last executing test programs: 5.226318081s ago: executing program 2 (id=7593): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') r1 = openat$cgroup_int(r0, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x27) 5.10030659s ago: executing program 2 (id=7594): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000c00000/0x400000)=nil, 0x400000}) 4.213257386s ago: executing program 2 (id=7608): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(r1, &(0x7f00000001c0)='pagemap\x00') 4.082393574s ago: executing program 2 (id=7613): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56e, 0x10c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x20, 0x60, 0x10, "", [{{0x9, 0x4, 0x0, 0x3a, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0xc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7f, 0xd7, 0xe}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001e80)={0x2c, 0x0, &(0x7f0000001d40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002540)={0x24, 0x0, &(0x7f0000002480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000003a80)={0x24, 0x0, 0x0, &(0x7f0000003a00)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x7, "bce026b2"}, @local=@item_012={0x2, 0x2, 0xa, "51ed"}, @local=@item_012={0x0, 0x2, 0x2}, @global=@item_012={0x2, 0x1, 0x4, ':j'}]}}, 0x0}, 0x0) 3.273346315s ago: executing program 3 (id=7626): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 3.273015687s ago: executing program 3 (id=7627): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="b9800000c00f3235010000000f300fc72ec4c379050b01c4e1e75adf0fc7a4fc00600000b9800000c00f3235000800000f30670f2054640f792e0f320fc76e7d", 0x40}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.168037032s ago: executing program 3 (id=7628): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 3.031818185s ago: executing program 3 (id=7630): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x24) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0xb9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x400, 0xf, 0x7, 0xe}, {0x6, 0x24, 0x1a, 0xf4d, 0x39}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x1, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x3, 0x2}}}}}}}]}}, 0x0) 2.210271214s ago: executing program 1 (id=7640): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0xae, 0x0) 1.850190867s ago: executing program 2 (id=7643): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r1, 0x2000000) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) 1.792611762s ago: executing program 2 (id=7645): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) 1.372439143s ago: executing program 1 (id=7648): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) syz_emit_ethernet(0x4d, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x17, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "a78ce54006"}]}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1085, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 1.237094601s ago: executing program 1 (id=7650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0xfffffffffffffffd, 0x4, 0x8000000000000001, 0x80000001, 0xb3, 0x200, 0x4, 0x11f, 0x9, 0x3, 0x9, 0x1b0ee0e8], 0x0, 0x2a80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.164724577s ago: executing program 1 (id=7652): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x84}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, {}, {0x8000, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x70bd2b, 0x0, 0x2, 0x0, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24008810}, 0xc000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.119534663s ago: executing program 0 (id=7653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)={0x400000000000030d}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 1.071415507s ago: executing program 1 (id=7654): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x01\xe1=\x8d\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 904.073153ms ago: executing program 0 (id=7656): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="24000000000000000100000001", @ANYRES32, @ANYRES64, @ANYBLOB="2bd5bb48db59834b9328618036678ec4c6dac89cb841b8b4c8fd04de9f9a66cd495d5a1a543b82ba037c0c6e2fa0b40f4a5b546d90c1166fdd8b667154295b2d4a8097ec97e036e379d59aabd828b8f161c5fa95c5f4965b19d5b1198519c62a8c9a5e881822c07f3fd885ebf2c5f9dbb86654f0ce2bba773c64c3dd907d6f2443419a86b521da094260c5c326d9a0b9394be9c3230a8e7da852a30998bc476ae51f7d3896d507299d2f4ea3110377b9c3fd92ab6ab97f199b667aef67538172"], 0xf0, 0x1}}], 0x1, 0x44015) r0 = socket$inet6(0xa, 0x80001, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000a00)="d8dc3e47921ebc404447ab1e58b7c12dd3ba52e9197764190153873925b8d5b7da2f3953a80ff858c77a1eb5b481225e5da83463011a968067297a8dd4e96809ac5e01c83c4961036c73a5cb72da133e1663f9b81d95a41707", 0x59}], 0x1}, 0x20010040) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 848.1163ms ago: executing program 0 (id=7657): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) 670.210749ms ago: executing program 4 (id=7659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlockall(0x7) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x9}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 476.666731ms ago: executing program 4 (id=7660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x600, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7fffff8, 0x1008}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 398.806258ms ago: executing program 0 (id=7661): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffff92d, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x60b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0x5, 0xb}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x7fff, 0x7ff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @random="000863ee0a3d"}, 0x14) 363.924ms ago: executing program 0 (id=7662): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) sendfile(r0, r0, 0x0, 0x201f01) 360.658506ms ago: executing program 4 (id=7663): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f00000011c0), 0xfffffffffffffffe) 262.970483ms ago: executing program 4 (id=7664): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 178.103127ms ago: executing program 4 (id=7665): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d", 0x4a}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 134.609939ms ago: executing program 3 (id=7666): mkdir(&(0x7f00000001c0)='./file0\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x68) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000700)={{r0}, 0x3ff, 0xfffffffffffff481, 0x3}) 51.145396ms ago: executing program 4 (id=7667): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 25.987573ms ago: executing program 3 (id=7668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 3.023225ms ago: executing program 1 (id=7669): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0x4) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000001c0)='./file0\x00', 0xa4000061) copy_file_range(r1, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) 0s ago: executing program 0 (id=7670): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x80000, 0x100) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) kernel console output (not intermixed with test programs): [ T1886] microsoft 0003:045E:07DA.0049: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 384.751478][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 384.751495][ T30] audit: type=1400 audit(1774660048.605:1165): avc: denied { read } for pid=20137 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 384.805069][ T1886] usb 4-1: USB disconnect, device number 48 [ 384.869562][T20140] fido_id[20140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 384.892905][ T792] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 384.928033][ T792] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 384.995535][ T792] usb 3-1: USB disconnect, device number 53 [ 385.064577][T20142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6382'. [ 385.067219][ T91] usb 5-1: USB disconnect, device number 61 [ 385.170770][T20146] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6384'. [ 385.231463][ T30] audit: type=1400 audit(1774660049.109:1166): avc: denied { prog_load } for pid=20149 comm="syz.1.6386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 385.262681][ T30] audit: type=1400 audit(1774660049.140:1167): avc: denied { bpf } for pid=20149 comm="syz.1.6386" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 385.284117][ T30] audit: type=1400 audit(1774660049.140:1168): avc: denied { map_create } for pid=20149 comm="syz.1.6386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 385.305163][ T30] audit: type=1400 audit(1774660049.140:1169): avc: denied { map_read map_write } for pid=20149 comm="syz.1.6386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 385.330095][ T30] audit: type=1400 audit(1774660049.140:1170): avc: denied { perfmon } for pid=20149 comm="syz.1.6386" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 385.351928][ T30] audit: type=1400 audit(1774660049.193:1171): avc: denied { ioctl } for pid=20153 comm="syz.1.6388" path="socket:[64972]" dev="sockfs" ino=64972 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 385.356576][T20157] overlayfs: failed to clone upperpath [ 385.447009][T20160] ubi31: attaching mtd0 [ 385.452053][T20157] overlayfs: failed to clone upperpath [ 385.456872][T20160] ubi31: scanning is finished [ 385.464354][T20160] ubi31: empty MTD device detected [ 385.506907][ T30] audit: type=1400 audit(1774660049.392:1172): avc: denied { mounton } for pid=20162 comm="syz.3.6392" path=2F313232392FE91F7189591E9233614B dev="tmpfs" ino=6230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 385.697751][T20160] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 385.737157][T20160] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 385.746236][T20160] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 385.776907][T20160] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 385.798030][T20160] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 385.815784][T20160] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 385.857751][T20160] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3068245052 [ 385.899239][T20160] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 385.969429][T20177] ubi31: background thread "ubi_bgt31d" started, PID 20177 [ 386.077607][ T30] audit: type=1400 audit(1774660049.991:1173): avc: denied { write } for pid=20196 comm="syz.2.6406" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 386.146984][ T30] audit: type=1400 audit(1774660049.991:1174): avc: denied { allowed } for pid=20196 comm="syz.2.6406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 386.299348][T20208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.307583][T20208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.360277][T20214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6413'. [ 386.374754][T20214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6413'. [ 386.694102][T20233] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6421'. [ 386.940396][T20246] sctp: [Deprecated]: syz.4.6428 (pid 20246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.940396][T20246] Use struct sctp_sack_info instead [ 386.974941][T20246] sctp: [Deprecated]: syz.4.6428 (pid 20246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.974941][T20246] Use struct sctp_sack_info instead [ 387.215053][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 387.385114][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 387.402975][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.421028][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 387.436835][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 387.467014][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 387.488747][ T10] usb 4-1: SerialNumber: syz [ 387.520857][ T10] usb 4-1: 0:2 : does not exist [ 387.724016][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 387.750235][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 387.778211][ T91] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 387.815916][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 387.862908][ T10] usb 4-1: USB disconnect, device number 49 [ 387.940264][ T91] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.969485][ T91] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 387.989938][T20281] binder_alloc: binder_alloc_mmap_handler: 20280 200000fed000-200001000000 already mapped failed -16 [ 388.021313][ T91] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.031639][ T91] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.080852][ T91] usb 5-1: Product: syz [ 388.109365][ T91] usb 5-1: Manufacturer: syz [ 388.119461][ T91] usb 5-1: SerialNumber: syz [ 388.340058][T20274] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 388.463434][T20295] dummy0: entered promiscuous mode [ 388.471987][T20295] dummy0: left promiscuous mode [ 388.671682][ T792] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 388.814198][ T792] usb 3-1: Using ep0 maxpacket: 16 [ 388.821006][ T792] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 388.829697][ T792] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 388.852520][ T792] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 388.860733][ T792] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 388.881348][ T792] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 388.900109][ T792] usb 3-1: config 0 has no interface number 0 [ 388.906271][ T792] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 388.927538][ T792] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 388.939297][ T792] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 388.954943][T20274] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 388.957406][ T792] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 388.995471][ T792] usb 3-1: config 0 interface 125 has no altsetting 0 [ 389.002528][ T792] usb 3-1: config 0 interface 125 has no altsetting 2 [ 389.017588][ T792] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 389.027510][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.042730][ T792] usb 3-1: Product: syz [ 389.046988][ T792] usb 3-1: Manufacturer: syz [ 389.051588][ T792] usb 3-1: SerialNumber: syz [ 389.063877][ T792] usb 3-1: config 0 descriptor?? [ 389.074026][ T792] usb 3-1: selecting invalid altsetting 2 [ 389.159852][ T91] cdc_ncm 5-1:1.0: failed to get mac address [ 389.171447][ T91] cdc_ncm 5-1:1.0: bind() failure [ 389.178306][T20321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.205864][ T91] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 389.224972][ T91] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 389.244233][ T91] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 389.287436][ T91] usb 5-1: USB disconnect, device number 62 [ 389.338651][T20329] batadv_slave_1: entered promiscuous mode [ 389.364822][T20328] batadv_slave_1: left promiscuous mode [ 389.729676][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 389.729695][ T30] audit: type=1400 audit(1774660053.822:1205): avc: denied { mounton } for pid=20342 comm="syz.3.6472" path="/1243/file0" dev="configfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 389.813165][ T30] audit: type=1400 audit(1774660053.917:1206): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 390.091702][ T792] usb 3-1: USB disconnect, device number 54 [ 390.668744][T20378] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.6485'. [ 390.745501][T20380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6486'. [ 390.788654][ T10] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 390.843238][ T11] block nbd1: Possible stuck request ffff888027af0000: control (read@0,1024B). Runtime 60 seconds [ 390.854017][ T11] block nbd1: Possible stuck request ffff888027af0200: control (read@1024,1024B). Runtime 60 seconds [ 390.869755][ T11] block nbd1: Possible stuck request ffff888027af0400: control (read@2048,1024B). Runtime 60 seconds [ 390.880940][ T11] block nbd1: Possible stuck request ffff888027af0600: control (read@3072,1024B). Runtime 60 seconds [ 390.982850][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.996749][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 391.013727][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.023977][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 391.037350][ T10] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 391.046970][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.058670][ T10] usb 4-1: config 0 descriptor?? [ 391.119126][T20404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6498'. [ 391.263915][ T792] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 391.264575][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 391.284693][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 391.303807][ T10] usb 4-1: USB disconnect, device number 50 [ 391.402772][T20420] syzkaller1: entered promiscuous mode [ 391.408524][T20420] syzkaller1: entered allmulticast mode [ 391.414522][ T792] usb 5-1: Using ep0 maxpacket: 8 [ 391.424544][ T792] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.434966][ T792] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 391.452871][ T792] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 391.464359][ T792] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 391.481415][ T792] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 391.491631][ T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.510453][ T792] hub 5-1:1.0: bad descriptor, ignoring hub [ 391.523775][ T792] hub 5-1:1.0: probe with driver hub failed with error -5 [ 391.545411][ T792] cdc_wdm 5-1:1.0: skipping garbage [ 391.558337][ T792] cdc_wdm 5-1:1.0: skipping garbage [ 391.573311][ T792] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 391.589920][ T792] cdc_wdm 5-1:1.0: Unknown control protocol [ 391.600024][T20428] netlink: 'syz.1.6509': attribute type 21 has an invalid length. [ 391.600310][T20429] sock: sock_set_timeout: `syz.2.6510' (pid 20429) tries to set negative timeout [ 391.610083][T20428] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6509'. [ 391.630573][T20428] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6509'. [ 391.654977][T20428] netlink: 'syz.1.6509': attribute type 21 has an invalid length. [ 391.664589][T20428] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6509'. [ 391.675289][T20428] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6509'. [ 391.742569][T20434] 9p: Bad value for 'rfdno' [ 391.795779][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 391.957794][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 391.978076][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.014803][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.033476][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.054077][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 392.071813][ T10] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 392.100166][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.127656][ T10] usb 4-1: config 0 descriptor?? [ 392.166114][T20400] usb 5-1: reset high-speed USB device number 63 using dummy_hcd [ 392.527134][T20475] 9p: Bad value for 'rfdno' [ 392.534283][ T10] betop 0003:20BC:5500.004A: unknown main item tag 0x0 [ 392.556606][ T10] betop 0003:20BC:5500.004A: unknown main item tag 0x0 [ 392.577423][ T10] betop 0003:20BC:5500.004A: unknown main item tag 0x0 [ 392.584450][ T10] betop 0003:20BC:5500.004A: unknown main item tag 0x0 [ 392.611716][ T10] betop 0003:20BC:5500.004A: unknown main item tag 0x0 [ 392.633505][ T10] betop 0003:20BC:5500.004A: hidraw0: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.3-1/input0 [ 392.661318][ T10] betop 0003:20BC:5500.004A: no inputs found [ 392.696487][ T30] audit: type=1400 audit(1774660056.940:1207): avc: denied { setopt } for pid=20479 comm="syz.1.6532" lport=39892 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 392.731757][ T792] usb 4-1: USB disconnect, device number 51 [ 392.739700][ T1886] usb 5-1: USB disconnect, device number 63 [ 392.785070][T20481] fido_id[20481]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 393.102255][ T792] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 393.191646][T20497] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6540'. [ 393.256062][ T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.280519][ T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.295008][ T792] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 393.310191][ T792] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 393.319267][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.332229][ T792] usb 3-1: config 0 descriptor?? [ 393.473789][ T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 393.500589][ T91] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 393.625315][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 393.644904][ T10] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 393.657623][ T91] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 393.669585][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 393.691787][ T91] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.710302][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 393.721056][ T91] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 393.741945][ T792] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x4 [ 393.748706][ T91] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.760499][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 393.789810][ T792] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 393.793973][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 393.830750][ T91] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 393.840345][ T91] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 393.852960][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.875624][ T91] usb 4-1: Product: syz [ 393.879845][ T91] usb 4-1: Manufacturer: syz [ 393.902361][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 393.914542][ T91] cdc_wdm 4-1:1.0: skipping garbage [ 393.932549][ T91] cdc_wdm 4-1:1.0: skipping garbage [ 393.945030][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.963228][ T91] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 393.997927][ T91] cdc_wdm 4-1:1.0: Unknown control protocol [ 394.023179][ T792] usb 3-1: USB disconnect, device number 55 [ 394.153734][ T91] usb 4-1: USB disconnect, device number 52 [ 394.201906][ T10] usb 1-1: usb_control_msg returned -32 [ 394.212198][ T10] usbtmc 1-1:16.0: can't read capabilities [ 394.395599][ T30] audit: type=1400 audit(1774660058.725:1208): avc: denied { create } for pid=20546 comm="syz.4.6563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 394.421999][ T30] audit: type=1400 audit(1774660058.756:1209): avc: denied { write } for pid=20546 comm="syz.4.6563" path="socket:[66826]" dev="sockfs" ino=66826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 394.583802][T20556] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 395.062773][T20579] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 395.197011][ T30] audit: type=1400 audit(1774660059.575:1210): avc: denied { accept } for pid=20586 comm="syz.4.6580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 395.456852][T20598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6585'. [ 395.966296][T20625] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6595'. [ 395.977514][ T5917] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 396.125391][ T91] usb 1-1: USB disconnect, device number 63 [ 396.129467][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 396.150910][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.177199][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.190663][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 396.224743][ T5917] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 396.246923][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.268504][ T5917] usb 4-1: config 0 descriptor?? [ 396.644084][T20651] overlayfs: failed to clone upperpath [ 396.668175][T20651] overlayfs: failed to clone upperpath [ 396.677436][ T5917] a4tech 0003:09DA:000A.004C: unknown main item tag 0x0 [ 396.701711][ T5917] a4tech 0003:09DA:000A.004C: unknown main item tag 0x0 [ 396.730149][ T5917] a4tech 0003:09DA:000A.004C: unknown main item tag 0x0 [ 396.748006][ T5917] a4tech 0003:09DA:000A.004C: unknown main item tag 0x0 [ 396.784951][ T5917] a4tech 0003:09DA:000A.004C: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.3-1/input0 [ 396.798995][T20655] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6609'. [ 396.872221][ T5917] usb 4-1: USB disconnect, device number 53 [ 396.922268][T20659] fido_id[20659]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 397.392017][T20674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6617'. [ 397.407822][T20674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6617'. [ 397.692104][ T5916] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 397.806157][ T1886] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 397.863506][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 397.872112][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.895981][ T5916] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 397.923008][ T5916] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 397.947966][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.966175][ T5916] usb 5-1: Product: syz [ 397.976930][ T5916] usb 5-1: Manufacturer: syz [ 397.987809][ T1886] usb 3-1: config index 0 descriptor too short (expected 65170, got 92) [ 397.988210][ T5916] usb 5-1: SerialNumber: syz [ 398.016085][ T1886] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.036134][ T5916] usb 5-1: config 0 descriptor?? [ 398.039005][ T1886] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 398.060503][ T1886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.077299][ T1886] usb 3-1: Product: syz [ 398.089888][ T1886] usb 3-1: Manufacturer: syz [ 398.104171][ T1886] usb 3-1: SerialNumber: syz [ 398.296553][ T30] audit: type=1326 audit(1774660062.830:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.1.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8d19c799 code=0x7ffc0000 [ 398.302286][T20678] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 398.358525][ T30] audit: type=1326 audit(1774660062.830:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.1.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8d19c799 code=0x7ffc0000 [ 398.425263][ T30] audit: type=1326 audit(1774660062.840:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.1.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8d19c799 code=0x7ffc0000 [ 398.433089][ T5917] usb 5-1: USB disconnect, device number 64 [ 398.487338][ T30] audit: type=1326 audit(1774660062.840:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.1.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8d19c799 code=0x7ffc0000 [ 398.545981][ T30] audit: type=1326 audit(1774660062.861:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.1.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7eff8d19c799 code=0x7ffc0000 [ 398.573840][ T30] audit: type=1326 audit(1774660062.861:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.1.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8d19c799 code=0x7ffc0000 [ 398.600138][ T30] audit: type=1326 audit(1774660062.861:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.1.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8d19c799 code=0x7ffc0000 [ 398.657467][ T30] audit: type=1326 audit(1774660062.861:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.1.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8d19c799 code=0x7ffc0000 [ 398.682103][ T30] audit: type=1326 audit(1774660062.861:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.1.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8d19c799 code=0x7ffc0000 [ 398.735636][T20716] UHID_CREATE from different security context by process 2608 (syz.0.6637), this is not allowed. [ 398.750213][ T91] hid_parser_main: 34 callbacks suppressed [ 398.750231][ T91] hid-generic 0000:0000:0004.004D: unknown main item tag 0x0 [ 398.765292][ T91] hid-generic 0000:0000:0004.004D: unknown main item tag 0x0 [ 398.774899][ T91] hid-generic 0000:0000:0004.004D: unknown main item tag 0x0 [ 398.786800][ T91] hid-generic 0000:0000:0004.004D: unknown main item tag 0x0 [ 398.797612][ T91] hid-generic 0000:0000:0004.004D: unknown main item tag 0x0 [ 398.799464][T20720] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6639'. [ 398.805115][ T91] hid-generic 0000:0000:0004.004D: unknown main item tag 0x0 [ 398.822014][ T91] hid-generic 0000:0000:0004.004D: unknown main item tag 0x0 [ 398.829751][ T91] hid-generic 0000:0000:0004.004D: unknown main item tag 0x0 [ 398.839298][ T91] hid-generic 0000:0000:0004.004D: unknown main item tag 0x0 [ 398.846998][ T91] hid-generic 0000:0000:0004.004D: unknown main item tag 0x0 [ 398.868300][ T91] hid-generic 0000:0000:0004.004D: hidraw0: HID v0.03 Device [syz1] on syz0 [ 398.951961][T20721] fido_id[20721]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 399.125009][ T1886] cdc_ncm 3-1:1.0: bind() failure [ 399.133957][ T1886] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 399.142776][ T1886] cdc_ncm 3-1:1.1: bind() failure [ 399.152858][ T1886] usb 3-1: USB disconnect, device number 56 [ 399.320641][ T5916] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 399.492681][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 399.504521][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 399.516690][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 399.530151][ T5916] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 399.541411][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.549416][ T5916] usb 5-1: Product: syz [ 399.564297][ T5916] usb 5-1: Manufacturer: syz [ 399.574523][ T5916] usb 5-1: SerialNumber: syz [ 399.589819][ T5916] usb 5-1: config 0 descriptor?? [ 399.608286][ T5916] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 399.619742][ T5916] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 399.911059][T20751] ip6_vti0 speed is unknown, defaulting to 1000 [ 399.943901][T20751] ip6_vti0 speed is unknown, defaulting to 1000 [ 399.953156][T20751] ip6_vti0 speed is unknown, defaulting to 1000 [ 400.187155][ T5916] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 400.205216][ T5916] em28xx 5-1:0.0: Config register raw data: 0x54 [ 400.259752][ T91] ip6_vti0 speed is unknown, defaulting to 1000 [ 400.267759][T20751] infiniband syz2: set down [ 400.274702][T20751] infiniband syz2: added ip6_vti0 [ 400.348461][T20774] netlink: 'syz.1.6660': attribute type 2 has an invalid length. [ 400.355134][T20751] RDS/IB: syz2: added [ 400.361272][T20774] netlink: 'syz.1.6660': attribute type 2 has an invalid length. [ 400.378961][T20751] smc: adding ib device syz2 with port count 1 [ 400.392785][T20751] smc: ib device syz2 port 1 has no pnetid [ 400.407158][ T5916] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 400.416406][ T5916] em28xx 5-1:0.0: No AC97 audio processor [ 400.426455][ T1886] ip6_vti0 speed is unknown, defaulting to 1000 [ 400.438889][T20751] ip6_vti0 speed is unknown, defaulting to 1000 [ 400.440761][ T5916] usb 5-1: USB disconnect, device number 65 [ 400.465900][ T5916] em28xx 5-1:0.0: Disconnecting em28xx [ 400.479048][ T5916] em28xx 5-1:0.0: Freeing device [ 400.681716][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 400.681733][ T30] audit: type=1400 audit(1774660065.328:1237): avc: denied { mounton } for pid=20785 comm="syz.2.6665" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 400.807131][T20792] netlink: 7032 bytes leftover after parsing attributes in process `syz.2.6668'. [ 400.830555][T20792] openvswitch: netlink: EtherType 0 is less than min 600 [ 400.865988][T20751] ip6_vti0 speed is unknown, defaulting to 1000 [ 401.050402][T20806] netlink: 'syz.4.6674': attribute type 12 has an invalid length. [ 401.065871][T20806] netlink: 'syz.4.6674': attribute type 29 has an invalid length. [ 401.077618][T20806] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6674'. [ 401.200347][T20751] ip6_vti0 speed is unknown, defaulting to 1000 [ 401.281663][ T30] audit: type=1400 audit(1774660065.958:1238): avc: denied { bind } for pid=20819 comm="syz.2.6682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 401.391148][ T30] audit: type=1400 audit(1774660066.074:1239): avc: denied { read } for pid=20825 comm="syz.1.6685" path="socket:[68237]" dev="sockfs" ino=68237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 401.436624][ T1886] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 401.444528][ T1889] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 401.512421][T20751] ip6_vti0 speed is unknown, defaulting to 1000 [ 401.614185][ T1889] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 401.622882][ T1886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.644009][ T1889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.655111][ T1886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.673530][ T1889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.684658][ T1886] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 401.698579][ T1889] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 401.721414][ T1886] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 401.736033][ T1889] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 401.745876][ T1886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.754012][ T1889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.764742][ T1886] usb 4-1: config 0 descriptor?? [ 401.780125][ T5916] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 401.787133][ T1889] usb 5-1: config 0 descriptor?? [ 401.789803][T20832] ip6_vti0 speed is unknown, defaulting to 1000 [ 401.908561][T20751] ip6_vti0 speed is unknown, defaulting to 1000 [ 401.943005][ T5916] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.955101][ T5916] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.970551][ T5916] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 401.980913][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 401.989049][ T5916] usb 3-1: SerialNumber: syz [ 402.191825][ T1889] plantronics 0003:047F:FFFF.004E: reserved main item tag 0xd [ 402.197276][ T5916] usb 3-1: 0:2 : does not exist [ 402.234417][ T1889] plantronics 0003:047F:FFFF.004E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 402.256468][ T1886] plantronics 0003:047F:FFFF.004F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 402.385385][ T5916] usb 3-1: USB disconnect, device number 57 [ 402.476180][ T10] usb 5-1: USB disconnect, device number 66 [ 402.491655][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.534754][ T91] usb 4-1: USB disconnect, device number 54 [ 402.855324][ T1889] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 403.000878][ T1889] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 403.047546][ T1889] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 403.074326][ T1889] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.090907][ T1889] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 403.129774][ T1889] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 403.153547][ T30] audit: type=1400 audit(1774660067.921:1240): avc: denied { append } for pid=20878 comm="syz.2.6708" name="demux0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 403.178051][ T1889] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 403.186113][ T1889] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 403.227043][ T1889] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.266347][ T1889] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 403.292116][ T1889] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 403.323810][ T1889] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 403.335017][ T1889] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 403.362398][ T1889] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.399799][ T1889] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 403.424676][ T1889] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 403.457703][ T1889] usb 1-1: string descriptor 0 read error: -22 [ 403.463975][ T1889] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 403.489536][ T1889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.539310][ T1889] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 403.564541][T20901] serio: Serial port ttyS3 [ 403.687139][ T30] audit: type=1400 audit(1774660068.488:1241): avc: denied { mount } for pid=20907 comm="syz.2.6721" name="/" dev="autofs" ino=68395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 403.726845][ T30] audit: type=1400 audit(1774660068.530:1242): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 403.781364][ T1889] IPVS: starting estimator thread 0... [ 403.874197][T20913] IPVS: using max 45 ests per chain, 108000 per kthread [ 404.124358][T20923] syzkaller1: entered promiscuous mode [ 404.131652][T20923] syzkaller1: entered allmulticast mode [ 404.509887][T20939] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 404.947071][T20951] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.6738'. [ 404.959484][T20951] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 405.929128][T20990] ip6_vti0 speed is unknown, defaulting to 1000 [ 406.011511][ T91] usb 1-1: USB disconnect, device number 64 [ 406.655708][T21005] pim6reg1: entered promiscuous mode [ 406.661048][T21005] pim6reg1: entered allmulticast mode [ 407.005616][ T30] audit: type=1326 audit(1774660071.963:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21011 comm="syz.1.6763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8d19c799 code=0x7fc00000 [ 407.549417][ T30] audit: type=1326 audit(1774660072.540:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21011 comm="syz.1.6763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff8d13db19 code=0x7fc00000 [ 407.617000][T21049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.992104][ T30] audit: type=1400 audit(1774660073.002:1245): avc: denied { ioctl } for pid=21057 comm="syz.1.6781" path="socket:[69687]" dev="sockfs" ino=69687 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 408.214973][T21075] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6787'. [ 408.232420][ T30] audit: type=1400 audit(1774660073.254:1246): avc: denied { listen } for pid=21076 comm="syz.4.6788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 408.282060][ T30] audit: type=1400 audit(1774660073.307:1247): avc: denied { read } for pid=21078 comm="syz.1.6799" path="socket:[69722]" dev="sockfs" ino=69722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 408.483689][T21092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6794'. [ 408.610539][T21099] loop5: detected capacity change from 0 to 7 [ 408.786268][T21105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6798'. [ 408.840950][T21099] Dev loop5: unable to read RDB block 7 [ 408.845366][ C0] blk_print_req_error: 158 callbacks suppressed [ 408.845384][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 408.862890][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 408.865739][T21099] loop5: unable to read partition table [ 408.877472][T21099] loop5: partition table beyond EOD, truncated [ 408.884908][T21099] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 409.121333][ T5182] Dev loop5: unable to read RDB block 7 [ 409.132015][ T5182] loop5: unable to read partition table [ 409.132273][ T1889] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 409.162779][ T5182] loop5: partition table beyond EOD, truncated [ 409.304776][ T1889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.354998][ T1889] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 409.380298][ T1889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.418670][ T1889] usb 4-1: config 0 descriptor?? [ 409.515413][T21136] netlink: 'syz.2.6811': attribute type 3 has an invalid length. [ 409.523460][T21136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6811'. [ 409.532426][T21136] netlink: 'syz.2.6811': attribute type 3 has an invalid length. [ 409.540507][T21136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6811'. [ 409.678079][T21148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6816'. [ 409.745360][T21151] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6818'. [ 409.754740][T21151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6818'. [ 409.763800][T21151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6818'. [ 409.817213][ T1889] keytouch 0003:0926:3333.0050: fixing up Keytouch IEC report descriptor [ 409.852976][ T1889] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0050/input/input67 [ 409.952514][ T1889] keytouch 0003:0926:3333.0050: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 410.228144][ T1886] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 410.324928][ T792] usb 4-1: USB disconnect, device number 55 [ 410.380414][ T1886] usb 3-1: Using ep0 maxpacket: 16 [ 410.388699][ T1886] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.400361][ T1886] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.410674][ T1886] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 410.424006][ T1886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 410.438749][ T1886] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 410.447915][ T1886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.469327][ T1886] usb 3-1: config 0 descriptor?? [ 410.723035][ T91] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 410.751279][ T5916] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 410.869844][ T91] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 410.892860][ T91] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.924066][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 410.930984][ T91] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 410.948190][ T5916] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 410.959073][ T91] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.970637][ T5916] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 410.981395][ T5916] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.000159][ T91] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 411.011142][ T91] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 411.020314][ T5916] usb 5-1: config 1 interface 0 has no altsetting 0 [ 411.028019][ T91] usb 1-1: Product: syz [ 411.032773][ T91] usb 1-1: Manufacturer: syz [ 411.038264][ T5916] usb 5-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 411.048744][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.067972][ T91] cdc_wdm 1-1:1.0: skipping garbage [ 411.073206][ T91] cdc_wdm 1-1:1.0: skipping garbage [ 411.083805][ T5876] usb 3-1: USB disconnect, device number 58 [ 411.092823][ T5916] usb 5-1: Product: syz [ 411.110082][ T91] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 411.119269][ T5916] usb 5-1: Manufacturer: syz [ 411.139605][ T5916] usb 5-1: SerialNumber: syz [ 411.146022][ T91] cdc_wdm 1-1:1.0: Unknown control protocol [ 411.342709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.358594][ T1886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.360538][ T5916] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 67 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 411.456308][ T91] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 411.568411][ T5916] usb 5-1: USB disconnect, device number 67 [ 411.587930][ T5916] usblp1: removed [ 411.621694][ T91] usb 4-1: config 0 has no interfaces? [ 411.632099][ T91] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 411.642839][ T91] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 411.651564][ T91] usb 4-1: Product: syz [ 411.655927][ T91] usb 4-1: Manufacturer: syz [ 411.664389][ T91] usb 4-1: config 0 descriptor?? [ 411.796283][T21217] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 411.950942][T21228] overlayfs: failed to clone upperpath [ 412.067402][T21205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.078707][T21205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.088553][ T1886] usb 4-1: USB disconnect, device number 56 [ 412.253915][T21239] netlink: 'syz.1.6858': attribute type 10 has an invalid length. [ 412.262530][T21239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6858'. [ 412.332916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.341501][ T1886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.402134][T21243] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 412.857366][T21263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6869'. [ 413.056468][ T5916] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 413.220071][ T5916] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 413.228808][ T5916] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 413.256520][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 413.289948][ T5916] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 413.313631][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 413.321825][ T5916] usb 4-1: Product: syz [ 413.323547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.334177][ T5916] usb 4-1: Manufacturer: syz [ 413.335227][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.338836][ T5916] usb 4-1: SerialNumber: syz [ 413.356139][ T5916] usb 4-1: config 0 descriptor?? [ 413.363801][ T5916] hub 4-1:0.0: bad descriptor, ignoring hub [ 413.369733][ T5916] hub 4-1:0.0: probe with driver hub failed with error -5 [ 413.378333][ C0] wdm_int_callback: 2 callbacks suppressed [ 413.378352][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 413.378605][ T1886] usb 1-1: USB disconnect, device number 65 [ 413.384161][ C0] wdm_int_callback: 2 callbacks suppressed [ 413.384178][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 413.384194][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 413.386983][ T5916] usb 4-1: selecting invalid altsetting 0 [ 413.513888][ T91] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 413.561949][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.685517][ T91] usb 3-1: Using ep0 maxpacket: 8 [ 413.709033][ T91] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.719997][ T91] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 413.740024][ T91] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 413.763347][ T91] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 413.783846][ T91] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 413.817210][ T91] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.855596][T21289] loop5: detected capacity change from 0 to 7 [ 413.868213][ T91] hub 3-1:1.0: bad descriptor, ignoring hub [ 413.874169][ T91] hub 3-1:1.0: probe with driver hub failed with error -5 [ 413.895065][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 413.904737][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 413.928409][ T30] audit: type=1400 audit(1774660079.228:1248): avc: denied { setcurrent } for pid=21290 comm="syz.0.6881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 413.948121][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 413.948155][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 413.971106][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 413.980727][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 413.989778][ T91] cdc_wdm 3-1:1.0: skipping garbage [ 413.995052][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 413.995081][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 414.015705][ T91] cdc_wdm 3-1:1.0: skipping garbage [ 414.026816][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 414.036410][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 414.045788][ T91] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 414.059527][ T91] cdc_wdm 3-1:1.0: Unknown control protocol [ 414.079303][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 414.085927][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 414.092213][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 414.098825][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 414.105482][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 414.112083][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 414.118931][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 414.124345][T21295] vivid-001: ================= START STATUS ================= [ 414.125524][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 414.125878][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 414.141320][T21295] vivid-001: Radio HW Seek Mode: [ 414.146712][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 414.147290][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 414.165007][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 414.171811][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 414.178411][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 414.184686][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 414.191282][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 414.197525][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 414.197578][T21295] Bounded [ 414.204126][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 414.221018][T21292] loop5: detected capacity change from 7 to 0 [ 414.221034][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 414.236680][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 414.244891][T21289] ldm_validate_partition_table(): Disk read failed. [ 414.252422][ T91] usb 3-1: Failed to suspend device, error -71 [ 414.266032][T21295] [ 414.272854][T21295] vivid-001: Radio Programmable HW Seek: false [ 414.276471][ T91] usb 3-1: USB disconnect, device number 59 [ 414.280786][T21289] Dev loop5: unable to read RDB block 0 [ 414.300597][T21295] vivid-001: RDS Rx I/O Mode: Block I/O [ 414.306627][T21289] loop5: unable to read partition table [ 414.314221][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.322854][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.341491][T21295] vivid-001: Generate RBDS Instead of RDS: false [ 414.348692][T21289] loop5: partition table beyond EOD, truncated [ 414.357877][T21289] loop_reread_partitions: partition scan of loop5 (ɍn/C>|n˨,l-"@Iy}c9sGQaG%x?) failed (rc=-5) [ 414.371710][T21295] vivid-001: RDS Reception: true [ 414.383357][T21295] vivid-001: RDS Program Type: 0 inactive [ 414.389573][T21295] vivid-001: RDS PS Name: inactive [ 414.398731][T21261] usb 4-1: reset high-speed USB device number 57 using dummy_hcd [ 414.425038][T21295] vivid-001: RDS Radio Text: inactive [ 414.439808][T21295] vivid-001: RDS Traffic Announcement: false inactive [ 414.446718][T21295] vivid-001: RDS Traffic Program: false inactive [ 414.495413][T21295] vivid-001: RDS Music: false inactive [ 414.507981][T21295] vivid-001: ================== END STATUS ================== [ 414.761544][ T5876] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 414.915346][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 414.926932][ T5876] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.938525][ T5876] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 414.948168][ T5876] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 414.960659][ T5876] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 414.987411][ T5876] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 414.989471][ T1886] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 415.004904][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.009096][ T792] usb 4-1: USB disconnect, device number 57 [ 415.059128][ T5876] hub 3-1:1.0: bad descriptor, ignoring hub [ 415.083477][ T5876] hub 3-1:1.0: probe with driver hub failed with error -5 [ 415.099569][ T5876] cdc_wdm 3-1:1.0: skipping garbage [ 415.112252][ T5876] cdc_wdm 3-1:1.0: skipping garbage [ 415.133422][ T5876] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 415.147105][ T5876] cdc_wdm 3-1:1.0: Unknown control protocol [ 415.161910][ T1886] usb 5-1: Using ep0 maxpacket: 8 [ 415.168718][ T1886] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 415.187548][ T1886] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 415.193356][T21331] 9p: Bad value for 'rfdno' [ 415.224711][ T1886] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 415.246893][ T1886] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.266707][ T1886] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 415.277720][ T1886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.361950][ T5876] usb 3-1: USB disconnect, device number 60 [ 415.483965][ T1886] usb 5-1: GET_CAPABILITIES returned 0 [ 415.499410][ T1886] usbtmc 5-1:16.0: can't read capabilities [ 415.597515][T21342] GUP no longer grows the stack in syz.0.6902 (21342): 200000004000-20000000a000 (200000003000) [ 415.605058][T21348] syz.3.6905 (21348) used obsolete PPPIOCDETACH ioctl [ 415.623313][T21342] CPU: 1 UID: 0 PID: 21342 Comm: syz.0.6902 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.623346][T21342] Tainted: [L]=SOFTLOCKUP [ 415.623354][T21342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.623366][T21342] Call Trace: [ 415.623373][T21342] [ 415.623381][T21342] dump_stack_lvl+0x100/0x190 [ 415.623417][T21342] gup_vma_lookup.cold+0x83/0x96 [ 415.623444][T21342] __get_user_pages+0x241/0x34d0 [ 415.623478][T21342] ? __pfx___get_user_pages+0x10/0x10 [ 415.623499][T21342] ? find_held_lock+0x2b/0x80 [ 415.623529][T21342] __gup_longterm_locked+0x87d/0x16f0 [ 415.623553][T21342] ? __lock_acquire+0x4a5/0x2630 [ 415.623576][T21342] ? avc_has_perm+0x135/0x1e0 [ 415.623596][T21342] ? __pfx___gup_longterm_locked+0x10/0x10 [ 415.623632][T21342] pin_user_pages_remote+0xed/0x140 [ 415.623655][T21342] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 415.623688][T21342] process_vm_rw_core.constprop.0+0x412/0x950 [ 415.623722][T21342] ? __kasan_kmalloc+0xaa/0xb0 [ 415.623756][T21342] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 415.623803][T21342] ? iovec_from_user+0xda/0x140 [ 415.623827][T21342] process_vm_rw+0x309/0x370 [ 415.623860][T21342] ? __pfx_process_vm_rw+0x10/0x10 [ 415.623897][T21342] ? __pfx_css_rstat_updated+0x10/0x10 [ 415.623936][T21342] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 415.623967][T21342] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 415.624007][T21342] ? xfd_validate_state+0x129/0x190 [ 415.624032][T21342] __x64_sys_process_vm_writev+0xe2/0x1c0 [ 415.624062][T21342] ? do_syscall_64+0x95/0xf80 [ 415.624088][T21342] ? lockdep_hardirqs_on+0x78/0x100 [ 415.624112][T21342] do_syscall_64+0x106/0xf80 [ 415.624139][T21342] ? clear_bhb_loop+0x40/0x90 [ 415.624163][T21342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.624189][T21342] RIP: 0033:0x7f721799c799 [ 415.624206][T21342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.624225][T21342] RSP: 002b:00007f7218858028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 415.624245][T21342] RAX: ffffffffffffffda RBX: 00007f7217c15fa0 RCX: 00007f721799c799 [ 415.624258][T21342] RDX: 0000000000000020 RSI: 0000200000001c80 RDI: 0000000000000a95 [ 415.624271][T21342] RBP: 00007f7217a32c99 R08: 0000000000000001 R09: 0000000000000000 [ 415.624283][T21342] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000000 [ 415.624296][T21342] R13: 00007f7217c16038 R14: 00007f7217c15fa0 R15: 00007ffc47186298 [ 415.624325][T21342] [ 415.907344][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 415.916471][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 415.925531][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 415.934566][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 415.943604][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 415.952638][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 415.972048][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 415.981184][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 415.990263][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 415.999312][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.008355][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.086168][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.095265][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.104319][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.113392][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.122451][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.178174][ T1886] usb 5-1: USB disconnect, device number 68 [ 416.295738][ C1] net_ratelimit: 3 callbacks suppressed [ 416.295754][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.312741][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.400222][ T5876] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 416.458263][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.469236][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.479223][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.488769][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.555602][ T30] audit: type=1400 audit(1774660081.999:1249): avc: denied { sqpoll } for pid=21378 comm="syz.2.6919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 416.594527][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 416.608294][ T5876] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 416.618143][ T5876] usb 4-1: config 179 has no interface number 0 [ 416.626743][ T5876] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 416.638398][ T5876] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 416.649943][ T5876] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 416.684965][ T5876] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 416.700615][ T5876] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 416.743023][ T5876] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 416.762652][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.791538][T21356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 416.812153][T21393] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.6926'. [ 416.896769][ T30] audit: type=1400 audit(1774660082.345:1250): avc: denied { mounton } for pid=21394 comm="syz.0.6927" path="/1261/file0" dev="tmpfs" ino=6409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 417.035110][ T5876] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input68 [ 417.225455][ T5876] usb 4-1: USB disconnect, device number 58 [ 417.231559][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 417.231606][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 417.286658][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.298394][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.486560][ T1886] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 417.651262][ T1886] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 417.676723][ T1886] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 417.685641][ T1886] usb 5-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 417.724199][ T1886] usb 5-1: config 220 has no interface number 2 [ 417.737341][ T1886] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 417.774249][ T1886] usb 5-1: config 220 interface 0 has no altsetting 0 [ 417.789023][ T30] audit: type=1326 audit(1774660083.290:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21432 comm="syz.2.6944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe59e59c799 code=0x0 [ 417.812974][ T1886] usb 5-1: config 220 interface 76 has no altsetting 0 [ 417.820953][ T1886] usb 5-1: config 220 interface 1 has no altsetting 0 [ 417.831859][ T1886] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 417.846578][ T1886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.856975][ T1886] usb 5-1: Product: syz [ 417.861264][ T1886] usb 5-1: Manufacturer: syz [ 417.866004][ T1886] usb 5-1: SerialNumber: syz [ 418.091364][ T1886] usb 5-1: selecting invalid altsetting 0 [ 418.101452][ T1886] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 418.109106][ T1886] uvcvideo 5-1:220.0: No valid video chain found. [ 418.126365][ T1886] usb 5-1: selecting invalid altsetting 0 [ 418.142449][ T1886] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 418.162601][ T1886] usb 5-1: USB disconnect, device number 69 [ 418.203368][ T30] audit: type=1400 audit(1774660083.721:1252): avc: denied { ioctl } for pid=21454 comm="syz.0.6954" path="socket:[70377]" dev="sockfs" ino=70377 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 418.241227][T21459] netlink: 203340 bytes leftover after parsing attributes in process `syz.0.6956'. [ 418.277174][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.286035][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.339347][T21461] netlink: 'syz.0.6957': attribute type 13 has an invalid length. [ 418.934096][ T1886] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 418.993539][T21484] bond3: invalid ARP target 0.0.0.0 specified for addition [ 419.001073][T21484] bond3: option arp_ip_target: invalid value (0) [ 419.010121][ T792] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 419.020697][T21484] bond3 (unregistering): Released all slaves [ 419.097389][ T1886] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.131007][ T1886] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 419.153496][ T792] usb 5-1: Using ep0 maxpacket: 16 [ 419.159431][ T1886] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 419.178523][ T1886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.187554][ T792] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 419.204799][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.217803][ T1886] usb 3-1: Product: syz [ 419.226014][ T1886] usb 3-1: Manufacturer: syz [ 419.236561][ T1886] usb 3-1: SerialNumber: syz [ 419.242189][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.254555][ T792] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 419.278946][ T1886] cdc_mbim 3-1:1.0: skipping garbage [ 419.305425][ T792] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 419.323819][ T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.368473][ T792] usb 5-1: config 0 descriptor?? [ 419.464165][T21474] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 419.496293][ T11] block nbd1: Possible stuck request ffff888027af0000: control (read@0,1024B). Runtime 90 seconds [ 419.507872][ T11] block nbd1: Possible stuck request ffff888027af0200: control (read@1024,1024B). Runtime 90 seconds [ 419.520999][ T11] block nbd1: Possible stuck request ffff888027af0400: control (read@2048,1024B). Runtime 90 seconds [ 419.532709][ T11] block nbd1: Possible stuck request ffff888027af0600: control (read@3072,1024B). Runtime 90 seconds [ 419.574945][T21506] netlink: 'syz.1.6975': attribute type 1 has an invalid length. [ 419.615157][T21506] netlink: 'syz.1.6975': attribute type 6 has an invalid length. [ 419.659597][T21506] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6975'. [ 419.690798][ T30] audit: type=1400 audit(1774660085.285:1253): avc: denied { read } for pid=21512 comm="syz.3.6977" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 419.744099][ T30] audit: type=1400 audit(1774660085.327:1254): avc: denied { open } for pid=21512 comm="syz.3.6977" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 419.774276][ T30] audit: type=1400 audit(1774660085.327:1255): avc: denied { ioctl } for pid=21512 comm="syz.3.6977" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 419.850340][ T792] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0052/input/input69 [ 419.858241][T21517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6978'. [ 419.900750][ T792] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0052/input/input70 [ 420.035527][ T792] kye 0003:0458:5013.0052: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 420.067748][T21474] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 420.075762][ T1886] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 420.091314][ T1886] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 420.110826][ T792] usb 5-1: USB disconnect, device number 70 [ 420.236243][T21524] fido_id[21524]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 420.275283][ T1886] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 420.300253][ T1886] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 420.347785][ T1886] wwan wwan0: port wwan0mbim0 attached [ 420.396098][ T1886] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 2a:7a:21:dd:5e:2f [ 420.429154][ T1886] usb 3-1: USB disconnect, device number 61 [ 420.441386][ T1886] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 420.554160][ T1886] wwan wwan0: port wwan0mbim0 disconnected [ 420.606195][ T5798] udevd[5798]: setting mode of /dev/bus/usb/003/061 to 020664 failed: No such file or directory [ 420.627999][ T5798] udevd[5798]: setting owner of /dev/bus/usb/003/061 to uid=0, gid=0 failed: No such file or directory [ 420.749658][T21561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6997'. [ 420.810490][ T91] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 420.848885][ T792] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 420.991546][ T91] usb 1-1: Using ep0 maxpacket: 32 [ 420.997278][T21574] netlink: 184 bytes leftover after parsing attributes in process `syz.4.7002'. [ 421.009517][ T91] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 421.010882][ T792] usb 4-1: Using ep0 maxpacket: 8 [ 421.026639][ T91] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 421.038308][ T792] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.051616][ T91] usb 1-1: config 0 interface 0 has no altsetting 0 [ 421.054892][ T792] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 421.061065][ T91] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 421.070535][ T792] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 421.093112][ T792] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.098498][T21576] syzkaller1: entered promiscuous mode [ 421.107244][ T792] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 421.115539][ T91] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.121426][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.137421][ T91] usb 1-1: Product: syz [ 421.144226][ T91] usb 1-1: Manufacturer: syz [ 421.148852][ T91] usb 1-1: SerialNumber: syz [ 421.154954][T21576] syzkaller1: entered allmulticast mode [ 421.171144][ T91] usb 1-1: config 0 descriptor?? [ 421.349674][ T792] usb 4-1: GET_CAPABILITIES returned 0 [ 421.362839][ T792] usbtmc 4-1:16.0: can't read capabilities [ 421.464229][ T30] audit: type=1400 audit(1774660087.143:1256): avc: denied { block_suspend } for pid=21592 comm="syz.4.7011" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 421.590406][ T91] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 421.598266][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 421.610102][ T5876] usb 4-1: USB disconnect, device number 59 [ 421.896852][T21609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7018'. [ 421.927896][T21609] hsr_slave_1 (unregistering): left promiscuous mode [ 422.194003][ T91] usb 1-1: USB disconnect, device number 66 [ 422.242230][ T792] page_pool_release_retry() stalled pool shutdown: id 68, 1 inflight 60 sec [ 422.356110][T21627] SELinux: failed to load policy [ 422.508321][T21635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7030'. [ 423.058861][ T91] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 423.084718][T21674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7043'. [ 423.231431][ T91] usb 5-1: Using ep0 maxpacket: 32 [ 423.238293][ T91] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 423.252118][ T91] usb 5-1: config 0 has no interface number 0 [ 423.274773][ T91] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 423.284251][ T91] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.303791][ T91] usb 5-1: Product: syz [ 423.309078][ T91] usb 5-1: Manufacturer: syz [ 423.322866][ T91] usb 5-1: SerialNumber: syz [ 423.330519][ T91] usb 5-1: config 0 descriptor?? [ 423.420411][ T5876] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 423.591993][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 423.598722][ T5876] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 423.618068][ T5876] usb 4-1: config 0 has no interface number 0 [ 423.630846][ T5876] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 423.654813][ T5876] usb 4-1: config 0 interface 85 has no altsetting 0 [ 423.666149][ T5876] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 423.677078][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.685815][ T5876] usb 4-1: Product: syz [ 423.691457][ T5876] usb 4-1: Manufacturer: syz [ 423.696203][ T5876] usb 4-1: SerialNumber: syz [ 423.706537][ T5876] usb 4-1: config 0 descriptor?? [ 423.782635][ T792] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 423.925218][ T792] usb 1-1: Using ep0 maxpacket: 16 [ 423.937512][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.960606][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.981948][ T792] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 424.007079][ T792] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 424.030433][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.050509][ T792] usb 1-1: config 0 descriptor?? [ 424.120341][ T91] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 424.185615][ T51] Bluetooth: hci2: unexpected event for opcode 0x080d [ 424.308829][ T5876] appletouch 4-1:0.85: Geyser mode initialized. [ 424.322274][ T91] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 424.337793][ T5876] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input71 [ 424.352562][ T91] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 424.392249][ T91] usb 5-1: USB disconnect, device number 71 [ 424.468976][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 424.470127][ T792] hid_parser_main: 92 callbacks suppressed [ 424.470142][ T792] appleir 0003:05AC:8241.0053: unknown main item tag 0x0 [ 424.504232][ T792] appleir 0003:05AC:8241.0053: unknown main item tag 0x0 [ 424.527493][ T1889] usb 4-1: USB disconnect, device number 60 [ 424.560588][ T792] appleir 0003:05AC:8241.0053: unknown main item tag 0x0 [ 424.568904][ T792] appleir 0003:05AC:8241.0053: unknown main item tag 0x0 [ 424.577075][ T792] appleir 0003:05AC:8241.0053: item fetching failed at offset 4/5 [ 424.582515][T21713] netlink: 'syz.1.7063': attribute type 29 has an invalid length. [ 424.586126][ T792] appleir 0003:05AC:8241.0053: parse failed [ 424.599755][ T1889] appletouch 4-1:0.85: input: appletouch disconnected [ 424.608669][T21713] netlink: 'syz.1.7063': attribute type 29 has an invalid length. [ 424.615014][ T792] appleir 0003:05AC:8241.0053: probe with driver appleir failed with error -22 [ 424.631829][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 424.632711][T21713] netlink: 500 bytes leftover after parsing attributes in process `syz.1.7063'. [ 424.646937][T21713] unsupported nla_type 58 [ 424.651959][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.669476][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 424.681302][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 424.691388][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 424.706733][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 424.714827][ T792] usb 1-1: USB disconnect, device number 67 [ 424.722339][ T30] audit: type=1400 audit(1774660090.555:1257): avc: denied { read } for pid=21689 comm="syz.0.7051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 424.743632][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 424.751799][ T10] usb 3-1: SerialNumber: syz [ 424.774222][T21705] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 424.782305][T21705] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 424.791586][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 424.800060][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 424.802608][T21717] 9p: Bad value for 'rfdno' [ 424.991735][T21705] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 425.001907][T21705] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 425.175938][T21731] 9pnet: p9_errstr2errno: server reported unknown error [ 425.432847][ T10] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 425.497396][T21747] netlink: 'syz.4.7078': attribute type 1 has an invalid length. [ 425.530176][T21747] netlink: 'syz.4.7078': attribute type 2 has an invalid length. [ 425.608110][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 425.627861][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 425.772888][T21758] overlayfs: failed to clone upperpath [ 425.779099][ T91] usb 3-1: USB disconnect, device number 62 [ 425.794974][ T91] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 426.315201][T21782] bridge1: entered promiscuous mode [ 426.338252][T21782] bridge1: entered allmulticast mode [ 426.367167][T21782] team0: Port device bridge1 added [ 426.526205][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 426.697846][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 426.706884][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 426.720958][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.752604][ T10] usb 3-1: config 0 descriptor?? [ 426.781820][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 427.714144][T21853] overlayfs: failed to clone upperpath [ 427.754151][ T91] usb 3-1: USB disconnect, device number 63 [ 427.821406][ T10] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 427.904438][T21859] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7117'. [ 427.992739][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 427.999611][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 428.012987][ T10] usb 1-1: config 0 has no interface number 0 [ 428.019109][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 428.036856][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 428.046763][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.058100][ T10] usb 1-1: Product: syz [ 428.064203][ T10] usb 1-1: Manufacturer: syz [ 428.070966][ T10] usb 1-1: SerialNumber: syz [ 428.077870][ T10] usb 1-1: config 0 descriptor?? [ 428.178203][T21877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.717524][ T91] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 428.766360][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 428.803096][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 428.945316][ T91] usb 5-1: Using ep0 maxpacket: 16 [ 428.962276][ T91] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 429.001150][ T91] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 429.034400][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 429.048540][ T91] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.092630][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 429.106944][ T91] usb 5-1: Product: syz [ 429.120240][ T91] usb 5-1: Manufacturer: syz [ 429.134843][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 429.151544][ T91] usb 5-1: SerialNumber: syz [ 429.187571][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 429.200546][ T91] usb 5-1: config 0 descriptor?? [ 429.228038][ T91] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 429.252453][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 429.287735][ T91] usb 5-1: Detected FT232R [ 429.346668][ T10] usb 1-1: USB disconnect, device number 68 [ 429.699257][ T30] audit: type=1326 audit(1774660095.783:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21925 comm="syz.3.7147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde0af9c799 code=0x0 [ 429.730803][T21930] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.7148'. [ 429.829378][ T91] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 430.032045][ T91] usb 5-1: USB disconnect, device number 72 [ 430.059787][ T91] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 430.091486][ T91] ftdi_sio 5-1:0.0: device disconnected [ 430.652232][T21978] sctp: [Deprecated]: syz.2.7169 (pid 21978) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.652232][T21978] Use struct sctp_sack_info instead [ 430.763572][T21988] erspan0: entered promiscuous mode [ 430.775324][T21988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7174'. [ 431.164686][ T792] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 431.314142][ T792] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 431.330756][ T792] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 431.343642][ T792] usb 4-1: Product: syz [ 431.348091][ T792] usb 4-1: Manufacturer: syz [ 431.353208][ T792] usb 4-1: SerialNumber: syz [ 431.362772][ T792] usb 4-1: config 0 descriptor?? [ 431.380291][ T792] ch341 4-1:0.0: ch341-uart converter detected [ 431.430351][T22018] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 431.572677][T22022] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 431.704642][T22032] netlink: 'syz.1.7193': attribute type 83 has an invalid length. [ 432.083566][T22051] cgroup: fork rejected by pids controller in /syz0 [ 432.338967][ T792] ch341-uart ttyUSB0: failed to read break control: -71 [ 432.346086][ T792] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 432.359327][ T792] usb 4-1: USB disconnect, device number 61 [ 432.366643][ T792] ch341 4-1:0.0: device disconnected [ 432.535400][T22091] netlink: 'syz.4.7204': attribute type 11 has an invalid length. [ 432.574713][T22095] sctp: [Deprecated]: syz.4.7205 (pid 22095) Use of struct sctp_assoc_value in delayed_ack socket option. [ 432.574713][T22095] Use struct sctp_sack_info instead [ 432.710201][ T30] audit: type=1400 audit(1774660098.953:1259): avc: denied { create } for pid=22101 comm="syz.1.7208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 432.737410][ T30] audit: type=1400 audit(1774660098.953:1260): avc: denied { setopt } for pid=22101 comm="syz.1.7208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 432.782256][ T30] audit: type=1400 audit(1774660098.953:1261): avc: denied { write } for pid=22101 comm="syz.1.7208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 432.788990][T22105] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7210'. [ 432.927134][ T91] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 433.108006][ T91] usb 5-1: Using ep0 maxpacket: 32 [ 433.126037][ T91] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.143741][ T91] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.156763][ T91] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 433.166389][ T91] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.179183][ T91] usb 5-1: config 0 descriptor?? [ 433.531591][T22143] netlink: 'syz.3.7227': attribute type 1 has an invalid length. [ 433.600224][ T91] savu 0003:1E7D:2D5A.0054: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 433.603652][ T1886] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 433.655607][ T30] audit: type=1400 audit(1774660099.951:1262): avc: denied { mount } for pid=22148 comm="syz.1.7229" name="/" dev="ramfs" ino=73285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 433.774977][ T792] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 433.804578][ T1886] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.816248][ T1886] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.832696][ T1886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 433.843737][ T1889] usb 5-1: USB disconnect, device number 73 [ 433.858668][ T1886] usb 1-1: SerialNumber: syz [ 433.894435][ T1886] usb 1-1: bad CDC descriptors [ 433.939984][ T792] usb 3-1: Using ep0 maxpacket: 32 [ 433.966069][ T792] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 433.991169][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.023799][ T792] usb 3-1: config 0 descriptor?? [ 434.063699][ T30] audit: type=1400 audit(1774660100.370:1263): avc: denied { create } for pid=22161 comm="syz.3.7236" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 434.085091][ T30] audit: type=1400 audit(1774660100.370:1264): avc: denied { recv } for pid=22161 comm="syz.3.7236" saddr=10.128.0.169 src=30006 daddr=10.128.0.10 dest=51432 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 434.146309][ T5916] usb 1-1: USB disconnect, device number 69 [ 434.262137][ T792] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 434.292481][ T792] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 434.318289][ T792] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 434.325464][ T792] usb 3-1: media controller created [ 434.380923][ T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 434.475456][ T792] az6027: usb out operation failed. (-71) [ 434.484934][ T792] az6027: usb out operation failed. (-71) [ 434.505670][ T792] stb0899_attach: Driver disabled by Kconfig [ 434.518113][ T792] az6027: no front-end attached [ 434.518113][ T792] [ 434.547025][ T792] az6027: usb out operation failed. (-71) [ 434.552783][ T792] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 434.607256][ T792] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input72 [ 434.635405][ T792] dvb-usb: schedule remote query interval to 400 msecs. [ 434.652003][ T792] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 434.677420][ T792] usb 3-1: USB disconnect, device number 64 [ 434.745106][ T792] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 434.784511][ T5916] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 434.968700][ T5916] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 434.978440][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.986854][ T5916] usb 4-1: Product: syz [ 434.991778][ T5916] usb 4-1: Manufacturer: syz [ 434.996600][ T5916] usb 4-1: SerialNumber: syz [ 435.013459][ C0] hrtimer: interrupt took 19939 ns [ 435.023542][ T5916] usb 4-1: config 0 descriptor?? [ 435.037578][ T5916] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 062 [ 435.280399][ T30] audit: type=1400 audit(1774660101.651:1265): avc: denied { listen } for pid=22212 comm="syz.2.7257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 435.301182][ T30] audit: type=1400 audit(1774660101.672:1266): avc: denied { accept } for pid=22212 comm="syz.2.7257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 435.422597][ T30] audit: type=1326 audit(1774660101.798:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22216 comm="syz.0.7259" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f721799c799 code=0x0 [ 435.461112][ T5916] (null): failure reading functionality [ 435.484271][ T5916] i2c i2c-1: connected i2c-tiny-usb device [ 435.664182][ T30] audit: type=1400 audit(1774660102.050:1268): avc: denied { write } for pid=22226 comm="syz.1.7262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 435.678961][ T10] usb 4-1: USB disconnect, device number 62 [ 435.811897][T22231] netlink: 'syz.4.7264': attribute type 9 has an invalid length. [ 435.823220][T22231] netlink: 'syz.4.7264': attribute type 11 has an invalid length. [ 435.832646][T22231] netlink: 'syz.4.7264': attribute type 12 has an invalid length. [ 435.841588][T22231] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.7264'. [ 435.877479][T22231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7264'. [ 436.334934][T22246] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3953730850 (126519387200 ns) > initial count (63107534848 ns). Using initial count to start timer. [ 436.684843][T22266] usb usb8: usbfs: process 22266 (syz.2.7280) did not claim interface 0 before use [ 437.727263][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7290'. [ 438.593881][T22282] ip6_vti0 speed is unknown, defaulting to 1000 [ 439.065113][T22283] ip6_vti0 speed is unknown, defaulting to 1000 [ 439.588448][T22339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7309'. [ 440.345291][T22358] netlink: 666 bytes leftover after parsing attributes in process `syz.4.7317'. [ 440.516619][T22362] ip6_vti0 speed is unknown, defaulting to 1000 [ 440.700485][ T1889] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 440.853198][ T1889] usb 3-1: Using ep0 maxpacket: 16 [ 440.897113][ T1889] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 440.912797][ T1889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.940745][ T1889] usb 3-1: Product: syz [ 440.944997][ T1889] usb 3-1: Manufacturer: syz [ 440.953270][ T1889] usb 3-1: SerialNumber: syz [ 441.092663][T22374] ip6_vti0 speed is unknown, defaulting to 1000 [ 441.191106][ T1889] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 441.266957][ T1889] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 441.293212][ T1889] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 441.309785][ T1889] usb 3-1: media controller created [ 441.335337][T22379] ip6_vti0 speed is unknown, defaulting to 1000 [ 441.349685][ T1889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.359870][T22385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7327'. [ 441.397933][ T1889] zl10353_read_register: readreg error (reg=127, ret==-71) [ 441.542181][ T1889] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 441.595261][ T1889] usb 3-1: USB disconnect, device number 65 [ 441.890859][ T49] tipc: Subscription rejected, illegal request [ 442.560888][T22426] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7342'. [ 442.588855][T22426] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7342'. [ 442.745584][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 442.913180][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 442.922150][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 442.964269][ T10] usb 4-1: config 1 has an invalid interface number: 234 but max is 2 [ 442.992336][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.020351][ T10] usb 4-1: config 1 has no interface number 2 [ 443.037277][ T10] usb 4-1: too many endpoints for config 1 interface 234 altsetting 255: 255, using maximum allowed: 30 [ 443.044010][ T1886] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 443.055164][ T10] usb 4-1: config 1 interface 234 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 443.111618][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 443.127726][T22447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7351'. [ 443.146919][ T10] usb 4-1: config 1 interface 234 has no altsetting 0 [ 443.170032][ T10] usb 4-1: config 1 interface 1 has no altsetting 0 [ 443.203449][ T10] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 443.217001][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.236575][ T1886] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 443.252236][ T1886] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 443.273682][ T1886] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 443.283406][ T1886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.300432][ T10] usb 4-1: Product: syz [ 443.307676][ T10] usb 4-1: Manufacturer: syz [ 443.332576][ T10] usb 4-1: SerialNumber: syz [ 443.348332][T22438] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 443.359036][ T1886] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 443.507152][ T5799] udevd[5799]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 443.591919][ T5798] udevd[5798]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 443.651200][ T10] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 443.657739][ T30] audit: type=1400 audit(1774660110.449:1269): avc: denied { mounton } for pid=22457 comm="syz.1.7355" path="/file0" dev="ramfs" ino=75111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 443.661858][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 443.682328][T22458] overlayfs: failed to clone lowerpath [ 443.717757][ T10] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 443.761588][ T10] snd-usb-audio 4-1:1.234: probe with driver snd-usb-audio failed with error -22 [ 443.824429][ T10] usb 4-1: 1:2 : does not exist [ 443.908747][ T10] usb 4-1: USB disconnect, device number 63 [ 443.986215][ T91] usb 1-1: USB disconnect, device number 70 [ 444.303075][ T30] audit: type=1400 audit(1774660111.120:1270): avc: denied { bind } for pid=22471 comm="syz.4.7361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 444.621664][T22485] netlink: 'syz.1.7366': attribute type 1 has an invalid length. [ 444.658083][T22485] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.691084][ T1889] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 444.798258][T22485] bond2: (slave geneve4): making interface the new active one [ 444.832941][T22485] bond2: (slave geneve4): Enslaving as an active interface with an up link [ 444.842253][ T1090] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.869888][ T1090] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.885468][ T1889] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 444.900820][ T1889] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 444.919637][ T1090] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.938852][ T1889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 444.950133][T22492] tipc: Started in network mode [ 444.955041][T22492] tipc: Node identity 7f000001, cluster identity 4711 [ 444.965120][T22492] tipc: Enabling of bearer rejected, failed to enable media [ 444.970132][ T1889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 444.994699][ T1889] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 445.008171][ T1090] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.017872][ T1889] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 445.027981][ T1889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.052280][ T1889] usb 4-1: config 0 descriptor?? [ 445.059705][T22474] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 445.215741][ T10] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 445.368011][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 445.396472][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 445.420068][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 445.439975][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.454747][ T10] usb 1-1: config 0 descriptor?? [ 445.458574][ T1889] plantronics 0003:047F:FFFF.0055: reserved main item tag 0xd [ 445.519196][ T1889] plantronics 0003:047F:FFFF.0055: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 445.678641][ T10] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 445.818069][ T1889] usb 4-1: USB disconnect, device number 64 [ 446.073532][ T10] usb 1-1: USB disconnect, device number 71 [ 446.086613][T22534] netlink: 'syz.1.7387': attribute type 12 has an invalid length. [ 446.104252][T22534] netlink: 'syz.1.7387': attribute type 29 has an invalid length. [ 446.136563][T22534] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7387'. [ 446.152323][T22534] netlink: 'syz.1.7387': attribute type 2 has an invalid length. [ 446.173945][T22534] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7387'. [ 446.384143][T22548] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7393'. [ 446.438874][ T30] audit: type=1400 audit(1774660113.367:1271): avc: denied { create } for pid=22553 comm="syz.2.7396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 446.464296][T22555] bridge_slave_0: left allmulticast mode [ 446.470918][T22555] bridge_slave_0: left promiscuous mode [ 446.477775][T22555] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.496341][T22555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.514842][T22555] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 446.595853][ T30] audit: type=1400 audit(1774660113.524:1272): avc: denied { write } for pid=22553 comm="syz.2.7396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 446.660590][ T30] audit: type=1400 audit(1774660113.524:1273): avc: denied { nlmsg_write } for pid=22553 comm="syz.2.7396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 446.998332][T22587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7408'. [ 447.020846][T22587] xfrm1: entered promiscuous mode [ 447.026731][T22587] xfrm1: entered allmulticast mode [ 447.032407][T22587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7408'. [ 447.133645][T22593] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.7411'. [ 447.149544][T22593] netlink: Conntrack attr has 4 unknown bytes [ 447.200971][T22596] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 447.223020][ T30] audit: type=1400 audit(1774660114.186:1274): avc: denied { nlmsg_read } for pid=22588 comm="syz.2.7409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 447.333875][T22602] netlink: 'syz.1.7414': attribute type 1 has an invalid length. [ 447.341759][T22602] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.7414'. [ 447.388151][ T30] audit: type=1400 audit(1774660114.364:1275): avc: denied { bind } for pid=22605 comm="syz.0.7416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 447.648670][ T5916] libceph: connect (1)[c::]:6789 error -101 [ 447.656698][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 447.684358][ T5916] libceph: connect (1)[b::]:6789 error -101 [ 447.690468][ T5916] libceph: mon0 (1)[b::]:6789 connect error [ 447.699063][ T5916] libceph: connect (1)[b::]:6789 error -101 [ 447.705388][ T5916] libceph: mon0 (1)[b::]:6789 connect error [ 447.907165][T22638] random: crng reseeded on system resumption [ 447.920282][ T5916] libceph: connect (1)[c::]:6789 error -101 [ 447.928598][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 447.959029][ T5916] libceph: connect (1)[b::]:6789 error -101 [ 447.969108][ T5916] libceph: mon0 (1)[b::]:6789 connect error [ 448.160358][ T11] block nbd1: Possible stuck request ffff888027af0000: control (read@0,1024B). Runtime 120 seconds [ 448.199023][ T11] block nbd1: Possible stuck request ffff888027af0200: control (read@1024,1024B). Runtime 120 seconds [ 448.210545][ T11] block nbd1: Possible stuck request ffff888027af0400: control (read@2048,1024B). Runtime 120 seconds [ 448.225541][ T11] block nbd1: Possible stuck request ffff888027af0600: control (read@3072,1024B). Runtime 120 seconds [ 448.394031][T22617] ceph: No mds server is up or the cluster is laggy [ 448.394031][T22621] ceph: No mds server is up or the cluster is laggy [ 448.435090][ T10] libceph: connect (1)[c::]:6789 error -101 [ 448.446766][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 448.467439][ T10] libceph: connect (1)[b::]:6789 error -101 [ 448.481164][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 449.244258][T22682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7442'. [ 449.253623][T22682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7442'. [ 449.284283][T22682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7442'. [ 449.311556][T22682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7442'. [ 449.529824][T22694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7445'. [ 449.650504][ T30] audit: type=1400 audit(1774660116.737:1276): avc: denied { write } for pid=22691 comm="syz.4.7446" path="socket:[75669]" dev="sockfs" ino=75669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 449.851350][ T5798] udevd[5798]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 451.045017][ T10] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 451.073612][T22731] netlink: 'syz.0.7460': attribute type 1 has an invalid length. [ 451.092042][T22728] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7459'. [ 451.173901][T22732] bond2 (unregistering): Released all slaves [ 451.216540][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 451.243153][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 451.302465][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 451.318082][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 451.379665][T22731] bond2: entered promiscuous mode [ 451.385192][T22731] 8021q: adding VLAN 0 to HW filter on device bond2 [ 451.420795][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.482655][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 451.502037][T22738] ip6tnl3: entered promiscuous mode [ 451.522552][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.672058][T22745] syzkaller1: entered promiscuous mode [ 451.681873][T22745] syzkaller1: entered allmulticast mode [ 451.756930][ T10] usb 5-1: usb_control_msg returned -32 [ 451.765945][ T10] usbtmc 5-1:16.0: can't read capabilities [ 451.946583][T22757] SELinux: failed to load policy [ 452.728806][T22778] bridge_slave_0: left allmulticast mode [ 452.746999][T22778] bridge_slave_0: left promiscuous mode [ 452.754293][T22778] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.814267][T22778] bridge_slave_1: left allmulticast mode [ 452.826207][T22778] bridge_slave_1: left promiscuous mode [ 452.837300][T22778] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.865521][T22778] bond0: (slave bond_slave_0): Releasing backup interface [ 452.897494][T22778] bond0: (slave bond_slave_1): Releasing backup interface [ 452.916334][T22778] team0: Port device team_slave_0 removed [ 452.935937][T22778] team0: Port device team_slave_1 removed [ 452.945163][T22778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.964741][T22778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.985584][T22778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.005042][T22778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.033153][T22778] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 453.488823][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054e56000: rx timeout, send abort [ 453.499025][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054e56000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 453.622323][T22806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7489'. [ 453.687464][ T1889] usb 5-1: USB disconnect, device number 74 [ 454.552563][ T30] audit: type=1400 audit(1774660121.881:1277): avc: denied { node_bind } for pid=22850 comm="syz.4.7508" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 454.874904][T22866] netlink: 'syz.4.7516': attribute type 3 has an invalid length. [ 454.891332][T22866] netlink: 208 bytes leftover after parsing attributes in process `syz.4.7516'. [ 454.900642][T22866] netlink: 'syz.4.7516': attribute type 3 has an invalid length. [ 454.909503][T22866] netlink: 208 bytes leftover after parsing attributes in process `syz.4.7516'. [ 455.074335][ T1889] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 455.076139][ T30] audit: type=1326 audit(1774660122.437:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22875 comm="syz.1.7522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8d19c799 code=0x7ffc0000 [ 455.118902][ T30] audit: type=1326 audit(1774660122.437:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22875 comm="syz.1.7522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8d19c799 code=0x7ffc0000 [ 455.143542][ T30] audit: type=1326 audit(1774660122.469:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22875 comm="syz.1.7522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8d19c799 code=0x7ffc0000 [ 455.167406][ T30] audit: type=1326 audit(1774660122.469:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22875 comm="syz.1.7522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7eff8d19c799 code=0x7ffc0000 [ 455.195201][ T30] audit: type=1326 audit(1774660122.469:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22875 comm="syz.1.7522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8d19c799 code=0x7ffc0000 [ 455.219610][ T30] audit: type=1326 audit(1774660122.479:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22875 comm="syz.1.7522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8d19c799 code=0x7ffc0000 [ 455.247619][ T30] audit: type=1326 audit(1774660122.479:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22875 comm="syz.1.7522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8d19c799 code=0x7ffc0000 [ 455.272513][ T30] audit: type=1326 audit(1774660122.479:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22875 comm="syz.1.7522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8d19c799 code=0x7ffc0000 [ 455.297213][ T30] audit: type=1326 audit(1774660122.479:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22875 comm="syz.1.7522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7eff8d19c799 code=0x7ffc0000 [ 455.321548][ T1889] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 455.333102][ T1889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.342155][ T1889] usb 4-1: Product: syz [ 455.346588][ T1889] usb 4-1: Manufacturer: syz [ 455.353206][ T1889] usb 4-1: SerialNumber: syz [ 455.360423][ T1889] usb 4-1: config 0 descriptor?? [ 455.370319][ T1889] hub 4-1:0.0: bad descriptor, ignoring hub [ 455.378974][ T1889] hub 4-1:0.0: probe with driver hub failed with error -5 [ 455.564864][ T1889] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 455.602512][ T1889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 455.611722][T22894] bridge_slave_0: left allmulticast mode [ 455.611747][T22894] bridge_slave_0: left promiscuous mode [ 455.611932][T22894] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.633077][ T1889] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 455.637111][T22894] bridge_slave_1: left allmulticast mode [ 455.641850][ T1889] usb 4-1: media controller created [ 455.664337][T22894] bridge_slave_1: left promiscuous mode [ 455.669459][ T1889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.676519][T22894] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.707619][T22894] bond0: (slave bond_slave_0): Releasing backup interface [ 455.716724][T22894] bond0: (slave bond_slave_1): Releasing backup interface [ 455.725101][ T1889] DVB: Unable to find symbol dib7000p_attach() [ 455.731286][ T1889] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 455.731808][T22894] team0: Port device team_slave_0 removed [ 455.747670][T22894] team0: Port device team_slave_1 removed [ 455.755189][T22894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.763764][T22894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.774327][T22894] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 455.807530][ T1889] rc_core: IR keymap rc-dib0700-rc5 not found [ 455.813776][ T1889] Registered IR keymap rc-empty [ 455.819103][ T1889] dvb-usb: could not initialize remote control. [ 455.825459][ T1889] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 455.962580][T22907] netlink: 'syz.4.7534': attribute type 29 has an invalid length. [ 455.972874][T22907] netlink: 'syz.4.7534': attribute type 29 has an invalid length. [ 455.982933][T22907] netlink: 500 bytes leftover after parsing attributes in process `syz.4.7534'. [ 456.185014][T22915] i2c i2c-1: Invalid block size returned: 58 [ 456.376902][ T1889] usb 4-1: USB disconnect, device number 65 [ 456.427717][ T1889] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 456.845382][ T51] block nbd2: Receive control failed (result -107) [ 456.960363][T22927] nbd2: detected capacity change from 0 to 127 [ 457.009418][ T5798] block nbd2: Dead connection, failed to find a fallback [ 457.017520][ T5798] block nbd2: shutting down sockets [ 457.048333][ T5798] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 457.113458][ T5798] Buffer I/O error on dev nbd2, logical block 0, async page read [ 457.121296][ T5798] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 457.181488][ T5798] Buffer I/O error on dev nbd2, logical block 1, async page read [ 457.193794][ T5798] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 457.214261][ T5798] Buffer I/O error on dev nbd2, logical block 2, async page read [ 457.237771][ T5798] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 457.249070][ T5798] Buffer I/O error on dev nbd2, logical block 3, async page read [ 457.257278][ T5798] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 457.259086][T22947] syzkaller1: entered promiscuous mode [ 457.267134][ T5798] Buffer I/O error on dev nbd2, logical block 0, async page read [ 457.280447][ T5798] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 457.288456][T22947] syzkaller1: entered allmulticast mode [ 457.290234][ T5798] Buffer I/O error on dev nbd2, logical block 1, async page read [ 457.324237][ T5798] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 457.340899][ T5798] Buffer I/O error on dev nbd2, logical block 2, async page read [ 457.349338][ T5798] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 457.359648][ T5798] Buffer I/O error on dev nbd2, logical block 3, async page read [ 457.367791][ T5798] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 457.380038][ T5798] Buffer I/O error on dev nbd2, logical block 0, async page read [ 457.387963][ T5798] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 457.407339][ T5798] Buffer I/O error on dev nbd2, logical block 1, async page read [ 457.419128][ T5798] ldm_validate_partition_table(): Disk read failed. [ 457.426293][ T5798] Dev nbd2: unable to read RDB block 0 [ 457.432715][ T5798] nbd2: unable to read partition table [ 457.448114][ T5798] ldm_validate_partition_table(): Disk read failed. [ 457.455248][ T5798] Dev nbd2: unable to read RDB block 0 [ 457.461154][ T5917] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 457.489071][ T5798] nbd2: unable to read partition table [ 457.617332][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 457.628419][ T5917] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 457.645597][ T5917] usb 3-1: config 0 has no interface number 0 [ 457.662532][ T5917] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 457.677900][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.694127][ T5917] usb 3-1: Product: syz [ 457.700427][ T5917] usb 3-1: Manufacturer: syz [ 457.706055][ T5917] usb 3-1: SerialNumber: syz [ 457.725602][ T5917] usb 3-1: config 0 descriptor?? [ 457.744996][ T5917] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 457.768615][T22969] xt_hashlimit: size too large, truncated to 1048576 [ 457.954610][ T5917] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 457.992732][ T5917] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 458.404425][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 458.404759][T22781] usb 3-1: USB disconnect, device number 66 [ 458.464634][T22781] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 458.504057][T22781] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 458.536549][T22781] quatech2 3-1:0.51: device disconnected [ 458.589984][T22995] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7569'. [ 459.046094][T23009] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.7576'. [ 459.637738][T23038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7587'. [ 460.961100][T23093] dvmrp0: entered allmulticast mode [ 461.071476][ T30] kauditd_printk_skb: 2051 callbacks suppressed [ 461.071495][ T30] audit: type=1400 audit(1774660128.726:3338): avc: denied { ioctl } for pid=23097 comm="syz.4.7612" path="pid:[4026532800]" dev="nsfs" ino=4026532800 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 461.265863][ T5869] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 461.437287][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 461.444781][ T5869] usb 3-1: unable to get BOS descriptor or descriptor too short [ 461.458243][ T5869] usb 3-1: config 1 interface 0 altsetting 58 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 461.470067][ T5869] usb 3-1: config 1 interface 0 has no altsetting 0 [ 461.479582][ T5869] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.40 [ 461.489551][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.497928][ T5869] usb 3-1: Product: syz [ 461.502190][ T5869] usb 3-1: Manufacturer: syz [ 461.507183][ T5869] usb 3-1: SerialNumber: syz [ 461.909926][T23136] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 461.945028][T23136] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 461.956468][T23136] overlayfs: failed to look up (tracing) for ino (-66) [ 462.313547][ T24] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 462.411108][ T30] audit: type=1326 audit(1774660130.132:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23160 comm="syz.0.7639" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f721799c799 code=0x0 [ 462.465965][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 462.472706][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.484655][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 462.486254][ T5869] elecom 0003:056E:010C.0056: invalid report_size -1306074948 [ 462.494772][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 462.501447][ T5869] elecom 0003:056E:010C.0056: item 0 4 1 7 parsing failed [ 462.513900][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 462.520555][ T5869] elecom 0003:056E:010C.0056: probe with driver elecom failed with error -22 [ 462.531662][ T24] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 462.550201][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.566504][ T24] hub 4-1:1.0: bad descriptor, ignoring hub [ 462.572974][ T24] hub 4-1:1.0: probe with driver hub failed with error -5 [ 462.581891][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 462.587205][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 462.593613][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 462.600534][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 462.700862][ T24] usb 3-1: USB disconnect, device number 67 [ 463.198968][ T30] audit: type=1326 audit(1774660130.951:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23169 comm="syz.4.7642" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64a0f9c799 code=0x0 [ 463.439995][T23142] usb 4-1: reset high-speed USB device number 66 using dummy_hcd [ 463.509755][T23180] "syz.0.7646" (23180) uses obsolete ecb(arc4) skcipher [ 463.532857][ T5869] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 463.555426][ T30] audit: type=1400 audit(1774660131.340:3341): avc: denied { connect } for pid=23184 comm="syz.0.7647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 463.620790][T23142] usb 4-1: device firmware changed [ 463.630877][T23142] cdc_wdm 4-1:1.0: Error autopm - -16 [ 463.630993][ T1889] usb 4-1: USB disconnect, device number 66 [ 463.707729][ T5869] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.718827][ T5869] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 463.735537][ T5869] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 463.760044][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.779706][T23189] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7649'. [ 463.783828][ T5869] usb 3-1: Product: syz [ 463.789278][ T1889] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 463.802980][ T5869] usb 3-1: Manufacturer: syz [ 463.815741][ T5869] usb 3-1: SerialNumber: syz [ 463.963538][ T1889] usb 4-1: Using ep0 maxpacket: 8 [ 463.974553][ T1889] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.985701][ T1889] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 464.013890][ T1889] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 464.038831][T23177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.051586][ T1889] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 464.053052][T23177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.070485][ T1889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.101321][ T1889] hub 4-1:1.0: bad descriptor, ignoring hub [ 464.101495][ T5869] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 464.111006][ T1889] hub 4-1:1.0: probe with driver hub failed with error -5 [ 464.143205][ T1889] cdc_wdm 4-1:1.0: skipping garbage [ 464.146386][T22781] libceph: connect (1)[c::]:6789 error -101 [ 464.158326][ T5869] usb 3-1: USB disconnect, device number 68 [ 464.164538][T22781] libceph: mon0 (1)[c::]:6789 connect error [ 464.182214][ T1889] cdc_wdm 4-1:1.0: skipping garbage [ 464.202106][ T24] libceph: connect (1)[c::]:6789 error -101 [ 464.208900][ T1889] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 464.224234][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 464.322794][ T49] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 464.410088][T22781] libceph: connect (1)[c::]:6789 error -101 [ 464.419046][T22781] libceph: mon0 (1)[c::]:6789 connect error [ 464.439195][T22781] usb 4-1: USB disconnect, device number 67 [ 464.487833][ T24] libceph: connect (1)[c::]:6789 error -101 [ 464.512939][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 464.647604][ T5869] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 464.828229][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 464.843127][ T5869] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 464.860058][ T5869] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 464.876516][T23199] ceph: No mds server is up or the cluster is laggy [ 464.883731][T23204] ceph: No mds server is up or the cluster is laggy [ 464.885549][ T5869] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 464.914407][T22781] libceph: connect (1)[c::]:6789 error -101 [ 464.924554][ T5869] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 464.943060][T22781] libceph: mon0 (1)[c::]:6789 connect error [ 464.970687][ T5869] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 465.034452][ T5869] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.081855][T23239] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 465.084452][ T5869] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 465.092344][T23239] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 465.126269][T23239] [ 465.128632][T23239] ====================================================== [ 465.135648][T23239] WARNING: possible circular locking dependency detected [ 465.142657][T23239] syzkaller #0 Tainted: G L [ 465.148614][T23239] ------------------------------------------------------ [ 465.155620][T23239] syz.0.7670/23239 is trying to acquire lock: [ 465.161664][T23239] ffffffff8e9ab860 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xb2/0x850 [ 465.170445][T23239] [ 465.170445][T23239] but task is already holding lock: [ 465.177782][T23239] ffff88801cac8188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_fop_readdir+0x15b/0x990 [ 465.187595][T23239] [ 465.187595][T23239] which lock already depends on the new lock. [ 465.187595][T23239] [ 465.198108][T23239] [ 465.198108][T23239] the existing dependency chain (in reverse order) is: [ 465.207117][T23239] [ 465.207117][T23239] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 465.215125][T23239] down_write+0x8b/0x1f0 [ 465.219875][T23239] kernfs_add_one+0x38/0x850 [ 465.224973][T23239] kernfs_create_dir_ns+0xfc/0x1a0 [ 465.230588][T23239] internal_create_group+0x36f/0xf40 [ 465.236384][T23239] cpuhp_invoke_callback+0x3ab/0x9a0 [ 465.242173][T23239] cpuhp_issue_call+0x1b8/0x970 [ 465.247527][T23239] __cpuhp_setup_state_cpuslocked+0x431/0x880 [ 465.254109][T23239] __cpuhp_setup_state+0xf4/0x300 [ 465.259657][T23239] do_one_initcall+0x11d/0x760 [ 465.264941][T23239] kernel_init_freeable+0x6e5/0x7a0 [ 465.270669][T23239] kernel_init+0x1f/0x1e0 [ 465.275516][T23239] ret_from_fork+0x754/0xd80 [ 465.280640][T23239] ret_from_fork_asm+0x1a/0x30 [ 465.286013][T23239] [ 465.286013][T23239] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 465.293856][T23239] [ 465.293856][T23239] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 465.301585][T23239] cpus_read_lock+0x42/0x170 [ 465.306707][T23239] static_key_disable+0x12/0x20 [ 465.312079][T23239] __inet_hash_connect+0x1378/0x1e40 [ 465.317879][T23239] tcp_v4_connect+0xeb0/0x1b40 [ 465.323190][T23239] __inet_stream_connect+0x208/0xfa0 [ 465.329090][T23239] inet_stream_connect+0x57/0xa0 [ 465.334542][T23239] __sys_connect_file+0x141/0x1a0 [ 465.340543][T23239] __sys_connect+0x141/0x170 [ 465.345660][T23239] __x64_sys_connect+0x72/0xb0 [ 465.351191][T23239] do_syscall_64+0x106/0xf80 [ 465.356322][T23239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.362717][T23239] [ 465.362717][T23239] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 465.370370][T23239] lock_sock_nested+0x41/0xf0 [ 465.375550][T23239] inet_shutdown+0x67/0x410 [ 465.380565][T23239] nbd_mark_nsock_dead+0xae/0x5c0 [ 465.386098][T23239] recv_work+0x5fb/0x8c0 [ 465.390838][T23239] process_one_work+0xa23/0x19a0 [ 465.396279][T23239] worker_thread+0x5ef/0xe50 [ 465.401370][T23239] kthread+0x370/0x450 [ 465.405946][T23239] ret_from_fork+0x754/0xd80 [ 465.411050][T23239] ret_from_fork_asm+0x1a/0x30 [ 465.416335][T23239] [ 465.416335][T23239] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 465.423968][T23239] __mutex_lock+0x1a2/0x1b90 [ 465.429162][T23239] nbd_queue_rq+0x428/0x1080 [ 465.434251][T23239] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 465.440298][T23239] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 465.447127][T23239] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 465.453605][T23239] blk_mq_run_hw_queue+0x23c/0x670 [ 465.459221][T23239] blk_mq_dispatch_list+0x51d/0x1360 [ 465.465007][T23239] blk_mq_flush_plug_list+0x130/0x600 [ 465.470881][T23239] __blk_flush_plug+0x2c4/0x4b0 [ 465.476232][T23239] __submit_bio+0x584/0x6c0 [ 465.481235][T23239] submit_bio_noacct_nocheck+0x562/0xc10 [ 465.487365][T23239] submit_bio_noacct+0xd17/0x2010 [ 465.492909][T23239] submit_bh_wbc+0x59c/0x770 [ 465.498000][T23239] block_read_full_folio+0x264/0x8e0 [ 465.503789][T23239] filemap_read_folio+0xfc/0x3b0 [ 465.509323][T23239] do_read_cache_folio+0x2d7/0x6b0 [ 465.514944][T23239] read_part_sector+0xd1/0x370 [ 465.520213][T23239] adfspart_check_ICS+0x93/0x910 [ 465.525655][T23239] bdev_disk_changed+0x7f8/0xc80 [ 465.531090][T23239] blkdev_get_whole+0x187/0x290 [ 465.536444][T23239] bdev_open+0x2c7/0xe40 [ 465.541189][T23239] blkdev_open+0x34e/0x4f0 [ 465.546108][T23239] do_dentry_open+0x6d8/0x1660 [ 465.551372][T23239] vfs_open+0x82/0x3f0 [ 465.555939][T23239] path_openat+0x208c/0x31a0 [ 465.561038][T23239] do_file_open+0x20e/0x430 [ 465.566044][T23239] do_sys_openat2+0x10d/0x1e0 [ 465.571248][T23239] __x64_sys_openat+0x12d/0x210 [ 465.576617][T23239] do_syscall_64+0x106/0xf80 [ 465.581710][T23239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.588102][T23239] [ 465.588102][T23239] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 465.595286][T23239] __mutex_lock+0x1a2/0x1b90 [ 465.600380][T23239] nbd_queue_rq+0xba/0x1080 [ 465.605469][T23239] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 465.611516][T23239] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 465.618345][T23239] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 465.624830][T23239] blk_mq_run_hw_queue+0x23c/0x670 [ 465.630448][T23239] blk_mq_dispatch_list+0x51d/0x1360 [ 465.636236][T23239] blk_mq_flush_plug_list+0x130/0x600 [ 465.642111][T23239] __blk_flush_plug+0x2c4/0x4b0 [ 465.647550][T23239] __submit_bio+0x584/0x6c0 [ 465.652552][T23239] submit_bio_noacct_nocheck+0x562/0xc10 [ 465.658700][T23239] submit_bio_noacct+0xd17/0x2010 [ 465.664246][T23239] submit_bh_wbc+0x59c/0x770 [ 465.669343][T23239] block_read_full_folio+0x264/0x8e0 [ 465.675136][T23239] filemap_read_folio+0xfc/0x3b0 [ 465.680584][T23239] do_read_cache_folio+0x2d7/0x6b0 [ 465.686198][T23239] read_part_sector+0xd1/0x370 [ 465.691458][T23239] adfspart_check_ICS+0x93/0x910 [ 465.696899][T23239] bdev_disk_changed+0x7f8/0xc80 [ 465.702332][T23239] blkdev_get_whole+0x187/0x290 [ 465.707679][T23239] bdev_open+0x2c7/0xe40 [ 465.712423][T23239] blkdev_open+0x34e/0x4f0 [ 465.717339][T23239] do_dentry_open+0x6d8/0x1660 [ 465.722598][T23239] vfs_open+0x82/0x3f0 [ 465.727166][T23239] path_openat+0x208c/0x31a0 [ 465.732253][T23239] do_file_open+0x20e/0x430 [ 465.737254][T23239] do_sys_openat2+0x10d/0x1e0 [ 465.742430][T23239] __x64_sys_openat+0x12d/0x210 [ 465.747784][T23239] do_syscall_64+0x106/0xf80 [ 465.752879][T23239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.759270][T23239] [ 465.759270][T23239] -> #3 (set->srcu){.+.+}-{0:0}: [ 465.766371][T23239] __synchronize_srcu+0xa2/0x300 [ 465.771807][T23239] blk_mq_quiesce_queue+0x149/0x1c0 [ 465.777505][T23239] elevator_switch+0x17b/0x7e0 [ 465.782770][T23239] elevator_change+0x352/0x530 [ 465.788032][T23239] elevator_set_default+0x29e/0x360 [ 465.793733][T23239] blk_register_queue+0x412/0x590 [ 465.799268][T23239] __add_disk+0x73f/0xe40 [ 465.804101][T23239] add_disk_fwnode+0x118/0x5c0 [ 465.809368][T23239] nbd_dev_add+0x77a/0xb10 [ 465.814292][T23239] nbd_init+0x291/0x2b0 [ 465.818956][T23239] do_one_initcall+0x11d/0x760 [ 465.824231][T23239] kernel_init_freeable+0x6e5/0x7a0 [ 465.829935][T23239] kernel_init+0x1f/0x1e0 [ 465.834764][T23239] ret_from_fork+0x754/0xd80 [ 465.839869][T23239] ret_from_fork_asm+0x1a/0x30 [ 465.845133][T23239] [ 465.845133][T23239] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 465.852929][T23239] __mutex_lock+0x1a2/0x1b90 [ 465.858029][T23239] elevator_change+0x1bc/0x530 [ 465.863302][T23239] elevator_set_none+0x92/0xf0 [ 465.868564][T23239] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 465.874875][T23239] nbd_start_device+0x1a6/0xbd0 [ 465.880228][T23239] nbd_genl_connect+0xff2/0x1a40 [ 465.885754][T23239] genl_family_rcv_msg_doit+0x214/0x300 [ 465.891808][T23239] genl_rcv_msg+0x560/0x800 [ 465.896807][T23239] netlink_rcv_skb+0x159/0x420 [ 465.902086][T23239] genl_rcv+0x28/0x40 [ 465.906577][T23239] netlink_unicast+0x5aa/0x870 [ 465.911846][T23239] netlink_sendmsg+0x8b0/0xda0 [ 465.917111][T23239] ____sys_sendmsg+0x9e1/0xb70 [ 465.922373][T23239] ___sys_sendmsg+0x190/0x1e0 [ 465.927546][T23239] __sys_sendmsg+0x170/0x220 [ 465.932640][T23239] do_syscall_64+0x106/0xf80 [ 465.937747][T23239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.944139][T23239] [ 465.944139][T23239] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 465.952717][T23239] blk_alloc_queue+0x610/0x790 [ 465.957991][T23239] blk_mq_alloc_queue+0x174/0x290 [ 465.963539][T23239] __blk_mq_alloc_disk+0x29/0x120 [ 465.969079][T23239] nbd_dev_add+0x492/0xb10 [ 465.974014][T23239] nbd_init+0x291/0x2b0 [ 465.978762][T23239] do_one_initcall+0x11d/0x760 [ 465.984025][T23239] kernel_init_freeable+0x6e5/0x7a0 [ 465.989722][T23239] kernel_init+0x1f/0x1e0 [ 465.994550][T23239] ret_from_fork+0x754/0xd80 [ 465.999639][T23239] ret_from_fork_asm+0x1a/0x30 [ 466.004904][T23239] [ 466.004904][T23239] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 466.012092][T23239] __lock_acquire+0x14b8/0x2630 [ 466.017450][T23239] lock_acquire+0x1cf/0x380 [ 466.022451][T23239] fs_reclaim_acquire+0xc4/0x100 [ 466.027888][T23239] __kmalloc_noprof+0xb2/0x850 [ 466.033156][T23239] ovl_cache_entry_new+0x64/0x9d0 [ 466.038680][T23239] ovl_fill_merge+0x7dd/0x1000 [ 466.043945][T23239] kernfs_fop_readdir+0x40c/0x990 [ 466.049468][T23239] iterate_dir+0x296/0xae0 [ 466.054389][T23239] ovl_dir_read_merged+0x37e/0x790 [ 466.059998][T23239] ovl_iterate+0xb7b/0x11e0 [ 466.065003][T23239] wrap_directory_iterator+0xa2/0xe0 [ 466.070793][T23239] iterate_dir+0x296/0xae0 [ 466.075714][T23239] ovl_dir_read_merged+0x37e/0x790 [ 466.081327][T23239] ovl_iterate+0xb7b/0x11e0 [ 466.086332][T23239] wrap_directory_iterator+0xa2/0xe0 [ 466.092136][T23239] iterate_dir+0x296/0xae0 [ 466.097058][T23239] __x64_sys_getdents64+0x13b/0x2c0 [ 466.102757][T23239] do_syscall_64+0x106/0xf80 [ 466.107861][T23239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.114253][T23239] [ 466.114253][T23239] other info that might help us debug this: [ 466.114253][T23239] [ 466.124452][T23239] Chain exists of: [ 466.124452][T23239] fs_reclaim --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 466.124452][T23239] [ 466.137546][T23239] Possible unsafe locking scenario: [ 466.137546][T23239] [ 466.144971][T23239] CPU0 CPU1 [ 466.150318][T23239] ---- ---- [ 466.155685][T23239] rlock(&root->kernfs_rwsem); [ 466.160538][T23239] lock(cpuhp_state_mutex); [ 466.167633][T23239] lock(&root->kernfs_rwsem); [ 466.174901][T23239] lock(fs_reclaim); [ 466.178860][T23239] [ 466.178860][T23239] *** DEADLOCK *** [ 466.178860][T23239] [ 466.186980][T23239] 5 locks held by syz.0.7670/23239: [ 466.192152][T23239] #0: ffff888025ac40f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 466.201188][T23239] #1: ffff888041298168 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}, at: wrap_directory_iterator+0x54/0xe0 [ 466.212571][T23239] #2: ffff888047c30168 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: wrap_directory_iterator+0x54/0xe0 [ 466.223774][T23239] #3: ffff888056e2e9a0 (&type->i_mutex_dir_key#4){++++}-{4:4}, at: iterate_dir+0x18b/0xae0 [ 466.233848][T23239] #4: ffff88801cac8188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_fop_readdir+0x15b/0x990 [ 466.244087][T23239] [ 466.244087][T23239] stack backtrace: [ 466.249956][T23239] CPU: 1 UID: 0 PID: 23239 Comm: syz.0.7670 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.249977][T23239] Tainted: [L]=SOFTLOCKUP [ 466.249983][T23239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.249991][T23239] Call Trace: [ 466.249998][T23239] [ 466.250005][T23239] dump_stack_lvl+0x100/0x190 [ 466.250028][T23239] print_circular_bug.cold+0x178/0x1c7 [ 466.250051][T23239] check_noncircular+0x146/0x160 [ 466.250074][T23239] ? wrap_directory_iterator+0xa2/0xe0 [ 466.250097][T23239] __lock_acquire+0x14b8/0x2630 [ 466.250118][T23239] lock_acquire+0x1cf/0x380 [ 466.250131][T23239] ? __kmalloc_noprof+0xb2/0x850 [ 466.250154][T23239] ? ovl_cache_entry_new+0x64/0x9d0 [ 466.250170][T23239] fs_reclaim_acquire+0xc4/0x100 [ 466.250185][T23239] ? __kmalloc_noprof+0xb2/0x850 [ 466.250204][T23239] __kmalloc_noprof+0xb2/0x850 [ 466.250225][T23239] ovl_cache_entry_new+0x64/0x9d0 [ 466.250243][T23239] ovl_fill_merge+0x7dd/0x1000 [ 466.250261][T23239] ? __pfx_ovl_fill_merge+0x10/0x10 [ 466.250276][T23239] ? kernfs_root+0xee/0x2a0 [ 466.250290][T23239] kernfs_fop_readdir+0x40c/0x990 [ 466.250307][T23239] iterate_dir+0x296/0xae0 [ 466.250329][T23239] ovl_dir_read_merged+0x37e/0x790 [ 466.250345][T23239] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 466.250363][T23239] ? __pfx_ovl_fill_merge+0x10/0x10 [ 466.250383][T23239] ovl_iterate+0xb7b/0x11e0 [ 466.250399][T23239] ? __pfx_down_read_killable+0x10/0x10 [ 466.250416][T23239] ? __pfx_ovl_iterate+0x10/0x10 [ 466.250431][T23239] wrap_directory_iterator+0xa2/0xe0 [ 466.250453][T23239] iterate_dir+0x296/0xae0 [ 466.250475][T23239] ovl_dir_read_merged+0x37e/0x790 [ 466.250492][T23239] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 466.250510][T23239] ? __pfx_ovl_fill_merge+0x10/0x10 [ 466.250530][T23239] ovl_iterate+0xb7b/0x11e0 [ 466.250546][T23239] ? __pfx_down_read_killable+0x10/0x10 [ 466.250560][T23239] ? __pfx_ovl_iterate+0x10/0x10 [ 466.250575][T23239] wrap_directory_iterator+0xa2/0xe0 [ 466.250597][T23239] iterate_dir+0x296/0xae0 [ 466.250619][T23239] __x64_sys_getdents64+0x13b/0x2c0 [ 466.250632][T23239] ? __x64_sys_futex+0x358/0x4d0 [ 466.250646][T23239] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 466.250659][T23239] ? __pfx_filldir64+0x10/0x10 [ 466.250683][T23239] do_syscall_64+0x106/0xf80 [ 466.250704][T23239] ? clear_bhb_loop+0x40/0x90 [ 466.250719][T23239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.250733][T23239] RIP: 0033:0x7f721799c799 [ 466.250746][T23239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.250761][T23239] RSP: 002b:00007f7218858028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 466.250774][T23239] RAX: ffffffffffffffda RBX: 00007f7217c15fa0 RCX: 00007f721799c799 [ 466.250783][T23239] RDX: 0000000000001000 RSI: 0000200000000080 RDI: 0000000000000003 [ 466.250792][T23239] RBP: 00007f7217a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 466.250801][T23239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.250810][T23239] R13: 00007f7217c16038 R14: 00007f7217c15fa0 R15: 00007ffc47186298 [ 466.250823][T23239] [ 466.556859][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.600367][T23241] netlink: 'syz.3.7668': attribute type 13 has an invalid length. [ 466.607391][ T5869] usb 3-1: can't set config #16, error -71 [ 466.615554][ T5869] usb 3-1: USB disconnect, device number 69 [ 466.706287][ T1889] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 466.715086][T22781] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 466.858619][ T1889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.869603][ T1889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.879442][ T1889] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 466.889198][ T1889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.898092][ T1889] usb 5-1: config 0 descriptor?? [ 467.581227][ T5869] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 467.675131][ T1889] hid-led 0003:27B8:01ED.0057: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 467.695236][ T1889] hid-led 0003:27B8:01ED.0057: ThingM blink(1) initialized [ 467.879265][ T1889] usb 5-1: USB disconnect, device number 75 [ 470.757354][ T5182] udevd[5182]: worker [6546] /devices/virtual/block/nbd1 is taking a long time