last executing test programs: 3m7.483301988s ago: executing program 1 (id=194): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m7.307762327s ago: executing program 1 (id=196): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 3m7.196542198s ago: executing program 1 (id=197): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) 3m7.078343047s ago: executing program 1 (id=200): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 3m7.02791403s ago: executing program 1 (id=201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="2e67676765420f21d2f26466440f35c74424003c000000c7442402ad7d9c79ff1c2426460f01d166baf80cb8a0b4f888ef66bafc0c66b8007066ef3665a00bae00000000000066baa000ed362665470fc75a00b9800000c00f3235008000000f300f2219", 0x64}], 0x1, 0xa, &(0x7f00000001c0)=[@cr4={0x1, 0x40200}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m6.747099188s ago: executing program 1 (id=203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 3m6.613133563s ago: executing program 32 (id=203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 2m59.266690857s ago: executing program 0 (id=270): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) close_range(r0, 0xffffffffffffffff, 0x0) 2m59.121156876s ago: executing program 0 (id=271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/73, 0x49}], 0x1) 2m58.985813443s ago: executing program 0 (id=273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d564b"]) 2m58.620828994s ago: executing program 0 (id=274): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 2m58.403500692s ago: executing program 0 (id=276): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) fchdir(r1) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2) 2m58.021719865s ago: executing program 0 (id=281): r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3110ec", 0x3, r0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x76) keyctl$unlink(0x9, r1, r0) 2m57.641630078s ago: executing program 33 (id=281): r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3110ec", 0x3, r0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x76) keyctl$unlink(0x9, r1, r0) 17.202916201s ago: executing program 6 (id=2460): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002205000000d9fe79fe1e"], 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 15.558954048s ago: executing program 6 (id=2483): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x1f, &(0x7f0000002240)={0x2b, 0x1, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x180) 15.443510362s ago: executing program 6 (id=2485): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x90000005}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 15.225764734s ago: executing program 6 (id=2486): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$ttys(0xc, 0x2, 0x0) 15.106220861s ago: executing program 6 (id=2487): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) 13.737872399s ago: executing program 6 (id=2501): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f0000000480)=[{0x1, 0x1}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x200000b9}) 13.422944744s ago: executing program 34 (id=2501): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f0000000480)=[{0x1, 0x1}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x200000b9}) 4.80723531s ago: executing program 2 (id=2580): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x80000002}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.695711713s ago: executing program 2 (id=2582): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) 4.651027799s ago: executing program 4 (id=2583): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0xf542}, {r0, 0x1141}], 0x2, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r1 = gettid() timer_create(0x3, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 3.795708884s ago: executing program 4 (id=2594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.794821545s ago: executing program 7 (id=2595): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xe) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3.696306833s ago: executing program 7 (id=2596): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/154, 0x9a}], 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x6, 0x4, 0x1c000000, 0x2, "0062ba7d820740ff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x13) 2.845529259s ago: executing program 4 (id=2598): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000100)=""/162, 0xa2}], 0x1, 0x1239, 0x4b4a) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) 2.801895315s ago: executing program 7 (id=2600): connect$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000009104"]) 2.747223086s ago: executing program 4 (id=2602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.642700489s ago: executing program 7 (id=2603): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000bc0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\xd8\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\x01\xf0\xff\xff\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1B\xd7\xaf\x99\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xe6\x94\xed\xf8\xe9\xd8\xe9\x95\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write$binfmt_script(r3, 0x0, 0xd9) write(r0, 0x0, 0x0) 2.546057602s ago: executing program 2 (id=2607): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r3}) 2.467082803s ago: executing program 2 (id=2608): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.305133333s ago: executing program 4 (id=2609): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 1.60692895s ago: executing program 7 (id=2621): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.417044584s ago: executing program 3 (id=2625): mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x8000000000000000, 0x476, 0x4000000000000000, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) fchown(r0, 0xee01, 0x0) 1.36616549s ago: executing program 3 (id=2626): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) 1.298125271s ago: executing program 3 (id=2627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xb, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x7fff, 0x401, 0x5, 0x6}, {0x0, 0xe1, 0x7, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}, @TCA_U32_LINK={0x8, 0x3, 0xbf0}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008085}, 0x20040054) 1.159148243s ago: executing program 3 (id=2629): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x2, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, r1, 0x0, 0x8, 'syz1\x00', 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 1.041997842s ago: executing program 3 (id=2633): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) 951.079605ms ago: executing program 3 (id=2634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="89ed", 0x2}], 0x1) 763.501237ms ago: executing program 2 (id=2638): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 660.620059ms ago: executing program 5 (id=2639): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) 553.79885ms ago: executing program 2 (id=2640): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 319.796828ms ago: executing program 5 (id=2641): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd=r3, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b000000000000001c000000000004"], 0x48) io_uring_enter(r0, 0x26c3, 0xdfffeffb, 0x4c, 0x0, 0x1d) 254.767354ms ago: executing program 5 (id=2642): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x4}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) 175.896955ms ago: executing program 5 (id=2643): r0 = io_uring_setup(0x6406, &(0x7f0000000280)={0x0, 0x7f60, 0x2, 0xffffffff, 0x15a}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 138.594688ms ago: executing program 5 (id=2644): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x4, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) readv(r0, &(0x7f0000000140)=[{&(0x7f00000018c0)=""/4112, 0x1010}], 0x1) 0s ago: executing program 5 (id=2645): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000090106000000000001d76eeb360000000fad413ec40000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='i2c_write\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x7, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) kernel console output (not intermixed with test programs): : syz [ 201.287060][ T5953] usb 5-1: config 0 descriptor?? [ 201.343537][ T5953] rc_core: IR keymap rc-hauppauge not found [ 201.349499][ T5953] Registered IR keymap rc-empty [ 201.356199][ T5953] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 201.367944][ T5953] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input28 [ 201.378681][ T5957] usb 4-1: Using ep0 maxpacket: 32 [ 201.391651][ T5957] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 201.401481][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.417210][ T5957] usb 4-1: config 0 descriptor?? [ 201.471398][ T5837] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 201.512926][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 201.521845][ T5937] usb 5-1: USB disconnect, device number 19 [ 201.623849][ T5837] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.652670][ T5837] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.659643][ T5837] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 201.675693][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.687834][ T5837] usb 3-1: config 0 descriptor?? [ 201.841652][ T5957] uclogic 0003:145F:0212.0017: interface is invalid, ignoring [ 202.057921][ T5937] usb 4-1: USB disconnect, device number 23 [ 202.131911][ T5837] konepure 0003:1E7D:2DB4.0018: hidraw0: USB HID v8.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 202.244738][T10317] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 202.264397][T10311] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 202.337715][ T5937] usb 3-1: USB disconnect, device number 14 [ 202.838397][T10343] tipc: Started in network mode [ 202.845697][T10343] tipc: Node identity ac1414aa, cluster identity 4711 [ 202.856917][T10343] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 202.864369][T10343] tipc: Enabled bearer , priority 10 [ 202.992726][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 203.130774][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 203.270712][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 203.335074][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 203.410700][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 203.481201][ T5953] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 203.550822][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 203.583647][T10337] syz.6.1671 (10337) used greatest stack depth: 20408 bytes left [ 203.666090][ T5953] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 203.677539][ T5953] usb 6-1: config 0 has no interface number 0 [ 203.690713][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 203.707636][ T5953] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 203.738770][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.750422][ T5953] usb 6-1: Product: syz [ 203.755800][ T5953] usb 6-1: Manufacturer: syz [ 203.760416][ T5953] usb 6-1: SerialNumber: syz [ 203.774891][ T5953] usb 6-1: config 0 descriptor?? [ 203.830713][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 203.945920][ T30] audit: type=1400 audit(1753428235.719:600): avc: denied { add_name } for pid=10403 comm="syz.3.1699" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.946858][T10404] (syz.3.1699,10404,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 203.987849][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.991229][ T5957] tipc: Node number set to 2886997162 [ 204.001610][ T5937] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 204.027818][ T30] audit: type=1400 audit(1753428235.719:601): avc: denied { create } for pid=10403 comm="syz.3.1699" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 204.074078][ T30] audit: type=1400 audit(1753428235.719:602): avc: denied { associate } for pid=10403 comm="syz.3.1699" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 204.121618][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 204.215227][ T5937] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 204.223730][ T5937] usb 7-1: config 0 has no interface number 0 [ 204.233009][ T5937] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 204.252141][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.260430][ T5937] usb 7-1: Product: syz [ 204.274548][ T5937] usb 7-1: Manufacturer: syz [ 204.300837][ T5937] usb 7-1: SerialNumber: syz [ 204.313432][ T5937] usb 7-1: config 0 descriptor?? [ 204.342508][T10413] loop2: detected capacity change from 0 to 7 [ 204.358259][T10413] Dev loop2: unable to read RDB block 7 [ 204.368464][T10413] loop2: AHDI p1 p2 p3 [ 204.373594][T10413] loop2: partition table partially beyond EOD, truncated [ 204.385097][T10413] loop2: p1 start 1601398130 is beyond EOD, truncated [ 204.392030][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 204.417035][T10413] loop2: p2 start 1702059890 is beyond EOD, truncated [ 204.731954][ T5937] usb 7-1: Firmware version (0.0) predates our first public release. [ 204.742665][ T5937] usb 7-1: Please update to version 0.2 or newer [ 204.749578][ T5937] usb 7-1: Firmware: build [ 204.777170][ T30] audit: type=1400 audit(1753428236.549:603): avc: denied { bind } for pid=10431 comm="syz.4.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 204.880456][ T5953] usb 6-1: Firmware version (0.0) predates our first public release. [ 204.889416][ T5953] usb 6-1: Please update to version 0.2 or newer [ 204.943306][ T5910] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 204.956075][ T5953] usb 6-1: USB disconnect, device number 23 [ 204.973196][ T5937] usb 7-1: USB disconnect, device number 16 [ 205.048633][ T30] audit: type=1400 audit(1753428236.819:604): avc: denied { execute } for pid=10441 comm="syz.4.1716" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 205.072556][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.103998][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 205.115255][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.146398][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.163629][ T5910] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 205.176820][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.201282][ T5910] usb 4-1: config 0 descriptor?? [ 205.233980][T10448] syzkaller1: entered promiscuous mode [ 205.239472][T10448] syzkaller1: entered allmulticast mode [ 205.629789][ T5910] ft260 0003:0403:6030.0019: unknown main item tag 0x7 [ 205.827987][ T5910] ft260 0003:0403:6030.0019: chip code: 6424 8183 [ 205.913737][ T5937] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 206.005437][T10484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1734'. [ 206.028519][ T5910] ft260 0003:0403:6030.0019: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 206.100866][ T5937] usb 7-1: Using ep0 maxpacket: 32 [ 206.119519][ T5937] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 206.141730][ T5937] usb 7-1: config 0 has no interface number 0 [ 206.151412][ T5937] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 206.161156][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.169751][ T5937] usb 7-1: Product: syz [ 206.175065][ T5937] usb 7-1: Manufacturer: syz [ 206.179689][ T5937] usb 7-1: SerialNumber: syz [ 206.192012][ T5937] usb 7-1: config 0 descriptor?? [ 206.203561][ T5937] smsc95xx v2.0.0 [ 206.230099][ T5910] ft260 0003:0403:6030.0019: failed to retrieve status: -71, no wakeup [ 206.251294][ T5910] ft260 0003:0403:6030.0019: failed to retrieve status: -71 [ 206.261488][ T5910] ft260 0003:0403:6030.0019: failed to reset I2C controller: -71 [ 206.298991][ T5910] usb 4-1: USB disconnect, device number 24 [ 206.319417][T10494] syzkaller1: entered promiscuous mode [ 206.337397][T10494] syzkaller1: entered allmulticast mode [ 206.602031][T10508] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1743'. [ 206.622168][ T5937] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 206.649564][ T5937] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 206.904379][T10521] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1750'. [ 207.003701][T10526] netlink: 'syz.2.1753': attribute type 1 has an invalid length. [ 207.083277][ T5937] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 207.096808][ T5937] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 207.131365][ T5937] usb 7-1: USB disconnect, device number 17 [ 207.393896][ T30] audit: type=1400 audit(1753428239.169:605): avc: denied { mount } for pid=10548 comm="syz.2.1764" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 207.450806][ T30] audit: type=1400 audit(1753428239.169:606): avc: denied { search } for pid=10548 comm="syz.2.1764" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.458573][T10553] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.472795][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.482358][ T30] audit: type=1400 audit(1753428239.169:607): avc: denied { search } for pid=10548 comm="syz.2.1764" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.487847][T10553] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.508672][ T30] audit: type=1400 audit(1753428239.169:608): avc: denied { setattr } for pid=10548 comm="syz.2.1764" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.537270][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.992909][ T30] audit: type=1400 audit(1753428239.769:609): avc: denied { create } for pid=10576 comm="syz.5.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.020772][ C0] net_ratelimit: 4 callbacks suppressed [ 208.020790][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 208.066145][T10581] loop6: detected capacity change from 0 to 524287999 [ 208.668831][T10610] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 208.751238][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1792'. [ 208.751942][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 208.762515][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1792'. [ 208.862583][T10619] kvm: user requested TSC rate below hardware speed [ 208.961356][ T24] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.980819][ T24] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.996047][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 209.018736][ T24] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 209.027999][ T5910] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 209.060701][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 209.062571][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.114161][ T24] usb 3-1: config 0 descriptor?? [ 209.221430][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 209.245026][ T5910] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 209.271212][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.290778][ T5910] usb 4-1: Product: syz [ 209.294970][ T5910] usb 4-1: Manufacturer: syz [ 209.299567][ T5910] usb 4-1: SerialNumber: syz [ 209.323978][ T5910] usb 4-1: config 0 descriptor?? [ 209.351625][ T5910] gspca_main: sq905-2.14.0 probing 2770:9120 [ 209.441012][ T5957] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 209.635578][ T5957] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.658733][ T5957] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.686566][ T5957] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 209.699737][ T5957] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 209.715278][ T5957] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.730751][ T5957] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.740453][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.749877][ T5957] usb 6-1: Product: syz [ 209.754453][ T5957] usb 6-1: Manufacturer: syz [ 209.759329][ T5957] usb 6-1: SerialNumber: syz [ 209.777274][ T24] usb 3-1: string descriptor 0 read error: -22 [ 209.990138][ T24] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001A/input/input30 [ 210.100705][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 210.113984][ T24] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001A/input/input31 [ 210.167681][ T24] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001A/input/input32 [ 210.246398][ T24] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001A/input/input33 [ 210.346056][ T24] uclogic 0003:256C:006D.001A: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 210.395052][ T5910] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 210.423538][ T5910] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 210.435019][ T24] usb 3-1: USB disconnect, device number 15 [ 210.448312][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 210.448326][ T30] audit: type=1400 audit(1753428242.219:612): avc: denied { relabelfrom } for pid=10656 comm="syz.4.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 210.484786][ T30] audit: type=1400 audit(1753428242.249:613): avc: denied { relabelto } for pid=10656 comm="syz.4.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 210.511953][T10658] fido_id[10658]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 210.539586][ T5910] usb 4-1: USB disconnect, device number 25 [ 210.779210][ T30] audit: type=1326 audit(1753428242.549:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.6.1816" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f751ad8e9a9 code=0x0 [ 210.802081][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.803577][ T5957] cdc_mbim 6-1:1.0: bind() failure [ 210.828564][ T30] audit: type=1400 audit(1753428242.599:615): avc: denied { mounton } for pid=10668 comm="syz.4.1817" path="/429/file0" dev="tmpfs" ino=2259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 210.828768][T10669] Invalid source name [ 210.851621][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.852083][ T5957] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 210.861793][T10669] UBIFS error (pid: 10669): cannot open "./file0", error -22 [ 210.876716][ T5957] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 210.902955][ T5957] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 210.930620][ T5957] usb 6-1: USB disconnect, device number 24 [ 210.965698][ T30] audit: type=1400 audit(1753428242.739:616): avc: denied { append } for pid=10668 comm="syz.4.1817" name="file0" dev="tmpfs" ino=2259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 211.140771][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 211.435843][T10698] netlink: 'syz.3.1829': attribute type 1 has an invalid length. [ 211.448728][T10698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1829'. [ 211.583752][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1833'. [ 211.771217][ T24] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 211.808712][ T30] audit: type=1326 audit(1753428243.579:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.6.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751ad8e9a9 code=0x7ffc0000 [ 211.864163][ T30] audit: type=1326 audit(1753428243.579:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.6.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751ad8e9a9 code=0x7ffc0000 [ 211.911862][ T30] audit: type=1326 audit(1753428243.579:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.6.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f751ad8e9a9 code=0x7ffc0000 [ 211.953893][ T30] audit: type=1326 audit(1753428243.579:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.6.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751ad8e9a9 code=0x7ffc0000 [ 211.983013][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.000702][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.033371][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 212.051227][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 212.075831][ T24] usb 4-1: SerialNumber: syz [ 212.096244][ T24] usb 4-1: 0:2 : does not exist [ 212.130734][ T30] audit: type=1326 audit(1753428243.579:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.6.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f751ad8e9a9 code=0x7ffc0000 [ 212.180713][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 212.608796][ T24] usb 4-1: USB disconnect, device number 26 [ 212.880860][ T5953] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 213.043969][ T5953] usb 3-1: Using ep0 maxpacket: 16 [ 213.052534][ T5953] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 213.084721][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.093950][ T5953] usb 3-1: Product: syz [ 213.098991][ T5953] usb 3-1: Manufacturer: syz [ 213.108037][ T5953] usb 3-1: SerialNumber: syz [ 213.116200][ T5953] usb 3-1: config 0 descriptor?? [ 213.128122][ T5953] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 213.163615][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 213.212245][T10770] loop3: detected capacity change from 0 to 1 [ 213.220586][T10770] Dev loop3: unable to read RDB block 1 [ 213.226269][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 213.233897][T10770] loop3: AHDI p1 [ 213.237658][T10770] loop3: partition table partially beyond EOD, truncated [ 213.323868][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 213.343629][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.354740][ T5953] gp8psk: usb in 128 operation failed. [ 213.365601][ T5953] gp8psk: usb in 137 operation failed. [ 213.371171][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.381208][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 213.383160][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.411174][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 213.429804][ T9] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 213.439768][ T5953] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 213.451861][ T5953] usb 3-1: media controller created [ 213.459106][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.484787][ T9] usb 6-1: config 0 descriptor?? [ 213.499778][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.542007][ T5953] gp8psk_fe: Frontend revision 1 attached [ 213.547826][ T5953] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 213.564945][ T5953] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 213.570850][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 213.597438][ T24] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 213.628196][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.652684][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.685158][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.696656][ T24] usb 5-1: Product: syz [ 213.702227][ T24] usb 5-1: Manufacturer: syz [ 213.706941][ T24] usb 5-1: SerialNumber: syz [ 213.875944][ T5953] gp8psk: usb in 138 operation failed. [ 213.885715][ T5953] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 213.902587][ T9] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 213.922363][ T5953] gp8psk: found Genpix USB device pID = 201 (hex) [ 213.931079][ T9] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 213.938059][ T9] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 213.965133][ T5953] usb 3-1: USB disconnect, device number 16 [ 213.992261][ T9] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 213.999299][ T9] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 214.050161][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input34 [ 214.098371][T10755] netlink: 'syz.5.1855': attribute type 2 has an invalid length. [ 214.106500][T10755] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1855'. [ 214.158948][ T5953] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 214.176600][ T9] shield 0003:0955:7214.001B: Registered Thunderstrike controller [ 214.216462][ T9] shield 0003:0955:7214.001B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 214.260739][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 214.330067][ T9] usb 6-1: USB disconnect, device number 25 [ 214.344581][ T24] usb 5-1: 0:2 : does not exist [ 214.360357][ T5837] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 214.368761][T10803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.415393][ T5837] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 214.440391][ T5837] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 214.452865][ T5837] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 214.466083][ T24] usb 5-1: USB disconnect, device number 20 [ 214.508668][ T8110] udevd[8110]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.713358][T10814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.941840][ T5837] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 215.100828][ T5837] usb 4-1: Using ep0 maxpacket: 8 [ 215.113186][T10830] block nbd6: shutting down sockets [ 215.121303][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 215.160841][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 215.221043][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 215.246451][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.300705][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 215.319690][ T5837] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 215.335226][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.358691][ T5837] usb 4-1: Product: syz [ 215.370741][ T5837] usb 4-1: Manufacturer: syz [ 215.375847][ T5837] usb 4-1: SerialNumber: syz [ 215.391391][ T5837] usb 4-1: config 0 descriptor?? [ 215.434900][ T5837] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input35 [ 215.689035][ T5837] imon:send_packet: packet tx failed (-71) [ 215.720799][ T5837] imon 4-1:0.0: panel buttons/knobs setup failed [ 215.739618][T10863] dvmrp0: entered allmulticast mode [ 215.789096][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 215.789110][ T30] audit: type=1400 audit(1753428247.559:642): avc: denied { module_load } for pid=10854 comm="syz.6.1900" path="/sys/power/wakeup_count" dev="sysfs" ino=1408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 215.794527][T10869] lo: entered allmulticast mode [ 215.819474][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.820799][ T5837] rc_core: IR keymap rc-imon-pad not found [ 215.847642][T10863] dvmrp0: left allmulticast mode [ 215.857053][T10863] lo: left allmulticast mode [ 215.875727][ T5837] Registered IR keymap rc-empty [ 215.883085][ T5837] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 215.953751][ T5837] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 215.996778][ T5837] imon:send_packet: packet tx failed (-71) [ 216.021256][ T5837] imon 4-1:0.0: remote input dev register failed [ 216.027911][ T5837] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 216.157179][ T5837] imon 4-1:0.0: unable to initialize intf0, err 0 [ 216.180975][ T5837] imon:imon_probe: failed to initialize context! [ 216.187345][ T5837] imon 4-1:0.0: unable to register, err -19 [ 216.207707][ T5837] usb 4-1: USB disconnect, device number 27 [ 216.280970][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 216.340803][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 216.360738][ T5953] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 216.451901][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 216.473773][ T9] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 216.510790][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.517253][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1917'. [ 216.530404][ T9] usb 5-1: config 0 descriptor?? [ 216.545271][ T5953] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.565350][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 216.565740][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 216.583910][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 216.597105][ T5953] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.614625][ T5953] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.623995][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.633778][ T5953] usb 6-1: config 0 descriptor?? [ 216.639695][T10881] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 216.800827][ T5910] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 216.808546][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 216.870818][ T5937] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 216.962499][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.964813][ T9] gspca_nw80x: reg_r err -71 [ 216.974321][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.985981][ T9] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 216.990400][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 217.007750][ T9] usb 5-1: USB disconnect, device number 21 [ 217.016651][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.026940][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 217.036847][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.049888][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.063862][ T24] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 217.073818][ T5910] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.074510][ T5953] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 217.083917][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.098820][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.101560][ T5953] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 217.107449][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.117603][ T5953] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 217.127753][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.136559][ T5953] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 217.143923][ T5910] usb 3-1: config 0 descriptor?? [ 217.156813][ T24] usb 4-1: config 0 descriptor?? [ 217.163049][ T5953] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 217.170667][ T5937] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 217.182065][ T5953] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 217.184435][ T5937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.235062][ T5937] usb 7-1: config 0 descriptor?? [ 217.380704][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 217.612181][ T24] hid-udraw 0003:20D6:CB17.001D: item fetching failed at offset 5/7 [ 217.632370][ T24] hid-udraw 0003:20D6:CB17.001D: parse failed [ 217.641859][ T24] hid-udraw 0003:20D6:CB17.001D: probe with driver hid-udraw failed with error -22 [ 217.651798][ T5910] plantronics 0003:047F:FFFF.001E: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 217.673641][ T5937] kone 0003:1E7D:2CED.001F: item fetching failed at offset 4/5 [ 217.694001][ T5937] kone 0003:1E7D:2CED.001F: parse failed [ 217.699747][ T5937] kone 0003:1E7D:2CED.001F: probe with driver kone failed with error -22 [ 217.837283][ T5937] usb 4-1: USB disconnect, device number 28 [ 217.877571][ T5953] usb 7-1: USB disconnect, device number 18 [ 218.421001][ T24] usb 3-1: USB disconnect, device number 17 [ 218.430692][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 218.659769][T10922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.674507][ T30] audit: type=1400 audit(1753428250.449:643): avc: denied { load_policy } for pid=10919 comm="syz.6.1928" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 218.674849][T10921] SELinux: ebitmap: high bit 2148008064 is not equal to the expected value 384 [ 218.708310][T10921] SELinux: failed to load policy [ 218.825894][T10927] input: syz0 as /devices/virtual/input/input39 [ 218.887671][ T30] audit: type=1400 audit(1753428250.659:644): avc: denied { map } for pid=10929 comm="syz.4.1932" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.950505][ T30] audit: type=1400 audit(1753428250.689:645): avc: denied { execute } for pid=10929 comm="syz.4.1932" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.459520][ T5910] usb 6-1: USB disconnect, device number 26 [ 219.472963][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 219.501790][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 219.650748][ T5910] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 219.666770][ T24] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 219.686718][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.708255][ T24] usb 7-1: config 0 descriptor?? [ 219.812209][ T5910] usb 6-1: config 5 has an invalid interface number: 123 but max is 0 [ 219.820465][ T5910] usb 6-1: config 5 has no interface number 0 [ 219.863191][ T5910] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 219.886471][ T5910] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0x16, changing to 0x6 [ 219.907444][T10972] netlink: 'syz.3.1952': attribute type 1 has an invalid length. [ 219.909494][ T5910] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x6 has invalid maxpacket 157, setting to 64 [ 219.958945][ T24] kaweth 7-1:0.0: Firmware present in device. [ 219.973554][ T5910] usb 6-1: config 5 interface 123 has no altsetting 0 [ 220.002652][ T5910] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 220.029220][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.038897][ T5910] usb 6-1: Product: syz [ 220.054581][ T5910] usb 6-1: Manufacturer: syz [ 220.059291][ T5910] usb 6-1: SerialNumber: syz [ 220.084049][T10939] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 220.134602][ T24] kaweth 7-1:0.0: Statistics collection: 0 [ 220.140509][ T24] kaweth 7-1:0.0: Multicast filter limit: 0 [ 220.155202][ T24] kaweth 7-1:0.0: MTU: 0 [ 220.159670][ T24] kaweth 7-1:0.0: Read MAC address 00:00:00:00:00:00 [ 220.292925][ T5953] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 220.338128][ T5910] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 220.361188][ T5910] usb 6-1: USB disconnect, device number 27 [ 220.474190][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.485587][ T5953] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 220.497614][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.505715][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 220.519343][ T5953] usb 4-1: config 0 descriptor?? [ 220.571049][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 220.729696][ T9] usb 3-1: config 0 has no interfaces? [ 220.745181][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 220.751442][ T24] kaweth 7-1:0.0: Error setting receive filter [ 220.755325][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 220.774024][ T24] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 220.774847][ T9] usb 3-1: Product: syz [ 220.785036][ T24] usb 7-1: USB disconnect, device number 19 [ 220.799126][ T9] usb 3-1: Manufacturer: syz [ 220.815330][ T9] usb 3-1: config 0 descriptor?? [ 220.824217][T10993] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1962'. [ 220.952993][ T5953] input: HID 28bd:0933 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0933.0020/input/input40 [ 221.048905][ T5953] uclogic 0003:28BD:0933.0020: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.3-1/input0 [ 221.051333][T11001] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1966'. [ 221.116977][T11005] veth0: entered promiscuous mode [ 221.184690][T11004] veth0: left promiscuous mode [ 221.219580][ T24] usb 4-1: USB disconnect, device number 29 [ 221.306244][T10983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.330106][T10983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.369406][ T5953] usb 3-1: USB disconnect, device number 18 [ 221.385738][ T30] audit: type=1400 audit(1753428253.159:646): avc: denied { validate_trans } for pid=11012 comm="syz.4.1970" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 221.540697][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 221.843885][T11029] input: syz0 as /devices/virtual/input/input41 [ 222.059776][T11039] netlink: 'syz.6.1982': attribute type 29 has an invalid length. [ 222.074890][T11039] netlink: 'syz.6.1982': attribute type 29 has an invalid length. [ 222.088789][T11039] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1982'. [ 222.102966][ T30] audit: type=1400 audit(1753428253.859:647): avc: denied { write } for pid=11038 comm="syz.6.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 222.128820][T11039] unsupported nla_type 58 [ 222.143177][ T5937] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 222.154519][ T30] audit: type=1400 audit(1753428253.859:648): avc: denied { nlmsg_write } for pid=11038 comm="syz.6.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 222.257554][ T30] audit: type=1400 audit(1753428254.029:649): avc: denied { getattr } for pid=11045 comm="syz.6.1986" name="/" dev="secretmem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 222.313234][ T5937] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 222.342820][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.374776][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.417687][ T5937] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 222.439424][ T5937] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 222.449310][ T5937] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 222.460379][ T5937] usb 4-1: Manufacturer: syz [ 222.474770][ T5937] usb 4-1: config 0 descriptor?? [ 222.580698][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 222.883406][ T5953] kernel write not supported for file /input/mouse0 (pid: 5953 comm: kworker/0:5) [ 222.934914][T11077] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 222.953318][ T5937] appleir 0003:05AC:8243.0021: unknown main item tag 0x0 [ 222.987362][ T5937] appleir 0003:05AC:8243.0021: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 223.247269][ T30] audit: type=1400 audit(1753428255.009:650): avc: denied { bind } for pid=11089 comm="syz.2.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 223.266761][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.277079][ T24] usb 4-1: USB disconnect, device number 30 [ 223.516197][T11101] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2007'. [ 223.620775][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 223.727822][ T30] audit: type=1400 audit(1753428255.499:651): avc: denied { override_creds } for pid=11106 comm="syz.5.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 223.799815][T11110] geneve1: entered promiscuous mode [ 223.826665][T11110] geneve1: left promiscuous mode [ 224.088244][T11119] ALSA: mixer_oss: invalid OSS volume 'ؤ¿ßnhè‹{%¼ÿOBÁ›eb' [ 224.107064][T11118] unknown channel width for channel at 909000KHz? [ 224.130537][T11118] unknown channel width for channel at 909000KHz? [ 224.148000][T11118] unknown channel width for channel at 909000KHz? [ 224.660692][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 225.292488][T11168] Bluetooth: MGMT ver 1.23 [ 225.460909][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 225.489881][ T5953] IPVS: starting estimator thread 0... [ 225.590741][T11184] IPVS: using max 42 ests per chain, 100800 per kthread [ 225.648953][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.661968][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.692193][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.700711][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 225.709104][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.727273][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.749629][ T24] usb 5-1: config 0 descriptor?? [ 226.102589][T11210] loop3: detected capacity change from 0 to 1 [ 226.114620][T11210] Dev loop3: unable to read RDB block 1 [ 226.120259][T11210] loop3: unable to read partition table [ 226.130007][T11210] loop3: partition table beyond EOD, truncated [ 226.133186][T11212] binder: 11211:11212 ioctl c0306201 0 returned -14 [ 226.136857][T11210] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 226.146244][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 226.198380][ T24] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 226.323071][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 226.335060][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 226.354407][ T9] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 226.370789][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.378894][ T9] usb 3-1: Product: syz [ 226.382010][ T24] usb 5-1: USB disconnect, device number 22 [ 226.388985][ T9] usb 3-1: Manufacturer: syz [ 226.389004][ T9] usb 3-1: SerialNumber: syz [ 226.421307][ T9] usb 3-1: config 0 descriptor?? [ 226.426883][T11199] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 226.449597][T11199] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 226.480785][ T5937] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 226.530744][ T5953] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 226.612520][ T5837] kernel write not supported for file [eventfd] (pid: 5837 comm: kworker/0:3) [ 226.659527][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 226.669269][ T5937] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 226.685631][T11199] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 226.694134][ T5937] usb 6-1: config 0 has no interface number 0 [ 226.700813][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 226.705983][T11199] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 226.715865][ T5937] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 226.717110][ T5953] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 226.725122][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.740710][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 226.754437][ T5937] usb 6-1: Product: syz [ 226.758622][ T5937] usb 6-1: Manufacturer: syz [ 226.764106][ T5937] usb 6-1: SerialNumber: syz [ 226.781843][ T5937] usb 6-1: config 0 descriptor?? [ 226.796275][ T5937] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 226.828931][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.837376][ T5953] usb 4-1: Product: syz [ 226.841926][ T5953] usb 4-1: Manufacturer: syz [ 226.846594][ T5953] usb 4-1: SerialNumber: syz [ 226.853757][ T5953] usb 4-1: config 0 descriptor?? [ 227.008010][ T5937] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 227.025152][ T5937] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 227.066556][ T5953] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 227.091058][ T5953] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 227.117414][ T5953] usb 4-1: USB disconnect, device number 31 [ 227.230740][ T5837] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 227.410824][ T5837] usb 5-1: Using ep0 maxpacket: 16 [ 227.419813][ T5837] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 227.434617][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 227.447600][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 227.464082][ T5937] usb 6-1: USB disconnect, device number 28 [ 227.476575][ T5937] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 227.492832][ T5937] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 227.506822][ T5937] quatech2 6-1:0.51: device disconnected [ 227.538398][ T9] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 227.567015][ T9] usb 3-1: USB disconnect, device number 19 [ 227.584644][ T5837] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 227.600925][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.612479][ T5837] usb 5-1: Product: syz [ 227.616663][ T5837] usb 5-1: Manufacturer: syz [ 227.630682][ T5837] usb 5-1: SerialNumber: syz [ 227.671447][ T5837] usb 5-1: config 0 descriptor?? [ 227.682977][ T5837] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 227.692431][ T5837] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 227.804065][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 228.301887][ T5837] em28xx 5-1:0.0: unknown em28xx chip ID (159) [ 228.508965][ T5837] em28xx 5-1:0.0: Config register raw data: 0x9f [ 228.721116][ T5837] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 228.730078][ T5837] em28xx 5-1:0.0: No AC97 audio processor [ 228.762740][ T5837] usb 5-1: USB disconnect, device number 23 [ 228.769759][ T5837] em28xx 5-1:0.0: Disconnecting em28xx [ 228.820703][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 228.845157][ T5837] em28xx 5-1:0.0: Freeing device [ 229.024784][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 229.063313][T11259] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 229.191094][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 229.203950][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 229.212445][ T9] usb 6-1: config 179 has no interface number 0 [ 229.218730][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 229.260221][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 229.267862][ T30] audit: type=1400 audit(1753428261.039:652): avc: denied { write } for pid=11263 comm="syz.3.2077" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 229.271573][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 229.359315][ T5937] kernel read not supported for file /vcs (pid: 5937 comm: kworker/1:7) [ 229.369308][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 229.426015][ T9] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 229.475954][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 229.489732][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.557043][T11253] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 229.618878][ T30] audit: type=1326 audit(1753428261.389:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.4.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe756b8e9a9 code=0x7fc00000 [ 229.677293][ T30] audit: type=1400 audit(1753428261.449:654): avc: denied { nlmsg_read } for pid=11273 comm="syz.3.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 229.677330][T11275] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2080'. [ 229.860730][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 229.884288][ T5953] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input43 [ 229.982590][T11278] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 230.085322][ T24] usb 6-1: USB disconnect, device number 29 [ 230.085334][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 230.085483][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 230.223540][T11283] IPVS: Error joining to the multicast group [ 230.279617][ T30] audit: type=1326 audit(1753428262.029:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.4.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe756b8e9a9 code=0x7fc00000 [ 230.302938][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.370585][ T30] audit: type=1400 audit(1753428262.139:656): avc: denied { read } for pid=11287 comm="syz.3.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 230.615064][T11228] Set syz1 is full, maxelem 65536 reached [ 230.630322][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2090'. [ 230.900694][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 231.010728][ T5910] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 231.131726][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 231.182531][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 231.204123][ T5910] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 231.225480][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.257804][ T5910] usb 6-1: config 0 descriptor?? [ 231.287951][ T5910] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 231.321106][ T24] usb 7-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.351146][ T24] usb 7-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.381123][ T24] usb 7-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 231.406131][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 231.430874][ T24] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 231.451663][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.558602][ T24] usb 7-1: config 0 descriptor?? [ 231.942673][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 232.032365][ T24] hid (null): usage index exceeded [ 232.047050][T11379] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=3049716290 (97590921280 ns) > initial count (93923304832 ns). Using initial count to start timer. [ 232.056344][ T24] uclogic 0003:28BD:0042.0023: interface is invalid, ignoring [ 232.314030][ T5937] usb 7-1: USB disconnect, device number 20 [ 232.403366][ T5910] gspca_sonixj: reg_w1 err -71 [ 232.423280][ T5910] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 232.436195][ T5910] usb 6-1: USB disconnect, device number 30 [ 232.610798][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 232.762272][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.773211][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.786406][ T24] usb 5-1: New USB device found, idVendor=0b05, idProduct=1869, bcdDevice= 0.00 [ 232.795740][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.806668][ T24] usb 5-1: config 0 descriptor?? [ 232.980691][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 233.104149][ T30] audit: type=1400 audit(1753428264.879:657): avc: denied { map } for pid=11398 comm="syz.5.2108" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 233.143502][ T30] audit: type=1400 audit(1753428264.889:658): avc: denied { map } for pid=11398 comm="syz.5.2108" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 233.167365][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.240406][ T24] asus 0003:0B05:1869.0024: hidraw0: USB HID v0.00 Device [HID 0b05:1869] on usb-dummy_hcd.4-1/input0 [ 233.261562][ T24] asus 0003:0B05:1869.0024: Asus input not registered [ 233.270485][ T24] asus 0003:0B05:1869.0024: probe with driver asus failed with error -12 [ 233.465768][ T5953] usb 5-1: USB disconnect, device number 24 [ 234.020702][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 234.234993][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 234.316851][T11433] sg_write: data in/out 8388572/14 bytes for SCSI command 0x0-- guessing data in; [ 234.316851][T11433] program syz.4.2121 not setting count and/or reply_len properly [ 234.407322][T11431] SELinux: unknown common  [ 234.424768][T11431] SELinux: failed to load policy [ 234.431485][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 234.446356][ T24] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 234.469093][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.489053][ T24] usb 3-1: config 0 has no interface number 0 [ 234.522577][ T24] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 234.562581][ T24] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 234.604377][ T24] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 234.633602][ T24] usb 3-1: config 0 interface 52 has no altsetting 0 [ 234.655140][ T24] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 234.675055][ T30] audit: type=1400 audit(1753428266.449:659): avc: denied { bind } for pid=11444 comm="syz.6.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 234.697336][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.709266][T11442] netlink: 'syz.5.2125': attribute type 7 has an invalid length. [ 234.718527][T11442] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2125'. [ 234.729630][ T24] usb 3-1: config 0 descriptor?? [ 234.909034][ T30] audit: type=1400 audit(1753428266.669:660): avc: denied { create } for pid=11455 comm="syz.5.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 234.977568][T11449] SELinux: ebitmap: empty map [ 234.983963][T11449] SELinux: failed to load policy [ 235.060787][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 235.222113][ T5910] usb 3-1: USB disconnect, device number 20 [ 235.424102][T11473] Set syz0 is full, maxelem 0 reached [ 235.622697][T11481] Bluetooth: hci0: unsupported parameter 64317 [ 235.628882][T11481] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 236.100697][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 236.404279][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2156'. [ 236.503654][ T5953] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 236.663230][ T5953] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 236.684727][ T5953] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 236.701835][ T5953] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 236.717053][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.754300][T11532] binder: 11531:11532 ioctl 4018620d 0 returned -22 [ 237.137765][ T5953] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 237.144876][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 237.154304][ T5953] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input44 [ 237.178567][ T5953] input: failed to attach handler kbd to device input44, error: -5 [ 237.264073][ T5953] usb 5-1: USB disconnect, device number 25 [ 237.520838][ T5837] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 237.610863][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 237.682127][ T5837] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.694199][ T5837] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 237.721150][ T5837] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.747101][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.758063][ T5837] usb 4-1: Product: syz [ 237.762558][ T5837] usb 4-1: Manufacturer: syz [ 237.767393][ T5837] usb 4-1: SerialNumber: syz [ 237.798038][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 237.816634][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 237.833353][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 237.859819][ T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 237.880166][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.891423][ T9] usb 3-1: Product: syz [ 237.895661][ T9] usb 3-1: Manufacturer: syz [ 237.910753][ T9] usb 3-1: SerialNumber: syz [ 237.917886][ T9] usb 3-1: config 0 descriptor?? [ 237.931743][T11552] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 237.939160][T11552] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 237.953433][ T9] usb 3-1: ucan: probing device on interface #0 [ 237.997693][T11545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.009043][T11545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.027893][ T30] audit: type=1400 audit(1753428269.799:661): avc: denied { set_context_mgr } for pid=11577 comm="syz.5.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 238.053765][ T5837] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 238.066845][ T5837] usb 4-1: USB disconnect, device number 32 [ 238.096281][ T30] audit: type=1400 audit(1753428269.869:662): avc: denied { write } for pid=11579 comm="syz.4.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 238.190688][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 238.511471][ T5837] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 238.618497][ T9] ucan 3-1:0.0 can0: registered device [ 238.673085][ T5837] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 238.689681][ T5837] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 238.715983][ T5837] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.727708][ T5837] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 238.741971][ T5837] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 238.773661][ T9] ucan 3-1:0.0 can0: firmware string: '" [ 238.787772][ T5837] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.811453][ T5837] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 238.820611][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.952810][ T30] audit: type=1400 audit(1753428270.729:663): avc: denied { write } for pid=11606 comm="syz.4.2195" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 239.009675][ T9] usb 3-1: USB disconnect, device number 21 [ 239.041860][ T5896] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 239.069344][T11612] random: crng reseeded on system resumption [ 239.092687][ T5837] usb 4-1: usb_control_msg returned -71 [ 239.102734][ T5837] usbtmc 4-1:16.0: can't read capabilities [ 239.111951][ T5837] usbtmc 4-1:16.0: Failed to submit iin_urb [ 239.123552][ T5837] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -90 [ 239.139081][ T5837] usb 4-1: USB disconnect, device number 33 [ 239.220768][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 239.229807][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.252918][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.264942][ T5896] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 239.274124][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.276694][ T5896] usb 7-1: config 0 descriptor?? [ 239.421354][ T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 239.583666][ T24] usb 6-1: config 0 has an invalid interface number: 199 but max is 0 [ 239.592958][ T24] usb 6-1: config 0 has no interface number 0 [ 239.604389][ T24] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=f7.d5 [ 239.615197][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.635020][ T24] usb 6-1: Product: syz [ 239.639226][ T24] usb 6-1: Manufacturer: syz [ 239.649462][ T24] usb 6-1: SerialNumber: syz [ 239.666222][ T24] usb 6-1: config 0 descriptor?? [ 239.683331][ T24] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 239.702450][ T5896] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0 [ 239.704885][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 239.709255][ T5896] arvo 0003:1E7D:30D4.0025: item fetching failed at offset 5/7 [ 239.730138][ T5896] arvo 0003:1E7D:30D4.0025: parse failed [ 239.747022][ T5896] arvo 0003:1E7D:30D4.0025: probe with driver arvo failed with error -22 [ 239.764766][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 239.782938][ T24] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 239.807812][ T24] usb 6-1: media controller created [ 239.872842][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 239.889268][T11623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.921130][T11623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.937563][ T5910] usb 7-1: USB disconnect, device number 21 [ 239.944455][ T24] cxusb: set interface failed [ 239.949150][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 240.008009][ T24] DVB: Unable to find symbol mt352_attach() [ 240.019342][ T24] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 240.120682][ T24] rc_core: IR keymap rc-dvico-portable not found [ 240.133601][ T24] Registered IR keymap rc-empty [ 240.147352][ T24] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 240.179553][ T24] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input45 [ 240.214116][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 240.243874][ T24] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 240.260798][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 240.271718][ T24] usb 6-1: USB disconnect, device number 31 [ 240.323117][T11664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.344380][ T24] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 240.783063][ T30] audit: type=1400 audit(1753428272.559:664): avc: denied { write } for pid=11678 comm="syz.5.2219" path="socket:[37495]" dev="sockfs" ino=37495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 240.841117][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 240.924092][ T30] audit: type=1326 audit(1753428272.699:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.6.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751ad8e9a9 code=0x7ffc0000 [ 240.991185][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 240.996578][ T30] audit: type=1326 audit(1753428272.719:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.6.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f751ad8e9a9 code=0x7ffc0000 [ 241.023036][ T30] audit: type=1326 audit(1753428272.729:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.6.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751ad8e9a9 code=0x7ffc0000 [ 241.048318][ T30] audit: type=1326 audit(1753428272.729:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.6.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f751ad8e9a9 code=0x7ffc0000 [ 241.075558][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 241.093911][ T24] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.108371][ T24] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 241.129869][ T30] audit: type=1326 audit(1753428272.729:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.6.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751ad8e9a9 code=0x7ffc0000 [ 241.171265][ T24] usb 4-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.201390][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 241.208110][ T30] audit: type=1326 audit(1753428272.729:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.6.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f751ad8e9a9 code=0x7ffc0000 [ 241.245907][T11694] loop4: detected capacity change from 0 to 7 [ 241.253765][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 241.262884][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.277620][T11694] Dev loop4: unable to read RDB block 7 [ 241.283482][ T30] audit: type=1326 audit(1753428272.729:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.6.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751ad8e9a9 code=0x7ffc0000 [ 241.308397][T11694] loop4: unable to read partition table [ 241.310854][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 241.314195][ T24] usb 4-1: Product: syz [ 241.331640][T11694] loop4: partition table beyond EOD, truncated [ 241.338172][ T24] usb 4-1: Manufacturer: syz [ 241.344867][ T24] usb 4-1: SerialNumber: syz [ 241.353729][T11694] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 241.366400][ T30] audit: type=1326 audit(1753428272.729:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.6.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751ad8e9a9 code=0x7ffc0000 [ 241.390359][T11674] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 241.401114][ T30] audit: type=1326 audit(1753428272.729:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.6.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f751ad8e9a9 code=0x7ffc0000 [ 241.447720][T11695] Dev loop4: unable to read RDB block 7 [ 241.457671][T11695] loop4: unable to read partition table [ 241.468341][T11695] loop4: partition table beyond EOD, truncated [ 241.608285][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input46 [ 241.655764][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2230'. [ 241.854282][T11716] block nbd6: NBD_DISCONNECT [ 241.863923][T11716] block nbd6: Send disconnect failed -22 [ 241.870884][ T5937] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 241.884623][T11716] block nbd6: Disconnected due to user request. [ 241.908818][T11716] block nbd6: shutting down sockets [ 242.023437][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 242.037245][ T5937] usb 5-1: config 0 has an invalid interface number: 225 but max is 0 [ 242.053177][ T5937] usb 5-1: config 0 has no interface number 0 [ 242.062131][T11728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.062541][ T5937] usb 5-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 242.102131][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.110158][ T5937] usb 5-1: Product: syz [ 242.135065][ T5937] usb 5-1: Manufacturer: syz [ 242.139694][ T5937] usb 5-1: SerialNumber: syz [ 242.159680][ T5937] usb 5-1: config 0 descriptor?? [ 242.230455][ T5185] bcm5974 4-1:1.0: could not read from device [ 242.242180][ T24] bcm5974 4-1:1.0: could not read from device [ 242.250312][ T5185] bcm5974 4-1:1.0: could not read from device [ 242.262345][ T24] input: failed to attach handler mousedev to device input46, error: -5 [ 242.275136][ T5185] bcm5974 4-1:1.0: could not read from device [ 242.276433][ T24] usb 4-1: USB disconnect, device number 34 [ 242.291241][ T5185] bcm5974 4-1:1.0: could not read from device [ 242.460746][ T5896] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 242.613728][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 242.628871][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.641159][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.652795][ T5896] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 242.662582][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.673553][ T5896] usb 6-1: config 0 descriptor?? [ 242.807513][ T5937] mos7840 5-1:0.225: required endpoints missing [ 242.816130][ T5937] usb 5-1: USB disconnect, device number 26 [ 243.090395][ T5896] apple 0003:05AC:024B.0026: unknown main item tag 0x6 [ 243.097460][ T5896] apple 0003:05AC:024B.0026: ignoring exceeding usage max [ 243.107099][ T5896] apple 0003:05AC:024B.0026: invalid report_size 16640 [ 243.114579][ T5896] apple 0003:05AC:024B.0026: item 0 2 1 7 parsing failed [ 243.121983][ T5896] apple 0003:05AC:024B.0026: parse failed [ 243.127746][ T5896] apple 0003:05AC:024B.0026: probe with driver apple failed with error -22 [ 243.302901][ T5896] usb 6-1: USB disconnect, device number 32 [ 243.462045][T11768] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.473501][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803670e400: rx timeout, send abort [ 243.746722][T11785] loop4: detected capacity change from 0 to 7 [ 243.753358][T11785] Dev loop4: unable to read RDB block 7 [ 243.758939][T11785] loop4: unable to read partition table [ 243.765547][T11785] loop4: partition table beyond EOD, truncated [ 243.773240][T11785] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 243.831240][ T5937] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 243.982972][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803670e400: abort rx timeout. Force session deactivation [ 243.998501][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2269'. [ 244.024780][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.049190][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.079944][ T5937] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 244.089411][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.100312][ T5937] usb 5-1: config 0 descriptor?? [ 244.160844][ T5953] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 244.320699][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 244.330989][ T5953] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 244.340990][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.358232][ T5953] usb 4-1: Product: syz [ 244.367001][ T5953] usb 4-1: Manufacturer: syz [ 244.376170][ T5953] usb 4-1: SerialNumber: syz [ 244.388508][ T5953] usb 4-1: config 0 descriptor?? [ 244.401735][ T5953] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 244.744727][ T5937] usb 5-1: string descriptor 0 read error: -22 [ 244.948715][ T5937] uclogic 0003:256C:006D.0027: interface is invalid, ignoring [ 245.035175][T11816] netlink: 'syz.6.2277': attribute type 12 has an invalid length. [ 245.169241][ T5826] usb 5-1: USB disconnect, device number 27 [ 245.195677][T11824] kvm: kvm [11823]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x200000000500 [ 245.620471][ T5953] gspca_sonixj: reg_w1 err -71 [ 245.629178][ T5953] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 245.645776][ T5953] usb 4-1: USB disconnect, device number 35 [ 245.890997][ T5937] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 245.926419][T11857] input: syz1 as /devices/virtual/input/input47 [ 245.967045][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2296'. [ 245.983130][T11859] bridge1: entered promiscuous mode [ 245.988575][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2296'. [ 246.052193][ T5937] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.066014][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 246.071757][T11863] trusted_key: syz.5.2298 sent an empty control message without MSG_MORE. [ 246.078798][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 246.102706][ T5937] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 246.114298][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.122387][ T5937] usb 3-1: Product: syz [ 246.126540][ T5937] usb 3-1: Manufacturer: syz [ 246.131955][ T5937] usb 3-1: SerialNumber: syz [ 246.141021][ T5937] usb 3-1: config 0 descriptor?? [ 246.146699][T11839] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 246.359369][ T5937] powermate: unknown product id 0240 [ 246.365632][ T5937] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 246.377639][ T5937] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input48 [ 246.566943][ C1] powermate: config urb returned -71 [ 246.567291][ T5953] usb 3-1: USB disconnect, device number 22 [ 246.572290][ C1] powermate: usb_submit_urb(config) failed [ 246.572363][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 246.692575][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 246.692590][ T30] audit: type=1400 audit(1753428278.469:687): avc: denied { bind } for pid=11878 comm="syz.6.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.723650][ T30] audit: type=1400 audit(1753428278.489:688): avc: denied { listen } for pid=11878 comm="syz.6.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.724886][ T5937] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 246.743202][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.743947][ T30] audit: type=1400 audit(1753428278.499:689): avc: denied { getopt } for pid=11878 comm="syz.6.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.777059][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.879004][ T30] audit: type=1400 audit(1753428278.649:690): avc: denied { setopt } for pid=11884 comm="syz.4.2310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 246.937358][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 246.956508][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 246.985507][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 247.016104][ T5937] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 247.030514][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.038821][ T5937] usb 4-1: Product: syz [ 247.045312][ T5937] usb 4-1: Manufacturer: syz [ 247.049924][ T5937] usb 4-1: SerialNumber: syz [ 247.053389][ T30] audit: type=1400 audit(1753428278.819:691): avc: denied { write } for pid=11894 comm="syz.6.2313" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 247.071255][ T5937] usb 4-1: config 0 descriptor?? [ 247.077681][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.304372][ T5937] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 247.628237][ T5826] usb 4-1: USB disconnect, device number 36 [ 247.715223][ T30] audit: type=1400 audit(1753428279.489:692): avc: denied { watch watch_reads } for pid=11920 comm="syz.5.2325" path="/dev/urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 247.750379][T11923] input: syz0 as /devices/virtual/input/input49 [ 247.756890][T11923] input: failed to attach handler leds to device input49, error: -6 [ 247.780891][ T30] audit: type=1400 audit(1753428279.549:693): avc: denied { listen } for pid=11924 comm="syz.6.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 248.191975][ T5826] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 248.213008][ T5937] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 248.341373][ T30] audit: type=1400 audit(1753428280.109:694): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 248.361127][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.365931][ T5826] usb 3-1: Using ep0 maxpacket: 16 [ 248.374643][ T5826] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.389571][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.416064][ T5937] usb 6-1: unable to get BOS descriptor or descriptor too short [ 248.433166][ T5937] usb 6-1: config 166 has an invalid interface number: 51 but max is 0 [ 248.444994][ T5937] usb 6-1: config 166 has no interface number 0 [ 248.456049][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 248.467511][ T5937] usb 6-1: config 166 interface 51 has no altsetting 0 [ 248.478877][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 248.489792][ T5826] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.513612][ T5937] usb 6-1: New USB device found, idVendor=04a5, idProduct=300c, bcdDevice=a8.c9 [ 248.528375][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.537909][ T5937] usb 6-1: Product: syz [ 248.546416][ T5937] usb 6-1: Manufacturer: syz [ 248.552880][ T5937] usb 6-1: SerialNumber: syz [ 248.558379][ T5826] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 248.570199][ T5826] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 248.579817][ T5826] usb 3-1: Manufacturer: syz [ 248.792397][ T5826] usb 3-1: config 0 descriptor?? [ 248.992193][ T5937] gspca_main: spca500-2.14.0 probing 04a5:300c [ 249.025467][ T5937] usb 6-1: USB disconnect, device number 33 [ 249.227703][ T5826] rc_core: IR keymap rc-hauppauge not found [ 249.237677][ T5826] Registered IR keymap rc-empty [ 249.244811][ T5826] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 249.273935][ T5826] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 249.275707][T11943] syz.6.2336 (11943): drop_caches: 2 [ 249.314339][ T5826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 249.349301][ T5826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input50 [ 249.350753][ T5953] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 249.383871][ T5826] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 249.414153][ T5826] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 249.449277][ T5826] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 249.473578][ T5826] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 249.502973][ T5826] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 249.520832][ T5826] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 249.531747][T11965] binder: 11964:11965 ioctl c0306201 200000000000 returned -14 [ 249.541613][ T5826] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 249.557250][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 249.560757][ T5826] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 249.573631][ T5953] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.594921][ T5953] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 249.608586][ T5826] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 249.620240][ T5953] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.657017][ T5953] usb 4-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 249.668222][ T5826] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 249.675632][ T5953] usb 4-1: Product: syz [ 249.675652][ T5953] usb 4-1: Manufacturer: syz [ 249.675666][ T5953] usb 4-1: SerialNumber: syz [ 249.725518][ T5826] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 249.737212][ T5826] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 249.765779][ T5826] usb 3-1: USB disconnect, device number 23 [ 249.901116][T11958] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 249.937535][T11975] loop6: detected capacity change from 0 to 7 [ 249.960856][T11975] Dev loop6: unable to read RDB block 7 [ 249.975325][T11975] loop6: AHDI p3 p4 [ 249.989579][T11975] loop6: partition table partially beyond EOD, truncated [ 250.000795][T11975] loop6: p3 start 1886353253 is beyond EOD, truncated [ 250.123921][T11980] tls_set_device_offload: netdev not found [ 250.541374][T11958] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 250.711123][ T5896] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 250.759820][ T5953] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 250.767221][ T5953] cdc_ncm 4-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 250.780551][ T5953] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 250.796959][ T30] audit: type=1400 audit(1753428282.569:695): avc: denied { accept } for pid=12013 comm="syz.2.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 250.900880][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 250.912319][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.942753][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.966038][ T5953] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 250.980749][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 250.995842][ T5896] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 251.012179][ T5953] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 251.030658][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.047053][ T5953] usb 4-1: USB disconnect, device number 37 [ 251.055691][ T5896] usb 6-1: config 0 descriptor?? [ 251.061999][ T5953] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 251.592546][ T5896] HID 045e:07da: Invalid code 65791 type 1 [ 251.609392][ T5896] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0028/input/input51 [ 251.626856][ T5896] microsoft 0003:045E:07DA.0028: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 251.821942][T12034] overlay: filesystem on ./bus not supported [ 251.828095][ T30] audit: type=1400 audit(1753428283.599:696): avc: denied { mounton } for pid=12033 comm="syz.6.2371" path="/401/file1/bus" dev="autofs" ino=39491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 251.878735][ T5826] usb 6-1: USB disconnect, device number 34 [ 252.458519][ T30] audit: type=1400 audit(1753428284.229:697): avc: denied { create } for pid=12052 comm="syz.5.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 252.478014][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.511944][ T30] audit: type=1400 audit(1753428284.279:698): avc: denied { setopt } for pid=12052 comm="syz.5.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 252.514309][T12052] delete_channel: no stack [ 252.942411][ T5937] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 253.084364][T12080] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2391'. [ 253.120713][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 253.134534][ T5937] usb 6-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 253.152000][ T5896] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 253.160741][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.180089][ T5937] usb 6-1: config 0 descriptor?? [ 253.204300][ T5937] usb 6-1: invalid MIDI EP [ 253.209069][ T5937] usb 6-1: snd-bcd2000: error during probing [ 253.227710][ T5937] snd-bcd2000 6-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 253.300903][ T5896] usb 7-1: Using ep0 maxpacket: 16 [ 253.308136][ T5896] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 253.339512][ T5896] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 253.360716][ T5896] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.387961][ T5896] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.400689][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.420840][ T5896] usb 7-1: Product: syz [ 253.425286][ T5896] usb 7-1: Manufacturer: syz [ 253.453207][ T5896] usb 7-1: SerialNumber: syz [ 253.481078][ T5837] usb 6-1: USB disconnect, device number 35 [ 253.720981][ T5937] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 253.898235][ T5896] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 253.911367][ T5937] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 253.922360][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.940754][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.960660][ T5937] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 254.001642][ T5937] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 254.010905][ T5937] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 254.018994][ T5937] usb 5-1: Manufacturer: syz [ 254.032756][ T5937] usb 5-1: config 0 descriptor?? [ 254.295087][ T30] audit: type=1400 audit(1753428286.069:699): avc: denied { watch_mount } for pid=12125 comm="syz.5.2408" path="/425/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 254.419771][ T30] audit: type=1400 audit(1753428286.189:700): avc: denied { read } for pid=12129 comm="syz.5.2409" path="socket:[39777]" dev="sockfs" ino=39777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 254.465627][ T5937] appleir 0003:05AC:8243.0029: unknown main item tag 0x0 [ 254.511209][ T5937] appleir 0003:05AC:8243.0029: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 254.519937][T12132] program syz.5.2411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.721033][ C1] sd 0:0:1:0: [sda] tag#4313 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 254.731551][ C1] sd 0:0:1:0: [sda] tag#4313 CDB: Write(6) 0a 00 00 00 00 00 [ 254.762858][ T5896] usb 7-1: 2:1: cannot get freq at ep 0x82 [ 254.809848][ T5896] usb 7-1: USB disconnect, device number 22 [ 254.818946][ T30] audit: type=1400 audit(1753428286.589:701): avc: denied { ioctl } for pid=12138 comm="syz.3.2413" path="socket:[39799]" dev="sockfs" ino=39799 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 254.869335][ T30] audit: type=1400 audit(1753428286.639:702): avc: denied { read } for pid=12140 comm="syz.5.2415" path="socket:[40279]" dev="sockfs" ino=40279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 254.920427][T12145] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2415'. [ 254.994964][T12144] kvm: kvm [12143]: vcpu0, guest rIP: 0xeeee8000 Unhandled WRMSR(0x40000006) = 0x0 [ 255.054976][ T30] audit: type=1400 audit(1753428286.829:703): avc: denied { listen } for pid=12148 comm="syz.5.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 255.079259][ T30] audit: type=1400 audit(1753428286.849:704): avc: denied { accept } for pid=12148 comm="syz.5.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 255.280750][ T5837] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 255.305127][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.311563][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.440768][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 255.462163][ T5837] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 255.470564][ T5837] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 255.500247][ T5837] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 255.520987][ T5837] usb 4-1: config 1 has no interface number 0 [ 255.527440][ T5837] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.571020][ T5837] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 255.592954][ T5837] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 255.610866][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.635738][ T5837] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 255.844194][ T5837] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 255.949449][T12180] netlink: 'syz.5.2428': attribute type 11 has an invalid length. [ 255.958807][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2428'. [ 255.974386][T12180] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.983374][T12180] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.992805][T12180] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.002100][T12180] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.023047][T12180] netlink: 'syz.5.2428': attribute type 11 has an invalid length. [ 256.041011][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2428'. [ 256.190881][ T5837] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 256.258017][ T30] audit: type=1400 audit(1753428288.019:705): avc: denied { mounton } for pid=12188 comm="syz.5.2432" path="/432/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 256.280533][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.314000][ T5957] usb 4-1: USB disconnect, device number 38 [ 256.322521][ T5957] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 256.380693][ T5837] usb 7-1: Using ep0 maxpacket: 32 [ 256.400212][ T5837] usb 7-1: config 0 interface 0 has no altsetting 0 [ 256.415210][ T5837] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 256.435092][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.452730][ T5837] usb 7-1: Product: syz [ 256.459316][ T5837] usb 7-1: Manufacturer: syz [ 256.465701][ T5837] usb 7-1: SerialNumber: syz [ 256.473576][ T5837] usb 7-1: config 0 descriptor?? [ 256.503903][ T5896] usb 5-1: USB disconnect, device number 28 [ 256.893642][ T30] audit: type=1400 audit(1753428288.669:706): avc: denied { map } for pid=12216 comm="syz.3.2445" path="/dev/sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 256.918493][ T5837] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 257.000819][ T5910] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 257.017946][T12224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.173433][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.190787][ T5910] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 257.224001][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.239397][ T5910] usb 6-1: config 0 descriptor?? [ 257.249181][ T5910] pwc: Askey VC010 type 2 USB webcam detected. [ 257.327365][ T5837] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 257.575561][ T5937] usb 7-1: USB disconnect, device number 23 [ 257.663988][ T5910] pwc: recv_control_msg error -32 req 02 val 2b00 [ 257.674278][ T5910] pwc: recv_control_msg error -32 req 02 val 2700 [ 257.683278][ T5910] pwc: recv_control_msg error -32 req 02 val 2c00 [ 257.891097][ T5910] pwc: recv_control_msg error -71 req 04 val 1300 [ 257.897861][ T5910] pwc: recv_control_msg error -71 req 04 val 1400 [ 257.904783][ T5910] pwc: recv_control_msg error -71 req 02 val 2000 [ 257.912246][ T5910] pwc: recv_control_msg error -71 req 02 val 2100 [ 257.918943][ T5910] pwc: recv_control_msg error -71 req 04 val 1500 [ 257.925792][ T5910] pwc: recv_control_msg error -71 req 02 val 2500 [ 257.932720][ T5910] pwc: recv_control_msg error -71 req 02 val 2400 [ 257.940201][ T5910] pwc: recv_control_msg error -71 req 02 val 2600 [ 257.946986][ T5910] pwc: recv_control_msg error -71 req 02 val 2900 [ 257.953666][ T5910] pwc: recv_control_msg error -71 req 02 val 2800 [ 257.961239][ T5910] pwc: recv_control_msg error -71 req 04 val 1100 [ 257.967907][ T5910] pwc: recv_control_msg error -71 req 04 val 1200 [ 257.970718][ T5957] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 257.975865][ T5910] pwc: Registered as video103. [ 257.987472][ T5910] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input52 [ 258.000501][ T5910] usb 6-1: USB disconnect, device number 36 [ 258.130808][ T5957] usb 4-1: Using ep0 maxpacket: 8 [ 258.137402][ T5957] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 258.146970][ T5957] usb 4-1: config 0 has no interface number 0 [ 258.154971][ T5957] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 258.164159][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.172546][ T5957] usb 4-1: Product: syz [ 258.176716][ T5957] usb 4-1: Manufacturer: syz [ 258.181494][ T5957] usb 4-1: SerialNumber: syz [ 258.187400][ T5957] usb 4-1: config 0 descriptor?? [ 258.370723][ T24] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 258.397967][ T5957] peak_usb 4-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 258.522175][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.535993][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.554173][ T24] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 258.563465][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.578129][ T24] usb 7-1: config 0 descriptor?? [ 258.598923][ T5957] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 258.606232][ T5957] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 258.616341][ T5957] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 258.653116][ T5957] peak_usb 4-1:0.56: probe with driver peak_usb failed with error -22 [ 258.743802][T12268] input: syz1 as /devices/virtual/input/input53 [ 258.854699][ T5957] usb 4-1: USB disconnect, device number 39 [ 258.917312][T12277] ALSA: seq fatal error: cannot create timer (-16) [ 258.954290][T12280] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2472'. [ 258.994548][ T24] lua 0003:1E7D:2C2E.002A: item fetching failed at offset 4/5 [ 259.011187][ T24] lua 0003:1E7D:2C2E.002A: parse failed [ 259.016799][ T24] lua 0003:1E7D:2C2E.002A: probe with driver lua failed with error -22 [ 259.228780][ T5937] usb 7-1: USB disconnect, device number 24 [ 259.504499][T12295] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1568557508 (100387680512 ns) > initial count (91621988416 ns). Using initial count to start timer. [ 260.046206][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2484'. [ 260.069331][T12316] bridge_slave_1: left allmulticast mode [ 260.085677][T12316] bridge_slave_1: left promiscuous mode [ 260.101192][T12316] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.158111][T12316] bridge_slave_0: left allmulticast mode [ 260.174673][T12316] bridge_slave_0: left promiscuous mode [ 260.200857][T12316] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.597415][T12324] SELinux: ebitmap: truncated map [ 260.636966][T12324] SELinux: failed to load policy [ 261.195885][T11368] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.488347][T11368] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.625148][T12329] delete_channel: no stack [ 261.629723][ T30] audit: type=1400 audit(1753428293.399:707): avc: denied { bind } for pid=12329 comm="syz.4.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 261.659925][T11368] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.807962][T11368] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.077810][T11368] bridge_slave_1: left allmulticast mode [ 262.086375][T11368] bridge_slave_1: left promiscuous mode [ 262.105232][T11368] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.172369][T11368] bridge_slave_0: left allmulticast mode [ 262.208440][T11368] bridge_slave_0: left promiscuous mode [ 262.220439][T12360] sg_write: process 1247 (syz.2.2505) changed security contexts after opening file descriptor, this is not allowed. [ 262.220952][T11368] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.448469][ T5837] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 262.594378][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 262.622316][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 262.641283][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 262.668630][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.669356][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 262.689750][ T5837] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 262.699412][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 262.739689][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.780242][ T5837] usb 4-1: config 0 descriptor?? [ 263.219048][ T5837] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 263.244373][ T5837] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002B/input/input54 [ 263.325856][T11368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.338998][T11368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.351973][T11368] bond0 (unregistering): Released all slaves [ 263.381516][ T5837] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 263.569763][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2514'. [ 263.720823][ T5937] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 263.787289][T12366] chnl_net:caif_netlink_parms(): no params data found [ 263.832774][T11368] hsr_slave_0: left promiscuous mode [ 263.839637][T11368] hsr_slave_1: left promiscuous mode [ 263.853508][T11368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.873588][T11368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.900740][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 263.904522][T11368] veth1_macvtap: left promiscuous mode [ 263.912175][ T5937] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 263.912967][T11368] veth0_macvtap: left promiscuous mode [ 263.927121][T11368] veth1_vlan: left promiscuous mode [ 263.932614][T11368] veth0_vlan: left promiscuous mode [ 263.933142][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.949613][ T5937] usb 6-1: config 0 descriptor?? [ 263.961353][ T5937] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 264.190738][ T5826] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 264.323950][T11368] team0 (unregistering): Port device team_slave_1 removed [ 264.362494][T11368] team0 (unregistering): Port device team_slave_0 removed [ 264.370327][ T5826] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.384188][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.396553][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.409240][ T5826] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 264.426503][ T5826] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 264.436990][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.453948][ T5826] usb 5-1: config 0 descriptor?? [ 264.741006][ T5845] Bluetooth: hci3: command tx timeout [ 264.888836][ T5826] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 264.903003][ T5826] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.002C/input/input55 [ 264.947775][T12366] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.955875][T12366] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.967475][T12366] bridge_slave_0: entered allmulticast mode [ 264.975937][T12366] bridge_slave_0: entered promiscuous mode [ 264.987604][T12366] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.005918][ T5826] keytouch 0003:0926:3333.002C: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 265.038298][T12366] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.051287][T12366] bridge_slave_1: entered allmulticast mode [ 265.058957][T12366] bridge_slave_1: entered promiscuous mode [ 265.131936][T12366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.169479][ T5937] gspca_vc032x: reg_w err -71 [ 265.172541][T12402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.174751][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.188066][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.193926][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.199247][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.199751][T12366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.204552][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.204563][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.204571][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.204583][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.204591][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.204598][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.204606][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.204614][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.204622][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.204630][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.204639][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.204647][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.204655][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.204663][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.204671][ T5937] gspca_vc032x: Unknown sensor... [ 265.204731][ T5937] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 265.262440][ T5958] usb 4-1: USB disconnect, device number 40 [ 265.267447][ T5937] usb 6-1: USB disconnect, device number 37 [ 265.270514][T12402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.380155][T12366] team0: Port device team_slave_0 added [ 265.388979][ T5896] usb 5-1: USB disconnect, device number 29 [ 265.397120][T12366] team0: Port device team_slave_1 added [ 265.438495][T11368] IPVS: stop unused estimator thread 0... [ 265.450240][T12366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.462413][T12366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.489505][T12366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.503097][T12366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.511779][T12366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.551161][T12366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.665428][T12366] hsr_slave_0: entered promiscuous mode [ 265.673681][T12366] hsr_slave_1: entered promiscuous mode [ 265.799912][T12418] kernel profiling enabled (shift: 9) [ 266.152277][T12366] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 266.167059][T12366] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 266.199022][T12366] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 266.282195][T12366] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 266.369571][ T30] audit: type=1400 audit(1753428298.139:708): avc: denied { setopt } for pid=12441 comm="syz.4.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 266.540011][T12366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.559128][T12366] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.571343][T11359] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.578457][T11359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.648377][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.655549][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.821629][ T5845] Bluetooth: hci3: command tx timeout [ 267.130718][ T24] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 267.165320][T12366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.302955][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.326816][ T24] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 267.341467][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.355745][ T24] usb 6-1: config 0 descriptor?? [ 267.627723][T12366] veth0_vlan: entered promiscuous mode [ 267.636465][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 267.648916][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 267.649168][T12366] veth1_vlan: entered promiscuous mode [ 267.670013][ T24] usb 6-1: USB disconnect, device number 38 [ 267.695118][T12366] veth0_macvtap: entered promiscuous mode [ 267.705633][T12366] veth1_macvtap: entered promiscuous mode [ 267.736984][T12366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.757259][T12366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.769789][T12366] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.781911][T12366] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.791373][T12366] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.800062][T12366] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.866646][T11359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.876398][T11359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.898545][T11359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.906622][T11359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.924463][ T30] audit: type=1400 audit(1753428299.699:709): avc: denied { mounton } for pid=12366 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 267.948371][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.010859][ T5937] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 268.170811][ T24] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 268.179254][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 268.187424][ T5937] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 268.196883][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.215184][ T5937] usb 3-1: config 0 descriptor?? [ 268.223292][ T5937] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 268.246963][ T30] audit: type=1400 audit(1753428300.019:710): avc: denied { watch watch_reads } for pid=12501 comm="syz.7.2555" path="/5/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 268.352323][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 268.364710][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.376337][ T24] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 268.387766][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.397372][ T24] usb 6-1: config 0 descriptor?? [ 268.446386][ T5937] usb 3-1: Detected FT232A [ 268.458611][ T5937] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 268.479228][ T5937] usb 3-1: USB disconnect, device number 24 [ 268.498846][ T5937] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 268.513048][ T5937] ftdi_sio 3-1:0.0: device disconnected [ 268.818754][ T24] kye 0003:0458:5016.002D: control desc unexpectedly large [ 268.835529][ T24] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.002D/input/input56 [ 268.900982][ T5845] Bluetooth: hci3: command tx timeout [ 268.915405][ T24] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.002D/input/input57 [ 268.996716][ T24] kye 0003:0458:5016.002D: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 269.280977][ T24] usb 6-1: USB disconnect, device number 39 [ 269.642097][T12541] netlink: 'syz.3.2569': attribute type 1 has an invalid length. [ 269.649862][T12541] netlink: 'syz.3.2569': attribute type 2 has an invalid length. [ 269.695667][T12541] netlink: 'syz.3.2569': attribute type 1 has an invalid length. [ 269.728655][T12541] netlink: 'syz.3.2569': attribute type 2 has an invalid length. [ 269.740277][T12543] kvm: Disabled LAPIC found during irq injection [ 269.988224][T12553] block device autoloading is deprecated and will be removed. [ 269.999147][T12553] syz.2.2584: attempt to access beyond end of device [ 269.999147][T12553] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 270.190837][ T5896] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 270.352378][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 270.382863][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.397770][T11360] nci: nci_ntf_packet: unknown ntf opcode 0x107 [ 270.442837][ T5896] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 270.466733][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.484964][ T5896] usb 4-1: config 0 descriptor?? [ 270.890949][ T5957] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 270.920724][ T5896] aquacomputer_d5next 0003:0C70:F00B.002E: unknown main item tag 0x0 [ 270.936420][ T5896] aquacomputer_d5next 0003:0C70:F00B.002E: item fetching failed at offset 5/7 [ 270.946844][ T5896] aquacomputer_d5next 0003:0C70:F00B.002E: probe with driver aquacomputer_d5next failed with error -22 [ 270.982934][ T5845] Bluetooth: hci3: command tx timeout [ 270.998405][T12589] loop2: detected capacity change from 0 to 7 [ 271.005129][T12589] Dev loop2: unable to read RDB block 7 [ 271.010876][T12589] loop2: unable to read partition table [ 271.016739][T12589] loop2: partition table beyond EOD, truncated [ 271.022973][T12589] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 271.050740][ T5957] usb 3-1: Using ep0 maxpacket: 16 [ 271.057437][ T5957] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 271.073403][ T5957] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.083906][ T5957] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.098122][ T5957] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 271.107453][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.115569][ T5957] usb 3-1: Product: syz [ 271.120210][ T5957] usb 3-1: Manufacturer: syz [ 271.125230][ T5957] usb 3-1: SerialNumber: syz [ 271.167622][ T5937] usb 4-1: USB disconnect, device number 41 [ 271.235906][T12595] block device autoloading is deprecated and will be removed. [ 271.450796][ T5837] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 271.490389][T12603] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2593'. [ 271.553297][ T5957] usb 3-1: 0:2 : does not exist [ 271.568240][ T30] audit: type=1400 audit(1753428303.339:711): avc: denied { mounton } for pid=12604 comm="syz.7.2595" path="/file0" dev="ramfs" ino=42860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 271.602202][ T5837] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.612781][ T5837] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.638833][ T5837] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 271.649717][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 271.669950][ T5837] usb 6-1: SerialNumber: syz [ 271.990864][ T5958] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 272.153967][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.171541][ T5958] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 272.182164][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.196807][ T5958] usb 4-1: config 0 descriptor?? [ 272.207610][ T5957] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 272.241466][ T5837] usb 6-1: 0:2 : does not exist [ 272.247084][ T5957] usb 3-1: USB disconnect, device number 25 [ 272.283982][ T5837] usb 6-1: USB disconnect, device number 40 [ 272.626231][ T5958] zeroplus 0003:0C12:0005.002F: hidraw0: USB HID v0.00 Device [HID 0c12:0005] on usb-dummy_hcd.3-1/input0 [ 272.652775][ T5958] zeroplus 0003:0C12:0005.002F: no inputs found [ 272.851631][ T5937] usb 4-1: USB disconnect, device number 42 [ 273.131112][ T5958] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 273.282380][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.295117][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.300833][ T5826] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 273.308175][ T5958] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 273.328012][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.339104][ T5958] usb 3-1: config 0 descriptor?? [ 273.485635][T12658] kvm: MWAIT instruction emulated as NOP! [ 273.496469][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.525722][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.548010][ T5826] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.567097][ T5826] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.581035][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2618'. [ 273.590561][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.602426][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2618'. [ 273.616063][ T5826] usb 5-1: config 0 descriptor?? [ 273.767324][ T5958] sony 0003:054C:024B.0030: unexpected long global item [ 273.777086][ T5958] sony 0003:054C:024B.0030: parse failed [ 273.787336][ T5958] sony 0003:054C:024B.0030: probe with driver sony failed with error -22 [ 273.850108][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2623'. [ 273.873382][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2623'. [ 273.980808][ T5957] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 274.005653][ T5937] usb 3-1: USB disconnect, device number 26 [ 274.046989][ T5826] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 274.142611][ T5957] usb 8-1: Using ep0 maxpacket: 32 [ 274.152516][ T5957] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 274.165717][ T5957] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.178368][ T5957] usb 8-1: config 0 descriptor?? [ 274.397364][ T5957] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 274.407873][ T5957] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 274.417814][ T5957] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 274.425189][ T5957] usb 8-1: media controller created [ 274.444406][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.486820][T12700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.589218][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2638'. [ 274.601012][T12704] netlink: 'syz.2.2638': attribute type 30 has an invalid length. [ 274.608972][ T5958] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 274.626809][T12704] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.635823][T12704] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.644662][T12704] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.653920][T12704] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.674518][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2638'. [ 274.710727][T12704] netlink: 'syz.2.2638': attribute type 30 has an invalid length. [ 274.779978][ T5958] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.795541][ T5958] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 274.806745][ T5958] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 274.818754][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.837135][T12694] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.847678][ T5958] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.076798][ T5958] usb 4-1: USB disconnect, device number 43 [ 275.091585][ T5937] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 275.110065][ T30] audit: type=1400 audit(1753428306.879:712): avc: denied { bind } for pid=12713 comm="syz.5.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 275.255209][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.266061][ T5937] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 275.279040][ T5937] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 275.288300][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.298370][ T5937] usb 3-1: config 0 descriptor?? [ 275.405790][ C1] plantronics 0003:047F:FFFF.0031: usb_submit_urb(ctrl) failed: -1 [ 275.430734][ T5957] stb0899_attach: Driver disabled by Kconfig [ 275.436769][ T5957] az6027: no front-end attached [ 275.436769][ T5957] [ 275.444551][ T5957] az6027: usb out operation failed. (-71) [ 275.450285][ T5957] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 275.458664][ T5957] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input58 [ 275.476236][ T5957] dvb-usb: schedule remote query interval to 400 msecs. [ 275.483301][ T5957] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 275.493499][ T5957] usb 8-1: USB disconnect, device number 2 [ 275.515171][T12708] [ 275.517534][T12708] ===================================================== [ 275.521261][ T5957] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 275.524447][T12708] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 275.540298][T12708] 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 Not tainted [ 275.547379][T12708] ----------------------------------------------------- [ 275.554284][T12708] syz.2.2640/12708 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 275.561972][T12708] ffff8880341dc360 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 275.570655][T12708] [ 275.570655][T12708] and this task is already holding: [ 275.578027][T12708] ffff888026929028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 275.587856][T12708] which would create a new lock dependency: [ 275.593726][T12708] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 275.601807][T12708] [ 275.601807][T12708] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 275.611232][T12708] (&client->buffer_lock){..-.}-{3:3} [ 275.611251][T12708] [ 275.611251][T12708] ... which became SOFTIRQ-irq-safe at: [ 275.624281][T12708] lock_acquire+0x179/0x350 [ 275.628854][T12708] _raw_spin_lock+0x2e/0x40 [ 275.633429][T12708] evdev_pass_values+0x10e/0x9b0 [ 275.638441][T12708] evdev_events+0x1bb/0x390 [ 275.643017][T12708] input_pass_values+0x6c7/0x890 [ 275.648028][T12708] input_handle_event+0xb29/0x14d0 [ 275.653211][T12708] input_event+0x83/0xb0 [ 275.657526][T12708] hidinput_hid_event+0xa10/0x2420 [ 275.662706][T12708] hid_process_event+0x4b7/0x5e0 [ 275.667720][T12708] hid_report_raw_event+0xa0a/0x1290 [ 275.673078][T12708] __hid_input_report.constprop.0+0x33f/0x450 [ 275.679217][T12708] hid_irq_in+0x35e/0x870 [ 275.683616][T12708] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 275.689054][T12708] usb_hcd_giveback_urb+0x39b/0x450 [ 275.694317][T12708] dummy_timer+0x180e/0x3a20 [ 275.698979][T12708] __hrtimer_run_queues+0x202/0xad0 [ 275.704245][T12708] hrtimer_run_softirq+0x17d/0x350 [ 275.709423][T12708] handle_softirqs+0x219/0x8e0 [ 275.714254][T12708] __irq_exit_rcu+0x109/0x170 [ 275.719000][T12708] irq_exit_rcu+0x9/0x30 [ 275.723311][T12708] sysvec_apic_timer_interrupt+0x57/0xc0 [ 275.729018][T12708] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 275.735069][T12708] [ 275.735069][T12708] to a SOFTIRQ-irq-unsafe lock: [ 275.742064][T12708] (tasklist_lock){.+.+}-{3:3} [ 275.742084][T12708] [ 275.742084][T12708] ... which became SOFTIRQ-irq-unsafe at: [ 275.754679][T12708] ... [ 275.754684][T12708] lock_acquire+0x179/0x350 [ 275.761811][T12708] _raw_read_lock+0x5f/0x70 [ 275.766385][T12708] __do_wait+0x105/0x890 [ 275.770702][T12708] do_wait+0x21e/0x5a0 [ 275.774846][T12708] kernel_wait+0x9f/0x160 [ 275.779243][T12708] call_usermodehelper_exec_work+0xf1/0x170 [ 275.785204][T12708] process_one_work+0x9cc/0x1b70 [ 275.790210][T12708] worker_thread+0x6c8/0xf10 [ 275.794868][T12708] kthread+0x3c2/0x780 [ 275.799000][T12708] ret_from_fork+0x5d4/0x6f0 [ 275.803664][T12708] ret_from_fork_asm+0x1a/0x30 [ 275.808496][T12708] [ 275.808496][T12708] other info that might help us debug this: [ 275.808496][T12708] [ 275.818698][T12708] Chain exists of: [ 275.818698][T12708] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 275.818698][T12708] [ 275.831802][T12708] Possible interrupt unsafe locking scenario: [ 275.831802][T12708] [ 275.840117][T12708] CPU0 CPU1 [ 275.845466][T12708] ---- ---- [ 275.850836][T12708] lock(tasklist_lock); [ 275.855062][T12708] local_irq_disable(); [ 275.861793][T12708] lock(&client->buffer_lock); [ 275.869141][T12708] lock(&new->fa_lock); [ 275.875885][T12708] [ 275.879316][T12708] lock(&client->buffer_lock); [ 275.884321][T12708] [ 275.884321][T12708] *** DEADLOCK *** [ 275.884321][T12708] [ 275.892443][T12708] 7 locks held by syz.2.2640/12708: [ 275.897616][T12708] #0: ffff88802b761118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 275.906741][T12708] #1: ffff88801fb83230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x390 [ 275.916820][T12708] #2: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x390 [ 275.926458][T12708] #3: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x890 [ 275.936012][T12708] #4: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 275.945129][T12708] #5: ffff888026929028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 275.955376][T12708] #6: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 275.964413][T12708] [ 275.964413][T12708] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 275.974795][T12708] -> (&client->buffer_lock){..-.}-{3:3} { [ 275.980506][T12708] IN-SOFTIRQ-W at: [ 275.984471][T12708] lock_acquire+0x179/0x350 [ 275.990604][T12708] _raw_spin_lock+0x2e/0x40 [ 275.996747][T12708] evdev_pass_values+0x10e/0x9b0 [ 276.003323][T12708] evdev_events+0x1bb/0x390 [ 276.009463][T12708] input_pass_values+0x6c7/0x890 [ 276.016039][T12708] input_handle_event+0xb29/0x14d0 [ 276.022788][T12708] input_event+0x83/0xb0 [ 276.028666][T12708] hidinput_hid_event+0xa10/0x2420 [ 276.035407][T12708] hid_process_event+0x4b7/0x5e0 [ 276.041989][T12708] hid_report_raw_event+0xa0a/0x1290 [ 276.048909][T12708] __hid_input_report.constprop.0+0x33f/0x450 [ 276.056612][T12708] hid_irq_in+0x35e/0x870 [ 276.062573][T12708] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 276.069584][T12708] usb_hcd_giveback_urb+0x39b/0x450 [ 276.076413][T12708] dummy_timer+0x180e/0x3a20 [ 276.082639][T12708] __hrtimer_run_queues+0x202/0xad0 [ 276.089478][T12708] hrtimer_run_softirq+0x17d/0x350 [ 276.096224][T12708] handle_softirqs+0x219/0x8e0 [ 276.102643][T12708] __irq_exit_rcu+0x109/0x170 [ 276.108979][T12708] irq_exit_rcu+0x9/0x30 [ 276.114866][T12708] sysvec_apic_timer_interrupt+0x57/0xc0 [ 276.122152][T12708] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 276.129783][T12708] INITIAL USE at: [ 276.133663][T12708] lock_acquire+0x179/0x350 [ 276.139719][T12708] _raw_spin_lock+0x2e/0x40 [ 276.145772][T12708] evdev_pass_values+0x10e/0x9b0 [ 276.152261][T12708] evdev_events+0x1bb/0x390 [ 276.158311][T12708] input_pass_values+0x6c7/0x890 [ 276.164796][T12708] input_handle_event+0xf00/0x14d0 [ 276.171456][T12708] input_inject_event+0x1cd/0x390 [ 276.178032][T12708] evdev_write+0x457/0x750 [ 276.183998][T12708] vfs_write+0x2a0/0x1150 [ 276.189892][T12708] ksys_write+0x1f8/0x250 [ 276.195771][T12708] do_syscall_64+0xcd/0x4c0 [ 276.201817][T12708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.209251][T12708] } [ 276.211729][T12708] ... key at: [] __key.1+0x0/0x40 [ 276.218823][T12708] [ 276.218823][T12708] the dependencies between the lock to be acquired [ 276.218829][T12708] and SOFTIRQ-irq-unsafe lock: [ 276.232297][T12708] -> (tasklist_lock){.+.+}-{3:3} { [ 276.237577][T12708] HARDIRQ-ON-R at: [ 276.241713][T12708] lock_acquire+0x179/0x350 [ 276.248206][T12708] _raw_read_lock+0x5f/0x70 [ 276.254694][T12708] __do_wait+0x105/0x890 [ 276.260924][T12708] do_wait+0x21e/0x5a0 [ 276.266973][T12708] kernel_wait+0x9f/0x160 [ 276.273277][T12708] call_usermodehelper_exec_work+0xf1/0x170 [ 276.281149][T12708] process_one_work+0x9cc/0x1b70 [ 276.288063][T12708] worker_thread+0x6c8/0xf10 [ 276.294630][T12708] kthread+0x3c2/0x780 [ 276.300675][T12708] ret_from_fork+0x5d4/0x6f0 [ 276.307253][T12708] ret_from_fork_asm+0x1a/0x30 [ 276.313996][T12708] SOFTIRQ-ON-R at: [ 276.318130][T12708] lock_acquire+0x179/0x350 [ 276.324610][T12708] _raw_read_lock+0x5f/0x70 [ 276.331094][T12708] __do_wait+0x105/0x890 [ 276.337321][T12708] do_wait+0x21e/0x5a0 [ 276.343373][T12708] kernel_wait+0x9f/0x160 [ 276.349675][T12708] call_usermodehelper_exec_work+0xf1/0x170 [ 276.357550][T12708] process_one_work+0x9cc/0x1b70 [ 276.364474][T12708] worker_thread+0x6c8/0xf10 [ 276.371042][T12708] kthread+0x3c2/0x780 [ 276.377086][T12708] ret_from_fork+0x5d4/0x6f0 [ 276.383660][T12708] ret_from_fork_asm+0x1a/0x30 [ 276.390402][T12708] INITIAL USE at: [ 276.394448][T12708] lock_acquire+0x179/0x350 [ 276.400845][T12708] _raw_write_lock_irq+0x36/0x50 [ 276.407679][T12708] copy_process+0x4c68/0x7650 [ 276.414256][T12708] kernel_clone+0xfc/0x960 [ 276.420567][T12708] user_mode_thread+0xc7/0x110 [ 276.427226][T12708] rest_init+0x23/0x2b0 [ 276.433276][T12708] start_kernel+0x3ee/0x4d0 [ 276.439675][T12708] x86_64_start_reservations+0x18/0x30 [ 276.447034][T12708] x86_64_start_kernel+0x130/0x190 [ 276.454034][T12708] common_startup_64+0x13e/0x148 [ 276.460862][T12708] INITIAL READ USE at: [ 276.465355][T12708] lock_acquire+0x179/0x350 [ 276.472181][T12708] _raw_read_lock+0x5f/0x70 [ 276.479015][T12708] __do_wait+0x105/0x890 [ 276.485587][T12708] do_wait+0x21e/0x5a0 [ 276.491988][T12708] kernel_wait+0x9f/0x160 [ 276.498642][T12708] call_usermodehelper_exec_work+0xf1/0x170 [ 276.506863][T12708] process_one_work+0x9cc/0x1b70 [ 276.514126][T12708] worker_thread+0x6c8/0xf10 [ 276.521054][T12708] kthread+0x3c2/0x780 [ 276.527449][T12708] ret_from_fork+0x5d4/0x6f0 [ 276.534369][T12708] ret_from_fork_asm+0x1a/0x30 [ 276.541459][T12708] } [ 276.544112][T12708] ... key at: [] tasklist_lock+0x18/0x40 [ 276.552003][T12708] ... acquired at: [ 276.555958][T12708] _raw_read_lock+0x5f/0x70 [ 276.560623][T12708] send_sigurg+0xed/0xc80 [ 276.565110][T12708] sk_send_sigurg+0x76/0x360 [ 276.569862][T12708] unix_stream_sendmsg+0xeb3/0x11d0 [ 276.575220][T12708] ____sys_sendmsg+0xa98/0xc70 [ 276.580138][T12708] ___sys_sendmsg+0x134/0x1d0 [ 276.584967][T12708] __sys_sendmmsg+0x200/0x420 [ 276.590068][T12708] __x64_sys_sendmmsg+0x9c/0x100 [ 276.595160][T12708] do_syscall_64+0xcd/0x4c0 [ 276.599816][T12708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.605864][T12708] [ 276.608169][T12708] -> (&f_owner->lock){....}-{3:3} { [ 276.613448][T12708] INITIAL USE at: [ 276.617408][T12708] lock_acquire+0x179/0x350 [ 276.623629][T12708] _raw_write_lock_irq+0x36/0x50 [ 276.630291][T12708] __f_setown+0x61/0x3c0 [ 276.636249][T12708] generic_setlease+0xef2/0x1300 [ 276.642907][T12708] kernel_setlease+0x106/0x140 [ 276.649390][T12708] vfs_setlease+0x258/0x2d0 [ 276.655612][T12708] fcntl_setlease+0x3ed/0x5a0 [ 276.662008][T12708] do_fcntl+0x751/0x15a0 [ 276.667968][T12708] __x64_sys_fcntl+0x163/0x200 [ 276.674451][T12708] do_syscall_64+0xcd/0x4c0 [ 276.680672][T12708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.688293][T12708] INITIAL READ USE at: [ 276.692693][T12708] lock_acquire+0x179/0x350 [ 276.699352][T12708] _raw_read_lock_irqsave+0x74/0x90 [ 276.706710][T12708] send_sigio+0x31/0x3e0 [ 276.713109][T12708] kill_fasync+0x214/0x510 [ 276.719679][T12708] lease_break_callback+0x23/0x30 [ 276.726860][T12708] __break_lease+0x671/0x1810 [ 276.733692][T12708] do_dentry_open+0x6e1/0x1c10 [ 276.740620][T12708] vfs_open+0x82/0x3f0 [ 276.746843][T12708] path_openat+0x1de4/0x2cb0 [ 276.753590][T12708] do_filp_open+0x20b/0x470 [ 276.760250][T12708] do_sys_openat2+0x11b/0x1d0 [ 276.767081][T12708] __x64_sys_creat+0xcc/0x120 [ 276.773911][T12708] do_syscall_64+0xcd/0x4c0 [ 276.780565][T12708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.788608][T12708] } [ 276.791171][T12708] ... key at: [] __key.1+0x0/0x40 [ 276.798348][T12708] ... acquired at: [ 276.802215][T12708] _raw_read_lock_irqsave+0x74/0x90 [ 276.807572][T12708] send_sigio+0x31/0x3e0 [ 276.811971][T12708] kill_fasync+0x214/0x510 [ 276.816544][T12708] lease_break_callback+0x23/0x30 [ 276.821724][T12708] __break_lease+0x671/0x1810 [ 276.826564][T12708] do_dentry_open+0x6e1/0x1c10 [ 276.831500][T12708] vfs_open+0x82/0x3f0 [ 276.835724][T12708] path_openat+0x1de4/0x2cb0 [ 276.840474][T12708] do_filp_open+0x20b/0x470 [ 276.845150][T12708] do_sys_openat2+0x11b/0x1d0 [ 276.849986][T12708] __x64_sys_creat+0xcc/0x120 [ 276.854819][T12708] do_syscall_64+0xcd/0x4c0 [ 276.859507][T12708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.865578][T12708] [ 276.867890][T12708] -> (&new->fa_lock){....}-{3:3} { [ 276.873000][T12708] INITIAL USE at: [ 276.876874][T12708] lock_acquire+0x179/0x350 [ 276.882926][T12708] _raw_write_lock_irq+0x36/0x50 [ 276.889416][T12708] fasync_remove_entry+0xb2/0x1e0 [ 276.895989][T12708] fasync_helper+0xaf/0xd0 [ 276.901952][T12708] sock_fasync+0x92/0x140 [ 276.907850][T12708] __fput+0x96b/0xb70 [ 276.913399][T12708] task_work_run+0x150/0x240 [ 276.919583][T12708] exit_to_user_mode_loop+0xeb/0x110 [ 276.926442][T12708] do_syscall_64+0x3f6/0x4c0 [ 276.932585][T12708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.940047][T12708] INITIAL READ USE at: [ 276.944364][T12708] lock_acquire+0x179/0x350 [ 276.950852][T12708] _raw_read_lock_irqsave+0x74/0x90 [ 276.958054][T12708] kill_fasync+0x138/0x510 [ 276.964454][T12708] sock_wake_async+0x132/0x160 [ 276.971198][T12708] unix_write_space+0x2ae/0x510 [ 276.978033][T12708] sock_wfree+0x25e/0x880 [ 276.984350][T12708] unix_destruct_scm+0x137/0x190 [ 276.991270][T12708] skb_release_head_state+0xa6/0x290 [ 276.998534][T12708] sk_skb_reason_drop+0xeb/0x1a0 [ 277.005467][T12708] skb_queue_purge_reason+0x2b0/0x420 [ 277.012838][T12708] unix_dgram_disconnected+0x54/0x150 [ 277.020196][T12708] unix_dgram_connect+0x86f/0xc80 [ 277.027226][T12708] __sys_connect_file+0x13e/0x1a0 [ 277.034235][T12708] __sys_connect+0x13b/0x160 [ 277.040808][T12708] __x64_sys_connect+0x72/0xb0 [ 277.047564][T12708] do_syscall_64+0xcd/0x4c0 [ 277.054047][T12708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.061922][T12708] } [ 277.064400][T12708] ... key at: [] __key.0+0x0/0x40 [ 277.071496][T12708] ... acquired at: [ 277.075276][T12708] lock_acquire+0x179/0x350 [ 277.079937][T12708] _raw_read_lock_irqsave+0x74/0x90 [ 277.085298][T12708] kill_fasync+0x138/0x510 [ 277.089874][T12708] evdev_pass_values+0x619/0x9b0 [ 277.094975][T12708] evdev_events+0x1bb/0x390 [ 277.099641][T12708] input_pass_values+0x6c7/0x890 [ 277.104753][T12708] input_handle_event+0xf00/0x14d0 [ 277.110027][T12708] input_inject_event+0x1cd/0x390 [ 277.115216][T12708] evdev_write+0x457/0x750 [ 277.119826][T12708] vfs_write+0x2a0/0x1150 [ 277.124318][T12708] ksys_write+0x1f8/0x250 [ 277.128806][T12708] do_syscall_64+0xcd/0x4c0 [ 277.133464][T12708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.139513][T12708] [ 277.141817][T12708] [ 277.141817][T12708] stack backtrace: [ 277.147693][T12708] CPU: 1 UID: 0 PID: 12708 Comm: syz.2.2640 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 277.147711][T12708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.147719][T12708] Call Trace: [ 277.147724][T12708] [ 277.147729][T12708] dump_stack_lvl+0x116/0x1f0 [ 277.147752][T12708] check_irq_usage+0x7dc/0x920 [ 277.147772][T12708] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 277.147791][T12708] ? check_path.constprop.0+0x24/0x50 [ 277.147812][T12708] ? __lock_acquire+0x1285/0x1c90 [ 277.147823][T12708] __lock_acquire+0x1285/0x1c90 [ 277.147837][T12708] lock_acquire+0x179/0x350 [ 277.147848][T12708] ? kill_fasync+0x138/0x510 [ 277.147866][T12708] _raw_read_lock_irqsave+0x74/0x90 [ 277.147886][T12708] ? kill_fasync+0x138/0x510 [ 277.147900][T12708] kill_fasync+0x138/0x510 [ 277.147916][T12708] evdev_pass_values+0x619/0x9b0 [ 277.147938][T12708] evdev_events+0x1bb/0x390 [ 277.147957][T12708] input_pass_values+0x6c7/0x890 [ 277.147978][T12708] input_handle_event+0xf00/0x14d0 [ 277.147997][T12708] ? _copy_from_user+0x59/0xd0 [ 277.148014][T12708] input_inject_event+0x1cd/0x390 [ 277.148035][T12708] evdev_write+0x457/0x750 [ 277.148056][T12708] ? __pfx_evdev_write+0x10/0x10 [ 277.148076][T12708] ? bpf_lsm_file_permission+0x9/0x10 [ 277.148091][T12708] ? security_file_permission+0x71/0x210 [ 277.148105][T12708] ? rw_verify_area+0xcf/0x680 [ 277.148122][T12708] ? __pfx_evdev_write+0x10/0x10 [ 277.148141][T12708] vfs_write+0x2a0/0x1150 [ 277.148161][T12708] ? __pfx_vfs_write+0x10/0x10 [ 277.148178][T12708] ? find_held_lock+0x2b/0x80 [ 277.148194][T12708] ? __fget_files+0x204/0x3c0 [ 277.148207][T12708] ? __fget_files+0x20e/0x3c0 [ 277.148220][T12708] ksys_write+0x1f8/0x250 [ 277.148239][T12708] ? __pfx_ksys_write+0x10/0x10 [ 277.148260][T12708] do_syscall_64+0xcd/0x4c0 [ 277.148273][T12708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.148285][T12708] RIP: 0033:0x7f1d3078e9a9 [ 277.148297][T12708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.148310][T12708] RSP: 002b:00007f1d315e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 277.148323][T12708] RAX: ffffffffffffffda RBX: 00007f1d309b5fa0 RCX: 00007f1d3078e9a9 [ 277.148332][T12708] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000005 [ 277.148340][T12708] RBP: 00007f1d30810d69 R08: 0000000000000000 R09: 0000000000000000 [ 277.148348][T12708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.148356][T12708] R13: 0000000000000000 R14: 00007f1d309b5fa0 R15: 00007ffc43c779d8 [ 277.148369][T12708] [ 277.407618][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.520773][ T5826] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 277.560438][ T5937] usbhid 3-1:0.0: can't add hid device: -71 [ 277.566466][ T5937] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 277.575122][ T5937] usb 3-1: USB disconnect, device number 27 [ 277.670790][ T5826] usb 6-1: Using ep0 maxpacket: 32 [ 277.897900][ T5826] usb 6-1: device descriptor read/all, error -71 [ 277.936904][T11368] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.947589][T11368] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.013201][T11368] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.023571][T11368] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.071082][ T5958] usb 5-1: USB disconnect, device number 30 [ 278.094341][T11368] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.104876][T11368] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.133458][T11368] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.143797][T11368] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.351685][T11368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.360364][T11368] bond_slave_0: left allmulticast mode [ 278.366699][T11368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.375634][T11368] bond_slave_1: left allmulticast mode [ 278.381586][T11368] bond0 (unregistering): Released all slaves [ 278.423016][T11368] tipc: Disabling bearer [ 278.428084][T11368] tipc: Left network mode [ 278.527564][T11368] hsr_slave_0: left promiscuous mode [ 278.533774][T11368] hsr_slave_1: left promiscuous mode [ 278.539269][T11368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.547184][T11368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.554816][T11368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.562297][T11368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.571262][T11368] veth1_to_team: left allmulticast mode [ 278.577282][T11368] veth1_to_team: left promiscuous mode [ 278.582799][T11368] veth1_macvtap: left promiscuous mode [ 278.588284][T11368] veth0_macvtap: left promiscuous mode [ 278.594099][T11368] veth1_vlan: left promiscuous mode [ 278.599344][T11368] veth0_vlan: left promiscuous mode [ 278.702750][T11368] team0 (unregistering): Port device team_slave_1 removed [ 278.722182][T11368] team0 (unregistering): Port device team_slave_0 removed [ 279.032899][T11368] ------------[ cut here ]------------ [ 279.038363][T11368] WARNING: CPU: 0 PID: 11368 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xa2/0x160 [ 279.048569][T11368] Modules linked in: [ 279.052475][T11368] CPU: 0 UID: 0 PID: 11368 Comm: kworker/u8:66 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 279.064956][T11368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.075239][T11368] Workqueue: netns cleanup_net [ 279.080013][T11368] RIP: 0010:xfrm6_tunnel_net_exit+0xa2/0x160 [ 279.086021][T11368] Code: 00 00 00 49 8d 3c dc 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 bd 00 00 00 89 e8 49 8b 04 c4 48 85 c0 74 ab e8 6f de 71 f7 90 <0f> 0b 90 eb a0 4d 8d ac 24 00 08 00 00 31 db 49 be 00 00 00 00 00 [ 279.105729][T11368] RSP: 0018:ffffc9000539faa0 EFLAGS: 00010293 [ 279.111821][T11368] RAX: 0000000000000000 RBX: 0000000000000000 RCX: fffff52000a73f25 [ 279.119785][T11368] RDX: ffff88804f938000 RSI: ffffffff8a4a0a21 RDI: ffff88802b214000 [ 279.127772][T11368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.135751][T11368] R10: ffffffff90a94257 R11: 0000000000000000 R12: ffff88802b214000 [ 279.143772][T11368] R13: dffffc0000000000 R14: fffffbfff20ac9dc R15: ffffffff90564ec0 [ 279.151751][T11368] FS: 0000000000000000(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 279.160844][T11368] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.167426][T11368] CR2: 0000563346442b40 CR3: 000000000e382000 CR4: 00000000003526f0 [ 279.175568][T11368] Call Trace: [ 279.178839][T11368] [ 279.181786][T11368] ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10 [ 279.187624][T11368] ops_undo_list+0x2eb/0xab0 [ 279.192257][T11368] ? __pfx_ops_undo_list+0x10/0x10 [ 279.197361][T11368] ? cleanup_net+0x334/0x890 [ 279.201983][T11368] ? cleanup_net+0x334/0x890 [ 279.206578][T11368] ? rcu_is_watching+0x12/0xc0 [ 279.211344][T11368] ? cleanup_net+0x334/0x890 [ 279.215927][T11368] cleanup_net+0x408/0x890 [ 279.220335][T11368] ? __pfx_cleanup_net+0x10/0x10 [ 279.225307][T11368] ? lock_acquire+0x2cd/0x350 [ 279.229985][T11368] ? rcu_is_watching+0x12/0xc0 [ 279.234773][T11368] process_one_work+0x9cc/0x1b70 [ 279.239719][T11368] ? __pfx_update_gid_event_work_handler+0x10/0x10 [ 279.246246][T11368] ? __pfx_process_one_work+0x10/0x10 [ 279.251634][T11368] ? assign_work+0x1a0/0x250 [ 279.256216][T11368] worker_thread+0x6c8/0xf10 [ 279.260984][T11368] ? __pfx_worker_thread+0x10/0x10 [ 279.266086][T11368] kthread+0x3c2/0x780 [ 279.270129][T11368] ? __pfx_kthread+0x10/0x10 [ 279.274870][T11368] ? rcu_is_watching+0x12/0xc0 [ 279.279635][T11368] ? __pfx_kthread+0x10/0x10 [ 279.284248][T11368] ret_from_fork+0x5d4/0x6f0 [ 279.288839][T11368] ? __pfx_kthread+0x10/0x10 [ 279.293549][T11368] ret_from_fork_asm+0x1a/0x30 [ 279.298311][T11368] [ 279.301367][T11368] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 279.308648][T11368] CPU: 0 UID: 0 PID: 11368 Comm: kworker/u8:66 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 279.320946][T11368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.330989][T11368] Workqueue: netns cleanup_net [ 279.335752][T11368] Call Trace: [ 279.339026][T11368] [ 279.341935][T11368] dump_stack_lvl+0x3d/0x1f0 [ 279.346510][T11368] panic+0x71c/0x800 [ 279.350402][T11368] ? __pfx_panic+0x10/0x10 [ 279.354797][T11368] ? show_trace_log_lvl+0x29b/0x3e0 [ 279.359975][T11368] ? check_panic_on_warn+0x1f/0xb0 [ 279.365073][T11368] ? xfrm6_tunnel_net_exit+0xa2/0x160 [ 279.370439][T11368] check_panic_on_warn+0xab/0xb0 [ 279.375365][T11368] __warn+0xf6/0x3c0 [ 279.379262][T11368] ? xfrm6_tunnel_net_exit+0xa2/0x160 [ 279.384623][T11368] report_bug+0x3c3/0x580 [ 279.388942][T11368] ? xfrm6_tunnel_net_exit+0xa2/0x160 [ 279.394304][T11368] handle_bug+0x184/0x210 [ 279.398615][T11368] exc_invalid_op+0x17/0x50 [ 279.403102][T11368] asm_exc_invalid_op+0x1a/0x20 [ 279.407933][T11368] RIP: 0010:xfrm6_tunnel_net_exit+0xa2/0x160 [ 279.413900][T11368] Code: 00 00 00 49 8d 3c dc 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 bd 00 00 00 89 e8 49 8b 04 c4 48 85 c0 74 ab e8 6f de 71 f7 90 <0f> 0b 90 eb a0 4d 8d ac 24 00 08 00 00 31 db 49 be 00 00 00 00 00 [ 279.433489][T11368] RSP: 0018:ffffc9000539faa0 EFLAGS: 00010293 [ 279.439542][T11368] RAX: 0000000000000000 RBX: 0000000000000000 RCX: fffff52000a73f25 [ 279.447503][T11368] RDX: ffff88804f938000 RSI: ffffffff8a4a0a21 RDI: ffff88802b214000 [ 279.455458][T11368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.463414][T11368] R10: ffffffff90a94257 R11: 0000000000000000 R12: ffff88802b214000 [ 279.471375][T11368] R13: dffffc0000000000 R14: fffffbfff20ac9dc R15: ffffffff90564ec0 [ 279.479333][T11368] ? xfrm6_tunnel_net_exit+0xa1/0x160 [ 279.484699][T11368] ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10 [ 279.490496][T11368] ops_undo_list+0x2eb/0xab0 [ 279.495071][T11368] ? __pfx_ops_undo_list+0x10/0x10 [ 279.500162][T11368] ? cleanup_net+0x334/0x890 [ 279.504736][T11368] ? cleanup_net+0x334/0x890 [ 279.509306][T11368] ? rcu_is_watching+0x12/0xc0 [ 279.514057][T11368] ? cleanup_net+0x334/0x890 [ 279.518634][T11368] cleanup_net+0x408/0x890 [ 279.523047][T11368] ? __pfx_cleanup_net+0x10/0x10 [ 279.527967][T11368] ? lock_acquire+0x2cd/0x350 [ 279.532628][T11368] ? rcu_is_watching+0x12/0xc0 [ 279.537376][T11368] process_one_work+0x9cc/0x1b70 [ 279.542306][T11368] ? __pfx_update_gid_event_work_handler+0x10/0x10 [ 279.548809][T11368] ? __pfx_process_one_work+0x10/0x10 [ 279.554166][T11368] ? assign_work+0x1a0/0x250 [ 279.558739][T11368] worker_thread+0x6c8/0xf10 [ 279.563315][T11368] ? __pfx_worker_thread+0x10/0x10 [ 279.568410][T11368] kthread+0x3c2/0x780 [ 279.572462][T11368] ? __pfx_kthread+0x10/0x10 [ 279.577033][T11368] ? rcu_is_watching+0x12/0xc0 [ 279.581783][T11368] ? __pfx_kthread+0x10/0x10 [ 279.586353][T11368] ret_from_fork+0x5d4/0x6f0 [ 279.590935][T11368] ? __pfx_kthread+0x10/0x10 [ 279.595507][T11368] ret_from_fork_asm+0x1a/0x30 [ 279.600258][T11368] [ 279.603480][T11368] Kernel Offset: disabled [ 279.607805][T11368] Rebooting in 86400 seconds..