last executing test programs: 3.168303607s ago: executing program 1 (id=4751): io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) close(0x3) r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/92, 0x5c}], 0x1) 3.041131699s ago: executing program 1 (id=4753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000780)={0x0, 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 3.00707608s ago: executing program 1 (id=4754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000580)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}}}, 0x0) 2.864481552s ago: executing program 1 (id=4758): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 2.771351273s ago: executing program 4 (id=4759): prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x40000000000000) 2.722485185s ago: executing program 1 (id=4761): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(0x0, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) socket$nl_route(0x10, 0x3, 0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)) close_range(r5, 0xffffffffffffffff, 0x0) 2.631655143s ago: executing program 0 (id=4762): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x800) 2.563866586s ago: executing program 4 (id=4764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000780)={0x0, &(0x7f0000000600)}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 1.989754424s ago: executing program 0 (id=4765): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x1) 1.981380075s ago: executing program 2 (id=4766): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x300, 0x0, 0x1, 0x9, 0x0, 0x6}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f00000000c0)=0x7f, 0x4) sendto$inet6(r0, &(0x7f0000000180)="c412", 0xffe6, 0x40, &(0x7f0000000240)={0xa, 0x4ea2, 0x5, @empty, 0x401}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 1.917588971s ago: executing program 1 (id=4767): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e1f, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 1.895120979s ago: executing program 3 (id=4768): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000001c0)=0x7, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2000005) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/139, &(0x7f00000002c0)=0x8b) r3 = socket$netlink(0x10, 0x3, 0x8000000004) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0xfffffee5, 0x10, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffece}, 0x48) ppoll(&(0x7f0000000540)=[{r1, 0x200}, {r1, 0x80}], 0x2, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0xcbff9000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 1.846932293s ago: executing program 4 (id=4769): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x27d, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.816320705s ago: executing program 2 (id=4770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002e00)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x4, 0x0, 0x11}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0x18, 0x66, 0x0, 0xb, 0x6c, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp={0x44, 0x4, 0x14, 0x0, 0x8}]}}}}, 0x26) 1.81514429s ago: executing program 0 (id=4771): ioprio_set$pid(0x3, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) sched_setattr(0x0, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r1}, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 1.747767922s ago: executing program 4 (id=4772): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socket$rds(0x15, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0xe0e4f3ee43f6dc44, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.681234224s ago: executing program 3 (id=4773): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x240448c1) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40010000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.667529556s ago: executing program 0 (id=4774): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) 1.646685337s ago: executing program 4 (id=4775): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x5313, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r3, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 1.007318997s ago: executing program 3 (id=4776): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, 0x0, 0x0, 0x8, 0x7d, 0x0, 0x1, 0x5, 0x0}) socket$netlink(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0xffffffff, 0x0, 'queue1\x00', 0x1}) write$sndseq(r0, 0x0, 0x0) 940.736907ms ago: executing program 0 (id=4777): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = memfd_secret(0x0) ftruncate(r0, 0x51a9497) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f000001b240)={0x80, 0x1c, [0x8, 0x5, 0x9, 0x2, 0x400, 0x1, 0x7]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002240)=""/102400, 0x19000) r2 = syz_open_procfs(0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x40c0084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ff, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) 866.135373ms ago: executing program 2 (id=4778): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x6, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0xc800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r3, 0xf55c7000) 556.048055ms ago: executing program 3 (id=4779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) getpid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r1, 0x0, 0x80000}) 533.154658ms ago: executing program 4 (id=4780): syz_io_uring_setup(0x40696, 0x0, 0x0, 0x0) 266.709799ms ago: executing program 2 (id=4781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x18, r1, 0x1488f346e7c00843, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 148.70082ms ago: executing program 0 (id=4782): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 80.690213ms ago: executing program 3 (id=4783): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000480)={0xa, 0x1, 0x80000, @mcast1, 0xf}, 0x1c, 0x0}, 0x40048d0) 80.521758ms ago: executing program 2 (id=4784): r0 = io_uring_setup(0x3f1, &(0x7f0000000140)={0x0, 0x3, 0x3000, 0x2}) poll(&(0x7f0000000080)=[{r0, 0x200}], 0x1, 0x6) 6.855404ms ago: executing program 3 (id=4785): read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x1]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 2 (id=4786): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) clock_getres(0xfffffffffffffff5, 0x0) kernel console output (not intermixed with test programs): :sysadm_t tclass=mctp_socket permissive=1 [ 1055.569282][ T5952] usb 4-1: GET_CAPABILITIES returned 0 [ 1055.580235][ T5952] usbtmc 4-1:16.0: can't read capabilities [ 1055.600131][T18527] netlink: 'syz.2.3404': attribute type 4 has an invalid length. [ 1055.647338][T18527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18527 comm=syz.2.3404 [ 1055.804936][ T5952] usb 4-1: USB disconnect, device number 71 [ 1055.864055][T18532] netlink: 'syz.1.3406': attribute type 4 has an invalid length. [ 1055.906619][T18532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18532 comm=syz.1.3406 [ 1056.198408][ T5951] usb usb36-port1: attempt power cycle [ 1056.328656][ T5177] usb 5-1: reset high-speed USB device number 54 using dummy_hcd [ 1056.351597][ T5177] usb 5-1: device reset changed ep0 maxpacket size! [ 1056.404905][ T6325] usb 5-1: USB disconnect, device number 54 [ 1056.717043][T18538] comedi: No check for data length of config insn id 6 is implemented [ 1056.726946][T18538] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1056.736463][T18538] comedi: Assuming n=419 is correct [ 1056.749877][ T6325] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1056.808298][ T5951] usb usb36-port1: unable to enumerate USB device [ 1057.657671][ T935] hid-generic 0000:0009:0000.0018: unknown main item tag 0x1 [ 1057.734517][ T935] hid-generic 0000:0009:0000.0018: hidraw0: HID vffffff.97 Device [syz0] on syz0 [ 1057.856740][ T6325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.890384][ T6325] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1057.899702][ T6325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.917414][T18543] fido_id[18543]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1057.920779][ T6325] usb 5-1: config 0 descriptor?? [ 1058.163133][ T6325] pwc: Askey VC010 type 2 USB webcam detected. [ 1058.598978][ T6325] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1058.612726][ T6325] pwc: recv_control_msg error -32 req 02 val 2700 [ 1058.630816][ T6325] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1058.925745][ T6325] pwc: recv_control_msg error -32 req 04 val 1000 [ 1059.362341][ T7718] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1059.752996][T18568] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3407'. [ 1059.775036][ T6325] pwc: recv_control_msg error -71 req 04 val 1300 [ 1059.811441][ T6325] pwc: recv_control_msg error -71 req 04 val 1400 [ 1059.821550][ T6325] pwc: recv_control_msg error -71 req 02 val 2000 [ 1059.828701][ T6325] pwc: recv_control_msg error -71 req 02 val 2100 [ 1059.851276][ T7718] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1059.860664][ T6325] pwc: recv_control_msg error -71 req 04 val 1500 [ 1059.868605][ T7718] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1059.879510][ T7718] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1059.888979][ T6325] pwc: recv_control_msg error -71 req 02 val 2500 [ 1059.898647][ T7718] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1059.909763][ T6325] pwc: recv_control_msg error -71 req 02 val 2400 [ 1059.916601][ T6325] pwc: recv_control_msg error -71 req 02 val 2600 [ 1059.931865][ T7718] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1059.947306][ T6325] pwc: recv_control_msg error -71 req 02 val 2900 [ 1059.954104][ T6325] pwc: recv_control_msg error -71 req 02 val 2800 [ 1059.963918][ T6325] pwc: recv_control_msg error -71 req 04 val 1100 [ 1059.974326][ T6325] pwc: recv_control_msg error -71 req 04 val 1200 [ 1059.987293][ T6325] pwc: Registered as video103. [ 1059.994522][ T6325] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 1060.011933][ T6325] usb 5-1: USB disconnect, device number 55 [ 1060.056183][ T7718] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1060.075683][ T7718] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1060.085118][ T7718] usb 4-1: Product: syz [ 1060.090269][ T7718] usb 4-1: Manufacturer: syz [ 1060.109811][ T7718] cdc_wdm 4-1:1.0: skipping garbage [ 1060.116449][ T7718] cdc_wdm 4-1:1.0: skipping garbage [ 1060.123290][ T7718] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1060.129248][ T7718] cdc_wdm 4-1:1.0: Unknown control protocol [ 1060.510914][T18592] FAULT_INJECTION: forcing a failure. [ 1060.510914][T18592] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.537828][T18592] CPU: 1 UID: 0 PID: 18592 Comm: syz.1.3419 Not tainted syzkaller #0 PREEMPT(full) [ 1060.537853][T18592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1060.537863][T18592] Call Trace: [ 1060.537867][T18592] [ 1060.537872][T18592] dump_stack_lvl+0x100/0x190 [ 1060.537893][T18592] should_fail_ex.cold+0x5/0xa [ 1060.537913][T18592] should_failslab+0xc2/0x120 [ 1060.537928][T18592] kmem_cache_alloc_noprof+0x83/0x780 [ 1060.537942][T18592] ? is_bpf_text_address+0x8a/0x1a0 [ 1060.537959][T18592] ? fuse_request_alloc+0x22/0x200 [ 1060.537982][T18592] ? fuse_request_alloc+0x22/0x200 [ 1060.537996][T18592] fuse_request_alloc+0x22/0x200 [ 1060.538017][T18592] fuse_get_req+0x74a/0xfe0 [ 1060.538035][T18592] ? arch_stack_walk+0xa6/0xf0 [ 1060.538061][T18592] ? __pfx_fuse_get_req+0x10/0x10 [ 1060.538081][T18592] ? stack_trace_save+0x8e/0xc0 [ 1060.538105][T18592] ? __pfx_stack_trace_save+0x10/0x10 [ 1060.538132][T18592] __fuse_simple_request+0xb5/0xe70 [ 1060.538152][T18592] ? kasan_save_stack+0x3f/0x50 [ 1060.538174][T18592] fuse_do_getattr+0x281/0x540 [ 1060.538197][T18592] ? do_execveat_common.isra.0+0x1d0/0x5b0 [ 1060.538216][T18592] ? __pfx_fuse_do_getattr+0x10/0x10 [ 1060.538249][T18592] ? selinux_inode_permission+0xa1/0x1160 [ 1060.538283][T18592] ? find_held_lock+0x2b/0x80 [ 1060.538305][T18592] ? lockref_get_not_dead+0x6a/0x80 [ 1060.538326][T18592] ? lockref_get_not_dead+0x6a/0x80 [ 1060.538349][T18592] ? find_held_lock+0x2b/0x80 [ 1060.538374][T18592] fuse_permission+0x4e6/0x670 [ 1060.538402][T18592] ? __pfx_fuse_permission+0x10/0x10 [ 1060.538425][T18592] inode_permission+0x3f1/0x630 [ 1060.538455][T18592] may_open+0x2b8/0x480 [ 1060.538481][T18592] path_openat+0x14b7/0x3120 [ 1060.538510][T18592] ? __pfx_path_openat+0x10/0x10 [ 1060.538529][T18592] ? stack_trace_save+0x8e/0xc0 [ 1060.538552][T18592] ? __pfx_stack_trace_save+0x10/0x10 [ 1060.538577][T18592] ? stack_depot_save_flags+0x27/0x9c0 [ 1060.538605][T18592] do_filp_open+0x1f7/0x420 [ 1060.538627][T18592] ? __pfx_do_filp_open+0x10/0x10 [ 1060.538646][T18592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.538690][T18592] do_open_execat+0xf6/0x3a0 [ 1060.538707][T18592] ? __pfx_do_open_execat+0x10/0x10 [ 1060.538733][T18592] alloc_bprm+0x2d/0x710 [ 1060.538752][T18592] do_execveat_common.isra.0+0x1d0/0x5b0 [ 1060.538775][T18592] __x64_sys_execveat+0xda/0x120 [ 1060.538796][T18592] do_syscall_64+0xc9/0xf80 [ 1060.538817][T18592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.538833][T18592] RIP: 0033:0x7f8398f9acb9 [ 1060.538848][T18592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.538864][T18592] RSP: 002b:00007f8399ef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1060.538881][T18592] RAX: ffffffffffffffda RBX: 00007f8399216090 RCX: 00007f8398f9acb9 [ 1060.538893][T18592] RDX: 0000000000000000 RSI: 0000200000001400 RDI: ffffffffffffff9c [ 1060.538903][T18592] RBP: 00007f8399ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.538913][T18592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.538923][T18592] R13: 00007f8399216128 R14: 00007f8399216090 R15: 00007ffcaa5de7a8 [ 1060.538946][T18592] [ 1060.899361][ T5952] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1061.128846][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 1061.143054][ T5952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1061.154368][ T5952] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.80 [ 1061.268513][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.286902][ T5952] usb 5-1: config 0 descriptor?? [ 1061.471390][T18605] netlink: 'syz.1.3422': attribute type 4 has an invalid length. [ 1061.535701][ T5952] usbhid 5-1:0.0: can't add hid device: -71 [ 1061.562784][ T5952] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1061.573458][T18605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18605 comm=syz.1.3422 [ 1061.612581][ T5952] usb 5-1: USB disconnect, device number 56 [ 1062.157045][T18610] usb usb9: usbfs: process 18610 (syz.4.3423) did not claim interface 4 before use [ 1062.286349][ T30] audit: type=1400 audit(3916498858.977:1917): avc: denied { bind } for pid=18611 comm="syz.4.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1063.274068][ T5952] usb 4-1: USB disconnect, device number 72 [ 1063.672272][T18642] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3432'. [ 1063.691204][ T30] audit: type=1400 audit(3916498860.286:1918): avc: denied { getopt } for pid=18636 comm="syz.3.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1063.924899][T18635] pimreg: entered allmulticast mode [ 1064.020820][T18646] hugetlbfs: syz.2.3431 (18646): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1064.136140][T18634] pimreg: left allmulticast mode [ 1064.187035][T18638] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3429'. [ 1064.350466][ T30] audit: type=1400 audit(3916498860.913:1919): avc: denied { accept } for pid=18648 comm="syz.2.3433" path="socket:[57604]" dev="sockfs" ino=57604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1064.691334][T18656] usb usb9: usbfs: process 18656 (syz.2.3435) did not claim interface 4 before use [ 1064.953601][ T5952] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1065.209917][ T5952] usb 2-1: Using ep0 maxpacket: 8 [ 1065.226553][ T5952] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1065.246163][ T5952] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.80 [ 1065.256571][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.273683][ T5952] usb 2-1: config 0 descriptor?? [ 1065.275013][T18673] netlink: 'syz.4.3438': attribute type 4 has an invalid length. [ 1065.315715][T18673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18673 comm=syz.4.3438 [ 1065.364887][ T935] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1065.565407][ T935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.580279][ T935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.598700][ T935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.620356][ T935] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1065.639644][ T935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.681651][ T935] usb 4-1: Product: syz [ 1065.685999][ T935] usb 4-1: Manufacturer: syz [ 1065.690813][ T935] usb 4-1: SerialNumber: syz [ 1065.719582][ T935] usb 4-1: config 0 descriptor?? [ 1065.739302][ T935] ti_usb_3410_5052 4-1:0.0: required endpoints missing [ 1065.751273][ T5952] usbhid 2-1:0.0: can't add hid device: -71 [ 1065.758434][ T5952] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1065.781878][ T5952] usb 2-1: USB disconnect, device number 48 [ 1066.828319][ T9257] usb 4-1: USB disconnect, device number 73 [ 1067.072780][T18688] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1067.083750][T18688] overlayfs: failed to clone lowerpath [ 1067.163166][T18690] netlink: 'syz.4.3443': attribute type 4 has an invalid length. [ 1067.199341][T18690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18690 comm=syz.4.3443 [ 1067.540749][ T7718] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1067.714974][ T7718] usb 2-1: Using ep0 maxpacket: 8 [ 1067.828190][T18698] usb usb9: usbfs: process 18698 (syz.3.3447) did not claim interface 4 before use [ 1068.033812][T18701] overlayfs: overlapping lowerdir path [ 1068.201094][T18703] macvtap0: entered allmulticast mode [ 1068.214743][T18703] veth0_macvtap: entered allmulticast mode [ 1069.085917][ T7718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1069.096150][ T5951] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1069.117920][ T7718] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1069.127670][ T7718] usb 2-1: can't read configurations, error -71 [ 1069.143781][T18719] team0: Device vxcan1 is of different type [ 1069.283012][ T5951] usb 5-1: Using ep0 maxpacket: 16 [ 1069.300659][ T5951] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1069.330012][ T5951] usb 5-1: config 0 has no interface number 0 [ 1069.355259][ T3020] bridge_slave_1: left allmulticast mode [ 1069.366495][ T3020] bridge_slave_1: left promiscuous mode [ 1069.384319][ T3020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.397710][ T5951] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1069.423922][ T3020] bridge_slave_0: left allmulticast mode [ 1069.429767][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.436896][ T3020] bridge_slave_0: left promiscuous mode [ 1069.458002][ T3020] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.475100][ T5951] usb 5-1: Product: syz [ 1069.491128][ T5951] usb 5-1: Manufacturer: syz [ 1069.509187][ T5951] usb 5-1: SerialNumber: syz [ 1069.532148][ T5951] usb 5-1: config 0 descriptor?? [ 1069.558066][ T5951] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1070.416874][ T5951] gspca_spca1528: reg_w err -110 [ 1070.448636][ T5951] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 1070.480577][ T6325] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1070.662772][ T6325] usb 2-1: Using ep0 maxpacket: 32 [ 1070.683863][ T6325] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1070.728407][ T6325] usb 2-1: config 0 has no interface number 0 [ 1070.757135][ T6325] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1070.779308][ T6325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.796097][ T6325] usb 2-1: Product: syz [ 1070.805577][ T6325] usb 2-1: Manufacturer: syz [ 1070.818675][ T6325] usb 2-1: SerialNumber: syz [ 1070.850354][ T6325] usb 2-1: config 0 descriptor?? [ 1070.865568][ T6325] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1071.100112][ T6325] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1071.145200][ T6325] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1071.333016][T18741] overlayfs: overlapping lowerdir path [ 1071.354723][ T3020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1071.369004][ T3020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1071.392896][ T3020] bond0 (unregistering): Released all slaves [ 1071.592069][ T3020] bond1 (unregistering): Released all slaves [ 1071.829961][ T3020] bond2 (unregistering): Released all slaves [ 1071.929243][ T3020] hma224): left promiscuous mode [ 1072.024196][ T3020] [: left promiscuous mode [ 1072.062099][ T9257] usb 5-1: USB disconnect, device number 57 [ 1072.109261][ T3020] tipc: Disabling bearer [ 1072.132006][ T3020] tipc: Left network mode [ 1072.276723][ T6325] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1072.825645][ T6325] usb 4-1: Using ep0 maxpacket: 8 [ 1073.040832][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1073.139184][ T7718] usb 2-1: USB disconnect, device number 51 [ 1073.221922][ T7718] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1073.243077][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.262127][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.332894][ T7718] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1073.364408][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.404648][ T7718] quatech2 2-1:0.51: device disconnected [ 1073.418052][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.492603][ T3020] batadv_slave_0: left promiscuous mode [ 1073.503679][ T3020] veth1_macvtap: left promiscuous mode [ 1073.513969][ T3020] veth0_macvtap: left promiscuous mode [ 1073.520030][ T3020] veth1_vlan: left promiscuous mode [ 1073.568346][ T3020] veth0_vlan: left promiscuous mode [ 1073.645184][T16778] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1073.816138][T16778] usb 5-1: Using ep0 maxpacket: 8 [ 1073.844384][T16778] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1073.859798][T16778] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.80 [ 1073.873448][ T3020] team0 (unregistering): Port device batadv4 removed [ 1073.888210][T16778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.947600][T16778] usb 5-1: config 0 descriptor?? [ 1074.026825][ T3020] team0 (unregistering): Port device batadv3 removed [ 1074.055528][ T3020] team0 (unregistering): Port device batadv2 removed [ 1074.167780][ T3020] team0 (unregistering): Port device batadv1 removed [ 1074.206418][T16778] usbhid 5-1:0.0: can't add hid device: -71 [ 1074.238946][T16778] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1074.303652][T16778] usb 5-1: USB disconnect, device number 58 [ 1074.410456][T18781] overlayfs: overlapping lowerdir path [ 1074.755007][ T6325] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1074.818641][ T6325] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1074.841770][ T6325] usb 4-1: can't read configurations, error -71 [ 1075.259596][T18792] comedi: No check for data length of config insn id 6 is implemented [ 1075.267886][T18792] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1075.278155][T18792] comedi: Assuming n=419 is correct [ 1075.299767][T18792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3473'. [ 1075.394672][ T5952] hid-generic 0000:0009:0000.0019: unknown main item tag 0x1 [ 1075.640505][ T5952] hid-generic 0000:0009:0000.0019: hidraw0: HID vffffff.97 Device [syz0] on syz0 [ 1075.695419][ T3020] team0 (unregistering): Port device team_slave_1 removed [ 1076.188838][T18794] fido_id[18794]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1076.208164][ T3020] team0 (unregistering): Port device team_slave_0 removed [ 1076.353809][T18801] netlink: 'syz.3.3474': attribute type 4 has an invalid length. [ 1076.455525][T18802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18802 comm=syz.3.3474 [ 1077.244399][T18797] team0: Device vxcan1 is of different type [ 1078.612988][ T30] audit: type=1400 audit(3916498874.252:1920): avc: denied { ioctl } for pid=18830 comm="syz.4.3483" path="socket:[58104]" dev="sockfs" ino=58104 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1078.697178][ T30] audit: type=1400 audit(3916498874.326:1921): avc: denied { set_context_mgr } for pid=18830 comm="syz.4.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1078.753236][ T30] audit: type=1400 audit(3916498874.364:1922): avc: denied { map } for pid=18830 comm="syz.4.3483" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1078.806663][ T30] audit: type=1400 audit(3916498874.373:1923): avc: denied { call } for pid=18830 comm="syz.4.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1079.524296][ T3020] IPVS: stop unused estimator thread 0... [ 1079.882459][T18845] can0: slcan on ttyS3. [ 1080.357807][T18856] netlink: 'syz.4.3487': attribute type 4 has an invalid length. [ 1080.404204][T18856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18856 comm=syz.4.3487 [ 1080.510573][T18862] usb usb9: usbfs: process 18862 (syz.2.3492) did not claim interface 4 before use [ 1080.594713][T18843] can0 (unregistered): slcan off ttyS3. [ 1081.192689][ T6325] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1081.385144][ T6325] usb 3-1: Using ep0 maxpacket: 8 [ 1081.545299][T16777] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1081.761589][T16777] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1081.796811][T16777] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1081.829240][T16777] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1081.858348][T16777] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1081.914619][T16777] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1081.979236][T16777] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1082.011440][T16777] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1082.043854][T16777] usb 4-1: Product: syz [ 1082.058795][T16777] usb 4-1: Manufacturer: syz [ 1082.087463][T16777] cdc_wdm 4-1:1.0: skipping garbage [ 1082.112666][T16777] cdc_wdm 4-1:1.0: skipping garbage [ 1082.139446][T16777] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1082.164935][T16777] cdc_wdm 4-1:1.0: Unknown control protocol [ 1082.358089][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1082.364720][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1082.371139][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1082.377715][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1082.383965][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1082.390536][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1082.400145][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1082.406743][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1082.413203][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1082.419791][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1082.426100][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1082.432686][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1082.439016][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1082.445600][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1082.453119][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1082.459722][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1082.468754][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1082.475346][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1082.485924][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1082.492548][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1082.526643][ T5951] usb 4-1: USB disconnect, device number 76 [ 1082.532643][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1082.603959][T18886] FAULT_INJECTION: forcing a failure. [ 1082.603959][T18886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.652252][T18886] CPU: 1 UID: 0 PID: 18886 Comm: syz.3.3496 Not tainted syzkaller #0 PREEMPT(full) [ 1082.652278][T18886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1082.652292][T18886] Call Trace: [ 1082.652299][T18886] [ 1082.652306][T18886] dump_stack_lvl+0x100/0x190 [ 1082.652336][T18886] should_fail_ex.cold+0x5/0xa [ 1082.652365][T18886] _copy_to_user+0x32/0xd0 [ 1082.652391][T18886] simple_read_from_buffer+0xcb/0x170 [ 1082.652414][T18886] proc_fail_nth_read+0x1af/0x230 [ 1082.652439][T18886] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1082.652464][T18886] ? rw_verify_area+0xce/0x6d0 [ 1082.652481][T18886] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1082.652504][T18886] vfs_read+0x1e4/0xb30 [ 1082.652526][T18886] ? __pfx_vfs_read+0x10/0x10 [ 1082.652543][T18886] ? find_held_lock+0x2b/0x80 [ 1082.652567][T18886] ? __fget_files+0x215/0x3d0 [ 1082.652592][T18886] ? __fget_files+0x21f/0x3d0 [ 1082.652619][T18886] ksys_read+0x12a/0x250 [ 1082.652637][T18886] ? __pfx_ksys_read+0x10/0x10 [ 1082.652661][T18886] do_syscall_64+0xc9/0xf80 [ 1082.652683][T18886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.652702][T18886] RIP: 0033:0x7f6cc615b58e [ 1082.652716][T18886] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1082.652733][T18886] RSP: 002b:00007f6cc7103fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1082.652751][T18886] RAX: ffffffffffffffda RBX: 00007f6cc71046c0 RCX: 00007f6cc615b58e [ 1082.652762][T18886] RDX: 000000000000000f RSI: 00007f6cc71040a0 RDI: 0000000000000006 [ 1082.652773][T18886] RBP: 00007f6cc7104090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.652784][T18886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.652795][T18886] R13: 00007f6cc6416038 R14: 00007f6cc6415fa0 R15: 00007ffcda80b8a8 [ 1082.652819][T18886] [ 1083.170224][ T6325] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1083.189657][ T6325] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1083.211304][ T6325] usb 3-1: can't read configurations, error -71 [ 1083.220998][T18907] overlayfs: failed to resolve './file1': -2 [ 1083.629803][ T7718] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1083.779636][ T5951] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1083.804691][ T7718] usb 2-1: config 4 has an invalid interface number: 179 but max is 0 [ 1083.817453][ T7718] usb 2-1: config 4 has no interface number 0 [ 1083.824005][ T7718] usb 2-1: config 4 interface 179 has no altsetting 0 [ 1083.830979][ T7718] usb 2-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=dd.89 [ 1083.842503][ T7718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.859955][ T7718] usb 2-1: bad CDC descriptors [ 1083.888656][ T7718] usb 2-1: unsupported MDLM descriptors [ 1083.961342][ T5951] usb 4-1: Using ep0 maxpacket: 32 [ 1083.971116][T18930] comedi: No check for data length of config insn id -38843711 is implemented [ 1083.971133][T18930] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1083.971146][T18930] comedi: Assuming n=419 is correct [ 1083.975292][T18930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3503'. [ 1083.985736][ T5951] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1083.985796][ T5951] usb 4-1: config 0 has no interface number 0 [ 1083.985960][ T5951] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1083.992303][ T5951] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1083.992362][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.992390][ T5951] usb 4-1: Product: syz [ 1083.992432][ T5951] usb 4-1: Manufacturer: syz [ 1083.992473][ T5951] usb 4-1: SerialNumber: syz [ 1084.038202][ T5951] usb 4-1: config 0 descriptor?? [ 1084.786913][ T6325] usb 2-1: USB disconnect, device number 52 [ 1085.069934][T18936] overlayfs: missing 'lowerdir' [ 1085.098907][T18936] fuse: Bad value for 'fd' [ 1085.411628][T18933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.421227][T18933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.442934][T18938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3505'. [ 1085.495356][T18938] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18938 comm=syz.2.3505 [ 1086.551231][T18948] comedi: No check for data length of config insn id -38843711 is implemented [ 1086.560190][T18948] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1086.569429][T18948] comedi: Assuming n=419 is correct [ 1086.587725][T18948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3507'. [ 1087.432242][ T5951] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 1087.457552][ T5951] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32 [ 1087.464882][ T5951] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 1087.492556][ T5951] f81534 4-1:0.12: probe with driver f81534 failed with error -32 [ 1087.555448][T18952] overlay: Unknown parameter '#-[' [ 1087.853852][T16778] usb 4-1: USB disconnect, device number 77 [ 1087.996842][T18966] : renamed from bond0 (while UP) [ 1088.412838][T18981] comedi: No check for data length of config insn id 6 is implemented [ 1088.467576][T18981] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1088.477544][T18981] comedi: Assuming n=419 is correct [ 1088.499799][T18988] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3514'. [ 1088.713245][ T8322] hid-generic 0000:0009:0000.001A: unknown main item tag 0x1 [ 1089.502213][ T8322] hid-generic 0000:0009:0000.001A: hidraw0: HID vffffff.97 Device [syz0] on syz0 [ 1089.713633][T18993] comedi: No check for data length of config insn id 6 is implemented [ 1089.721865][T18993] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1089.731265][T18993] comedi: Assuming n=419 is correct [ 1089.760844][T18993] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3515'. [ 1089.839372][T16778] hid-generic 0000:0009:0000.001B: unknown main item tag 0x1 [ 1089.961036][T16778] hid-generic 0000:0009:0000.001B: hidraw0: HID vffffff.97 Device [syz0] on syz0 [ 1090.030818][T18991] fido_id[18991]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1090.689580][T18998] comedi: No check for data length of config insn id -38843711 is implemented [ 1090.698569][T18998] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1090.707924][T18998] comedi: Assuming n=419 is correct [ 1091.366160][T19002] fido_id[19002]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1092.087244][T19020] sctp: [Deprecated]: syz.1.3521 (pid 19020) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1092.087244][T19020] Use struct sctp_sack_info instead [ 1093.016823][T19037] netlink: 'syz.4.3527': attribute type 4 has an invalid length. [ 1093.100076][T19037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19037 comm=syz.4.3527 [ 1093.907148][T19046] fuse: Unknown parameter '000000000000000000000160x000000000000000e' [ 1094.561823][T19051] pimreg: entered allmulticast mode [ 1094.683704][T19050] pimreg: left allmulticast mode [ 1094.904606][T19062] netlink: 'syz.4.3532': attribute type 4 has an invalid length. [ 1094.944493][T19062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19062 comm=syz.4.3532 [ 1095.042916][T19065] team0: Device vxcan1 is of different type [ 1096.303647][T19078] overlayfs: overlapping lowerdir path [ 1096.389524][T19083] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1097.105110][T19095] can0: slcan on ttyS3. [ 1097.284939][T19106] overlayfs: missing 'lowerdir' [ 1097.299378][T19106] fuse: Bad value for 'fd' [ 1097.774149][T16778] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1097.849683][T19093] can0 (unregistered): slcan off ttyS3. [ 1097.965958][T16778] usb 5-1: Using ep0 maxpacket: 8 [ 1097.972520][T16778] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.998307][T16778] usb 5-1: config 1 has no interfaces? [ 1098.009302][T16778] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1098.029940][T16778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.186375][ T30] audit: type=1400 audit(3916498892.557:1924): avc: denied { append } for pid=19137 comm="syz.3.3551" name="rt_cache" dev="proc" ino=4026534272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1098.222802][ T1071] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1098.280201][T16778] usb 5-1: string descriptor 0 read error: -71 [ 1098.303643][T16778] usb 5-1: USB disconnect, device number 59 [ 1098.397853][ T1071] usb 3-1: config 0 has no interfaces? [ 1098.406684][ T1071] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1098.423585][ T1071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.435193][ T1071] usb 3-1: config 0 descriptor?? [ 1098.670072][ T1071] usb 3-1: USB disconnect, device number 63 [ 1098.800120][T16778] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1098.907137][T19161] syzkaller0: entered promiscuous mode [ 1098.922389][T19161] syzkaller0: entered allmulticast mode [ 1098.971015][T16778] usb 4-1: Using ep0 maxpacket: 32 [ 1098.991360][T16778] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1099.011835][T16778] usb 4-1: config 0 has no interface number 0 [ 1099.037883][T16778] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1099.065170][T16778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.089757][T16778] usb 4-1: Product: syz [ 1099.103435][T16778] usb 4-1: Manufacturer: syz [ 1099.120305][T16778] usb 4-1: SerialNumber: syz [ 1099.142639][T16778] usb 4-1: config 0 descriptor?? [ 1099.177976][T16778] smsc95xx v2.0.0 [ 1099.489527][ T30] audit: type=1400 audit(3916498893.783:1925): avc: denied { map } for pid=19153 comm="syz.0.3553" path="socket:[59302]" dev="sockfs" ino=59302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1099.634042][ T1071] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1099.647562][T16778] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1099.660716][T16778] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1099.849108][ T1071] usb 3-1: config 0 has no interfaces? [ 1100.550101][T16778] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1100.844547][ T1071] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1101.194232][ T1071] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.202552][T16778] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 1101.211262][ T1071] usb 3-1: Product: syz [ 1101.215433][ T1071] usb 3-1: Manufacturer: syz [ 1101.223418][T16778] usb 4-1: USB disconnect, device number 78 [ 1101.229418][ T1071] usb 3-1: SerialNumber: syz [ 1101.238178][ T1071] usb 3-1: config 0 descriptor?? [ 1101.521516][T16778] usb 3-1: USB disconnect, device number 64 [ 1101.602301][T19224] syzkaller0: entered promiscuous mode [ 1101.612907][T19224] syzkaller0: entered allmulticast mode [ 1101.673720][T19232] tipc: Failed to remove unknown binding: 66,0,0/0:2056129064/2056129065 [ 1101.684484][T19232] tipc: Failed to remove unknown binding: 66,0,0/0:2056129064/2056129065 [ 1101.706151][ T30] audit: type=1400 audit(3916498895.850:1926): avc: denied { getopt } for pid=19231 comm="syz.0.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1101.740635][ T30] audit: type=1400 audit(3916498895.878:1927): avc: denied { write } for pid=19228 comm="syz.3.3576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1102.192361][T19244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3581'. [ 1102.203774][T19244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3581'. [ 1103.150152][T19240] macvtap1: entered promiscuous mode [ 1103.157188][T19240] macvtap1: entered allmulticast mode [ 1103.163556][T19240] veth1_vlan: entered allmulticast mode [ 1103.178944][T19240] veth1_vlan: left allmulticast mode [ 1103.225298][T19244] batadv0: entered promiscuous mode [ 1103.230645][ T30] audit: type=1400 audit(3916498897.272:1928): avc: denied { write } for pid=19247 comm="syz.4.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1103.252989][T19244] gretap0: entered promiscuous mode [ 1103.470070][T19267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3593'. [ 1103.578779][T16778] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1103.776581][T16778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.803263][T16778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.813060][T16778] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1103.845546][T16778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.858133][T16778] usb 3-1: config 0 descriptor?? [ 1104.540852][T16778] hid-led 0003:27B8:01ED.001C: probe with driver hid-led failed with error -71 [ 1104.570850][T16778] usb 3-1: USB disconnect, device number 65 [ 1105.006715][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1105.024291][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1105.033905][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1105.047874][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1105.067935][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1105.613380][T16778] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1105.793360][T16778] usb 3-1: Using ep0 maxpacket: 16 [ 1105.810582][T16778] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 1105.833935][T16778] usb 3-1: config 4 has no interface number 0 [ 1105.852156][T16778] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 1105.869601][T16778] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1105.909096][T16778] usb 3-1: config 4 interface 51 has no altsetting 0 [ 1105.930275][T16778] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1105.949545][T16778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.972876][T16778] usb 3-1: Product: syz [ 1106.000766][T16778] usb 3-1: Manufacturer: syz [ 1106.036880][T16778] usb 3-1: SerialNumber: syz [ 1106.059528][T19327] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1106.066830][T19327] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1106.097944][ T3482] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.374606][T19327] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1106.384483][T19327] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1107.045942][T16778] cdc_eem 3-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.2-1, CDC EEM Device, 0e:5b:b2:a7:35:0c [ 1107.069045][T16778] usb 3-1: USB disconnect, device number 66 [ 1107.086746][T16778] cdc_eem 3-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.2-1, CDC EEM Device [ 1107.141478][ T3482] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.267189][ T5834] Bluetooth: hci2: command tx timeout [ 1107.330421][ T3482] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.363289][ T1071] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1107.403782][T19314] chnl_net:caif_netlink_parms(): no params data found [ 1107.465101][ T3482] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.510093][ T30] audit: type=1400 audit(3916498901.285:1929): avc: denied { read } for pid=19374 comm="syz.2.3639" path="socket:[60754]" dev="sockfs" ino=60754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1107.534416][ T7718] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1107.561036][ T1071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.585700][ T1071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.613338][ T1071] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1107.630570][ T1071] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1107.642059][ T1071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.650216][T19314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.657443][T19314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.663443][ T1071] usb 5-1: config 0 descriptor?? [ 1107.671538][T19314] bridge_slave_0: entered allmulticast mode [ 1107.679595][T19314] bridge_slave_0: entered promiscuous mode [ 1107.691348][T19314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.705722][ T7718] usb 4-1: Using ep0 maxpacket: 16 [ 1107.705934][T19314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.718551][T19314] bridge_slave_1: entered allmulticast mode [ 1107.719731][ T7718] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.725630][T19314] bridge_slave_1: entered promiscuous mode [ 1107.761185][ T7718] usb 4-1: config 0 has no interfaces? [ 1107.804717][ T7718] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 1107.827887][ T7718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.837334][ T7718] usb 4-1: Product: syz [ 1107.841606][ T7718] usb 4-1: Manufacturer: syz [ 1107.856774][T19314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.863891][ T7718] usb 4-1: SerialNumber: syz [ 1107.904979][ T7718] usb 4-1: config 0 descriptor?? [ 1107.918754][T19314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.936994][ T3482] bridge_slave_1: left allmulticast mode [ 1107.943119][ T3482] bridge_slave_1: left promiscuous mode [ 1107.954161][ T3482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.970798][ T3482] bridge_slave_0: left allmulticast mode [ 1107.991023][ T3482] bridge_slave_0: left promiscuous mode [ 1108.009249][ T3482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.169069][ T1071] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1108.169886][ T935] usb 4-1: USB disconnect, device number 79 [ 1108.182606][ T5834] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1109.399860][T19424] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3652'. [ 1109.501173][ T5834] Bluetooth: hci2: command tx timeout [ 1109.576169][ T935] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1109.584522][ T3482] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1109.726269][ T3482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.742655][ T30] audit: type=1400 audit(3916498903.371:1930): avc: denied { bind } for pid=19438 comm="syz.1.3659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1109.764817][ T3482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1109.766363][ T935] usb 4-1: Using ep0 maxpacket: 32 [ 1109.781817][ T935] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1109.791866][ T935] usb 4-1: config 0 has no interface number 0 [ 1109.793315][ T3482] bond0 (unregistering): Released all slaves [ 1109.798373][ T935] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1109.818154][ T935] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1109.829397][ T935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.837881][ T935] usb 4-1: Product: syz [ 1109.842105][ T935] usb 4-1: Manufacturer: syz [ 1109.857320][ T935] usb 4-1: SerialNumber: syz [ 1109.871313][ T935] usb 4-1: config 0 descriptor?? [ 1109.894664][ T935] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1109.908105][ T935] em28xx 4-1:0.132: Video interface 132 found: [ 1109.978823][ T3482] bond1 (unregistering): Released all slaves [ 1109.983509][ T8322] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1110.091502][ T3482] bond2 (unregistering): Released all slaves [ 1110.127940][T19314] team0: Port device team_slave_0 added [ 1110.141090][T19314] team0: Port device team_slave_1 added [ 1110.156440][ T8322] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1110.174199][ T8322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.192462][ T8322] usb 3-1: Product: syz [ 1110.208975][T19314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.215966][T19314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.249690][ T8322] usb 3-1: Manufacturer: syz [ 1110.254499][ T8322] usb 3-1: SerialNumber: syz [ 1110.274728][ T8322] usb 3-1: config 0 descriptor?? [ 1110.326686][T19314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.342305][ T935] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1110.375761][T19314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.385742][T19314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.433514][T19314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.516238][ T8322] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1110.568201][T19314] hsr_slave_0: entered promiscuous mode [ 1110.577205][T19314] hsr_slave_1: entered promiscuous mode [ 1110.588086][T19314] debugfs: 'hsr0' already exists in 'hsr' [ 1110.596485][T19314] Cannot create hsr debugfs directory [ 1110.644055][T19468] overlayfs: failed to resolve './bus': -2 [ 1110.703521][T19468] kernel profiling enabled (shift: 6) [ 1110.789903][ T5873] usb 5-1: USB disconnect, device number 60 [ 1110.919748][ T3482] hsr_slave_0: left promiscuous mode [ 1110.929606][ T3482] hsr_slave_1: left promiscuous mode [ 1110.936534][ T3482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.943975][ T3482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.966495][ T3482] veth1_macvtap: left promiscuous mode [ 1110.972043][ T3482] veth0_macvtap: left promiscuous mode [ 1110.978877][ T3482] veth1_vlan: left promiscuous mode [ 1110.984107][ T3482] veth0_vlan: left promiscuous mode [ 1111.027028][ T935] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1111.050236][ T935] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 1111.060708][ T935] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1111.113055][ T3482] team0 (unregistering): Port device batadv6 removed [ 1111.132704][ T935] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1111.140884][ T935] em28xx 4-1:0.132: analog set to bulk mode. [ 1111.147007][ T5873] em28xx 4-1:0.132: Registering V4L2 extension [ 1111.147275][ T3482] team0 (unregistering): Port device batadv5 removed [ 1111.174246][ T935] usb 4-1: USB disconnect, device number 80 [ 1111.183838][ T3482] team0 (unregistering): Port device batadv4 removed [ 1111.236049][ T935] em28xx 4-1:0.132: Disconnecting em28xx [ 1111.252382][ T3482] team0 (unregistering): Port device batadv3 removed [ 1111.299379][ T3482] team0 (unregistering): Port device batadv2 removed [ 1111.342661][ T3482] team0 (unregistering): Port device batadv1 removed [ 1111.419381][ T5873] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1111.429349][ T5873] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1111.437942][ T5873] em28xx 4-1:0.132: No AC97 audio processor [ 1111.481436][ T5873] usb 4-1: Decoder not found [ 1111.486102][ T5873] em28xx 4-1:0.132: failed to create media graph [ 1111.511340][ T5873] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1111.542900][ T5873] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1111.569961][ T935] em28xx 4-1:0.132: Closing input extension [ 1111.601270][ T935] em28xx 4-1:0.132: Freeing device [ 1111.714088][ T5834] Bluetooth: hci2: command tx timeout [ 1112.055761][ T8322] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1112.088053][ T8322] usb 3-1: USB disconnect, device number 67 [ 1112.115475][ T3482] team0 (unregistering): Port device team_slave_1 removed [ 1112.162146][ T3482] team0 (unregistering): Port device team_slave_0 removed [ 1112.512097][T19478] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1112.523166][T19478] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1112.535953][ T30] audit: type=1400 audit(3916498905.980:1931): avc: denied { firmware_load } for pid=19477 comm="syz.1.3669" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1112.535994][T19478] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1112.958762][ T30] audit: type=1400 audit(3916498906.383:1932): avc: denied { bind } for pid=19520 comm="syz.2.3678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1112.987176][ T7718] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1113.184159][ T7718] usb 4-1: Using ep0 maxpacket: 16 [ 1113.197759][ T7718] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.211175][ T7718] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1113.232666][ T7718] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1113.245762][T19314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1113.255298][ T7718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.259789][T19314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1113.275184][ T7718] usb 4-1: Product: syz [ 1113.279383][ T7718] usb 4-1: Manufacturer: syz [ 1113.286488][T19314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1113.293301][ T7718] usb 4-1: SerialNumber: syz [ 1113.303340][T19314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1113.324457][ T3482] IPVS: stop unused estimator thread 0... [ 1113.381895][ T5873] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1113.464866][T19314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.506060][T19314] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.535693][ T7718] usb 4-1: 0:2 : does not exist [ 1113.540797][T16975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.540920][T16975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.558116][ T9215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.565314][ T9215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.578736][ T5873] usb 3-1: config 0 has no interfaces? [ 1113.584256][ T5873] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1113.603474][ T7718] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1113.626699][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.652373][ T5873] usb 3-1: config 0 descriptor?? [ 1113.721460][ T7718] usb 4-1: USB disconnect, device number 81 [ 1113.752919][T19314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1113.913078][ T935] usb 3-1: USB disconnect, device number 68 [ 1113.938023][ T5834] Bluetooth: hci2: command tx timeout [ 1113.970776][ T5873] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1114.111563][T19314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.187374][ T5873] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1114.220636][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.247813][ T5873] usb 5-1: Product: syz [ 1114.252065][ T5873] usb 5-1: Manufacturer: syz [ 1114.256699][ T5873] usb 5-1: SerialNumber: syz [ 1114.264360][T19314] veth0_vlan: entered promiscuous mode [ 1114.285875][T19314] veth1_vlan: entered promiscuous mode [ 1114.350854][T19314] veth0_macvtap: entered promiscuous mode [ 1114.372010][T19314] veth1_macvtap: entered promiscuous mode [ 1114.392954][T19314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.426997][T19314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.486123][ T7517] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.508880][ T7517] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.557956][ T7517] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.592710][ T7517] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.711174][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.731961][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.754789][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1114.762264][T16975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.778041][T16975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.793823][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1115.022144][ T7718] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 1115.144827][T19611] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1115.678584][ T30] audit: type=1400 audit(3916498908.431:1933): avc: denied { map } for pid=19600 comm="syz.0.3614" path="socket:[61378]" dev="sockfs" ino=61378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1115.713112][ T30] audit: type=1400 audit(3916498908.441:1934): avc: denied { read } for pid=19600 comm="syz.0.3614" path="socket:[61378]" dev="sockfs" ino=61378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1115.720545][ T7718] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1115.858113][ T7718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.870874][ T7718] usb 4-1: config 0 descriptor?? [ 1116.114226][T19630] kvm: kvm [19627]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 1116.162249][T19630] kvm: kvm [19627]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffffffffffffff [ 1116.178686][T19630] kvm: kvm [19627]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x555503 [ 1116.203189][T19630] kvm: kvm [19627]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffffffffffffff [ 1116.219335][T19630] kvm: kvm [19627]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 1116.538477][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1116.563040][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1116.612833][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1116.640416][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1116.666879][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1116.805597][ T5873] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1116.902553][ T5873] usb 5-1: USB disconnect, device number 61 [ 1117.313598][T19665] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1117.386836][ T30] audit: type=1400 audit(3916498910.517:1935): avc: denied { sys_module } for pid=19668 comm="syz.1.3706" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1117.646147][ T7718] pegasus 4-1:0.0: can't reset MAC [ 1117.685260][ T7718] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 1117.726691][ T7718] usb 4-1: USB disconnect, device number 82 [ 1118.561185][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.627413][T19749] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1118.894044][T19770] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1118.951792][ T5952] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1119.114425][ T5952] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1119.132651][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.145321][ T5952] usb 1-1: config 0 descriptor?? [ 1119.502552][T19804] kvm: kvm [19803]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1119.510253][T19809] overlayfs: failed to clone upperpath [ 1119.804812][T19822] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1119.904609][ T30] audit: type=1400 audit(3916498912.884:1936): avc: denied { mounton } for pid=19824 comm="syz.2.3759" path="/152/file0" dev="tmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1120.023136][T19831] loop5: detected capacity change from 0 to 7 [ 1120.032743][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1120.042520][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1120.050671][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1120.060261][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1120.070170][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1120.079863][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1120.088059][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1120.097692][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1120.108739][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1120.118321][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1120.126402][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1120.136006][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1120.146759][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1120.156352][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1120.164615][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1120.174229][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1120.182114][T19831] ldm_validate_partition_table(): Disk read failed. [ 1120.190917][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1120.200556][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1120.211265][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1120.220905][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1120.233712][T19831] Dev loop5: unable to read RDB block 0 [ 1120.241081][T19831] loop5: unable to read partition table [ 1120.248584][T19831] loop5: partition table beyond EOD, truncated [ 1120.268536][T19831] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1120.327293][ T5192] ldm_validate_partition_table(): Disk read failed. [ 1120.332977][T19836] overlayfs: failed to clone upperpath [ 1120.347968][ T5192] Dev loop5: unable to read RDB block 0 [ 1120.361330][ T5192] loop5: unable to read partition table [ 1120.367892][ T5192] loop5: partition table beyond EOD, truncated [ 1120.593776][T19853] overlayfs: failed to clone upperpath [ 1120.666459][ T5952] pegasus 1-1:0.0: can't reset MAC [ 1120.686496][ T5952] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 1120.700761][ T5952] usb 1-1: USB disconnect, device number 25 [ 1120.790606][ T1071] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1120.952176][ T1071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.963172][ T1071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1120.973162][ T1071] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1120.988290][ T1071] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1120.998384][ T1071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.010548][T19870] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1121.020155][ T1071] usb 5-1: config 0 descriptor?? [ 1121.033273][T19870] kvm: pic: non byte read [ 1121.038598][T19870] kvm: pic: level sensitive irq not supported [ 1121.038700][T19870] kvm: pic: non byte read [ 1121.051041][T19870] kvm: pic: level sensitive irq not supported [ 1121.051109][T19870] kvm: pic: non byte read [ 1121.325158][ T7718] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1121.487430][ T7718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.514344][ T1071] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1121.533838][ T7718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.568890][ T7718] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1121.604269][ T7718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.636131][ T7718] usb 4-1: config 0 descriptor?? [ 1122.031220][ T8322] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1122.080257][ T7718] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1122.087341][ T7718] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1122.094358][ T7718] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1122.101340][ T7718] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1122.108574][ T7718] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1122.115514][ T7718] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1122.122999][ T7718] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1122.130078][ T1071] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1122.140042][ T7718] cp2112 0003:10C4:EA90.001F: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1122.192150][ T8322] usb 1-1: Using ep0 maxpacket: 32 [ 1122.199325][ T8322] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1122.210571][ T8322] usb 1-1: config 0 has no interface number 0 [ 1122.218457][ T8322] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1122.227939][ T8322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.236911][ T8322] usb 1-1: Product: syz [ 1122.241082][ T8322] usb 1-1: Manufacturer: syz [ 1122.245897][ T8322] usb 1-1: SerialNumber: syz [ 1122.252167][ T8322] usb 1-1: config 0 descriptor?? [ 1122.259376][ T8322] smsc95xx v2.0.0 [ 1122.294194][ T7718] cp2112 0003:10C4:EA90.001F: Part Number: 0x00 Device Version: 0x00 [ 1122.331475][ T1071] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1122.340897][ T1071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.350810][ T1071] usb 3-1: config 0 descriptor?? [ 1122.697850][ T8322] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1122.710638][ T8322] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1122.938934][ T7718] cp2112 0003:10C4:EA90.001F: error reading lock byte: -71 [ 1122.981996][ T7718] usb 4-1: USB disconnect, device number 83 [ 1123.151108][ T8322] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1123.165061][ T8322] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1123.176256][ T8322] usb 1-1: USB disconnect, device number 26 [ 1123.530821][T19943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3812'. [ 1123.658465][ T1071] usb 3-1: Cannot set autoneg [ 1123.664045][ T1071] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1123.679369][ T1071] usb 3-1: USB disconnect, device number 69 [ 1123.789921][ T30] audit: type=1400 audit(3916498916.513:1937): avc: denied { map } for pid=19952 comm="syz.1.3817" path="/292/file0" dev="tmpfs" ino=1594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1124.040391][ T935] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1124.211747][ T935] usb 4-1: Using ep0 maxpacket: 16 [ 1124.228104][ T935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.245365][T19965] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 1124.258406][ T935] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1124.269556][ T935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.300175][ T935] usb 4-1: config 0 descriptor?? [ 1124.384282][ T5952] usb 5-1: reset high-speed USB device number 62 using dummy_hcd [ 1124.406705][ T5952] usb 5-1: device reset changed ep0 maxpacket size! [ 1124.430629][ T7718] usb 5-1: USB disconnect, device number 62 [ 1124.772053][ T935] kye 0003:0458:5016.0020: control desc unexpectedly large [ 1124.819158][ T935] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0020/input/input34 [ 1124.831925][ T7718] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1124.924264][ T935] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0020/input/input35 [ 1125.038722][ T935] kye 0003:0458:5016.0020: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 1125.045229][ T7718] usb 5-1: Using ep0 maxpacket: 32 [ 1125.098367][ T7718] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1125.117826][ T7718] usb 5-1: config 0 has no interface number 0 [ 1125.135343][ T7718] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1125.159785][ T7718] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1125.178198][ T7718] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1125.191580][ T935] usb 4-1: USB disconnect, device number 84 [ 1125.204060][ T7718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.206502][ T8322] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 1125.214754][ T7718] usb 5-1: Product: syz [ 1125.228840][ T7718] usb 5-1: Manufacturer: syz [ 1125.233813][ T7718] usb 5-1: SerialNumber: syz [ 1125.258561][ T7718] usb 5-1: config 0 descriptor?? [ 1125.267229][T19957] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1125.391383][ T8322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.401578][ T8322] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1125.411442][ T8322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.421462][ T8322] usb 1-1: config 0 descriptor?? [ 1125.870412][ T8322] hkems 0003:2006:0118.0021: unknown main item tag 0x0 [ 1125.877367][ T8322] hkems 0003:2006:0118.0021: unknown main item tag 0x0 [ 1125.886001][ T8322] hkems 0003:2006:0118.0021: unknown main item tag 0x0 [ 1125.898647][ T8322] hkems 0003:2006:0118.0021: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.0-1/input0 [ 1125.915046][ T8322] hkems 0003:2006:0118.0021: no inputs found [ 1125.921221][ T8322] hkems 0003:2006:0118.0021: force feedback init failed [ 1126.212485][ T8322] usb 1-1: USB disconnect, device number 27 [ 1126.304760][ T7718] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 1126.355932][ T7718] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 1126.761665][T20027] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1127.272251][ C1] ipheth 5-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 1127.497701][ T7718] usb 5-1: USB disconnect, device number 63 [ 1127.661196][ T7718] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 1127.795370][ T1071] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1128.097144][T20106] ptrace attach of "./syz-executor exec"[19314] was attempted by " [ 1128.966543][ T1071] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1129.076006][T20114] dlm: no local IP address has been set [ 1129.084169][T20114] dlm: cannot start dlm midcomms -107 [ 1129.364427][ T1071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.514744][ T1071] usb 4-1: config 0 descriptor?? [ 1130.725176][T20144] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1131.184330][T16778] hid_parser_main: 4 callbacks suppressed [ 1131.184590][T16778] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1131.401943][ T7718] IPVS: starting estimator thread 0... [ 1131.412166][T16778] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1131.534806][T20161] IPVS: using max 49 ests per chain, 117600 per kthread [ 1131.655906][ T1071] pegasus 4-1:0.0: can't reset MAC [ 1131.729371][ T1071] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 1131.769670][T16778] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1131.925733][ T1071] usb 4-1: USB disconnect, device number 85 [ 1132.371684][T16778] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1132.378675][T16778] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1132.388365][T16778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.405242][T16778] usb 5-1: config 0 descriptor?? [ 1133.272341][T16778] koneplus 0003:1E7D:2E22.0023: item fetching failed at offset 0/5 [ 1133.287833][T16778] koneplus 0003:1E7D:2E22.0023: parse failed [ 1133.293919][T16778] koneplus 0003:1E7D:2E22.0023: probe with driver koneplus failed with error -22 [ 1133.730887][ T30] audit: type=1400 audit(3916498925.811:1938): avc: denied { read write } for pid=20198 comm="syz.2.3886" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1134.607374][ T30] audit: type=1400 audit(3916498925.830:1939): avc: denied { open } for pid=20198 comm="syz.2.3886" path="/177/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1134.740808][ T8322] usb 5-1: USB disconnect, device number 64 [ 1135.728070][T16778] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1135.886026][ T7718] IPVS: starting estimator thread 0... [ 1135.986721][T16778] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1136.002814][T20234] IPVS: using max 81 ests per chain, 194400 per kthread [ 1136.010892][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3899'. [ 1136.022036][T16778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.037741][T20237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.047022][T20237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.065434][T16778] usb 3-1: Product: syz [ 1136.069943][T16778] usb 3-1: Manufacturer: syz [ 1136.074546][T16778] usb 3-1: SerialNumber: syz [ 1136.244614][T20243] overlayfs: failed to clone lowerpath [ 1136.252766][ T30] audit: type=1400 audit(3916498928.159:1940): avc: denied { mount } for pid=20242 comm="syz.1.3902" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1136.546364][T16778] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1136.946429][T16778] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1137.841355][T16778] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1137.908487][T16778] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1138.029612][T16778] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1138.119386][ T1071] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1138.131583][T16778] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1138.194269][T16778] usb 3-1: USB disconnect, device number 70 [ 1138.305545][ T1071] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1138.327690][ T1071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.339305][ T1071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.360385][ T1071] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1138.385156][ T1071] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1138.412023][ T1071] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1138.429118][ T1071] usb 5-1: Manufacturer: syz [ 1138.438371][ T1071] usb 5-1: config 0 descriptor?? [ 1139.129771][ T1071] appleir 0003:05AC:8243.0024: unknown main item tag 0x0 [ 1139.141267][ T1071] appleir 0003:05AC:8243.0024: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1141.145365][ T935] usb 5-1: reset high-speed USB device number 65 using dummy_hcd [ 1141.561840][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 1143.422505][ T5952] usb 5-1: USB disconnect, device number 65 [ 1144.822246][ T30] audit: type=1326 audit(3916498936.186:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20381 comm="syz.0.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1564f9acb9 code=0x7ffc0000 [ 1144.847676][ T30] audit: type=1326 audit(3916498936.214:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20381 comm="syz.0.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1564f9acb9 code=0x7ffc0000 [ 1144.872980][ T30] audit: type=1326 audit(3916498936.233:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20381 comm="syz.0.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1564f9acb9 code=0x7ffc0000 [ 1144.900336][ T30] audit: type=1326 audit(3916498936.261:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20381 comm="syz.0.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1564f9acb9 code=0x7ffc0000 [ 1144.924544][ T30] audit: type=1326 audit(3916498936.261:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20381 comm="syz.0.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1564f9acb9 code=0x7ffc0000 [ 1144.953506][ T30] audit: type=1326 audit(3916498936.261:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20381 comm="syz.0.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1564f9acb9 code=0x7ffc0000 [ 1145.008307][ T30] audit: type=1326 audit(3916498936.261:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20381 comm="syz.0.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1564f9acb9 code=0x7ffc0000 [ 1145.190632][ T30] audit: type=1326 audit(3916498936.261:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20381 comm="syz.0.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1564f9acb9 code=0x7ffc0000 [ 1145.214218][ T30] audit: type=1326 audit(3916498936.261:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20381 comm="syz.0.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1564f9acb9 code=0x7ffc0000 [ 1145.768533][ T30] audit: type=1326 audit(3916498937.075:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20381 comm="syz.0.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1564f9acb9 code=0x7ffc0000 [ 1146.445962][ T935] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1146.617015][ T935] usb 4-1: Using ep0 maxpacket: 16 [ 1146.624072][ T935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.635323][ T935] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1146.644500][ T935] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1146.654001][ T935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.666408][ T935] usb 4-1: config 0 descriptor?? [ 1148.552076][T20451] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20451 comm=syz.1.3970 [ 1148.565209][T20451] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2565 sclass=netlink_tcpdiag_socket pid=20451 comm=syz.1.3970 [ 1148.579103][T20451] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=20451 comm=syz.1.3970 [ 1148.592684][T20451] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=20451 comm=syz.1.3970 [ 1148.606244][T20451] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2571 sclass=netlink_tcpdiag_socket pid=20451 comm=syz.1.3970 [ 1148.845134][ T5827] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 1149.290269][ T5952] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1149.375044][T16778] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 1149.450442][ T5873] usb 4-1: USB disconnect, device number 86 [ 1149.490000][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.501249][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.518653][ T5952] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1149.534453][ T5952] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1149.545249][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.570275][T16778] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1149.598431][ T5952] usb 3-1: config 0 descriptor?? [ 1149.614584][T16778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.664705][T16778] usb 5-1: config 0 descriptor?? [ 1150.062457][ T5952] usbhid 3-1:0.0: can't add hid device: -71 [ 1150.086485][ T5952] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1150.158817][ T5952] usb 3-1: USB disconnect, device number 71 [ 1150.589650][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1150.589668][ T30] audit: type=1400 audit(3916498941.584:1975): avc: denied { getopt } for pid=20477 comm="syz.1.3981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1150.899395][T16778] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 1151.961794][ T5873] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1152.408650][T16778] usb 5-1: USB disconnect, device number 66 [ 1152.506714][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 1152.534681][ T5873] usb 1-1: config 0 has an invalid interface number: 42 but max is 0 [ 1152.589913][ T5873] usb 1-1: config 0 has no interface number 0 [ 1152.619824][ T5873] usb 1-1: config 0 interface 42 has no altsetting 0 [ 1152.670139][ T5873] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=aa.7d [ 1152.698799][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.756241][ T5873] usb 1-1: Product: syz [ 1152.760437][ T5873] usb 1-1: Manufacturer: syz [ 1152.784071][ T5873] usb 1-1: SerialNumber: syz [ 1152.834119][ T5873] usb 1-1: config 0 descriptor?? [ 1152.864186][ T5873] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1152.891399][T20505] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1152.919875][ T5873] dvb-usb: bulk message failed: -22 (3/0) [ 1152.989064][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1153.053146][ T5873] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1153.214728][ T5873] usb 1-1: media controller created [ 1153.716059][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1153.879732][ T5873] dvb-usb: bulk message failed: -22 (6/0) [ 1154.360684][ T5873] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1154.384353][ T5873] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 1154.404247][ T5873] dvb-usb: schedule remote query interval to 150 msecs. [ 1154.425529][ T5873] dvb-usb: bulk message failed: -22 (3/0) [ 1154.454839][ T5873] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1154.588065][ T5873] usb 1-1: USB disconnect, device number 28 [ 1155.246222][ T5873] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1155.358473][T20536] overlayfs: failed to clone upperpath [ 1155.553161][ T5952] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1155.665230][T20551] dlm: no local IP address has been set [ 1155.671331][T20551] dlm: cannot start dlm midcomms -107 [ 1156.603875][ T5952] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1156.614717][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.644106][ T5952] usb 3-1: config 0 descriptor?? [ 1158.359169][ T30] audit: type=1400 audit(3916498948.853:1976): avc: denied { rename } for pid=20582 comm="syz.3.4017" name="file0" dev="tmpfs" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1158.952786][ T5952] pegasus 3-1:0.0: probe with driver pegasus failed with error -32 [ 1160.087586][ T5952] usb 3-1: USB disconnect, device number 72 [ 1162.975431][ T5952] libceph: connect (1)[c::]:6789 error -101 [ 1162.985964][ T5952] libceph: mon0 (1)[c::]:6789 connect error [ 1162.996702][T20637] ceph: No mds server is up or the cluster is laggy [ 1163.471698][T20664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4046'. [ 1163.528668][ T5952] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1163.839189][T20672] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1163.874765][ T5952] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.904164][ T5952] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1163.922416][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.947340][ T5952] usb 1-1: config 0 descriptor?? [ 1163.975082][ T5952] pwc: Askey VC010 type 2 USB webcam detected. [ 1164.177492][ T30] audit: type=1400 audit(3916498954.288:1977): avc: denied { append } for pid=20692 comm="syz.4.4057" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1164.391647][ T5952] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1164.423586][ T30] audit: type=1400 audit(3916498954.522:1978): avc: denied { create } for pid=20703 comm="syz.4.4062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1164.564666][ T5951] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1164.625577][ T5952] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1164.650434][ T5952] pwc: recv_control_msg error -71 req 04 val 1000 [ 1164.662087][ T5952] pwc: recv_control_msg error -71 req 04 val 1300 [ 1164.679522][ T5952] pwc: recv_control_msg error -71 req 04 val 1400 [ 1164.693770][ T5952] pwc: recv_control_msg error -71 req 02 val 2000 [ 1164.702036][ T5952] pwc: recv_control_msg error -71 req 02 val 2100 [ 1164.710875][ T5952] pwc: recv_control_msg error -71 req 04 val 1500 [ 1164.722500][ T5952] pwc: recv_control_msg error -71 req 02 val 2500 [ 1164.731182][ T5952] pwc: recv_control_msg error -71 req 02 val 2400 [ 1164.736342][ T5951] usb 4-1: Using ep0 maxpacket: 32 [ 1164.739428][ T5952] pwc: recv_control_msg error -71 req 02 val 2600 [ 1164.750115][ T5952] pwc: recv_control_msg error -71 req 02 val 2900 [ 1164.758032][ T5952] pwc: recv_control_msg error -71 req 02 val 2800 [ 1164.765097][ T5952] pwc: recv_control_msg error -71 req 04 val 1100 [ 1164.767143][ T5951] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1164.773386][ T5952] pwc: recv_control_msg error -71 req 04 val 1200 [ 1164.803665][ T5951] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1164.808399][ T5952] pwc: Registered as video103. [ 1164.826494][ T5952] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 1164.852405][ T5951] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.880060][ T5952] usb 1-1: USB disconnect, device number 29 [ 1164.885838][ T5951] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1164.906729][ T5951] usb 4-1: config 1 has no interface number 0 [ 1164.923694][ T5951] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1164.983791][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.055078][ T5951] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1165.094947][T20678] syz.1.4050 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1165.141393][T20678] CPU: 0 UID: 0 PID: 20678 Comm: syz.1.4050 Not tainted syzkaller #0 PREEMPT(full) [ 1165.141417][T20678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1165.141427][T20678] Call Trace: [ 1165.141434][T20678] [ 1165.141441][T20678] dump_stack_lvl+0x100/0x190 [ 1165.141471][T20678] dump_header+0xfb/0x606 [ 1165.141489][T20678] oom_kill_process.cold+0xd/0x321 [ 1165.141510][T20678] out_of_memory+0x340/0x14f0 [ 1165.141536][T20678] ? __pfx_out_of_memory+0x10/0x10 [ 1165.141564][T20678] mem_cgroup_out_of_memory+0xc6/0x130 [ 1165.141594][T20678] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1165.141620][T20678] ? find_held_lock+0x2b/0x80 [ 1165.141647][T20678] ? do_raw_spin_unlock+0x145/0x1e0 [ 1165.141669][T20678] ? _raw_spin_unlock+0x28/0x50 [ 1165.141697][T20678] try_charge_memcg+0x652/0xc90 [ 1165.141724][T20678] ? __pfx_try_charge_memcg+0x10/0x10 [ 1165.141746][T20678] ? find_held_lock+0x2b/0x80 [ 1165.141772][T20678] ? rcu_read_unlock+0x17/0x60 [ 1165.141795][T20678] ? rcu_read_unlock+0x17/0x60 [ 1165.141826][T20678] charge_memcg+0xa6/0x280 [ 1165.141847][T20678] __mem_cgroup_charge+0x2b/0x1e0 [ 1165.141874][T20678] filemap_add_folio+0xe7/0x690 [ 1165.141899][T20678] ? __pfx_filemap_add_folio+0x10/0x10 [ 1165.141929][T20678] __filemap_get_folio_mpol+0x5d5/0xe70 [ 1165.141959][T20678] filemap_fault+0x8b6/0x37c0 [ 1165.141986][T20678] ? rcu_is_watching+0x12/0xc0 [ 1165.142009][T20678] ? __pfx_filemap_fault+0x10/0x10 [ 1165.142035][T20678] ? lockdep_init_map_type+0x5c/0x250 [ 1165.142054][T20678] ? __raw_spin_lock_init+0x3a/0x110 [ 1165.142078][T20678] ? __pfx_filemap_map_pages+0x10/0x10 [ 1165.142098][T20678] __do_fault+0x10d/0x550 [ 1165.142119][T20678] ? __lock_acquire+0x4a5/0x2630 [ 1165.142136][T20678] ? __pfx_filemap_map_pages+0x10/0x10 [ 1165.142156][T20678] do_fault+0x2db/0x1990 [ 1165.142180][T20678] ? __lock_acquire+0x4a5/0x2630 [ 1165.142201][T20678] __handle_mm_fault+0x1807/0x2b50 [ 1165.142224][T20678] ? reacquire_held_locks+0xce/0x1e0 [ 1165.142243][T20678] ? __pfx___handle_mm_fault+0x10/0x10 [ 1165.142265][T20678] ? lock_vma_under_rcu+0x17c/0x5a0 [ 1165.142296][T20678] handle_mm_fault+0x36d/0xa20 [ 1165.142320][T20678] do_user_addr_fault+0x5a3/0x12f0 [ 1165.142352][T20678] exc_page_fault+0x6f/0xd0 [ 1165.142371][T20678] asm_exc_page_fault+0x26/0x30 [ 1165.142389][T20678] RIP: 0033:0x7f8398e6f520 [ 1165.142404][T20678] Code: 89 dc 41 83 e4 03 0f 85 ca 01 00 00 4c 89 ff be 04 00 00 00 e8 b1 94 fe ff 49 8b 47 40 41 83 47 30 04 48 8d 50 fc 49 89 57 40 <89> 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 [ 1165.142420][T20678] RSP: 002b:00007ffcaa5de840 EFLAGS: 00010202 [ 1165.142435][T20678] RAX: 0000001b30424000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 1165.142447][T20678] RDX: 0000001b30423ffc RSI: 00000000003ffde8 RDI: 00007f8399d45700 [ 1165.142458][T20678] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f8399202000 [ 1165.142469][T20678] R10: 00007f8399d45700 R11: 0000000000000000 R12: 0000000000000000 [ 1165.142479][T20678] R13: 000000000007ffff R14: ffffffff821833dc R15: 00007f8399d45720 [ 1165.142492][T20678] ? is_bpf_text_address+0x7c/0x1a0 [ 1165.142531][T20678] [ 1165.144408][T20678] memory: usage 307200kB, limit 307200kB, failcnt 2721 [ 1165.274191][ T5951] snd_usb_pod 4-1:1.1: set_interface failed [ 1165.274415][ T5951] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1165.285047][T20678] memory+swap: usage 307592kB, limit 9007199254740988kB, failcnt 0 [ 1165.315168][ T5951] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1165.323945][T20678] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1165.370159][ T5951] usb 4-1: USB disconnect, device number 87 [ 1165.383493][T20678] Memory cgroup stats for /syz1: [ 1165.697434][T20678] cache 0 [ 1165.709999][T20678] rss 0 [ 1165.712779][T20678] rss_huge 0 [ 1165.715966][T20678] shmem 0 [ 1165.742084][T20678] mapped_file 0 [ 1165.750674][T20678] dirty 0 [ 1165.761434][T20678] writeback 0 [ 1165.764739][T20678] workingset_refault_anon 204 [ 1165.769411][T20678] workingset_refault_file 40 [ 1165.789248][T20678] swap 401408 [ 1165.792561][T20678] swapcached 0 [ 1165.800394][T20678] pgpgin 1381527 [ 1165.803969][T20678] pgpgout 1382035 [ 1165.830305][T20678] pgfault 917293 [ 1165.834185][T20678] pgmajfault 104 [ 1165.848702][T20678] inactive_anon 0 [ 1165.858743][T20678] active_anon 12288 [ 1165.863473][T20678] inactive_file 0 [ 1165.867457][T20678] active_file 0 [ 1165.877453][T20678] unevictable 0 [ 1165.882125][T20678] hierarchical_memory_limit 314572800 [ 1165.887858][T20678] hierarchical_memsw_limit 9223372036854771712 [ 1165.894955][T20678] total_cache 0 [ 1165.898752][T20678] total_rss 0 [ 1165.917360][T20678] total_rss_huge 0 [ 1165.921124][T20678] total_shmem 0 [ 1165.943671][T20678] total_mapped_file 0 [ 1165.947770][T20678] total_dirty 0 [ 1165.951236][T20678] total_writeback 0 [ 1165.969180][T20678] total_workingset_refault_anon 204 [ 1165.974429][T20678] total_workingset_refault_file 40 [ 1166.014624][T20678] total_swap 401408 [ 1166.030252][T20678] total_swapcached 0 [ 1166.034685][T20678] total_pgpgin 1381527 [ 1166.038760][T20678] total_pgpgout 1382035 [ 1166.071654][T20678] total_pgfault 917293 [ 1166.075764][T20678] total_pgmajfault 104 [ 1166.084558][T20678] total_inactive_anon 0 [ 1166.088983][T20678] total_active_anon 12288 [ 1166.096282][T20678] total_inactive_file 0 [ 1166.100513][T20678] total_active_file 0 [ 1166.104166][ T30] audit: type=1400 audit(3916498956.103:1979): avc: denied { write } for pid=20750 comm="syz.3.4084" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1166.106113][T20678] total_unevictable 0 [ 1166.143258][T20678] anon_cost 0 [ 1166.156660][T20678] file_cost 0 [ 1166.166208][T20678] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2949,pid=16522,uid=0 [ 1166.250008][T20678] Memory cgroup out of memory: Killed process 16522 (syz.1.2949) total-vm:102328kB, anon-rss:1372kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 1166.301220][T20754] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1166.880698][T20781] netlink: 'syz.2.4095': attribute type 12 has an invalid length. [ 1166.888661][T20781] netlink: 'syz.2.4095': attribute type 29 has an invalid length. [ 1168.448763][T20781] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4095'. [ 1168.939206][T20811] netlink: 552 bytes leftover after parsing attributes in process `syz.2.4107'. [ 1168.957305][T20811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4107'. [ 1171.236184][ T30] audit: type=1400 audit(3916498960.369:1980): avc: denied { name_bind } for pid=20819 comm="syz.2.4109" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1174.732231][T20852] netlink: 'syz.0.4120': attribute type 12 has an invalid length. [ 1174.741538][T20852] netlink: 'syz.0.4120': attribute type 29 has an invalid length. [ 1174.749355][T20852] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4120'. [ 1176.329872][ T30] audit: type=1400 audit(3916498965.664:1981): avc: denied { map } for pid=20858 comm="syz.3.4112" path="socket:[68465]" dev="sockfs" ino=68465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1177.371757][ T30] audit: type=1326 audit(3916498966.628:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.1.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8398f9acb9 code=0x7ffc0000 [ 1177.444365][ T30] audit: type=1326 audit(3916498966.628:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.1.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8398f9acb9 code=0x7ffc0000 [ 1177.524668][ T30] audit: type=1326 audit(3916498966.637:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.1.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8398f9acb9 code=0x7ffc0000 [ 1177.595334][ T30] audit: type=1326 audit(3916498966.637:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.1.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8398f9acb9 code=0x7ffc0000 [ 1177.687178][ T30] audit: type=1326 audit(3916498966.675:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.1.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8398f9acb9 code=0x7ffc0000 [ 1177.786779][ T30] audit: type=1326 audit(3916498966.675:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.1.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f8398f9acb9 code=0x7ffc0000 [ 1177.861773][ T30] audit: type=1326 audit(3916498966.693:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.1.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8398f9acb9 code=0x7ffc0000 [ 1178.054750][ T30] audit: type=1326 audit(3916498966.693:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.1.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8398f9acb9 code=0x7ffc0000 [ 1178.254708][ T30] audit: type=1326 audit(3916498966.693:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.1.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8398f9acb9 code=0x7ffc0000 [ 1178.395899][ T30] audit: type=1326 audit(3916498966.693:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.1.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8398f9acb9 code=0x7ffc0000 [ 1178.513639][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 1179.304689][T16778] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1179.383035][ T5834] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 1179.559579][ T5834] Bluetooth: hci1: ACL packet too small [ 1179.582513][T16778] usb 1-1: Using ep0 maxpacket: 32 [ 1179.593479][T16778] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.609577][T16778] usb 1-1: config 0 has no interfaces? [ 1179.617434][T16778] usb 1-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 1179.629441][T16778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.080465][T16778] usb 1-1: Product: syz [ 1180.084717][T16778] usb 1-1: Manufacturer: syz [ 1180.089677][T16778] usb 1-1: SerialNumber: syz [ 1180.098895][T16778] usb 1-1: config 0 descriptor?? [ 1181.252691][T20913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.291913][T20913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.321572][T16778] usb 1-1: USB disconnect, device number 30 [ 1181.355648][T20947] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1181.601010][T20967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4160'. [ 1181.601248][T20966] netlink: 'syz.4.4159': attribute type 4 has an invalid length. [ 1181.633725][T20966] netlink: 'syz.4.4159': attribute type 4 has an invalid length. [ 1182.810617][T20987] xt_CONNSECMARK: invalid mode: 0 [ 1182.821832][T20985] loop2: detected capacity change from 0 to 7 [ 1182.832141][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1182.832175][ T30] audit: type=1400 audit(3916498971.708:2017): avc: denied { setopt } for pid=20979 comm="syz.0.4167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1182.891566][T20985] Dev loop2: unable to read RDB block 7 [ 1182.898468][T20985] loop2: unable to read partition table [ 1182.905570][T20985] loop2: partition table beyond EOD, truncated [ 1182.912907][T20985] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1184.254015][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.501317][T16974] team0: Port device team_slave_0 removed [ 1186.365929][T21047] kvm: kvm [21046]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x80000000 [ 1186.883684][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 1192.331816][ T30] audit: type=1400 audit(3916498980.633:2018): avc: denied { accept } for pid=21116 comm="syz.1.4216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1192.898528][ T5834] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 1193.206657][T21142] binder: 21140:21142 ioctl 4018620d 0 returned -22 [ 1193.234705][T21142] binder: 21140:21142 ioctl c0306201 2000000004c0 returned -22 [ 1193.256695][T21142] binder: 21140:21142 ioctl c0306201 0 returned -14 [ 1195.371003][T21166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4229'. [ 1195.414820][T21166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4229'. [ 1195.426304][T21166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4229'. [ 1195.445431][T21166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4229'. [ 1195.634721][T21169] IPVS: length: 139 != 8 [ 1196.236367][ T7718] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1197.051109][ T7718] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1197.073047][ T7718] usb 4-1: config 1 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.112931][ T7718] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1197.128501][ T7718] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.40 [ 1197.235865][ T7718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.264799][ T7718] usb 4-1: Product: syz [ 1197.269268][T21205] loop6: detected capacity change from 0 to 7 [ 1197.281711][ T7718] usb 4-1: Manufacturer: syz [ 1197.313991][ T7718] usb 4-1: SerialNumber: syz [ 1197.330431][T21205] Dev loop6: unable to read RDB block 7 [ 1197.337084][T21205] loop6: unable to read partition table [ 1197.348313][T21205] loop6: partition table beyond EOD, truncated [ 1197.354842][T21205] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1197.889108][ T5834] Bluetooth: hci2: unexpected event for opcode 0x0407 [ 1197.927498][ T7718] usbhid 4-1:1.0: can't add hid device: -71 [ 1198.971023][ T7718] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1199.016109][ T7718] usb 4-1: USB disconnect, device number 88 [ 1199.140652][T21236] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1201.583004][ T5834] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1205.641564][ T1071] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1205.846252][ T1071] usb 5-1: Using ep0 maxpacket: 8 [ 1205.860721][ T1071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1205.879529][ T1071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1205.913687][ T1071] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1205.942491][ T1071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1205.963138][ T1071] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1205.987257][ T1071] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1206.006957][T21307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4279'. [ 1206.018119][ T1071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.033981][T21307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4279'. [ 1206.969402][ T1071] usb 5-1: config 0 descriptor?? [ 1207.010173][ T1071] usb 5-1: can't set config #0, error -71 [ 1207.023518][ T1071] usb 5-1: USB disconnect, device number 67 [ 1211.387995][ T5873] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1211.644570][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 1211.706056][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1211.747195][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1211.778547][ T5873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1211.788224][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1211.824180][ T5873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1211.854788][ T5873] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1211.874794][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.562209][ T5873] usb 5-1: config 0 descriptor?? [ 1212.604597][ T5834] Bluetooth: hci0: urb ffff88801fbbc700 submission failed (90) [ 1212.741907][T21375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4299'. [ 1213.022944][ T5951] usb 5-1: USB disconnect, device number 68 [ 1217.206273][ T30] audit: type=1400 audit(3916499003.899:2019): avc: denied { listen } for pid=21425 comm="syz.4.4315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1218.506344][ T30] audit: type=1400 audit(3916499005.106:2020): avc: denied { relabelfrom } for pid=21444 comm="syz.4.4322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1218.574405][ T30] audit: type=1400 audit(3916499005.143:2021): avc: denied { relabelto } for pid=21444 comm="syz.4.4322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1220.379187][ T5834] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 1220.518171][T21499] usb usb5: usbfs: process 21499 (syz.3.4332) did not claim interface 0 before use [ 1220.524693][T21503] IPVS: length: 139 != 8 [ 1220.668861][T21505] binder: 21502:21505 unknown command 16764928 [ 1220.682676][T21505] binder: 21502:21505 ioctl c0306201 200000000300 returned -22 [ 1221.830677][ T30] audit: type=1400 audit(3916499008.231:2022): avc: denied { watch watch_reads } for pid=21525 comm="syz.4.4343" path="/proc/819" dev="proc" ino=71289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1221.902931][T21530] netlink: 'syz.4.4344': attribute type 2 has an invalid length. [ 1221.912875][ T7718] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1222.093777][ T7718] usb 4-1: device descriptor read/64, error -71 [ 1223.215990][ T7718] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1223.216491][T21549] IPVS: length: 139 != 8 [ 1223.365849][ T7718] usb 4-1: device descriptor read/64, error -71 [ 1223.437583][ T5834] Bluetooth: Wrong link type (-22) [ 1223.497437][ T7718] usb usb4-port1: attempt power cycle [ 1223.868414][ T7718] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1224.029385][ T7718] usb 4-1: device descriptor read/8, error -71 [ 1224.042477][T21574] bond1: option miimon: invalid value (18446744073709551615) [ 1224.049903][T21574] bond1: option miimon: allowed values 0 - 2147483647 [ 1224.058901][T21574] bond1 (unregistering): Released all slaves [ 1225.306576][T21595] loop2: detected capacity change from 0 to 7 [ 1225.315465][T21595] loop2: [ 1225.329551][T21595] loop2: partition table partially beyond EOD, truncated [ 1226.807629][ T7718] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1226.861456][ T7718] usb 4-1: device descriptor read/8, error -71 [ 1226.918013][T21628] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1226.979807][ T7718] usb usb4-port1: unable to enumerate USB device [ 1227.189508][T21638] random: crng reseeded on system resumption [ 1227.191134][ T30] audit: type=1400 audit(3916499013.245:2023): avc: denied { write } for pid=21636 comm="syz.4.4379" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1228.367581][T21649] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 1228.404807][T21655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4395'. [ 1228.426830][T21655] hsr0: entered allmulticast mode [ 1228.431916][T21655] hsr_slave_0: entered allmulticast mode [ 1228.445834][T21655] hsr_slave_1: entered allmulticast mode [ 1228.895403][T21683] netlink: 'syz.3.4405': attribute type 12 has an invalid length. [ 1228.904185][T21683] netlink: 'syz.3.4405': attribute type 29 has an invalid length. [ 1228.914435][T21683] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4405'. [ 1228.934412][T21683] netlink: 'syz.3.4405': attribute type 2 has an invalid length. [ 1228.945084][T21683] netlink: 'syz.3.4405': attribute type 3 has an invalid length. [ 1228.956968][ T9257] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1228.962763][T21683] netlink: 15 bytes leftover after parsing attributes in process `syz.3.4405'. [ 1229.120559][ T9257] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1229.120590][ T9257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.120612][ T9257] usb 1-1: Product: syz [ 1229.120628][ T9257] usb 1-1: Manufacturer: syz [ 1229.120642][ T9257] usb 1-1: SerialNumber: syz [ 1229.149453][ C0] hrtimer: interrupt took 14241 ns [ 1229.350335][ T9257] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1229.350383][ T9257] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1229.350403][ T9257] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1229.355294][ T9257] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1230.131953][ T9257] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1230.196922][T21737] 9p: Bad value for 'wfdno' [ 1230.260601][ T30] audit: type=1400 audit(3916499016.108:2024): avc: denied { lock } for pid=21740 comm="syz.1.4429" path="socket:[72295]" dev="sockfs" ino=72295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1230.315042][ T9257] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.334488][ T9257] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1230.344050][ T9257] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1230.353284][ T9257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.458955][ T9257] usb 3-1: config 0 descriptor?? [ 1230.570367][ T5951] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1230.719990][ T5951] usb 4-1: device descriptor read/64, error -71 [ 1231.030146][ T5951] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1231.180360][ T5951] usb 4-1: device descriptor read/64, error -71 [ 1231.307925][ T5951] usb usb4-port1: attempt power cycle [ 1231.681900][ T5951] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1231.704373][ T5951] usb 4-1: device descriptor read/8, error -71 [ 1231.926308][ T5873] usb 1-1: USB disconnect, device number 31 [ 1231.960089][ T5951] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1232.859812][ T5951] usb 4-1: device descriptor read/8, error -71 [ 1232.988398][ T5951] usb usb4-port1: unable to enumerate USB device [ 1233.101538][ T5951] usb 3-1: USB disconnect, device number 73 [ 1233.383560][ T5873] kernel read not supported for file bpf-prog (pid: 5873 comm: kworker/0:4) [ 1233.515081][T21813] IPVS: length: 139 != 8 [ 1234.531694][ T1071] kernel read not supported for file bpf-prog (pid: 1071 comm: kworker/1:2) [ 1234.750803][T21842] netlink: 'syz.0.4469': attribute type 12 has an invalid length. [ 1234.760381][ T1071] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1234.767153][T21842] netlink: 'syz.0.4469': attribute type 29 has an invalid length. [ 1234.787246][T21842] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4469'. [ 1234.801062][T21842] netlink: 'syz.0.4469': attribute type 2 has an invalid length. [ 1234.811289][T21842] netlink: 'syz.0.4469': attribute type 3 has an invalid length. [ 1234.820548][T21842] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4469'. [ 1234.914735][ T1071] usb 4-1: device descriptor read/64, error -71 [ 1234.952954][T16778] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1235.855714][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 1236.000712][ T1071] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1236.032711][T16778] usb 3-1: device descriptor read/64, error -71 [ 1236.090857][T21861] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4478'. [ 1236.139316][ T1071] usb 4-1: device descriptor read/64, error -71 [ 1236.257446][ T1071] usb usb4-port1: attempt power cycle [ 1236.289170][T16778] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1236.430096][T16778] usb 3-1: device descriptor read/64, error -71 [ 1236.546193][T16778] usb usb3-port1: attempt power cycle [ 1236.620335][ T1071] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1236.654070][ T1071] usb 4-1: device descriptor read/8, error -71 [ 1236.908962][ T1071] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1236.921831][T16778] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1236.931144][ T1071] usb 4-1: device descriptor read/8, error -71 [ 1236.941524][T16778] usb 3-1: device descriptor read/8, error -71 [ 1237.055563][ T1071] usb usb4-port1: unable to enumerate USB device [ 1237.197729][T16778] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1237.275158][T16778] usb 3-1: device descriptor read/8, error -71 [ 1237.454368][T16778] usb usb3-port1: unable to enumerate USB device [ 1237.710617][T16778] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1237.876361][T16778] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1237.893840][T16778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.901864][T16778] usb 5-1: Product: syz [ 1237.906523][T16778] usb 5-1: Manufacturer: syz [ 1237.911144][T16778] usb 5-1: SerialNumber: syz [ 1238.479773][T16778] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1238.509397][T16778] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1238.526854][T16778] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1239.316623][T16778] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1239.351506][T16778] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1239.405793][T16778] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1241.528034][T16778] usb 5-1: USB disconnect, device number 69 [ 1241.875019][T22003] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4541'. [ 1242.938722][ T5952] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1243.025276][T22014] 9p: Bad value for 'rfdno' [ 1243.120204][ T5952] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.163056][ T5952] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1243.194073][ T5952] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1243.227707][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.269790][ T5952] usb 1-1: config 0 descriptor?? [ 1243.286603][ T5952] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1243.425072][T22035] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4553'. [ 1243.463498][T22040] netlink: 'syz.4.4555': attribute type 12 has an invalid length. [ 1244.072317][T22040] netlink: 'syz.4.4555': attribute type 29 has an invalid length. [ 1244.083882][T22040] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4555'. [ 1244.139828][T22040] netlink: 'syz.4.4555': attribute type 2 has an invalid length. [ 1244.164066][T22040] netlink: 'syz.4.4555': attribute type 3 has an invalid length. [ 1244.200192][T22040] netlink: 15 bytes leftover after parsing attributes in process `syz.4.4555'. [ 1244.327478][T22052] loop6: detected capacity change from 0 to 7 [ 1244.339846][ C0] blk_print_req_error: 26 callbacks suppressed [ 1244.339867][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1244.355681][ C0] buffer_io_error: 26 callbacks suppressed [ 1244.355697][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.381906][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1244.391538][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.407631][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1244.417264][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.425591][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1244.435179][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.447777][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1244.457384][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.465493][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1244.475133][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.486886][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1244.496530][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.505815][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1244.515418][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.523321][T22052] ldm_validate_partition_table(): Disk read failed. [ 1244.530810][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1244.540424][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.549607][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1244.559210][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.569222][T22052] Dev loop6: unable to read RDB block 0 [ 1244.589108][T22052] loop6: unable to read partition table [ 1244.615231][T22052] loop6: partition table beyond EOD, truncated [ 1244.623255][T22052] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1244.785193][T22066] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1246.061011][ T9257] usb 1-1: USB disconnect, device number 32 [ 1246.199050][T22090] 9p: Bad value for 'wfdno' [ 1246.236149][T22092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4576'. [ 1246.349842][T22099] gre1: entered promiscuous mode [ 1246.355028][T22099] gre1: entered allmulticast mode [ 1246.366212][T22099] team0: Device gre1 is of different type [ 1246.559340][T22115] netlink: 'syz.0.4585': attribute type 12 has an invalid length. [ 1246.567606][T22115] netlink: 'syz.0.4585': attribute type 29 has an invalid length. [ 1246.576716][T22115] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4585'. [ 1246.801855][T22127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4589'. [ 1246.947624][T22127] team0: Port device team_slave_0 removed [ 1247.161067][T22140] loop6: detected capacity change from 0 to 7 [ 1247.181302][T22140] Dev loop6: unable to read RDB block 7 [ 1247.187608][T22140] loop6: unable to read partition table [ 1247.199289][T22140] loop6: partition table beyond EOD, truncated [ 1247.205816][T22140] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1248.468377][T22156] netlink: 'syz.1.4601': attribute type 29 has an invalid length. [ 1249.599671][T22178] 9p: Bad value for 'rfdno' [ 1250.133218][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.603684][T22198] macsec1: entered promiscuous mode [ 1250.619708][T22198] macvlan0: entered promiscuous mode [ 1250.648730][T22198] macsec1: entered allmulticast mode [ 1250.677582][T22198] macvlan0: entered allmulticast mode [ 1250.692388][T22198] veth1_vlan: entered allmulticast mode [ 1250.722322][T22198] macvlan0: left allmulticast mode [ 1250.749098][T22198] veth1_vlan: left allmulticast mode [ 1250.766935][T22198] macvlan0: left promiscuous mode [ 1250.987207][T16778] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1251.478738][T16778] usb 1-1: Using ep0 maxpacket: 8 [ 1251.504760][T16778] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1251.545765][T16778] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1251.564955][T16778] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1251.599626][T16778] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1251.632017][T16778] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1251.671205][T22220] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4627'. [ 1251.736846][T16778] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1251.789880][T16778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.877060][T16778] usb 1-1: config 0 descriptor?? [ 1252.116564][T22233] loop6: detected capacity change from 0 to 7 [ 1252.377179][T22233] Dev loop6: unable to read RDB block 7 [ 1252.419050][T22233] loop6: unable to read partition table [ 1252.439562][T22233] loop6: partition table beyond EOD, truncated [ 1252.448436][T22235] 9p: Bad value for 'wfdno' [ 1252.455924][T22233] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1252.573398][T16778] usb 1-1: USB disconnect, device number 33 [ 1252.886114][T22247] macvlan2: entered promiscuous mode [ 1252.921932][T22247] batman_adv: batadv0: Adding interface: macvlan2 [ 1252.951847][T22247] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.985706][T22247] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 1254.154672][T22259] 9p: Bad value for 'rfdno' [ 1254.389985][T22265] IPVS: length: 139 != 8 [ 1254.820083][T22287] 9p: Bad value for 'wfdno' [ 1254.961304][T22296] 9p: Bad value for 'rfdno' [ 1255.821838][T22306] syzkaller0: entered promiscuous mode [ 1255.827339][T22306] syzkaller0: entered allmulticast mode [ 1256.088766][T22322] 9p: Bad value for 'wfdno' [ 1257.069144][T22353] netlink: 'syz.1.4679': attribute type 12 has an invalid length. [ 1257.076993][T22353] netlink: 'syz.1.4679': attribute type 29 has an invalid length. [ 1257.112410][T22353] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4679'. [ 1257.398939][ T5952] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1257.765401][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 1257.793939][ T5952] usb 5-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1257.839092][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1257.871634][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1257.929542][ T5952] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1258.048051][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1258.071785][ T5952] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1258.083036][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.102481][ T5952] usb 5-1: config 0 descriptor?? [ 1258.187967][T22392] netlink: 'syz.1.4693': attribute type 12 has an invalid length. [ 1258.198976][T22392] netlink: 'syz.1.4693': attribute type 29 has an invalid length. [ 1258.341750][T22392] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4693'. [ 1258.580209][T16778] usb 5-1: USB disconnect, device number 70 [ 1260.254717][ T1071] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1260.437815][ T1071] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1260.480809][ T1071] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1260.544558][ T1071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.581746][ T1071] usb 5-1: config 0 descriptor?? [ 1261.396063][T22474] netlink: 'syz.1.4725': attribute type 12 has an invalid length. [ 1261.412843][T22474] netlink: 'syz.1.4725': attribute type 29 has an invalid length. [ 1261.433911][T22474] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4725'. [ 1261.913808][T22489] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22489 comm=syz.0.4732 [ 1261.928671][T22489] netlink: 'syz.0.4732': attribute type 1 has an invalid length. [ 1262.030170][T22489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1262.605594][ T30] audit: type=1400 audit(3916499046.372:2025): avc: denied { mount } for pid=22514 comm="syz.3.4742" name="/" dev="hugetlbfs" ino=74447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1263.177895][T22540] IPVS: length: 139 != 8 [ 1263.233026][ T1071] usb 5-1: USB disconnect, device number 71 [ 1263.568955][ T30] audit: type=1400 audit(3916499047.279:2026): avc: denied { create } for pid=22556 comm="syz.4.4759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1264.414813][T22576] IPVS: length: 139 != 8 [ 1266.326451][ C1] ------------[ cut here ]------------ [ 1266.332915][ C1] ODEBUG: free active (active state 0) object: ffff888055dd4490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1266.345867][ C1] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#1: syz.2.4786/22619 [ 1266.356090][ C1] Modules linked in: [ 1266.360896][ C1] CPU: 1 UID: 0 PID: 22619 Comm: syz.2.4786 Not tainted syzkaller #0 PREEMPT(full) [ 1266.370306][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1266.380436][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1266.386253][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 12 12 d2 0b 41 56 48 8b 14 dd 60 46 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 7c f9 c7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1266.405887][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010246 [ 1266.411983][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1266.419957][ C1] RDX: ffffffff8bfa45a0 RSI: ffffffff8bfa41c0 RDI: ffffffff90c17f00 [ 1266.427958][ C1] RBP: 0000000000000001 R08: ffff888055dd4490 R09: ffffffff8b92b900 [ 1266.435969][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa41c0 [ 1266.443964][ C1] R13: ffffffff8b92b940 R14: ffffffff8a660700 R15: ffffc90000a08b18 [ 1266.451936][ C1] FS: 000055558cc3b500(0000) GS:ffff8881246dc000(0000) knlGS:0000000000000000 [ 1266.460933][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1266.467544][ C1] CR2: 00002000000000b0 CR3: 0000000025e11000 CR4: 00000000003526f0 [ 1266.475554][ C1] Call Trace: [ 1266.478831][ C1] [ 1266.481674][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1266.487372][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1266.493207][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 1266.498816][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1266.504898][ C1] kfree+0x34c/0x690 [ 1266.508820][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1266.514202][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1266.519367][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1266.524480][ C1] rose_timer_expiry+0x53f/0x630 [ 1266.529465][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1266.534924][ C1] call_timer_fn+0x19a/0x590 [ 1266.539576][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1266.544693][ C1] ? __run_timers+0x747/0xac0 [ 1266.549366][ C1] ? __run_timers+0x747/0xac0 [ 1266.554083][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1266.559544][ C1] __run_timers+0x757/0xac0 [ 1266.564108][ C1] ? __pfx___run_timers+0x10/0x10 [ 1266.569151][ C1] run_timer_base+0x114/0x190 [ 1266.573868][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1266.579068][ C1] run_timer_softirq+0x1a/0x50 [ 1266.583876][ C1] handle_softirqs+0x1ea/0x910 [ 1266.588660][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1266.594006][ C1] __irq_exit_rcu+0xef/0x150 [ 1266.598605][ C1] irq_exit_rcu+0x9/0x30 [ 1266.602853][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1266.608543][ C1] [ 1266.611477][ C1] [ 1266.614449][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1266.620436][ C1] RIP: 0010:lock_acquire+0x5e/0x330 [ 1266.625684][ C1] Code: 05 7b 1c 01 12 83 f8 07 0f 87 a4 02 00 00 48 0f a3 05 06 12 d4 0e 0f 82 6f 02 00 00 8b 35 9e 42 d4 0e 85 f6 0f 85 8a 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 1c 01 12 0f 85 b8 02 00 00 48 83 c4 [ 1266.645325][ C1] RSP: 0018:ffffc90003a77e68 EFLAGS: 00000206 [ 1266.651427][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 1266.659429][ C1] RDX: 0000000000000000 RSI: ffffffff8dc1ea15 RDI: ffffffff8bfa34a0 [ 1266.667421][ C1] RBP: ffffffff8e5e3360 R08: 0000000086db7919 R09: 0000000000000007 [ 1266.675429][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1266.683432][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1266.691447][ C1] ? __do_sys_rt_sigreturn+0x1da/0x2c0 [ 1266.696932][ C1] __task_pid_nr_ns+0x3f/0x500 [ 1266.701739][ C1] ? __task_pid_nr_ns+0x2e/0x500 [ 1266.706676][ C1] __do_sys_getpid+0x1d/0x30 [ 1266.711295][ C1] do_syscall_64+0xc9/0xf80 [ 1266.715801][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.721736][ C1] RIP: 0033:0x7f976df94ad7 [ 1266.726155][ C1] Code: 8d 3d 5b 4a 0b 00 e8 58 1d fa ff e8 23 87 00 00 0f 1f 00 b8 68 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 27 00 00 00 0f 05 0f 1f 84 00 00 00 00 00 b8 6e 00 00 00 0f 05 c3 0f 1f 84 00 00 [ 1266.745811][ C1] RSP: 002b:00007ffe432a0388 EFLAGS: 00000206 ORIG_RAX: 0000000000000027 [ 1266.754265][ C1] RAX: ffffffffffffffda RBX: 00007ffe432a04f0 RCX: 00007f976df94ad7 [ 1266.762243][ C1] RDX: 00007ffe432a03c0 RSI: 00007ffe432a04f0 RDI: 0000000000000021 [ 1266.770244][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1266.778242][ C1] R10: 00007ffe432a11c0 R11: 0000000000000206 R12: 00007ffe432a11e0 [ 1266.786261][ C1] R13: 00007f976e215fac R14: 000000000012317d R15: 00007ffe432a11c0 [ 1266.794237][ C1] [ 1266.797273][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1266.804544][ C1] CPU: 1 UID: 0 PID: 22619 Comm: syz.2.4786 Not tainted syzkaller #0 PREEMPT(full) [ 1266.813895][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1266.823944][ C1] Call Trace: [ 1266.827205][ C1] [ 1266.830035][ C1] dump_stack_lvl+0x100/0x190 [ 1266.834701][ C1] vpanic+0x20d/0x630 [ 1266.838664][ C1] panic+0xd1/0xd1 [ 1266.842370][ C1] ? __pfx_panic+0x10/0x10 [ 1266.846793][ C1] ? check_panic_on_warn+0x1f/0x90 [ 1266.851905][ C1] check_panic_on_warn.cold+0x19/0x34 [ 1266.857276][ C1] ? debug_print_object+0x18e/0x2a0 [ 1266.862490][ C1] __warn.cold+0x191/0x2f8 [ 1266.866898][ C1] __report_bug+0x296/0x3d0 [ 1266.871397][ C1] ? debug_print_object+0x18e/0x2a0 [ 1266.876596][ C1] ? __pfx___report_bug+0x10/0x10 [ 1266.881619][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1266.886577][ C1] report_bug_entry+0xe1/0x290 [ 1266.891331][ C1] ? debug_print_object+0x19b/0x2a0 [ 1266.896513][ C1] handle_bug+0x1c9/0x2a0 [ 1266.900827][ C1] exc_invalid_op+0x17/0x50 [ 1266.905312][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1266.910147][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1266.915935][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 12 12 d2 0b 41 56 48 8b 14 dd 60 46 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 7c f9 c7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1266.935525][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010246 [ 1266.941575][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1266.949523][ C1] RDX: ffffffff8bfa45a0 RSI: ffffffff8bfa41c0 RDI: ffffffff90c17f00 [ 1266.957488][ C1] RBP: 0000000000000001 R08: ffff888055dd4490 R09: ffffffff8b92b900 [ 1266.965438][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa41c0 [ 1266.973394][ C1] R13: ffffffff8b92b940 R14: ffffffff8a660700 R15: ffffc90000a08b18 [ 1266.981349][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1266.986982][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1266.992597][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1266.998393][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 1267.003925][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1267.009981][ C1] kfree+0x34c/0x690 [ 1267.013853][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1267.019208][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1267.024304][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1267.029395][ C1] rose_timer_expiry+0x53f/0x630 [ 1267.034313][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1267.039750][ C1] call_timer_fn+0x19a/0x590 [ 1267.044342][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1267.049442][ C1] ? __run_timers+0x747/0xac0 [ 1267.054097][ C1] ? __run_timers+0x747/0xac0 [ 1267.058754][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1267.064214][ C1] __run_timers+0x757/0xac0 [ 1267.068732][ C1] ? __pfx___run_timers+0x10/0x10 [ 1267.073770][ C1] run_timer_base+0x114/0x190 [ 1267.078432][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1267.083614][ C1] run_timer_softirq+0x1a/0x50 [ 1267.088356][ C1] handle_softirqs+0x1ea/0x910 [ 1267.093109][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1267.098383][ C1] __irq_exit_rcu+0xef/0x150 [ 1267.102956][ C1] irq_exit_rcu+0x9/0x30 [ 1267.107184][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1267.112808][ C1] [ 1267.115721][ C1] [ 1267.118663][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1267.124627][ C1] RIP: 0010:lock_acquire+0x5e/0x330 [ 1267.129808][ C1] Code: 05 7b 1c 01 12 83 f8 07 0f 87 a4 02 00 00 48 0f a3 05 06 12 d4 0e 0f 82 6f 02 00 00 8b 35 9e 42 d4 0e 85 f6 0f 85 8a 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 1c 01 12 0f 85 b8 02 00 00 48 83 c4 [ 1267.149399][ C1] RSP: 0018:ffffc90003a77e68 EFLAGS: 00000206 [ 1267.155447][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 1267.163398][ C1] RDX: 0000000000000000 RSI: ffffffff8dc1ea15 RDI: ffffffff8bfa34a0 [ 1267.171347][ C1] RBP: ffffffff8e5e3360 R08: 0000000086db7919 R09: 0000000000000007 [ 1267.179296][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1267.187252][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1267.195245][ C1] ? __do_sys_rt_sigreturn+0x1da/0x2c0 [ 1267.200705][ C1] __task_pid_nr_ns+0x3f/0x500 [ 1267.205458][ C1] ? __task_pid_nr_ns+0x2e/0x500 [ 1267.210374][ C1] __do_sys_getpid+0x1d/0x30 [ 1267.214963][ C1] do_syscall_64+0xc9/0xf80 [ 1267.219452][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.225325][ C1] RIP: 0033:0x7f976df94ad7 [ 1267.229722][ C1] Code: 8d 3d 5b 4a 0b 00 e8 58 1d fa ff e8 23 87 00 00 0f 1f 00 b8 68 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 27 00 00 00 0f 05 0f 1f 84 00 00 00 00 00 b8 6e 00 00 00 0f 05 c3 0f 1f 84 00 00 [ 1267.249311][ C1] RSP: 002b:00007ffe432a0388 EFLAGS: 00000206 ORIG_RAX: 0000000000000027 [ 1267.257706][ C1] RAX: ffffffffffffffda RBX: 00007ffe432a04f0 RCX: 00007f976df94ad7 [ 1267.265656][ C1] RDX: 00007ffe432a03c0 RSI: 00007ffe432a04f0 RDI: 0000000000000021 [ 1267.273617][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1267.281565][ C1] R10: 00007ffe432a11c0 R11: 0000000000000206 R12: 00007ffe432a11e0 [ 1267.289513][ C1] R13: 00007f976e215fac R14: 000000000012317d R15: 00007ffe432a11c0 [ 1267.297477][ C1] [ 1267.300747][ C1] Kernel Offset: disabled [ 1267.305046][ C1] Rebooting in 86400 seconds..