last executing test programs: 1m33.883240444s ago: executing program 0 (id=2118): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') read$FUSE(r1, &(0x7f0000000940)={0x2020}, 0x2020) 1m33.859105876s ago: executing program 0 (id=2119): openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m32.989183005s ago: executing program 0 (id=2135): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x0, @void}, 0x10) 1m32.928831069s ago: executing program 0 (id=2137): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) 1m32.886004646s ago: executing program 0 (id=2139): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xb6, 0x46, 0x5, 0x58, 0xccd, 0x12, 0xe4a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xb, 0x20, 0x68, [{{0x9, 0x4, 0xf9, 0x2, 0x0, 0xff, 0xff, 0xff, 0xb6}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffffdb, &(0x7f0000000000)=ANY=[]) 1m32.525750422s ago: executing program 0 (id=2145): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000100)={&(0x7f0000000280)={{@host, 0xd5cb}, {@hyper, 0x8}, 0x400, "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"}, 0x418, 0x7ff}) 1m32.342643648s ago: executing program 32 (id=2145): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000100)={&(0x7f0000000280)={{@host, 0xd5cb}, {@hyper, 0x8}, 0x400, "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"}, 0x418, 0x7ff}) 14.290560423s ago: executing program 2 (id=3519): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4f21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12.911044276s ago: executing program 2 (id=3542): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r2, 0x100e, &(0x7f00000001c0)=""/4110}) 12.729282973s ago: executing program 2 (id=3546): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[], 0x10) 12.591892154s ago: executing program 2 (id=3550): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@delneigh={0x24, 0x1d, 0x10, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x0, 0x11, 0x8}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048094}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 12.132767599s ago: executing program 2 (id=3558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0xad, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 7.190060045s ago: executing program 2 (id=3558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0xad, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.957602002s ago: executing program 3 (id=3653): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 3.957256191s ago: executing program 5 (id=3654): socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000001cc0), 0x800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x0, 0x1, 0xb}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 2.565428266s ago: executing program 5 (id=3658): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.437576044s ago: executing program 5 (id=3659): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', r1, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.405055169s ago: executing program 3 (id=3660): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.30477653s ago: executing program 3 (id=3661): syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 2.259190155s ago: executing program 3 (id=3662): r0 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fstatfs(r0, &(0x7f00000003c0)=""/146) 2.132915812s ago: executing program 5 (id=3665): getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) 1.412970671s ago: executing program 3 (id=3671): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 689.141123ms ago: executing program 1 (id=3678): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0xc800) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000003590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 641.358237ms ago: executing program 4 (id=3679): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x24000800) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x9}, {0x2, [{0xc8, 0xb}, {0xc8}]}}}, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 489.895924ms ago: executing program 1 (id=3680): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="82f51ef54c168beb696c49a023f91124fa8b5793b47aedff32ac3ae14e727adf9c44ea24352a6498de8d6d41ed3998fb497662877af71be70c2e2718c7cac5f0c7939012cf9cf685ccbfaf2d0407d650d9d8ab634b7663e61ed9f0563e37160c541343deea83aa1e75162a39db978c2d0e4628b4ca54d6a571484f29cc77f99273f18979a5b283b382647eb0de5bcfc6dbc29536dbdf7205b8f83c02a551814ca834710a862899bd029883b1eb27f97a278ae85ffad780ac96fde73bb77ed6d2a33503f8d56124ff27617648657ae9b7af1eee6b65d9628d8057e804c0cc4263bde0eb493a9b7e3d5f", 0xe9}, {&(0x7f00000000c0)="7757e7f0f540ba5046ea5dbf1b3cfc6355e6ca9261c1d4148a5883", 0x1b}, {&(0x7f0000001f40)="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", 0x4a9}], 0x3}}], 0x1, 0x0) 488.109903ms ago: executing program 4 (id=3681): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r0, r0, 0x0, 0x40008) 468.740487ms ago: executing program 3 (id=3682): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0x5, {0x5, 0x11, "46ff44"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r1, 0x4004480d, 0x0) 387.77459ms ago: executing program 4 (id=3683): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x35) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0x5}, &(0x7f0000000040)=0x8) 332.324989ms ago: executing program 1 (id=3684): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00009bc000/0x4000)=nil, 0x4000}}) 288.394343ms ago: executing program 4 (id=3685): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) 231.255038ms ago: executing program 5 (id=3686): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x7f, 0x0, 0x0, 0x8a9d, 0x0, 0x0, 0x15, 0x41}) 174.439631ms ago: executing program 1 (id=3687): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x8, r2, 0x0, 0x80000000, 0xfe9d, &(0x7f0000000080)="42363e99cd58385ec176218c9f3edea8afe5fa8799bf230313734c45aea9b68ed42b2d8f76c74eb7cdeac5ec35a9069e5b5d11985307d76cf21d2cb7177472a5bb97aae57307e201f5a7e861c136", 0x1}) 128.035379ms ago: executing program 4 (id=3688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700"], 0x48}}, 0x0) 114.648931ms ago: executing program 5 (id=3689): r0 = msgget(0x2, 0x600) msgrcv(r0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02"], 0x6, 0x800) msgrcv(r0, &(0x7f0000000000)={0x0, ""/237}, 0xf5, 0x0, 0x2000) msgsnd(r0, &(0x7f0000000100)={0x2}, 0x8, 0x0) 32.541267ms ago: executing program 1 (id=3690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="58070000f2000200000000000000001100000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 31.677858ms ago: executing program 1 (id=3691): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002}) 0s ago: executing program 4 (id=3692): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa2}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0xfffd, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x7, 0x4}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x80, 0x1c, {0xfc, 0x0, 0xdbec, 0x0, 0x5, 0x800, 0x36, 0xfffffffe, 0x0, 0x9, 0x5, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 207.839713][ T10] IPVS: starting estimator thread 0... [ 207.944152][T11755] IPVS: using max 44 ests per chain, 105600 per kthread [ 208.333905][ T5862] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 208.484301][ T5862] usb 3-1: Using ep0 maxpacket: 32 [ 208.490925][ T5862] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 208.503052][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.516795][ T5862] usb 3-1: config 0 descriptor?? [ 208.526809][ T5862] gspca_main: sq930x-2.14.0 probing 041e:403c [ 209.063576][ T30] audit: type=1326 audit(1746710767.726:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.5.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9c278e969 code=0x7fc00000 [ 209.086984][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.234616][ T5966] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 209.253944][ T5859] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 209.311804][T11821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.346013][T11822] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 209.346013][T11822] The task syz.3.2662 (11822) triggered the difference, watch for misbehavior. [ 209.406275][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.407296][ T5859] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 209.417978][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.418003][ T5966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 209.418040][ T5966] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.418060][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.445347][ T5966] usb 2-1: config 0 descriptor?? [ 209.453598][ T5859] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 209.486876][ T5859] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.496149][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.512902][ T5859] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.520423][ T5859] usb 5-1: invalid MIDI out EP 0 [ 209.546940][ T5862] gspca_sq930x: ucbus_write failed -71 [ 209.552453][ T5862] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 209.562418][ T5862] usb 3-1: USB disconnect, device number 31 [ 209.575436][ T5859] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 209.633872][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 209.742424][ T5863] usb 5-1: USB disconnect, device number 38 [ 209.786890][ T9] usb 6-1: config 7 has an invalid interface number: 101 but max is 0 [ 209.795510][ T9] usb 6-1: config 7 has no interface number 0 [ 209.803722][ T9] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 209.813367][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.821646][ T9] usb 6-1: Product: syz [ 209.825866][ T9] usb 6-1: Manufacturer: syz [ 209.830456][ T9] usb 6-1: SerialNumber: syz [ 209.869707][ T5966] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 209.880776][ T5966] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 210.085540][ T5859] usb 2-1: USB disconnect, device number 32 [ 210.373890][ T5966] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 210.504065][ T971] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 210.527338][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 210.539586][ T5966] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 210.549629][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 210.561175][ T5966] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 210.573535][ T5966] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 210.587104][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.595430][ T5966] usb 3-1: Product: syz [ 210.599590][ T5966] usb 3-1: Manufacturer: syz [ 210.608504][ T5966] usb 3-1: SerialNumber: syz [ 210.616536][ T9] as10x_usb: device has been detected [ 210.622239][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 210.625955][ T5966] usb 3-1: config 0 descriptor?? [ 210.639237][ T9] usb 6-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 210.654759][ T5966] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 210.687119][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.701499][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.713508][ T971] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.727109][ T971] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.736225][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.747984][ T971] usb 4-1: config 0 descriptor?? [ 210.874086][ T9] as10x_usb: error during firmware upload part1 [ 210.886226][ T9] Registered device Elgato EyeTV DTT Deluxe [ 210.889452][ T9] usb 6-1: USB disconnect, device number 8 [ 210.904458][ T5862] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 210.922629][ T9] Unregistered device Elgato EyeTV DTT Deluxe [ 210.923445][ T5966] ums-isd200 3-1:0.0: probe with driver ums-isd200 failed with error -22 [ 210.923594][ T9] as10x_usb: device has been disconnected [ 211.091375][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.103832][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.113648][ T5862] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 211.123108][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.125842][ T5966] usb 3-1: USB disconnect, device number 32 [ 211.134740][ T5862] usb 2-1: config 0 descriptor?? [ 211.146038][ T5863] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 211.162883][ T971] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 211.173004][ T971] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 211.305475][ T5863] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 211.313718][ T5863] usb 5-1: config 0 has no interface number 1 [ 211.319935][ T5863] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 211.329480][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.338943][ T5863] usb 5-1: config 0 descriptor?? [ 211.550624][ T5863] qcserial 5-1:0.2: Qualcomm USB modem converter detected [ 211.556707][ T5862] cp2112 0003:10C4:EA90.002F: unknown main item tag 0x0 [ 211.566537][ T5862] cp2112 0003:10C4:EA90.002F: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 211.755374][ T5862] cp2112 0003:10C4:EA90.002F: Part Number: 0x46 Device Version: 0xDB [ 211.767796][ T5966] usb 5-1: USB disconnect, device number 39 [ 211.775342][ T5966] qcserial 5-1:0.2: device disconnected [ 211.827188][T11858] lo speed is unknown, defaulting to 1000 [ 211.965092][ T5862] cp2112 0003:10C4:EA90.002F: error requesting SMBus config [ 211.985878][ T5862] cp2112 0003:10C4:EA90.002F: probe with driver cp2112 failed with error -71 [ 212.004232][ T5862] usb 2-1: USB disconnect, device number 33 [ 212.347242][T11865] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.522171][T11872] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 212.562414][T11872] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 212.606959][T11872] overlayfs: failed to get uuid (573/file1, err=-13); falling back to uuid=null. [ 212.700234][ T30] audit: type=1400 audit(1746710771.366:539): avc: denied { watch_mount } for pid=11883 comm="syz.4.2689" path="/459" dev="tmpfs" ino=2345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 213.156273][T11918] tun0: tun_chr_ioctl cmd 1074025675 [ 213.173978][T11918] tun0: persist enabled [ 213.179827][T11918] tun0: tun_chr_ioctl cmd 1074025675 [ 213.193944][T11918] tun0: persist enabled [ 213.273155][T11928] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 213.278382][ T5862] usb 4-1: USB disconnect, device number 34 [ 213.452786][T11938] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 213.460585][ T5863] IPVS: starting estimator thread 0... [ 213.574109][T11942] IPVS: using max 43 ests per chain, 103200 per kthread [ 214.019904][ T30] audit: type=1400 audit(1746710772.686:540): avc: denied { read } for pid=11972 comm="syz.5.2733" name="/" dev="configfs" ino=1246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 214.083614][ T30] audit: type=1400 audit(1746710772.716:541): avc: denied { open } for pid=11972 comm="syz.5.2733" path="/116/file0" dev="configfs" ino=1246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 214.083656][ T30] audit: type=1400 audit(1746710772.716:542): avc: denied { setattr } for pid=11972 comm="syz.5.2733" name="/" dev="configfs" ino=1246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 214.083692][ T30] audit: type=1400 audit(1746710772.736:543): avc: denied { unmount } for pid=10649 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 214.099529][T11979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.200262][ T30] audit: type=1400 audit(1746710772.866:544): avc: denied { relabelfrom } for pid=11981 comm="syz.3.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 214.222817][ T30] audit: type=1400 audit(1746710772.866:545): avc: denied { relabelto } for pid=11981 comm="syz.3.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 214.437269][T11991] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:6401:0100 with DS=0xe7 [ 214.758029][ T30] audit: type=1400 audit(1746710773.416:546): avc: denied { kexec_image_load } for pid=12000 comm="syz.5.2745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 214.945425][T12006] lo speed is unknown, defaulting to 1000 [ 215.023830][ T5966] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 215.183856][ T5966] usb 5-1: Using ep0 maxpacket: 16 [ 215.192145][ T5966] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 215.201537][ T5966] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 215.210654][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.243205][ T5966] usb 5-1: config 0 descriptor?? [ 215.324561][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 215.460563][ T5859] usb 5-1: USB disconnect, device number 40 [ 215.662122][T12033] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 215.816488][ T5966] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 215.984083][ T5966] usb 3-1: Using ep0 maxpacket: 16 [ 216.016113][ T5966] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 216.044013][ T5966] usb 3-1: config 0 has no interface number 0 [ 216.050463][ T5966] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 216.081785][ T5966] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 216.096714][ T5966] usb 3-1: config 0 interface 41 has no altsetting 0 [ 216.106499][ T5966] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 216.116414][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.125407][ T5966] usb 3-1: Product: syz [ 216.129625][ T5966] usb 3-1: Manufacturer: syz [ 216.134297][ T5966] usb 3-1: SerialNumber: syz [ 216.141039][ T5966] usb 3-1: config 0 descriptor?? [ 216.158166][T12029] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 216.171418][T12029] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 216.183294][ T30] audit: type=1400 audit(1746710774.846:547): avc: denied { mount } for pid=12055 comm="syz.4.2770" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 216.229697][ T30] audit: type=1400 audit(1746710774.846:548): avc: denied { mounton } for pid=12055 comm="syz.4.2770" path="/476/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 216.256436][T12058] syzkaller1: entered promiscuous mode [ 216.261925][T12058] syzkaller1: entered allmulticast mode [ 216.397746][T12029] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 216.427708][T12029] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 216.878145][ T1091] tipc: Subscription rejected, illegal request [ 216.879149][ T5966] Error reading MAC address [ 216.891470][T12029] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 216.899092][T12029] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 217.112379][ T5966] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 217.139607][ T5966] usb 3-1: USB disconnect, device number 33 [ 217.309575][T12108] vivid-001: disconnect [ 217.320151][T12107] vivid-001: reconnect [ 217.383251][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2793'. [ 217.393133][T12114] netlink: 'syz.3.2793': attribute type 30 has an invalid length. [ 217.406656][T12114] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.416510][T12114] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.425268][T12114] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.434039][T12114] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.552663][T12123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2797'. [ 217.719448][T12134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.293936][ T5859] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 218.455012][ T5859] usb 3-1: Using ep0 maxpacket: 16 [ 218.461289][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.476615][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.486705][ T5859] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 218.497702][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.510788][ T5859] usb 3-1: config 0 descriptor?? [ 218.604354][ T5863] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 218.774303][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 218.783294][ T5863] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 218.796138][ T5863] usb 4-1: config 0 has no interface number 0 [ 218.802236][ T5863] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.813713][ T5863] usb 4-1: config 0 interface 85 has no altsetting 0 [ 218.823170][ T5863] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 218.832354][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.840692][ T5863] usb 4-1: Product: syz [ 218.845098][ T5863] usb 4-1: Manufacturer: syz [ 218.849872][ T5863] usb 4-1: SerialNumber: syz [ 218.856653][ T5863] usb 4-1: config 0 descriptor?? [ 218.941878][ T5859] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0030/input/input62 [ 219.006897][T12203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.021050][ T5859] appleir 0003:05AC:8241.0030: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 219.358216][T12216] input: syz1 as /devices/virtual/input/input63 [ 219.477540][ T5863] appletouch 4-1:0.85: Geyser mode initialized. [ 219.489115][ T5863] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input61 [ 219.688439][ T5863] usb 4-1: USB disconnect, device number 35 [ 219.700679][ T5863] appletouch 4-1:0.85: input: appletouch disconnected [ 219.744032][ T5859] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 219.895770][ T5859] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.909930][ T5859] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.919889][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.929658][ T5859] usb 6-1: Product: syz [ 219.936320][ T5859] usb 6-1: Manufacturer: syz [ 219.941301][ T5859] usb 6-1: SerialNumber: syz [ 220.028459][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 220.028473][ T30] audit: type=1400 audit(1746710778.696:553): avc: denied { write } for pid=12232 comm="syz.1.2846" path="socket:[38212]" dev="sockfs" ino=38212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 220.058222][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.128131][ T5816] Bluetooth: hci5: command 0x1003 tx timeout [ 220.128663][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 220.272825][T12241] overlayfs: unescaped trailing colons in lowerdir mount option. [ 220.361643][T12248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2853'. [ 220.464237][ T9] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 220.609514][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2861'. [ 220.641843][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 220.657033][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.667364][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 220.676962][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.706111][ T9] usb 5-1: config 0 descriptor?? [ 220.722018][ T5966] kernel write not supported for file /1264/loginuid (pid: 5966 comm: kworker/1:6) [ 220.737695][T12271] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 220.754251][T12271] overlayfs: maximum fs stacking depth exceeded [ 220.836257][ T971] usb 3-1: USB disconnect, device number 34 [ 220.990631][ T5859] cdc_ncm 6-1:1.0: bind() failure [ 221.000224][ T5859] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 221.023482][ T5859] cdc_ncm 6-1:1.1: bind() failure [ 221.035878][ T5859] usb 6-1: USB disconnect, device number 9 [ 221.130815][T12299] netlink: 'syz.2.2877': attribute type 11 has an invalid length. [ 221.320779][ T9] usb 5-1: string descriptor 0 read error: -22 [ 221.526182][ T9] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0031/input/input64 [ 221.568932][ T9] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0031/input/input65 [ 221.620729][ T9] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0031/input/input66 [ 221.658129][ T9] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0031/input/input67 [ 221.695829][ T9] uclogic 0003:256C:006D.0031: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 221.740128][ T9] usb 5-1: USB disconnect, device number 41 [ 221.899401][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2892'. [ 221.943281][ T30] audit: type=1400 audit(1746710780.606:554): avc: denied { read } for pid=12330 comm="syz.1.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.061728][ T30] audit: type=1400 audit(1746710780.726:555): avc: denied { rename } for pid=12334 comm="syz.1.2895" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 222.472543][T12354] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12354 comm=syz.5.2903 [ 222.486214][T12354] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12354 comm=syz.5.2903 [ 222.545626][ T30] audit: type=1400 audit(1746710781.216:556): avc: denied { create } for pid=12362 comm="syz.5.2907" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 222.569058][ T30] audit: type=1400 audit(1746710781.236:557): avc: denied { mounton } for pid=12362 comm="syz.5.2907" path="/155/file0" dev="tmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 222.572084][T12364] bio_check_eod: 14 callbacks suppressed [ 222.572096][T12364] syz.5.2907: attempt to access beyond end of device [ 222.572096][T12364] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 222.615573][T12364] FAT-fs (loop11): unable to read boot sector [ 222.659995][ T30] audit: type=1400 audit(1746710781.326:558): avc: denied { unlink } for pid=10649 comm="syz-executor" name="file0" dev="tmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 222.744226][ T5860] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 222.764063][ T5966] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 222.906561][ T5860] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 222.915789][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.923846][ T5860] usb 3-1: Product: syz [ 222.928204][ T5860] usb 3-1: Manufacturer: syz [ 222.932829][ T5860] usb 3-1: SerialNumber: syz [ 222.940021][ T5860] usb 3-1: config 0 descriptor?? [ 222.945246][ T48] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 222.953154][ T5966] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 222.962258][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.975688][ T5966] usb 5-1: Product: syz [ 222.983931][ T5966] usb 5-1: Manufacturer: syz [ 222.988539][ T5966] usb 5-1: SerialNumber: syz [ 222.997640][ T5966] usb 5-1: config 0 descriptor?? [ 223.134232][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 223.140757][ T48] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 223.149836][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.159925][ T48] usb 6-1: config 0 descriptor?? [ 223.168273][ T48] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 223.179191][ T5860] usb 3-1: USB disconnect, device number 35 [ 223.262680][ T30] audit: type=1400 audit(1746710781.926:559): avc: denied { module_load } for pid=12374 comm=6C2586CE36DB0CCF197CC94F7FCE8F scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 223.959957][T12398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.975173][ T30] audit: type=1400 audit(1746710782.626:560): avc: denied { remount } for pid=12399 comm="syz.1.2924" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 224.009750][ T5966] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 224.026008][ T5966] asix 5-1:0.0: probe with driver asix failed with error -71 [ 224.036487][ T5966] usb 5-1: USB disconnect, device number 42 [ 224.133341][T12406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2927'. [ 224.179966][ T48] gspca_vc032x: reg_w err -71 [ 224.184750][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.194138][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.199746][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.207071][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.212383][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.217809][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.223095][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.228872][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.234640][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.240130][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.243537][T12412] overlay: filesystem on ./bus is read-only [ 224.245760][ T30] audit: type=1400 audit(1746710782.906:561): avc: denied { mounton } for pid=12411 comm="syz.1.2930" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 224.274973][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.280706][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.289803][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.300040][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.306479][ T30] audit: type=1400 audit(1746710782.916:562): avc: denied { bind } for pid=12409 comm="syz.2.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 224.326257][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.336810][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.342105][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.347490][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.352788][ T48] gspca_vc032x: Unknown sensor... [ 224.381554][ T48] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 224.392995][ T48] usb 6-1: USB disconnect, device number 10 [ 225.034324][ T971] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 225.205610][ T971] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.214620][ T971] usb 2-1: not running at top speed; connect to a high speed hub [ 225.237096][ T971] usb 2-1: config 9 has an invalid interface number: 76 but max is 0 [ 225.245423][ T971] usb 2-1: config 9 has no interface number 0 [ 225.261663][ T971] usb 2-1: config 9 interface 76 has no altsetting 0 [ 225.270208][ T971] usb 2-1: New USB device found, idVendor=16d8, idProduct=6804, bcdDevice=68.d5 [ 225.279723][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.287879][ T971] usb 2-1: Product: syz [ 225.292116][ T971] usb 2-1: Manufacturer: syz [ 225.297107][ T971] usb 2-1: SerialNumber: syz [ 225.503950][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 225.514435][ T971] hub 2-1:9.76: bad descriptor, ignoring hub [ 225.521107][ T971] hub 2-1:9.76: probe with driver hub failed with error -5 [ 225.531440][ T971] option 2-1:9.76: GSM modem (1-port) converter detected [ 225.565749][ T971] usb 2-1: USB disconnect, device number 34 [ 225.574458][ T971] option 2-1:9.76: device disconnected [ 225.602994][ T30] audit: type=1400 audit(1746710784.266:563): avc: denied { override_creds } for pid=12493 comm="syz.5.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 225.665729][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.688437][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 225.699323][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.707392][ T24] usb 3-1: Product: syz [ 225.713405][ T24] usb 3-1: Manufacturer: syz [ 225.720384][ T24] usb 3-1: SerialNumber: syz [ 225.728458][ T24] usb 3-1: config 0 descriptor?? [ 225.751977][ T24] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 225.946584][ T48] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 225.956096][ T971] usb 3-1: USB disconnect, device number 36 [ 226.111918][ T48] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 226.137534][ T48] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.153841][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 226.172017][ T48] usb 6-1: SerialNumber: syz [ 226.241432][T12508] syzkaller1: entered promiscuous mode [ 226.247072][T12508] syzkaller1: entered allmulticast mode [ 226.431649][T12520] netlink: 'syz.1.2980': attribute type 9 has an invalid length. [ 226.441122][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2980'. [ 226.456912][T12520] hsr0: entered promiscuous mode [ 226.462608][T12520] macvlan2: entered promiscuous mode [ 226.468094][T12520] macvlan2: entered allmulticast mode [ 226.473501][T12520] hsr0: entered allmulticast mode [ 226.479138][T12520] hsr_slave_0: entered allmulticast mode [ 226.484808][T12520] hsr_slave_1: entered allmulticast mode [ 226.562795][T12525] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2981'. [ 226.613952][ T5860] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 226.777516][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.788825][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.798719][ T5860] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 226.807815][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.822614][ T48] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 226.836151][ T5860] usb 5-1: config 0 descriptor?? [ 227.230767][ T971] usb 6-1: USB disconnect, device number 11 [ 227.238541][ T971] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 227.250825][ T5860] cm6533_jd 0003:0D8C:0022.0032: unknown main item tag 0x0 [ 227.259363][ T5860] cm6533_jd 0003:0D8C:0022.0032: unknown main item tag 0x0 [ 227.266796][ T5860] cm6533_jd 0003:0D8C:0022.0032: unknown main item tag 0x0 [ 227.274751][ T5860] cm6533_jd 0003:0D8C:0022.0032: unknown main item tag 0x0 [ 227.281951][ T5860] cm6533_jd 0003:0D8C:0022.0032: unknown main item tag 0x0 [ 227.289791][ T5860] cm6533_jd 0003:0D8C:0022.0032: No inputs registered, leaving [ 227.302461][ T5860] cm6533_jd 0003:0D8C:0022.0032: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 227.366255][ T30] audit: type=1400 audit(1746710786.036:564): avc: denied { map } for pid=12543 comm="syz.2.2990" path="socket:[38974]" dev="sockfs" ino=38974 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 227.391699][ T30] audit: type=1400 audit(1746710786.036:565): avc: denied { read accept } for pid=12543 comm="syz.2.2990" path="socket:[38974]" dev="sockfs" ino=38974 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 227.466612][T12548] overlayfs: upper fs does not support tmpfile. [ 227.527587][ T971] usb 5-1: USB disconnect, device number 43 [ 227.805023][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 227.890090][T12562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2998'. [ 227.899415][T12562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2998'. [ 227.964779][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 227.978179][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.990209][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 227.999647][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.015724][ T24] usb 3-1: config 0 descriptor?? [ 228.431499][ T24] logitech-djreceiver 0003:046D:C714.0033: hidraw0: USB HID v0.04 Device [HID 046d:c714] on usb-dummy_hcd.2-1/input0 [ 228.652208][ T9] usb 3-1: USB disconnect, device number 37 [ 229.095192][ T5860] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 229.248096][ T5860] usb 6-1: config 2 has an invalid interface number: 86 but max is 0 [ 229.273861][ T5860] usb 6-1: config 2 has no interface number 0 [ 229.284723][ T5860] usb 6-1: config 2 interface 86 has no altsetting 0 [ 229.302191][ T5860] usb 6-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=bb.2e [ 229.340819][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.365992][ T5860] usb 6-1: Product: syz [ 229.370170][ T5860] usb 6-1: Manufacturer: syz [ 229.383811][ T5860] usb 6-1: SerialNumber: syz [ 229.533195][T12621] netlink: 'syz.2.3026': attribute type 12 has an invalid length. [ 229.542177][T12621] netlink: 'syz.2.3026': attribute type 29 has an invalid length. [ 229.557233][T12621] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3026'. [ 229.569832][T12621] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3026'. [ 229.652458][ T5860] mvusb_mdio 6-1:2.86: probe with driver mvusb_mdio failed with error -5 [ 229.694271][ T5860] usb 6-1: USB disconnect, device number 12 [ 230.012004][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3041'. [ 230.114183][ T24] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 230.220928][T12662] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 230.248886][ T9] kernel write not supported for file /media1 (pid: 9 comm: kworker/0:0) [ 230.267128][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 230.284053][ T24] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 230.293541][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.312407][ T24] usb 4-1: config 0 descriptor?? [ 230.320208][T12645] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 230.594174][ T9] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 230.754182][ T24] elan 0003:04F3:0755.0034: unknown main item tag 0x1 [ 230.756539][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.772280][ T24] elan 0003:04F3:0755.0034: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 230.776510][ T9] usb 5-1: config 0 has no interface number 0 [ 230.791897][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 230.803307][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.819631][ T9] usb 5-1: config 0 descriptor?? [ 230.827531][ T9] usb 5-1: selecting invalid altsetting 1 [ 230.851959][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 230.869168][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 230.976235][ T9] DVB: Unable to find symbol cx22700_attach() [ 230.988955][ T971] usb 4-1: USB disconnect, device number 36 [ 231.044453][ T9] DVB: Unable to find symbol tda10046_attach() [ 231.050673][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 231.062907][ T9] usb 5-1: USB disconnect, device number 44 [ 231.324129][ T5862] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 231.346880][T12706] lo speed is unknown, defaulting to 1000 [ 231.495468][ T5862] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 231.506093][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.533248][ T5862] usb 6-1: config 0 descriptor?? [ 231.748927][ T5862] ath6kl: Failed to submit usb control message: -71 [ 231.760916][ T5862] ath6kl: unable to send the bmi data to the device: -71 [ 231.772500][ T5862] ath6kl: Unable to send get target info: -71 [ 231.793512][ T5862] ath6kl: Failed to init ath6kl core: -71 [ 231.806815][ T5862] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 231.826029][ T5862] usb 6-1: USB disconnect, device number 13 [ 231.903887][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 231.976918][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 232.073960][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 232.086012][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.134140][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.154116][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 232.158546][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 232.174126][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 232.197295][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.199445][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 232.216712][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 232.239650][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.240694][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 232.260202][ T24] usb 5-1: config 0 descriptor?? [ 232.283988][ T5823] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 232.295420][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 232.384465][ T9] usb 4-1: Manufacturer: syz [ 232.391053][ T9] usb 4-1: config 0 descriptor?? [ 232.528114][ T30] audit: type=1400 audit(1746710791.196:566): avc: denied { setopt } for pid=12734 comm="syz.2.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 232.673864][ T9] rc_core: IR keymap rc-hauppauge not found [ 232.692509][ T9] Registered IR keymap rc-empty [ 232.701513][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.735855][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.751402][ T30] audit: type=1326 audit(1746710791.416:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12739 comm="syz.2.3078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37f2b8e969 code=0x0 [ 232.778987][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 232.792272][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input68 [ 232.815314][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.835555][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.864277][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.884316][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.914025][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.944217][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.973934][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.026006][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.044294][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.073990][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.096168][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 233.105936][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 233.118606][ T9] usb 4-1: USB disconnect, device number 37 [ 233.243593][T12760] bridge0: port 3(gretap0) entered blocking state [ 233.251364][T12760] bridge0: port 3(gretap0) entered disabled state [ 233.258108][T12760] gretap0: entered allmulticast mode [ 233.264784][T12760] gretap0: entered promiscuous mode [ 233.270419][T12760] bridge0: port 3(gretap0) entered blocking state [ 233.273967][ T5862] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 233.277635][T12760] bridge0: port 3(gretap0) entered forwarding state [ 233.299162][T12761] gretap0: left allmulticast mode [ 233.304241][T12761] gretap0: left promiscuous mode [ 233.309253][T12761] bridge0: port 3(gretap0) entered disabled state [ 233.343414][ T9] usb 5-1: USB disconnect, device number 45 [ 233.388454][T12763] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 233.398446][T12763] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 233.410586][T12763] overlayfs: failed to set uuid (673/file1, err=-13); falling back to uuid=null. [ 233.448432][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.459545][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.469818][ T5862] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 233.481055][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.491409][ T5862] usb 6-1: config 0 descriptor?? [ 233.492997][T12767] loop8: detected capacity change from 0 to 7 [ 233.509013][T12767] Dev loop8: unable to read RDB block 7 [ 233.514907][T12767] loop8: unable to read partition table [ 233.521003][T12767] loop8: partition table beyond EOD, truncated [ 233.528627][T12767] loop_reread_partitions: partition scan of loop8 (被x^>& 2t) failed (rc=-5) [ 233.708573][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3094'. [ 233.717745][T12779] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3094'. [ 233.733341][T12779] geneve2: entered promiscuous mode [ 233.733359][T12779] geneve2: entered allmulticast mode [ 233.816768][ T30] audit: type=1400 audit(1746710792.486:568): avc: denied { write } for pid=12783 comm="syz.2.3098" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 233.918456][ T5862] hid-led 0003:0FC5:B080.0035: unknown main item tag 0x0 [ 233.927947][ T30] audit: type=1400 audit(1746710792.586:569): avc: denied { execute } for pid=12789 comm="syz.4.3101" path="/dev/sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 234.002328][T12795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3103'. [ 234.044238][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 234.116154][ T5862] hid-led 0003:0FC5:B080.0035: probe with driver hid-led failed with error -71 [ 234.134194][ T5862] usb 6-1: USB disconnect, device number 14 [ 234.167577][ T30] audit: type=1400 audit(1746710792.836:570): avc: denied { getopt } for pid=12802 comm="syz.3.3107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.212801][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 234.222532][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.230994][ T9] usb 2-1: Product: syz [ 234.235435][ T9] usb 2-1: Manufacturer: syz [ 234.240573][ T9] usb 2-1: SerialNumber: syz [ 234.250744][ T9] usb 2-1: config 0 descriptor?? [ 234.460897][ T9] usb 2-1: USB disconnect, device number 35 [ 234.566559][ T30] audit: type=1326 audit(1746710793.236:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.3.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8338d8e969 code=0x7ffc0000 [ 234.590689][ T30] audit: type=1326 audit(1746710793.236:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.3.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8338d8e969 code=0x7ffc0000 [ 234.616677][ T30] audit: type=1326 audit(1746710793.256:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.3.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f8338d8e969 code=0x7ffc0000 [ 234.640419][ T30] audit: type=1326 audit(1746710793.256:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.3.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8338d8e969 code=0x7ffc0000 [ 234.665716][ T30] audit: type=1326 audit(1746710793.256:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.3.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8338d8e969 code=0x7ffc0000 [ 234.941854][T12836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.069635][ T5862] kernel write not supported for file /snd/seq (pid: 5862 comm: kworker/0:5) [ 235.091180][T12842] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12842 comm=syz.4.3126 [ 235.253820][ T5816] Bluetooth: hci4: command 0x0405 tx timeout [ 235.553892][ T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 235.575048][T12880] netlink: 'syz.3.3144': attribute type 10 has an invalid length. [ 235.595696][T12880] syz_tun: entered promiscuous mode [ 235.613451][T12880] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 235.640749][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3144'. [ 235.717276][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.734742][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 235.763803][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.780466][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.801487][T12860] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.812700][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 236.048326][ T5863] usb 2-1: USB disconnect, device number 36 [ 236.434071][ T5862] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 236.466372][T12937] syzkaller1: entered promiscuous mode [ 236.471837][T12937] syzkaller1: entered allmulticast mode [ 236.506774][T12939] sctp: [Deprecated]: syz.4.3172 (pid 12939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.506774][T12939] Use struct sctp_sack_info instead [ 236.601260][ T5862] usb 6-1: Using ep0 maxpacket: 8 [ 236.625733][ T5862] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.643314][ T5862] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 236.659865][ T5862] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.671561][ T5862] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.685193][ T5862] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.694746][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.705268][T12949] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3176'. [ 236.925036][ T5862] usb 6-1: GET_CAPABILITIES returned 0 [ 236.930541][ T5862] usbtmc 6-1:16.0: can't read capabilities [ 237.304118][ T5862] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 237.459603][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.471189][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 237.482707][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 237.494206][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.507231][ T5862] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.517222][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.528145][ T5862] usb 3-1: config 0 descriptor?? [ 237.534237][T12966] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 237.655520][ T5859] usb 6-1: USB disconnect, device number 15 [ 237.666271][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 237.666281][ T30] audit: type=1400 audit(1746710796.336:581): avc: denied { search } for pid=12970 comm="syz.4.3187" name="/" dev="configfs" ino=1246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 237.889127][T12986] netlink: 'syz.4.3194': attribute type 23 has an invalid length. [ 237.951095][ T5862] plantronics 0003:047F:FFFF.0036: reserved main item tag 0xd [ 237.962349][ T5862] plantronics 0003:047F:FFFF.0036: No inputs registered, leaving [ 237.974661][ T5862] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 238.094166][ T5859] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 238.194114][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 238.236716][ T5863] usb 3-1: USB disconnect, device number 38 [ 238.254087][ T5859] usb 6-1: Using ep0 maxpacket: 8 [ 238.264697][ T5859] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 238.272952][ T5859] usb 6-1: config 179 has no interface number 0 [ 238.294574][ T5859] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 238.313777][ T5859] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 238.344093][ T5859] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 238.355718][ T5859] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 238.383792][ T5859] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 238.397462][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 238.405319][ T9] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 238.413382][ T9] usb 2-1: config 0 has an invalid interface number: 98 but max is 1 [ 238.421714][ T5859] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 238.430771][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.439543][ T9] usb 2-1: config 0 has no interface number 0 [ 238.447752][ T9] usb 2-1: config 0 has no interface number 1 [ 238.454882][T12980] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 238.468461][ T9] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 238.494146][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.502183][ T9] usb 2-1: Product: syz [ 238.506434][ T9] usb 2-1: Manufacturer: syz [ 238.511059][ T9] usb 2-1: SerialNumber: syz [ 238.518547][ T9] usb 2-1: config 0 descriptor?? [ 238.645306][ T9] viperboard 2-1:0.61: version 0.00 found at bus 002 address 037 [ 238.657489][ T9] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 238.684356][ T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 238.713570][ T9] viperboard 2-1:0.98: version 0.00 found at bus 002 address 037 [ 238.726896][ T5859] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input70 [ 238.753937][ T9] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 238.762692][ T9] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 238.785613][ T9] usb 2-1: USB disconnect, device number 37 [ 238.901178][ T30] audit: type=1400 audit(1746710797.566:582): avc: denied { remount } for pid=12998 comm="syz.4.3200" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 238.955020][T12980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.973500][T12980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.986369][ T5863] kernel write not supported for file /1324/attr/exec (pid: 5863 comm: kworker/1:5) [ 239.104308][ T5859] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 239.121394][T13010] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3205'. [ 239.241192][ T9] usb 6-1: USB disconnect, device number 16 [ 239.247146][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 239.247172][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 239.256583][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3208'. [ 239.266166][ T5859] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.295538][ T5859] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 239.307574][ T5859] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 239.320624][ T5859] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.352585][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 239.364934][ T5859] usb 3-1: Product: syz [ 239.374187][ T5859] usb 3-1: Manufacturer: syz [ 239.378798][ T5859] usb 3-1: SerialNumber: syz [ 239.402380][ T5859] cdc_mbim 3-1:1.0: skipping garbage [ 239.426807][T13023] vlan3: entered promiscuous mode [ 239.432000][T13023] bond0: entered promiscuous mode [ 239.439950][T13023] bond_slave_0: entered promiscuous mode [ 239.447444][T13023] bond_slave_1: entered promiscuous mode [ 239.612687][T12997] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 239.686486][T13035] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3217'. [ 239.946984][T13049] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 240.105226][ T30] audit: type=1400 audit(1746710798.756:583): avc: denied { bind } for pid=13059 comm="syz.5.3230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.227325][T13069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.235440][T12997] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 240.320318][T13069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.373898][ T9] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 240.446240][ T5859] cdc_mbim 3-1:1.0: failed to get mac address [ 240.462350][ T5859] cdc_mbim 3-1:1.0: bind() failure [ 240.476644][ T5859] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 240.485878][ T5859] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 240.496083][ T5859] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 240.519502][ T5859] usb 3-1: USB disconnect, device number 39 [ 240.546509][ T9] usb 4-1: config 0 has no interfaces? [ 240.552426][ T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 240.568487][ T30] audit: type=1400 audit(1746710799.236:584): avc: denied { create } for pid=13090 comm="syz.1.3244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 240.598778][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.616666][ T9] usb 4-1: config 0 descriptor?? [ 240.625257][ T30] audit: type=1400 audit(1746710799.236:585): avc: denied { create } for pid=13088 comm="syz.4.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 240.649698][ T30] audit: type=1400 audit(1746710799.256:586): avc: denied { write } for pid=13088 comm="syz.4.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 240.878037][T13061] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3229'. [ 240.887635][T13061] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3229'. [ 240.901238][ T9] usb 4-1: USB disconnect, device number 38 [ 241.067036][ T30] audit: type=1326 audit(1746710799.736:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13106 comm="syz.4.3252" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb51f78e969 code=0x0 [ 241.127519][T13108] syz.4.3252: attempt to access beyond end of device [ 241.127519][T13108] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 241.140489][T13110] sctp: [Deprecated]: syz.2.3253 (pid 13110) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.140489][T13110] Use struct sctp_sack_info instead [ 241.302572][T13115] IPVS: Scheduler module ip_vs_sip not found [ 241.662432][T13136] netlink: 'syz.5.3263': attribute type 3 has an invalid length. [ 242.034066][ T5863] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 242.204157][ T5910] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 242.206950][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 242.243951][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.286211][ T5863] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 242.309125][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.355507][ T5910] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 242.364743][ T5863] usb 3-1: config 0 descriptor?? [ 242.383987][ T5910] usb 6-1: config 0 has no interface number 0 [ 242.390290][ T5910] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 242.427423][ T5910] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 242.439135][ T5910] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 242.458082][ T5910] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 242.469796][ T5910] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 242.481025][ T5910] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 242.514203][ T5910] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 242.565326][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.581512][ T5910] usb 6-1: config 0 descriptor?? [ 242.596621][T13160] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 242.604341][T13160] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 242.621188][ T5910] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 242.638679][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3287'. [ 242.784854][ T5863] hid-thrustmaster 0003:044F:B65D.0037: collection stack underflow [ 242.793198][ T5863] hid-thrustmaster 0003:044F:B65D.0037: item 0 4 0 12 parsing failed [ 242.824813][ T5863] hid-thrustmaster 0003:044F:B65D.0037: parse failed with error -22 [ 242.832962][ T5863] hid-thrustmaster 0003:044F:B65D.0037: probe with driver hid-thrustmaster failed with error -22 [ 242.946756][ T5863] usb 6-1: USB disconnect, device number 17 [ 242.980552][ T5863] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 243.025906][ T24] usb 3-1: USB disconnect, device number 40 [ 243.366898][T13231] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 243.758728][T13254] vivid-000: disconnect [ 243.776722][T13254] vivid-000: reconnect [ 243.911059][T13256] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13256 comm=syz.5.3314 [ 244.183923][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 244.324171][ T5910] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 244.343919][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 244.350682][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.363055][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.378051][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 244.385116][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 244.396232][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.406193][ T24] usb 3-1: config 0 descriptor?? [ 244.497055][ T5910] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 244.507335][ T5910] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 244.515915][ T5910] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 244.539005][ T5910] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 244.549937][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 244.560798][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 244.570592][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 244.586546][ T5910] usb 6-1: string descriptor 0 read error: -22 [ 244.592754][ T5910] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 244.602095][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.615947][ T5910] usb 6-1: config 0 descriptor?? [ 244.622037][ T5910] hub 6-1:0.0: bad descriptor, ignoring hub [ 244.627998][ T5910] hub 6-1:0.0: probe with driver hub failed with error -5 [ 244.637930][ T5910] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input71 [ 244.793858][ T5860] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 244.821491][ T24] hid (null): global environment stack underflow [ 244.849959][ T5910] usb 6-1: USB disconnect, device number 18 [ 244.945205][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.956373][ T5860] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 244.965427][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.976779][ T5860] usb 2-1: config 0 descriptor?? [ 245.031828][ T5910] usb 3-1: USB disconnect, device number 41 [ 245.395081][ T5860] keytouch 0003:0926:3333.0039: fixing up Keytouch IEC report descriptor [ 245.407659][ T5860] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0039/input/input72 [ 245.441409][T13287] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3330'. [ 245.454215][ T5966] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 245.485518][ T5860] keytouch 0003:0926:3333.0039: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 245.586284][ T30] audit: type=1400 audit(1746710804.256:588): avc: denied { watch } for pid=13292 comm="syz.5.3333" path="pipe:[29015]" dev="pipefs" ino=29015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 245.634794][ T5966] usb 5-1: Using ep0 maxpacket: 8 [ 245.643624][ T5966] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 245.652908][ T5966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.670829][ T5966] usb 5-1: config 0 has no interface number 0 [ 245.677295][ T5966] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 245.689155][ T5966] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 245.713826][ T5966] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.747688][ T5966] usb 5-1: config 0 interface 52 has no altsetting 0 [ 245.768190][ T5966] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 245.778588][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 245.787129][ T5966] usb 5-1: SerialNumber: syz [ 245.802088][ T5966] usb 5-1: config 0 descriptor?? [ 246.013492][ T5966] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 246.022997][ T5966] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -5 [ 246.034195][ T5860] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 246.059202][ T24] usb 2-1: USB disconnect, device number 38 [ 246.174159][ T5910] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 246.183863][ T5860] usb 3-1: Using ep0 maxpacket: 32 [ 246.190445][ T5860] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 246.198784][ T5860] usb 3-1: config 0 has an invalid interface number: 98 but max is 1 [ 246.208836][ T5860] usb 3-1: config 0 has no interface number 0 [ 246.216310][ T5860] usb 3-1: config 0 has no interface number 1 [ 246.228507][ T5860] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 246.233583][ T9] usb 5-1: USB disconnect, device number 46 [ 246.237728][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.251565][ T5860] usb 3-1: Product: syz [ 246.255969][ T5860] usb 3-1: Manufacturer: syz [ 246.260542][ T5860] usb 3-1: SerialNumber: syz [ 246.267128][ T5860] usb 3-1: config 0 descriptor?? [ 246.325983][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.336681][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 246.347662][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 246.357816][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 246.371966][ T5910] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 246.381362][ T5910] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 246.386179][ T5860] viperboard 3-1:0.61: version 0.00 found at bus 003 address 042 [ 246.389418][ T5910] usb 6-1: Manufacturer: syz [ 246.401172][ T5860] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 246.403342][ T5910] usb 6-1: config 0 descriptor?? [ 246.412421][ T5860] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 246.432702][ T5860] viperboard 3-1:0.98: version 0.00 found at bus 003 address 042 [ 246.444890][ T5860] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 246.453648][ T5860] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 246.508618][ T9] usb 3-1: USB disconnect, device number 42 [ 246.674160][ T5910] rc_core: IR keymap rc-hauppauge not found [ 246.680081][ T5910] Registered IR keymap rc-empty [ 246.693223][ T5910] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 246.734279][ T5910] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 246.764927][ T5910] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 246.785633][ T5910] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input74 [ 246.815308][ T5910] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 246.834042][ T5910] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 246.854045][ T5910] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 246.875685][ T5910] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 246.903950][ T5910] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 246.924200][ T5910] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 246.943906][ T5910] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 246.974321][ T5910] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 246.998997][ T5910] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 247.030474][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3347'. [ 247.042884][ T5910] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 247.067927][ T5910] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 247.104427][ T5910] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 247.136430][ T5910] usb 6-1: USB disconnect, device number 19 [ 247.154914][T13330] binder: 13329:13330 ioctl c0306201 200000000480 returned -14 [ 247.230102][T13333] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 247.281542][T13342] tipc: Started in network mode [ 247.287100][T13342] tipc: Node identity 7f000001, cluster identity 4711 [ 247.294896][T13342] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.302586][T13342] tipc: Enabled bearer , priority 10 [ 247.435858][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.444414][ T30] audit: type=1326 audit(1746710806.116:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13339 comm="syz.1.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213eb8e969 code=0x7fc00000 [ 247.584221][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.664382][ T5860] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 247.716477][T13370] tun0: tun_chr_ioctl cmd 2164298801 [ 247.723890][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.737133][T13370] tun0: tun_chr_ioctl cmd 1074812118 [ 247.831559][ T5860] usb 4-1: Using ep0 maxpacket: 16 [ 247.839978][T13374] Bluetooth: MGMT ver 1.23 [ 247.841389][ T5860] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.864126][ T5860] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.864198][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.874619][ T5860] usb 4-1: config 0 interface 0 has no altsetting 0 [ 247.888261][ T5860] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 247.897831][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.910682][ T5860] usb 4-1: config 0 descriptor?? [ 248.004124][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 248.096930][ T30] audit: type=1326 audit(1746710806.766:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13339 comm="syz.1.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f213eb8e969 code=0x7fc00000 [ 248.153854][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 248.306098][ T9] tipc: Node number set to 2130706433 [ 248.340514][ T5860] hid (null): unknown global tag 0xe [ 248.355203][ T5860] cougar 0003:060B:500A.003A: unexpected long global item [ 248.372798][ T5860] cougar 0003:060B:500A.003A: parse failed [ 248.379076][ T5860] cougar 0003:060B:500A.003A: probe with driver cougar failed with error -22 [ 248.444187][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 248.506468][T13398] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 248.513007][T13398] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 248.523579][T13398] vhci_hcd vhci_hcd.0: Device attached [ 248.550722][ T9] usb 4-1: USB disconnect, device number 39 [ 248.723884][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 248.754103][ T5860] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 248.773888][ T24] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 248.944736][ T24] usb 5-1: config 0 has no interfaces? [ 248.952361][ T24] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 248.952620][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3386'. [ 248.972436][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.975163][T13422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3386'. [ 248.996465][ T24] usb 5-1: config 0 descriptor?? [ 248.996830][T13422] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.010515][T13422] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.019243][T13422] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.028284][T13422] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.118189][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3388'. [ 249.219586][ T24] usb 5-1: USB disconnect, device number 47 [ 249.235149][T13399] vhci_hcd: connection closed [ 249.236193][ T36] vhci_hcd: stop threads [ 249.253886][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 249.261097][ T36] vhci_hcd: release socket [ 249.271000][ T36] vhci_hcd: disconnect device [ 249.303869][ T5860] vhci_hcd: vhci_device speed not set [ 249.748035][T13466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3407'. [ 249.865490][T13475] syzkaller1: entered promiscuous mode [ 249.871081][T13475] syzkaller1: entered allmulticast mode [ 249.959405][T13481] pim6reg1: entered promiscuous mode [ 249.967864][T13481] pim6reg1: entered allmulticast mode [ 250.339705][T13500] tipc: Started in network mode [ 250.355877][T13500] tipc: Node identity 4, cluster identity 4711 [ 250.367833][T13500] tipc: Node number set to 4 [ 250.475841][ T30] audit: type=1400 audit(1746710809.146:591): avc: denied { listen } for pid=13506 comm="syz.5.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 250.534101][ T5966] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 250.560387][ T30] audit: type=1400 audit(1746710809.226:592): avc: denied { recv } for pid=13482 comm="syz.1.3415" saddr=10.128.0.169 src=30006 daddr=10.128.0.97 dest=40558 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 250.724237][ T5966] usb 4-1: Using ep0 maxpacket: 32 [ 250.725366][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 250.749546][ T5966] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 250.791092][ T5966] usb 4-1: config 0 has no interface number 0 [ 250.806312][ T5966] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 250.834116][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.842430][ T5966] usb 4-1: Product: syz [ 250.854029][ T5966] usb 4-1: Manufacturer: syz [ 250.864174][ T5966] usb 4-1: SerialNumber: syz [ 250.875580][ T5966] usb 4-1: config 0 descriptor?? [ 250.892314][ T5966] smsc95xx v2.0.0 [ 250.895170][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.914368][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.928624][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 250.938090][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.956003][ T9] usb 5-1: SerialNumber: syz [ 251.124173][ T5910] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 251.172343][ T9] usb 5-1: 0:2 : does not exist [ 251.217900][ T9] usb 5-1: USB disconnect, device number 48 [ 251.293967][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 251.311359][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.346806][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.375871][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.436071][ T5910] usb 3-1: New USB device found, idVendor=0400, idProduct=07da, bcdDevice= 0.00 [ 251.449671][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.476003][ T5910] usb 3-1: config 0 descriptor?? [ 251.713698][ T5966] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 251.736044][T13549] tipc: Enabling of bearer rejected, already enabled [ 251.747418][T13549] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 251.783882][ T5860] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 251.838927][T13553] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3439'. [ 251.897755][ T5910] hid-generic 0003:0400:07DA.003B: unknown main item tag 0x0 [ 251.911987][ T5910] hid-generic 0003:0400:07DA.003B: unbalanced collection at end of report description [ 251.926904][ T5966] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 251.935711][ T5910] hid-generic 0003:0400:07DA.003B: probe with driver hid-generic failed with error -22 [ 251.948383][ T5966] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 251.968687][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 251.983506][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.992361][ T5910] kernel read not supported for file /swradio0 (pid: 5910 comm: kworker/0:6) [ 251.993937][ T5966] usb 4-1: USB disconnect, device number 40 [ 252.008172][ T5860] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 252.034450][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.050164][ T5860] usb 2-1: config 0 descriptor?? [ 252.115363][ T5859] usb 3-1: USB disconnect, device number 43 [ 252.273843][ T5910] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 252.363859][ C0] net_ratelimit: 4 callbacks suppressed [ 252.363876][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.423814][ T5910] usb 6-1: Using ep0 maxpacket: 8 [ 252.431208][ T5910] usb 6-1: config 0 has no interfaces? [ 252.438661][ T5910] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 252.447773][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.456011][ T5910] usb 6-1: Product: syz [ 252.460164][ T5910] usb 6-1: Manufacturer: syz [ 252.462621][ T5860] bigben 0003:146B:0902.003C: unexpected rdesc, please submit for review [ 252.465347][ T5910] usb 6-1: SerialNumber: syz [ 252.480693][ T5910] usb 6-1: config 0 descriptor?? [ 252.497038][ T5860] bigben 0003:146B:0902.003C: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 252.508743][ T5860] bigben 0003:146B:0902.003C: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 252.518139][ T5860] bigben 0003:146B:0902.003C: no output report found [ 252.667228][ T5860] usb 2-1: USB disconnect, device number 39 [ 252.710083][ T5910] usb 6-1: USB disconnect, device number 20 [ 253.290954][T13591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.403883][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 253.929334][ T30] audit: type=1400 audit(1746710812.596:593): avc: denied { accept } for pid=13616 comm="syz.5.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 254.122466][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3470'. [ 254.443848][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 254.584297][ T5910] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 254.784447][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 254.809491][ T5910] usb 4-1: unable to get BOS descriptor or descriptor too short [ 254.836335][ T5910] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 254.860121][ T5910] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 254.877756][ T5910] usb 4-1: config 4 has no interface number 0 [ 254.906782][ T5910] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 254.916676][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.959321][ T5910] usb 4-1: Product: syz [ 254.963510][ T5910] usb 4-1: Manufacturer: syz [ 254.987669][ T5910] usb 4-1: SerialNumber: syz [ 255.223095][ T5910] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 255.235415][ T5910] usb 4-1: No valid video chain found. [ 255.248209][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.262233][ T5910] usb 4-1: USB disconnect, device number 41 [ 255.324190][T13676] trusted_key: syz.1.3491 sent an empty control message without MSG_MORE. [ 255.428851][T13682] syzkaller1: entered promiscuous mode [ 255.440787][T13682] syzkaller1: entered allmulticast mode [ 255.456608][T13683] lo speed is unknown, defaulting to 1000 [ 255.483851][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 255.679752][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3498'. [ 255.963792][T13705] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.3503'. [ 256.332123][ T30] audit: type=1400 audit(1746710814.996:594): avc: denied { watch_mount watch_reads } for pid=13711 comm="syz.1.3506" path="/proc/1" dev="proc" ino=45480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 256.367310][ T5966] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 256.388341][ T5910] hid-generic 0000:0004:0009.003D: unknown main item tag 0x0 [ 256.397143][ T5910] hid-generic 0000:0004:0009.003D: unknown main item tag 0x0 [ 256.404664][ T5910] hid-generic 0000:0004:0009.003D: unknown main item tag 0x0 [ 256.418944][ T5910] hid-generic 0000:0004:0009.003D: hidraw0: HID v0.04 Device [syz0] on syz1 [ 256.523920][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 256.534242][ T5966] usb 4-1: Using ep0 maxpacket: 32 [ 256.547073][ T5966] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 256.555484][ T5966] usb 4-1: config 0 has no interface number 0 [ 256.576720][ T5966] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 256.601051][ T5966] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 256.625980][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.664185][ T5966] usb 4-1: Product: syz [ 256.682425][ T5966] usb 4-1: Manufacturer: syz [ 256.700289][ T5966] usb 4-1: SerialNumber: syz [ 256.729264][ T5966] usb 4-1: config 0 descriptor?? [ 256.751164][ T5966] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 256.767651][ T5966] em28xx 4-1:0.132: Video interface 132 found: [ 256.815294][ T30] audit: type=1400 audit(1746710815.486:595): avc: denied { connect } for pid=13724 comm="syz.2.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 256.873196][ T30] audit: type=1400 audit(1746710815.536:596): avc: denied { write } for pid=13724 comm="syz.2.3511" path="socket:[45496]" dev="sockfs" ino=45496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 257.112048][T13737] syzkaller1: entered promiscuous mode [ 257.124672][T13737] syzkaller1: entered allmulticast mode [ 257.158498][ T5966] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 257.323659][T13743] lo speed is unknown, defaulting to 1000 [ 257.520337][T13758] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000004 [ 257.563956][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 257.590573][ T5966] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 257.634887][ T5966] em28xx 4-1:0.132: board has no eeprom [ 257.711715][ T5966] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 257.744923][ T5966] em28xx 4-1:0.132: analog set to bulk mode. [ 257.751711][ T5863] em28xx 4-1:0.132: Registering V4L2 extension [ 257.785939][ T5966] usb 4-1: USB disconnect, device number 42 [ 257.804871][ T5966] em28xx 4-1:0.132: Disconnecting em28xx [ 258.005393][ T5863] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 258.012932][ T5863] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 258.032084][ T5863] em28xx 4-1:0.132: No AC97 audio processor [ 258.047873][ T5863] usb 4-1: Decoder not found [ 258.052503][ T5863] em28xx 4-1:0.132: failed to create media graph [ 258.097235][ T5863] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 258.106661][ T5863] em28xx 4-1:0.132: Remote control support is not available for this card. [ 258.136122][ T5966] em28xx 4-1:0.132: Closing input extension [ 258.162455][ T5966] em28xx 4-1:0.132: Freeing device [ 258.323844][ T30] audit: type=1400 audit(1746710816.976:597): avc: denied { ioctl } for pid=13787 comm="syz.1.3537" path="socket:[44734]" dev="sockfs" ino=44734 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 258.603865][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 258.622356][T13796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3541'. [ 258.713210][T13798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.735973][ T5966] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 258.941097][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.962483][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.979467][ T5966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.011682][ T5966] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.031014][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.059105][ T5966] usb 2-1: config 0 descriptor?? [ 259.144875][T13814] overlay: filesystem on ./bus not supported as upperdir [ 259.485433][T13831] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3559'. [ 259.507373][ T5966] plantronics 0003:047F:FFFF.003E: No inputs registered, leaving [ 259.515429][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 259.546506][ T5966] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 259.643858][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 259.716910][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 259.737087][ T24] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 259.755816][ T24] usb 5-1: config 0 has no interface number 0 [ 259.841045][ T5966] usb 2-1: USB disconnect, device number 40 [ 259.877524][ T24] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 259.892243][ T24] usb 5-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 259.903794][ T24] usb 5-1: Product: syz [ 259.907958][ T24] usb 5-1: Manufacturer: syz [ 259.912598][ T24] usb 5-1: SerialNumber: syz [ 259.921434][ T24] usb 5-1: config 0 descriptor?? [ 259.998487][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.008014][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.025209][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.033032][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.041947][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.080349][ T30] audit: type=1400 audit(1746710818.746:598): avc: denied { ioctl } for pid=13849 comm="syz.3.3564" path="socket:[45024]" dev="sockfs" ino=45024 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 260.086184][T13845] lo speed is unknown, defaulting to 1000 [ 260.166508][ T24] sierra 5-1:0.153: Sierra USB modem converter detected [ 260.185356][ T24] usb 5-1: USB disconnect, device number 49 [ 260.191802][ T24] sierra 5-1:0.153: device disconnected [ 260.502439][T13845] chnl_net:caif_netlink_parms(): no params data found [ 260.571492][ T30] audit: type=1326 audit(1746710819.236:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.5.3573" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9c278e969 code=0x0 [ 260.683851][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 260.694503][T13845] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.709651][T13845] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.721289][T13845] bridge_slave_0: entered allmulticast mode [ 260.733628][T13845] bridge_slave_0: entered promiscuous mode [ 260.741495][T13845] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.748935][T13845] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.756594][T13845] bridge_slave_1: entered allmulticast mode [ 260.764888][T13845] bridge_slave_1: entered promiscuous mode [ 260.780675][T13881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3575'. [ 260.795961][T13845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.811883][T13845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.853557][T13845] team0: Port device team_slave_0 added [ 260.863226][T13845] team0: Port device team_slave_1 added [ 260.894313][T13845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.901268][T13845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.928374][T13845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.942349][T13845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.949754][T13845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.976372][T13845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.057374][T13845] hsr_slave_0: entered promiscuous mode [ 261.063646][T13845] hsr_slave_1: entered promiscuous mode [ 261.081678][T13845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.097144][T13845] Cannot create hsr debugfs directory [ 261.255187][T13845] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.266788][T13845] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.336432][T13845] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.347146][T13845] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.354177][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 261.436179][T13845] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.451146][T13845] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.494756][ T5966] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 261.514155][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 261.520629][T13845] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.520876][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 261.532972][T13845] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.542128][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.562737][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.575592][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.584954][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.592917][ T9] usb 4-1: Product: syz [ 261.599749][ T9] usb 4-1: Manufacturer: syz [ 261.604491][ T9] usb 4-1: SerialNumber: syz [ 261.663883][ T5966] usb 5-1: Using ep0 maxpacket: 32 [ 261.670611][ T5966] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 261.680956][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.683991][ T5910] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 261.691084][ T5966] usb 5-1: config 0 descriptor?? [ 261.698192][T13845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.710837][T13845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.721434][T13845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.728210][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 261.739990][T13845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.811617][T13845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.832609][T13845] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.846653][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 261.853978][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.858150][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.864758][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.877883][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.889475][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.897532][ T5910] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 261.910626][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.929548][ T5966] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 261.937194][ T30] audit: type=1400 audit(1746710820.606:600): avc: denied { egress } for pid=5859 comm="kworker/0:4" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 261.962071][ T5910] usb 2-1: config 0 descriptor?? [ 261.962466][ T5966] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 261.976785][ T30] audit: type=1400 audit(1746710820.606:601): avc: denied { sendto } for pid=5859 comm="kworker/0:4" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 261.998741][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.007784][ T5966] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 262.015349][ T5966] usb 5-1: media controller created [ 262.035579][ T9] usb 4-1: 0:2 : does not exist [ 262.036953][ T5966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.124680][ T5823] Bluetooth: hci2: command tx timeout [ 262.141635][T13845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.151939][ T5966] az6027: usb out operation failed. (-71) [ 262.159632][ T5966] az6027: usb out operation failed. (-71) [ 262.165833][ T5966] stb0899_attach: Driver disabled by Kconfig [ 262.171814][ T5966] az6027: no front-end attached [ 262.171814][ T5966] [ 262.182563][ T5966] az6027: usb out operation failed. (-71) [ 262.188456][ T5966] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 262.197654][ T5966] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input76 [ 262.203157][T13845] veth0_vlan: entered promiscuous mode [ 262.214843][ T5966] dvb-usb: schedule remote query interval to 400 msecs. [ 262.214859][ T5966] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 262.217017][ T5966] usb 5-1: USB disconnect, device number 50 [ 262.238777][T13845] veth1_vlan: entered promiscuous mode [ 262.277111][ T5966] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 262.292087][T13845] veth0_macvtap: entered promiscuous mode [ 262.302438][T13845] veth1_macvtap: entered promiscuous mode [ 262.320964][T13845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.331688][T13845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.342138][T13845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.352879][T13845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.363518][T13845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.383211][T13845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.399101][ T5910] isku 0003:1E7D:319C.003F: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 262.401005][T13845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.421550][T13845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.432974][T13845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.447622][T13910] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3587'. [ 262.449316][T13845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.457649][T13910] netlink: 'syz.5.3587': attribute type 7 has an invalid length. [ 262.472138][T13845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.477016][T13910] netlink: 'syz.5.3587': attribute type 8 has an invalid length. [ 262.495254][T13845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.496820][T13910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3587'. [ 262.506147][T13845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.525911][T13845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.536618][T13845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.547607][T13845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.561096][T13910] gretap0: entered promiscuous mode [ 262.567927][T13910] gretap0: left promiscuous mode [ 262.581831][T13845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.600090][T13845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.610635][T13845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.619452][T13845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.675579][ T9] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 262.709566][ T9] usb 4-1: USB disconnect, device number 43 [ 262.715893][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.726500][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.764024][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 262.789543][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.793589][T13912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3588'. [ 262.804383][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.862007][ T5859] usb 2-1: USB disconnect, device number 41 [ 263.154248][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 263.315527][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.337271][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.348443][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.361810][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.370984][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.379559][ T30] audit: type=1400 audit(1746710822.046:602): avc: denied { read } for pid=13934 comm="syz.3.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 263.419440][ T9] usb 5-1: config 0 descriptor?? [ 263.704120][ T48] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 263.804037][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 263.842857][ T9] plantronics 0003:047F:FFFF.0040: No inputs registered, leaving [ 263.864084][ T9] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 263.894471][ T48] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 263.908363][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.919211][ T48] usb 2-1: config 0 descriptor?? [ 263.926200][ T48] cp210x 2-1:0.0: cp210x converter detected [ 264.063846][ T5859] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 264.156274][ T5966] usb 5-1: USB disconnect, device number 51 [ 264.223980][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 264.235044][ T5859] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 264.247227][ T5859] usb 4-1: config 179 has no interface number 0 [ 264.253504][ T5859] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 264.276271][ T5859] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 264.289539][ T5859] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 264.312742][ T5859] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 264.328282][ T5859] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 264.344581][ T5859] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 264.354369][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.367687][T13937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.369816][T13948] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 264.383332][ T48] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 264.400116][T13937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.424672][ T48] usb 2-1: cp210x converter now attached to ttyUSB0 [ 264.463476][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.622285][ T48] usb 2-1: USB disconnect, device number 42 [ 264.636906][ T48] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 264.664860][ T48] cp210x 2-1:0.0: device disconnected [ 264.694355][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input78 [ 264.756166][ T30] audit: type=1400 audit(1746710823.426:603): avc: denied { write } for pid=13964 comm="syz.4.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 264.845397][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 264.910140][ T9] usb 4-1: USB disconnect, device number 44 [ 264.916388][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 264.916432][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 264.937418][ T9] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 265.025138][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 265.037510][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 265.045766][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 265.053514][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 265.061730][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 265.100465][T13969] lo speed is unknown, defaulting to 1000 [ 265.413114][T13973] batadv_slave_0: entered promiscuous mode [ 265.430170][T13972] batadv_slave_0: left promiscuous mode [ 265.629879][ T5863] kernel write not supported for file /dsp (pid: 5863 comm: kworker/1:5) [ 265.697214][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3615'. [ 265.721513][T13983] 8021q: adding VLAN 0 to HW filter on device team1 [ 265.760049][T13969] chnl_net:caif_netlink_parms(): no params data found [ 265.883868][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 265.946234][T13969] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.954403][T13969] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.961538][T13969] bridge_slave_0: entered allmulticast mode [ 265.969259][T13969] bridge_slave_0: entered promiscuous mode [ 265.978007][T13969] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.989236][T13969] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.996764][T13969] bridge_slave_1: entered allmulticast mode [ 266.004305][T13969] bridge_slave_1: entered promiscuous mode [ 266.068115][T13969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.146432][T13969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.214683][T14008] loop7: detected capacity change from 0 to 6 [ 266.281994][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.307805][T14008] Dev loop7: unable to read RDB block 6 [ 266.328893][T14008] loop7: unable to read partition table [ 266.341405][T14008] loop7: partition table beyond EOD, truncated [ 266.347818][T14008] loop_reread_partitions: partition scan of loop7 (ݷU@:B${Wɴ) failed (rc=-5) [ 266.348947][T13969] team0: Port device team_slave_0 added [ 266.400428][T13969] team0: Port device team_slave_1 added [ 266.461875][ T30] audit: type=1326 audit(1746710825.126:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14019 comm="syz.4.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f78e969 code=0x7ffc0000 [ 266.524147][ T30] audit: type=1326 audit(1746710825.126:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14019 comm="syz.4.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f78e969 code=0x7ffc0000 [ 266.552130][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.582977][ T30] audit: type=1326 audit(1746710825.156:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14019 comm="syz.4.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb51f78e969 code=0x7ffc0000 [ 266.667818][ T30] audit: type=1326 audit(1746710825.156:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14019 comm="syz.4.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f78e969 code=0x7ffc0000 [ 266.693588][T13969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.706446][T13969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.740397][ T30] audit: type=1326 audit(1746710825.156:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14019 comm="syz.4.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f78e969 code=0x7ffc0000 [ 266.771547][T13969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.787529][ T30] audit: type=1326 audit(1746710825.156:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14019 comm="syz.4.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb51f78e969 code=0x7ffc0000 [ 266.815470][T14036] rdma_op ffff88803248e1f0 conn xmit_rdma 0000000000000000 [ 266.834349][ T30] audit: type=1326 audit(1746710825.156:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14019 comm="syz.4.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f78e969 code=0x7ffc0000 [ 266.867732][ T30] audit: type=1326 audit(1746710825.156:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14019 comm="syz.4.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f78e969 code=0x7ffc0000 [ 266.906715][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.923858][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 266.942369][ T30] audit: type=1326 audit(1746710825.166:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14019 comm="syz.4.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb51f78e969 code=0x7ffc0000 [ 266.998535][T13969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.013472][T13969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.027104][T14043] loop2: detected capacity change from 0 to 7 [ 267.047665][ T30] audit: type=1326 audit(1746710825.166:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14019 comm="syz.4.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f78e969 code=0x7ffc0000 [ 267.052279][T14047] 9p: Unknown uid 00000000004294967295 [ 267.074373][T13969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.088695][T14046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.097382][T14043] Dev loop2: unable to read RDB block 7 [ 267.103072][ T5823] Bluetooth: hci2: command tx timeout [ 267.119307][T14043] loop2: unable to read partition table [ 267.125254][T14043] loop2: partition table beyond EOD, truncated [ 267.131467][T14043] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 267.177500][T13969] hsr_slave_0: entered promiscuous mode [ 267.196736][T13969] hsr_slave_1: entered promiscuous mode [ 267.242550][T13969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.270471][T13969] Cannot create hsr debugfs directory [ 267.281033][ T24] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 267.294911][ T24] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 267.332352][ T24] IPVS: starting estimator thread 0... [ 267.423901][T14059] IPVS: using max 39 ests per chain, 93600 per kthread [ 267.535389][ T9] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 267.573539][ T63] bridge_slave_1: left allmulticast mode [ 267.579414][ T63] bridge_slave_1: left promiscuous mode [ 267.585716][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.595756][ T63] bridge_slave_0: left allmulticast mode [ 267.601378][ T63] bridge_slave_0: left promiscuous mode [ 267.607820][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.700282][ T9] usb 5-1: config 0 has no interfaces? [ 267.717379][ T9] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 267.731418][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.739716][ T9] usb 5-1: Product: syz [ 267.750643][ T9] usb 5-1: Manufacturer: syz [ 267.758326][ T9] usb 5-1: SerialNumber: syz [ 267.768888][ T9] usb 5-1: config 0 descriptor?? [ 267.785490][ T48] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 267.793089][ T5863] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 267.866265][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.877017][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.886712][ T63] bond0 (unregistering): Released all slaves [ 267.955657][ T5863] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 267.963854][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 267.967111][ T48] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.985808][ T5863] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 267.989926][ T9] usb 5-1: USB disconnect, device number 52 [ 267.995733][ T48] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.995861][ T5863] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 267.995881][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.009761][ T48] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 268.047743][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 268.056281][T14071] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 268.060409][ T48] usb 6-1: SerialNumber: syz [ 268.070411][ T5863] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 268.213175][T13969] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 268.223911][T13969] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 268.236763][T13969] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 268.248294][T13969] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 268.350541][ T48] usb 6-1: 0:2 : does not exist [ 268.361543][ T24] usb 4-1: USB disconnect, device number 45 [ 268.375901][ T48] usb 6-1: usbmixer: too many channels (61) in unit 5 [ 268.394116][ T63] hsr_slave_0: left promiscuous mode [ 268.403479][ T48] usb 6-1: USB disconnect, device number 21 [ 268.412061][ T63] hsr_slave_1: left promiscuous mode [ 268.425495][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.433315][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.441946][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.449568][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.470479][ T63] veth1_macvtap: left promiscuous mode [ 268.477150][ T63] veth0_macvtap: left promiscuous mode [ 268.484714][ T63] veth1_vlan: left promiscuous mode [ 268.490088][ T63] veth0_vlan: left promiscuous mode [ 268.819031][ T63] team0 (unregistering): Port device team_slave_1 removed [ 268.851108][ T63] team0 (unregistering): Port device team_slave_0 removed [ 269.003848][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.173903][ T5823] Bluetooth: hci2: command tx timeout [ 269.285285][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3657'. [ 269.325055][T13969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.385458][T13969] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.411755][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.418907][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.451214][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.458378][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.927723][T13969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.008987][T14116] syzkaller1: entered promiscuous mode [ 270.032333][T14116] syzkaller1: entered allmulticast mode [ 270.043940][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 270.048117][T13969] veth0_vlan: entered promiscuous mode [ 270.115845][T13969] veth1_vlan: entered promiscuous mode [ 270.180657][T14119] lo speed is unknown, defaulting to 1000 [ 270.190630][T13969] veth0_macvtap: entered promiscuous mode [ 270.212266][T13969] veth1_macvtap: entered promiscuous mode [ 270.228780][T14121] bridge_slave_0: default FDB implementation only supports local addresses [ 270.265822][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.294773][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.310974][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.343838][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.364549][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.394988][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.405007][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.417164][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.442603][T13969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.534091][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.563871][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.593800][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.614900][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.635639][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.647429][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.659709][T13969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.678865][T13969] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.722541][T13969] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.731673][T13969] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.742171][T13969] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.922887][T14136] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14136 comm=syz.1.3678 [ 270.990229][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.023944][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.084233][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 271.092071][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.100455][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.344293][ T5863] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 271.429336][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3688'. [ 272.123884][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.163865][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 274.203854][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 275.243852][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 276.283861][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 277.323860][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 278.363852][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 279.403872][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 280.443851][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 281.484620][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 282.523853][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 283.563843][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 284.603853][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 285.643848][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.683853][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 287.723842][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 288.763852][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 289.803845][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 290.843870][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 291.883849][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 292.923855][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 293.963842][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 295.003852][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 296.043864][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 297.083867][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 298.124675][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 299.163846][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 300.203842][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 301.243847][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.283842][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 303.323849][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 304.363843][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 305.403875][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 306.449598][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 307.483839][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 308.523838][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 309.563844][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 310.603836][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 311.643850][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 312.683837][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 313.723845][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 314.763831][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 315.803864][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 316.843832][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 317.883866][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 318.923840][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 319.963846][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 321.003846][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 322.043858][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 323.083837][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 324.123856][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 325.163833][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 326.203838][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 327.243836][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 328.283835][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 329.323831][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 330.363847][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 331.403854][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 332.443846][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 333.483830][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 334.523834][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 335.563829][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 336.603835][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 337.643894][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 338.683840][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 339.723997][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 340.763839][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 341.803826][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 342.843834][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 343.883852][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 344.923866][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.963825][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 347.003833][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 348.043826][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 349.083861][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 350.123842][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 351.163837][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 352.203824][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 353.243833][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.283826][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 355.323824][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 356.363825][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 357.403845][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 358.443829][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 359.483831][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 360.523824][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 361.563825][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 362.603822][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 363.643826][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 364.683818][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 365.723824][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 366.763819][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 367.803825][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 368.843830][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 369.883828][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 370.923828][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 371.963834][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 373.003819][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 374.043838][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 375.083828][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 376.123831][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 376.583713][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 376.590680][ C0] rcu: 1-...!: (1 GPs behind) idle=3e6c/1/0x4000000000000000 softirq=62167/62176 fqs=0 [ 376.601261][ C0] rcu: (detected by 0, t=10502 jiffies, g=47585, q=465 ncpus=2) [ 376.608970][ C0] Sending NMI from CPU 0 to CPUs 1: [ 376.608994][ C1] NMI backtrace for cpu 1 [ 376.609005][ C1] CPU: 1 UID: 0 PID: 14162 Comm: syz.1.3691 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 376.609021][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 376.609028][ C1] RIP: 0010:lock_is_held_type+0xf2/0x150 [ 376.609048][ C1] Code: c0 45 31 ed 44 39 f0 41 0f 94 c5 48 c7 c7 4f bc bb 8d e8 b1 16 00 00 b8 ff ff ff ff 65 0f c1 05 6c 87 37 08 83 f8 01 75 2d 9c <58> f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 44 [ 376.609060][ C1] RSP: 0018:ffffc90000a08d48 EFLAGS: 00000046 [ 376.609071][ C1] RAX: 0000000000000001 RBX: ffff888026372f58 RCX: 0000000000000001 [ 376.609079][ C1] RDX: 0000000000000000 RSI: ffffffff8dbbbc4f RDI: ffffffff8bf482a0 [ 376.609087][ C1] RBP: ffff888028e78300 R08: 0000000000000005 R09: 0000000000000000 [ 376.609094][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888026372440 [ 376.609102][ C1] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000001 [ 376.609109][ C1] FS: 00007f213fae36c0(0000) GS:ffff888124adf000(0000) knlGS:0000000000000000 [ 376.609123][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.609131][ C1] CR2: 00007fb51f97d2d8 CR3: 0000000034c82000 CR4: 00000000003526f0 [ 376.609139][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 376.609146][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 376.609154][ C1] Call Trace: [ 376.609158][ C1] [ 376.609166][ C1] ? __pfx_advance_sched+0x10/0x10 [ 376.609183][ C1] advance_sched+0x83b/0xc80 [ 376.609200][ C1] ? find_held_lock+0x2b/0x80 [ 376.609217][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 376.609230][ C1] ? __pfx_advance_sched+0x10/0x10 [ 376.609245][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 376.609260][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 376.609277][ C1] ? read_tsc+0x9/0x20 [ 376.609297][ C1] hrtimer_interrupt+0x397/0x8e0 [ 376.609314][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 376.609329][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 376.609344][ C1] [ 376.609348][ C1] [ 376.609353][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 376.609367][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 376.609382][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 9e 28 f6 48 89 df e8 8e f2 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 e5 5e 19 f6 65 8b 05 1e a4 34 08 85 c0 74 16 5b [ 376.609393][ C1] RSP: 0018:ffffc900042cfa28 EFLAGS: 00000246 [ 376.609402][ C1] RAX: 0000000000000006 RBX: ffff888012083088 RCX: ffffffff81c2f5bf [ 376.609410][ C1] RDX: 0000000000000000 RSI: ffffffff8dbe123f RDI: ffffffff8bf482a0 [ 376.609417][ C1] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000001 [ 376.609424][ C1] R10: ffffffff90850417 R11: 0000000000000001 R12: dffffc0000000000 [ 376.609432][ C1] R13: 1a1a66502058d3aa R14: 183d8fffa9233faa R15: ffff888012083088 [ 376.609443][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 376.609458][ C1] timerfd_clock_was_set+0x164/0x310 [ 376.609473][ C1] clock_was_set+0x678/0x870 [ 376.609488][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 376.609501][ C1] ? rcu_is_watching+0x12/0xc0 [ 376.609515][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 376.609530][ C1] timekeeping_inject_offset+0x401/0x520 [ 376.609545][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 376.609560][ C1] ? __pfx_timekeeping_inject_offset+0x10/0x10 [ 376.609576][ C1] ? bpf_lsm_capable+0x9/0x10 [ 376.609587][ C1] ? security_capable+0x7e/0x260 [ 376.609601][ C1] do_adjtimex+0x36f/0xaa0 [ 376.609618][ C1] ? __pfx_do_adjtimex+0x10/0x10 [ 376.609643][ C1] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 376.609660][ C1] __do_sys_clock_adjtime+0x172/0x290 [ 376.609677][ C1] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 376.609694][ C1] ? __pfx_do_futex+0x10/0x10 [ 376.609716][ C1] ? rcu_is_watching+0x12/0xc0 [ 376.609730][ C1] ? rcu_is_watching+0x12/0xc0 [ 376.609744][ C1] do_syscall_64+0xcd/0x260 [ 376.609760][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.609772][ C1] RIP: 0033:0x7f213eb8e969 [ 376.609782][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.609793][ C1] RSP: 002b:00007f213fae3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 376.609803][ C1] RAX: ffffffffffffffda RBX: 00007f213edb5fa0 RCX: 00007f213eb8e969 [ 376.609811][ C1] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000000 [ 376.609818][ C1] RBP: 00007f213ec10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 376.609826][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.609833][ C1] R13: 0000000000000000 R14: 00007f213edb5fa0 R15: 00007fffbca91f38 [ 376.609845][ C1] [ 376.609989][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g47585 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 377.092514][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 377.102474][ C0] rcu: RCU grace-period kthread stack dump: [ 377.108349][ C0] task:rcu_preempt state:R running task stack:27608 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 377.121831][ C0] Call Trace: [ 377.125099][ C0] [ 377.128026][ C0] __schedule+0x116f/0x5de0 [ 377.132538][ C0] ? find_held_lock+0x2b/0x80 [ 377.137212][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 377.142158][ C0] ? __pfx___schedule+0x10/0x10 [ 377.147006][ C0] ? find_held_lock+0x2b/0x80 [ 377.151678][ C0] ? schedule+0x2d7/0x3a0 [ 377.156003][ C0] schedule+0xe7/0x3a0 [ 377.160066][ C0] schedule_timeout+0x123/0x290 [ 377.164911][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 377.170273][ C0] ? __pfx_process_timeout+0x10/0x10 [ 377.175557][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 377.181355][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 377.186815][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 377.191581][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 377.196862][ C0] ? rcu_gp_init+0xc76/0x15a0 [ 377.201537][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 377.206388][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 377.212189][ C0] rcu_gp_kthread+0x270/0x380 [ 377.216877][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 377.222074][ C0] ? rcu_is_watching+0x12/0xc0 [ 377.226829][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 377.232024][ C0] ? __kthread_parkme+0x19e/0x250 [ 377.237051][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 377.242246][ C0] kthread+0x3c2/0x780 [ 377.246307][ C0] ? __pfx_kthread+0x10/0x10 [ 377.250887][ C0] ? __pfx_kthread+0x10/0x10 [ 377.255465][ C0] ? __pfx_kthread+0x10/0x10 [ 377.260044][ C0] ? __pfx_kthread+0x10/0x10 [ 377.264622][ C0] ? rcu_is_watching+0x12/0xc0 [ 377.269381][ C0] ? __pfx_kthread+0x10/0x10 [ 377.273964][ C0] ret_from_fork+0x45/0x80 [ 377.278370][ C0] ? __pfx_kthread+0x10/0x10 [ 377.282949][ C0] ret_from_fork_asm+0x1a/0x30 [ 377.287720][ C0] [ 377.290726][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 377.297038][ C0] CPU: 0 UID: 0 PID: 1335 Comm: kworker/u8:8 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 377.309173][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 377.319225][ C0] Workqueue: events_unbound toggle_allocation_gate [ 377.325731][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x3b/0x70 [ 377.331874][ C0] Code: 8b 05 29 dd e8 11 a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 3c 16 00 00 85 c0 74 2b <8b> 82 18 16 00 00 83 f8 02 75 20 48 8b 8a 20 16 00 00 8b 92 1c 16 [ 377.351473][ C0] RSP: 0018:ffffc900046ff930 EFLAGS: 00000246 [ 377.357529][ C0] RAX: 0000000000000001 RBX: ffff8880b853f740 RCX: ffffffff81af1bb9 [ 377.365495][ C0] RDX: ffff8880286f8000 RSI: ffffffff81af1b93 RDI: 0000000000000005 [ 377.373455][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 377.381415][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170a7ee9 [ 377.389377][ C0] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8880b843b040 [ 377.397341][ C0] FS: 0000000000000000(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 377.406261][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.412836][ C0] CR2: 00007fb5204e56c0 CR3: 000000000e180000 CR4: 00000000003526f0 [ 377.420799][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 377.428757][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 377.436717][ C0] Call Trace: [ 377.439987][ C0] [ 377.442906][ C0] smp_call_function_many_cond+0x4a3/0x1290 [ 377.448803][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 377.453821][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 377.458926][ C0] text_poke_bp_batch+0x220/0x760 [ 377.463952][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 377.469490][ C0] ? __jump_label_patch+0x1db/0x400 [ 377.474689][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 377.480923][ C0] ? find_held_lock+0x2b/0x80 [ 377.485597][ C0] text_poke_finish+0x30/0x40 [ 377.490271][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 377.496246][ C0] jump_label_update+0x376/0x550 [ 377.501184][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 377.507079][ C0] static_key_enable+0x1a/0x20 [ 377.511844][ C0] toggle_allocation_gate+0xfa/0x280 [ 377.517127][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 377.523022][ C0] ? rcu_is_watching+0x12/0xc0 [ 377.527782][ C0] process_one_work+0x9cc/0x1b70 [ 377.532722][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 377.538088][ C0] ? __pfx_process_one_work+0x10/0x10 [ 377.543457][ C0] ? assign_work+0x1a0/0x250 [ 377.548041][ C0] worker_thread+0x6c8/0xf10 [ 377.552629][ C0] ? __kthread_parkme+0x19e/0x250 [ 377.557650][ C0] ? __pfx_worker_thread+0x10/0x10 [ 377.562752][ C0] kthread+0x3c2/0x780 [ 377.566813][ C0] ? __pfx_kthread+0x10/0x10 [ 377.571392][ C0] ? __pfx_kthread+0x10/0x10 [ 377.575970][ C0] ? __pfx_kthread+0x10/0x10 [ 377.580550][ C0] ? __pfx_kthread+0x10/0x10 [ 377.585127][ C0] ? rcu_is_watching+0x12/0xc0 [ 377.589885][ C0] ? __pfx_kthread+0x10/0x10 [ 377.594464][ C0] ret_from_fork+0x45/0x80 [ 377.598868][ C0] ? __pfx_kthread+0x10/0x10 [ 377.603446][ C0] ret_from_fork_asm+0x1a/0x30 [ 377.608221][ C0] [ 377.612178][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 378.683829][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 379.723829][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 380.765028][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.803829][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 382.843822][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 383.883836][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 384.923827][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 385.963842][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available