last executing test programs: 2m26.925327438s ago: executing program 0 (id=815): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 2m26.84089702s ago: executing program 0 (id=817): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) uname(0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) 2m26.686190269s ago: executing program 0 (id=820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000002c0)={[0x3000, 0x2000, 0x8080000, 0x6000], 0x7, 0x81, 0xffffffffffffffff}) 2m26.48516778s ago: executing program 0 (id=824): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 2m26.382023555s ago: executing program 0 (id=827): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0x8, 0x4) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140)=0x3, 0x20) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x2}, 0x10) 2m25.957500745s ago: executing program 0 (id=833): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 2m25.518663392s ago: executing program 32 (id=833): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 3.830716858s ago: executing program 2 (id=2655): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8601, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2046) 3.728840503s ago: executing program 2 (id=2656): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)={0x3, 0x0, [{0x0, 0x73, &(0x7f00000002c0)=""/115}, {0x6000, 0x0, 0x0}, {0xdddd0004, 0xac, &(0x7f0000000740)=""/172}]}) 3.662737713s ago: executing program 2 (id=2657): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x3091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2081c80, 0x0) move_mount(r0, &(0x7f0000000280)='./file0\x00', r0, 0x0, 0x272) 3.584923553s ago: executing program 2 (id=2659): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000300)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}}}, 0x10, 0x0}, 0x40080) bind$tipc(r0, 0x0, 0x0) 3.458834011s ago: executing program 2 (id=2662): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80, 0x24) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pread64(r1, &(0x7f00000002c0)=""/124, 0x7c, 0x7) 3.330500334s ago: executing program 1 (id=2663): syz_usb_connect(0x0, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="1201200085506d4011040a00d96df600000109022300"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 2.564695977s ago: executing program 2 (id=2672): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) ppoll(&(0x7f0000000380)=[{r1, 0x120}], 0x1, 0x0, 0x0, 0x0) 2.20656633s ago: executing program 5 (id=2677): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000080), 0x0) splice(r2, 0x0, r4, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 2.116401103s ago: executing program 1 (id=2678): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048000}, 0x30) 2.045414964s ago: executing program 1 (id=2680): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/63, 0x3f}, 0x7}], 0x4000135, 0x2, 0x0) write(r0, &(0x7f00000000c0)="510003000000", 0x6) 1.990433942s ago: executing program 4 (id=2681): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c80)="f50c", 0x2}], 0x1}}], 0x1, 0x8011) recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x10120, 0x0) shutdown(r0, 0x0) 1.938241751s ago: executing program 1 (id=2682): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x7e0}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001680)=""/4084, 0xff4}, {&(0x7f0000000cc0)=""/146, 0x92}], 0x2}, 0x12041) 1.911467324s ago: executing program 1 (id=2683): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 1.860164691s ago: executing program 1 (id=2684): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="001704000000ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000005c0)=ANY=[@ANYBLOB="401404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001400)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="003504000000e992e4c8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.820415311s ago: executing program 4 (id=2685): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 1.750443979s ago: executing program 4 (id=2686): r0 = syz_io_uring_setup(0x57f, &(0x7f0000000000)={0x0, 0x807734, 0x80, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.714011651s ago: executing program 4 (id=2687): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.554613609s ago: executing program 4 (id=2688): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 1.284286803s ago: executing program 5 (id=2690): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xf97f, 0x400, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 1.17880854s ago: executing program 3 (id=2692): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.075787441s ago: executing program 5 (id=2693): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) 1.07553866s ago: executing program 3 (id=2694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x3c}}, 0x0) 923.372534ms ago: executing program 3 (id=2695): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000002600)=0x6, 0x1) 879.979136ms ago: executing program 3 (id=2696): r0 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x73, &(0x7f00000000c0)=@can, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 727.918999ms ago: executing program 3 (id=2697): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 669.375411ms ago: executing program 3 (id=2698): r0 = gettid() r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 196.324232ms ago: executing program 5 (id=2699): bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 145.077518ms ago: executing program 5 (id=2700): modify_ldt$write(0x1, &(0x7f0000000240)={0xd6, 0x1000, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x800) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000700)="f387f3d0d636834c015f24e62c2e7c82d107a6808737c85e69706da9c8440000009c0ebf8e3f0a7efe0ed91d923af04bf049364e1b69237c6258215d8f1e91bd3bd03e7f3876d52ef012264768d6b703075024a5164aebe8ba1203b8512b2258bb6dfa2f55f496386fd12d29590c6eee14a6c7bc9d4c9c26915315ab4f01f3b278e7a837b409f9a8d7") ptrace$cont(0x21, r0, 0x80000001, 0x4) 14.108736ms ago: executing program 5 (id=2701): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[], 0x48) syz_open_dev$sndctrl(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000180)={0x2, 0x1, 0x0, {0x7, 0x909f, 0x106, 0xb}}) 0s ago: executing program 4 (id=2702): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): dummy_hcd.2/usb3/3-1/3-1:0.85/input/input31 [ 207.162133][ T9795] binder: 9793:9795 ioctl c0306201 200000000280 returned -14 [ 207.248717][ T5909] usb 3-1: USB disconnect, device number 25 [ 207.312909][ T5909] appletouch 3-1:0.85: input: appletouch disconnected [ 207.603238][ T30] audit: type=1400 audit(1754611984.038:701): avc: denied { write } for pid=5909 comm="kworker/1:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28888 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 207.761890][ T980] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 207.776292][ T9837] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1595'. [ 207.792577][ T5956] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 207.888153][ T9843] could not open pipe file descriptor [ 207.924589][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.938782][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.952386][ T5956] usb 6-1: Using ep0 maxpacket: 32 [ 207.964666][ T980] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 207.987888][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.997466][ T5956] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 208.005891][ T5956] usb 6-1: config 0 has no interface number 0 [ 208.012082][ T5956] usb 6-1: config 0 interface 184 has no altsetting 0 [ 208.023942][ T980] usb 2-1: config 0 descriptor?? [ 208.037721][ T5956] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 208.047135][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.055270][ T5956] usb 6-1: Product: syz [ 208.062653][ T5956] usb 6-1: Manufacturer: syz [ 208.067299][ T5956] usb 6-1: SerialNumber: syz [ 208.090331][ T5956] usb 6-1: config 0 descriptor?? [ 208.106270][ T5956] smsc75xx v1.0.0 [ 208.110605][ T5956] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 208.139424][ T5956] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 208.451300][ T980] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 208.462134][ T980] cp2112 0003:10C4:EA90.001A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 208.492451][ T5909] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 208.512264][ T5967] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 208.527980][ T9825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.536897][ T9825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.548751][ T43] usb 6-1: USB disconnect, device number 4 [ 208.642390][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 208.649195][ T5909] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 208.657953][ T5909] usb 3-1: config 0 has no interface number 0 [ 208.659551][ T980] cp2112 0003:10C4:EA90.001A: Part Number: 0x82 Device Version: 0xFE [ 208.666542][ T5967] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.683240][ T5967] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.693706][ T5967] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 208.703113][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 208.711471][ T5967] usb 5-1: SerialNumber: syz [ 208.716759][ T5909] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 208.727635][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.737073][ T5909] usb 3-1: Product: syz [ 208.741898][ T5909] usb 3-1: Manufacturer: syz [ 208.746592][ T5909] usb 3-1: SerialNumber: syz [ 208.757219][ T5909] usb 3-1: config 0 descriptor?? [ 208.764715][ T5909] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 208.865974][ T980] cp2112 0003:10C4:EA90.001A: error requesting SMBus config [ 208.875115][ T980] cp2112 0003:10C4:EA90.001A: probe with driver cp2112 failed with error -71 [ 208.887602][ T980] usb 2-1: USB disconnect, device number 25 [ 208.948514][ T5967] usb 5-1: 0:2 : does not exist [ 208.953748][ T5967] usb 5-1: usbmixer: too many channels (61) in unit 5 [ 208.977559][ T5967] usb 5-1: USB disconnect, device number 18 [ 208.983685][ T5909] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 209.000008][ T5909] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 209.097735][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1611'. [ 209.416119][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 209.417088][ T980] usb 3-1: USB disconnect, device number 26 [ 209.459956][ T980] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 209.478769][ T980] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 209.491040][ T980] quatech2 3-1:0.51: device disconnected [ 209.558591][ T30] audit: type=1326 audit(1754611985.998:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9890 comm="syz.1.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905b98ebe9 code=0x7ffc0000 [ 209.596703][ T30] audit: type=1326 audit(1754611986.028:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9890 comm="syz.1.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905b98ebe9 code=0x7ffc0000 [ 209.622087][ T30] audit: type=1326 audit(1754611986.038:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9890 comm="syz.1.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f905b98ebe9 code=0x7ffc0000 [ 209.674790][ T30] audit: type=1326 audit(1754611986.038:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9890 comm="syz.1.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905b98ebe9 code=0x7ffc0000 [ 209.711521][ T30] audit: type=1326 audit(1754611986.038:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9890 comm="syz.1.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905b98ebe9 code=0x7ffc0000 [ 209.766398][ T30] audit: type=1326 audit(1754611986.038:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9890 comm="syz.1.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f905b98ebe9 code=0x7ffc0000 [ 209.801660][ T9899] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 209.831266][ T30] audit: type=1326 audit(1754611986.038:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9890 comm="syz.1.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905b98ebe9 code=0x7ffc0000 [ 209.855671][ T30] audit: type=1326 audit(1754611986.038:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9890 comm="syz.1.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905b98ebe9 code=0x7ffc0000 [ 210.102386][ T9916] syzkaller1: entered promiscuous mode [ 210.138867][ T9916] syzkaller1: entered allmulticast mode [ 210.772714][ T980] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 210.946004][ T980] usb 6-1: unable to get BOS descriptor or descriptor too short [ 210.971275][ T980] usb 6-1: config 6 has an invalid interface number: 88 but max is 0 [ 210.996433][ T980] usb 6-1: config 6 has no interface number 0 [ 211.010645][ T980] usb 6-1: config 6 interface 88 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 211.032338][ T980] usb 6-1: config 6 interface 88 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 211.072619][ T980] usb 6-1: config 6 interface 88 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 211.119529][ T980] usb 6-1: config 6 interface 88 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64 [ 211.162514][ T980] usb 6-1: config 6 interface 88 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 211.182217][ T980] usb 6-1: config 6 interface 88 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 7 [ 211.236539][ T980] usb 6-1: string descriptor 0 read error: -22 [ 211.246098][ T980] usb 6-1: New USB device found, idVendor=0c45, idProduct=612e, bcdDevice=30.af [ 211.270025][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.329936][ T980] gspca_main: sonixj-2.14.0 probing 0c45:612e [ 211.506323][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 211.506340][ T30] audit: type=1400 audit(1754611987.948:717): avc: denied { ioctl } for pid=9979 comm="syz.2.1657" path="socket:[29350]" dev="sockfs" ino=29350 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 211.553299][ T980] gspca_sonixj: reg_w1 err -71 [ 211.560804][ T980] sonixj 6-1:6.88: probe with driver sonixj failed with error -71 [ 211.573992][ T980] usb 6-1: USB disconnect, device number 5 [ 212.152320][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 212.312248][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 212.329382][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 212.347592][ T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 212.359986][ T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 212.371638][ T10] usb 4-1: Product: syz [ 212.376538][ T30] audit: type=1400 audit(1754611988.818:718): avc: denied { watch_sb watch_reads } for pid=10009 comm="syz.2.1671" path="/294/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 212.423403][ T10] usb 4-1: Manufacturer: syz [ 212.428013][ T10] usb 4-1: SerialNumber: syz [ 212.438082][ T10] usb 4-1: config 0 descriptor?? [ 212.444993][T10004] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 212.453750][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 212.459820][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 212.492279][ T980] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 212.642998][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 212.659666][ T980] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 212.671497][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 212.699279][ T980] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 212.708749][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.717996][ T980] usb 5-1: Product: syz [ 212.727993][ T980] usb 5-1: Manufacturer: syz [ 212.739262][ T980] usb 5-1: SerialNumber: syz [ 212.755909][ T980] usb 5-1: config 0 descriptor?? [ 212.765137][ T980] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 212.774570][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 212.787523][ T980] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 212.812779][ T5909] usb 4-1: USB disconnect, device number 15 [ 212.932424][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 212.958107][T10020] netem: change failed [ 212.958338][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.992482][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.012282][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 213.021379][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.055117][ T10] usb 3-1: config 0 descriptor?? [ 213.162495][ T5909] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 213.170454][ T30] audit: type=1400 audit(1754611989.598:719): avc: denied { getopt } for pid=10024 comm="syz.5.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.170798][T10025] syzkaller1: entered promiscuous mode [ 213.225114][T10025] syzkaller1: entered allmulticast mode [ 213.352374][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 213.366984][ T5909] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 213.381135][ T5909] usb 4-1: string descriptor 0 read error: -22 [ 213.397963][ T5909] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 213.413557][ T980] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 213.417519][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 213.428312][ T980] em28xx 5-1:0.0: Config register raw data: 0x41 [ 213.452914][ T5909] usb 4-1: config 0 descriptor?? [ 213.458699][T10004] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 213.477676][ T5909] hub 4-1:0.0: bad descriptor, ignoring hub [ 213.485957][ T5909] hub 4-1:0.0: probe with driver hub failed with error -5 [ 213.514311][ T10] savu 0003:1E7D:2D5A.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 213.669915][ T5909] usb 5-1: USB disconnect, device number 19 [ 213.699091][T10040] input: syz1 as /devices/virtual/input/input32 [ 213.700077][ T5909] em28xx 5-1:0.0: Disconnecting em28xx [ 213.729091][ T5909] em28xx 5-1:0.0: Freeing device [ 213.812468][ T980] usb 4-1: USB disconnect, device number 16 [ 213.841958][ T980] usb 3-1: USB disconnect, device number 27 [ 213.851123][T10044] dvmrp0: entered allmulticast mode [ 213.876940][T10044] syz_tun: entered allmulticast mode [ 213.884781][T10044] dvmrp0: left allmulticast mode [ 213.889836][T10044] syz_tun: left allmulticast mode [ 214.034105][ T30] audit: type=1400 audit(1754611990.478:720): avc: denied { create } for pid=10052 comm="syz.5.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 214.067948][ T30] audit: type=1400 audit(1754611990.508:721): avc: denied { read } for pid=10052 comm="syz.5.1691" path="socket:[30319]" dev="sockfs" ino=30319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 214.763373][ T980] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 214.902273][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 214.922229][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 214.933713][ T980] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 214.942920][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.953131][ T980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.968986][ T980] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.978880][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.988447][ T980] usb 5-1: Product: syz [ 214.995016][ T980] usb 5-1: Manufacturer: syz [ 214.999962][ T980] usb 5-1: SerialNumber: syz [ 215.055898][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.069074][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.092239][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 215.101715][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.123062][ T10] usb 6-1: config 0 descriptor?? [ 215.230689][T10097] syz.1.1710 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 215.428365][ T980] usb 5-1: 0:2 : does not exist [ 215.543084][ T10] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 215.550488][ T10] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 215.572278][ T5909] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 215.596704][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.001C/input/input33 [ 215.620284][ T10] cm6533_jd 0003:0D8C:0022.001C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 215.732258][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 215.749359][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.765464][ T5909] usb 2-1: config 0 has no interfaces? [ 215.770973][ T5909] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 215.780456][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.815924][ T5909] usb 2-1: config 0 descriptor?? [ 215.920941][ T5909] usb 6-1: USB disconnect, device number 6 [ 215.947706][ T30] audit: type=1400 audit(1754611992.388:722): avc: denied { ioctl } for pid=10104 comm="syz.2.1714" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 216.071601][ T980] usb 5-1: USB disconnect, device number 20 [ 216.561119][ T30] audit: type=1400 audit(1754611992.998:723): avc: denied { name_bind } for pid=10126 comm="syz.5.1722" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 216.826054][T10138] syzkaller1: entered promiscuous mode [ 216.831638][T10138] syzkaller1: entered allmulticast mode [ 216.931648][T10141] loop5: detected capacity change from 0 to 6831 [ 216.967351][T10141] loop5: detected capacity change from 6831 to 11151 [ 216.975446][T10143] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1729'. [ 217.353372][ T5910] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 217.392271][ T5937] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 217.526792][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.538520][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.542284][ T5909] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 217.554558][ T5910] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 217.568805][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 217.579853][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.584088][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 217.590634][ T5910] usb 3-1: config 0 descriptor?? [ 217.615070][ T5937] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 217.625426][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.633575][ T5937] usb 4-1: Product: syz [ 217.638308][ T5937] usb 4-1: Manufacturer: syz [ 217.645901][ T5937] usb 4-1: SerialNumber: syz [ 217.653762][ T5937] usb 4-1: config 0 descriptor?? [ 217.660574][ T5937] hub 4-1:0.0: bad descriptor, ignoring hub [ 217.670284][ T5937] hub 4-1:0.0: probe with driver hub failed with error -5 [ 217.681056][ T5937] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 217.766488][ T5909] usb 5-1: unable to get BOS descriptor or descriptor too short [ 217.777123][ T5909] usb 5-1: not running at top speed; connect to a high speed hub [ 217.787708][ T5909] usb 5-1: config 8 has an invalid interface number: 185 but max is 1 [ 217.799223][ T5909] usb 5-1: config 8 has an invalid interface number: 135 but max is 1 [ 217.810922][ T5909] usb 5-1: config 8 has an invalid descriptor of length 125, skipping remainder of the config [ 217.824771][ T5909] usb 5-1: config 8 has no interface number 0 [ 217.830965][ T5909] usb 5-1: config 8 has no interface number 1 [ 217.838318][ T5909] usb 5-1: config 8 interface 135 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.856780][ T5909] usb 5-1: config 8 interface 185 has no altsetting 0 [ 217.864064][ T5909] usb 5-1: config 8 interface 135 has no altsetting 0 [ 217.885081][ T5909] usb 5-1: New USB device found, idVendor=2040, idProduct=7270, bcdDevice=ae.97 [ 217.897566][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.907733][ T5909] usb 5-1: Product: syz [ 217.911968][ T5909] usb 5-1: Manufacturer: syz [ 217.930007][ T5909] usb 5-1: SerialNumber: syz [ 218.013659][ T5910] ath6kl: Failed to read usb control message: -71 [ 218.020150][ T5910] ath6kl: Unable to read the bmi data from the device: -71 [ 218.027455][ T5910] ath6kl: Unable to recv target info: -71 [ 218.044084][ T5910] ath6kl: Failed to init ath6kl core: -71 [ 218.050488][ T5910] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 218.077662][ T5910] usb 3-1: USB disconnect, device number 28 [ 218.186358][ T5909] usb 5-1: unknown interface protocol 0x4f, assuming v1 [ 218.193739][ T5909] usb 5-1: 135:2 : does not exist [ 218.218778][ T5909] usb 5-1: USB disconnect, device number 21 [ 218.373098][ T5937] usb 2-1: USB disconnect, device number 26 [ 219.212305][ T980] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 219.385404][ T980] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 219.408213][ T980] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 219.427882][ T980] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 219.437476][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.445647][ T980] usb 2-1: Product: syz [ 219.451111][ T980] usb 2-1: Manufacturer: syz [ 219.458111][ T980] usb 2-1: SerialNumber: syz [ 219.468781][ T980] usb 2-1: config 0 descriptor?? [ 219.476852][T10174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 219.485679][T10174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 219.493510][T10186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1748'. [ 219.508211][T10186] IPVS: Error connecting to the multicast addr [ 219.720833][T10174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 219.735643][T10196] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 219.736798][ T5909] IPVS: starting estimator thread 0... [ 219.750776][T10174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 219.842377][T10200] IPVS: using max 42 ests per chain, 100800 per kthread [ 219.984787][T10208] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1758'. [ 220.003066][ T5909] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 220.065055][ T5937] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 220.103132][T10212] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1760'. [ 220.116167][T10212] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1760'. [ 220.164495][ T5909] usb 6-1: config index 0 descriptor too short (expected 69, got 36) [ 220.174334][ T5909] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.188505][ T5909] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 220.202719][ T43] usb 4-1: USB disconnect, device number 17 [ 220.211862][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.230178][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 220.244081][ T5937] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 220.259453][ T5909] usb 6-1: Product: syz [ 220.267761][ T5909] usb 6-1: Manufacturer: syz [ 220.278047][ T5937] usb 5-1: config 0 has no interface number 0 [ 220.287037][ T5909] usb 6-1: SerialNumber: syz [ 220.294554][ T5937] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 220.309410][ T5909] usb 6-1: config 0 descriptor?? [ 220.314828][ T5937] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 220.325887][ T5937] usb 5-1: config 0 interface 41 has no altsetting 0 [ 220.336822][ T5909] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 220.346569][ T5937] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 220.358772][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.367395][ T5937] usb 5-1: Product: syz [ 220.371903][ T5937] usb 5-1: Manufacturer: syz [ 220.376643][ T5937] usb 5-1: SerialNumber: syz [ 220.384435][ T5937] usb 5-1: config 0 descriptor?? [ 220.390902][T10204] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 220.411004][T10204] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 220.591380][ T980] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 220.616958][ T980] usb 2-1: USB disconnect, device number 27 [ 220.650033][T10204] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 220.657884][T10204] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 221.164207][ T5909] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input34 [ 221.408234][ T980] usb 6-1: USB disconnect, device number 7 [ 221.535038][ T5937] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 221.557292][ T5937] usb 5-1: USB disconnect, device number 22 [ 221.744573][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1773'. [ 221.851013][T10250] netlink: 'syz.2.1775': attribute type 12 has an invalid length. [ 221.862787][ T43] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 222.014478][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.027611][ T43] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 222.037416][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.052010][ T43] usb 2-1: config 0 descriptor?? [ 222.052605][ T980] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 222.172241][ T5909] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 222.243202][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 222.346828][ T980] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 222.358608][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 222.378338][ T5909] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 222.389217][ T980] usb 4-1: config 0 has no interface number 0 [ 222.390350][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 222.411817][ T5909] usb 3-1: config 0 has no interface number 0 [ 222.418371][ T980] usb 4-1: config 0 interface 184 has no altsetting 0 [ 222.423146][ T43] usb 2-1: USB disconnect, device number 28 [ 222.431080][ T980] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 222.441246][ T5909] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 222.464573][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.475000][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.475388][ T5909] usb 3-1: Product: syz [ 222.488645][ T5909] usb 3-1: Manufacturer: syz [ 222.493034][ T980] usb 4-1: Product: syz [ 222.493380][ T5909] usb 3-1: SerialNumber: syz [ 222.502104][ T980] usb 4-1: Manufacturer: syz [ 222.510091][ T980] usb 4-1: SerialNumber: syz [ 222.541165][ T5909] usb 3-1: config 0 descriptor?? [ 222.547969][ T980] usb 4-1: config 0 descriptor?? [ 222.588867][ T980] smsc75xx v1.0.0 [ 223.081412][T10277] netlink: 'syz.4.1786': attribute type 12 has an invalid length. [ 223.097065][T10277] netlink: 'syz.4.1786': attribute type 29 has an invalid length. [ 223.105180][T10277] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1786'. [ 223.114448][T10277] netlink: 'syz.4.1786': attribute type 2 has an invalid length. [ 223.122376][T10277] netlink: 23 bytes leftover after parsing attributes in process `syz.4.1786'. [ 223.133440][T10277] netlink: 'syz.4.1786': attribute type 12 has an invalid length. [ 223.141281][T10277] netlink: 'syz.4.1786': attribute type 29 has an invalid length. [ 223.149382][T10277] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1786'. [ 223.162278][T10277] netlink: 'syz.4.1786': attribute type 2 has an invalid length. [ 223.170679][T10277] netlink: 23 bytes leftover after parsing attributes in process `syz.4.1786'. [ 223.190060][T10279] input: syz0 as /devices/virtual/input/input35 [ 223.262346][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 223.425257][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 223.445682][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.459936][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.470593][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 223.492316][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 223.502341][ T24] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 223.510454][ T24] usb 2-1: Manufacturer: syz [ 223.519133][ T24] usb 2-1: config 0 descriptor?? [ 223.537191][ T30] audit: type=1400 audit(1754611999.978:724): avc: denied { ioctl } for pid=10291 comm="syz.5.1793" path="socket:[32056]" dev="sockfs" ino=32056 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 223.575353][ T980] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 223.587029][ T980] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 223.615282][ T980] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 223.616811][ T30] audit: type=1400 audit(1754612000.058:725): avc: denied { write } for pid=10295 comm="syz.5.1794" name="file0" dev="tmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 223.648688][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.648754][ T980] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 223.648777][ T980] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 223.648805][ T980] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 223.649058][ T980] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 223.695069][ T5909] usb 3-1: non-Atmel transceiver xxxxe6de [ 223.710047][ T980] usb 4-1: USB disconnect, device number 18 [ 223.725183][ T30] audit: type=1400 audit(1754612000.098:726): avc: denied { open } for pid=10295 comm="syz.5.1794" path="/220/file0" dev="tmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 223.753198][ T30] audit: type=1400 audit(1754612000.098:727): avc: denied { ioctl } for pid=10295 comm="syz.5.1794" path="/220/file0" dev="tmpfs" ino=1139 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 223.775417][T10298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1795'. [ 223.910136][ T5909] usb 3-1: Firmware version (0.0) predates our first public release. [ 223.923072][ T5909] usb 3-1: Please update to version 0.2 or newer [ 223.932680][ T5909] usb 3-1: atusb_probe: initialization failed, error = -19 [ 223.943653][ T24] appleir 0003:05AC:8243.001D: unknown main item tag 0x0 [ 223.982863][ T5909] usb 3-1: USB disconnect, device number 29 [ 223.991311][ T24] appleir 0003:05AC:8243.001D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 224.011949][ T30] audit: type=1400 audit(1754612000.448:728): avc: denied { mounton } for pid=10305 comm="syz.4.1799" path="/proc/833/task" dev="proc" ino=31086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 224.034579][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.226840][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1805'. [ 224.254182][ T5909] usb 2-1: USB disconnect, device number 29 [ 224.281122][ T1146] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.281240][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1805'. [ 224.292813][ T1146] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.316295][ T1146] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.325928][ T1146] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.455914][ T30] audit: type=1400 audit(1754612000.898:729): avc: denied { lock } for pid=10326 comm="syz.4.1808" path="socket:[31130]" dev="sockfs" ino=31130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 224.479783][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.482417][ T5910] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 224.647757][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 224.657464][ T5910] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 224.666660][ T5910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.682571][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.696442][ T5910] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.706439][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.723006][ T5910] usb 4-1: Product: syz [ 224.727944][ T5910] usb 4-1: Manufacturer: syz [ 224.735023][ T5910] usb 4-1: SerialNumber: syz [ 224.983573][ T30] audit: type=1400 audit(1754612001.428:730): avc: denied { watch watch_reads } for pid=10344 comm="syz.1.1815" path="/341/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 225.034324][ T2959] Bluetooth: hci5: Frame reassembly failed (-84) [ 225.087463][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'. [ 225.100409][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'. [ 225.161326][ T5910] usb 4-1: 0:2 : does not exist [ 225.524312][T10366] loop8: detected capacity change from 0 to 79 [ 225.589008][T10366] loop8: detected capacity change from 79 to 78 [ 225.779793][ T5910] usb 4-1: USB disconnect, device number 19 [ 225.976921][ T30] audit: type=1400 audit(1754612002.418:731): avc: denied { read } for pid=10378 comm="syz.4.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 225.996151][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.702200][ T30] audit: type=1400 audit(1754612003.108:732): avc: denied { ioctl } for pid=10409 comm="syz.3.1844" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 226.776139][T10414] input: syz0 as /devices/virtual/input/input36 [ 227.032514][ T5870] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 227.193599][ T980] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 227.354589][ T980] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.387998][ T980] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.422225][ T980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 227.442371][ T980] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 227.465300][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.494766][ T980] usb 5-1: config 0 descriptor?? [ 227.526314][T10448] bridge1: entered allmulticast mode [ 227.607157][T10451] input: syz0 as /devices/virtual/input/input37 [ 227.666237][T10454] overlayfs: invalid origin (0000) [ 228.124218][ T980] usb 5-1: string descriptor 0 read error: -22 [ 228.270337][ T30] audit: type=1400 audit(1754612004.708:733): avc: denied { connect } for pid=10477 comm="syz.2.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 228.533413][ T980] uclogic 0003:256C:006D.001E: failed retrieving string descriptor #100: -71 [ 228.549983][ T980] uclogic 0003:256C:006D.001E: failed retrieving pen parameters: -71 [ 228.564349][ T980] uclogic 0003:256C:006D.001E: failed probing pen v1 parameters: -71 [ 228.575685][ T980] uclogic 0003:256C:006D.001E: failed probing parameters: -71 [ 228.585430][ T980] uclogic 0003:256C:006D.001E: probe with driver uclogic failed with error -71 [ 228.603019][ T980] usb 5-1: USB disconnect, device number 23 [ 228.704603][T10493] syz_tun: entered promiscuous mode [ 228.736163][T10493] syz_tun: left promiscuous mode [ 229.583780][ T43] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 229.793951][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.873325][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 229.908577][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 229.944761][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.984791][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.035056][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.051228][ T30] audit: type=1400 audit(1754612006.488:734): avc: denied { name_connect } for pid=10534 comm="syz.4.1895" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 230.092240][ T43] usb 3-1: config 0 descriptor?? [ 230.101023][T10518] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.291196][ T30] audit: type=1400 audit(1754612006.728:735): avc: denied { accept } for pid=10544 comm="syz.3.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 230.421035][ T30] audit: type=1400 audit(1754612006.858:736): avc: denied { mounton } for pid=10550 comm="syz.3.1903" path="/382/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 230.431888][T10551] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 230.482320][ T5909] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 230.499334][ T30] audit: type=1400 audit(1754612006.938:737): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 230.519675][ T980] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 230.568532][ T43] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 230.635291][ T5909] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.646256][ T5909] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.656996][ T5909] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 230.666888][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 230.674982][ T5909] usb 2-1: SerialNumber: syz [ 230.686925][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.700143][ T980] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 230.719014][ T980] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.729157][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.739568][ T30] audit: type=1400 audit(1754612007.168:738): avc: denied { map } for pid=10559 comm="syz.3.1907" path="socket:[31684]" dev="sockfs" ino=31684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 230.763219][ T980] usb 5-1: Product: syz [ 230.767402][ T980] usb 5-1: Manufacturer: syz [ 230.782342][ T980] usb 5-1: SerialNumber: syz [ 230.929182][ T5909] usb 2-1: 0:2 : does not exist [ 230.968471][ T5909] usb 2-1: USB disconnect, device number 30 [ 231.442225][ T5909] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 231.497126][T10579] netlink: 'syz.1.1914': attribute type 13 has an invalid length. [ 231.592986][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 231.608073][ T5909] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 231.618882][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.636360][ T5909] usb 4-1: Product: syz [ 231.640551][ T5909] usb 4-1: Manufacturer: syz [ 231.646910][ T5909] usb 4-1: SerialNumber: syz [ 231.653777][ T5909] usb 4-1: config 0 descriptor?? [ 231.661100][ T5909] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 231.870738][ T980] cdc_ncm 5-1:1.0: bind() failure [ 231.887738][ T980] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 231.905127][ T980] usb 5-1: USB disconnect, device number 24 [ 232.482472][ T980] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 232.598194][T10595] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1921'. [ 232.668830][ T980] usb 6-1: Using ep0 maxpacket: 32 [ 232.676810][ T980] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 232.693341][ T980] usb 6-1: config 0 has no interface number 0 [ 232.754867][ T43] usb 3-1: USB disconnect, device number 30 [ 232.772661][ T980] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 232.793660][ T980] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 232.803139][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.816992][ T980] usb 6-1: Product: syz [ 232.822219][ T980] usb 6-1: Manufacturer: syz [ 232.826822][ T980] usb 6-1: SerialNumber: syz [ 232.836497][ T980] usb 6-1: config 0 descriptor?? [ 232.845971][ T980] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 232.855930][ T980] em28xx 6-1:0.132: Video interface 132 found: [ 232.871694][ T5909] gspca_sonixj: reg_w1 err -71 [ 232.954130][ T5909] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 232.975195][ T5909] usb 4-1: USB disconnect, device number 20 [ 233.255067][ T980] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 233.412319][ T5909] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 233.578006][ T5909] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 233.597058][ T5909] usb 5-1: config 0 has no interface number 0 [ 233.614345][ T5909] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 233.629796][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.639193][ T5909] usb 5-1: Product: syz [ 233.647313][ T5909] usb 5-1: Manufacturer: syz [ 233.652105][ T5909] usb 5-1: SerialNumber: syz [ 233.666942][ T5909] usb 5-1: config 0 descriptor?? [ 233.689164][ T5909] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 233.705628][ T5909] ems_usb 5-1:0.204: probe with driver ems_usb failed with error -22 [ 233.866948][ T980] em28xx 6-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 233.893228][ T980] em28xx 6-1:0.132: failed to read eeprom (err=-5) [ 233.901366][ T980] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 233.925082][ T30] audit: type=1400 audit(1754612010.368:739): avc: denied { create } for pid=10642 comm="syz.3.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 233.947533][ T43] usb 5-1: USB disconnect, device number 25 [ 233.972331][ T980] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 233.980314][ T30] audit: type=1400 audit(1754612010.418:740): avc: denied { write } for pid=10642 comm="syz.3.1940" path="socket:[34035]" dev="sockfs" ino=34035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 234.004293][ T980] em28xx 6-1:0.132: analog set to bulk mode. [ 234.010334][ T5910] em28xx 6-1:0.132: Registering V4L2 extension [ 234.018810][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 234.028904][ T980] usb 6-1: USB disconnect, device number 8 [ 234.038809][ T980] em28xx 6-1:0.132: Disconnecting em28xx [ 234.147559][ T5910] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 234.155633][ T5910] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 234.166542][ T5910] em28xx 6-1:0.132: No AC97 audio processor [ 234.178218][ T5910] usb 6-1: Decoder not found [ 234.183120][ T5910] em28xx 6-1:0.132: failed to create media graph [ 234.189491][ T5910] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 234.196370][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 234.205654][ T5910] em28xx 6-1:0.132: Remote control support is not available for this card. [ 234.209373][T10649] netlink: 'syz.1.1941': attribute type 1 has an invalid length. [ 234.214566][ T980] em28xx 6-1:0.132: Closing input extension [ 234.227517][T10649] netlink: 'syz.1.1941': attribute type 4 has an invalid length. [ 234.231643][ T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 234.237356][T10649] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1941'. [ 234.260111][ T980] em28xx 6-1:0.132: Freeing device [ 234.265664][ T10] usb 3-1: config 0 has no interface number 0 [ 234.271787][ T10] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 234.285416][ T10] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 234.296205][ T10] usb 3-1: config 0 interface 41 has no altsetting 0 [ 234.305469][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 234.314971][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.323410][ T10] usb 3-1: Product: syz [ 234.327595][ T10] usb 3-1: Manufacturer: syz [ 234.332557][ T10] usb 3-1: SerialNumber: syz [ 234.339513][ T10] usb 3-1: config 0 descriptor?? [ 234.346624][T10637] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 234.354503][T10637] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 234.570986][T10637] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 234.578422][T10637] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 234.582399][T10659] netlink: 'syz.5.1945': attribute type 13 has an invalid length. [ 234.595792][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1945'. [ 234.621173][ T1329] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.629893][T10659] netlink: 'syz.5.1945': attribute type 13 has an invalid length. [ 234.629917][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1945'. [ 234.648709][ T1329] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.661391][ T1329] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.677096][ T1329] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.808579][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1948'. [ 234.825387][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1948'. [ 234.836728][T10670] netlink: 'syz.3.1948': attribute type 6 has an invalid length. [ 234.851811][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.851911][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1948'. [ 234.861177][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.878636][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.878691][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1948'. [ 234.888032][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.899400][T10670] netlink: 'syz.3.1948': attribute type 6 has an invalid length. [ 235.201124][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 235.416757][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 235.428645][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 235.442518][ T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 235.446747][T10688] No control pipe specified [ 235.455293][ T10] usb 3-1: USB disconnect, device number 31 [ 235.468526][T10688] overlayfs: missing 'lowerdir' [ 235.655790][ T30] audit: type=1400 audit(1754612012.098:741): avc: denied { execute } for pid=10693 comm="syz.4.1959" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 235.679107][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.679119][ T5910] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 235.742459][T10694] loop6: detected capacity change from 0 to 524287999 [ 235.822302][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 235.830410][ T5910] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 235.844781][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 235.852916][ T5910] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 235.862094][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.870429][ T980] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 235.880213][ T5910] usb 2-1: config 0 descriptor?? [ 235.989164][ T1146] Bluetooth: hci5: Frame reassembly failed (-84) [ 236.038576][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.060123][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.066940][ T30] audit: type=1400 audit(1754612012.498:742): avc: denied { write } for pid=10708 comm="syz.4.1966" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 236.082281][ T980] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 236.105596][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.119319][ T980] usb 6-1: config 0 descriptor?? [ 236.316394][ T5910] corsair-cpro 0003:1B1C:0C10.0020: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 236.541643][ T980] lua 0003:1E7D:2C2E.0021: item fetching failed at offset 4/5 [ 236.549610][ T980] lua 0003:1E7D:2C2E.0021: parse failed [ 236.555373][ T980] lua 0003:1E7D:2C2E.0021: probe with driver lua failed with error -22 [ 236.642253][ T43] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 236.737499][ T5910] corsair-cpro 0003:1B1C:0C10.0020: probe with driver corsair-cpro failed with error -71 [ 236.750785][ T5910] usb 2-1: USB disconnect, device number 31 [ 236.770352][ T5909] usb 6-1: USB disconnect, device number 9 [ 236.798565][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.810795][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.820822][ T43] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 236.829934][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.844470][ T43] usb 5-1: config 0 descriptor?? [ 237.252241][ T5937] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 237.263173][ T43] hid_mf 0003:0079:1846.0022: item fetching failed at offset 10/11 [ 237.271669][ T43] hid_mf 0003:0079:1846.0022: HID parse failed. [ 237.278117][ T43] hid_mf 0003:0079:1846.0022: probe with driver hid_mf failed with error -22 [ 237.412214][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 237.429529][ T5937] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 237.439610][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.447839][ T5937] usb 3-1: Product: syz [ 237.454365][ T5937] usb 3-1: Manufacturer: syz [ 237.459011][ T5937] usb 3-1: SerialNumber: syz [ 237.475994][ T5937] usb 3-1: config 0 descriptor?? [ 237.552828][ T5992] usb 5-1: USB disconnect, device number 26 [ 237.605673][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1976'. [ 237.887972][ T5937] airspy 3-1:0.0: Board ID: 00 [ 237.896571][ T5937] airspy 3-1:0.0: Firmware version: [ 238.002365][ T5870] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 238.230618][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1980'. [ 238.381761][T10741] hsr_slave_1 (unregistering): left promiscuous mode [ 238.691705][ T5937] airspy 3-1:0.0: usb_control_msg() failed -71 request 0f [ 238.715635][ T5937] airspy 3-1:0.0: Registered as swradio24 [ 238.732537][ T5937] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 238.789655][ T5937] usb 3-1: USB disconnect, device number 32 [ 239.202708][ T43] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 239.412207][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 239.419434][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.462313][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 239.475519][T10788] netlink: 'syz.4.2000': attribute type 1 has an invalid length. [ 239.493642][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 239.522210][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.554814][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.596150][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 239.608173][T10788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.615146][ T43] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 239.626226][ T43] usb 2-1: Manufacturer: syz [ 239.633649][ T43] usb 2-1: config 0 descriptor?? [ 239.664671][T10792] bond1: (slave geneve2): making interface the new active one [ 239.674097][T10792] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 239.819134][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'. [ 239.932220][ T43] rc_core: IR keymap rc-hauppauge not found [ 239.944736][ T43] Registered IR keymap rc-empty [ 239.952397][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.982284][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.013231][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 240.040860][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input39 [ 240.102054][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.122340][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.153458][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.173562][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.192789][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.209984][T10822] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2013'. [ 240.219267][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.252791][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.272364][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.292556][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.300046][T10828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2013'. [ 240.312325][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.317963][T10828] nbd: device at index 64 is going down [ 240.334068][ T43] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 240.346753][ T43] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 240.393266][ T980] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 240.406907][ T43] usb 2-1: USB disconnect, device number 32 [ 240.508460][ T30] audit: type=1400 audit(1754612016.938:743): avc: denied { view } for pid=10830 comm="syz.2.2016" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 240.573834][ T980] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 240.588293][ T980] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.620308][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 240.633967][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 240.651233][ T980] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.664331][ T980] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.673427][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.683966][ T980] usb 4-1: config 0 descriptor?? [ 240.689695][T10820] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 240.754369][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 240.932576][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.951229][ T24] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 240.982348][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.992874][ T24] usb 6-1: config 0 descriptor?? [ 241.121171][ T980] plantronics 0003:047F:FFFF.0023: reserved main item tag 0xd [ 241.141950][ T980] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 241.207115][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 241.222275][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 241.243282][ T24] usb 6-1: USB disconnect, device number 10 [ 241.405326][ T980] usb 4-1: USB disconnect, device number 21 [ 241.706102][ T5910] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 241.859404][T10851] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 241.876056][T10851] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 241.924974][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 241.948326][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 241.971518][ T5910] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 241.981689][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.996506][ T5910] usb 6-1: config 0 descriptor?? [ 242.372380][ T980] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 242.435889][ T5910] mcp2221 0003:04D8:00DD.0024: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 242.503151][T10869] kvm: MWAIT instruction emulated as NOP! [ 242.592282][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 242.599005][ T980] usb 2-1: config 0 has no interfaces? [ 242.606158][ T980] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 242.625483][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.648053][ T980] usb 2-1: config 0 descriptor?? [ 242.767417][T10872] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2031'. [ 242.886631][ T980] usb 6-1: USB disconnect, device number 11 [ 242.905820][ T5910] usb 2-1: USB disconnect, device number 33 [ 242.975233][T10874] SELinux: failed to load policy [ 243.784301][T10911] overlayfs: failed lookup in lower (newroot/423, name='file1', err=-40): overlapping layers [ 243.849834][ T30] audit: type=1400 audit(1754612020.288:744): avc: denied { write } for pid=10912 comm="syz.5.2049" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 244.541305][T10956] binder: 10950:10956 ioctl c0306201 200000000c40 returned -22 [ 244.544530][T10951] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2066'. [ 244.685288][ T30] audit: type=1400 audit(1754612021.128:745): avc: denied { mount } for pid=10958 comm="syz.2.2068" name="/" dev="configfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 244.769310][ T30] audit: type=1400 audit(1754612021.128:746): avc: denied { search } for pid=10958 comm="syz.2.2068" name="/" dev="configfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 244.800270][ T30] audit: type=1400 audit(1754612021.128:747): avc: denied { search } for pid=10958 comm="syz.2.2068" name="/" dev="configfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 244.857614][ T30] audit: type=1400 audit(1754612021.128:748): avc: denied { read open } for pid=10958 comm="syz.2.2068" path="/" dev="configfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 244.880041][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.072857][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 245.242274][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 245.256984][ T24] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 245.271577][ T24] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 245.287957][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.299721][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 245.309064][ T24] usb 6-1: config 0 has no interface number 0 [ 245.316024][ T24] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 245.327551][ T24] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 245.338313][ T24] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 245.360304][ T24] usb 6-1: config 0 interface 125 has no altsetting 0 [ 245.371134][ T24] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 245.388168][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.396671][ T24] usb 6-1: Product: syz [ 245.400952][ T24] usb 6-1: Manufacturer: syz [ 245.412794][ T30] audit: type=1400 audit(1754612021.848:749): avc: denied { audit_write } for pid=10980 comm="syz.1.2077" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 245.439970][ T24] usb 6-1: SerialNumber: syz [ 245.447999][ T24] usb 6-1: config 0 descriptor?? [ 245.490952][ T30] audit: type=1400 audit(1754612021.928:750): avc: denied { watch watch_reads } for pid=10980 comm="syz.1.2077" path="/proc/886/net" dev="proc" ino=34884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 245.514591][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.608597][ T30] audit: type=1400 audit(1754612022.048:751): avc: denied { getopt } for pid=10986 comm="syz.4.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 245.628246][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.700140][ T5910] usb 6-1: USB disconnect, device number 12 [ 245.835108][ T24] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 245.962308][ T980] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 246.012439][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 246.023340][ T24] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 246.032914][ T24] usb 2-1: config 0 has no interface number 0 [ 246.039246][ T24] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 246.054449][ T30] audit: type=1400 audit(1754612022.488:752): avc: denied { write } for pid=11006 comm="syz.2.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 246.056795][ T24] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 246.083649][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.091803][ T24] usb 2-1: Product: syz [ 246.097024][ T24] usb 2-1: Manufacturer: syz [ 246.103016][ T24] usb 2-1: SerialNumber: syz [ 246.122422][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 246.124713][ T24] usb 2-1: config 0 descriptor?? [ 246.131748][ T980] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 246.144727][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.152956][T11007] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 246.166975][T11007] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 246.175740][ T980] usb 5-1: config 0 descriptor?? [ 246.196029][ T980] usb 5-1: invalid MIDI EP [ 246.203441][ T980] usb 5-1: snd-bcd2000: error during probing [ 246.221905][ T980] snd-bcd2000 5-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 246.359553][ T24] usbtouchscreen 2-1:0.214: Failed to read FW rev: -32 [ 246.433961][ T24] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 246.459592][ T30] audit: type=1326 audit(1754612022.898:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc836b8ebe9 code=0x7fc00000 [ 246.486572][ T5909] usb 5-1: USB disconnect, device number 27 [ 246.570948][ T24] usb 2-1: USB disconnect, device number 34 [ 247.904476][T11058] input: syz1 as /devices/virtual/input/input42 [ 248.274642][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2114'. [ 248.423475][ T2959] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 248.590130][T11099] loop6: detected capacity change from 0 to 7 [ 248.598077][T11099] Dev loop6: unable to read RDB block 7 [ 248.604914][T11099] loop6: unable to read partition table [ 248.610805][T11099] loop6: partition table beyond EOD, truncated [ 248.617039][T11099] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 249.171168][T11101] binder: 11100:11101 ioctl c0306201 2000000001c0 returned -14 [ 249.293425][T11103] input: syz1 as /devices/virtual/input/input43 [ 249.299696][T11107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.409560][T11115] loop3: detected capacity change from 0 to 1 [ 249.418249][T11115] Dev loop3: unable to read RDB block 1 [ 249.428427][T11115] loop3: unable to read partition table [ 249.435913][T11115] loop3: partition table beyond EOD, truncated [ 249.445115][T11115] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 249.555039][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2136'. [ 249.802518][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 249.872526][ T5909] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 249.952355][ T980] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 249.972506][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 249.979296][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 249.998110][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.027518][ T10] usb 2-1: config 0 descriptor?? [ 250.043318][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 250.049523][ T5909] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 250.061566][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.082833][ T5909] usb 4-1: Product: syz [ 250.087168][ T5909] usb 4-1: Manufacturer: syz [ 250.091824][ T5909] usb 4-1: SerialNumber: syz [ 250.112693][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 250.116783][ T5909] usb 4-1: config 0 descriptor?? [ 250.136619][ T980] usb 3-1: unable to get BOS descriptor or descriptor too short [ 250.141670][ T5909] ch341 4-1:0.0: ch341-uart converter detected [ 250.145680][ T980] usb 3-1: config 0 has no interfaces? [ 250.174823][ T980] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.192255][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.210363][ T980] usb 3-1: Product: syz [ 250.217712][ T980] usb 3-1: Manufacturer: syz [ 250.225320][ T980] usb 3-1: SerialNumber: syz [ 250.237004][ T980] usb 3-1: config 0 descriptor?? [ 250.389666][T11165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.423126][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 250.467421][T11137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.476613][T11137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.488151][ T980] usb 3-1: USB disconnect, device number 33 [ 250.592664][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 250.599698][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.612578][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.625841][ T24] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 250.642755][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.654383][ T24] usb 5-1: config 0 descriptor?? [ 250.942289][ T5937] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 251.069213][ T24] hid-rmi 0003:06CB:81A7.0025: unknown main item tag 0x0 [ 251.076673][ T24] hid-rmi 0003:06CB:81A7.0025: unknown main item tag 0x0 [ 251.084812][ T24] hid-rmi 0003:06CB:81A7.0025: unknown main item tag 0x0 [ 251.091862][ T24] hid-rmi 0003:06CB:81A7.0025: unknown main item tag 0x0 [ 251.099115][ T24] hid-rmi 0003:06CB:81A7.0025: unknown main item tag 0x0 [ 251.107402][ T24] hid-rmi 0003:06CB:81A7.0025: unknown main item tag 0x0 [ 251.114609][ T24] hid-rmi 0003:06CB:81A7.0025: unknown main item tag 0x0 [ 251.121969][ T24] hid-rmi 0003:06CB:81A7.0025: unknown main item tag 0x0 [ 251.129930][ T24] hid-rmi 0003:06CB:81A7.0025: unknown main item tag 0x0 [ 251.137123][ T24] hid-rmi 0003:06CB:81A7.0025: unknown main item tag 0x0 [ 251.144659][ T5937] usb 3-1: config index 0 descriptor too short (expected 159, got 149) [ 251.155481][ T5937] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.166069][ T24] hid-rmi 0003:06CB:81A7.0025: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 251.180607][ T5937] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.191572][ T5937] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 1.40 [ 251.201258][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.209541][ T5937] usb 3-1: Product: syz [ 251.213940][ T5937] usb 3-1: Manufacturer: syz [ 251.218553][ T5937] usb 3-1: SerialNumber: syz [ 251.289378][ T24] usb 5-1: USB disconnect, device number 28 [ 251.292566][ T10] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 251.301552][ T10] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 251.316584][ T10] usb 2-1: USB disconnect, device number 35 [ 251.366812][ T5909] ch341-uart ttyUSB0: failed to read break control: -71 [ 251.374429][ T5909] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 251.384893][ T5909] usb 4-1: USB disconnect, device number 22 [ 251.391609][ T5909] ch341 4-1:0.0: device disconnected [ 251.861423][ T5937] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 251.881618][ T5937] usb 3-1: Warning! Unlikely big volume range (=29101), cval->res is probably wrong. [ 251.895883][ T5967] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 251.904125][ T5937] usb 3-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = -29101/0/1 [ 251.915568][T11186] input: syz0 as /devices/virtual/input/input44 [ 251.926691][ T5937] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 251.938199][T11186] input: failed to attach handler leds to device input44, error: -6 [ 251.946204][ T5937] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 251.984034][ T5937] usb 3-1: 5:0: cannot get min/max values for control 8 (id 5) [ 252.027035][ T5937] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 252.049208][ T5937] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 252.061227][ T5937] usb 3-1: USB disconnect, device number 34 [ 252.069440][ T5967] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 252.092532][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.118593][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.130580][ T5967] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 252.158490][ T5967] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 252.172225][ T5967] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 252.183777][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 252.190536][ T5967] usb 6-1: Manufacturer: syz [ 252.208176][ T5967] usb 6-1: config 0 descriptor?? [ 252.354685][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 252.363752][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 252.376037][ T10] usb 2-1: config 0 has no interface number 0 [ 252.382502][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 252.398252][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 252.410238][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 252.430614][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 252.453015][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 252.465440][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.489118][ T10] usb 2-1: config 0 descriptor?? [ 252.513065][T11203] veth0: entered promiscuous mode [ 252.514725][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 252.534471][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2170'. [ 252.717671][ T5967] appleir 0003:05AC:8243.0026: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 253.165433][ T5967] usb 2-1: USB disconnect, device number 36 [ 253.227753][ T5967] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 254.692255][ T5967] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 254.711610][ T5909] usb 6-1: USB disconnect, device number 13 [ 254.872859][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.892327][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.925539][ T5967] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 254.951070][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.982639][ T5967] usb 5-1: config 0 descriptor?? [ 255.220437][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 255.220452][ T30] audit: type=1400 audit(1754612031.658:756): avc: denied { name_bind } for pid=11276 comm="syz.3.2203" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 255.519805][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.520523][ T5909] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 255.528260][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.589729][ T30] audit: type=1400 audit(1754612032.028:757): avc: denied { ioctl } for pid=11292 comm="syz.2.2210" path="socket:[35668]" dev="sockfs" ino=35668 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 255.615311][ T30] audit: type=1400 audit(1754612032.028:758): avc: denied { bind } for pid=11292 comm="syz.2.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 255.640542][ T5937] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 255.714383][ T5909] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 255.731854][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.755761][ T5909] usb 4-1: config 0 descriptor?? [ 255.802242][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 255.811633][ T5937] usb 6-1: config 0 has no interfaces? [ 255.820196][ T5937] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 255.830300][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.851038][ T5937] usb 6-1: config 0 descriptor?? [ 256.070681][ T24] usb 6-1: USB disconnect, device number 14 [ 256.260303][ T5967] uclogic 0003:256C:006D.0027: failed retrieving string descriptor #100: -71 [ 256.269911][ T5967] uclogic 0003:256C:006D.0027: failed retrieving pen parameters: -71 [ 256.282370][ T5967] uclogic 0003:256C:006D.0027: failed probing pen v1 parameters: -71 [ 256.290518][ T5967] uclogic 0003:256C:006D.0027: failed probing parameters: -71 [ 256.302861][ T5967] uclogic 0003:256C:006D.0027: probe with driver uclogic failed with error -71 [ 256.315418][ T5967] usb 5-1: USB disconnect, device number 29 [ 256.990342][ T5909] pegasus 4-1:0.0: can't reset MAC [ 256.996101][ T5909] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 257.030598][ T5909] usb 4-1: USB disconnect, device number 23 [ 257.169065][T11336] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2228'. [ 257.212832][ T24] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 257.309643][T11342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2231'. [ 257.384347][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.398201][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.411732][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 257.424295][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.638587][ T24] usb 6-1: usb_control_msg returned -32 [ 257.644441][ T24] usbtmc 6-1:16.0: can't read capabilities [ 258.064054][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 258.234587][ T24] usb 4-1: config 0 has an invalid interface number: 204 but max is 0 [ 258.243121][ T24] usb 4-1: config 0 has no interface number 0 [ 258.251566][ T24] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 258.260993][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.269087][ T24] usb 4-1: Product: syz [ 258.273316][ T24] usb 4-1: Manufacturer: syz [ 258.277919][ T24] usb 4-1: SerialNumber: syz [ 258.285235][ T24] usb 4-1: config 0 descriptor?? [ 258.291985][ T24] ems_usb 4-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 258.302808][ T24] ems_usb 4-1:0.204: probe with driver ems_usb failed with error -22 [ 258.543847][ T10] usb 4-1: USB disconnect, device number 24 [ 258.594507][ T30] audit: type=1400 audit(1754612035.038:759): avc: denied { read } for pid=11382 comm="syz.2.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 259.379108][T11429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2266'. [ 259.962378][ T24] usb 6-1: USB disconnect, device number 15 [ 260.157829][ T30] audit: type=1400 audit(1754612036.588:760): avc: denied { map } for pid=11460 comm="syz.5.2281" path="/dev/sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 260.532287][ T5910] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 260.695167][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.716697][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.739020][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.782458][ T5910] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.801851][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.814029][ T5910] usb 6-1: config 0 descriptor?? [ 260.872040][T11491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.874371][T11493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2294'. [ 260.939262][T11493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.997818][T11496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.050546][T11496] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 261.062976][T11496] bond1: (slave vcan1): Error -95 calling set_mac_address [ 261.166883][T11503] syzkaller1: entered promiscuous mode [ 261.173632][T11503] syzkaller1: entered allmulticast mode [ 261.238326][ T5910] plantronics 0003:047F:FFFF.0028: ignoring exceeding usage max [ 261.286908][ T5910] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 261.419666][T11515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.555252][ T10] usb 6-1: USB disconnect, device number 16 [ 261.759536][ T5967] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 261.922482][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 261.929542][ T5967] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 261.937970][ T5967] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 261.946655][ T5967] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 261.955732][ T5967] usb 5-1: config 1 has no interface number 0 [ 261.961841][ T5967] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.972912][ T5967] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 261.986235][ T5967] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 261.995432][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.008932][ T5967] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 262.211693][ T5967] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 262.409374][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 262.424259][ T5909] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 262.588359][T11549] netlink: 'syz.1.2319': attribute type 1 has an invalid length. [ 262.599500][T11549] netlink: 'syz.1.2319': attribute type 2 has an invalid length. [ 262.624812][ T5909] usb 6-1: Using ep0 maxpacket: 8 [ 262.634986][ T5909] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 262.662427][ T5909] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 262.672979][ T24] usb 5-1: USB disconnect, device number 30 [ 262.689177][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 262.697714][ T5909] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 262.709510][ T5909] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.730439][ T5909] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 262.739782][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.755728][ T5909] usb 6-1: Product: syz [ 262.760293][ T5909] usb 6-1: Manufacturer: syz [ 262.768705][ T5909] usb 6-1: SerialNumber: syz [ 262.777555][T11532] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 262.799396][ T5909] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 262.817362][ T5909] usbtest 6-1:1.0: Linux user mode ISO test driver [ 262.824785][ T5909] usbtest 6-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 263.045031][ T5909] usb 6-1: USB disconnect, device number 17 [ 263.479992][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2329'. [ 263.573973][T11555] syz.1.2323: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 263.600566][T11555] CPU: 0 UID: 0 PID: 11555 Comm: syz.1.2323 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 263.600596][T11555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.600607][T11555] Call Trace: [ 263.600614][T11555] [ 263.600621][T11555] dump_stack_lvl+0x16c/0x1f0 [ 263.600657][T11555] warn_alloc+0x248/0x3a0 [ 263.600680][T11555] ? __pfx_warn_alloc+0x10/0x10 [ 263.600712][T11555] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 263.600735][T11555] ? __vmalloc_node_noprof+0xad/0xf0 [ 263.600769][T11555] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 263.600807][T11555] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 263.600837][T11555] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 263.600876][T11555] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 263.600899][T11555] vmalloc_user_noprof+0x9e/0xe0 [ 263.600927][T11555] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 263.600950][T11555] vb2_vmalloc_alloc+0x135/0x3f0 [ 263.600975][T11555] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 263.600998][T11555] __vb2_queue_alloc+0x8c9/0x1280 [ 263.601035][T11555] vb2_core_reqbufs+0xa90/0xfe0 [ 263.601065][T11555] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 263.601087][T11555] ? __pfx___might_resched+0x10/0x10 [ 263.601119][T11555] ? __mutex_lock+0x1c4/0x10b0 [ 263.601142][T11555] ? avc_has_extended_perms+0x47c/0x1090 [ 263.601177][T11555] vb2_reqbufs+0x1a3/0x1f0 [ 263.601195][T11555] ? __pfx_vb2_reqbufs+0x10/0x10 [ 263.601243][T11555] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 263.601271][T11555] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 263.601294][T11555] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 263.601316][T11555] v4l_reqbufs+0x152/0x1e0 [ 263.601343][T11555] __video_do_ioctl+0xb40/0xfc0 [ 263.601373][T11555] ? __might_fault+0xe3/0x190 [ 263.601392][T11555] ? __pfx___video_do_ioctl+0x10/0x10 [ 263.601427][T11555] video_usercopy+0x4d0/0x1720 [ 263.601454][T11555] ? __pfx___video_do_ioctl+0x10/0x10 [ 263.601479][T11555] ? selinux_kernel_read_file+0xc0/0x130 [ 263.601503][T11555] ? __pfx_video_usercopy+0x10/0x10 [ 263.601550][T11555] v4l2_ioctl+0x1bd/0x250 [ 263.601578][T11555] ? __pfx_v4l2_ioctl+0x10/0x10 [ 263.601605][T11555] __x64_sys_ioctl+0x18e/0x210 [ 263.601636][T11555] do_syscall_64+0xcd/0x4c0 [ 263.601657][T11555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.601677][T11555] RIP: 0033:0x7f905b98ebe9 [ 263.601694][T11555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.601712][T11555] RSP: 002b:00007f905c7a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.601731][T11555] RAX: ffffffffffffffda RBX: 00007f905bbb5fa0 RCX: 00007f905b98ebe9 [ 263.601744][T11555] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 263.601756][T11555] RBP: 00007f905ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 263.601767][T11555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.601779][T11555] R13: 00007f905bbb6038 R14: 00007f905bbb5fa0 R15: 00007ffd765a7a18 [ 263.601808][T11555] [ 263.601882][T11555] Mem-Info: [ 263.902112][T11555] active_anon:26898 inactive_anon:0 isolated_anon:0 [ 263.902112][T11555] active_file:10864 inactive_file:50897 isolated_file:0 [ 263.902112][T11555] unevictable:768 dirty:460 writeback:0 [ 263.902112][T11555] slab_reclaimable:12846 slab_unreclaimable:126997 [ 263.902112][T11555] mapped:29375 shmem:22881 pagetables:1180 [ 263.902112][T11555] sec_pagetables:0 bounce:0 [ 263.902112][T11555] kernel_misc_reclaimable:0 [ 263.902112][T11555] free:1214057 free_pcp:19282 free_cma:0 [ 263.948471][ T30] audit: type=1400 audit(1754612040.348:761): avc: denied { write } for pid=11584 comm="syz.4.2334" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 263.971732][T11555] Node 0 active_anon:107656kB inactive_anon:0kB active_file:43404kB inactive_file:203384kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117460kB dirty:1828kB writeback:0kB shmem:89988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11708kB pagetables:4744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 264.008511][T11555] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 264.046832][T11555] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 264.076716][T11555] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 264.082926][T11555] Node 0 DMA32 free:958672kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:107440kB inactive_anon:0kB active_file:43404kB inactive_file:202060kB unevictable:1536kB writepending:1828kB present:3129332kB managed:2539444kB mlocked:0kB bounce:0kB free_pcp:49020kB local_pcp:26224kB free_cma:0kB [ 264.120201][T11590] overlayfs: failed to verify upper (483/file0, ino=2521, err=-116) [ 264.134425][T11590] overlayfs: failed to verify index dir 'upper' xattr [ 264.141967][T11590] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 264.157603][T11555] lowmem_reserve[]: 0 0 1 1 1 [ 264.163203][T11555] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 264.198845][T11555] lowmem_reserve[]: 0 0 0 0 0 [ 264.203761][T11555] Node 1 Normal free:3882132kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:204kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:28564kB local_pcp:6700kB free_cma:0kB [ 264.235089][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.254466][T11555] lowmem_reserve[]: 0 0 0 0 0 [ 264.259278][T11555] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 264.277232][T11555] Node 0 DMA32: 511*4kB (UME) 270*8kB (UME) 179*16kB (UME) 264*32kB (UM) 254*64kB (ME) 59*128kB (ME) 23*256kB (UME) 15*512kB (M) 3*1024kB (UME) 9*2048kB (UME) 216*4096kB (M) = 959132kB [ 264.303862][T11555] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 264.323291][T11555] Node 1 Normal: 5*4kB (UME) 30*8kB (UME) 39*16kB (UME) 109*32kB (UME) 34*64kB (UME) 14*128kB (UME) 2*256kB (ME) 1*512kB (M) 2*1024kB (UE) 2*2048kB (ME) 944*4096kB (M) = 3882132kB [ 264.361585][T11555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 264.378502][T11555] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 264.399605][T11555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 264.428252][T11600] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2341'. [ 264.459050][T11555] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 264.500565][T11555] 84639 total pagecache pages [ 264.505343][T11555] 0 pages in swap cache [ 264.509487][T11555] Free swap = 124996kB [ 264.524469][T11555] Total swap = 124996kB [ 264.528681][T11555] 2097051 pages RAM [ 264.544401][T11555] 0 pages HighMem/MovableOnly [ 264.550875][T11555] 430228 pages reserved [ 264.555168][T11555] 0 pages cma reserved [ 264.681671][T11614] kernel read not supported for file /!sel (pid: 11614 comm: syz.4.2348) [ 264.722606][ T30] audit: type=1800 audit(1754612041.158:762): pid=11614 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2348" name="!sel" dev="mqueue" ino=38739 res=0 errno=0 [ 264.743574][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.973736][ T30] audit: type=1400 audit(1754612041.418:763): avc: denied { create } for pid=11626 comm="syz.2.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 264.994366][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.028102][ T30] audit: type=1400 audit(1754612041.448:764): avc: denied { bind } for pid=11626 comm="syz.2.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 265.102498][ T5910] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 265.245355][T11635] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 265.254014][ T5910] usb 6-1: Using ep0 maxpacket: 8 [ 265.255644][ T5910] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 265.289667][ T5910] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 265.309940][ T5910] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.330196][ T5910] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.365035][ T5910] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 265.386642][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.585589][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2363'. [ 265.622491][ T5910] usb 6-1: GET_CAPABILITIES returned 0 [ 265.629613][ T5910] usbtmc 6-1:16.0: can't read capabilities [ 265.748350][T11659] netlink: 'syz.4.2366': attribute type 39 has an invalid length. [ 265.773561][T11663] netlink: 'syz.1.2367': attribute type 1 has an invalid length. [ 265.784857][T11663] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2367'. [ 265.873288][ T10] usb 6-1: USB disconnect, device number 18 [ 266.503862][ T30] audit: type=1400 audit(1754612042.948:765): avc: denied { mounton } for pid=11688 comm="syz.1.2377" path="/435/file0" dev="autofs" ino=38806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 266.526742][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.556059][ T30] audit: type=1400 audit(1754612042.998:766): avc: denied { bind } for pid=11690 comm="syz.2.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.602596][ T30] audit: type=1400 audit(1754612042.998:767): avc: denied { listen } for pid=11690 comm="syz.2.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.771641][T11693] SELinux: ebitmap: truncated map [ 266.798096][T11693] SELinux: failed to load policy [ 266.921476][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2382'. [ 267.172277][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 267.344979][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2389'. [ 267.363335][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 267.384725][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.396507][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.406860][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 267.421337][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 267.430806][ T10] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 267.451015][ T10] usb 6-1: Manufacturer: syz [ 267.461801][ T30] audit: type=1400 audit(1754612043.898:768): avc: denied { create } for pid=11715 comm="syz.3.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 267.473459][ T10] usb 6-1: config 0 descriptor?? [ 267.614054][ T5909] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 267.787186][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.801556][ T5909] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 267.830274][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.859363][ T5909] usb 5-1: config 0 descriptor?? [ 267.917675][ T10] hid_parser_main: 2 callbacks suppressed [ 267.917699][ T10] appleir 0003:05AC:8243.0029: unknown main item tag 0x0 [ 267.968356][ T10] appleir 0003:05AC:8243.0029: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 268.195680][ T5910] usb 6-1: USB disconnect, device number 19 [ 268.297991][ T5909] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 268.330718][ T5909] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.002A/input/input45 [ 268.513430][ T5909] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 268.558408][ T5909] usb 5-1: USB disconnect, device number 31 [ 269.042375][ T30] audit: type=1400 audit(1754612045.478:769): avc: denied { mounton } for pid=11746 comm="syz.2.2403" path="/478/file0" dev="tmpfs" ino=2461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 269.850361][ T30] audit: type=1400 audit(1754612046.288:770): avc: denied { listen } for pid=11780 comm="syz.4.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 269.931552][T11783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11783 comm=syz.5.2416 [ 270.108344][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2418'. [ 270.131794][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2418'. [ 270.155993][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2418'. [ 270.202662][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2418'. [ 270.258417][ T30] audit: type=1400 audit(1754612046.688:771): avc: denied { read } for pid=11792 comm="syz.4.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.373500][T11799] team0: No ports can be present during mode change [ 270.672252][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 270.782773][ T30] audit: type=1400 audit(1754612047.228:772): avc: denied { connect } for pid=11814 comm="syz.4.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 270.844988][ T30] audit: type=1400 audit(1754612047.248:773): avc: denied { bind } for pid=11814 comm="syz.4.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 270.892305][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.908783][ T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 270.929849][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.959455][ T24] usb 2-1: config 0 descriptor?? [ 271.196897][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 271.203053][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 271.226749][ T24] usb 2-1: USB disconnect, device number 37 [ 271.395276][ T5910] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 271.572449][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 271.584333][ T5910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.602241][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.623138][ T5910] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 271.647611][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 271.658378][ T5910] usb 4-1: SerialNumber: syz [ 271.682228][ T980] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 271.732511][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 271.739157][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.750791][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 97, changing to 10 [ 271.762105][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24929, setting to 1024 [ 271.775371][ T10] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 271.784535][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.792601][ T10] usb 5-1: Product: syz [ 271.796847][ T10] usb 5-1: Manufacturer: syz [ 271.801463][ T10] usb 5-1: SerialNumber: syz [ 271.808168][ T10] usb 5-1: config 0 descriptor?? [ 271.852648][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 271.859453][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.872827][ T10] rc_core: IR keymap rc-streamzap not found [ 271.878752][ T10] Registered IR keymap rc-empty [ 271.883725][ T980] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 271.893346][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.902499][ T10] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 271.915631][ T5910] usb 4-1: 0:2 : does not exist [ 271.922064][ T5910] usb 4-1: unit 1 not found! [ 271.927342][ T980] usb 2-1: config 0 descriptor?? [ 271.936122][ T10] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input46 [ 271.955498][ T5956] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 271.963511][ T5910] usb 4-1: USB disconnect, device number 25 [ 272.050810][ T24] usb 5-1: USB disconnect, device number 32 [ 272.115731][ T5956] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 272.127457][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 272.139562][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 272.149476][ T5956] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.167029][ T5956] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.176380][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.186302][ T5956] usb 6-1: config 0 descriptor?? [ 272.367085][ T980] mcp2221 0003:04D8:00DD.002B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 272.601053][ T5956] plantronics 0003:047F:FFFF.002C: ignoring exceeding usage max [ 272.617089][ T5956] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 272.702409][ T980] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 272.783259][ T5967] usb 2-1: USB disconnect, device number 38 [ 272.786348][ T30] audit: type=1400 audit(1754612049.228:774): avc: denied { accept } for pid=11858 comm="syz.2.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 272.840532][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 272.850010][ T30] audit: type=1400 audit(1754612049.298:775): avc: denied { listen } for pid=11858 comm="syz.2.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 272.892374][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 272.902247][ T980] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.913355][ T980] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.923190][ T980] usb 4-1: config 0 interface 0 has no altsetting 0 [ 272.931032][ T980] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 272.940676][ T980] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 272.948897][ T980] usb 4-1: Product: syz [ 272.955678][ T980] usb 4-1: config 0 descriptor?? [ 272.994800][ T24] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 273.003286][ T24] usb 5-1: config 0 has no interface number 0 [ 273.012085][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 273.022060][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.030501][ T24] usb 5-1: Product: syz [ 273.035403][ T24] usb 5-1: Manufacturer: syz [ 273.040516][ T24] usb 5-1: SerialNumber: syz [ 273.048748][ T24] usb 5-1: config 0 descriptor?? [ 273.274822][ T24] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 273.302549][ T24] usb 5-1: No valid video chain found. [ 273.326952][ T24] usb 5-1: USB disconnect, device number 33 [ 273.391048][ T980] waterforce 0003:1044:7A4D.002D: unknown main item tag 0x0 [ 273.452224][ T980] waterforce 0003:1044:7A4D.002D: unknown main item tag 0x0 [ 273.459599][ T980] waterforce 0003:1044:7A4D.002D: item fetching failed at offset 2/5 [ 273.513011][ T980] waterforce 0003:1044:7A4D.002D: hid parse failed with -22 [ 273.520503][ T980] waterforce 0003:1044:7A4D.002D: probe with driver waterforce failed with error -22 [ 273.655114][ T24] usb 4-1: USB disconnect, device number 26 [ 274.384927][ T30] audit: type=1400 audit(1754612050.818:776): avc: denied { bind } for pid=11895 comm="syz.4.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 274.717005][ T5909] usb 6-1: USB disconnect, device number 20 [ 274.842955][T11924] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2478'. [ 275.072440][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 275.224794][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.232288][ T5909] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 275.235970][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 275.253212][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.264307][ T10] usb 2-1: config 0 descriptor?? [ 275.348062][ T30] audit: type=1400 audit(1754612051.788:777): avc: denied { write } for pid=11933 comm="syz.2.2481" path="socket:[42420]" dev="sockfs" ino=42420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 275.371699][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.406961][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 275.478757][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 275.493445][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 275.518185][ T10] usb 2-1: USB disconnect, device number 39 [ 275.572392][ T5909] usb 5-1: unable to get BOS descriptor or descriptor too short [ 275.583402][ T5909] usb 5-1: no configurations [ 275.588017][ T5909] usb 5-1: can't read configurations, error -22 [ 275.711645][ T30] audit: type=1400 audit(1754612052.148:778): avc: denied { setopt } for pid=11944 comm="syz.3.2487" lport=55647 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 275.735235][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.962551][ T5937] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 276.082384][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 276.122295][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 276.136554][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.158181][ T5937] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 276.197377][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.216218][ T5937] usb 2-1: config 0 descriptor?? [ 276.252391][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 276.279452][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.301376][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 276.319209][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.335010][ T24] usb 4-1: config 0 descriptor?? [ 276.343132][ T24] hub 4-1:0.0: USB hub found [ 276.361757][T11971] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 276.401636][ T30] audit: type=1400 audit(1754612052.838:779): avc: denied { map } for pid=11970 comm="syz.4.2498" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 276.473220][T11978] 9pnet: p9_errstr2errno: server reported unknown error pA [ 276.550802][ T24] hub 4-1:0.0: 1 port detected [ 276.672954][ T5937] mcp2221 0003:04D8:00DD.002E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 276.782313][ T43] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 276.934232][ T43] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 276.951903][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.974970][ T43] usb 6-1: config 0 descriptor?? [ 277.098557][ T5937] usb 2-1: USB disconnect, device number 40 [ 277.378837][T12014] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2516'. [ 277.390255][ T24] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 277.390665][ T5956] usb 4-1: USB disconnect, device number 27 [ 277.744302][T12028] SELinux: failed to load policy [ 278.062273][ T30] audit: type=1400 audit(1754612054.498:780): avc: denied { nlmsg_read } for pid=12041 comm="syz.4.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 278.082799][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.129465][ T30] audit: type=1400 audit(1754612054.498:781): avc: denied { read } for pid=12041 comm="syz.4.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 278.149499][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.268466][ T43] usb 6-1: Cannot set autoneg [ 278.276759][ T43] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 278.305278][ T43] usb 6-1: USB disconnect, device number 21 [ 278.531529][T12074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.575105][T12076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.593565][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 278.624005][ T30] audit: type=1326 audit(1754612055.068:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12077 comm="syz.4.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b23f8ebe9 code=0x7ffc0000 [ 278.653944][ T30] audit: type=1326 audit(1754612055.068:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12077 comm="syz.4.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b23f8ebe9 code=0x7ffc0000 [ 278.684703][ T30] audit: type=1326 audit(1754612055.068:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12077 comm="syz.4.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f8b23f8ebe9 code=0x7ffc0000 [ 278.711536][ T30] audit: type=1326 audit(1754612055.068:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12077 comm="syz.4.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b23f8ebe9 code=0x7ffc0000 [ 278.712475][ T43] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 278.734983][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.774576][ T24] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 278.783235][ T24] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 278.800162][ T24] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 278.830092][ T24] usb 4-1: config 220 has no interface number 2 [ 278.842263][ T24] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 278.868465][ T24] usb 4-1: config 220 interface 0 has no altsetting 0 [ 278.878712][ T24] usb 4-1: config 220 interface 76 has no altsetting 0 [ 278.885869][ T24] usb 4-1: config 220 interface 1 has no altsetting 0 [ 278.899495][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 278.908965][T12086] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2550'. [ 278.918025][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.946323][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.958602][ T24] usb 4-1: Product: syz [ 278.972426][ T24] usb 4-1: Manufacturer: syz [ 278.977487][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.987347][ T24] usb 4-1: SerialNumber: syz [ 278.998773][ T43] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 279.013186][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.024073][ T43] usb 2-1: config 0 descriptor?? [ 279.236999][ T24] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 279.262538][ T24] usb 4-1: No valid video chain found. [ 279.272571][ T24] usb 4-1: selecting invalid altsetting 0 [ 279.326236][ T24] usb 4-1: selecting invalid altsetting 0 [ 279.332028][ T24] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 279.363663][ T24] usb 4-1: USB disconnect, device number 28 [ 279.462311][ T43] pyra 0003:1E7D:2CF6.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 279.762215][ T5937] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 279.890368][T12107] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2559'. [ 279.927685][ T5937] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 280.002204][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.010259][ T5937] usb 5-1: Product: syz [ 280.017520][ T5937] usb 5-1: Manufacturer: syz [ 280.032175][ T5937] usb 5-1: SerialNumber: syz [ 280.039734][ T5937] usb 5-1: config 0 descriptor?? [ 280.259608][ T43] pyra 0003:1E7D:2CF6.002F: couldn't init struct pyra_device [ 280.284853][ T43] pyra 0003:1E7D:2CF6.002F: couldn't install mouse [ 280.294467][ T43] pyra 0003:1E7D:2CF6.002F: probe with driver pyra failed with error -71 [ 280.316832][ T43] usb 2-1: USB disconnect, device number 41 [ 280.417851][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 280.417867][ T30] audit: type=1400 audit(1754612056.858:787): avc: denied { bind } for pid=12120 comm="syz.3.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 280.523547][T12125] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2568'. [ 281.082346][ T5937] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 281.536741][ T5937] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 281.547249][ T5937] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 281.558378][ T5937] asix 5-1:0.0: probe with driver asix failed with error -71 [ 281.581573][ T5937] usb 5-1: USB disconnect, device number 36 [ 282.026089][T12180] input: syz0 as /devices/virtual/input/input47 [ 282.323174][T12191] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 282.347210][T12191] hsr_slave_0: left promiscuous mode [ 282.437415][ T30] audit: type=1400 audit(1754612058.878:788): avc: denied { bind } for pid=12199 comm="syz.2.2596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 282.488994][ T30] audit: type=1400 audit(1754612058.898:789): avc: denied { name_bind } for pid=12199 comm="syz.2.2596" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 282.537366][ T30] audit: type=1400 audit(1754612058.898:790): avc: denied { node_bind } for pid=12199 comm="syz.2.2596" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 282.615756][T12204] loop2: detected capacity change from 0 to 7 [ 282.626507][T12204] Dev loop2: unable to read RDB block 7 [ 282.633527][T12204] loop2: unable to read partition table [ 282.641323][T12204] loop2: partition table beyond EOD, truncated [ 282.700025][T12204] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 283.329191][T12221] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2609'. [ 283.454456][T12228] syzkaller1: entered promiscuous mode [ 283.460111][T12228] syzkaller1: entered allmulticast mode [ 283.855951][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2620'. [ 283.889451][T12247] netlink: 'syz.2.2620': attribute type 19 has an invalid length. [ 283.924278][T12247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2620'. [ 283.983045][ T2959] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.991954][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2620'. [ 284.036568][ T2959] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.050798][ T2959] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.060430][T12247] netlink: 'syz.2.2620': attribute type 19 has an invalid length. [ 284.071862][ T2959] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.086121][T12247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2620'. [ 284.496991][T12258] overlayfs: failed to clone upperpath [ 284.542333][ T5937] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 284.724486][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 284.753581][ T5937] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 284.772176][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.793234][ T5937] usb 6-1: config 0 descriptor?? [ 284.843657][ T5937] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 285.223108][ T5937] gspca_sonixj: reg_r err -71 [ 285.227886][ T5937] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 285.258834][ T5937] usb 6-1: USB disconnect, device number 22 [ 285.540720][ T30] audit: type=1400 audit(1754612061.978:791): avc: denied { mounton } for pid=12273 comm="syz.3.2633" path="/514/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 285.706068][T12284] syzkaller1: entered promiscuous mode [ 285.711571][T12284] syzkaller1: entered allmulticast mode [ 286.015121][ T980] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 286.172422][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 286.188105][ T980] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 286.203641][ T980] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.229660][ T980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.253075][ T980] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 286.265563][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.274527][ T980] usb 4-1: Product: syz [ 286.278759][ T980] usb 4-1: Manufacturer: syz [ 286.287426][ T980] usb 4-1: SerialNumber: syz [ 286.739060][ T980] usb 4-1: 0:2 : does not exist [ 286.866596][T12305] syz.1.2646 (12305): drop_caches: 2 [ 286.968161][ T30] audit: type=1400 audit(1754612063.408:792): avc: denied { module_load } for pid=12335 comm="syz.1.2661" path="/sys/power/wakeup_count" dev="sysfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 287.312301][ T5937] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 287.469551][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.480489][ T5937] usb 2-1: config 0 has no interfaces? [ 287.491506][ T5937] usb 2-1: New USB device found, idVendor=0411, idProduct=000a, bcdDevice=6d.d9 [ 287.507289][ T5937] usb 2-1: New USB device strings: Mfr=246, Product=0, SerialNumber=0 [ 287.516985][ T5937] usb 2-1: Manufacturer: syz [ 287.527296][ T5937] usb 2-1: config 0 descriptor?? [ 287.552332][ T980] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 287.570855][ T980] usb 4-1: USB disconnect, device number 29 [ 287.774700][ T5937] usb 2-1: USB disconnect, device number 42 [ 288.248954][ T5937] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 288.471925][T12392] Bluetooth: MGMT ver 1.23 [ 288.529477][ T5937] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 288.822222][ T5937] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 288.988485][T12370] ceph: No mds server is up or the cluster is laggy [ 288.992217][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 288.996143][T12375] ceph: No mds server is up or the cluster is laggy [ 289.028431][ T5937] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 289.052210][ T5937] usb 2-1: config 0 has no interface number 0 [ 289.058386][ T5937] usb 2-1: config 0 interface 184 has no altsetting 0 [ 289.091275][ T5937] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 289.101934][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.133891][ T5937] usb 2-1: Product: syz [ 289.138596][ T5937] usb 2-1: Manufacturer: syz [ 289.149187][ T5937] usb 2-1: SerialNumber: syz [ 289.153967][ T5967] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 289.180477][ T5937] usb 2-1: config 0 descriptor?? [ 289.196257][ T5937] smsc75xx v1.0.0 [ 289.227668][ T30] audit: type=1400 audit(1754612065.668:793): avc: denied { write } for pid=12414 comm="syz.3.2691" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 289.325388][ T5967] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 289.345033][ T5967] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 289.367804][ T5967] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 289.380198][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.402020][T12409] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 289.417505][ T5967] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 289.672371][ T10] usb 5-1: USB disconnect, device number 37 [ 290.035206][ T5967] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 290.202379][ T5967] usb 4-1: Using ep0 maxpacket: 16 [ 290.209808][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.221274][ T5967] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 290.235631][ T5967] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 290.245685][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.258247][ T5967] usb 4-1: config 0 descriptor?? [ 290.443256][ T5937] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 290.451648][T12437] [ 290.456409][T12437] ===================================================== [ 290.463322][T12437] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 290.466409][ T5937] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 290.470760][T12437] 6.16.0-syzkaller-11952-g6e64f4580381 #0 Not tainted [ 290.470775][T12437] ----------------------------------------------------- [ 290.470782][T12437] syz.4.2702/12437 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 290.470803][T12437] ffff888025724600 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 290.470863][T12437] [ 290.470863][T12437] and this task is already holding: [ 290.470868][T12437] ffff888023f0a028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 290.470913][T12437] which would create a new lock dependency: [ 290.470920][T12437] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 290.470966][T12437] [ 290.470966][T12437] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 290.470975][T12437] (&client->buffer_lock){..-.}-{3:3} [ 290.470993][T12437] [ 290.470993][T12437] ... which became SOFTIRQ-irq-safe at: [ 290.471002][T12437] lock_acquire+0x179/0x350 [ 290.471031][T12437] _raw_spin_lock+0x2e/0x40 [ 290.505895][ T5937] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 290.510140][T12437] evdev_pass_values+0x10e/0x9b0 [ 290.510166][T12437] evdev_events+0x1bb/0x390 [ 290.510184][T12437] input_pass_values+0x74b/0x880 [ 290.524129][ T5937] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 290.527327][T12437] input_handle_event+0xb29/0x14d0 [ 290.527355][T12437] input_event+0x8e/0xd0 [ 290.617119][T12437] hidinput_hid_event+0xa10/0x2420 [ 290.622306][T12437] hid_process_event+0x4b7/0x5e0 [ 290.627316][T12437] hid_report_raw_event+0xa0a/0x1290 [ 290.632670][T12437] __hid_input_report.constprop.0+0x33f/0x450 [ 290.638811][T12437] hid_irq_in+0x35e/0x870 [ 290.643208][T12437] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 290.648648][T12437] usb_hcd_giveback_urb+0x39b/0x450 [ 290.653916][T12437] dummy_timer+0x1814/0x3a30 [ 290.658577][T12437] __hrtimer_run_queues+0x202/0xad0 [ 290.663843][T12437] hrtimer_run_softirq+0x17d/0x350 [ 290.669020][T12437] handle_softirqs+0x216/0x8e0 [ 290.673851][T12437] run_ksoftirqd+0x3a/0x60 [ 290.678335][T12437] smpboot_thread_fn+0x3f4/0xae0 [ 290.683349][T12437] kthread+0x3c5/0x780 [ 290.687487][T12437] ret_from_fork+0x5d4/0x6f0 [ 290.692151][T12437] ret_from_fork_asm+0x1a/0x30 [ 290.696987][T12437] [ 290.696987][T12437] to a SOFTIRQ-irq-unsafe lock: [ 290.703977][T12437] (tasklist_lock){.+.+}-{3:3} [ 290.704002][T12437] [ 290.704002][T12437] ... which became SOFTIRQ-irq-unsafe at: [ 290.716590][T12437] ... [ 290.716596][T12437] lock_acquire+0x179/0x350 [ 290.723735][T12437] _raw_read_lock+0x5f/0x70 [ 290.728309][T12437] __do_wait+0x105/0x890 [ 290.732614][T12437] do_wait+0x21e/0x5a0 [ 290.736744][T12437] kernel_wait+0x9f/0x160 [ 290.741135][T12437] call_usermodehelper_exec_work+0xf1/0x170 [ 290.747097][T12437] process_one_work+0x9cc/0x1b70 [ 290.752103][T12437] worker_thread+0x6c8/0xf10 [ 290.756760][T12437] kthread+0x3c5/0x780 [ 290.760900][T12437] ret_from_fork+0x5d4/0x6f0 [ 290.765566][T12437] ret_from_fork_asm+0x1a/0x30 [ 290.770400][T12437] [ 290.770400][T12437] other info that might help us debug this: [ 290.770400][T12437] [ 290.780602][T12437] Chain exists of: [ 290.780602][T12437] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 290.780602][T12437] [ 290.793706][T12437] Possible interrupt unsafe locking scenario: [ 290.793706][T12437] [ 290.801999][T12437] CPU0 CPU1 [ 290.807344][T12437] ---- ---- [ 290.812683][T12437] lock(tasklist_lock); [ 290.816904][T12437] local_irq_disable(); [ 290.823632][T12437] lock(&client->buffer_lock); [ 290.830983][T12437] lock(&new->fa_lock); [ 290.837721][T12437] [ 290.841149][T12437] lock(&client->buffer_lock); [ 290.846150][T12437] [ 290.846150][T12437] *** DEADLOCK *** [ 290.846150][T12437] [ 290.854267][T12437] 7 locks held by syz.4.2702/12437: [ 290.859443][T12437] #0: ffff88823be68118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 290.868565][T12437] #1: ffff888021b10230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 290.878650][T12437] #2: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 290.888293][T12437] #3: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 290.897846][T12437] #4: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 290.906965][T12437] #5: ffff888023f0a028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 290.917213][T12437] #6: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 290.926249][T12437] [ 290.926249][T12437] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 290.936624][T12437] -> (&client->buffer_lock){..-.}-{3:3} { [ 290.942337][T12437] IN-SOFTIRQ-W at: [ 290.946310][T12437] lock_acquire+0x179/0x350 [ 290.952472][T12437] _raw_spin_lock+0x2e/0x40 [ 290.958611][T12437] evdev_pass_values+0x10e/0x9b0 [ 290.965188][T12437] evdev_events+0x1bb/0x390 [ 290.971321][T12437] input_pass_values+0x74b/0x880 [ 290.977887][T12437] input_handle_event+0xb29/0x14d0 [ 290.984629][T12437] input_event+0x8e/0xd0 [ 290.990521][T12437] hidinput_hid_event+0xa10/0x2420 [ 290.997261][T12437] hid_process_event+0x4b7/0x5e0 [ 291.003830][T12437] hid_report_raw_event+0xa0a/0x1290 [ 291.010746][T12437] __hid_input_report.constprop.0+0x33f/0x450 [ 291.018466][T12437] hid_irq_in+0x35e/0x870 [ 291.024424][T12437] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 291.031434][T12437] usb_hcd_giveback_urb+0x39b/0x450 [ 291.038266][T12437] dummy_timer+0x1814/0x3a30 [ 291.044493][T12437] __hrtimer_run_queues+0x202/0xad0 [ 291.051322][T12437] hrtimer_run_softirq+0x17d/0x350 [ 291.058065][T12437] handle_softirqs+0x216/0x8e0 [ 291.064468][T12437] run_ksoftirqd+0x3a/0x60 [ 291.070521][T12437] smpboot_thread_fn+0x3f4/0xae0 [ 291.077094][T12437] kthread+0x3c5/0x780 [ 291.082792][T12437] ret_from_fork+0x5d4/0x6f0 [ 291.089012][T12437] ret_from_fork_asm+0x1a/0x30 [ 291.095411][T12437] INITIAL USE at: [ 291.099285][T12437] lock_acquire+0x179/0x350 [ 291.105339][T12437] _raw_spin_lock+0x2e/0x40 [ 291.111404][T12437] evdev_pass_values+0x10e/0x9b0 [ 291.117892][T12437] evdev_events+0x1bb/0x390 [ 291.123940][T12437] input_pass_values+0x74b/0x880 [ 291.130430][T12437] input_handle_event+0xb29/0x14d0 [ 291.137097][T12437] input_event+0x8e/0xd0 [ 291.142884][T12437] hidinput_hid_event+0xa10/0x2420 [ 291.149552][T12437] hid_process_event+0x4b7/0x5e0 [ 291.156035][T12437] hid_report_raw_event+0xa0a/0x1290 [ 291.162875][T12437] __hid_input_report.constprop.0+0x33f/0x450 [ 291.170518][T12437] hid_irq_in+0x35e/0x870 [ 291.176389][T12437] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 291.183311][T12437] usb_hcd_giveback_urb+0x39b/0x450 [ 291.190059][T12437] dummy_timer+0x1814/0x3a30 [ 291.196203][T12437] __hrtimer_run_queues+0x202/0xad0 [ 291.202953][T12437] hrtimer_run_softirq+0x17d/0x350 [ 291.209609][T12437] handle_softirqs+0x216/0x8e0 [ 291.215924][T12437] run_ksoftirqd+0x3a/0x60 [ 291.221888][T12437] smpboot_thread_fn+0x3f4/0xae0 [ 291.228375][T12437] kthread+0x3c5/0x780 [ 291.233986][T12437] ret_from_fork+0x5d4/0x6f0 [ 291.240120][T12437] ret_from_fork_asm+0x1a/0x30 [ 291.246428][T12437] } [ 291.248903][T12437] ... key at: [] __key.1+0x0/0x40 [ 291.255997][T12437] [ 291.255997][T12437] the dependencies between the lock to be acquired [ 291.256005][T12437] and SOFTIRQ-irq-unsafe lock: [ 291.269472][T12437] -> (tasklist_lock){.+.+}-{3:3} { [ 291.274752][T12437] HARDIRQ-ON-R at: [ 291.278882][T12437] lock_acquire+0x179/0x350 [ 291.285393][T12437] _raw_read_lock+0x5f/0x70 [ 291.291885][T12437] __do_wait+0x105/0x890 [ 291.298107][T12437] do_wait+0x21e/0x5a0 [ 291.304152][T12437] kernel_wait+0x9f/0x160 [ 291.310457][T12437] call_usermodehelper_exec_work+0xf1/0x170 [ 291.318330][T12437] process_one_work+0x9cc/0x1b70 [ 291.325246][T12437] worker_thread+0x6c8/0xf10 [ 291.331823][T12437] kthread+0x3c5/0x780 [ 291.337885][T12437] ret_from_fork+0x5d4/0x6f0 [ 291.344463][T12437] ret_from_fork_asm+0x1a/0x30 [ 291.351225][T12437] SOFTIRQ-ON-R at: [ 291.355361][T12437] lock_acquire+0x179/0x350 [ 291.361861][T12437] _raw_read_lock+0x5f/0x70 [ 291.368355][T12437] __do_wait+0x105/0x890 [ 291.374584][T12437] do_wait+0x21e/0x5a0 [ 291.380630][T12437] kernel_wait+0x9f/0x160 [ 291.386939][T12437] call_usermodehelper_exec_work+0xf1/0x170 [ 291.394813][T12437] process_one_work+0x9cc/0x1b70 [ 291.401740][T12437] worker_thread+0x6c8/0xf10 [ 291.408330][T12437] kthread+0x3c5/0x780 [ 291.414382][T12437] ret_from_fork+0x5d4/0x6f0 [ 291.420964][T12437] ret_from_fork_asm+0x1a/0x30 [ 291.427721][T12437] INITIAL USE at: [ 291.431774][T12437] lock_acquire+0x179/0x350 [ 291.438184][T12437] _raw_write_lock_irq+0x36/0x50 [ 291.445022][T12437] copy_process+0x4caf/0x7690 [ 291.451600][T12437] kernel_clone+0xfc/0x930 [ 291.457927][T12437] user_mode_thread+0xc7/0x110 [ 291.464602][T12437] rest_init+0x23/0x2b0 [ 291.470656][T12437] start_kernel+0x3ee/0x4d0 [ 291.477054][T12437] x86_64_start_reservations+0x18/0x30 [ 291.484406][T12437] x86_64_start_kernel+0x130/0x190 [ 291.491410][T12437] common_startup_64+0x13e/0x148 [ 291.498257][T12437] INITIAL READ USE at: [ 291.502751][T12437] lock_acquire+0x179/0x350 [ 291.509605][T12437] _raw_read_lock+0x5f/0x70 [ 291.516450][T12437] __do_wait+0x105/0x890 [ 291.523019][T12437] do_wait+0x21e/0x5a0 [ 291.529410][T12437] kernel_wait+0x9f/0x160 [ 291.536067][T12437] call_usermodehelper_exec_work+0xf1/0x170 [ 291.544289][T12437] process_one_work+0x9cc/0x1b70 [ 291.551553][T12437] worker_thread+0x6c8/0xf10 [ 291.558726][T12437] kthread+0x3c5/0x780 [ 291.565117][T12437] ret_from_fork+0x5d4/0x6f0 [ 291.572029][T12437] ret_from_fork_asm+0x1a/0x30 [ 291.579121][T12437] } [ 291.581770][T12437] ... key at: [] tasklist_lock+0x18/0x40 [ 291.589643][T12437] ... acquired at: [ 291.593593][T12437] _raw_read_lock+0x5f/0x70 [ 291.598256][T12437] send_sigurg+0xed/0xc80 [ 291.602746][T12437] sk_send_sigurg+0x76/0x360 [ 291.607495][T12437] unix_stream_sendmsg+0xfa5/0x1340 [ 291.612846][T12437] ____sys_sendmsg+0xa98/0xc70 [ 291.617762][T12437] ___sys_sendmsg+0x134/0x1d0 [ 291.622596][T12437] __sys_sendmmsg+0x200/0x420 [ 291.627435][T12437] __x64_sys_sendmmsg+0x9c/0x100 [ 291.632536][T12437] do_syscall_64+0xcd/0x4c0 [ 291.637192][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.643238][T12437] [ 291.645536][T12437] -> (&f_owner->lock){....}-{3:3} { [ 291.650815][T12437] INITIAL USE at: [ 291.654773][T12437] lock_acquire+0x179/0x350 [ 291.660998][T12437] _raw_write_lock_irq+0x36/0x50 [ 291.667656][T12437] __f_setown+0x61/0x3c0 [ 291.673619][T12437] generic_setlease+0xef2/0x1300 [ 291.680276][T12437] kernel_setlease+0x106/0x140 [ 291.686757][T12437] vfs_setlease+0x258/0x2d0 [ 291.692975][T12437] fcntl_setlease+0x3ed/0x5a0 [ 291.699376][T12437] do_fcntl+0x751/0x15a0 [ 291.705344][T12437] __x64_sys_fcntl+0x163/0x200 [ 291.711829][T12437] do_syscall_64+0xcd/0x4c0 [ 291.718048][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.725662][T12437] INITIAL READ USE at: [ 291.730058][T12437] lock_acquire+0x179/0x350 [ 291.736716][T12437] _raw_read_lock_irqsave+0x74/0x90 [ 291.744069][T12437] send_sigio+0x31/0x3e0 [ 291.750466][T12437] kill_fasync+0x214/0x510 [ 291.757037][T12437] lease_break_callback+0x23/0x30 [ 291.764234][T12437] __break_lease+0x671/0x1810 [ 291.771061][T12437] do_dentry_open+0x91f/0x1530 [ 291.778025][T12437] vfs_open+0x82/0x3f0 [ 291.784254][T12437] path_openat+0x1de4/0x2cb0 [ 291.790997][T12437] do_filp_open+0x20b/0x470 [ 291.797650][T12437] do_sys_openat2+0x11b/0x1d0 [ 291.804489][T12437] __x64_sys_open+0x153/0x1e0 [ 291.811325][T12437] do_syscall_64+0xcd/0x4c0 [ 291.817978][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.826024][T12437] } [ 291.828586][T12437] ... key at: [] __key.1+0x0/0x40 [ 291.835767][T12437] ... acquired at: [ 291.839631][T12437] _raw_read_lock_irqsave+0x74/0x90 [ 291.844986][T12437] send_sigio+0x31/0x3e0 [ 291.849387][T12437] kill_fasync+0x214/0x510 [ 291.853965][T12437] lease_break_callback+0x23/0x30 [ 291.859153][T12437] __break_lease+0x671/0x1810 [ 291.863981][T12437] do_dentry_open+0x91f/0x1530 [ 291.868899][T12437] vfs_open+0x82/0x3f0 [ 291.873126][T12437] path_openat+0x1de4/0x2cb0 [ 291.877869][T12437] do_filp_open+0x20b/0x470 [ 291.882552][T12437] do_sys_openat2+0x11b/0x1d0 [ 291.887392][T12437] __x64_sys_open+0x153/0x1e0 [ 291.892231][T12437] do_syscall_64+0xcd/0x4c0 [ 291.896884][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.902929][T12437] [ 291.905229][T12437] -> (&new->fa_lock){....}-{3:3} { [ 291.910350][T12437] INITIAL USE at: [ 291.914225][T12437] lock_acquire+0x179/0x350 [ 291.920279][T12437] _raw_write_lock_irq+0x36/0x50 [ 291.926763][T12437] fasync_remove_entry+0xb2/0x1e0 [ 291.933335][T12437] fasync_helper+0xaf/0xd0 [ 291.939300][T12437] sock_fasync+0x92/0x140 [ 291.945172][T12437] __fput+0x96b/0xb70 [ 291.950699][T12437] task_work_run+0x150/0x240 [ 291.956832][T12437] exit_to_user_mode_loop+0xeb/0x110 [ 291.963660][T12437] do_syscall_64+0x3f6/0x4c0 [ 291.969790][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.977224][T12437] INITIAL READ USE at: [ 291.981528][T12437] lock_acquire+0x179/0x350 [ 291.988017][T12437] _raw_read_lock_irqsave+0x74/0x90 [ 291.995225][T12437] kill_fasync+0x138/0x510 [ 292.001633][T12437] sock_wake_async+0x132/0x160 [ 292.008379][T12437] unix_write_space+0x2ae/0x510 [ 292.015227][T12437] sock_wfree+0x261/0x880 [ 292.021540][T12437] unix_destruct_scm+0x137/0x190 [ 292.028463][T12437] skb_release_head_state+0xa3/0x290 [ 292.035740][T12437] sk_skb_reason_drop+0xeb/0x1a0 [ 292.042656][T12437] skb_queue_purge_reason+0x2b0/0x420 [ 292.050008][T12437] unix_dgram_disconnected+0x54/0x150 [ 292.057365][T12437] unix_dgram_connect+0x86f/0xc80 [ 292.064369][T12437] __sys_connect_file+0x141/0x1a0 [ 292.071379][T12437] __sys_connect+0x13b/0x160 [ 292.077956][T12437] __x64_sys_connect+0x72/0xb0 [ 292.084702][T12437] do_syscall_64+0xcd/0x4c0 [ 292.091181][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.099052][T12437] } [ 292.101529][T12437] ... key at: [] __key.0+0x0/0x40 [ 292.108623][T12437] ... acquired at: [ 292.112405][T12437] lock_acquire+0x179/0x350 [ 292.117073][T12437] _raw_read_lock_irqsave+0x74/0x90 [ 292.122431][T12437] kill_fasync+0x138/0x510 [ 292.127004][T12437] evdev_pass_values+0x619/0x9b0 [ 292.132098][T12437] evdev_events+0x1bb/0x390 [ 292.136760][T12437] input_pass_values+0x74b/0x880 [ 292.141851][T12437] input_handle_event+0xf00/0x14d0 [ 292.147116][T12437] input_inject_event+0x1e8/0x3b0 [ 292.152295][T12437] evdev_write+0x457/0x750 [ 292.156869][T12437] vfs_write+0x2a0/0x1150 [ 292.161353][T12437] ksys_write+0x1f8/0x250 [ 292.165837][T12437] do_syscall_64+0xcd/0x4c0 [ 292.170491][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.176536][T12437] [ 292.178836][T12437] [ 292.178836][T12437] stack backtrace: [ 292.184704][T12437] CPU: 0 UID: 0 PID: 12437 Comm: syz.4.2702 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 292.184725][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.184735][T12437] Call Trace: [ 292.184741][T12437] [ 292.184748][T12437] dump_stack_lvl+0x116/0x1f0 [ 292.184774][T12437] check_irq_usage+0x7dc/0x920 [ 292.184803][T12437] ? check_path.constprop.0+0x24/0x50 [ 292.184829][T12437] ? __lock_acquire+0x12bc/0x1ce0 [ 292.184851][T12437] __lock_acquire+0x12bc/0x1ce0 [ 292.184879][T12437] lock_acquire+0x179/0x350 [ 292.184901][T12437] ? kill_fasync+0x138/0x510 [ 292.184927][T12437] _raw_read_lock_irqsave+0x74/0x90 [ 292.184950][T12437] ? kill_fasync+0x138/0x510 [ 292.184970][T12437] kill_fasync+0x138/0x510 [ 292.184992][T12437] evdev_pass_values+0x619/0x9b0 [ 292.185013][T12437] evdev_events+0x1bb/0x390 [ 292.185031][T12437] input_pass_values+0x74b/0x880 [ 292.185051][T12437] input_handle_event+0xf00/0x14d0 [ 292.185069][T12437] ? _copy_from_user+0x59/0xd0 [ 292.185089][T12437] input_inject_event+0x1e8/0x3b0 [ 292.185109][T12437] evdev_write+0x457/0x750 [ 292.185129][T12437] ? __pfx_evdev_write+0x10/0x10 [ 292.185148][T12437] ? bpf_lsm_file_permission+0x9/0x10 [ 292.185169][T12437] ? security_file_permission+0x71/0x210 [ 292.185191][T12437] ? rw_verify_area+0xcf/0x6c0 [ 292.185215][T12437] ? __pfx_evdev_write+0x10/0x10 [ 292.185232][T12437] vfs_write+0x2a0/0x1150 [ 292.185250][T12437] ? __pfx_vfs_write+0x10/0x10 [ 292.185265][T12437] ? find_held_lock+0x2b/0x80 [ 292.185283][T12437] ? __fget_files+0x204/0x3c0 [ 292.185302][T12437] ? __fget_files+0x20e/0x3c0 [ 292.185321][T12437] ksys_write+0x1f8/0x250 [ 292.185336][T12437] ? __pfx_ksys_write+0x10/0x10 [ 292.185355][T12437] do_syscall_64+0xcd/0x4c0 [ 292.185370][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.185387][T12437] RIP: 0033:0x7f8b23f8ebe9 [ 292.185405][T12437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.185420][T12437] RSP: 002b:00007f8b221f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 292.185436][T12437] RAX: ffffffffffffffda RBX: 00007f8b241b5fa0 RCX: 00007f8b23f8ebe9 [ 292.185447][T12437] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 292.185457][T12437] RBP: 00007f8b24011e19 R08: 0000000000000000 R09: 0000000000000000 [ 292.185467][T12437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.185477][T12437] R13: 00007f8b241b6038 R14: 00007f8b241b5fa0 R15: 00007ffd275144e8 [ 292.185494][T12437] [ 292.192182][ T5937] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 292.452379][ T5937] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 292.461958][ T5937] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 292.474063][ T5937] usb 2-1: USB disconnect, device number 43 [ 292.548824][ T5967] usbhid 4-1:0.0: can't add hid device: -71 [ 292.555011][ T5967] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 292.565693][ T5967] usb 4-1: USB disconnect, device number 30