 0003:1E7D:2CF6.001E: probe with driver pyra failed with error -71 [ 255.252321][ T53] usb 4-1: USB disconnect, device number 27 [ 255.394712][ T92] usb 6-1: Using ep0 maxpacket: 32 [ 255.417074][ T92] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 255.444459][ T92] usb 6-1: config 0 has no interface number 0 [ 255.477023][ T92] usb 6-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 255.492040][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.509402][ T92] usb 6-1: Product: syz [ 255.527011][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.531581][ T92] usb 6-1: Manufacturer: syz [ 255.533862][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.543174][ T92] usb 6-1: SerialNumber: syz [ 255.561161][ T92] usb 6-1: config 0 descriptor?? [ 255.818978][ T92] kaweth 6-1:0.235: Firmware present in device. [ 255.923265][T10444] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 255.942892][ T5935] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 255.984351][ T92] kaweth 6-1:0.235: Statistics collection: 0 [ 255.990585][ T92] kaweth 6-1:0.235: Multicast filter limit: 0 [ 255.999264][ T92] kaweth 6-1:0.235: MTU: 0 [ 256.005009][ T92] kaweth 6-1:0.235: Read MAC address 00:00:00:00:00:00 [ 256.126081][ T5935] usb 1-1: config 0 has no interfaces? [ 256.131994][ T5935] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 256.155073][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1799'. [ 256.158545][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.250165][ T5935] usb 1-1: config 0 descriptor?? [ 256.520604][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.546751][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.615998][ T92] kaweth 6-1:0.235: kaweth interface created at eth1 [ 256.639424][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.685347][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.724430][ T92] usb 1-1: USB disconnect, device number 25 [ 256.811594][ T5819] usb 6-1: USB disconnect, device number 11 [ 257.232654][ T92] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 257.405800][ T92] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.420585][ T92] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 257.431161][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.439355][ T92] usb 1-1: Product: syz [ 257.447312][ T92] usb 1-1: Manufacturer: syz [ 257.451970][ T92] usb 1-1: SerialNumber: syz [ 257.479125][ T92] usb 1-1: selecting invalid altsetting 1 [ 257.495367][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031e6c400: rx timeout, send abort [ 257.622774][ T5819] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 257.689443][ T2132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.707835][ T92] cdc_ncm 1-1:1.0: bind() failure [ 257.726528][ T2132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.743704][ T92] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 257.792868][ T5819] usb 3-1: Using ep0 maxpacket: 8 [ 257.811280][ T5819] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 257.826601][ T92] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 257.836139][ T5819] usb 3-1: config 0 has no interface number 0 [ 257.851079][ T5819] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.873039][ T92] usb 1-1: USB disconnect, device number 26 [ 257.895962][ T5819] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 257.925870][ T7002] udevd[7002]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.945216][ T2132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.962907][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.981345][ T2132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.998233][ T5819] usb 3-1: config 0 descriptor?? [ 258.003675][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031e6c400: abort rx timeout. Force session deactivation [ 258.063755][ T5819] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 258.320923][ T1202] usb 3-1: USB disconnect, device number 28 [ 258.348334][ T2132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.388759][ T2132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.607698][ T2132] bond0: (slave netdevsim0): Releasing backup interface [ 258.674791][ T2132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.704596][ T2132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.783023][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.805405][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.830057][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.844074][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 258.867674][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 259.126640][T10514] lo speed is unknown, defaulting to 1000 [ 259.246910][ T2132] bridge_slave_1: left allmulticast mode [ 259.266512][ T2132] bridge_slave_1: left promiscuous mode [ 259.293162][ T2132] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.358815][ T2132] bridge_slave_0: left allmulticast mode [ 259.376855][ T2132] bridge_slave_0: left promiscuous mode [ 259.394138][ T2132] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.435992][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 259.436008][ T30] audit: type=1400 audit(1882227580.356:960): avc: denied { remount } for pid=10538 comm="syz.0.1826" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 259.462204][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.489998][ T30] audit: type=1400 audit(1882227580.406:961): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 259.614519][ T30] audit: type=1400 audit(1882227580.536:962): avc: denied { mounton } for pid=10547 comm="syz.0.1828" path="/380/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 259.909041][ T2132] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 259.941733][ T2132] ip6gre1 (unregistering): left promiscuous mode [ 260.486467][ T30] audit: type=1400 audit(1882227581.406:963): avc: denied { create } for pid=10570 comm="syz.2.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 260.552769][ T30] audit: type=1400 audit(1882227581.426:964): avc: denied { write } for pid=10570 comm="syz.2.1833" path="socket:[32057]" dev="sockfs" ino=32057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 260.577299][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.759927][ T30] audit: type=1400 audit(1882227581.676:965): avc: denied { mount } for pid=10572 comm="syz.2.1834" name="/" dev="rpc_pipefs" ino=32060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 260.783040][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.829372][ T30] audit: type=1400 audit(1882227581.706:966): avc: denied { unmount } for pid=10572 comm="syz.2.1834" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 260.964402][ T5824] Bluetooth: hci3: command tx timeout [ 260.981699][ T2132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.013025][ T2132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.023769][ T2132] bond0 (unregistering): Released all slaves [ 261.198301][ T2132] bond1 (unregistering): Released all slaves [ 261.221241][ T2132] bond2 (unregistering): (slave bond3): Releasing backup interface [ 261.229970][ T92] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 261.246098][ T2132] bond2 (unregistering): Released all slaves [ 261.396396][ T92] usb 4-1: Using ep0 maxpacket: 8 [ 261.403243][ T92] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 261.414415][ T2132] bond3 (unregistering): Released all slaves [ 261.420498][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.437279][ T92] usb 4-1: config 0 descriptor?? [ 261.554948][ T2132] tipc: Disabling bearer [ 261.593339][ T2132] tipc: Left network mode [ 261.673577][ T92] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 262.118870][ T5819] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 262.223322][ T30] audit: type=1400 audit(1882227583.136:967): avc: denied { listen } for pid=10601 comm="syz.2.1842" lport=48930 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 262.283118][ T5819] usb 1-1: Using ep0 maxpacket: 16 [ 262.300909][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.312609][ T5871] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 262.320361][ T30] audit: type=1400 audit(1882227583.136:968): avc: denied { accept } for pid=10601 comm="syz.2.1842" lport=48930 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 262.321003][T10514] chnl_net:caif_netlink_parms(): no params data found [ 262.366330][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.381149][ T5819] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 262.392002][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.394820][ T30] audit: type=1400 audit(1882227583.176:969): avc: denied { setopt } for pid=10601 comm="syz.2.1842" lport=48930 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 262.415229][ T5819] usb 1-1: config 0 descriptor?? [ 262.522627][ T5871] usb 6-1: Using ep0 maxpacket: 16 [ 262.531838][ T5871] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.548002][ T2132] hsr_slave_0: left promiscuous mode [ 262.556983][ T5871] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.572235][ T2132] hsr_slave_1: left promiscuous mode [ 262.589016][ T2132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.597799][ T5871] usb 6-1: config 0 interface 0 has no altsetting 0 [ 262.618490][ T2132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.629340][ T5871] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 262.651932][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.662961][ T2132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.674038][ T5871] usb 6-1: config 0 descriptor?? [ 262.682671][ T2132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.695805][ T92] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 262.741969][ T92] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 262.761277][ T2132] veth1_macvtap: left promiscuous mode [ 262.768168][ T2132] veth0_macvtap: left promiscuous mode [ 262.779178][ T92] asix 4-1:0.0: probe with driver asix failed with error -71 [ 262.788461][ T2132] veth1_vlan: left promiscuous mode [ 262.820973][ T2132] veth0_vlan: left promiscuous mode [ 262.843160][ T92] usb 4-1: USB disconnect, device number 28 [ 262.868949][ T5819] hid-multitouch 0003:1FD2:6007.001F: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 263.042815][ T5824] Bluetooth: hci3: command tx timeout [ 263.134864][ T92] usb 1-1: USB disconnect, device number 27 [ 263.160239][ T5871] apple 0003:05AC:0247.0020: unexpected long global item [ 263.179756][ T5871] apple 0003:05AC:0247.0020: parse failed [ 263.186388][ T2132] pim6reg9 (unregistering): left allmulticast mode [ 263.221181][ T5871] apple 0003:05AC:0247.0020: probe with driver apple failed with error -22 [ 263.424831][ T92] usb 6-1: USB disconnect, device number 12 [ 264.032777][ T5871] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 264.073032][ T1202] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 264.193249][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 264.201554][ T5871] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.210273][ T5871] usb 1-1: config 0 has no interface number 0 [ 264.218201][ T5871] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 264.230045][ T5871] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 264.245124][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.253998][ T1202] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.268704][ T5935] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 264.276954][ T1202] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 264.288652][ T5871] usb 1-1: config 0 descriptor?? [ 264.298809][ T1202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.316061][ T5871] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 264.327297][ T1202] usb 3-1: config 0 descriptor?? [ 264.442729][ T5935] usb 6-1: Using ep0 maxpacket: 16 [ 264.450629][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.463565][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.473761][ T5935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 264.488691][ T5935] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 264.503139][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.528334][ T5935] usb 6-1: config 0 descriptor?? [ 264.555795][ T10] usb 1-1: USB disconnect, device number 28 [ 264.570869][ T1202] usbhid 3-1:0.0: can't add hid device: -71 [ 264.578730][ T1202] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 264.581232][T10514] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.591562][ T1202] usb 3-1: USB disconnect, device number 29 [ 264.634650][T10514] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.645686][T10514] bridge_slave_0: entered allmulticast mode [ 264.656135][T10514] bridge_slave_0: entered promiscuous mode [ 264.673879][T10514] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.681992][T10514] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.689470][T10514] bridge_slave_1: entered allmulticast mode [ 264.698122][T10514] bridge_slave_1: entered promiscuous mode [ 264.799104][T10514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.812401][T10514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.866068][T10514] team0: Port device team_slave_0 added [ 264.885505][T10514] team0: Port device team_slave_1 added [ 264.947963][T10514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.964162][ T5935] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 264.976254][T10514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.002720][ T5935] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 265.009699][ T5935] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 265.017825][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 265.026180][ T5935] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 265.033447][ T5935] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 265.045034][ T5935] input: HID 0955:7214 Haptics as /devices/virtual/input/input25 [ 265.052931][T10514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.075152][T10514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.082115][T10514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.112681][ T5819] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 265.138644][ T5935] shield 0003:0955:7214.0021: Registered Thunderstrike controller [ 265.151301][ T5824] Bluetooth: hci3: command tx timeout [ 265.156194][T10636] random: crng reseeded on system resumption [ 265.163407][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 265.163420][ T30] audit: type=1400 audit(1882227586.066:972): avc: denied { ioctl } for pid=10635 comm="syz.5.1853" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 265.177519][ T5935] shield 0003:0955:7214.0021: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 265.204056][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 265.234377][T10514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.234930][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.264051][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.280180][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 265.315016][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.323087][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 265.340213][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.356835][ T10] usb 4-1: config 0 descriptor?? [ 265.370094][ T5819] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 265.391873][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.434213][ T5819] usb 3-1: config 0 descriptor?? [ 265.444257][T10514] hsr_slave_0: entered promiscuous mode [ 265.453555][ T5819] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 265.481843][T10514] hsr_slave_1: entered promiscuous mode [ 265.489563][ T5819] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 265.601491][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 265.621307][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 265.635019][T10653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.652892][ T10] usb 4-1: USB disconnect, device number 29 [ 265.684520][T10653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.758477][ T5819] usb 3-1: USB disconnect, device number 30 [ 265.764588][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 265.785340][ T5819] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 265.956337][T10634] ldusb: No device or device unplugged -19 [ 265.957787][ T5935] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 265.982647][ T10] usb 6-1: USB disconnect, device number 13 [ 266.027837][ T5935] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 266.051433][ T5935] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 266.071580][ T5935] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 266.881553][T10514] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.931083][T10514] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.973770][T10514] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 267.004607][T10685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.068724][T10514] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 267.205576][ T5824] Bluetooth: hci3: command tx timeout [ 267.366083][T10514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.392243][T10514] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.411835][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.419037][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.458880][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.466071][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.572734][ T5819] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 267.617813][ T30] audit: type=1400 audit(1882227588.536:973): avc: denied { remount } for pid=10703 comm="syz.0.1869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 267.750606][ T5819] usb 6-1: Using ep0 maxpacket: 16 [ 267.767650][ T5819] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.791967][ T5819] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.816427][ T5819] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.843942][T10710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.854658][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.903880][ T5819] usb 6-1: Product: syz [ 267.910800][ T5819] usb 6-1: Manufacturer: syz [ 267.949405][ T5819] usb 6-1: SerialNumber: syz [ 267.984628][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1870'. [ 268.018826][T10715] sp0: Synchronizing with TNC [ 268.099119][T10716] vxlan2: entered promiscuous mode [ 268.288499][T10514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.369588][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 268.406140][ T5819] usb 6-1: 0:2 : does not exist [ 268.440008][T10514] veth0_vlan: entered promiscuous mode [ 268.465069][T10514] veth1_vlan: entered promiscuous mode [ 268.540141][T10514] veth0_macvtap: entered promiscuous mode [ 268.566587][T10514] veth1_macvtap: entered promiscuous mode [ 268.609554][T10514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.629006][T10514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.657200][T10514] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.669664][T10514] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.679588][T10514] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.689917][T10514] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.127733][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.132058][ T53] usb 6-1: USB disconnect, device number 14 [ 269.180272][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.195936][ T30] audit: type=1400 audit(1882227590.106:974): avc: denied { map } for pid=10744 comm="syz.0.1879" path="socket:[33835]" dev="sockfs" ino=33835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 269.295879][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.346188][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.952995][ T10] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 270.114475][ T10] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 270.132931][ T10] usb 2-1: config 0 has no interface number 0 [ 270.155596][ T10] usb 2-1: config 0 interface 41 has no altsetting 0 [ 270.188755][ T10] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 270.206557][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.236604][ T10] usb 2-1: Product: syz [ 270.248405][ T10] usb 2-1: Manufacturer: syz [ 270.274142][ T10] usb 2-1: SerialNumber: syz [ 270.296389][ T10] usb 2-1: config 0 descriptor?? [ 270.861168][T10816] netlink: 'syz.2.1909': attribute type 4 has an invalid length. [ 270.875041][T10816] netlink: 'syz.2.1909': attribute type 4 has an invalid length. [ 270.884596][ T30] audit: type=1326 audit(1882227591.806:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10800 comm="syz.0.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e278e969 code=0x7fc00000 [ 270.946823][ T10] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 271.065838][T10826] netlink: 'syz.3.1912': attribute type 4 has an invalid length. [ 271.079147][ T10] lo speed is unknown, defaulting to 1000 [ 271.087923][ T10] syz2: Port: 1 Link DOWN [ 271.262648][ T5819] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 271.432688][ T5819] usb 3-1: Using ep0 maxpacket: 8 [ 271.453099][ T5819] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 271.461382][ T5819] usb 3-1: config 179 has no interface number 0 [ 271.467695][ T5819] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 271.478844][ T5819] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 271.490107][ T5819] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.501336][ T5819] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 271.512979][ T30] audit: type=1326 audit(1882227592.416:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10800 comm="syz.0.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88e278e969 code=0x7fc00000 [ 271.538199][ T5819] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 271.552273][ T5819] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 271.561461][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.582687][T10823] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 271.727221][T10838] syzkaller1: entered promiscuous mode [ 271.733551][T10838] syzkaller1: entered allmulticast mode [ 271.881869][ T5867] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input26 [ 271.918945][T10841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.012001][ T30] audit: type=1400 audit(1882227592.926:977): avc: denied { write } for pid=10842 comm="syz.5.1919" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 272.099784][ T5871] usb 3-1: USB disconnect, device number 31 [ 272.099787][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 272.099833][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 272.122262][ T5871] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 272.562582][ T30] audit: type=1400 audit(1882227593.476:978): avc: denied { write } for pid=10861 comm="syz.3.1926" path="socket:[33445]" dev="sockfs" ino=33445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 272.756410][ T5819] usb 2-1: USB disconnect, device number 25 [ 272.882673][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 273.057128][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.100206][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 273.134663][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.160942][ T10] usb 6-1: config 0 descriptor?? [ 273.264327][ T30] audit: type=1400 audit(1882227594.186:979): avc: denied { mount } for pid=10883 comm="syz.0.1935" name="/" dev="hugetlbfs" ino=33546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 273.321526][ T30] audit: type=1400 audit(1882227594.236:980): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 273.463093][ T5935] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 273.584285][ T10] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 273.597053][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0022/input/input27 [ 273.632663][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 273.652064][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 273.671947][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 273.694010][ T5819] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 273.709433][ T10] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 273.732011][ T5935] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 273.742433][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.755618][ T5935] usb 2-1: Product: syz [ 273.759825][ T5935] usb 2-1: Manufacturer: syz [ 273.766146][ T5935] usb 2-1: SerialNumber: syz [ 273.778025][ T5935] usb 2-1: config 0 descriptor?? [ 273.786401][ T5935] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 273.795733][ T30] audit: type=1400 audit(1882227594.706:981): avc: denied { mounton } for pid=10893 comm="syz.2.1939" path="/proc/887/cgroup" dev="proc" ino=34321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 273.796934][ T30] audit: type=1400 audit(1882227594.716:982): avc: denied { mounton } for pid=10893 comm="syz.2.1939" path="/proc/887/cgroup" dev="nsfs" ino=4026532794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 273.848133][ T5935] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 273.862789][ T5819] usb 1-1: Using ep0 maxpacket: 32 [ 273.872330][ T5819] usb 1-1: config 0 has no interfaces? [ 273.887156][ T5819] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 273.896376][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.904427][ T5819] usb 1-1: Product: syz [ 273.908691][ T5819] usb 1-1: Manufacturer: syz [ 273.913983][ T5819] usb 1-1: SerialNumber: syz [ 273.921124][ T5819] usb 1-1: config 0 descriptor?? [ 274.165956][ T92] usb 1-1: USB disconnect, device number 29 [ 274.403878][ T5935] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 274.415920][ T5935] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 274.629941][ T5935] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 274.639636][ T5935] em28xx 2-1:0.0: No AC97 audio processor [ 274.647885][ T5867] usb 6-1: USB disconnect, device number 15 [ 274.661556][ T5935] usb 2-1: USB disconnect, device number 26 [ 274.668591][ T5935] em28xx 2-1:0.0: Disconnecting em28xx [ 274.681310][ T5935] em28xx 2-1:0.0: Freeing device [ 274.878266][ T30] audit: type=1400 audit(1882227595.796:983): avc: denied { shutdown } for pid=10926 comm="syz.0.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 275.121584][ T30] audit: type=1400 audit(1882227596.036:984): avc: denied { getopt } for pid=10937 comm="syz.3.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 275.141157][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.962640][ T5935] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 276.139743][ T5935] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 276.151179][ T5935] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 276.161226][ T5935] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 276.170899][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.183879][T10958] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 276.195291][ T5935] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 276.310716][ T30] audit: type=1400 audit(1882227597.226:985): avc: denied { getattr } for pid=10964 comm="syz.1.1968" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 276.375165][ T1202] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 276.441063][ T92] usb 4-1: USB disconnect, device number 30 [ 276.482786][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 276.542718][ T1202] usb 3-1: Using ep0 maxpacket: 32 [ 276.551278][ T1202] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 276.559570][ T1202] usb 3-1: config 0 has no interface number 0 [ 276.580615][ T1202] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 276.596677][ T1202] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 276.606065][ T1202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.617991][ T1202] usb 3-1: Product: syz [ 276.622161][ T1202] usb 3-1: Manufacturer: syz [ 276.629183][ T1202] usb 3-1: SerialNumber: syz [ 276.636356][ T1202] usb 3-1: config 0 descriptor?? [ 276.647074][ T1202] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 276.657061][ T1202] em28xx 3-1:0.132: Video interface 132 found: [ 276.662616][ T5867] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 276.832615][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 276.839388][ T5867] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 276.847576][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.858499][ T5867] usb 2-1: config 0 has no interface number 0 [ 276.864658][ T5867] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 276.873779][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.884160][ T5867] usb 2-1: config 0 descriptor?? [ 276.891113][ T5867] usb 2-1: Found UVC 0.00 device (0bd3:0555) [ 276.898163][ T5867] usb 2-1: No valid video chain found. [ 276.942717][ T5935] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 277.047264][ T1202] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 277.112649][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 277.125150][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.138817][ T10] usb 2-1: USB disconnect, device number 27 [ 277.158343][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.172561][ T5935] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 277.184600][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.195767][ T5935] usb 6-1: config 0 descriptor?? [ 277.611712][T10992] tipc: Started in network mode [ 277.616937][T10992] tipc: Node identity ac1414aa, cluster identity 4711 [ 277.625735][T10992] tipc: Enabled bearer , priority 10 [ 277.632324][ T5935] savu 0003:1E7D:2D5A.0023: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 277.692607][ T5867] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 277.749080][ T30] audit: type=1400 audit(1882227598.666:986): avc: denied { mount } for pid=10996 comm="syz.1.1982" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 277.778362][ T30] audit: type=1400 audit(1882227598.696:987): avc: denied { mounton } for pid=10996 comm="syz.1.1982" path="/newroot/7/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 277.811984][T10999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.814269][ T30] audit: type=1400 audit(1882227598.726:988): avc: denied { unmount } for pid=10514 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 277.852755][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 277.875081][ T5867] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 277.895386][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.930815][ T5867] usb 1-1: config 0 descriptor?? [ 277.935364][ T30] audit: type=1400 audit(1882227598.846:989): avc: denied { mount } for pid=11002 comm="syz.3.1985" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 277.945976][ T5867] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 277.963236][ T30] audit: type=1400 audit(1882227598.876:990): avc: denied { search } for pid=11002 comm="syz.3.1985" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 277.994237][ T30] audit: type=1400 audit(1882227598.876:991): avc: denied { read } for pid=11002 comm="syz.3.1985" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 278.019140][ T5819] usb 6-1: USB disconnect, device number 16 [ 278.042750][ T30] audit: type=1400 audit(1882227598.876:992): avc: denied { open } for pid=11002 comm="syz.3.1985" path="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 278.100570][T11006] cgroup: fork rejected by pids controller in /syz3 [ 278.172948][ T1202] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 278.191271][ T1202] em28xx 3-1:0.132: board has no eeprom [ 278.194601][T10960] em28xx 3-1:0.132: failed to trigger write to i2c address 0x28 (error=-5) [ 278.258713][ T1202] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 278.270504][ T1202] em28xx 3-1:0.132: analog set to bulk mode. [ 278.283263][ T5935] em28xx 3-1:0.132: Registering V4L2 extension [ 278.300255][ T1202] usb 3-1: USB disconnect, device number 32 [ 278.311054][ T1202] em28xx 3-1:0.132: Disconnecting em28xx [ 278.444333][T11014] lo speed is unknown, defaulting to 1000 [ 278.501268][ T5935] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 278.532585][ T5935] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 278.540736][ T5935] em28xx 3-1:0.132: No AC97 audio processor [ 278.558622][ T5935] usb 3-1: Decoder not found [ 278.574889][ T5935] em28xx 3-1:0.132: failed to create media graph [ 278.581478][ T5935] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 278.606269][ T5935] em28xx 3-1:0.132: Remote control support is not available for this card. [ 278.632608][ T1202] em28xx 3-1:0.132: Closing input extension [ 278.665169][ T1202] em28xx 3-1:0.132: Freeing device [ 278.750331][ T5819] tipc: Node number set to 2886997162 [ 278.866316][T11022] serio: Serial port ptm0 [ 279.079841][ T30] audit: type=1400 audit(1882227599.996:993): avc: denied { create } for pid=11028 comm="syz.1.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 279.141797][ T30] audit: type=1400 audit(1882227600.046:994): avc: denied { read } for pid=11028 comm="syz.1.1995" path="socket:[34774]" dev="sockfs" ino=34774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 279.201638][ T5867] gspca_nw80x: reg_w err -71 [ 279.209679][ T5867] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 279.220523][ T5867] usb 1-1: USB disconnect, device number 30 [ 279.507678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 279.517146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 279.614963][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.625832][ T92] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 279.649534][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.747196][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.761944][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.794589][ T92] usb 3-1: Using ep0 maxpacket: 16 [ 279.809079][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.824656][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.859140][ T92] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.883843][ T92] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 279.895642][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.949902][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.962472][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.988985][ T92] usb 3-1: config 0 descriptor?? [ 280.086735][ T92] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input28 [ 280.152324][ T5169] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 280.289153][ T92] usb 3-1: USB disconnect, device number 33 [ 280.297191][ T5169] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 280.314040][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.349680][ T5169] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 280.374308][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.385191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 280.395232][ T5169] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 280.471711][ C1] Unknown status report in ack skb [ 280.667276][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2005'. [ 280.757270][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.785796][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.800313][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.809947][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.821738][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.231734][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.243119][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.253974][ T36] bond0 (unregistering): Released all slaves [ 281.268388][T11063] veth1_macvtap: left promiscuous mode [ 281.278044][T11063] macsec0: entered promiscuous mode [ 281.286508][T11063] macsec0: entered allmulticast mode [ 281.301207][T11065] veth1_macvtap: entered promiscuous mode [ 281.327754][T11065] veth1_macvtap: entered allmulticast mode [ 281.338620][T11065] macsec0: left promiscuous mode [ 281.351644][T11065] macsec0: left allmulticast mode [ 281.362817][T11065] veth1_macvtap: left allmulticast mode [ 281.391169][ T36] tipc: Disabling bearer [ 281.406463][ T36] tipc: Left network mode [ 281.432440][T11077] netlink: 'syz.5.2014': attribute type 21 has an invalid length. [ 281.456639][T11077] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2014'. [ 281.499770][T11056] lo speed is unknown, defaulting to 1000 [ 281.507204][T11077] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2014'. [ 281.712139][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 281.712155][ T30] audit: type=1400 audit(1882227602.626:999): avc: denied { create } for pid=11086 comm="syz.1.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 281.738722][ T30] audit: type=1400 audit(1882227602.646:1000): avc: denied { setopt } for pid=11086 comm="syz.1.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 281.898491][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.902702][ T30] audit: type=1400 audit(1882227602.816:1001): avc: denied { bind } for pid=11086 comm="syz.1.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 281.926324][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.950477][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.965575][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.025100][ T36] veth1_macvtap: left promiscuous mode [ 282.031072][ T36] veth0_macvtap: left promiscuous mode [ 282.098674][ T30] audit: type=1326 audit(1882227603.016:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11102 comm="syz.5.2024" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb09958e969 code=0x0 [ 282.125789][T11104] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2023'. [ 282.411992][ T36] team0 (unregistering): Port device team_slave_1 removed [ 282.452471][ T36] team0 (unregistering): Port device team_slave_0 removed [ 282.820882][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2026'. [ 282.859830][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2026'. [ 282.881271][T11109] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.890644][T11109] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.900195][T11109] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.909614][T11109] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.910665][ T5824] Bluetooth: hci2: command tx timeout [ 282.945117][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2026'. [ 282.954213][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2026'. [ 282.978401][T11056] chnl_net:caif_netlink_parms(): no params data found [ 283.328965][T11056] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.342841][T11056] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.372718][T11056] bridge_slave_0: entered allmulticast mode [ 283.379656][T11056] bridge_slave_0: entered promiscuous mode [ 283.426656][T11056] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.442638][T11056] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.459994][T11056] bridge_slave_1: entered allmulticast mode [ 283.471492][T11056] bridge_slave_1: entered promiscuous mode [ 283.549421][T11056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.594724][T11056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.692454][T11056] team0: Port device team_slave_0 added [ 283.701729][T11056] team0: Port device team_slave_1 added [ 283.750149][T11056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.757167][T11056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.784587][T11056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.794817][ T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 283.893164][T11056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.910246][T11056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.936228][ T92] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 283.961590][T11119] ceph: No mds server is up or the cluster is laggy [ 283.972694][T11125] ceph: No mds server is up or the cluster is laggy [ 284.013993][T11056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.105267][ T92] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 284.129636][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.145318][ T92] usb 1-1: config 0 descriptor?? [ 284.168848][T11056] hsr_slave_0: entered promiscuous mode [ 284.175717][ T92] cp210x 1-1:0.0: cp210x converter detected [ 284.195993][T11056] hsr_slave_1: entered promiscuous mode [ 284.212261][T11056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.220282][T11056] Cannot create hsr debugfs directory [ 284.581097][ T92] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 284.702666][ T1202] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 284.718078][ T30] audit: type=1400 audit(1882227605.636:1003): avc: denied { relabelfrom } for pid=11167 comm="syz.1.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 284.745854][ T30] audit: type=1400 audit(1882227605.656:1004): avc: denied { relabelto } for pid=11167 comm="syz.1.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 284.767440][ T30] audit: type=1400 audit(1882227605.676:1005): avc: denied { read write } for pid=9660 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.806852][ T92] usb 1-1: cp210x converter now attached to ttyUSB0 [ 284.814351][ T30] audit: type=1400 audit(1882227605.676:1006): avc: denied { open } for pid=9660 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.840656][ T30] audit: type=1400 audit(1882227605.676:1007): avc: denied { ioctl } for pid=9660 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.892898][ T1202] usb 3-1: Using ep0 maxpacket: 8 [ 284.908477][ T1202] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 284.920465][ T1202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.939204][ T1202] usb 3-1: Product: syz [ 284.949050][ T1202] usb 3-1: Manufacturer: syz [ 284.955786][ T1202] usb 3-1: SerialNumber: syz [ 284.965733][ T1202] usb 3-1: config 0 descriptor?? [ 284.972995][ T5824] Bluetooth: hci2: command tx timeout [ 285.013666][ T92] usb 1-1: USB disconnect, device number 31 [ 285.020195][ T30] audit: type=1400 audit(1882227605.936:1008): avc: denied { getopt } for pid=11172 comm="syz.1.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 285.040901][ T92] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 285.074952][ T92] cp210x 1-1:0.0: device disconnected [ 285.105974][T11056] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 285.125836][T11056] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 285.146664][T11056] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 285.157236][T11056] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.186455][ T1202] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 285.297583][T11056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.344344][T11056] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.367593][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.374765][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.419990][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.427157][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.003708][T11056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.060821][T11193] SELinux: failed to load policy [ 286.106730][T11056] veth0_vlan: entered promiscuous mode [ 286.134692][T11056] veth1_vlan: entered promiscuous mode [ 286.193619][ T1202] gspca_sunplus: reg_w_riv err -71 [ 286.199450][ T1202] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 286.209246][T11056] veth0_macvtap: entered promiscuous mode [ 286.226986][ T1202] usb 3-1: USB disconnect, device number 34 [ 286.236284][T11056] veth1_macvtap: entered promiscuous mode [ 286.288827][T11056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.316473][T11056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.352072][T11056] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.381403][T11056] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.399262][T11056] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.420775][T11056] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.426006][T11210] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 286.618512][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.627608][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.641618][T11213] SELinux: ebitmap start bit (1728054080) is beyond the end of the bitmap (1472) [ 286.698271][T11213] SELinux: failed to load policy [ 286.716193][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.732030][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.997905][ T30] audit: type=1400 audit(1882227607.916:1009): avc: denied { name_connect } for pid=11227 comm="syz.1.2069" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 287.042990][ T5824] Bluetooth: hci2: command tx timeout [ 287.592827][ T1202] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 287.605044][ T5867] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 287.772633][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 287.772932][ T1202] usb 1-1: Using ep0 maxpacket: 32 [ 287.785860][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.794706][ T1202] usb 1-1: config 64 has an invalid interface number: 4 but max is 0 [ 287.802056][ T5867] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 287.818634][ T1202] usb 1-1: config 64 has no interface number 0 [ 287.818776][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.829123][ T1202] usb 1-1: config 64 interface 4 has no altsetting 0 [ 287.838015][ T92] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 287.841656][ T1202] usb 1-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=28.46 [ 287.854064][ T5867] usb 4-1: config 0 descriptor?? [ 287.871368][ T1202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.879795][ T1202] usb 1-1: Product: syz [ 287.885633][ T1202] usb 1-1: Manufacturer: syz [ 287.898232][ T1202] usb 1-1: SerialNumber: syz [ 287.996643][ T92] usb 3-1: Using ep0 maxpacket: 32 [ 288.005619][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.016923][ T92] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 288.026428][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.037837][ T92] usb 3-1: config 0 descriptor?? [ 288.046033][ T92] hub 3-1:0.0: USB hub found [ 288.131933][ T1202] qmi_wwan 1-1:64.4: probe with driver qmi_wwan failed with error -22 [ 288.169275][ T1202] usb 1-1: USB disconnect, device number 32 [ 288.253890][ T92] hub 3-1:0.0: 1 port detected [ 288.280081][ T5867] mcp2221 0003:04D8:00DD.0024: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 288.668142][ T92] usb 4-1: USB disconnect, device number 31 [ 288.735716][ T30] audit: type=1326 audit(1882227609.656:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11299 comm="syz.0.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88e272ab39 code=0x7ffc0000 [ 288.777022][ T30] audit: type=1326 audit(1882227609.656:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11299 comm="syz.0.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88e272ab39 code=0x7ffc0000 [ 288.801111][ T30] audit: type=1326 audit(1882227609.656:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11299 comm="syz.0.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88e272ab39 code=0x7ffc0000 [ 288.825806][ T30] audit: type=1326 audit(1882227609.656:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11299 comm="syz.0.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88e272ab39 code=0x7ffc0000 [ 288.850590][ T30] audit: type=1326 audit(1882227609.656:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11299 comm="syz.0.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88e272ab39 code=0x7ffc0000 [ 288.878510][ T30] audit: type=1326 audit(1882227609.656:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11299 comm="syz.0.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88e272ab39 code=0x7ffc0000 [ 288.912148][ T53] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 288.921152][ T30] audit: type=1326 audit(1882227609.656:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11299 comm="syz.0.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88e272ab39 code=0x7ffc0000 [ 288.955160][ T30] audit: type=1326 audit(1882227609.656:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11299 comm="syz.0.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88e272ab39 code=0x7ffc0000 [ 288.992834][ T30] audit: type=1326 audit(1882227609.656:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11299 comm="syz.0.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88e272ab39 code=0x7ffc0000 [ 289.062582][ T53] usb 2-1: Using ep0 maxpacket: 32 [ 289.076538][ T53] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 289.085599][ T53] usb 2-1: config 0 has no interface number 0 [ 289.098823][ T53] usb 2-1: config 0 interface 15 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 289.122604][ T5824] Bluetooth: hci2: command tx timeout [ 289.129806][ T53] usb 2-1: config 0 interface 15 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 289.168718][ T53] usb 2-1: New USB device found, idVendor=0856, idProduct=bc01, bcdDevice=b2.bf [ 289.180992][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.231844][ T53] usb 2-1: Product: syz [ 289.250687][ T53] usb 2-1: Manufacturer: syz [ 289.260811][ T53] usb 2-1: SerialNumber: syz [ 289.282362][ T53] usb 2-1: config 0 descriptor?? [ 289.291904][ T92] usb 3-1: USB disconnect, device number 35 [ 289.375754][T11304] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.383415][T11304] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.528775][ T53] mos7840 2-1:0.15: missing endpoints [ 289.548920][ T53] usb 2-1: USB disconnect, device number 28 [ 289.553820][T11304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.569972][T11304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.582817][ T5871] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 289.651194][T11304] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.661024][T11304] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.670410][T11304] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.679970][T11304] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.742564][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 289.753185][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.769497][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.779425][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 289.798535][ T5871] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 289.810876][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.825952][ T5871] usb 1-1: config 0 descriptor?? [ 290.250877][ T5871] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 290.272952][ T5871] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 290.280013][ T5871] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 290.297302][ T5871] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 290.307380][ T5871] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 290.321878][ T5871] input: HID 0955:7214 Haptics as /devices/virtual/input/input29 [ 290.357593][ T5871] shield 0003:0955:7214.0025: Registered Thunderstrike controller [ 290.366400][ T5871] shield 0003:0955:7214.0025: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 290.374316][ T53] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 290.476727][T11306] random: crng reseeded on system resumption [ 290.512817][ T92] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 290.542703][ T53] usb 2-1: Using ep0 maxpacket: 32 [ 290.552412][ T53] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 290.562343][ T53] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 290.578105][T11333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.578699][ T53] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 290.586976][T11333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.597946][ T53] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 290.605284][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.655823][ T53] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.667725][ T53] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 290.681401][ T53] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 290.691364][ T53] usb 2-1: Product: syz [ 290.698955][ T53] usb 2-1: Manufacturer: syz [ 290.704375][ T53] usb 2-1: SerialNumber: syz [ 290.711457][ T53] usb 2-1: config 0 descriptor?? [ 290.716721][ T92] usb 4-1: Using ep0 maxpacket: 32 [ 290.718809][ T10] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 290.728207][ T53] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 290.736010][ T5871] usb 1-1: USB disconnect, device number 33 [ 290.750755][ T92] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 290.760249][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.769858][ T53] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 290.772638][ T10] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 290.780458][ T92] usb 4-1: config 0 descriptor?? [ 290.815997][ T10] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 290.832167][ T10] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 290.938044][ T10] usb 2-1: USB disconnect, device number 29 [ 290.949623][ T10] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 291.004976][ T92] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 291.017061][ T92] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 291.033337][ T92] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 291.040513][ T92] usb 4-1: media controller created [ 291.075264][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.354520][T11347] raw_sendmsg: syz.2.2118 forgot to set AF_INET. Fix it! [ 292.052777][ T92] stb0899_attach: Driver disabled by Kconfig [ 292.058932][ T92] az6027: no front-end attached [ 292.058932][ T92] [ 292.069729][ T92] az6027: usb out operation failed. (-71) [ 292.092684][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 292.114594][ T92] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 292.161328][ T92] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 292.174289][ T53] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 292.193844][T11364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2126'. [ 292.206974][ T92] dvb-usb: schedule remote query interval to 400 msecs. [ 292.222555][ T92] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 292.252609][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 292.266080][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 292.279967][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.293824][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.306202][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.322447][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.401551][ T10] usb 6-1: Product: syz [ 292.406111][ T53] usb 2-1: Using ep0 maxpacket: 32 [ 292.411306][ T10] usb 6-1: Manufacturer: syz [ 292.416959][ T10] usb 6-1: SerialNumber: syz [ 292.431014][ T53] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 292.442767][ T92] usb 4-1: USB disconnect, device number 32 [ 292.450177][ T53] usb 2-1: config 0 has no interface number 0 [ 292.475463][ T53] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 292.516590][ T53] usb 2-1: config 0 interface 85 has no altsetting 0 [ 292.549529][ T53] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 292.584115][ T92] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 292.597725][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.617955][ T53] usb 2-1: Product: syz [ 292.622155][ T53] usb 2-1: Manufacturer: syz [ 292.628574][ T53] usb 2-1: SerialNumber: syz [ 292.649983][ T53] usb 2-1: config 0 descriptor?? [ 292.851618][ T10] usb 6-1: 0:2 : does not exist [ 292.889822][ T30] kauditd_printk_skb: 569 callbacks suppressed [ 292.889855][ T30] audit: type=1800 audit(1882227613.806:1588): pid=11378 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2131" name="nullb0" dev="devtmpfs" ino=2849 res=0 errno=0 [ 293.072691][ T92] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 293.245717][ T92] usb 3-1: Using ep0 maxpacket: 16 [ 293.253946][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.265310][ T53] appletouch 2-1:0.85: Geyser mode initialized. [ 293.277687][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.292858][ T53] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input31 [ 293.306435][ T92] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 293.338837][ T92] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 293.350697][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.365200][ T92] usb 3-1: config 0 descriptor?? [ 293.476519][ T5871] usb 2-1: USB disconnect, device number 30 [ 293.518426][ T5871] appletouch 2-1:0.85: input: appletouch disconnected [ 293.691203][ T53] usb 6-1: USB disconnect, device number 17 [ 293.806544][ T92] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 293.817702][ T92] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 293.824908][ T92] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 293.831920][ T92] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 293.842786][ T92] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 293.852399][ T92] input: HID 0955:7214 Haptics as /devices/virtual/input/input32 [ 293.862779][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 293.873226][ T92] shield 0003:0955:7214.0026: Registered Thunderstrike controller [ 293.881380][ T92] shield 0003:0955:7214.0026: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 293.916945][ T30] audit: type=1800 audit(1882227614.836:1589): pid=11400 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2139" name="nullb0" dev="devtmpfs" ino=2849 res=0 errno=0 [ 294.044764][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.067205][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.082251][T11376] random: crng reseeded on system resumption [ 294.095173][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 294.112579][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 294.120624][ T10] usb 4-1: SerialNumber: syz [ 294.336885][T11403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.364347][ T10] usb 4-1: 0:2 : does not exist [ 294.369316][ T10] usb 4-1: unit 255 not found! [ 294.383601][T11403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.431702][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 294.467843][ T10] usb 4-1: USB disconnect, device number 33 [ 294.594921][ T53] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 294.612637][ T5869] usb 3-1: USB disconnect, device number 36 [ 294.638798][ T53] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 294.685275][ T53] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 294.716960][ T53] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 295.242533][ T30] audit: type=1400 audit(1882227616.156:1590): avc: denied { create } for pid=11434 comm="syz.1.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 295.429401][ T30] audit: type=1326 audit(1882227616.346:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11439 comm="syz.3.2161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66eaf8e969 code=0x0 [ 295.642823][ T5819] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 295.801282][T11471] Invalid ELF header len 8 [ 295.827635][ T5819] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 295.848937][ T5819] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 295.869206][ T5819] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 295.880490][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.893491][T11444] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 295.904047][ T5819] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 295.952684][ T53] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 296.105428][ T53] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 296.114768][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.125479][ T53] usb 3-1: config 0 descriptor?? [ 296.132892][ T53] cp210x 3-1:0.0: cp210x converter detected [ 296.140884][ T5871] usb 6-1: USB disconnect, device number 18 [ 296.448529][ T30] audit: type=1400 audit(1882227617.366:1592): avc: denied { watch_sb watch_reads } for pid=11485 comm="syz.3.2177" path="/15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 296.538004][ T53] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 296.548220][ T53] usb 3-1: cp210x converter now attached to ttyUSB0 [ 296.755477][ T10] usb 3-1: USB disconnect, device number 37 [ 296.770560][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 296.788914][ T10] cp210x 3-1:0.0: device disconnected [ 296.795443][ T5935] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 296.964933][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 296.992957][ T5935] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 297.011867][ T5935] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.025902][ T5935] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.037555][ T5935] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 297.047832][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.059010][ T5935] usb 4-1: Product: syz [ 297.079286][ T5935] usb 4-1: Manufacturer: syz [ 297.101116][ T5935] usb 4-1: SerialNumber: syz [ 297.423729][T11507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.476339][ T30] audit: type=1400 audit(1882227618.396:1593): avc: denied { name_bind } for pid=11506 comm="syz.0.2186" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 297.593651][ T5935] usb 4-1: 0:2 : does not exist [ 297.593829][T11512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.919952][T11527] binder: 11526:11527 ioctl c0306201 200000000480 returned -14 [ 297.927917][ T5819] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 298.092616][ T5819] usb 3-1: Using ep0 maxpacket: 8 [ 298.120963][ T5819] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 298.135276][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.152726][ T5819] usb 3-1: Product: syz [ 298.157048][ T5819] usb 3-1: Manufacturer: syz [ 298.161659][ T5819] usb 3-1: SerialNumber: syz [ 298.184895][ T5819] usb 3-1: config 0 descriptor?? [ 298.192904][ T5819] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 298.415770][ T5935] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 298.490846][ T5935] usb 4-1: USB disconnect, device number 34 [ 298.515194][ T53] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 298.685324][ T53] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.712594][ T53] usb 1-1: config 0 interface 0 has no altsetting 0 [ 298.724978][ T53] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 298.752581][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.760631][ T53] usb 1-1: Product: syz [ 298.772567][ T53] usb 1-1: Manufacturer: syz [ 298.777227][ T53] usb 1-1: SerialNumber: syz [ 298.794856][ T53] usb 1-1: config 0 descriptor?? [ 298.814641][ T53] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 298.822903][ T5867] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 298.843230][ T53] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 298.853777][ T53] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 298.862420][ T53] usb 1-1: media controller created [ 298.889841][ T53] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.960178][ T53] DVB: Unable to find symbol tda10046_attach() [ 298.966512][ T53] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 298.975181][ T53] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 299.005472][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 299.029504][ T5867] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 299.055491][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.080604][ T5867] usb 6-1: Product: syz [ 299.091769][ T5867] usb 6-1: Manufacturer: syz [ 299.098181][ T5867] usb 6-1: SerialNumber: syz [ 299.113109][ T5867] usb 6-1: config 0 descriptor?? [ 299.122385][ T5867] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 299.413029][ T5819] gspca_sonixj: reg_w1 err -71 [ 299.492747][ T5819] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 299.507541][ T5819] usb 3-1: USB disconnect, device number 38 [ 299.787500][T11559] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 299.828750][T11561] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2210'. [ 299.998888][ T30] audit: type=1400 audit(1882227620.916:1594): avc: denied { create } for pid=11564 comm="syz.1.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 300.030676][ T53] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 300.042827][ T30] audit: type=1400 audit(1882227620.916:1595): avc: denied { ioctl } for pid=11564 comm="syz.1.2213" path="socket:[37819]" dev="sockfs" ino=37819 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 300.068511][ T53] usb 1-1: USB disconnect, device number 34 [ 300.348498][ T5867] gspca_ov534_9: reg_w failed -71 [ 300.643588][ T5867] gspca_ov534_9: Unknown sensor 0000 [ 300.643675][ T5867] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 300.662403][ T30] audit: type=1400 audit(1882227621.576:1596): avc: denied { write } for pid=11598 comm="syz.0.2227" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 300.669620][ T5867] usb 6-1: USB disconnect, device number 19 [ 300.864786][ T30] audit: type=1800 audit(1882227621.786:1597): pid=11604 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2229" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 301.463996][ T30] audit: type=1400 audit(1882227622.376:1598): avc: denied { bind } for pid=11622 comm="syz.0.2237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 302.941613][T11635] netlink: 'syz.1.2242': attribute type 2 has an invalid length. [ 302.959727][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2242'. [ 303.045230][T11637] tipc: Started in network mode [ 303.052657][T11637] tipc: Node identity 6, cluster identity 4711 [ 303.074789][T11637] tipc: Node number set to 6 [ 303.392949][ T30] audit: type=1400 audit(1882227624.306:1599): avc: denied { name_bind } for pid=11656 comm="syz.5.2253" path="socket:[40038]" dev="sockfs" ino=40038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 303.467197][T11659] netlink: 'syz.0.2254': attribute type 4 has an invalid length. [ 303.482892][ T5867] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 303.631336][ T30] audit: type=1400 audit(1882227624.546:1600): avc: denied { mount } for pid=11664 comm="syz.1.2257" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 303.653687][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.687319][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 303.699290][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.718877][ T5867] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 303.728352][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.752657][ T30] audit: type=1400 audit(1882227624.586:1601): avc: denied { mounton } for pid=11664 comm="syz.1.2257" path="/92/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 303.755563][ T5867] usb 3-1: config 0 descriptor?? [ 303.812616][ T30] audit: type=1400 audit(1882227624.596:1602): avc: denied { read } for pid=11664 comm="syz.1.2257" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 303.868647][ T30] audit: type=1400 audit(1882227624.596:1603): avc: denied { open } for pid=11664 comm="syz.1.2257" path="/92/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 303.949473][T11671] syzkaller1: entered promiscuous mode [ 303.962735][T11671] syzkaller1: entered allmulticast mode [ 303.973450][T11671] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 304.163718][T11683] block nbd1: shutting down sockets [ 304.248076][ T5867] mcp2221 0003:04D8:00DD.0027: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 304.619858][T11697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.947244][T11681] syz.0.2263 (11681): drop_caches: 2 [ 305.041909][T11708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2276'. [ 305.603088][ T92] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 305.632633][ T5819] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 305.683344][ T53] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 305.772479][ T92] usb 6-1: config 0 has an invalid interface number: 205 but max is 0 [ 305.786975][ T92] usb 6-1: config 0 has no interface number 0 [ 305.795444][ T92] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=cd.e9 [ 305.804589][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 305.810086][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.818847][ T92] usb 6-1: Product: syz [ 305.825598][ T92] usb 6-1: Manufacturer: syz [ 305.830443][ T92] usb 6-1: SerialNumber: syz [ 305.835332][ T5819] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 305.843699][ T53] usb 2-1: Using ep0 maxpacket: 32 [ 305.851460][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.863442][ T92] usb 6-1: config 0 descriptor?? [ 305.872612][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.889195][ T92] usb_ehset_test 6-1:0.205: probe with driver usb_ehset_test failed with error -32 [ 305.898635][ T5819] usb 4-1: config 0 has no interface number 0 [ 305.904844][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.914700][ T5819] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 305.932230][ T53] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 305.941567][ T5819] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.954530][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.962740][ T5819] usb 4-1: config 0 interface 52 has no altsetting 0 [ 305.973193][ T53] usb 2-1: config 0 descriptor?? [ 305.984261][ T53] hub 2-1:0.0: USB hub found [ 305.990804][ T5819] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 306.000191][ T5819] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 306.008560][ T5819] usb 4-1: Manufacturer: syz [ 306.016970][ T5819] usb 4-1: config 0 descriptor?? [ 306.022215][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2295'. [ 306.185476][ T53] hub 2-1:0.0: 1 port detected [ 306.250053][ T5819] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input33 [ 306.280910][ T1202] usb 3-1: USB disconnect, device number 39 [ 306.540415][ T5819] usb 4-1: USB disconnect, device number 35 [ 306.540449][ C1] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 306.639690][ T53] usb 6-1: USB disconnect, device number 20 [ 306.791828][ T5867] hub 2-1:0.0: activate --> -90 [ 306.992696][ T5867] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 306.997094][ T1202] usb 2-1: USB disconnect, device number 31 [ 307.022617][ T53] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 307.043205][T11776] bond0: entered promiscuous mode [ 307.048277][T11776] bond_slave_0: entered promiscuous mode [ 307.056683][T11776] bond_slave_1: entered promiscuous mode [ 307.117613][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2306'. [ 307.184571][ T53] usb 6-1: config 8 has an invalid interface number: 22 but max is 0 [ 307.202640][ T53] usb 6-1: config 8 has no interface number 0 [ 307.212576][ T53] usb 6-1: config 8 interface 22 has no altsetting 0 [ 307.234263][ T53] usb 6-1: New USB device found, idVendor=057c, idProduct=8403, bcdDevice=42.7d [ 307.243562][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.251567][ T53] usb 6-1: Product: syz [ 307.272586][ T53] usb 6-1: Manufacturer: syz [ 307.277210][ T53] usb 6-1: SerialNumber: syz [ 307.504427][ T53] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 307.525177][ T53] usb 6-1: USB disconnect, device number 21 [ 307.902687][ T5819] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 308.063638][ T5819] usb 1-1: Using ep0 maxpacket: 32 [ 308.070375][ T5819] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 308.084586][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.133348][ T5819] usb 1-1: config 0 descriptor?? [ 308.352220][ T5819] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 308.370926][ T5819] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 308.410924][ T5819] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 308.425128][ T5819] usb 1-1: media controller created [ 308.479557][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.554155][ T5819] az6027: usb out operation failed. (-71) [ 308.562621][ T5819] az6027: usb out operation failed. (-71) [ 308.575428][ T5819] stb0899_attach: Driver disabled by Kconfig [ 308.596191][ T5819] az6027: no front-end attached [ 308.596191][ T5819] [ 308.609563][ T5819] az6027: usb out operation failed. (-71) [ 308.616238][ T5819] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 308.629562][ T5819] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input34 [ 308.654274][ T5819] dvb-usb: schedule remote query interval to 400 msecs. [ 308.661360][ T5819] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 308.675988][ T5819] usb 1-1: USB disconnect, device number 35 [ 308.731223][ T5819] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 309.142552][ T1202] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 309.296412][ T1202] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 309.316892][ T1202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.345488][ T1202] usb 2-1: Product: syz [ 309.349756][ T1202] usb 2-1: Manufacturer: syz [ 309.367431][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2345'. [ 309.377795][ T1202] usb 2-1: SerialNumber: syz [ 309.394522][ T1202] usb 2-1: config 0 descriptor?? [ 309.402269][ T1202] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 309.421321][ T1202] usb 2-1: setting power ON [ 309.433095][ T1202] dvb-usb: bulk message failed: -22 (2/0) [ 309.449229][ T1202] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 309.465934][ T1202] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 309.476113][ T1202] dvb_usb_cxusb 2-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 309.621287][ T5819] usb 2-1: USB disconnect, device number 32 [ 309.693595][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 309.862953][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 309.871316][ T10] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 309.880129][ T10] usb 1-1: config 0 has no interface number 0 [ 309.889529][ T10] usb 1-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=df.0a [ 309.898988][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.907152][ T10] usb 1-1: Product: syz [ 309.911515][ T10] usb 1-1: Manufacturer: syz [ 309.916269][ T10] usb 1-1: SerialNumber: syz [ 309.923694][ T10] usb 1-1: config 0 descriptor?? [ 309.932467][ T10] ums-datafab 1-1:0.88: USB Mass Storage device detected [ 309.978737][ T10] ums-sddr55 1-1:0.88: USB Mass Storage device detected [ 310.196198][ T10] usb 1-1: USB disconnect, device number 36 [ 310.198030][T11903] 9pnet_fd: p9_fd_create_tcp (11903): problem connecting socket to 127.0.0.1 [ 310.359535][T11911] Invalid ELF header magic: != ELF [ 310.722584][ T5819] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 310.762606][ T53] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 310.874992][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 310.885368][ T5819] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 310.905596][ T5819] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 310.917703][ T5819] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 310.922639][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 310.940892][ T5819] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.960002][ T53] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 310.968942][ T5819] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 310.978231][ T53] usb 6-1: config 0 has no interface number 0 [ 310.984679][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.997009][ T53] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 311.007210][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.017762][ T53] usb 6-1: Product: syz [ 311.023489][ T53] usb 6-1: Manufacturer: syz [ 311.028274][ T53] usb 6-1: SerialNumber: syz [ 311.036146][ T53] usb 6-1: config 0 descriptor?? [ 311.094464][ T10] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 311.107059][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.125130][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 311.140032][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 311.151721][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 311.166248][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.176525][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.191751][ T10] usb 3-1: config 0 descriptor?? [ 311.197485][T11929] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 311.229478][ T5819] usb 4-1: GET_CAPABILITIES returned 0 [ 311.236267][ T5819] usbtmc 4-1:16.0: can't read capabilities [ 311.435159][ T5935] usb 4-1: USB disconnect, device number 36 [ 311.462243][ T53] usb 6-1: Firmware: major: 56, minor: 92, hardware type: UNKNOWN (224) [ 311.621885][ T10] plantronics 0003:047F:FFFF.0028: reserved main item tag 0xd [ 311.649535][ T10] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 311.661155][ T10] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 311.679152][ T53] usb 6-1: no permanent extended address found, random address set [ 311.687547][ T53] usb 6-1: atusb_probe: initialization failed, error = -524 [ 311.696428][ T53] atusb 6-1:0.128: probe with driver atusb failed with error -524 [ 311.917520][ T5935] usb 6-1: USB disconnect, device number 22 [ 311.956862][ T1202] usb 3-1: USB disconnect, device number 40 [ 312.332661][ T53] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 312.352679][ T5819] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 312.493004][ T53] usb 1-1: Using ep0 maxpacket: 32 [ 312.503624][ T53] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 312.511992][ T53] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 312.537539][ T53] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 312.537833][ T5819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.573004][ T53] usb 1-1: config 1 has no interface number 0 [ 312.579149][ T53] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.592556][ T5819] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.602735][ T53] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 312.616007][ T53] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 312.626013][ T5819] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 312.635790][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 312.643951][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.644040][T11990] netlink: 'syz.5.2398': attribute type 1 has an invalid length. [ 312.652009][ T5819] usb 4-1: SerialNumber: syz [ 312.672298][ T53] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 312.712782][T11990] bond1: entered promiscuous mode [ 312.719605][T11990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.726344][ T5869] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 312.801832][T11994] bond1: (slave veth3): making interface the new active one [ 312.810050][T11994] veth3: entered promiscuous mode [ 312.820781][T11994] bond1: (slave veth3): Enslaving as an active interface with an up link [ 312.895102][ T53] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 312.902084][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 312.913453][ T5819] usb 4-1: 0:2 : does not exist [ 312.918425][ T5819] usb 4-1: unit 48 not found! [ 312.938429][ T5869] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 312.952637][ T5869] usb 2-1: config 0 has no interface number 0 [ 312.969390][ T5819] usb 4-1: USB disconnect, device number 37 [ 312.975639][ T5869] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.989606][ T5869] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 313.006213][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.032046][ T5869] usb 2-1: config 0 descriptor?? [ 313.052151][ T5869] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 313.294796][T12005] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.302595][T12005] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.307811][ T5819] usb 1-1: USB disconnect, device number 37 [ 313.328267][ T5819] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 313.329196][ T10] usb 2-1: USB disconnect, device number 33 [ 313.637379][T12005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.651545][T12005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.711945][T12005] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.731295][T12005] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.740248][T12005] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.749111][T12005] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.796511][T12005] bond1: left promiscuous mode [ 313.801322][T12005] veth3: left promiscuous mode [ 314.345152][T12043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2421'. [ 314.428805][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 314.428818][ T30] audit: type=1400 audit(1882227635.346:1607): avc: denied { setopt } for pid=12046 comm="syz.0.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 314.589431][T12050] bond0: left promiscuous mode [ 314.605139][T12050] bond_slave_0: left promiscuous mode [ 314.610732][T12050] bond_slave_1: left promiscuous mode [ 314.792731][ T53] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 314.858844][T12050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.888636][T12050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.957323][ T53] usb 4-1: Using ep0 maxpacket: 16 [ 314.971777][ T53] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.989963][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.005764][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 315.028173][T12050] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.029504][ T30] audit: type=1400 audit(1882227635.946:1608): avc: denied { write } for pid=12067 comm="syz.5.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 315.039180][T12050] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.068075][T12050] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.071884][ T53] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 315.079886][T12050] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.116882][ T53] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.136503][ T53] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 315.152192][ T53] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 315.156377][T12050] gretap0: left promiscuous mode [ 315.160315][ T53] usb 4-1: Manufacturer: syz [ 315.171282][T12050] macvlan2: left promiscuous mode [ 315.179750][ T53] usb 4-1: config 0 descriptor?? [ 315.184828][ T5819] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 315.192689][T12050] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.202575][T12050] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.212074][T12050] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.221050][T12050] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.236069][T12050] vxlan0: left promiscuous mode [ 315.354342][ T5819] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 315.366052][ T5819] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 315.391576][ T5819] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 315.413558][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.438317][T12066] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 315.460044][ T5819] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 315.488751][ T30] audit: type=1400 audit(1882227636.406:1609): avc: denied { watch } for pid=12078 comm="syz.5.2435" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 315.521474][ T30] audit: type=1400 audit(1882227636.436:1610): avc: denied { watch_sb watch_reads } for pid=12078 comm="syz.5.2435" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 315.572618][ T53] rc_core: IR keymap rc-hauppauge not found [ 315.578690][ T53] Registered IR keymap rc-empty [ 315.584234][ T53] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 315.602768][ T53] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 315.639944][ T53] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 315.678418][ T53] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input36 [ 315.721796][ T53] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 315.748997][ T5819] usb 2-1: USB disconnect, device number 34 [ 315.762635][ T92] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 315.782923][ T53] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 315.814860][ T53] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 315.833263][ T53] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 315.852624][ T53] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 315.872894][ T53] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 315.894941][ T53] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 315.915085][ T92] usb 6-1: config 0 has no interfaces? [ 315.920627][ T92] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 315.942753][ T53] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 315.960063][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.968725][ T53] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 315.995296][ T92] usb 6-1: config 0 descriptor?? [ 316.002933][ T53] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 316.026538][ T53] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 316.042580][ T53] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 316.056741][ T53] usb 4-1: USB disconnect, device number 38 [ 316.206909][ T92] usb 6-1: USB disconnect, device number 23 [ 316.683508][ T92] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 316.833047][ T92] usb 2-1: Using ep0 maxpacket: 16 [ 316.861033][ T92] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 316.891831][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.912067][ T92] usb 2-1: Product: syz [ 316.912577][ T1202] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 316.919570][ T92] usb 2-1: Manufacturer: syz [ 316.939001][ T92] usb 2-1: SerialNumber: syz [ 316.950692][ T30] audit: type=1400 audit(1882227637.866:1611): avc: denied { map } for pid=12124 comm="syz.2.2456" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 316.967977][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.980817][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.008875][ T92] r8152-cfgselector 2-1: Unknown version 0x0000 [ 317.026532][ T92] r8152-cfgselector 2-1: config 0 descriptor?? [ 317.092722][ T1202] usb 4-1: Using ep0 maxpacket: 32 [ 317.103878][ T1202] usb 4-1: config 0 interface 0 has no altsetting 0 [ 317.117625][ T1202] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 317.140906][ T1202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.149064][ T1202] usb 4-1: Product: syz [ 317.153428][ T1202] usb 4-1: Manufacturer: syz [ 317.158034][ T1202] usb 4-1: SerialNumber: syz [ 317.165210][ T1202] usb 4-1: config 0 descriptor?? [ 317.387909][ T5819] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 317.425356][T12145] [ 317.427714][T12145] ===================================================== [ 317.434639][T12145] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 317.442100][T12145] 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 Not tainted [ 317.449201][T12145] ----------------------------------------------------- [ 317.456119][T12145] syz.2.2464/12145 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 317.463828][T12145] ffff88802b11d360 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 317.472541][T12145] [ 317.472541][T12145] and this task is already holding: [ 317.479888][T12145] ffff888021713028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 317.489719][T12145] which would create a new lock dependency: [ 317.495586][T12145] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 317.503683][T12145] [ 317.503683][T12145] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 317.513111][T12145] (&client->buffer_lock){..-.}-{3:3} [ 317.513138][T12145] [ 317.513138][T12145] ... which became SOFTIRQ-irq-safe at: [ 317.526171][T12145] lock_acquire+0x179/0x350 [ 317.530765][T12145] _raw_spin_lock+0x2e/0x40 [ 317.535345][T12145] evdev_pass_values+0x10e/0x9b0 [ 317.540361][T12145] evdev_events+0x1bb/0x390 [ 317.544940][T12145] input_pass_values+0x6c7/0x890 [ 317.549967][T12145] input_handle_event+0xb29/0x14d0 [ 317.555158][T12145] input_event+0x83/0xb0 [ 317.559481][T12145] hidinput_hid_event+0xa10/0x2420 [ 317.564672][T12145] hid_process_event+0x4b7/0x5e0 [ 317.569682][T12145] hid_report_raw_event+0xa0a/0x1290 [ 317.575041][T12145] __hid_input_report.constprop.0+0x33f/0x450 [ 317.581183][T12145] hid_irq_in+0x35e/0x870 [ 317.585592][T12145] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 317.591048][T12145] usb_hcd_giveback_urb+0x39b/0x450 [ 317.596329][T12145] dummy_timer+0x180e/0x3a20 [ 317.600993][T12145] __hrtimer_run_queues+0x202/0xad0 [ 317.606266][T12145] hrtimer_run_softirq+0x17d/0x350 [ 317.611455][T12145] handle_softirqs+0x216/0x8e0 [ 317.616298][T12145] __irq_exit_rcu+0x109/0x170 [ 317.621051][T12145] irq_exit_rcu+0x9/0x30 [ 317.625368][T12145] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 317.631081][T12145] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.637138][T12145] __sanitizer_cov_trace_const_cmp8+0x8/0x20 [ 317.643193][T12145] copy_page_range+0x1740/0x5fe0 [ 317.648211][T12145] copy_process+0x8644/0x91b0 [ 317.652966][T12145] kernel_clone+0xfc/0x960 [ 317.657467][T12145] __do_sys_clone+0xce/0x120 [ 317.662133][T12145] do_syscall_64+0xcd/0x260 [ 317.666715][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.672680][T12145] [ 317.672680][T12145] to a SOFTIRQ-irq-unsafe lock: [ 317.679676][T12145] (tasklist_lock){.+.+}-{3:3} [ 317.679703][T12145] [ 317.679703][T12145] ... which became SOFTIRQ-irq-unsafe at: [ 317.692310][T12145] ... [ 317.692317][T12145] lock_acquire+0x179/0x350 [ 317.699463][T12145] _raw_read_lock+0x5f/0x70 [ 317.704044][T12145] __do_wait+0x105/0x890 [ 317.708368][T12145] do_wait+0x21e/0x5a0 [ 317.712516][T12145] kernel_wait+0x9f/0x160 [ 317.716920][T12145] call_usermodehelper_exec_work+0xf1/0x170 [ 317.722892][T12145] process_one_work+0x9cf/0x1b70 [ 317.727903][T12145] worker_thread+0x6c8/0xf10 [ 317.732571][T12145] kthread+0x3c2/0x780 [ 317.736716][T12145] ret_from_fork+0x45/0x80 [ 317.741206][T12145] ret_from_fork_asm+0x1a/0x30 [ 317.746047][T12145] [ 317.746047][T12145] other info that might help us debug this: [ 317.746047][T12145] [ 317.756261][T12145] Chain exists of: [ 317.756261][T12145] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 317.756261][T12145] [ 317.769387][T12145] Possible interrupt unsafe locking scenario: [ 317.769387][T12145] [ 317.777702][T12145] CPU0 CPU1 [ 317.783078][T12145] ---- ---- [ 317.788529][T12145] lock(tasklist_lock); [ 317.792769][T12145] local_irq_disable(); [ 317.799511][T12145] lock(&client->buffer_lock); [ 317.806874][T12145] lock(&new->fa_lock); [ 317.813633][T12145] [ 317.817072][T12145] lock(&client->buffer_lock); [ 317.822095][T12145] [ 317.822095][T12145] *** DEADLOCK *** [ 317.822095][T12145] [ 317.830232][T12145] 7 locks held by syz.2.2464/12145: [ 317.835424][T12145] #0: ffff888146fab118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 317.844576][T12145] #1: ffff8881476a0230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x390 [ 317.854682][T12145] #2: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x390 [ 317.864346][T12145] #3: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x890 [ 317.873926][T12145] #4: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 317.883067][T12145] #5: ffff888021713028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 317.893351][T12145] #6: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 317.902410][T12145] [ 317.902410][T12145] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 317.912807][T12145] -> (&client->buffer_lock){..-.}-{3:3} { [ 317.918549][T12145] IN-SOFTIRQ-W at: [ 317.922519][T12145] lock_acquire+0x179/0x350 [ 317.928676][T12145] _raw_spin_lock+0x2e/0x40 [ 317.934824][T12145] evdev_pass_values+0x10e/0x9b0 [ 317.941408][T12145] evdev_events+0x1bb/0x390 [ 317.947550][T12145] input_pass_values+0x6c7/0x890 [ 317.954126][T12145] input_handle_event+0xb29/0x14d0 [ 317.960880][T12145] input_event+0x83/0xb0 [ 317.966769][T12145] hidinput_hid_event+0xa10/0x2420 [ 317.973525][T12145] hid_process_event+0x4b7/0x5e0 [ 317.980101][T12145] hid_report_raw_event+0xa0a/0x1290 [ 317.987025][T12145] __hid_input_report.constprop.0+0x33f/0x450 [ 317.994731][T12145] hid_irq_in+0x35e/0x870 [ 318.000701][T12145] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 318.007728][T12145] usb_hcd_giveback_urb+0x39b/0x450 [ 318.014597][T12145] dummy_timer+0x180e/0x3a20 [ 318.020861][T12145] __hrtimer_run_queues+0x202/0xad0 [ 318.027708][T12145] hrtimer_run_softirq+0x17d/0x350 [ 318.034471][T12145] handle_softirqs+0x216/0x8e0 [ 318.040880][T12145] __irq_exit_rcu+0x109/0x170 [ 318.047199][T12145] irq_exit_rcu+0x9/0x30 [ 318.053086][T12145] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 318.060364][T12145] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.067999][T12145] __sanitizer_cov_trace_const_cmp8+0x8/0x20 [ 318.075628][T12145] copy_page_range+0x1740/0x5fe0 [ 318.082218][T12145] copy_process+0x8644/0x91b0 [ 318.088542][T12145] kernel_clone+0xfc/0x960 [ 318.094605][T12145] __do_sys_clone+0xce/0x120 [ 318.100839][T12145] do_syscall_64+0xcd/0x260 [ 318.106993][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.114524][T12145] INITIAL USE at: [ 318.118403][T12145] lock_acquire+0x179/0x350 [ 318.124469][T12145] _raw_spin_lock_irq+0x36/0x50 [ 318.130873][T12145] evdev_read+0x436/0xee0 [ 318.136768][T12145] vfs_readv+0x6bf/0x8a0 [ 318.142576][T12145] do_readv+0x295/0x330 [ 318.148297][T12145] do_syscall_64+0xcd/0x260 [ 318.154364][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.161810][T12145] } [ 318.164293][T12145] ... key at: [] __key.1+0x0/0x40 [ 318.171406][T12145] [ 318.171406][T12145] the dependencies between the lock to be acquired [ 318.171417][T12145] and SOFTIRQ-irq-unsafe lock: [ 318.184903][T12145] -> (tasklist_lock){.+.+}-{3:3} { [ 318.190194][T12145] HARDIRQ-ON-R at: [ 318.194333][T12145] lock_acquire+0x179/0x350 [ 318.200847][T12145] _raw_read_lock+0x5f/0x70 [ 318.207344][T12145] __do_wait+0x105/0x890 [ 318.213584][T12145] do_wait+0x21e/0x5a0 [ 318.219648][T12145] kernel_wait+0x9f/0x160 [ 318.225967][T12145] call_usermodehelper_exec_work+0xf1/0x170 [ 318.233858][T12145] process_one_work+0x9cf/0x1b70 [ 318.240819][T12145] worker_thread+0x6c8/0xf10 [ 318.247406][T12145] kthread+0x3c2/0x780 [ 318.253463][T12145] ret_from_fork+0x45/0x80 [ 318.259866][T12145] ret_from_fork_asm+0x1a/0x30 [ 318.266621][T12145] SOFTIRQ-ON-R at: [ 318.270759][T12145] lock_acquire+0x179/0x350 [ 318.277259][T12145] _raw_read_lock+0x5f/0x70 [ 318.283761][T12145] __do_wait+0x105/0x890 [ 318.290028][T12145] do_wait+0x21e/0x5a0 [ 318.296093][T12145] kernel_wait+0x9f/0x160 [ 318.302426][T12145] call_usermodehelper_exec_work+0xf1/0x170 [ 318.310318][T12145] process_one_work+0x9cf/0x1b70 [ 318.317244][T12145] worker_thread+0x6c8/0xf10 [ 318.323824][T12145] kthread+0x3c2/0x780 [ 318.329875][T12145] ret_from_fork+0x45/0x80 [ 318.336275][T12145] ret_from_fork_asm+0x1a/0x30 [ 318.343028][T12145] INITIAL USE at: [ 318.347081][T12145] lock_acquire+0x179/0x350 [ 318.353488][T12145] _raw_write_lock_irq+0x36/0x50 [ 318.360337][T12145] copy_process+0x3f09/0x91b0 [ 318.366925][T12145] kernel_clone+0xfc/0x960 [ 318.373251][T12145] user_mode_thread+0xc7/0x110 [ 318.379928][T12145] rest_init+0x23/0x2b0 [ 318.385985][T12145] start_kernel+0x3e9/0x4d0 [ 318.392410][T12145] x86_64_start_reservations+0x18/0x30 [ 318.399779][T12145] x86_64_start_kernel+0xb0/0xc0 [ 318.406624][T12145] common_startup_64+0x13e/0x148 [ 318.413466][T12145] INITIAL READ USE at: [ 318.417957][T12145] lock_acquire+0x179/0x350 [ 318.424806][T12145] _raw_read_lock+0x5f/0x70 [ 318.431657][T12145] __do_wait+0x105/0x890 [ 318.438253][T12145] do_wait+0x21e/0x5a0 [ 318.444664][T12145] kernel_wait+0x9f/0x160 [ 318.451323][T12145] call_usermodehelper_exec_work+0xf1/0x170 [ 318.459556][T12145] process_one_work+0x9cf/0x1b70 [ 318.466831][T12145] worker_thread+0x6c8/0xf10 [ 318.473751][T12145] kthread+0x3c2/0x780 [ 318.480147][T12145] ret_from_fork+0x45/0x80 [ 318.486892][T12145] ret_from_fork_asm+0x1a/0x30 [ 318.493991][T12145] } [ 318.496644][T12145] ... key at: [] tasklist_lock+0x18/0x40 [ 318.504528][T12145] ... acquired at: [ 318.508483][T12145] _raw_read_lock+0x5f/0x70 [ 318.513149][T12145] send_sigurg+0xed/0xc80 [ 318.517643][T12145] sk_send_sigurg+0x76/0x360 [ 318.522390][T12145] unix_stream_sendmsg+0xe77/0x1160 [ 318.527757][T12145] ____sys_sendmsg+0xa95/0xc70 [ 318.532687][T12145] ___sys_sendmsg+0x134/0x1d0 [ 318.537523][T12145] __sys_sendmmsg+0x200/0x420 [ 318.542372][T12145] __x64_sys_sendmmsg+0x9c/0x100 [ 318.547468][T12145] do_syscall_64+0xcd/0x260 [ 318.552140][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.558192][T12145] [ 318.560498][T12145] -> (&f_owner->lock){....}-{3:3} { [ 318.565787][T12145] INITIAL USE at: [ 318.569760][T12145] lock_acquire+0x179/0x350 [ 318.575999][T12145] _raw_write_lock_irq+0x36/0x50 [ 318.582668][T12145] __f_setown+0x61/0x3c0 [ 318.588639][T12145] generic_setlease+0xeef/0x1300 [ 318.595307][T12145] kernel_setlease+0x106/0x140 [ 318.601798][T12145] vfs_setlease+0x258/0x2d0 [ 318.608031][T12145] fcntl_setlease+0x3ed/0x5a0 [ 318.614436][T12145] do_fcntl+0x75a/0x1590 [ 318.620400][T12145] __x64_sys_fcntl+0x170/0x200 [ 318.626888][T12145] do_syscall_64+0xcd/0x260 [ 318.633121][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.640747][T12145] INITIAL READ USE at: [ 318.645146][T12145] lock_acquire+0x179/0x350 [ 318.651817][T12145] _raw_read_lock_irqsave+0x74/0x90 [ 318.659175][T12145] send_sigio+0x31/0x3e0 [ 318.665578][T12145] kill_fasync+0x214/0x510 [ 318.672151][T12145] lease_break_callback+0x23/0x30 [ 318.679331][T12145] __break_lease+0x674/0x1810 [ 318.686173][T12145] do_dentry_open+0x6e1/0x1c10 [ 318.693100][T12145] vfs_open+0x82/0x3f0 [ 318.699324][T12145] path_openat+0x1e5e/0x2d40 [ 318.706074][T12145] do_filp_open+0x20b/0x470 [ 318.712728][T12145] do_sys_openat2+0x11b/0x1d0 [ 318.719561][T12145] __x64_sys_creat+0xcc/0x120 [ 318.726402][T12145] do_syscall_64+0xcd/0x260 [ 318.733072][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.741120][T12145] } [ 318.743686][T12145] ... key at: [] __key.1+0x0/0x40 [ 318.750868][T12145] ... acquired at: [ 318.754748][T12145] _raw_read_lock_irqsave+0x74/0x90 [ 318.760117][T12145] send_sigio+0x31/0x3e0 [ 318.764520][T12145] kill_fasync+0x214/0x510 [ 318.769096][T12145] lease_break_callback+0x23/0x30 [ 318.774282][T12145] __break_lease+0x674/0x1810 [ 318.779123][T12145] do_dentry_open+0x6e1/0x1c10 [ 318.784056][T12145] vfs_open+0x82/0x3f0 [ 318.788286][T12145] path_openat+0x1e5e/0x2d40 [ 318.793030][T12145] do_filp_open+0x20b/0x470 [ 318.797696][T12145] do_sys_openat2+0x11b/0x1d0 [ 318.802534][T12145] __x64_sys_creat+0xcc/0x120 [ 318.807371][T12145] do_syscall_64+0xcd/0x260 [ 318.812041][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.818091][T12145] [ 318.820396][T12145] -> (&new->fa_lock){....}-{3:3} { [ 318.825529][T12145] INITIAL USE at: [ 318.829404][T12145] lock_acquire+0x179/0x350 [ 318.835465][T12145] _raw_write_lock_irq+0x36/0x50 [ 318.841956][T12145] fasync_remove_entry+0xb2/0x1e0 [ 318.848536][T12145] fasync_helper+0xaf/0xd0 [ 318.854503][T12145] lease_modify+0x232/0x500 [ 318.860558][T12145] locks_remove_file+0x29e/0x5b0 [ 318.867051][T12145] __fput+0x351/0xb70 [ 318.872582][T12145] task_work_run+0x150/0x240 [ 318.878725][T12145] syscall_exit_to_user_mode+0x27b/0x2a0 [ 318.885913][T12145] do_syscall_64+0xda/0x260 [ 318.891978][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.899422][T12145] INITIAL READ USE at: [ 318.903735][T12145] lock_acquire+0x179/0x350 [ 318.910226][T12145] _raw_read_lock_irqsave+0x74/0x90 [ 318.917417][T12145] kill_fasync+0x138/0x510 [ 318.923819][T12145] snd_fasync_work_fn+0x1ac/0x240 [ 318.930829][T12145] process_one_work+0x9cf/0x1b70 [ 318.937748][T12145] worker_thread+0x6c8/0xf10 [ 318.944322][T12145] kthread+0x3c2/0x780 [ 318.950383][T12145] ret_from_fork+0x45/0x80 [ 318.956797][T12145] ret_from_fork_asm+0x1a/0x30 [ 318.963551][T12145] } [ 318.966030][T12145] ... key at: [] __key.0+0x0/0x40 [ 318.973122][T12145] ... acquired at: [ 318.976903][T12145] lock_acquire+0x179/0x350 [ 318.981574][T12145] _raw_read_lock_irqsave+0x74/0x90 [ 318.986938][T12145] kill_fasync+0x138/0x510 [ 318.991512][T12145] evdev_pass_values+0x619/0x9b0 [ 318.996610][T12145] evdev_events+0x1bb/0x390 [ 319.001278][T12145] input_pass_values+0x6c7/0x890 [ 319.006375][T12145] input_handle_event+0xf00/0x14d0 [ 319.011652][T12145] input_inject_event+0x1cd/0x390 [ 319.016840][T12145] evdev_write+0x457/0x750 [ 319.021419][T12145] vfs_write+0x25f/0x1180 [ 319.025916][T12145] ksys_write+0x205/0x240 [ 319.030411][T12145] do_syscall_64+0xcd/0x260 [ 319.035080][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.041133][T12145] [ 319.043444][T12145] [ 319.043444][T12145] stack backtrace: [ 319.049312][T12145] CPU: 1 UID: 0 PID: 12145 Comm: syz.2.2464 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 319.049336][T12145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 319.049358][T12145] Call Trace: [ 319.049364][T12145] [ 319.049376][T12145] dump_stack_lvl+0x116/0x1f0 [ 319.049401][T12145] check_irq_usage+0x7dc/0x920 [ 319.049431][T12145] ? check_path.constprop.0+0x24/0x50 [ 319.049457][T12145] ? __lock_acquire+0x1189/0x1ba0 [ 319.049481][T12145] __lock_acquire+0x1189/0x1ba0 [ 319.049513][T12145] lock_acquire+0x179/0x350 [ 319.049538][T12145] ? kill_fasync+0x138/0x510 [ 319.049562][T12145] _raw_read_lock_irqsave+0x74/0x90 [ 319.049584][T12145] ? kill_fasync+0x138/0x510 [ 319.049602][T12145] kill_fasync+0x138/0x510 [ 319.049623][T12145] evdev_pass_values+0x619/0x9b0 [ 319.049650][T12145] evdev_events+0x1bb/0x390 [ 319.049670][T12145] input_pass_values+0x6c7/0x890 [ 319.049693][T12145] input_handle_event+0xf00/0x14d0 [ 319.049713][T12145] ? _copy_from_user+0x59/0xd0 [ 319.049739][T12145] input_inject_event+0x1cd/0x390 [ 319.049762][T12145] evdev_write+0x457/0x750 [ 319.049791][T12145] ? __pfx_evdev_write+0x10/0x10 [ 319.049812][T12145] ? bpf_lsm_file_permission+0x9/0x10 [ 319.049835][T12145] ? security_file_permission+0x71/0x210 [ 319.049861][T12145] ? rw_verify_area+0xcf/0x680 [ 319.049884][T12145] vfs_write+0x25f/0x1180 [ 319.049909][T12145] ? __pfx_evdev_write+0x10/0x10 [ 319.049933][T12145] ? __pfx_vfs_write+0x10/0x10 [ 319.049955][T12145] ? find_held_lock+0x2b/0x80 [ 319.049975][T12145] ? __fget_files+0x204/0x3c0 [ 319.049992][T12145] ? __fget_files+0x20e/0x3c0 [ 319.050010][T12145] ksys_write+0x205/0x240 [ 319.050034][T12145] ? __pfx_ksys_write+0x10/0x10 [ 319.050060][T12145] ? rcu_is_watching+0x12/0xc0 [ 319.050083][T12145] do_syscall_64+0xcd/0x260 [ 319.050107][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.050124][T12145] RIP: 0033:0x7f1dbe18e969 [ 319.050139][T12145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.050157][T12145] RSP: 002b:00007f1dbf084038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.050175][T12145] RAX: ffffffffffffffda RBX: 00007f1dbe3b5fa0 RCX: 00007f1dbe18e969 [ 319.050188][T12145] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 319.050198][T12145] RBP: 00007f1dbe210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 319.050209][T12145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.050219][T12145] R13: 0000000000000000 R14: 00007f1dbe3b5fa0 R15: 00007ffe56f21358 [ 319.050236][T12145] [ 319.061915][ T1202] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 319.147603][ T5869] r8152-cfgselector 2-1: USB disconnect, device number 35 [ 319.344251][ T5819] usb 6-1: unable to get BOS descriptor or descriptor too short [ 319.352312][ T5819] usb 6-1: not running at top speed; connect to a high speed hub [ 319.361060][ T5819] usb 6-1: config 2 has an invalid interface number: 212 but max is 1 [ 319.370605][ T5819] usb 6-1: config 2 has an invalid interface number: 226 but max is 1 [ 319.378805][ T5819] usb 6-1: config 2 has no interface number 0 [ 319.385413][ T5819] usb 6-1: config 2 has no interface number 1 [ 319.391516][ T5819] usb 6-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 319.403402][ T5819] usb 6-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 319.414263][ T5819] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 319.425515][ T5819] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 319.436650][ T5819] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 319.446700][ T5819] usb 6-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 319.459787][ T5819] usb 6-1: config 2 interface 212 has no altsetting 0 [ 319.468097][ T5819] usb 6-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 319.477239][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.486290][ T5819] usb 6-1: Product: syz [ 319.488699][ T1202] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 319.490439][ T5819] usb 6-1: Manufacturer: syz [ 319.490456][ T5819] usb 6-1: SerialNumber: syz [ 319.717241][ T5869] usb 4-1: USB disconnect, device number 39 [ 319.728595][ T5819] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.226/input/input37 [ 319.745989][ T5819] usb 6-1: USB disconnect, device number 24