last executing test programs: 18m14.449586272s ago: executing program 2 (id=4306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000140)="2e1221b23bb601c493d3df163e75963d86dd", 0x12}, {0x0}], 0x2) 18m14.228965907s ago: executing program 2 (id=4312): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x8c, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000000)=""/116, 0x74}, {0x0}], 0x2) 18m14.157963925s ago: executing program 2 (id=4315): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 18m14.075972606s ago: executing program 2 (id=4318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0xe92}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 18m13.965611072s ago: executing program 2 (id=4322): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) 18m13.911356777s ago: executing program 2 (id=4324): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_4={0x3, 0x1, 0x46e9808237a7607a, "30f453b1"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x2, 0x1, 0x8, '\a\x00'}, @global=@item_012={0x2, 0x1, 0x9, "0200"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) 17m58.503749043s ago: executing program 32 (id=4324): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_4={0x3, 0x1, 0x46e9808237a7607a, "30f453b1"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x2, 0x1, 0x8, '\a\x00'}, @global=@item_012={0x2, 0x1, 0x9, "0200"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) 5m59.337268661s ago: executing program 0 (id=11941): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) 5m55.765002673s ago: executing program 0 (id=11947): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x1f}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5m52.453072459s ago: executing program 0 (id=11951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m47.156178272s ago: executing program 0 (id=11958): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/100, 0x7ffc) 5m43.362192448s ago: executing program 0 (id=11963): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0x0, 0x24) ppoll(&(0x7f0000000080)=[{r0, 0x2429}], 0x1, 0x0, 0x0, 0x0) 5m38.439493064s ago: executing program 0 (id=11977): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) 5m22.030077738s ago: executing program 33 (id=11977): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) 2m43.025817863s ago: executing program 1 (id=12112): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2008}) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 2m40.676299384s ago: executing program 4 (id=12114): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 2m38.216503395s ago: executing program 1 (id=12115): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) 2m36.488505955s ago: executing program 4 (id=12118): syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2m34.106703326s ago: executing program 1 (id=12119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "f0"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2m32.088552178s ago: executing program 4 (id=12121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) 2m29.428303142s ago: executing program 1 (id=12123): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48d0}, 0x4000880) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000180), 0x0}, 0x20) 2m27.21177525s ago: executing program 4 (id=12125): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, 0x0, 0x0, 0x6, 0x0, "97c2a187341b5daa1517e5739111a586da8b56263f1c54f0870b34a65a6857992895e83d5507000000000000009c73315a9546d691096e624a72dd42f5e92d5e9d7df3d698f6c064bfa12df2284c937b"}, 0xd8) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) 2m24.718779956s ago: executing program 1 (id=12126): setns(0xc9, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="00e0", 0x2}, 0x1, 0x0, 0x0, 0x810}, 0x24004014) 2m21.273877936s ago: executing program 4 (id=12129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640", @ANYRES16], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 2m19.799927306s ago: executing program 1 (id=12130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000a80)={0x54, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="95fa265f403af6b2954b0525495c6666"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1cb056551cc1c517"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e234eab9b7286b70c3cc389178c80007"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) 2m16.268275908s ago: executing program 4 (id=12133): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x81, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 2m3.786842226s ago: executing program 34 (id=12130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000a80)={0x54, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="95fa265f403af6b2954b0525495c6666"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1cb056551cc1c517"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e234eab9b7286b70c3cc389178c80007"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) 1m59.325152581s ago: executing program 35 (id=12133): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x81, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 56.412204189s ago: executing program 5 (id=12168): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x9b00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 49.821628938s ago: executing program 5 (id=12169): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffbc) 45.419446463s ago: executing program 5 (id=12171): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x20000800) 40.500138425s ago: executing program 5 (id=12173): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x11, 0x72, 0x80000}, 0x20) 36.385360578s ago: executing program 5 (id=12175): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='wusb3801 0', 0xa) 29.256512073s ago: executing program 3 (id=12177): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 28.168844494s ago: executing program 5 (id=12178): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xff, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getegid() 16.264828491s ago: executing program 3 (id=12179): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) 11.784235701s ago: executing program 3 (id=12180): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000004c0)='FROZEN\x00', 0x7) 8.047421996s ago: executing program 3 (id=12181): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)=' 294947 95 2\\0000 0\n', 0x14) 4.357450603s ago: executing program 3 (id=12182): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) read(r0, &(0x7f0000000480)=""/248, 0xf8) 0s ago: executing program 3 (id=12183): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000300)={0x0, 0x6, 0x61, 0x5}) kernel console output (not intermixed with test programs): has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 545.968040][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.272156][T28435] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 546.272184][T28435] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 546.272277][T28435] vhci_hcd vhci_hcd.0: Device attached [ 546.298631][T28437] vhci_hcd: connection closed [ 546.300579][ T153] vhci_hcd vhci_hcd.5: stop threads [ 546.300602][ T153] vhci_hcd vhci_hcd.5: release socket [ 546.300619][ T153] vhci_hcd vhci_hcd.5: disconnect device [ 546.393119][ C0] usb 4-1: received EP1 urb->status = -2 [ 546.393164][ T9] usb 4-1: unable to init card! (ret=-110) [ 546.393494][ T9] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 546.595680][ T5603] usb 4-1: USB disconnect, device number 107 [ 546.644998][T28441] vlan3: entered promiscuous mode [ 546.645021][T28441] dummy0: entered promiscuous mode [ 546.645206][T28441] vlan3: entered allmulticast mode [ 546.645220][T28441] dummy0: entered allmulticast mode [ 546.924333][T28454] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 547.032651][ T29] audit: type=1400 audit(547.002:2554): avc: denied { setopt } for pid=28458 comm="syz.4.10410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 547.717764][T28485] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 547.861595][T28493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10425'. [ 548.153002][ T9] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 548.233612][T28516] netlink: 'syz.0.10436': attribute type 3 has an invalid length. [ 548.303620][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 548.304500][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 548.304542][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.305397][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 548.305418][ T9] usb 5-1: Manufacturer: syz [ 548.308961][ T9] usb 5-1: config 0 descriptor?? [ 548.318424][T28523] netlink: 68 bytes leftover after parsing attributes in process `syz.5.10440'. [ 548.402753][ T9] rc_core: IR keymap rc-hauppauge not found [ 548.402771][ T9] Registered IR keymap rc-empty [ 548.403653][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 548.406813][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input184 [ 548.413120][ T5603] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 548.482839][ T24] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 548.534573][ T5335] usb 5-1: USB disconnect, device number 122 [ 548.563083][ T5603] usb 4-1: Using ep0 maxpacket: 16 [ 548.563549][ T5603] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 548.564338][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.564365][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.564395][ T5603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.565647][ T5603] usb 4-1: config 0 descriptor?? [ 548.633835][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 548.634678][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 548.634702][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 548.634730][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 548.636379][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.636400][ T24] usb 2-1: Product: syz [ 548.636416][ T24] usb 2-1: Manufacturer: syz [ 548.636431][ T24] usb 2-1: SerialNumber: syz [ 548.641182][ T24] hub 2-1:1.0: bad descriptor, ignoring hub [ 548.641203][ T24] hub 2-1:1.0: probe with driver hub failed with error -5 [ 548.694635][ T5706] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 548.742855][ T48] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 548.843627][ T24] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 108 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 548.873308][ T5706] usb 1-1: Using ep0 maxpacket: 16 [ 548.873957][ T5706] usb 1-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 548.874919][ T5706] usb 1-1: config 0 interface 0 has no altsetting 0 [ 548.874944][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.876620][ T5706] usb 1-1: config 0 descriptor?? [ 548.903433][ T48] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 1.00 [ 548.904285][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.904318][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.915012][ T48] usb 6-1: config 0 descriptor?? [ 548.977900][ T5603] hid_parser_main: 38 callbacks suppressed [ 548.977923][ T5603] konepure 0003:1E7D:2DB4.00E5: unknown main item tag 0x0 [ 548.977948][ T5603] konepure 0003:1E7D:2DB4.00E5: unknown main item tag 0x0 [ 548.977969][ T5603] konepure 0003:1E7D:2DB4.00E5: unknown main item tag 0x0 [ 548.977988][ T5603] konepure 0003:1E7D:2DB4.00E5: unknown main item tag 0x0 [ 548.980135][ T5603] konepure 0003:1E7D:2DB4.00E5: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 549.054416][ T29] audit: type=1400 audit(549.032:2555): avc: denied { read write } for pid=28514 comm="syz.1.10437" name="lp0" dev="devtmpfs" ino=6261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 549.055795][ T29] audit: type=1400 audit(549.032:2556): avc: denied { open } for pid=28514 comm="syz.1.10437" path="/dev/usb/lp0" dev="devtmpfs" ino=6261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 549.200519][ T24] usb 4-1: USB disconnect, device number 108 [ 549.226286][ T5335] usb 2-1: USB disconnect, device number 108 [ 549.241694][ T5335] usblp0: removed [ 549.310907][ T5706] thrustmaster 0003:044F:B324.00E6: can't find FF field in output reports [ 549.322101][ T5706] thrustmaster 0003:044F:B324.00E6: hiddev0,hidraw0: USB HID v0.00 Device [HID 044f:b324] on usb-dummy_hcd.0-1/input0 [ 549.367569][ T48] wacom 0003:056A:0331.00E7: hidraw1: USB HID v1.10 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 549.500582][ T48] usb 1-1: USB disconnect, device number 113 [ 549.531426][ T5335] usb 6-1: USB disconnect, device number 89 [ 549.890758][T28559] 0x0000000000ec-0x0000000000f2 : "" [ 549.918175][T28559] ftl_cs: FTL header corrupt! [ 550.195346][T28580] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10463'. [ 550.430450][T28600] ip_tables: iptables: counters copy to user failed while replacing table [ 550.543041][T28606] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 550.721601][ T29] audit: type=1400 audit(550.692:2557): avc: denied { mounton } for pid=28618 comm="syz.3.10484" path="/2208/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 550.721991][T28620] 9pnet_fd: p9_fd_create_unix (28620): problem connecting socket: ./file0: -30 [ 550.776655][T28628] netlink: 'syz.5.10485': attribute type 3 has an invalid length. [ 550.811874][T28630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10490'. [ 550.811896][T28630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10490'. [ 550.811918][T28630] netlink: 'syz.1.10490': attribute type 19 has an invalid length. [ 550.811932][T28630] netlink: 'syz.1.10490': attribute type 20 has an invalid length. [ 551.143842][ T5603] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 551.292744][ T5603] usb 6-1: Using ep0 maxpacket: 32 [ 551.293381][ T5603] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 551.294632][ T5603] usb 6-1: config index 0 descriptor too short (expected 19, got 18) [ 551.297236][ T5603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.297259][ T5603] usb 6-1: Product: syz [ 551.297274][ T5603] usb 6-1: Manufacturer: syz [ 551.297288][ T5603] usb 6-1: SerialNumber: syz [ 551.301344][ T5603] usb 6-1: config 0 descriptor?? [ 551.343399][ T48] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 551.362349][ T5603] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 551.362389][ T5603] dvb-usb: bulk message failed: -22 (2/0) [ 551.380820][ T5603] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 551.394904][ T5603] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 551.394949][ T5603] usb 6-1: media controller created [ 551.419209][ T5603] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 551.438285][ T5603] usb 6-1: selecting invalid altsetting 7 [ 551.438304][ T5603] cxusb: set interface failed [ 551.438314][ T5603] dvb-usb: bulk message failed: -22 (1/0) [ 551.482824][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 551.483403][ T48] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 551.484287][ T48] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 551.486039][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.486062][ T48] usb 2-1: Product: syz [ 551.486076][ T48] usb 2-1: Manufacturer: syz [ 551.486092][ T48] usb 2-1: SerialNumber: syz [ 551.492590][ T48] usb 2-1: config 0 descriptor?? [ 551.505794][ T48] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 551.505826][ T48] dvb-usb: bulk message failed: -22 (2/0) [ 551.528942][ T48] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 551.530541][ T48] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 551.530576][ T48] usb 2-1: media controller created [ 551.561498][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 551.566389][ T5603] DVB: Unable to find symbol lgdt330x_attach() [ 551.566402][ T5603] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 551.589110][ T48] usb 2-1: selecting invalid altsetting 7 [ 551.589128][ T48] cxusb: set interface failed [ 551.589138][ T48] dvb-usb: bulk message failed: -22 (1/0) [ 551.677187][ T48] DVB: Unable to find symbol lgdt330x_attach() [ 551.677204][ T48] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 551.724245][ T5603] rc_core: IR keymap rc-dvico-portable not found [ 551.724262][ T5603] Registered IR keymap rc-empty [ 551.725111][ T5603] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 551.728223][ T5603] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input189 [ 551.739857][ T5603] dvb-usb: schedule remote query interval to 100 msecs. [ 551.739878][ T5603] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 551.784708][ T5603] usb 6-1: USB disconnect, device number 90 [ 551.795711][ T48] rc_core: IR keymap rc-dvico-portable not found [ 551.795727][ T48] Registered IR keymap rc-empty [ 551.796547][ T48] rc rc1: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc1 [ 551.799121][ T48] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc1/input190 [ 551.825131][ T48] dvb-usb: schedule remote query interval to 100 msecs. [ 551.825149][ T48] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 551.830317][ T48] usb 2-1: USB disconnect, device number 109 [ 551.940599][ T5603] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 551.955075][ T48] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 551.973223][ T5335] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 552.006741][T28672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10507'. [ 552.006773][T28672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10507'. [ 552.133751][ T5335] usb 5-1: Using ep0 maxpacket: 16 [ 552.134476][ T5335] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 552.135502][ T5335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.135530][ T5335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.135551][ T5335] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 552.135588][ T5335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.142339][ T5335] usb 5-1: config 0 descriptor?? [ 552.272786][ T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 552.392859][ T48] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 552.423298][ T9] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 552.424182][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 70, using maximum allowed: 30 [ 552.424217][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.424242][ T9] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 70 [ 552.424268][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 552.424295][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.428261][ T9] usb 4-1: config 0 descriptor?? [ 552.531248][ T29] audit: type=1400 audit(552.502:2558): avc: denied { accept } for pid=28691 comm="syz.5.10515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 552.552764][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 552.553255][ T48] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 552.558191][ T48] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 552.558225][ T48] usb 1-1: config 0 has no interface number 0 [ 552.558257][ T48] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 552.558281][ T48] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 552.558301][ T48] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 552.558324][ T48] usb 1-1: config 0 interface 196 has no altsetting 0 [ 552.560809][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.560832][ T48] usb 1-1: Product: syz [ 552.560846][ T48] usb 1-1: Manufacturer: syz [ 552.560861][ T48] usb 1-1: SerialNumber: syz [ 552.563577][ T5335] microsoft 0003:045E:07DA.00E8: unknown main item tag 0x0 [ 552.563600][ T5335] microsoft 0003:045E:07DA.00E8: unknown main item tag 0x0 [ 552.563619][ T5335] microsoft 0003:045E:07DA.00E8: unknown main item tag 0x0 [ 552.563637][ T5335] microsoft 0003:045E:07DA.00E8: unknown main item tag 0x0 [ 552.563654][ T5335] microsoft 0003:045E:07DA.00E8: unknown main item tag 0x0 [ 552.563672][ T5335] microsoft 0003:045E:07DA.00E8: unknown main item tag 0x0 [ 552.568080][ T48] usb 1-1: config 0 descriptor?? [ 552.568837][T28678] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 552.580898][ T5335] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.00E8/input/input191 [ 552.633599][T28694] overlayfs: missing 'lowerdir' [ 552.661258][ T5335] microsoft 0003:045E:07DA.00E8: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 552.728265][ T5603] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 552.798668][ T5335] usb 5-1: USB disconnect, device number 123 [ 552.852292][ T9] cougar 0003:060B:500A.00E9: unbalanced collection at end of report description [ 552.865009][ T9] cougar 0003:060B:500A.00E9: parse failed [ 552.865116][ T9] cougar 0003:060B:500A.00E9: probe with driver cougar failed with error -22 [ 552.892831][ T5603] usb 2-1: Using ep0 maxpacket: 16 [ 552.893449][ T5603] usb 2-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 552.895026][ T5603] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.895062][ T5603] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.895086][ T5603] usb 2-1: config 0 interface 0 has no altsetting 0 [ 552.895114][ T5603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.898974][ T5603] usb 2-1: config 0 descriptor?? [ 553.007787][ T48] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 553.007923][ T48] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 553.061211][ T48] usb 4-1: USB disconnect, device number 109 [ 553.203318][ T24] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 553.218880][ T9] usb 1-1: USB disconnect, device number 114 [ 553.317878][ T5603] waltop 0003:172F:0500.00EA: hidraw0: USB HID vff.fe Device [HID 172f:0500] on usb-dummy_hcd.1-1/input0 [ 553.351480][T28704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10520'. [ 553.364994][ T24] usb 6-1: New USB device found, idVendor=6253, idProduct=0100, bcdDevice= 0.00 [ 553.375930][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 553.375967][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.379603][ T24] usb 6-1: config 0 descriptor?? [ 553.535724][ T5335] usb 2-1: USB disconnect, device number 110 [ 553.788545][T28719] 0x0000000000ec-0x0000000000f2 : "" [ 553.811704][T28719] ftl_cs: FTL header corrupt! [ 553.842601][ T24] input: HID 6253:0100 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:6253:0100.00EB/input/input192 [ 553.926615][ T24] twinhan 0003:6253:0100.00EB: input,hidraw0: USB HID v80.00 Joystick [HID 6253:0100] on usb-dummy_hcd.5-1/input0 [ 554.033615][ T9] usb 6-1: USB disconnect, device number 91 [ 554.104236][T28728] fido_id[28728]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 554.195146][ T29] audit: type=1400 audit(554.162:2559): avc: denied { ioctl } for pid=28736 comm="syz.4.10533" path="socket:[93092]" dev="sockfs" ino=93092 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 554.580966][T28762] wg0 speed is unknown, defaulting to 1000 [ 554.686245][ T29] audit: type=1400 audit(554.662:2560): avc: denied { bind } for pid=28774 comm="syz.0.10551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 554.863479][T28762] dummy0 speed is unknown, defaulting to 1000 [ 555.061187][T28795] netlink: 'syz.0.10560': attribute type 3 has an invalid length. [ 555.061208][T28795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10560'. [ 555.089127][T28796] rdma_rxe: rxe_newlink: failed to add lo [ 555.283269][ T9] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 555.432305][T28811] wg0 speed is unknown, defaulting to 1000 [ 555.433616][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0750, bcdDevice= 0.00 [ 555.434507][ T9] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 555.434542][ T9] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 555.434563][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 555.434587][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.493079][ T9] usb 2-1: config 0 descriptor?? [ 555.493721][T28792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 555.493816][T28792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 555.927434][ T9] microsoft 0003:045E:0750.00EC: ignoring exceeding usage max [ 555.955583][ T9] microsoft 0003:045E:0750.00EC: hidraw0: USB HID v0.31 Joystick [HID 045e:0750] on usb-dummy_hcd.1-1/input0 [ 556.002856][ T24] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 556.153502][ T24] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 556.155233][ T24] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 556.155256][ T24] usb 4-1: Product: syz [ 556.200541][ T9] usb 2-1: USB disconnect, device number 111 [ 556.200976][ T24] usb 4-1: config 0 descriptor?? [ 556.222605][ T24] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 556.223679][ T24] usb 4-1: Detected FT232H [ 556.327575][T28840] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10581'. [ 556.410473][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 556.411261][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 556.411643][ T24] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 556.435559][ T24] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 556.448227][ T24] usb 4-1: USB disconnect, device number 110 [ 556.460000][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 556.460488][ T24] ftdi_sio 4-1:0.0: device disconnected [ 556.682302][T28811] dummy0 speed is unknown, defaulting to 1000 [ 556.825257][T28846] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 557.113060][ T9] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 557.263213][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 557.263866][ T24] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 557.264272][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 557.265588][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 557.265611][ T9] usb 6-1: config 0 has no interface number 0 [ 557.265646][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 557.265667][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 557.265689][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 557.265713][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 557.265733][ T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 557.265769][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.268066][ T9] usb 6-1: config 0 descriptor?? [ 557.294945][ T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 557.305999][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.442853][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 557.444455][ T24] usb 4-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 557.445279][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.445307][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.445327][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 557.445351][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.446907][ T24] usb 4-1: config 0 descriptor?? [ 557.481690][T28849] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90 [ 557.484298][ T5733] usb 6-1: USB disconnect, device number 92 [ 557.487478][ T5733] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 557.518215][T28854] tipc: Started in network mode [ 557.518228][T28854] tipc: Node identity , cluster identity 4711 [ 557.518238][T28854] tipc: Failed to set node id, please configure manually [ 557.518267][T28854] tipc: Enabling of bearer rejected, failed to enable media [ 557.865139][ T24] hid_parser_main: 47 callbacks suppressed [ 557.865153][ T24] smartjoyplus 0003:6666:8801.00ED: unknown main item tag 0x0 [ 557.865169][ T24] smartjoyplus 0003:6666:8801.00ED: unknown main item tag 0x0 [ 557.865182][ T24] smartjoyplus 0003:6666:8801.00ED: unknown main item tag 0x0 [ 557.865195][ T24] smartjoyplus 0003:6666:8801.00ED: unknown main item tag 0x0 [ 557.865208][ T24] smartjoyplus 0003:6666:8801.00ED: unknown main item tag 0x0 [ 557.865222][ T24] smartjoyplus 0003:6666:8801.00ED: unknown main item tag 0x0 [ 557.865234][ T24] smartjoyplus 0003:6666:8801.00ED: unknown main item tag 0x0 [ 557.865247][ T24] smartjoyplus 0003:6666:8801.00ED: unknown main item tag 0x0 [ 557.865260][ T24] smartjoyplus 0003:6666:8801.00ED: unknown main item tag 0x0 [ 557.865272][ T24] smartjoyplus 0003:6666:8801.00ED: unknown main item tag 0x0 [ 557.868994][ T24] smartjoyplus 0003:6666:8801.00ED: hidraw0: USB HID v0.04 Device [HID 6666:8801] on usb-dummy_hcd.3-1/input0 [ 558.076194][ T24] usb 4-1: USB disconnect, device number 111 [ 558.131697][T28861] 0x0000000000ec-0x0000000000f2 : "" [ 558.141581][T28861] ftl_cs: FTL header corrupt! [ 558.286142][T28872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10593'. [ 558.952777][ T24] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 559.033115][ T9] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 559.103357][ T24] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 559.105075][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.105115][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 559.105151][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.183558][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 559.184463][ T9] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.184492][ T9] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 559.184517][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 559.184545][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.187518][ T9] usb 6-1: config 0 descriptor?? [ 559.327854][ T24] cxacru 2-1:1.0: invalid response length to cm 0x90: 0 [ 559.327886][ T24] cxacru 2-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 559.328023][ T24] cxacru 2-1:1.0: probe with driver cxacru failed with error -22 [ 559.476757][T28948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10629'. [ 559.541447][ T24] usb 2-1: USB disconnect, device number 112 [ 559.605255][ T9] playstation 0003:054C:09CC.00EE: unbalanced collection at end of report description [ 559.605707][T28954] netlink: 'syz.3.10632': attribute type 16 has an invalid length. [ 559.605725][T28954] netlink: 'syz.3.10632': attribute type 2 has an invalid length. [ 559.605737][T28954] netlink: 64102 bytes leftover after parsing attributes in process `syz.3.10632'. [ 559.605749][ T9] playstation 0003:054C:09CC.00EE: Parse failed [ 559.605803][ T9] playstation 0003:054C:09CC.00EE: probe with driver playstation failed with error -22 [ 559.769176][T28964] CUSE: info not properly terminated [ 559.822380][ T9] usb 6-1: USB disconnect, device number 93 [ 559.832398][ T29] audit: type=1400 audit(559.802:2561): avc: denied { append } for pid=28967 comm="syz.0.10639" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 560.352820][ T24] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 560.421950][ T29] audit: type=1400 audit(560.392:2562): avc: denied { setopt } for pid=28992 comm="syz.1.10651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 560.507608][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 560.511258][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.532655][ T24] usb 1-1: config 0 descriptor?? [ 560.537364][ T24] cp210x 1-1:0.0: cp210x converter detected [ 560.658448][T29005] 0x0000000000ec-0x0000000000f2 : "" [ 560.671675][T29005] ftl_cs: FTL header corrupt! [ 560.838129][T29013] netlink: 'syz.1.10659': attribute type 1 has an invalid length. [ 560.947082][T29015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10661'. [ 560.984095][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 561.028601][T29019] xt_hashlimit: size too large, truncated to 1048576 [ 561.169898][ T5335] usb 1-1: USB disconnect, device number 115 [ 561.188681][ T5335] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 561.189101][ T5335] cp210x 1-1:0.0: device disconnected [ 561.481159][ T29] audit: type=1400 audit(561.452:2563): avc: denied { listen } for pid=29045 comm="syz.5.10674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 562.069313][T29093] kAFS: unable to lookup cell '' [ 562.069938][T29093] kAFS: unable to lookup cell '(,c' [ 562.512860][ T5335] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 562.672874][ T5335] usb 4-1: Using ep0 maxpacket: 32 [ 562.673476][ T5335] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 562.674301][ T5335] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 562.674322][ T5335] usb 4-1: config 0 has no interface number 0 [ 562.676961][ T5335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.676980][ T5335] usb 4-1: Product: syz [ 562.676994][ T5335] usb 4-1: Manufacturer: syz [ 562.677008][ T5335] usb 4-1: SerialNumber: syz [ 562.684011][ T5335] usb 4-1: config 0 descriptor?? [ 562.688561][ T5335] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 562.919028][ T5335] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 562.926920][ T5335] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 563.170583][T29141] 0x0000000000ec-0x0000000000f2 : "" [ 563.199672][T29141] ftl_cs: FTL header corrupt! [ 563.313906][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 563.314967][ T5335] usb 4-1: USB disconnect, device number 112 [ 563.356209][ T5335] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 563.449982][ T5335] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 563.450561][ T5335] quatech2 4-1:0.51: device disconnected [ 563.813105][ T5733] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 563.965173][ T5733] usb 1-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 563.966071][ T5733] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 563.966100][ T5733] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 563.966124][ T5733] usb 1-1: config 0 interface 0 has no altsetting 0 [ 563.966150][ T5733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.969881][ T5733] usb 1-1: config 0 descriptor?? [ 564.165564][ T29] audit: type=1400 audit(564.142:2564): avc: denied { write } for pid=29168 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.366181][ T29] audit: type=1400 audit(564.342:2565): avc: denied { write } for pid=29216 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.416661][ T5733] lenovo 0003:17EF:61AE.00EF: ignoring exceeding usage max [ 564.444327][ T5733] input: HID 17ef:61ae as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:17EF:61AE.00EF/input/input194 [ 564.451457][ T5733] lenovo 0003:17EF:61AE.00EF: input,hidraw0: USB HID v0.10 Joystick [HID 17ef:61ae] on usb-dummy_hcd.0-1/input0 [ 564.680395][ T5733] usb 1-1: USB disconnect, device number 116 [ 564.948985][ T29] audit: type=1400 audit(564.922:2566): avc: denied { write } for pid=29225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.996517][ T5335] tipc: Resetting bearer [ 565.078684][ T29] audit: type=1400 audit(565.052:2567): avc: denied { write } for pid=29258 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.081705][ T5335] tipc: Resetting bearer [ 565.608619][T29296] futex_wake_op: syz.5.10769 tries to shift op by -1; fix this program [ 565.718401][ T29] audit: type=1400 audit(565.692:2568): avc: denied { write } for pid=29271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.759955][T29309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10773'. [ 565.999143][ T29] audit: type=1400 audit(565.972:2569): avc: denied { write } for pid=29319 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.242325][ T5264] veth0_vlan: left promiscuous mode [ 566.291902][ T5335] veth0_vlan: entered promiscuous mode [ 567.299032][ T29] audit: type=1400 audit(567.272:2570): avc: denied { write } for pid=29354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.470697][ T29] audit: type=1400 audit(567.442:2571): avc: denied { write } for pid=29401 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.840180][ T29] audit: type=1400 audit(568.812:2572): avc: denied { create } for pid=29460 comm="syz.5.10837" name="syz0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 568.983733][ T5733] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 569.109862][T29475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.135420][ T5733] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 569.136419][ T5733] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 569.136447][ T5733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 569.136471][ T5733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 569.136506][ T5733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.139351][ T5733] usb 1-1: config 0 descriptor?? [ 569.140002][T29452] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 569.408798][ T29] audit: type=1400 audit(569.382:2573): avc: denied { remove_name } for pid=29494 comm="syz.1.10852" name="dbroot" dev="configfs" ino=96475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 569.409144][ T29] audit: type=1400 audit(569.382:2574): avc: denied { unlink } for pid=29494 comm="syz.1.10852" name="dbroot" dev="configfs" ino=96475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 569.573631][ T5733] cp2112 0003:10C4:EA90.00F0: item fetching failed at offset 5/7 [ 569.576039][ T5733] cp2112 0003:10C4:EA90.00F0: parse failed [ 569.576171][ T5733] cp2112 0003:10C4:EA90.00F0: probe with driver cp2112 failed with error -22 [ 569.800651][ T5603] usb 1-1: USB disconnect, device number 117 [ 569.884417][ T5733] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 569.996333][T29541] batman_adv: batadv0: Adding interface: wlan0 [ 569.996350][T29541] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.996376][T29541] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 570.033493][ T5733] usb 6-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 570.034408][ T5733] usb 6-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 570.034440][ T5733] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 570.034460][ T5733] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 570.034482][ T5733] usb 6-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 130 [ 570.034504][ T5733] usb 6-1: config 0 interface 0 has no altsetting 0 [ 570.034527][ T5733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.039343][ T5733] usb 6-1: config 0 descriptor?? [ 570.040512][T29512] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 570.403110][ T5335] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 570.458065][ T5733] hid_parser_main: 42 callbacks suppressed [ 570.458088][ T5733] logitech 0003:046D:C298.00F1: unknown main item tag 0x2 [ 570.458111][ T5733] logitech 0003:046D:C298.00F1: unknown main item tag 0x0 [ 570.464675][ T5733] logitech 0003:046D:C298.00F1: unknown main item tag 0x0 [ 570.470288][ T5733] input: HID 046d:c298 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:C298.00F1/input/input195 [ 570.523264][ T5733] logitech 0003:046D:C298.00F1: offset (39) exceeds report_count (19) [ 570.523359][ T5733] logitech 0003:046D:C298.00F1: offset (25) exceeds report_count (19) [ 570.563726][ T5335] usb 2-1: Using ep0 maxpacket: 16 [ 570.564207][ T5335] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 570.565036][ T5335] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 570.565057][ T5335] usb 2-1: config 0 has no interface number 0 [ 570.565091][ T5335] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 570.565114][ T5335] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 570.568959][ T5335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.568982][ T5335] usb 2-1: Product: syz [ 570.568997][ T5335] usb 2-1: Manufacturer: syz [ 570.569012][ T5335] usb 2-1: SerialNumber: syz [ 570.596495][ T5335] usb 2-1: config 0 descriptor?? [ 570.604859][ T5733] logitech 0003:046D:C298.00F1: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.5-1/input0 [ 570.605384][ T5733] logitech 0003:046D:C298.00F1: implement() called with too large value 245 (n: 0)! (kworker/0:5) [ 570.610054][ T5733] logitech 0003:046D:C298.00F1: implement() called with too large value 248 (n: 0)! (kworker/0:5) [ 570.610077][ T5733] logitech 0003:046D:C298.00F1: implement() called with too large value 3 (n: 0)! (kworker/0:5) [ 570.610120][ T5733] logitech 0003:046D:C298.00F1: implement() called with too large value 129 (n: 0)! (kworker/0:5) [ 570.610139][ T5733] logitech 0003:046D:C298.00F1: implement() called with too large value 11 (n: 0)! (kworker/0:5) [ 570.610175][ T5733] logitech 0003:046D:C298.00F1: Force feedback support for Logitech Gaming Wheels [ 570.613626][T29548] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 570.613719][T29548] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 570.678271][ T5733] usb 6-1: USB disconnect, device number 94 [ 570.711479][T29561] fido_id[29561]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 570.831535][T29548] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 570.831641][T29548] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 571.015425][T29543] tipc: Resetting bearer [ 571.033489][T29543] tipc: Resetting bearer [ 571.033536][T29543] veth0_vlan: left promiscuous mode [ 571.055469][ T5335] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 571.055505][ T5335] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 571.055687][ T5335] asix 2-1:0.251: probe with driver asix failed with error -5 [ 571.091805][ T5335] usb 2-1: USB disconnect, device number 113 [ 571.244864][ T1676] wg0 speed is unknown, defaulting to 1000 [ 571.244886][ T1676] syz1: Port: 1 Link DOWN [ 571.247399][T21017] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.247437][T21017] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.247466][T21017] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.247494][T21017] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.248950][ T1676] wg0 speed is unknown, defaulting to 1000 [ 571.403930][T29573] ip_tables: iptables: counters copy to user failed while replacing table [ 571.712241][ T29] audit: type=1400 audit(571.682:2575): avc: denied { write } for pid=29564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.734009][ T29] audit: type=1400 audit(571.712:2576): avc: denied { ioctl } for pid=29591 comm="syz.5.10890" path="socket:[95917]" dev="sockfs" ino=95917 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 571.873356][ T29] audit: type=1400 audit(571.852:2577): avc: denied { write } for pid=29601 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.393145][ T5335] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 572.562942][ T5335] usb 1-1: Using ep0 maxpacket: 8 [ 572.563538][ T5335] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 572.564418][ T5335] usb 1-1: config 0 has an invalid interface number: 15 but max is 0 [ 572.564438][ T5335] usb 1-1: config 0 has no interface number 0 [ 572.564460][ T5335] usb 1-1: too many endpoints for config 0 interface 15 altsetting 9: 227, using maximum allowed: 30 [ 572.564490][ T5335] usb 1-1: config 0 interface 15 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 227 [ 572.564515][ T5335] usb 1-1: config 0 interface 15 has no altsetting 0 [ 572.564542][ T5335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.566803][ T5335] usb 1-1: config 0 descriptor?? [ 572.576494][ T29] audit: type=1400 audit(572.552:2578): avc: denied { write } for pid=29612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.757319][ T29] audit: type=1400 audit(572.732:2579): avc: denied { write } for pid=29654 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.787606][ T5335] usb 1-1: string descriptor 0 read error: -71 [ 572.788430][ T5335] usb-storage 1-1:0.15: USB Mass Storage device detected [ 572.819934][ T5335] usb-storage 1-1:0.15: device ignored [ 572.870534][ T5335] usb 1-1: USB disconnect, device number 118 [ 573.647544][T29712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10933'. [ 574.481974][ T29] audit: type=1400 audit(574.452:2580): avc: denied { read write } for pid=29758 comm="syz.3.10953" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 574.510296][ T29] audit: type=1400 audit(574.482:2581): avc: denied { open } for pid=29758 comm="syz.3.10953" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 575.410124][T29794] ipvlan3: entered allmulticast mode [ 575.410148][T29794] bond0: entered allmulticast mode [ 575.410162][T29794] bond_slave_0: entered allmulticast mode [ 575.410179][T29794] @0: entered allmulticast mode [ 575.410194][T29794] bridge0: entered allmulticast mode [ 575.462040][T29794] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 575.462072][T29794] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 575.462212][T29794] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 575.476823][ T29] audit: type=1400 audit(575.442:2582): avc: denied { listen } for pid=29795 comm="syz.3.10973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 575.839809][T29819] syz.0.10984 (29819) used obsolete PPPIOCDETACH ioctl [ 576.077819][T29836] xt_LOG: level 16 >= 8 [ 576.383101][ T5335] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 576.480026][T29854] netlink: 'syz.5.11001': attribute type 4 has an invalid length. [ 576.517305][ T29] audit: type=1400 audit(576.492:2583): avc: denied { append } for pid=29858 comm="syz.5.11003" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 576.517370][T29859] random: crng reseeded on system resumption [ 576.555341][ T5335] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 576.556553][ T5335] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 576.556583][ T5335] usb 1-1: config 0 interface 0 has no altsetting 0 [ 576.556611][ T5335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.558793][ T5335] usb 1-1: config 0 descriptor?? [ 576.733133][ T24] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 576.752782][T29559] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 576.832961][T28539] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 576.883668][ T24] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 576.884929][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 576.884960][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.886593][ T24] usb 4-1: config 0 descriptor?? [ 576.918445][T29559] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 576.923736][T29559] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 576.923760][T29559] usb 2-1: config 1 has no interface number 0 [ 576.923793][T29559] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 576.923841][T29559] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 576.923864][T29559] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.925606][T29559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.925627][T29559] usb 2-1: Product: syz [ 576.925640][T29559] usb 2-1: Manufacturer: syz [ 576.925653][T29559] usb 2-1: SerialNumber: syz [ 576.935562][T29857] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 576.996737][ T5335] magicmouse 0003:05AC:0265.00F2: hiddev0,hidraw0: USB HID v2.53 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 576.996772][ T5335] magicmouse 0003:05AC:0265.00F2: magicmouse input not registered [ 577.007889][ T5335] magicmouse 0003:05AC:0265.00F2: probe with driver magicmouse failed with error -12 [ 577.009124][T28539] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 577.010344][T28539] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 577.010366][T28539] usb 6-1: config 0 has no interface number 0 [ 577.010395][T28539] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 577.015960][T28539] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.015981][T28539] usb 6-1: Product: syz [ 577.015995][T28539] usb 6-1: Manufacturer: syz [ 577.016008][T28539] usb 6-1: SerialNumber: syz [ 577.021266][T28539] usb 6-1: config 0 descriptor?? [ 577.048765][T28539] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 577.138701][T29857] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 577.183037][T28539] usb 1-1: USB disconnect, device number 119 [ 577.306708][ T24] hid-rmi 0003:06CB:81A7.00F3: unknown main item tag 0x0 [ 577.306743][ T24] hid-rmi 0003:06CB:81A7.00F3: unknown main item tag 0x0 [ 577.306756][ T24] hid-rmi 0003:06CB:81A7.00F3: unknown main item tag 0x0 [ 577.306768][ T24] hid-rmi 0003:06CB:81A7.00F3: unknown main item tag 0x0 [ 577.306781][ T24] hid-rmi 0003:06CB:81A7.00F3: unknown main item tag 0x0 [ 577.306793][ T24] hid-rmi 0003:06CB:81A7.00F3: unknown main item tag 0x0 [ 577.306806][ T24] hid-rmi 0003:06CB:81A7.00F3: unknown main item tag 0x0 [ 577.306818][ T24] hid-rmi 0003:06CB:81A7.00F3: unknown main item tag 0x0 [ 577.306830][ T24] hid-rmi 0003:06CB:81A7.00F3: unknown main item tag 0x0 [ 577.306842][ T24] hid-rmi 0003:06CB:81A7.00F3: unknown main item tag 0x0 [ 577.310881][ T24] hid-rmi 0003:06CB:81A7.00F3: hidraw0: USB HID v0.81 Device [HID 06cb:81a7] on usb-dummy_hcd.3-1/input0 [ 577.341288][T29559] usb 2-1: Incompatible driver and firmware versions [ 577.507341][ T5791] usb 4-1: USB disconnect, device number 113 [ 577.545700][T28539] usb 2-1: USB disconnect, device number 114 [ 578.030001][ T29] audit: type=1400 audit(578.002:2584): avc: denied { accept } for pid=29875 comm="syz.0.11008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 578.171893][T29885] macsec2: entered promiscuous mode [ 578.171915][T29885] macsec2: entered allmulticast mode [ 578.267476][T29894] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11017'. [ 578.498712][T29912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11023'. [ 579.144107][T29962] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11047'. [ 579.168203][ T29] audit: type=1400 audit(579.142:2585): avc: denied { view } for pid=29960 comm="syz.0.11048" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 579.303184][ C1] usb 6-1: yurex_control_callback - control failed: -2 [ 579.305931][ T5791] usb 6-1: USB disconnect, device number 95 [ 579.313928][ T5791] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 579.343097][ T9] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 579.494110][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 579.497000][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.497031][ T9] usb 2-1: Product: syz [ 579.497045][ T9] usb 2-1: Manufacturer: syz [ 579.497059][ T9] usb 2-1: SerialNumber: syz [ 579.510430][T29985] CIFS: Attempting to mount //127.0.0.1/share [ 579.521413][T29985] CIFS: VFS: Error connecting to socket. Aborting operation. [ 579.521505][T29985] CIFS: VFS: cifs_mount failed w/return code = -111 [ 579.651814][ T9] usb 2-1: reset high-speed USB device number 115 using dummy_hcd [ 579.780956][T30005] ALSA: mixer_oss: invalid OSS volume 'iM44VP' [ 579.911493][ T9] usb 2-1: driver API: 1.9.9 2016-02-15 [1-1] [ 579.911521][ T9] usb 2-1: firmware API: 1.9.6 2012-07-07 [ 579.950570][T30017] ublk_ctrl_add_dev: dev id not match 4294967295 14 [ 580.164409][ C0] usb 2-1: received invalid command response:got -4, instead of 0 [ 580.164458][ C0] usb 2-1: restart device (9) [ 580.196751][T29977] orangefs_mount: mount request failed with -4 [ 580.249844][ T29] audit: type=1400 audit(580.222:2586): avc: denied { setopt } for pid=30036 comm="syz.3.11080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 580.332817][T28539] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 580.371259][ T1676] usb 2-1: USB disconnect, device number 115 [ 580.372626][ C0] device 2-1 is not registered [ 580.389366][ T29] audit: type=1400 audit(580.362:2587): avc: denied { write } for pid=30014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.493493][T30053] sg_write: data in/out 39227/70 bytes for SCSI command 0x0-- guessing data in; [ 580.493493][T30053] program syz.3.11085 not setting count and/or reply_len properly [ 580.493554][T28539] usb 6-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 580.496122][T28539] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 580.496151][T28539] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 580.499160][T28539] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.499184][T28539] usb 6-1: Product: syz [ 580.499198][T28539] usb 6-1: Manufacturer: syz [ 580.499212][T28539] usb 6-1: SerialNumber: syz [ 580.501674][ T29] audit: type=1400 audit(580.472:2588): avc: denied { write } for pid=30050 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.533499][ T5791] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 580.604364][ T29] audit: type=1400 audit(580.572:2589): avc: denied { execute } for pid=30054 comm="syz.4.11086" path="/dev/audio1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 580.684591][ T5791] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 580.685465][ T5791] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 580.685486][ T5791] usb 1-1: config 0 has no interface number 0 [ 580.685518][ T5791] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 580.685541][ T5791] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 580.686833][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 580.686854][ T5791] usb 1-1: Product: syz [ 580.686868][ T5791] usb 1-1: SerialNumber: syz [ 580.689936][ T5791] usb 1-1: config 0 descriptor?? [ 580.691141][T30041] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 580.699217][ T5791] cm109 1-1:0.8: invalid payload size 64, expected 4 [ 580.703938][ T5791] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input196 [ 580.796881][T30065] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 580.872006][T28539] kaweth 6-1:1.0: Firmware present in device. [ 580.964394][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 580.964604][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 580.964810][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 580.965015][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 580.965097][ T5791] usb 1-1: USB disconnect, device number 120 [ 580.965206][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 580.965224][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 580.971953][ T5791] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 580.995775][ T9] usb 2-1: firmware upload failed (-110). [ 581.053908][T28539] kaweth 6-1:1.0: Statistics collection: 0 [ 581.053930][T28539] kaweth 6-1:1.0: Multicast filter limit: 0 [ 581.053945][T28539] kaweth 6-1:1.0: MTU: 0 [ 581.053959][T28539] kaweth 6-1:1.0: Read MAC address 00:00:00:00:00:00 [ 581.101109][ T29] audit: type=1400 audit(581.072:2590): avc: denied { name_bind } for pid=30078 comm="syz.4.11096" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 581.258721][T28539] kaweth 6-1:1.0: probe with driver kaweth failed with error -5 [ 581.276469][T28539] usb 6-1: USB disconnect, device number 96 [ 581.487889][T30111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.537136][T30115] [U]  [ 581.537161][T30115] [U] K{ [ 581.537288][T30115] [U] T 1ŠFFˊ`GJǘGO/MC [ 581.537895][T30115] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 581.538152][T30115] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 581.539064][T30115] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 581.540328][T30115] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 581.540603][T30115] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 581.540877][T30115] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 581.541434][T30115] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 581.547308][T30115] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 581.547598][T30115] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 581.547649][T30115] [U] 22Ʃ۩X?0;3U [ 581.548190][T30115] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 581.548372][T30115] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 581.548527][T30115] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 581.548622][T30115] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 581.548860][T30115] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 581.548883][T30115] [U] EC [ 581.549120][T30115] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 581.551489][T30112] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 581.697908][ T29] audit: type=1400 audit(581.672:2591): avc: denied { setopt } for pid=30116 comm="syz.1.11113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 581.716916][T28539] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 581.932805][T28539] usb 4-1: Using ep0 maxpacket: 16 [ 581.933310][T28539] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 581.935261][T28539] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.935289][T28539] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.935309][T28539] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 581.935343][T28539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.937412][T28539] usb 4-1: config 0 descriptor?? [ 582.370879][T28539] usbhid 4-1:0.0: can't add hid device: -71 [ 582.370963][T28539] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 582.391827][T28539] usb 4-1: USB disconnect, device number 114 [ 582.429279][T30159] ip_tables: iptables: counters copy to user failed while replacing table [ 582.903543][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 583.135440][T30224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.399401][T30247] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 583.399401][T30247] The task syz.5.11174 (30247) triggered the difference, watch for misbehavior. [ 583.498097][ T29] audit: type=1400 audit(583.472:2592): avc: denied { getopt } for pid=30254 comm="syz.0.11180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 583.844741][T30270] ovs0: entered promiscuous mode [ 584.227028][T30284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11194'. [ 584.347587][ T29] audit: type=1326 audit(584.322:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30291 comm="syz.4.11198" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f785319e559 code=0x0 [ 584.409450][T30297] tipc: Enabling of bearer rejected, already enabled [ 584.627163][T30310] [U] [ 584.627186][T30310] [U] [ 584.627204][T30310] [U] [ 584.627221][T30310] [U] [ 584.627238][T30310] [U] [ 584.627255][T30310] [U] [ 584.627272][T30310] [U] [ 584.627289][T30310] [U] [ 584.627312][T30310] [U] [ 584.627329][T30310] [U] [ 584.627345][T30310] [U] [ 584.627362][T30310] [U] [ 584.627379][T30310] [U] [ 584.627395][T30310] [U] [ 584.627409][T30310] [U] [ 584.627424][T30310] [U] [ 584.627445][T30310] [U] [ 584.627461][T30310] [U] [ 584.627475][T30310] [U] [ 584.627491][T30310] [U] [ 584.627511][T30310] [U] [ 584.627526][T30310] [U] [ 584.627541][T30310] [U] [ 584.627557][T30310] [U] [ 584.627578][T30310] [U] [ 584.627596][T30310] [U] [ 584.627612][T30310] [U] [ 584.627629][T30310] [U] [ 584.627646][T30310] [U] [ 584.627663][T30310] [U] [ 584.627679][T30310] [U] [ 584.627697][T30310] [U] [ 584.627720][T30310] [U] [ 584.627735][T30310] [U] [ 584.627754][T30310] [U] [ 584.627776][T30310] [U] [ 584.627799][T30310] [U] [ 584.627824][T30310] [U] [ 584.627849][T30310] [U] [ 584.627869][T30310] [U] [ 584.627893][T30310] [U] [ 584.627917][T30310] [U] [ 584.627942][T30310] [U] [ 584.627968][T30310] [U] [ 584.627992][T30310] [U] [ 584.628009][T30310] [U] [ 584.628024][T30310] [U] [ 584.628039][T30310] [U] [ 584.628066][T30310] [U] [ 584.628081][T30310] [U] [ 584.628099][T30310] [U] [ 584.628114][T30310] [U] [ 584.628129][T30310] [U] [ 584.628144][T30310] [U] [ 584.628158][T30310] [U] [ 584.628174][T30310] [U] [ 584.629767][T30310] [U] [ 584.629787][T30310] [U] [ 584.629804][T30310] [U] [ 584.629821][T30310] [U] [ 584.629836][T30310] [U] [ 584.629851][T30310] [U] [ 584.629868][T30310] [U] [ 584.629883][T30310] [U] [ 584.632084][T30310] [U] [ 584.632118][T30310] [U] [ 584.632148][T30310] [U] [ 584.632177][T30310] [U] [ 584.632207][T30310] [U] [ 584.632236][T30310] [U] [ 584.632266][T30310] [U] [ 584.632290][T30310] [U] [ 584.632325][T30310] [U] [ 584.632352][T30310] [U] [ 584.632378][T30310] [U] [ 584.632405][T30310] [U] [ 584.632431][T30310] [U] [ 584.632459][T30310] [U] [ 584.632486][T30310] [U] [ 584.632519][T30310] [U] [ 584.632553][T30310] [U] [ 584.632581][T30310] [U] [ 584.632605][T30310] [U] [ 584.632631][T30310] [U] [ 584.632657][T30310] [U] [ 584.632682][T30310] [U] [ 584.632707][T30310] [U] [ 584.632734][T30310] [U] [ 584.634443][T30310] [U] [ 584.634472][T30310] [U] [ 584.634497][T30310] [U] [ 584.634528][T30310] [U] [ 584.634550][T30310] [U] [ 584.634572][T30310] [U] [ 584.634594][T30310] [U] [ 584.634616][T30310] [U] [ 584.634646][T30310] [U] [ 584.634671][T30310] [U] [ 584.634693][T30310] [U] [ 584.634716][T30310] [U] [ 584.634738][T30310] [U] [ 584.634760][T30310] [U] [ 584.634782][T30310] [U] [ 584.634805][T30310] [U] [ 584.634833][T30310] [U] [ 584.634856][T30310] [U] [ 584.634878][T30310] [U] [ 584.634900][T30310] [U] [ 584.634922][T30310] [U] [ 584.634944][T30310] [U] [ 584.634966][T30310] [U] [ 584.634989][T30310] [U] [ 584.635017][T30310] [U] [ 584.635039][T30310] [U] [ 584.635061][T30310] [U] [ 584.635083][T30310] [U] [ 584.635106][T30310] [U] [ 584.635128][T30310] [U] [ 584.635152][T30310] [U] [ 584.635174][T30310] [U] [ 584.637082][T30310] [U] [ 584.637110][T30310] [U] [ 584.637136][T30310] [U] [ 584.637161][T30310] [U] [ 584.637186][T30310] [U] [ 584.637210][T30310] [U] [ 584.637232][T30310] [U] [ 584.644871][T30309] [U] [ 585.330550][T30346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11223'. [ 585.662806][ T9] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 585.821995][ T9] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 585.824059][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.824093][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 585.824112][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 585.824133][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 585.824165][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.893317][T30384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11239'. [ 586.157072][T30390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 586.192397][T30394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11244'. [ 586.287894][ T9] gud 6-1:1.0: No supported pixel formats found [ 586.287923][ T9] gud 6-1:1.0: probe with driver gud failed with error -22 [ 586.534597][ T9] usb 6-1: USB disconnect, device number 97 [ 586.761526][ T29] audit: type=1400 audit(586.732:2594): avc: denied { getopt } for pid=30409 comm="syz.1.11250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 587.159304][T30426] binder_alloc: binder_alloc_mmap_handler: 30425 200000ffe000-200001000000 already mapped failed -16 [ 587.193583][ T24] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 587.342784][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 587.343415][ T24] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 587.344278][ T24] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 587.344302][ T24] usb 1-1: config 0 has no interface number 0 [ 587.344337][ T24] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 587.344363][ T24] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 587.345645][ T24] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 587.345666][ T24] usb 1-1: Product: syz [ 587.345679][ T24] usb 1-1: SerialNumber: syz [ 587.357216][T30421] tipc: Resetting bearer [ 587.437228][ T24] usb 1-1: config 0 descriptor?? [ 587.455069][ T24] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 587.458228][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input198 [ 587.483934][ T5733] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 587.525528][ T29] audit: type=1400 audit(587.502:2595): avc: denied { connect } for pid=30443 comm="syz.5.11261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 587.636999][ T5733] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 587.639727][ T5733] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 587.639753][ T5733] usb 4-1: config 0 has no interface number 0 [ 587.639787][ T5733] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 587.647901][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.647921][ T5733] usb 4-1: Product: syz [ 587.647935][ T5733] usb 4-1: Manufacturer: syz [ 587.647948][ T5733] usb 4-1: SerialNumber: syz [ 587.683894][ T5733] usb 4-1: config 0 descriptor?? [ 587.752902][ T5733] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 587.778205][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 587.778412][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 587.778610][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 587.778802][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 587.778991][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 587.779241][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 587.779435][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 587.779630][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 587.779830][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 587.780021][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 587.789125][T30440] usb 1-1: USB disconnect, device number 121 [ 587.790072][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 587.830892][T30440] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 588.165539][T30440] usb 4-1: USB disconnect, device number 115 [ 588.168085][T30440] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 588.255612][ T153] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.256575][ T153] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.256607][ T153] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.256635][ T153] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.887557][T30493] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 588.887996][T30493] team0: Device ipvlan2 is already an upper device of the team interface [ 589.073113][T30503] macsec1: entered promiscuous mode [ 589.342086][T30526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11300'. [ 589.342108][T30526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11300'. [ 589.342143][T30526] netlink: 'syz.1.11300': attribute type 15 has an invalid length. [ 589.416973][T30530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11302'. [ 589.510170][T30539] vivid-000: disconnect [ 589.530624][T30532] vivid-000: reconnect [ 589.621873][ T29] audit: type=1400 audit(589.596:2596): avc: denied { write } for pid=30545 comm="syz.1.11311" name="dbroot" dev="configfs" ino=99595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 589.638845][T30547] db_root: cannot open: ./m [ 589.650768][ T29] audit: type=1400 audit(589.606:2597): avc: denied { open } for pid=30545 comm="syz.1.11311" path="/2280/my_configfs/target/dbroot" dev="configfs" ino=99595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 590.272409][ T5714] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 590.302098][T30440] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 590.432324][ T5714] usb 6-1: Using ep0 maxpacket: 8 [ 590.433927][ T5714] usb 6-1: unable to get BOS descriptor or descriptor too short [ 590.433964][ T5714] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 590.434766][ T5714] usb 6-1: config 4 interface 0 has no altsetting 0 [ 590.437045][ T5714] usb 6-1: string descriptor 0 read error: -22 [ 590.437110][ T5714] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 590.452764][T30440] usb 2-1: Using ep0 maxpacket: 16 [ 590.453234][T30440] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 590.454047][T30440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 590.455963][T30440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.455982][T30440] usb 2-1: Product: syz [ 590.455995][T30440] usb 2-1: Manufacturer: syz [ 590.456008][T30440] usb 2-1: SerialNumber: syz [ 590.512402][ T5714] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 590.512577][T30440] usb 2-1: config 0 descriptor?? [ 590.552989][ T5714] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 590.553228][ T5714] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 590.553538][ T5714] usb 6-1: media controller created [ 590.560638][T30440] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 590.560671][T30440] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 590.561729][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 590.654136][ T5714] zl10353_read_register: readreg error (reg=127, ret==0) [ 590.687396][ T5714] usb 6-1: USB disconnect, device number 98 [ 590.729940][T30594] vivid-007: ================= START STATUS ================= [ 590.729958][T30594] vivid-007: Enable Output Cropping: true grabbed [ 590.729978][T30594] vivid-007: Enable Output Composing: true grabbed [ 590.729990][T30594] vivid-007: Enable Output Scaler: true grabbed [ 590.730003][T30594] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 590.730016][T30594] vivid-007: Transmit Mode: HDMI grabbed [ 590.730029][T30594] vivid-007: Hotplug Present: 0x00000000 [ 590.730054][T30594] vivid-007: RxSense Present: 0x00000000 [ 590.730071][T30594] vivid-007: EDID Present: 0x00000000 [ 590.730088][T30594] vivid-007: ================== END STATUS ================== [ 590.793397][T29560] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 590.873417][T30601] bond0: entered promiscuous mode [ 590.873439][T30601] bond_slave_0: entered promiscuous mode [ 590.873639][T30601] bond_slave_1: entered promiscuous mode [ 590.873854][T30601] syz_tun: entered promiscuous mode [ 590.938701][T30606] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 590.939352][T30605] IPVS: stopping backup sync thread 30606 ... [ 590.942148][T29560] usb 1-1: Using ep0 maxpacket: 32 [ 590.942615][T29560] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 590.943445][T29560] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 590.943473][T29560] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 590.943504][T29560] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 590.943527][T29560] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 590.943549][T29560] usb 1-1: config 0 interface 0 has no altsetting 0 [ 590.945171][T29560] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 590.945190][T29560] usb 1-1: Product: syz [ 590.945203][T29560] usb 1-1: Manufacturer: syz [ 590.945216][T29560] usb 1-1: SerialNumber: syz [ 590.947836][T29560] usb 1-1: config 0 descriptor?? [ 590.949830][T29560] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 590.953442][T29560] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 591.121204][T30440] em28xx 2-1:0.0: chip ID is em2750 [ 591.164228][T29560] usb 1-1: USB disconnect, device number 122 [ 591.167135][T29560] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 591.344222][T30618] binder: 30617:30618 ioctl c018620c 200000000140 returned -1 [ 591.388393][T30440] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 591.388423][T30440] em28xx 2-1:0.0: board has no eeprom [ 591.465558][T30440] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 591.465588][T30440] em28xx 2-1:0.0: dvb set to bulk mode. [ 591.466580][T29558] em28xx 2-1:0.0: Binding DVB extension [ 591.499663][T30440] usb 2-1: USB disconnect, device number 116 [ 591.509730][T30440] em28xx 2-1:0.0: Disconnecting em28xx [ 591.596759][T29558] em28xx 2-1:0.0: Registering input extension [ 591.609412][T30440] em28xx 2-1:0.0: Closing input extension [ 591.649373][T30440] em28xx: Freeing device [ 591.854578][T30648] input: syz0 as /devices/virtual/input/input200 [ 591.901206][T30652] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 592.045231][T30663] loop5: detected capacity change from 0 to 7 [ 592.059253][T30663] Dev loop5: unable to read RDB block 7 [ 592.059278][T30663] loop5: AHDI p1 [ 592.059297][T30663] loop5: partition table partially beyond EOD, truncated [ 592.178180][T30669] netdevsim netdevsim5 netdevsim0: IPsec offload requires 128 bit authentication [ 592.201328][T30670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11368'. [ 592.201361][T30670] netlink: 'syz.1.11368': attribute type 30 has an invalid length. [ 592.201376][T30670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11368'. [ 592.501388][T30691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11378'. [ 592.501421][T30691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11378'. [ 592.532743][ T59] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.532783][ T59] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.532812][ T59] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.532840][ T59] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.174641][T30715] rt1711h 0-0004: probe with driver rt1711h failed with error -5 [ 593.175119][T30715] i2c i2c-0: new_device: Instantiated device rt1715 at 0x04 [ 593.391013][T30727] syz.0.11395 (30727): drop_caches: 4 [ 593.643819][T30750] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 593.725989][T30755] fuse: Invalid rootmode [ 593.751396][T30758] loop9: detected capacity change from 0 to 7 [ 593.768716][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.768899][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 593.778882][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.778946][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 593.783638][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.783692][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 593.793366][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.793428][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 593.803266][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.803321][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 593.810906][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.810962][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 593.863818][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.863895][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 593.865197][T30758] ldm_validate_partition_table(): Disk read failed. [ 593.865321][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.865368][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 593.865486][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.865531][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 593.865632][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.865676][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 593.867322][T30758] Dev loop9: unable to read RDB block 0 [ 593.867855][T30758] loop9: unable to read partition table [ 593.867999][T30758] loop9: partition table beyond EOD, truncated [ 593.868027][T30758] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 598.985541][T30801] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11426'. [ 598.985582][T30801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11426'. [ 598.985612][T30801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11426'. [ 604.031935][ T29] audit: type=1400 audit(604.004:2598): avc: denied { shutdown } for pid=30812 comm="syz.0.11432" lport=37638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 605.080792][ T29] audit: type=1400 audit(605.054:2599): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 607.037294][T30827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11436'. [ 610.517278][ T29] audit: type=1400 audit(610.497:2600): avc: denied { connect } for pid=30835 comm="syz.1.11440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 618.750162][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 620.528906][ T29] audit: type=1326 audit(620.512:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30874 comm="syz.5.11452" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd21039e559 code=0x0 [ 624.442989][T30896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11459'. [ 625.949119][T30899] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02 [ 627.416470][T30440] wacom 0003:056A:003F.00F4: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 630.705909][T30909] fido_id[30909]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 631.171403][T30919] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11466'. [ 639.589289][ T29] audit: type=1400 audit(639.581:2602): avc: denied { watch } for pid=30951 comm="syz.5.11479" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 641.723108][T30958] block nbd1: NBD_DISCONNECT [ 643.555013][T30969] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 648.607996][T30988] atomic_op ffff88802b1dc9e0 conn xmit_atomic 0000000000000000 [ 654.565773][ T29] audit: type=1400 audit(654.549:2603): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=42956 daddr=10.128.0.106 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 658.189569][T31026] team_slave_0: entered allmulticast mode [ 661.091300][T31042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.307623][T31050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11516'. [ 663.307693][T31050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11516'. [ 667.627041][T31068] Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! [ 668.959138][ T29] audit: type=1400 audit(668.966:2604): avc: denied { name_connect } for pid=31078 comm="syz.4.11525" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 670.584577][T31085] netlink: 596 bytes leftover after parsing attributes in process `syz.1.11527'. [ 671.347776][T31087] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 672.490808][T31092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11530'. [ 673.255010][T29558] hid_parser_main: 30 callbacks suppressed [ 673.255044][T29558] hid-generic 0000:0000:0000.00F5: unknown main item tag 0x0 [ 673.375546][T29558] hid-generic 0000:0000:0000.00F5: hidraw0: HID v0.00 Device [syz1] on syz0 [ 673.807358][T31097] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 678.419541][ T29] audit: type=1400 audit(678.431:2605): avc: denied { read write } for pid=31111 comm="syz.1.11536" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 678.450770][ T29] audit: type=1400 audit(678.461:2606): avc: denied { open } for pid=31111 comm="syz.1.11536" path="/2322/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 678.594724][ T29] audit: type=1400 audit(678.611:2607): avc: denied { ioctl } for pid=31111 comm="syz.1.11536" path="/2322/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 680.156658][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.102156][T31139] netlink: 'syz.5.11547': attribute type 10 has an invalid length. [ 684.102204][T31139] netlink: 128 bytes leftover after parsing attributes in process `syz.5.11547'. [ 686.711746][T31147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 688.967344][T31153] ceph: No mds server is up or the cluster is laggy [ 695.085256][ T29] audit: type=1400 audit(695.109:2608): avc: denied { accept } for pid=31180 comm="syz.0.11563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 697.045075][T31189] pimreg: entered allmulticast mode [ 701.716448][ T29] audit: type=1400 audit(701.732:2609): avc: denied { write } for pid=31205 comm="syz.4.11572" name="max_block_size" dev="nfsd" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 702.151325][T31210] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-0002' [ 702.151360][T31210] CPU: 1 UID: 0 PID: 31210 Comm: syz.1.11573 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.151397][T31210] Tainted: [L]=SOFTLOCKUP [ 702.151411][T31210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 702.151430][T31210] Call Trace: [ 702.151460][T31210] [ 702.151494][T31210] dump_stack_lvl+0x100/0x190 [ 702.151674][T31210] sysfs_warn_dup.cold+0x1c/0x28 [ 702.151839][T31210] sysfs_create_dir_ns+0x24b/0x2b0 [ 702.151938][T31210] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 702.151997][T31210] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 702.152178][T31210] ? do_raw_spin_unlock+0x53/0x1e0 [ 702.152239][T31210] ? do_raw_spin_unlock+0x145/0x1e0 [ 702.152444][T31210] kobject_add_internal+0x2c8/0x930 [ 702.152627][T31210] kobject_add+0x16a/0x1e0 [ 702.152728][T31210] ? __pfx_kobject_add+0x10/0x10 [ 702.152917][T31210] ? __kasan_kmalloc+0xaa/0xb0 [ 702.153045][T31210] ? lockdep_init_map_type+0x5c/0x250 [ 702.153118][T31210] ? class_to_subsys+0x114/0x150 [ 702.153414][T31210] device_add+0x294/0x1970 [ 702.153573][T31210] ? lockdep_init_map_type+0x5c/0x250 [ 702.153634][T31210] ? __pfx_device_add+0x10/0x10 [ 702.153691][T31210] ? lockdep_init_map_type+0x5c/0x250 [ 702.153796][T31210] ? __init_waitqueue_head+0xca/0x150 [ 702.154140][T31210] i2c_new_client_device+0x660/0xd30 [ 702.154414][T31210] new_device_store+0x20f/0x420 [ 702.154639][T31210] ? __pfx_new_device_store+0x10/0x10 [ 702.154984][T31210] ? find_held_lock+0x2b/0x80 [ 702.155090][T31210] ? sysfs_file_kobj+0xe4/0x290 [ 702.155163][T31210] ? sysfs_file_kobj+0xe4/0x290 [ 702.155270][T31210] ? __pfx_new_device_store+0x10/0x10 [ 702.155340][T31210] dev_attr_store+0x58/0x80 [ 702.155442][T31210] ? __pfx_dev_attr_store+0x10/0x10 [ 702.155546][T31210] sysfs_kf_write+0xf2/0x150 [ 702.155743][T31210] kernfs_fop_write_iter+0x3e0/0x5f0 [ 702.155790][T31210] ? __pfx_sysfs_kf_write+0x10/0x10 [ 702.155961][T31210] vfs_write+0x6af/0x1050 [ 702.156132][T31210] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 702.156301][T31210] ? __pfx_vfs_write+0x10/0x10 [ 702.156343][T31210] ? find_held_lock+0x2b/0x80 [ 702.156966][T31210] ksys_write+0x12a/0x250 [ 702.157093][T31210] ? __pfx_ksys_write+0x10/0x10 [ 702.157419][T31210] do_syscall_64+0x123/0x790 [ 702.157639][T31210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.157718][T31210] RIP: 0033:0x7f8a9b99e559 [ 702.157800][T31210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.157824][T31210] RSP: 002b:00007f8a9c934028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 702.157854][T31210] RAX: ffffffffffffffda RBX: 00007f8a9bc25fa0 RCX: 00007f8a9b99e559 [ 702.157873][T31210] RDX: 000000000000000b RSI: 0000200000000140 RDI: 0000000000000003 [ 702.157891][T31210] RBP: 00007f8a9ba35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 702.157908][T31210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.157926][T31210] R13: 00007f8a9bc26038 R14: 00007f8a9bc25fa0 R15: 00007ffe980adb18 [ 702.158405][T31210] [ 702.297295][T31210] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 702.297512][T31210] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 714.613239][T31255] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-0002' [ 714.613275][T31255] CPU: 1 UID: 0 PID: 31255 Comm: syz.5.11588 Tainted: G L syzkaller #0 PREEMPT(full) [ 714.613317][T31255] Tainted: [L]=SOFTLOCKUP [ 714.613335][T31255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 714.613359][T31255] Call Trace: [ 714.613400][T31255] [ 714.613444][T31255] dump_stack_lvl+0x100/0x190 [ 714.613673][T31255] sysfs_warn_dup.cold+0x1c/0x28 [ 714.613782][T31255] sysfs_create_dir_ns+0x24b/0x2b0 [ 714.613855][T31255] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 714.613937][T31255] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 714.614170][T31255] ? do_raw_spin_unlock+0x53/0x1e0 [ 714.614240][T31255] ? do_raw_spin_unlock+0x145/0x1e0 [ 714.614366][T31255] kobject_add_internal+0x2c8/0x930 [ 714.614605][T31255] kobject_add+0x16a/0x1e0 [ 714.614732][T31255] ? __pfx_kobject_add+0x10/0x10 [ 714.614875][T31255] ? __kasan_kmalloc+0xaa/0xb0 [ 714.614980][T31255] ? lockdep_init_map_type+0x5c/0x250 [ 714.615067][T31255] ? class_to_subsys+0x114/0x150 [ 714.615380][T31255] device_add+0x294/0x1970 [ 714.615471][T31255] ? lockdep_init_map_type+0x5c/0x250 [ 714.615563][T31255] ? __pfx_device_add+0x10/0x10 [ 714.615638][T31255] ? lockdep_init_map_type+0x5c/0x250 [ 714.615782][T31255] ? __init_waitqueue_head+0xca/0x150 [ 714.616073][T31255] i2c_new_client_device+0x660/0xd30 [ 714.616427][T31255] new_device_store+0x20f/0x420 [ 714.616573][T31255] ? __pfx_new_device_store+0x10/0x10 [ 714.616969][T31255] ? find_held_lock+0x2b/0x80 [ 714.617027][T31255] ? sysfs_file_kobj+0xe4/0x290 [ 714.617089][T31255] ? sysfs_file_kobj+0xe4/0x290 [ 714.617238][T31255] ? __pfx_new_device_store+0x10/0x10 [ 714.617324][T31255] dev_attr_store+0x58/0x80 [ 714.617455][T31255] ? __pfx_dev_attr_store+0x10/0x10 [ 714.617577][T31255] sysfs_kf_write+0xf2/0x150 [ 714.617704][T31255] kernfs_fop_write_iter+0x3e0/0x5f0 [ 714.617769][T31255] ? __pfx_sysfs_kf_write+0x10/0x10 [ 714.617998][T31255] vfs_write+0x6af/0x1050 [ 714.618151][T31255] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 714.618277][T31255] ? __pfx_vfs_write+0x10/0x10 [ 714.618326][T31255] ? find_held_lock+0x2b/0x80 [ 714.619021][T31255] ksys_write+0x12a/0x250 [ 714.619147][T31255] ? __pfx_ksys_write+0x10/0x10 [ 714.619437][T31255] do_syscall_64+0x123/0x790 [ 714.619656][T31255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.619699][T31255] RIP: 0033:0x7fd21039e559 [ 714.619763][T31255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.619790][T31255] RSP: 002b:00007fd2112b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 714.619827][T31255] RAX: ffffffffffffffda RBX: 00007fd210625fa0 RCX: 00007fd21039e559 [ 714.619848][T31255] RDX: 000000000000000b RSI: 0000200000000140 RDI: 0000000000000003 [ 714.619869][T31255] RBP: 00007fd210435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 714.619890][T31255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.619912][T31255] R13: 00007fd210626038 R14: 00007fd210625fa0 R15: 00007ffe3f2c0698 [ 714.620397][T31255] [ 714.769270][T31255] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 714.769442][T31255] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 716.638709][T31265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 731.773237][T31331] sd 0:0:1:0: PR command failed: 1026 [ 731.773659][T31331] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 731.774081][T31331] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 734.703219][T31336] ima: policy update failed [ 734.712135][ T29] audit: type=1802 audit(734.749:2610): pid=31336 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.11617" res=0 errno=0 [ 737.429944][T31348] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 737.432103][T31348] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 737.435506][T31348] overlayfs: failed to get uuid (2277/file2, err=-13); falling back to uuid=null. [ 741.275783][T31359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11622'. [ 741.365058][T31359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11622'. [ 741.565529][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 743.458200][T31364] CIFS: Attempting to mount //1#7.0.0.1/7/䅯yshare [ 744.290768][T31364] CIFS: VFS: Error connecting to socket. Aborting operation. [ 744.291289][T31364] CIFS: VFS: cifs_mount failed w/return code = -4 [ 748.108647][ T5714] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 748.531398][ T5714] usb 4-1: unable to get BOS descriptor or descriptor too short [ 748.531787][ T5714] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=e5.b4 [ 748.560826][ T5714] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 748.561093][ T5714] usb 4-1: can't read configurations, error -71 [ 762.337253][ T29] audit: type=1400 audit(762.383:2611): avc: denied { connect } for pid=31442 comm="syz.3.11654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 762.534934][T31445] sctp: [Deprecated]: syz.1.11653 (pid 31445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 762.534934][T31445] Use struct sctp_sack_info instead [ 767.960541][T31462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 768.747709][ T29] audit: type=1400 audit(768.806:2612): avc: denied { read } for pid=31463 comm="syz.5.11662" name="features" dev="configfs" ino=102818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 771.923674][ T5714] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 772.201695][ T5714] usb 4-1: Using ep0 maxpacket: 16 [ 772.225950][ T5714] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 772.346308][ T5714] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 772.346351][ T5714] usb 4-1: config 0 has no interface number 0 [ 772.346514][ T5714] usb 4-1: config 0 interface 246 has no altsetting 0 [ 772.481908][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.481948][ T5714] usb 4-1: Product: syz [ 772.481977][ T5714] usb 4-1: Manufacturer: syz [ 772.482006][ T5714] usb 4-1: SerialNumber: syz [ 772.618764][T31485] ipvlan2: entered promiscuous mode [ 772.650193][T31485] team0: Device ipvlan2 failed to register rx_handler [ 775.347463][T30440] usb 4-1: USB disconnect, device number 118 [ 776.360601][T31495] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11674'. [ 777.371941][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 782.889654][ T29] audit: type=1400 audit(782.943:2613): avc: denied { load_policy } for pid=31520 comm="syz.1.11681" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 782.901165][T31522] SELinux: ebitmap start bit (4294967295) is not a multiple of the map unit size (64) [ 782.906884][T31522] SELinux: failed to load policy [ 802.983010][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 812.149097][T31657] netlink: 87 bytes leftover after parsing attributes in process `syz.4.11731'. [ 824.243447][T31697] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11748'. [ 830.079117][T31725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11757'. [ 830.238925][T31724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11757'. [ 841.325471][ T29] audit: type=1400 audit(841.412:2614): avc: denied { map } for pid=31768 comm="syz.0.11774" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 842.252798][ T29] audit: type=1400 audit(842.323:2615): avc: denied { audit_write } for pid=31772 comm="syz.3.11776" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 843.203926][T31781] openvswitch: netlink: Flow key attribute not present in set flow. [ 843.233732][T31781] openvswitch: netlink: Flow key attribute not present in set flow. [ 846.380459][ T5714] wacom 0003:056A:003F.00F6: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 849.014957][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 849.317011][T31796] fido_id[31796]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 854.362687][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.362823][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.362973][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.363081][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.365375][T31829] 9p: Bad value for 'rfdno' [ 855.545257][T31830] TCP: TCP_TX_DELAY enabled [ 860.243147][T31848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11804'. [ 864.398701][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.168477][ T29] audit: type=1400 audit(869.286:2616): avc: denied { read write } for pid=31883 comm="syz.3.11817" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 869.225839][ T29] audit: type=1400 audit(869.286:2617): avc: denied { open } for pid=31883 comm="syz.3.11817" path="/2494/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 873.478664][T31904] binder: BC_ATTEMPT_ACQUIRE not supported [ 873.478702][T31904] binder: 31901:31904 ioctl c0306201 2000000001c0 returned -22 [ 876.932828][ T52] block nbd0: Receive control failed (result -32) [ 876.954582][ T52] block nbd0: Receive control failed (result -32) [ 887.417434][ T5791] kworker/0:7 (5791) used greatest stack depth: 17752 bytes left [ 896.424333][T31991] ip_tables: iptables: counters copy to user failed while replacing table [ 899.828276][T32002] dummy0: entered allmulticast mode [ 902.211361][T32013] loop7: detected capacity change from 0 to 7 [ 903.690626][T32013] Dev loop7: unable to read RDB block 7 [ 903.690697][T32013] loop7: unable to read partition table [ 903.732448][T32013] loop7: partition table beyond EOD, truncated [ 903.732541][T32013] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 904.738967][ T5714] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 904.987901][ T5714] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 905.049877][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.049920][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.079149][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.959265][ T5714] usb 2-1: USB disconnect, device number 117 [ 910.064318][ T5714] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 910.333827][ T5714] usb 2-1: Using ep0 maxpacket: 32 [ 910.357651][ T5714] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 910.401164][ T5714] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 910.401198][ T5714] usb 2-1: config 0 has no interface number 0 [ 910.401614][ T5714] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 910.401640][ T5714] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 910.401668][ T5714] usb 2-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 910.401694][ T5714] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 910.519877][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.519913][ T5714] usb 2-1: Product: syz [ 910.519936][ T5714] usb 2-1: Manufacturer: syz [ 910.519958][ T5714] usb 2-1: SerialNumber: syz [ 913.183027][ T5714] usb 2-1: USB disconnect, device number 118 [ 922.513728][T32089] sg_write: data in/out 1701604413/217 bytes for SCSI command 0x0-- guessing data in; [ 922.513728][T32089] program syz.4.11888 not setting count and/or reply_len properly [ 925.842109][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 927.670337][T32114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11897'. [ 927.670384][T32114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11897'. [ 933.977425][T29558] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 934.275468][T29558] usb 4-1: Using ep0 maxpacket: 8 [ 934.374124][T29558] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 934.458488][T29558] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 934.458896][T29558] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 934.458927][T29558] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 934.458955][T29558] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 934.458986][T29558] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 934.459013][T29558] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 934.459217][T29558] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.222237][ T5714] usb 4-1: USB disconnect, device number 119 [ 944.101101][T28539] kernel read not supported for file /fail_usercopy/probability (pid: 28539 comm: kworker/1:2) [ 949.397788][T32187] bonding: b is being created... [ 954.394933][ T29] audit: type=1400 audit(954.539:2618): avc: denied { read } for pid=32206 comm="syz.5.11928" path="socket:[105505]" dev="sockfs" ino=105505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 959.792012][T32228] openvswitch: netlink: Unknown key attributes 1 [ 959.889681][T32227] netlink: ct_mark mask cannot be 0 [ 959.896338][T32227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 960.048133][T32227] netlink: ct_mark mask cannot be 0 [ 960.048467][T32227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 969.690890][T32263] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 970.431025][ T29] audit: type=1400 audit(970.567:2619): avc: denied { bind } for pid=32266 comm="syz.3.11950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 975.591247][T29558] kernel write not supported for file /media4 (pid: 29558 comm: kworker/0:1) [ 977.596462][T29558] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 977.856267][T29558] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 977.930099][T29558] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.958054][T29558] usb 4-1: USB disconnect, device number 120 [ 987.228247][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.419957][ T29] audit: type=1400 audit(993.578:2620): avc: denied { ioctl } for pid=32346 comm="syz.1.11975" path="/2411/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1008.869665][T32389] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1008.893995][T32389] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1008.901608][T32389] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1008.944596][T32389] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1008.975261][T32389] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1009.881929][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1009.911901][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1009.934139][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1009.997736][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1010.025016][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1010.199842][ T29] audit: type=1400 audit(1010.387:2621): avc: denied { mounton } for pid=32388 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1012.132722][ T52] Bluetooth: hci1: command tx timeout [ 1014.210720][ T52] Bluetooth: hci1: command tx timeout [ 1016.290722][ T52] Bluetooth: hci1: command tx timeout [ 1018.372323][ T52] Bluetooth: hci1: command tx timeout [ 1027.832654][T32388] rxe_eth0 speed is unknown, defaulting to 1000 [ 1027.987948][T32388] rxe_eth0 speed is unknown, defaulting to 1000 [ 1028.040681][T32388] rxe_eth0 speed is unknown, defaulting to 1000 [ 1028.846995][T32447] batadv_slave_1: entered promiscuous mode [ 1028.907356][T32447] batadv_slave_1: left promiscuous mode [ 1048.614779][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1049.025488][T32388] infiniband rxe0: set active [ 1049.025888][T28539] rxe_eth0 speed is unknown, defaulting to 1000 [ 1049.026331][T32388] infiniband rxe0: added rxe_eth0 [ 1049.575322][T32388] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1049.575371][T32388] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1049.575421][T32388] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1051.679072][T32388] RDS/IB: rxe0: added [ 1051.679494][T32388] smc: adding ib device rxe0 with port count 1 [ 1051.679588][T32388] smc: ib device rxe0 port 1 has no pnetid [ 1051.708644][T28539] rxe_eth0 speed is unknown, defaulting to 1000 [ 1051.940422][T32388] rxe_eth0 speed is unknown, defaulting to 1000 [ 1055.823212][T32519] netlink: 632 bytes leftover after parsing attributes in process `syz.1.12030'. [ 1055.831896][T32519] netlink: 632 bytes leftover after parsing attributes in process `syz.1.12030'. [ 1069.767367][T32389] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1069.788078][T32389] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1069.808527][T32389] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1069.834717][T32389] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1069.861758][T32389] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1072.022246][ T52] Bluetooth: hci6: command tx timeout [ 1074.101640][ T52] Bluetooth: hci6: command tx timeout [ 1076.180017][ T52] Bluetooth: hci6: command tx timeout [ 1076.232312][T32388] rxe_eth0 speed is unknown, defaulting to 1000 [ 1078.260115][ T52] Bluetooth: hci6: command tx timeout [ 1086.692062][ T29] audit: type=1400 audit(1086.905:2622): avc: denied { read } for pid=32607 comm="syz.4.12054" laddr=::1 lport=60 faddr=::1 fport=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1090.488679][T32556] wg0 speed is unknown, defaulting to 1000 [ 1095.602143][T32632] 9p: Bad value for 'rfdno' [ 1099.663317][T32388] rxe_eth0 speed is unknown, defaulting to 1000 [ 1102.727623][T32650] bond0: option slaves: interface -b does not exist! [ 1107.614989][T32665] tmpfs: Using encoding : utf8-12.1.0 [ 1110.029179][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.954777][T32556] dummy0 speed is unknown, defaulting to 1000 [ 1115.251979][T32680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1115.990141][T28539] usb 6-1: new low-speed USB device number 99 using dummy_hcd [ 1116.251774][T28539] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1116.365795][T28539] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1116.365831][T28539] usb 6-1: config 0 has no interface number 0 [ 1116.366227][T28539] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1116.366263][T28539] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1116.366470][T28539] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.519511][T29558] usb 6-1: USB disconnect, device number 99 [ 1125.810582][T32388] rxe_eth0 speed is unknown, defaulting to 1000 [ 1126.451094][T32708] program syz.1.12087 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1126.555277][T32706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12088'. [ 1132.192929][T28539] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1132.418013][T28539] usb 4-1: Using ep0 maxpacket: 16 [ 1132.482109][T28539] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.1e [ 1132.551939][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1132.636141][T28539] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.636538][T28539] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1132.636573][T28539] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1132.636605][T28539] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1132.636836][T28539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.303283][T32035] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 1133.557946][T32035] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1133.620108][T32035] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1133.620145][T32035] usb 6-1: config 0 has no interface number 0 [ 1133.638172][T32035] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1133.638211][T32035] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.638248][T32035] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1133.638283][T32035] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1133.638522][T32035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.069387][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1134.085005][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1134.104010][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1134.135432][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1134.165597][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1135.971164][T32035] usb 4-1: USB disconnect, device number 121 [ 1136.319247][T32389] Bluetooth: hci7: command tx timeout [ 1136.871742][ T2316] usb 6-1: USB disconnect, device number 100 [ 1138.389947][T32389] Bluetooth: hci7: command tx timeout [ 1140.468460][T32389] Bluetooth: hci7: command tx timeout [ 1141.730326][T32750] overlayfs: invalid origin (0000) [ 1142.573301][T32389] Bluetooth: hci7: command tx timeout [ 1153.992442][T32388] rxe_eth0 speed is unknown, defaulting to 1000 [ 1154.473235][T29558] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1154.628996][ T319] 9p: Bad value for 'wfdno' [ 1154.732087][T29558] usb 2-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1154.785464][T29558] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.785876][T29558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.275438][T32035] usb 2-1: USB disconnect, device number 119 [ 1162.270167][T32729] wg0 speed is unknown, defaulting to 1000 [ 1166.126203][T32573] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1166.945561][ T29] audit: type=1400 audit(1167.195:2623): avc: denied { mount } for pid=344 comm="syz.3.12116" name="/" dev="rpc_pipefs" ino=107380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1167.204659][T32573] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1168.256747][ T29] audit: type=1400 audit(1168.516:2624): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1169.031811][ T348] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1170.401311][T32573] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1171.452846][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.744739][T32573] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.145185][ T355] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.331135][T31217] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.654782][T31217] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.091338][ T12] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.607000][T32573] lo: left allmulticast mode [ 1191.802349][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1191.814890][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1191.839995][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1191.927514][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1191.955758][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1193.961695][ T5609] Bluetooth: hci6: command 0x0406 tx timeout [ 1194.040980][ T5609] Bluetooth: hci4: command tx timeout [ 1196.122083][ T52] Bluetooth: hci4: command tx timeout [ 1196.282445][T32573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1196.455014][T32573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1196.503212][T32573] bond0 (unregistering): Released all slaves [ 1197.161231][T32573] bond1 (unregistering): Released all slaves [ 1198.209073][ T52] Bluetooth: hci4: command tx timeout [ 1198.615516][T32388] rxe_eth0 speed is unknown, defaulting to 1000 [ 1200.278158][ T52] Bluetooth: hci4: command tx timeout [ 1202.022629][T32573] IPVS: stopping master sync thread 20398 ... [ 1202.248717][T32573] IPVS: stopping backup sync thread 27767 ... [ 1209.451495][ T5609] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1209.487394][ T5609] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1209.511820][ T5609] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1209.587367][ T5609] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1209.605580][ T5609] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1211.792431][ T5609] Bluetooth: hci8: command tx timeout [ 1211.903159][ T454] netlink: 'syz.5.12145': attribute type 1 has an invalid length. [ 1211.903205][ T454] netlink: 'syz.5.12145': attribute type 1 has an invalid length. [ 1211.927141][ T454] iwpm_send_hello: Unable to send a nlmsg [ 1213.871851][ T5609] Bluetooth: hci8: command tx timeout [ 1214.976020][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1214.992823][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1215.019068][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1215.071812][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1215.113157][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1215.951480][ T5609] Bluetooth: hci8: command tx timeout [ 1217.309645][ T5609] Bluetooth: hci9: command tx timeout [ 1218.028264][ T5609] Bluetooth: hci8: command tx timeout [ 1219.387508][ T5609] Bluetooth: hci9: command tx timeout [ 1221.480932][ T5609] Bluetooth: hci9: command tx timeout [ 1223.547368][ T5609] Bluetooth: hci9: command tx timeout [ 1226.542876][ T29] audit: type=1400 audit(1226.835:2625): avc: denied { write } for pid=433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1229.594545][T32388] rxe_eth0 speed is unknown, defaulting to 1000 [ 1232.868102][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1232.898300][ T29] audit: type=1400 audit(1233.108:2626): avc: denied { write } for pid=498 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1237.408152][ T5264] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1245.245300][T29558] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1245.485258][T29558] usb 4-1: Using ep0 maxpacket: 32 [ 1245.516935][T29558] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1245.655798][T29558] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1245.655839][T29558] usb 4-1: config 0 has no interface number 0 [ 1245.816536][T29558] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.816573][T29558] usb 4-1: Product: syz [ 1245.816604][T29558] usb 4-1: Manufacturer: syz [ 1245.816630][T29558] usb 4-1: SerialNumber: syz [ 1248.875295][ T320] usb 4-1: USB disconnect, device number 122 [ 1249.885214][T32388] rxe_eth0 speed is unknown, defaulting to 1000 [ 1252.682206][ T544] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12162'. [ 1254.431035][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1254.451379][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1254.456082][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1254.470806][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1254.477997][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1256.654185][ T5609] Bluetooth: hci0: command tx timeout [ 1258.729149][ T5609] Bluetooth: hci0: command tx timeout [ 1258.750220][ T29] audit: type=1400 audit(1259.051:2627): avc: denied { write } for pid=523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.490783][ T5609] Bluetooth: hci7: command 0x0406 tx timeout [ 1260.809049][ T52] Bluetooth: hci0: command tx timeout [ 1262.888546][ T52] Bluetooth: hci0: command tx timeout [ 1264.517989][ T29] audit: type=1400 audit(1264.814:2628): avc: denied { write } for pid=572 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1268.268504][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1268.292436][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1268.309773][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1268.348572][ T5609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1268.359445][ T5609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1268.469070][ T581] can0: slcan on ttyS3. [ 1270.189557][ T5264] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1270.195496][ T583] can0 (unregistered): slcan off ttyS3. [ 1270.562463][ T5609] Bluetooth: hci3: command tx timeout [ 1272.671535][ T5609] Bluetooth: hci3: command tx timeout [ 1272.980362][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1272.983682][T32388] rxe_eth0 speed is unknown, defaulting to 1000 [ 1273.009269][ T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1273.025375][ T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1273.054941][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1273.070267][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1274.461700][ T600] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1274.462109][ T600] SELinux: failed to load policy [ 1274.722205][ T52] Bluetooth: hci3: command tx timeout [ 1275.202548][ T52] Bluetooth: hci10: command tx timeout [ 1276.819724][ T52] Bluetooth: hci3: command tx timeout [ 1277.278986][ T52] Bluetooth: hci10: command tx timeout [ 1279.368467][ T52] Bluetooth: hci10: command tx timeout [ 1279.558067][T28539] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 1279.836248][T28539] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1279.921037][T28539] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1279.921079][T28539] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1279.921339][T28539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.437067][ T52] Bluetooth: hci10: command tx timeout [ 1283.183205][ T320] usb 4-1: USB disconnect, device number 123 [ 1284.001175][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1292.160840][ T29] audit: type=1400 audit(1292.478:2629): avc: denied { write } for pid=598 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1294.259002][T32388] rxe_eth0 speed is unknown, defaulting to 1000 [ 1294.275486][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1296.160482][ T29] audit: type=1400 audit(1296.460:2630): avc: denied { write } for pid=646 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1298.995473][ T5264] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1308.465985][T32388] rxe_eth0 speed is unknown, defaulting to 1000 [ 1311.878764][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1311.906241][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1311.911710][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1311.933686][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1311.948603][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1313.919152][ T29] audit: type=1400 audit(1314.248:2631): avc: denied { write } for pid=650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1314.067884][ T52] Bluetooth: hci5: command tx timeout [ 1316.058325][T32389] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1316.078704][T32389] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1316.085702][T32389] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1316.112531][T32389] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1316.132896][T32389] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1316.152180][T32389] Bluetooth: hci5: command tx timeout [ 1316.786924][T32389] Bluetooth: hci4: command 0x0406 tx timeout [ 1318.220224][ T5609] Bluetooth: hci5: command tx timeout [ 1318.318822][ T5609] Bluetooth: hci11: command tx timeout [ 1318.937407][ T29] audit: type=1400 audit(1319.261:2632): avc: denied { write } for pid=684 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1320.300468][ T5609] Bluetooth: hci5: command tx timeout [ 1320.378605][ T5609] Bluetooth: hci11: command tx timeout [ 1322.456668][ T5609] Bluetooth: hci11: command tx timeout [ 1323.834655][ T5264] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1324.297536][ T31] INFO: task syz-executor:32556 blocked for more than 143 seconds. [ 1324.297568][ T31] Tainted: G L syzkaller #0 [ 1324.297586][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1324.297601][ T31] task:syz-executor state:D stack:24192 pid:32556 tgid:32556 ppid:1 task_flags:0x400140 flags:0x00080003 [ 1324.297681][ T31] Call Trace: [ 1324.297696][ T31] [ 1324.297834][ T31] __schedule+0x1259/0x6920 [ 1324.298317][ T31] ? lock_acquire+0x1d1/0x380 [ 1324.298493][ T31] ? __pfx___schedule+0x10/0x10 [ 1324.298527][ T31] ? find_held_lock+0x2b/0x80 [ 1324.298600][ T31] ? schedule+0x225/0x2c0 [ 1324.298865][ T31] schedule+0xdd/0x2c0 [ 1324.298989][ T31] schedule_preempt_disabled+0x13/0x30 [ 1324.400993][ T31] rwsem_down_write_slowpath+0x4c2/0x12a0 [ 1324.401341][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1324.401807][ T31] ? __pfx___might_resched+0x10/0x10 [ 1324.402033][ T31] down_write+0x1c0/0x1f0 [ 1324.402154][ T31] ? __pfx_down_write+0x10/0x10 [ 1324.402387][ T31] rdma_dev_exit_net+0x174/0x6b0 [ 1324.402600][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1324.450126][ T31] ? __pfx___might_resched+0x10/0x10 [ 1324.450205][ T31] ? __pfx_cfg80211_pernet_exit+0x10/0x10 [ 1324.450285][ T31] ? mutex_is_locked+0x17/0x60 [ 1324.450397][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1324.450512][ T31] ops_undo_list+0x2ee/0xab0 [ 1324.450748][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1324.450957][ T31] ? ops_init+0x2fa/0x5f0 [ 1324.451098][ T31] setup_net+0x1fa/0x3a0 [ 1324.451237][ T31] ? __pfx_setup_net+0x10/0x10 SYZFAIL: failed to recv rpc [ 1324.451552][ T31] copy_net_ns+0x345/0x7a0 [ 1324.500406][ T29] audit: type=1400 audit(1324.824:2633): avc: denied { write } for pid=5586 comm="syz-executor" path="pipe:[5149]" dev="pipefs" ino=5149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1324.550646][ T5609] Bluetooth: hci11: command tx timeout fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1324.552190][ T31] create_new_namespaces+0x3ea/0xac0 [ 1324.552432][ T31] unshare_nsproxy_namespaces+0xf2/0x220 [ 1324.552615][ T31] ksys_unshare+0x4a2/0xb30 [ 1324.552771][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1324.552822][ T31] ? __pfx_do_faccessat+0x10/0x10 [ 1324.552863][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 1324.553227][ T31] __x64_sys_unshare+0x31/0x40 [ 1324.553278][ T31] do_syscall_64+0x123/0x790 [ 1324.553430][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.553490][ T31] RIP: 0033:0x7f09fc59f827 [ 1324.553591][ T31] RSP: 002b:00007fff99fe0668 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1324.553637][ T31] RAX: ffffffffffffffda RBX: 00007f09fc825f40 RCX: 00007f09fc59f827 [ 1324.553663][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1324.553688][ T31] RBP: 00007f09fc8267b8 R08: 0000000000000000 R09: 0000000000000000 [ 1324.553714][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1324.553740][ T31] R13: 0000000000000003 R14: 00007fff99fe08a8 R15: 0000000000000000 [ 1324.581769][ T31] [ 1324.581857][ T31] [ 1324.581857][ T31] Showing all locks held in the system: [ 1324.581878][ T31] locks held by kworker/u8:0/12: 3, last CPU#1: [ 1324.581899][ T31] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1324.582019][ T31] #1: ffffc90000117d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1324.582148][ T31] #2: ffff88802cb87258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1324.582249][ T31] locks held by kworker/u8:1/13: 2, on CPU#0: [ 1324.582265][ T31] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1324.582341][ T31] #1: ffffc90000127d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1324.582434][ T31] locks held by pr/ttyS0/30: 2, last CPU#0: [ 1324.582453][ T31] #0: ffffffff8fdd8938 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 1324.582568][ T31] #1: ffffffff9cc7e678 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 1324.582692][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 1324.582715][ T31] #0: ffffffff8fdec620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1324.582844][ T31] locks held by kworker/u8:2/42: 3, last CPU#1: [ 1324.582859][ T31] #0: ffff888035bb4140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1324.582931][ T31] #1: ffffc90000b27d08 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1324.583017][ T31] #2: ffff88803584e1c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_send_outstanding_bat_ogm_packet+0x50f/0x7d0 [ 1324.583131][ T31] locks held by kworker/u8:6/153: 3, last CPU#1: [ 1324.583151][ T31] #0: ffff ** replaying previous printk message ** [ 1324.583151][ T31] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1324.617481][ T31] #1: ffffc90002e7fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1324.617601][ T31] #2: ffff888036095258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1324.617763][ T31] locks held by klogd/4958: 1, last CPU#1: [ 1324.617787][ T31] #0: ffffffff8fdec620 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1324.617883][ T31] locks held by dhcpcd/5264: 4, last CPU#1: [ 1324.617900][ T31] #0: ffffffff8ff3df90 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x5079/0x8430 [ 1324.617985][ T31] #1: ffff88801d085900 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 1324.618087][ T31] #2: ffff88807d6db440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 1324.618215][ T31] #3: ffffffff8fdec620 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1324.618344][ T31] locks held by syz-executor/5586: 2, last CPU#1: [ 1324.618367][ T31] #0: ffff88802b540f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 1324.618485][ T31] #1: ffffffff8fdec620 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1324.618609][ T31] locks held by kworker/u8:5/21017: 3, last CPU#1: [ 1324.618627][ T31] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1324.618723][ T31] #1: ffffc9000e10fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1324.618832][ T31] #2: ffff888057a71258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1324.618974][ T31] locks held by kworker/0:1/29558: 2, last CPU#0: [ 1324.618997][ T31] #0: ffff88801d059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1324.619089][ T31] #1: ffffc90004687d08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1324.642540][ T31] locks held by kworker/u8:3/31217: 2, on CPU#1: [ 1324.642566][ T31] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1324.642678][ T31] #1: ffffc9000e13fd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1324.642803][ T31] locks held by syz-executor/32388: 7, last CPU#1: [ 1324.642826][ T31] #0: ffffffff9cce99a8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x168/0x6f0 [ 1324.642930][ T31] #1: ffffffff918f9fa8 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x2f0/0x630 [ 1324.643014][ T31] #2: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0x103/0x3f0 [ 1324.643104][ T31] #3: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: enable_device_and_get+0x2ce/0x3f0 [ 1324.643207][ T31] #4: ffff888077be5020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 1324.643323][ T31] #5: ffff88801e2c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x38/0xaa0 [ 1324.643455][ T31] #6: ffff88801e2c7210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x555/0x850 [ 1324.643538][ T31] locks held by syz-executor/32556: 2, on CPU#1: [ 1324.643559][ T31] #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1324.643643][ T31] #1: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 1324.643736][ T31] locks held by kworker/u8:8/32573: 4, on CPU#0: [ 1324.643756][ T31] #0: ffff88801e2e0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1324.643863][ T31] #1: ffffc90006cd7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1324.643984][ T31] #2: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1324.669144][ T31] #3: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 1324.669276][ T31] locks held by syz-executor/32729: 3, on CPU#1: [ 1324.669300][ T31] #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1324.669384][ T31] #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 1324.669464][ T31] #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 1324.669564][ T31] locks held by syz-executor/406: 3, on CPU#1: [ 1324.669583][ T31] #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1324.669693][ T31] #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 1324.669814][ T31] #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 1324.669936][ T31] locks held by syz-executor/446: 3, on CPU#0: [ 1324.669951][ T31] #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1324.670025][ T31] #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 1324.670109][ T31] #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 1324.670208][ T31] locks held by syz-executor/458: 3, on CPU#0: [ 1324.670228][ T31] #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1324.670346][ T31] #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 1324.670472][ T31] #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 1324.670571][ T31] locks held by syz-executor/548: 3, on CPU#0: [ 1324.670587][ T31] #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1324.698055][ T31] #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 1324.698151][ T31] #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 1324.698260][ T31] locks held by syz-executor/584: 3, on CPU#0: [ 1324.698281][ T31] #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1324.698404][ T31] #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 1324.698526][ T31] #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 1324.698602][ T31] locks held by syz-executor/594: 3, on CPU#0: [ 1324.698619][ T31] #0: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1324.698705][ T31] #1: ffffffff918e4868 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 1324.698805][ T31] #2: ffffffff918e45e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 1324.698918][ T31] locks held by syz-executor/696: 1, last CPU#1: [ 1324.698941][ T31] #0: ffffffff8fdec620 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1324.699077][ T31] locks held by modprobe/699: 2, last CPU#1: [ 1324.699101][ T31] #0: ffff88807f48a800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 1324.699188][ T31] #1: ffffffff8fdec620 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1324.699271][ T31] locks held by syz.3.12183/701: 2, last CPU#1: [ 1324.699289][ T31] #0: ffff88807d6d8340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 1324.699388][ T31] #1: ffffffff8fdec620 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1324.699500][ T31] locks held by dhcpcd/703: 1, last CPU#1: [ 1324.699521][ T31] #0: ffff88807d6dd900 (&mm->mmap_lock){++++}-{4:4}, at: vms_complete_munmap_vmas+0x946/0xdd0 [ 1324.718636][ T31] locks held by modprobe/704: 2, last CPU#1: [ 1324.718653][ T31] #0: ffff88807110c080 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x35/0x6f0 [ 1324.718742][ T31] #1: ffffffff8fdec620 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_handle+0x63/0x530 [ 1324.718896][ T31] [ 1324.718910][ T31] ============================================= [ 1324.718910][ T31] [ 1324.718926][ T31] NMI backtrace for cpu 1 [ 1324.718948][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1324.718980][ T31] Tainted: [L]=SOFTLOCKUP [ 1324.718996][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1324.719015][ T31] Call Trace: [ 1324.719052][ T31] [ 1324.719091][ T31] dump_stack_lvl+0x100/0x190 [ 1324.719219][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1324.719313][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1324.719387][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1324.719548][ T31] sys_info+0x141/0x190 [ 1324.719645][ T31] watchdog+0xcb1/0x1030 [ 1324.719825][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1324.719915][ T31] ? __pfx_watchdog+0x10/0x10 [ 1324.720059][ T31] ? __kthread_parkme+0x18f/0x230 [ 1324.720178][ T31] ? kthread+0x13a/0x450 [ 1324.720220][ T31] ? __pfx_watchdog+0x10/0x10 [ 1324.720262][ T31] kthread+0x373/0x450 [ 1324.720348][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.720511][ T31] ret_from_fork+0x730/0xd60 [ 1324.720595][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1324.720698][ T31] ? __switch_to+0x800/0x10f0 [ 1324.720799][ T31] ? __pfx_kthread+0x10/0x10 [ 1324.720964][ T31] ret_from_fork_asm+0x1a/0x30 [ 1324.721365][ T31] [ 1324.721420][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1324.721452][ C0] NMI backtrace for cpu 0 [ 1324.721473][ C0] CPU: 0 UID: 0 PID: 30 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1324.721501][ C0] Tainted: [L]=SOFTLOCKUP [ 1324.721516][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1324.721534][ C0] RIP: 0010:preempt_count_add+0x4a/0x150 [ 1324.721581][ C0] Code: c0 c0 15 9b 9c 48 89 c1 83 e0 07 48 c1 e9 03 83 c0 03 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 db 00 00 00 65 48 8b 05 3e 7e b6 13 <8b> 0d d0 f3 c3 1a 89 c2 85 c9 75 0a 0f b6 c0 3d f4 00 00 00 7f 5f [ 1324.721605][ C0] RSP: 0018:ffffc90000a67938 EFLAGS: 00000097 [ 1324.721635][ C0] RAX: 8000000000000002 RBX: 0000000000000001 RCX: 1ffffffff39362b8 [ 1324.721647][ C0] RDX: 0000000000000004 RSI: ffffffff8c625600 RDI: 0000000000000001 [ 1324.721659][ C0] RBP: 000003647763a9ea R08: 0000000000000005 R09: 0000000000000000 [ 1324.721671][ C0] R10: 00000000000007d8 R11: 205d313354202020 R12: 0000000000000000 [ 1324.721683][ C0] R13: 0000000000000af1 R14: fffffbfff398fd29 R15: dffffc0000000000 [ 1324.721696][ C0] FS: 0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 1324.721714][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1324.721728][ C0] CR2: 00007ffe482503e0 CR3: 0000000039be2000 CR4: 00000000003526f0 [ 1324.721741][ C0] Call Trace: [ 1324.721755][ C0] [ 1324.721785][ C0] delay_tsc+0x3c/0xc0 [ 1324.721879][ C0] wait_for_lsr+0xf3/0x210 [ 1324.722093][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 1324.722182][ C0] __serial8250_console_fifo_write+0x23c/0x290 [ 1324.722223][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 1324.722433][ C0] serial8250_console_write+0x1108/0x14f0 [ 1324.722548][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1324.722600][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 1324.722728][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 1324.722941][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 1324.723140][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1324.723182][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 1324.723221][ C0] ? do_raw_spin_lock+0xf0/0x260 [ 1324.723493][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 1324.723538][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 1324.723655][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 1324.723733][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 1324.723948][ C0] nbcon_kthread_func+0x613/0x7d0 [ 1324.724146][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1324.724314][ C0] ? __kthread_parkme+0x18f/0x230 [ 1324.724488][ C0] ? kthread+0x13a/0x450 [ 1324.724536][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1324.724575][ C0] kthread+0x373/0x450 [ 1324.724622][ C0] ? __pfx_kthread+0x10/0x10 [ 1324.724717][ C0] ret_from_fork+0x730/0xd60 [ 1324.724819][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1324.724959][ C0] ? __switch_to+0x800/0x10f0 [ 1324.725012][ C0] ? __pfx_kthread+0x10/0x10 [ 1324.725103][ C0] ret_from_fork_asm+0x1a/0x30 [ 1324.725454][ C0] [ 1324.858835][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1326.009401][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1326.020079][ T31] Tainted: [L]=SOFTLOCKUP [ 1326.024401][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1326.034455][ T31] Call Trace: [ 1326.037752][ T31] [ 1326.040702][ T31] dump_stack_lvl+0x100/0x190 [ 1326.045557][ T31] vpanic+0x553/0x970 [ 1326.049577][ T31] ? __pfx_vpanic+0x10/0x10 [ 1326.054381][ T31] panic+0xd1/0xe0 [ 1326.058195][ T31] ? __pfx_panic+0x10/0x10 [ 1326.062753][ T31] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1326.068979][ T31] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1326.075168][ T31] ? watchdog.cold+0x1ec/0x234 [ 1326.080101][ T31] watchdog.cold+0x1fd/0x234 [ 1326.084905][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1326.090827][ T31] ? __pfx_watchdog+0x10/0x10 [ 1326.095615][ T31] ? __kthread_parkme+0x18f/0x230 [ 1326.100731][ T31] ? kthread+0x13a/0x450 [ 1326.104986][ T31] ? __pfx_watchdog+0x10/0x10 [ 1326.109688][ T31] kthread+0x373/0x450 [ 1326.113822][ T31] ? __pfx_kthread+0x10/0x10 [ 1326.118568][ T31] ret_from_fork+0x730/0xd60 [ 1326.123225][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1326.128440][ T31] ? __switch_to+0x800/0x10f0 [ 1326.133221][ T31] ? __pfx_kthread+0x10/0x10 [ 1326.137958][ T31] ret_from_fork_asm+0x1a/0x30 [ 1326.143171][ T31] [ 1326.146380][ T31] Kernel Offset: disabled [ 1326.150699][ T31] Rebooting in 86400 seconds..