last executing test programs: 3m36.258069762s ago: executing program 2 (id=1147): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES8=r0], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, 0x0, 0x0) 3m34.857344081s ago: executing program 2 (id=1178): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r0], 0x2c}}, 0x20008000) 3m34.789330974s ago: executing program 2 (id=1181): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r2, 0x4) 3m34.638471025s ago: executing program 2 (id=1182): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) umount2(&(0x7f0000000180)='./file0/../file0\x00', 0x4) 3m34.614977876s ago: executing program 2 (id=1184): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xffffffffffffffff, 0x4}}, 0x28) 3m34.038227943s ago: executing program 2 (id=1188): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3m33.661099023s ago: executing program 32 (id=1188): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2m35.877517672s ago: executing program 1 (id=2204): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x8}) 2m35.822553622s ago: executing program 1 (id=2207): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, 'xfrm0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) 2m35.734810286s ago: executing program 1 (id=2208): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x1d, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x154f1b5f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m35.734592875s ago: executing program 1 (id=2209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x4000000) 2m35.682049297s ago: executing program 1 (id=2211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="8600"/14, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m35.564271168s ago: executing program 1 (id=2215): syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x1c1400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x10) 2m20.482027953s ago: executing program 33 (id=2215): syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x1c1400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x10) 6.098062923s ago: executing program 4 (id=4836): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 5.942275922s ago: executing program 4 (id=4838): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_open_dev$vim2m(0x0, 0x100000000, 0x2) 4.592255392s ago: executing program 6 (id=4855): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="29000000200019", 0x7}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3.652761809s ago: executing program 6 (id=4863): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff2}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.117216465s ago: executing program 6 (id=4864): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x6) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 2.615953269s ago: executing program 0 (id=4868): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x7fff}, 0x2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 2.382186631s ago: executing program 6 (id=4871): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.233057276s ago: executing program 6 (id=4872): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0xb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xdb) 1.94780008s ago: executing program 6 (id=4873): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x2202) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) 1.833231674s ago: executing program 0 (id=4876): ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) gettid() set_robust_list(0x0, 0x0) 1.355784s ago: executing program 0 (id=4880): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x40, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) 1.253186372s ago: executing program 4 (id=4881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)={0x10000000000000df}) 1.105130124s ago: executing program 5 (id=4884): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x101, @private0, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000240)='B', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x7782, 0x80}, &(0x7f00000001c0)=0xc) 928.195274ms ago: executing program 3 (id=4885): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, 0x0, 0x0) 918.635322ms ago: executing program 3 (id=4886): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200), 0x200000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 680.18844ms ago: executing program 0 (id=4887): r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) r1 = socket$kcm(0x10, 0x2, 0x4) close(r0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800) 592.286572ms ago: executing program 3 (id=4888): timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 524.08699ms ago: executing program 5 (id=4889): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}, {{&(0x7f0000000180)=@llc={0x1a, 0x320, 0x8, 0x7, 0x32, 0xff, @random="191c2b3fec83"}, 0x80, 0x0}}], 0x2, 0x45) 522.807522ms ago: executing program 4 (id=4890): r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) fanotify_mark(r2, 0x21, 0x101a, r2, 0x0) fanotify_mark(r2, 0x22, 0x4000003b, r2, 0x0) 364.921013ms ago: executing program 5 (id=4891): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0xfe, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 287.390955ms ago: executing program 0 (id=4892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) 272.645422ms ago: executing program 5 (id=4893): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) write$nbd(r1, 0x0, 0x0) 257.094534ms ago: executing program 3 (id=4894): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/99) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 186.635991ms ago: executing program 3 (id=4895): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x8]}, 0x8}) 152.885364ms ago: executing program 5 (id=4896): syz_open_dev$sndmidi(&(0x7f0000000100), 0xe, 0x151181) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 131.548817ms ago: executing program 4 (id=4897): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$MON_IOCT_RING_SIZE(r0, 0x80089203, 0x2000000069b6a) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) 50.222026ms ago: executing program 3 (id=4898): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 30.299513ms ago: executing program 5 (id=4899): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa31e6ae9ad066219, 0x31, 0xffffffffffffffff, 0x0) exit(0x0) 28.413458ms ago: executing program 0 (id=4900): openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2000, 0x0, 0xd4, 0x8}, 0x9c) 0s ago: executing program 4 (id=4901): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) kernel console output (not intermixed with test programs): [ T10] usb 4-1: SerialNumber: syz [ 281.362738][ T10] usb 4-1: config 0 descriptor?? [ 281.370412][ T10] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 281.379015][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input73 [ 281.474956][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 281.485778][ T5919] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 281.496893][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 281.507730][ T5919] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 281.518575][ T5919] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 281.527721][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.538034][ T5919] usb 7-1: config 0 descriptor?? [ 281.567198][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 281.567544][ T5921] usb 4-1: USB disconnect, device number 61 [ 281.574255][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 281.590080][ T5921] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 281.743146][ T5919] hdpvr 7-1:0.0: firmware version 0xfb dated ûZáöźQ‹r$¢ÿñAàá l¸$°°:-5ƒië¯2ÅÕÎ$ŸÓF@ [ 281.753463][ T5919] hdpvr 7-1:0.0: untested firmware, the driver might not work. [ 281.928362][ T30] audit: type=1400 audit(1767008181.570:719): avc: denied { write } for pid=10 comm="kworker/0:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48979 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 282.193873][ T5919] hdpvr 7-1:0.0: Could not setup controls [ 282.207625][ T5919] hdpvr 7-1:0.0: registering videodev failed [ 282.223629][ T5919] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -71 [ 282.254581][ T5919] usb 7-1: USB disconnect, device number 16 [ 282.595865][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3631'. [ 282.607327][T14420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3631'. [ 282.671269][T14423] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3632'. [ 282.673574][ T5819] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 282.682443][ T5821] Bluetooth: hci6: command 0xfc11 tx timeout [ 282.698117][T14423] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3632'. [ 282.730429][T14423] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3632'. [ 282.781422][T14423] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3632'. [ 282.813303][T14423] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3632'. [ 282.826302][T14423] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3632'. [ 282.996468][ T5921] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 283.147675][ T5921] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 283.163107][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.186009][ T5921] usb 6-1: Product: syz [ 283.190478][ T5921] usb 6-1: Manufacturer: syz [ 283.205222][ T5921] usb 6-1: SerialNumber: syz [ 283.219198][ T5921] usb 6-1: config 0 descriptor?? [ 283.245617][ T5921] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 283.265608][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 283.283176][ T5921] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 283.295568][ T5921] usb 6-1: media controller created [ 283.311586][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.365293][ T5921] DVB: Unable to find symbol mt352_attach() [ 283.401540][ T5921] DVB: Unable to find symbol nxt6000_attach() [ 283.411410][ T5921] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 283.431684][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input74 [ 283.455568][T14427] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 283.466928][T14427] dvb-usb: bulk message failed: -22 (7/0) [ 283.474757][ T5921] dvb-usb: schedule remote query interval to 1000 msecs. [ 283.483448][ T5921] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 283.507667][ T5921] dvb-usb: bulk message failed: -22 (7/0) [ 283.515356][ T5921] dvb-usb: bulk message failed: -22 (7/0) [ 283.526746][ T5921] usb 6-1: USB disconnect, device number 30 [ 283.624663][ T5921] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 283.695811][ T5919] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 283.726436][ T30] audit: type=1400 audit(1767008183.449:720): avc: denied { mount } for pid=14473 comm="syz.0.3654" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 283.844432][ T5919] usb 7-1: Using ep0 maxpacket: 32 [ 283.856448][ T5919] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 283.870293][ T5919] usb 7-1: config 0 has no interface number 0 [ 283.879253][ T5919] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 283.898434][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.909065][ T5919] usb 7-1: Product: syz [ 283.913461][ T5919] usb 7-1: Manufacturer: syz [ 283.918136][ T5919] usb 7-1: SerialNumber: syz [ 283.930383][ T5919] usb 7-1: config 0 descriptor?? [ 283.938886][ T5919] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 284.092878][ T5819] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 284.157151][ T5919] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 284.193342][ T5919] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 284.246843][T14505] bond0 (unregistering): Released all slaves [ 284.438515][ T6015] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 284.533534][T14520] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3675'. [ 284.561216][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 284.569045][ T5919] usb 7-1: USB disconnect, device number 17 [ 284.588171][ T5919] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 284.606115][ T6015] usb 6-1: Using ep0 maxpacket: 32 [ 284.615129][ T6015] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 284.616311][ T5919] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 284.640646][ T6015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.661425][ T5919] quatech2 7-1:0.51: device disconnected [ 284.663056][ T6015] usb 6-1: config 0 descriptor?? [ 284.886986][ T6015] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 284.904200][ T6015] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.920089][ T6015] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 284.929351][ T6015] usb 6-1: media controller created [ 284.953416][ T6015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.081298][ T6015] az6027: usb out operation failed. (-71) [ 285.098706][ T6015] az6027: usb out operation failed. (-71) [ 285.130397][ T6015] stb0899_attach: Driver disabled by Kconfig [ 285.140782][ T6015] az6027: no front-end attached [ 285.140782][ T6015] [ 285.153830][ T6015] az6027: usb out operation failed. (-71) [ 285.163125][ T6015] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 285.189155][ T6015] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input75 [ 285.224249][ T6015] dvb-usb: schedule remote query interval to 400 msecs. [ 285.245486][ T6015] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 285.262748][ T6015] usb 6-1: USB disconnect, device number 31 [ 285.382852][ T6015] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 285.666545][T14572] loop6: detected capacity change from 0 to 524279808 [ 285.722068][T14572] loop6: detected capacity change from 524279808 to 2 [ 286.105439][T14605] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3716'. [ 286.116842][ T30] audit: type=1400 audit(1767008185.969:721): avc: denied { write } for pid=14608 comm="syz.5.3717" path="socket:[50181]" dev="sockfs" ino=50181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 286.149464][ T6015] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 286.245320][ T30] audit: type=1400 audit(1767008186.095:722): avc: denied { mount } for pid=14613 comm="syz.4.3719" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 286.311565][ T6015] usb 1-1: Using ep0 maxpacket: 16 [ 286.328816][ T6015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.351661][ T6015] usb 1-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 286.388065][ T6015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.418652][ T6015] usb 1-1: config 0 descriptor?? [ 286.555219][ T30] audit: type=1400 audit(1767008186.431:723): avc: denied { mount } for pid=14629 comm="syz.5.3726" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 286.610280][ T30] audit: type=1400 audit(1767008186.463:724): avc: denied { search } for pid=14629 comm="syz.5.3726" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 286.698341][ T6015] usbhid 1-1:0.0: can't add hid device: -71 [ 286.703278][ T30] audit: type=1400 audit(1767008186.463:725): avc: denied { search } for pid=14629 comm="syz.5.3726" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 286.739821][ T6015] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 286.750046][ T6015] usb 1-1: USB disconnect, device number 53 [ 286.770890][ T30] audit: type=1400 audit(1767008186.463:726): avc: denied { search } for pid=14629 comm="syz.5.3726" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 286.840534][T14641] bond0: Removing last ns target with arp_interval on [ 286.840765][ T50] bond0: (slave bond_slave_0): interface is now down [ 286.869634][ T50] bond0: (slave bond_slave_1): interface is now down [ 286.897649][ T50] bond0: (slave bond1): interface is now down [ 286.909585][ T50] bond0: now running without any active interface! [ 287.049332][ T30] audit: type=1326 audit(1767008186.946:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14653 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952d58f749 code=0x7ffc0000 [ 287.080049][T14655] netlink: 'syz.6.3736': attribute type 10 has an invalid length. [ 287.110086][ T30] audit: type=1326 audit(1767008186.977:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14653 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952d58f749 code=0x7ffc0000 [ 287.151862][ T30] audit: type=1326 audit(1767008186.977:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14653 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952d58f749 code=0x7ffc0000 [ 287.178583][ T30] audit: type=1326 audit(1767008186.977:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14653 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952d58f749 code=0x7ffc0000 [ 287.377721][ T6015] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 287.530334][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 287.555190][ T6015] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.573638][ T6015] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 287.583700][ T6015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.599116][ T6015] usb 4-1: config 0 descriptor?? [ 287.688976][T14689] __nla_validate_parse: 3 callbacks suppressed [ 287.688988][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3753'. [ 287.716450][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 287.728930][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.740365][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.754683][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 287.778425][ T10] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 287.797451][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.810895][ T10] usb 1-1: config 0 descriptor?? [ 288.008455][ T6015] hid_mf 0003:0079:1846.003B: unknown main item tag 0x0 [ 288.035694][ T6015] hid_mf 0003:0079:1846.003B: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 288.064426][ T6015] hid_mf 0003:0079:1846.003B: Invalid report, this should never happen! [ 288.082537][ T6015] hid_mf 0003:0079:1846.003B: Force feedback init failed. [ 288.206939][ T5919] usb 4-1: USB disconnect, device number 62 [ 288.225873][ T10] shield 0003:0955:7214.003C: unexpected long global item [ 288.250222][ T10] shield 0003:0955:7214.003C: Parse failed [ 288.264424][ T10] shield 0003:0955:7214.003C: probe with driver shield failed with error -22 [ 288.446638][ T5921] usb 1-1: USB disconnect, device number 54 [ 288.716660][T14723] C: renamed from team_slave_0 (while UP) [ 288.724852][T14723] netlink: 'syz.3.3769': attribute type 2 has an invalid length. [ 288.735269][T14723] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3769'. [ 288.744672][T14723] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 288.864267][ T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 289.026076][ T10] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 289.040893][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.057287][ T10] usb 5-1: Product: syz [ 289.061484][ T10] usb 5-1: Manufacturer: syz [ 289.077277][ T10] usb 5-1: SerialNumber: syz [ 289.084072][ T10] usb 5-1: config 0 descriptor?? [ 289.293637][ T10] usb-storage 5-1:0.0: USB Mass Storage device detected [ 289.512495][ T10] usb 5-1: USB disconnect, device number 47 [ 289.520213][T14771] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.575281][T14776] netlink: 'syz.0.3791': attribute type 16 has an invalid length. [ 289.585670][T14771] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.593615][T14776] netlink: 'syz.0.3791': attribute type 17 has an invalid length. [ 289.728651][T14776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.876414][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3797'. [ 289.886891][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3797'. [ 289.924526][T14789] netlink: 428 bytes leftover after parsing attributes in process `syz.0.3798'. [ 289.934095][T14789] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3798'. [ 290.730381][ T5921] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 290.890199][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 290.903285][ T5921] usb 6-1: config index 0 descriptor too short (expected 65532, got 18) [ 290.921481][ T5921] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 290.929577][ T5921] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 290.953822][ T5921] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 290.970791][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.988865][ T5921] usb 6-1: Product: syz [ 290.993059][ T5921] usb 6-1: Manufacturer: syz [ 291.004936][T14814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3809'. [ 291.005668][ T5921] usb 6-1: SerialNumber: syz [ 291.036145][T14814] Unknown options in mask b7f2 [ 291.048884][ T5921] r8152-cfgselector 6-1: Unknown version 0x0000 [ 291.063836][ T5921] r8152-cfgselector 6-1: config 0 descriptor?? [ 291.478396][ T6015] r8152-cfgselector 6-1: USB disconnect, device number 32 [ 292.056513][T14883] batadv_slave_1: entered promiscuous mode [ 292.069844][T14882] batadv_slave_1: left promiscuous mode [ 292.171042][ T5819] Bluetooth: hci3: unexpected event for opcode 0x203d [ 292.254429][ T5921] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 292.400726][T14911] overlayfs: conflicting lowerdir path [ 292.416203][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.435775][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.456808][ T5921] usb 6-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 292.473779][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.495717][ T5921] usb 6-1: config 0 descriptor?? [ 292.529646][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 292.529663][ T30] audit: type=1400 audit(1767008192.699:749): avc: denied { bind } for pid=14914 comm="syz.3.3855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 292.900836][ T5921] magicmouse 0003:05AC:0324.003D: unknown main item tag 0x0 [ 292.939414][ T5921] magicmouse 0003:05AC:0324.003D: hidraw0: USB HID v0.00 Device [HID 05ac:0324] on usb-dummy_hcd.5-1/input0 [ 293.085428][ T10] usb 6-1: USB disconnect, device number 33 [ 293.645050][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 293.808733][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 293.815506][ T10] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.826625][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 293.833242][ T10] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 293.852732][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.865419][ T10] usb 7-1: config 0 descriptor?? [ 293.935468][ T30] audit: type=1400 audit(1767008194.180:750): avc: denied { write } for pid=14981 comm="syz.5.3885" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 293.958782][ T5921] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 294.103908][ T5921] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 294.113403][ T5921] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 294.123780][ T5921] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 294.141733][ T5921] usb 4-1: config 220 has no interface number 2 [ 294.157008][ T5921] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 294.186640][ T5921] usb 4-1: config 220 interface 0 has no altsetting 0 [ 294.194587][ T5921] usb 4-1: config 220 interface 76 has no altsetting 0 [ 294.202148][ T5921] usb 4-1: config 220 interface 1 has no altsetting 0 [ 294.220027][ T5921] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 294.233504][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.242933][ T5921] usb 4-1: Product: syz [ 294.254536][ T5921] usb 4-1: Manufacturer: syz [ 294.259972][ T5921] usb 4-1: SerialNumber: syz [ 294.271390][ T10] nzxt-smart2 0003:1E71:2009.003E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 294.480826][ T5921] usb 4-1: selecting invalid altsetting 0 [ 294.503176][ T5921] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 294.510532][ T5921] uvcvideo 4-1:220.0: No valid video chain found. [ 294.527560][ T5921] usb 4-1: selecting invalid altsetting 0 [ 294.534484][ T5921] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 294.545724][ T5921] usb 4-1: USB disconnect, device number 63 [ 294.678597][ T10] usb 7-1: USB disconnect, device number 18 [ 295.083681][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 295.097198][T15047] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3914'. [ 295.132337][ T5921] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5921 comm: kworker/1:6) [ 295.252927][ T10] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 295.265050][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.273142][ T10] usb 1-1: Product: syz [ 295.280497][ T10] usb 1-1: Manufacturer: syz [ 295.285655][ T10] usb 1-1: SerialNumber: syz [ 295.295202][ T10] hub 1-1:24.0: bad descriptor, ignoring hub [ 295.302132][ T10] hub 1-1:24.0: probe with driver hub failed with error -5 [ 295.491042][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 295.501431][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 295.511386][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 295.519966][ T10] usb 1-1: media controller created [ 295.530501][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.540242][ T6015] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 295.571502][ T10] DVB: Unable to find symbol dib7000p_attach() [ 295.577679][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 295.626042][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 295.632205][ T10] Registered IR keymap rc-empty [ 295.643097][ T10] dvb-usb: could not initialize remote control. [ 295.651678][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 295.705035][ T6015] usb 7-1: Using ep0 maxpacket: 32 [ 295.713942][ T6015] usb 7-1: config 0 has an invalid interface number: 209 but max is 0 [ 295.722520][ T6015] usb 7-1: config 0 has no interface number 0 [ 295.729083][ T6015] usb 7-1: config 0 interface 209 has no altsetting 0 [ 295.738109][ T6015] usb 7-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 295.748358][ T6015] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.757362][ T6015] usb 7-1: Product: syz [ 295.761779][ T6015] usb 7-1: Manufacturer: syz [ 295.766387][ T6015] usb 7-1: SerialNumber: syz [ 295.772939][ T6015] usb 7-1: config 0 descriptor?? [ 295.978344][ T5879] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 296.000066][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3918'. [ 296.039214][ T6015] usb 7-1: USB disconnect, device number 19 [ 296.130703][ T5879] usb 6-1: Using ep0 maxpacket: 32 [ 296.146804][ T5879] usb 6-1: config 0 interface 0 has no altsetting 0 [ 296.168218][ T5879] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 296.190809][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.207101][ T5879] usb 6-1: Product: syz [ 296.211485][ T5879] usb 6-1: Manufacturer: syz [ 296.216160][ T5879] usb 6-1: SerialNumber: syz [ 296.228936][ T5879] usb 6-1: config 0 descriptor?? [ 296.253822][ T9826] block nbd1: Possible stuck request ffff888026780000: control (read@0,1024B). Runtime 120 seconds [ 296.264941][ T9826] block nbd1: Possible stuck request ffff888026780200: control (read@1024,1024B). Runtime 120 seconds [ 296.276086][ T9826] block nbd1: Possible stuck request ffff888026780400: control (read@2048,1024B). Runtime 120 seconds [ 296.289157][ T9826] block nbd1: Possible stuck request ffff888026780600: control (read@3072,1024B). Runtime 120 seconds [ 296.623798][ T5879] gs_usb 6-1:0.0: Configuring for 2 interfaces [ 296.718310][ T30] audit: type=1400 audit(1767008197.098:751): avc: denied { getopt } for pid=15091 comm="syz.6.3933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 296.808820][ T30] audit: type=1400 audit(1767008197.203:752): avc: denied { read } for pid=15097 comm="syz.6.3937" path="socket:[51737]" dev="sockfs" ino=51737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 296.835137][T15100] sctp: [Deprecated]: syz.3.3936 (pid 15100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.835137][T15100] Use struct sctp_sack_info instead [ 296.888987][ T30] audit: type=1400 audit(1767008197.277:753): avc: denied { create } for pid=15101 comm="syz.4.3938" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1 [ 296.909696][ T30] audit: type=1400 audit(1767008197.277:754): avc: denied { create } for pid=15101 comm="syz.4.3938" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 297.027182][ T5879] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 297.040568][ T5879] gs_usb 6-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 297.065744][ T5879] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 297.086829][ T5879] usb 6-1: USB disconnect, device number 34 [ 297.100370][T15113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3943'. [ 297.209225][ T5819] Bluetooth: hci3: ISO packet too small [ 297.248101][ T5921] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 297.411127][ T5921] usb 7-1: not running at top speed; connect to a high speed hub [ 297.427364][ T5921] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 297.445070][ T5921] usb 7-1: config 1 has no interface number 1 [ 297.460349][ T5921] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 297.476217][ T5921] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 297.489494][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.499968][ T5921] usb 7-1: Product: syz [ 297.504945][ T5921] usb 7-1: Manufacturer: syz [ 297.510959][ T5921] usb 7-1: SerialNumber: syz [ 297.511086][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3953'. [ 297.612994][ T30] audit: type=1400 audit(1767008198.043:755): avc: denied { getopt } for pid=15138 comm="syz.5.3956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 297.695808][T15030] dib0700: could not acquire lock [ 297.735516][ T5921] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 297.776539][ T5921] usb 7-1: USB disconnect, device number 20 [ 297.862014][ T10] usb 1-1: USB disconnect, device number 55 [ 297.929991][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 298.455955][T15171] input: syz0 as /devices/virtual/input/input78 [ 298.621594][ T30] audit: type=1400 audit(1767008199.104:756): avc: denied { getopt } for pid=15179 comm="syz.5.3976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 298.801403][T15189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3979'. [ 298.931898][T15194] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3982'. [ 299.576854][T15228] autofs4:pid:15228:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1803188595.1701604449), cmd(0xc0189371) [ 299.605391][ T30] audit: type=1400 audit(1767008200.133:757): avc: denied { getopt } for pid=15229 comm="syz.5.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 299.624867][T15228] autofs4:pid:15228:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189371) [ 300.039550][T15256] comedi comedi0: No channels found! [ 300.075504][ T5879] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 300.238057][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.247187][T15266] devpts: Bad value for 'max' [ 300.249178][ T5879] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 300.266189][ T5879] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 300.285641][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.304346][ T5879] usb 5-1: config 0 descriptor?? [ 300.322772][ T5879] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 300.336835][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 300.354554][ T5879] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 300.364699][ T5879] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 300.379457][ T5879] usb 5-1: media controller created [ 300.385830][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 300.430705][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 300.461478][ T5879] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 300.483099][ T5879] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input79 [ 300.542414][T15242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.544467][T15277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4022'. [ 300.550925][ T5879] dvb-usb: schedule remote query interval to 150 msecs. [ 300.550945][ T5879] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 300.557354][T15242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.644145][T15277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4022'. [ 300.675174][T15277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4022'. [ 300.690461][ T5879] usb 5-1: USB disconnect, device number 48 [ 300.775782][ T5879] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 300.971807][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 301.019149][T15298] batadv_slave_1: entered promiscuous mode [ 301.034764][T15298] batadv_slave_1: left promiscuous mode [ 301.124353][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.141271][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.152751][ T10] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 301.162249][ T10] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 301.170718][ T10] usb 7-1: Manufacturer: syz [ 301.178282][ T10] usb 7-1: config 0 descriptor?? [ 301.271440][T15308] raw_sendmsg: syz.4.4036 forgot to set AF_INET. Fix it! [ 301.571571][ T5879] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 301.622640][ T10] pyra 0003:1E7D:2CF6.003F: unknown main item tag 0x0 [ 301.636281][ T10] pyra 0003:1E7D:2CF6.003F: unknown main item tag 0x0 [ 301.643093][ T10] pyra 0003:1E7D:2CF6.003F: unknown main item tag 0x0 [ 301.655650][ T10] pyra 0003:1E7D:2CF6.003F: unknown main item tag 0x0 [ 301.662488][ T10] pyra 0003:1E7D:2CF6.003F: unknown main item tag 0x0 [ 301.679816][ T10] pyra 0003:1E7D:2CF6.003F: unknown main item tag 0x0 [ 301.693463][ T10] pyra 0003:1E7D:2CF6.003F: unknown main item tag 0x0 [ 301.704166][ T10] pyra 0003:1E7D:2CF6.003F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 301.740883][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 301.748562][ T5879] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 301.758019][ T5879] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 301.783350][ T5879] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 301.808109][ T5879] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 301.826062][ T10] pyra 0003:1E7D:2CF6.003F: couldn't init struct pyra_device [ 301.846308][ T10] pyra 0003:1E7D:2CF6.003F: couldn't install mouse [ 301.855992][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 301.864336][ T10] pyra 0003:1E7D:2CF6.003F: probe with driver pyra failed with error -32 [ 301.877018][ T5879] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 301.892893][ T5879] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 301.903089][ T10] usb 7-1: USB disconnect, device number 21 [ 301.914273][ T5879] usb 4-1: Product: syz [ 301.926298][ T5879] usb 4-1: Manufacturer: syz [ 301.931720][ T5879] usb 4-1: SerialNumber: syz [ 301.951878][ T5879] usb 4-1: config 0 descriptor?? [ 301.964555][ T5879] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 301.990767][ T5879] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 302.038984][T15335] fido_id[15335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 302.321684][ T5921] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 302.429257][ T24] usb 4-1: USB disconnect, device number 64 [ 302.458200][ T24] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 302.503036][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 302.514358][ T5921] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 302.528686][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.550002][ T5921] pvrusb2: Hardware description: Terratec Grabster AV400 [ 302.564116][ T5921] pvrusb2: ********** [ 302.568503][ T5921] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 302.580062][ T5921] pvrusb2: Important functionality might not be entirely working. [ 302.588263][ T5921] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 302.601015][ T5921] pvrusb2: ********** [ 302.731474][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 302.752203][ T2338] pvrusb2: Invalid write control endpoint [ 302.818452][ T2338] pvrusb2: Invalid write control endpoint [ 302.844007][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 302.855667][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 302.863342][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 302.877049][ T2338] pvrusb2: Device being rendered inoperable [ 302.883000][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 302.893319][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 302.903581][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 302.906057][ T2338] pvrusb2: Attached sub-driver cx25840 [ 302.922117][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.928756][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 302.950315][ T10] usb 7-1: Product: syz [ 302.954509][ T10] usb 7-1: Manufacturer: syz [ 302.956758][ T5919] usb 5-1: USB disconnect, device number 49 [ 302.959099][ T10] usb 7-1: SerialNumber: syz [ 302.969387][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 303.146992][T15362] smc: net device bond0 applied user defined pnetid SYZ0 [ 303.652129][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 303.673196][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 303.698989][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 303.717248][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 303.727993][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 303.739233][ T10] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 303.773758][ T10] usb 7-1: USB disconnect, device number 22 [ 304.388955][ T5921] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 304.429335][T15402] netlink: 'syz.4.4078': attribute type 29 has an invalid length. [ 304.439916][T15402] netlink: 'syz.4.4078': attribute type 29 has an invalid length. [ 304.449784][T15402] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4078'. [ 304.459389][T15402] unsupported nla_type 58 [ 304.474344][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 304.570127][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 304.578759][ T5921] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 304.590270][ T5921] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 304.607722][ T5921] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 304.621998][ T5921] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 304.628677][ T10] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 304.643748][ T5921] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 304.654187][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.674534][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.695126][ T10] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 304.705611][ T5921] usbtmc 4-1:16.0: bulk endpoints not found [ 304.711770][ T10] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 304.739078][ T10] usb 7-1: Manufacturer: syz [ 304.898722][ T10] usb 7-1: config 0 descriptor?? [ 304.990015][ T5921] usb 4-1: USB disconnect, device number 65 [ 305.017272][ T10] rc_core: IR keymap rc-hauppauge not found [ 305.026736][ T10] Registered IR keymap rc-empty [ 305.032426][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 305.066770][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input80 [ 305.205303][ T5921] usb 7-1: USB disconnect, device number 23 [ 305.436709][ T5919] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 305.514113][T15434] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4091'. [ 305.598707][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 305.606087][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 305.617736][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 305.633410][ T5919] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 305.646578][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 305.654248][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 305.665506][ T5919] usb 4-1: SerialNumber: syz [ 305.672197][ T5919] usb 4-1: config 0 descriptor?? [ 305.689451][ T5919] hso 4-1:0.0: Can't find BULK IN endpoint [ 305.771773][T15449] netlink: 'syz.6.4097': attribute type 1 has an invalid length. [ 305.780806][T15449] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.4097'. [ 305.799803][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.818314][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.843705][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.858116][ T10] usb 6-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 305.871462][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.897346][ T10] usb 6-1: config 0 descriptor?? [ 305.909451][ T5919] usb 4-1: USB disconnect, device number 66 [ 305.960125][ T6015] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 306.117177][ T6015] usb 5-1: Using ep0 maxpacket: 16 [ 306.133831][ T6015] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 306.142636][ T6015] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.153577][ T6015] usb 5-1: config 0 has no interface number 0 [ 306.159727][ T6015] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 306.171046][ T6015] usb 5-1: config 0 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.184400][ T6015] usb 5-1: config 0 interface 98 has no altsetting 0 [ 306.194881][ T6015] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 306.204329][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.213036][ T6015] usb 5-1: Product: syz [ 306.218440][ T6015] usb 5-1: Manufacturer: syz [ 306.223064][ T6015] usb 5-1: SerialNumber: syz [ 306.230414][ T6015] usb 5-1: config 0 descriptor?? [ 306.237529][T15447] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 306.252355][ T6015] asix 5-1:0.98: probe with driver asix failed with error -22 [ 306.305626][ T10] wacom 0003:056A:0010.0040: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 306.316903][ T10] wacom 0003:056A:0010.0040: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.5-1/input0 [ 306.330039][ T10] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0010.0040/input/input81 [ 306.360482][ T5879] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 306.468344][ T5921] usb 5-1: USB disconnect, device number 50 [ 306.527735][ T5879] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 306.528094][ T5919] usb 6-1: USB disconnect, device number 35 [ 306.541225][ T5879] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 306.563620][ T5879] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 306.588866][ T5879] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 306.622757][ T5879] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 306.637509][ T5879] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 306.647089][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 306.655098][ T5879] usb 7-1: Product: syz [ 306.659556][ T5879] usb 7-1: Manufacturer: syz [ 306.672421][ T5879] cdc_wdm 7-1:1.0: skipping garbage [ 306.679350][ T5879] cdc_wdm 7-1:1.0: skipping garbage [ 306.689764][ T5879] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 306.695937][ T5879] cdc_wdm 7-1:1.0: Unknown control protocol [ 306.803290][ T30] audit: type=1400 audit(1767008207.692:758): avc: denied { getopt } for pid=15481 comm="syz.3.4113" lport=50013 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 307.050466][T15491] 9p: Unknown Cache mode or invalid value Œ [ 307.106680][ T30] audit: type=1400 audit(1767008208.007:759): avc: denied { override_creds } for pid=15492 comm="syz.4.4118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 307.141273][ T5879] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 307.179177][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 307.322032][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 307.335616][ T5879] usb 4-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64 [ 307.350732][ T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 307.364423][ T5879] usb 4-1: config 1 interface 0 has no altsetting 0 [ 307.371192][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.382561][ T10] usb 1-1: Product: syz [ 307.386972][ T10] usb 1-1: Manufacturer: syz [ 307.394408][ T5879] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 307.403946][ T10] usb 1-1: SerialNumber: syz [ 307.410567][ T5919] usb 7-1: USB disconnect, device number 24 [ 307.414588][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.449267][ T5879] usb 4-1: Product: syz [ 307.465296][ T5879] usb 4-1: Manufacturer: syz [ 307.481333][ T5879] usb 4-1: SerialNumber: syz [ 307.504475][T15484] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 307.700452][ T10] rtl8150 1-1:1.0: couldn't reset the device [ 307.709443][T15520] loop7: detected capacity change from 0 to 16384 [ 307.716736][ T10] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 307.740342][ T5879] usb 4-1: USB disconnect, device number 67 [ 307.755244][ T10] usb 1-1: USB disconnect, device number 56 [ 307.770350][T15520] loop7: detected capacity change from 16384 to 16383 [ 308.654343][T15550] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4143'. [ 308.753081][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4146'. [ 308.799017][ T30] audit: type=1400 audit(1767008209.792:760): avc: denied { remount } for pid=15557 comm="syz.3.4147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 308.939789][ T30] audit: type=1400 audit(1767008209.928:761): avc: denied { create } for pid=15567 comm="syz.5.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 308.980105][ T30] audit: type=1400 audit(1767008209.928:762): avc: denied { sys_admin } for pid=15567 comm="syz.5.4152" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 309.119846][ T30] audit: type=1400 audit(1767008210.117:763): avc: denied { execute } for pid=15575 comm="syz.0.4155" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 309.523791][T15595] netlink: 'syz.3.4163': attribute type 11 has an invalid length. [ 309.951306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.960604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.966566][T15619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.198968][ T5819] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 310.307525][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4183'. [ 310.419360][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 310.606735][T15657] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4187'. [ 311.122760][ T5921] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 311.172801][ T30] audit: type=1400 audit(1767008212.270:764): avc: denied { setattr } for pid=15678 comm="syz.0.4197" name="/" dev="configfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 311.312948][ T5921] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.350059][ T5921] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 311.379145][ T5921] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.395018][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.425785][ T5921] usb 6-1: Product: syz [ 311.430137][ T5921] usb 6-1: Manufacturer: syz [ 311.434735][ T5921] usb 6-1: SerialNumber: syz [ 311.521826][T15689] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.4202'. [ 311.617219][T15696] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 311.617583][T15695] IPVS: stopping master sync thread 15696 ... [ 311.628599][ T10] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 311.642785][T15670] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 311.790632][ T10] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 311.799189][ T10] usb 4-1: config 0 has no interface number 0 [ 311.807452][ T10] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 311.817106][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.825343][ T10] usb 4-1: Product: syz [ 311.829803][ T5879] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 311.840760][ T10] usb 4-1: Manufacturer: syz [ 311.846795][ T10] usb 4-1: SerialNumber: syz [ 311.860686][ T10] usb 4-1: config 0 descriptor?? [ 311.980964][ T5879] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 311.998665][ T5879] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.017591][ T5879] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.030287][ T5879] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.040344][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.050133][ T5879] usb 7-1: Product: syz [ 312.054356][ T5879] usb 7-1: Manufacturer: syz [ 312.064975][ T5879] usb 7-1: SerialNumber: syz [ 312.242544][T15670] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 312.263317][ T10] usb 4-1: Firmware: major: 52, minor: 105, hardware type: HULUSB (4) [ 312.280783][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4204'. [ 312.304490][ T5879] usb 7-1: 0:2 : does not exist [ 312.329250][ T5879] usb 7-1: USB disconnect, device number 25 [ 312.363343][T10844] udevd[10844]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.447862][ T5921] cdc_ncm 6-1:1.0: failed to get mac address [ 312.455283][ T10] usb 4-1: failed to fetch extended address, random address set [ 312.460478][ T5921] cdc_ncm 6-1:1.0: bind() failure [ 312.477394][ T5921] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 312.501227][ T5921] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 312.512007][ T5921] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 312.523727][ T10] usb 4-1: USB disconnect, device number 68 [ 312.540306][ T5921] usb 6-1: USB disconnect, device number 36 [ 312.616692][T15720] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ [ 313.229315][ T5821] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 313.317151][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.610026][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.684712][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.783315][ T5921] libceph: connect (1)[c::]:6789 error -101 [ 313.789622][ T5921] libceph: mon0 (1)[c::]:6789 connect error [ 313.801942][T15772] ceph: No mds server is up or the cluster is laggy [ 313.831222][T15776] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 314.087474][T15789] mac80211_hwsim hwsim10 pim6reg1: entered promiscuous mode [ 314.098845][T15789] mac80211_hwsim hwsim10 pim6reg1: entered allmulticast mode [ 314.138127][T15795] input: syz1 as /devices/virtual/input/input84 [ 314.145364][T15795] input: failed to attach handler leds to device input84, error: -6 [ 314.156080][ T30] audit: type=1400 audit(1767008215.409:765): avc: denied { remount } for pid=15791 comm="syz.6.4245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 314.321674][T15807] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.334690][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 314.342485][T15807] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.452303][T15807] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.472986][T15807] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.503538][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 314.510287][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.529672][ T30] audit: type=1400 audit(1767008215.797:766): avc: denied { accept } for pid=15814 comm="syz.6.4252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 314.531255][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.566321][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 314.577110][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.597021][ T10] usb 4-1: config 0 descriptor?? [ 314.613549][T15807] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.624088][T15807] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.764607][T15807] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.776346][T15807] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.871273][ T8215] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.885988][ T8215] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.902210][ T8215] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.912317][ T8215] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.941738][ T5879] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 314.947002][ T8184] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.957967][ T8184] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.968105][ T8184] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.976645][ T8184] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.989672][ T24] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 315.023820][ T10] koneplus 0003:1E7D:2D51.0041: unknown main item tag 0x0 [ 315.033217][ T10] koneplus 0003:1E7D:2D51.0041: unknown main item tag 0x0 [ 315.041268][ T10] koneplus 0003:1E7D:2D51.0041: unknown main item tag 0x0 [ 315.049117][ T10] koneplus 0003:1E7D:2D51.0041: unknown main item tag 0x0 [ 315.062971][ T10] koneplus 0003:1E7D:2D51.0041: unknown main item tag 0x0 [ 315.080338][ T10] koneplus 0003:1E7D:2D51.0041: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 315.135254][ T5879] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.153000][ T5879] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x58, changing to 0x8 [ 315.166607][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 315.168459][ T5879] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 315.183788][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 315.200664][ T5879] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.215265][ T24] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 315.232146][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.246170][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.255146][ T5879] usb 1-1: Product: syz [ 315.263889][ T5879] usb 1-1: Manufacturer: syz [ 315.270864][ T24] usb 7-1: Product: syz [ 315.275049][ T24] usb 7-1: Manufacturer: syz [ 315.275352][ T5879] usb 1-1: SerialNumber: syz [ 315.291007][ T24] usb 7-1: SerialNumber: syz [ 315.305409][ T24] usb 7-1: config 0 descriptor?? [ 315.314586][T15821] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 315.321823][T15821] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 315.438481][ T5919] usb 4-1: USB disconnect, device number 69 [ 315.524267][T15821] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 315.531589][T15821] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 315.538981][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 315.696930][ T10] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 315.706164][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.714225][ T10] usb 6-1: Product: syz [ 315.718542][ T10] usb 6-1: Manufacturer: syz [ 315.723475][ T10] usb 6-1: SerialNumber: syz [ 315.730292][ T10] usb 6-1: config 0 descriptor?? [ 315.909872][ T5821] Bluetooth: Frame is too long (len 24, expected len 4) [ 315.931250][ T24] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 315.960968][ T10] usb 6-1: USB disconnect, device number 37 [ 316.254585][ T5879] cdc_ncm 1-1:1.0: bind() failure [ 316.284135][ T5879] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 316.305688][ T5879] usb 1-1: USB disconnect, device number 57 [ 316.318289][ T24] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 316.344909][ T24] usb 7-1: USB disconnect, device number 26 [ 316.655154][ T30] audit: type=1400 audit(1767008218.034:767): avc: denied { watch watch_reads } for pid=15872 comm="syz.3.4280" path="/selinux/checkreqprot" dev="selinuxfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 316.742727][ T5966] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 316.923641][ T5966] usb 5-1: Using ep0 maxpacket: 8 [ 316.949575][ T5966] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 316.968330][ T5966] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 317.001153][ T5966] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 317.045268][ T5966] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 317.058794][ T5966] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.083433][ T5966] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 317.113363][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.599137][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 317.637178][ T5879] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 317.743844][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 317.750821][ T10] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 317.760087][ T10] usb 7-1: config 0 has no interface number 0 [ 317.770072][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 317.781707][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.790318][ T5879] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 317.814243][ T10] usb 7-1: Product: syz [ 317.818943][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 317.832368][ T10] usb 7-1: Manufacturer: syz [ 317.836973][ T10] usb 7-1: SerialNumber: syz [ 317.839558][T15934] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4308'. [ 317.842649][ T5879] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 317.860467][ T10] usb 7-1: config 0 descriptor?? [ 317.868001][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.877597][ T10] smsc95xx v2.0.0 [ 317.892092][ T5879] usb 4-1: config 0 descriptor?? [ 317.949138][ T30] audit: type=1400 audit(1767008219.388:768): avc: denied { read } for pid=15939 comm="syz.0.4310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 318.052373][ T6015] usb 5-1: USB disconnect, device number 51 [ 318.263637][ T5966] kernel write not supported for file /uhid (pid: 5966 comm: kworker/1:9) [ 318.313840][ T5879] magicmouse 0003:05AC:0269.0042: hidraw0: USB HID v11.da Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0 [ 318.529542][ T5966] usb 4-1: USB disconnect, device number 70 [ 318.855979][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 318.885220][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 318.896835][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 318.988367][ T10] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 319.012057][ T10] usb 7-1: USB disconnect, device number 27 [ 319.151894][ T5966] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 319.169550][ T30] audit: type=1400 audit(1767008220.669:769): avc: denied { map } for pid=15989 comm="syz.3.4333" path="socket:[56068]" dev="sockfs" ino=56068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 319.244286][T15994] sock: sock_set_timeout: `syz.0.4335' (pid 15994) tries to set negative timeout [ 319.313845][ T5966] usb 5-1: Using ep0 maxpacket: 32 [ 319.320838][ T5966] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 319.336753][ T5966] usb 5-1: config 0 has no interface number 0 [ 319.343579][ T5966] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 319.355396][ T5966] usb 5-1: config 0 interface 196 has no altsetting 0 [ 319.365776][ T5966] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 319.375983][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.395123][ T5966] usb 5-1: Product: syz [ 319.400622][ T5966] usb 5-1: Manufacturer: syz [ 319.405761][ T5966] usb 5-1: SerialNumber: syz [ 319.406059][ T30] audit: type=1400 audit(1767008220.921:770): avc: denied { mounton } for pid=16001 comm="syz.3.4339" path="/809/file0" dev="cgroup" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 319.420670][ T5966] usb 5-1: config 0 descriptor?? [ 319.441340][T15985] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 319.478441][ T30] audit: type=1400 audit(1767008220.984:771): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 319.579564][T16008] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4343'. [ 319.906072][ T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 320.038110][ T5966] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 320.066165][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 320.067136][ T5966] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 320.077578][ T10] usb 7-1: config 0 has an invalid interface number: 81 but max is 0 [ 320.101523][ T10] usb 7-1: config 0 has no interface number 0 [ 320.115380][ T10] usb 7-1: config 0 interface 81 has no altsetting 0 [ 320.143200][ T10] usb 7-1: New USB device found, idVendor=0856, idProduct=bc01, bcdDevice=7b.45 [ 320.157745][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.166780][ T10] usb 7-1: Product: syz [ 320.171213][ T10] usb 7-1: Manufacturer: syz [ 320.175856][ T10] usb 7-1: SerialNumber: syz [ 320.200706][ T10] usb 7-1: config 0 descriptor?? [ 320.240157][ T5879] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 320.279401][ T6015] usb 5-1: USB disconnect, device number 52 [ 320.335352][ T6015] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 320.393301][ T5879] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 320.408734][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.422911][ T5879] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 320.432885][ T5872] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 320.444319][ T5879] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 320.453508][ T5879] usb 4-1: Manufacturer: syz [ 320.467269][ T5879] usb 4-1: config 0 descriptor?? [ 320.532570][ T5879] rc_core: IR keymap rc-hauppauge not found [ 320.538657][ T5879] Registered IR keymap rc-empty [ 320.546727][ T5879] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 320.559060][ T5879] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input85 [ 320.589739][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 320.606355][ T5872] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 320.629903][ T5872] usb 6-1: config 0 has no interface number 0 [ 320.657632][ T5872] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 320.695119][ T5872] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 320.707033][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 320.721583][ T5872] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 320.743963][ T5879] usb 4-1: USB disconnect, device number 71 [ 320.755079][ T5872] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 320.768719][ T5872] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 320.810758][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.831903][ T10] mos7840 7-1:0.81: required endpoints missing [ 320.862359][ T10] usb 7-1: USB disconnect, device number 28 [ 320.870113][ T5872] usb 6-1: config 0 descriptor?? [ 320.898944][ T5872] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 321.044952][T16072] input: syz1 as /devices/virtual/input/input86 [ 321.151881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.557493][T16103] tipc: Enabling of bearer rejected, failed to enable media [ 321.566777][T16104] sctp: [Deprecated]: syz.0.4372 (pid 16104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.566777][T16104] Use struct sctp_sack_info instead [ 322.064964][ T10] hid-generic 0003:0004:0000.0043: unknown main item tag 0x0 [ 322.074798][ T10] hid-generic 0003:0004:0000.0043: unknown main item tag 0x0 [ 322.082837][ T10] hid-generic 0003:0004:0000.0043: unknown main item tag 0x0 [ 322.094916][ T5966] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 322.108382][ T10] hid-generic 0003:0004:0000.0043: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 322.248649][ T5966] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.258899][ T5966] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.269272][ T5966] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 322.279723][ T5966] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 322.288138][ T5966] usb 7-1: SerialNumber: syz [ 322.323231][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 322.475674][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 322.482757][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.495336][ T5966] usb 7-1: 0:2 : does not exist [ 322.499074][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.511641][ T5966] usb 7-1: USB disconnect, device number 29 [ 322.512512][ T10] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 322.527049][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.541940][ T10] usb 5-1: config 0 descriptor?? [ 322.556819][ T6086] udevd[6086]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.888192][ T30] audit: type=1326 audit(1767008224.575:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16140 comm="syz.0.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde618f749 code=0x7ffc0000 [ 322.913332][ T30] audit: type=1326 audit(1767008224.575:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16140 comm="syz.0.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde618f749 code=0x7ffc0000 [ 322.941423][ T30] audit: type=1326 audit(1767008224.596:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16140 comm="syz.0.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbde618f749 code=0x7ffc0000 [ 322.943651][ T10] cherry 0003:046A:0027.0044: unknown main item tag 0x6 [ 322.993984][ T30] audit: type=1326 audit(1767008224.596:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16140 comm="syz.0.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde618f749 code=0x7ffc0000 [ 323.017837][ T10] cherry 0003:046A:0027.0044: unknown global tag 0xc [ 323.026550][ T10] cherry 0003:046A:0027.0044: item 0 4 1 12 parsing failed [ 323.036256][ T10] cherry 0003:046A:0027.0044: probe with driver cherry failed with error -22 [ 323.050293][ T5921] usb 6-1: USB disconnect, device number 38 [ 323.086194][ T5921] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 323.097512][ T30] audit: type=1326 audit(1767008224.596:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16140 comm="syz.0.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde618f749 code=0x7ffc0000 [ 323.232045][ T5966] usb 5-1: USB disconnect, device number 53 [ 323.249690][ T30] audit: type=1400 audit(1767008224.963:777): avc: denied { mounton } for pid=16151 comm="syz.3.4394" path=2F3832332FE91F7189591E9233614B dev="tmpfs" ino=4216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 323.901357][T16203] overlay: filesystem on ./bus is read-only [ 323.961932][ T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 324.091630][ T30] audit: type=1400 audit(1767008225.845:778): avc: denied { bind } for pid=16211 comm="syz.3.4423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 324.133284][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 324.143834][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 324.154569][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.171328][ T10] usb 1-1: Product: syz [ 324.175574][ T10] usb 1-1: Manufacturer: syz [ 324.183590][ T10] usb 1-1: SerialNumber: syz [ 324.196431][ T10] usb 1-1: config 0 descriptor?? [ 324.212031][T16219] team_slave_0: entered promiscuous mode [ 324.215222][ T10] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 324.218660][T16219] team_slave_1: entered promiscuous mode [ 324.220746][T16219] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 324.307061][T16222] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 324.419189][ T10] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 324.449773][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 324.486203][ T10] usb 1-1: USB disconnect, device number 58 [ 324.839047][ T5921] kernel write not supported for file /snd/seq (pid: 5921 comm: kworker/1:6) [ 324.887322][ T9826] block nbd1: Possible stuck request ffff888026780000: control (read@0,1024B). Runtime 150 seconds [ 324.898252][ T9826] block nbd1: Possible stuck request ffff888026780200: control (read@1024,1024B). Runtime 150 seconds [ 324.909323][ T9826] block nbd1: Possible stuck request ffff888026780400: control (read@2048,1024B). Runtime 150 seconds [ 324.922268][ T9826] block nbd1: Possible stuck request ffff888026780600: control (read@3072,1024B). Runtime 150 seconds [ 325.012778][T16248] IPVS: Error connecting to the multicast addr [ 325.052218][ T30] audit: type=1400 audit(1767008226.853:779): avc: denied { connect } for pid=16249 comm="syz.5.4438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 325.138103][T16256] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 325.233312][T16259] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 325.266806][T16259] CPU: 1 UID: 0 PID: 16259 Comm: syz.4.4442 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.266847][T16259] Tainted: [L]=SOFTLOCKUP [ 325.266855][T16259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 325.266867][T16259] Call Trace: [ 325.266873][T16259] [ 325.266882][T16259] dump_stack_lvl+0x16c/0x1f0 [ 325.266912][T16259] sysfs_warn_dup+0x7f/0xa0 [ 325.266938][T16259] sysfs_do_create_link_sd+0x124/0x140 [ 325.266964][T16259] sysfs_create_link+0x61/0xc0 [ 325.266986][T16259] device_add+0x652/0x1980 [ 325.267010][T16259] ? __pfx_device_add+0x10/0x10 [ 325.267029][T16259] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 325.267053][T16259] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 325.267082][T16259] wiphy_register+0x1ea1/0x2cc0 [ 325.267109][T16259] ? __rtnl_unlock+0x68/0xf0 [ 325.267134][T16259] ? __netdev_update_features+0x1880/0x1fe0 [ 325.267163][T16259] ? __pfx_wiphy_register+0x10/0x10 [ 325.267191][T16259] ? __asan_memset+0x23/0x50 [ 325.267220][T16259] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 325.267251][T16259] ieee80211_register_hw+0x2bb2/0x4160 [ 325.267291][T16259] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 325.267318][T16259] ? __pfx___debug_object_init+0x10/0x10 [ 325.267349][T16259] ? find_held_lock+0x2b/0x80 [ 325.267377][T16259] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 325.267399][T16259] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 325.267422][T16259] ? __hrtimer_setup+0x176/0x280 [ 325.267452][T16259] mac80211_hwsim_new_radio+0x3323/0x5150 [ 325.267499][T16259] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 325.267530][T16259] ? __asan_memcpy+0x3c/0x60 [ 325.267555][T16259] hwsim_new_radio_nl+0xba2/0x1330 [ 325.267587][T16259] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 325.267626][T16259] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 325.267655][T16259] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 325.267690][T16259] genl_family_rcv_msg_doit+0x209/0x2f0 [ 325.267719][T16259] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 325.267753][T16259] ? bpf_lsm_capable+0x9/0x10 [ 325.267773][T16259] ? security_capable+0x7e/0x260 [ 325.267795][T16259] ? ns_capable+0xd7/0x110 [ 325.267832][T16259] genl_rcv_msg+0x55c/0x800 [ 325.267864][T16259] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.267892][T16259] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 325.267934][T16259] netlink_rcv_skb+0x158/0x420 [ 325.267959][T16259] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.267987][T16259] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 325.268022][T16259] ? netlink_deliver_tap+0x1ae/0xd30 [ 325.268046][T16259] genl_rcv+0x28/0x40 [ 325.268067][T16259] netlink_unicast+0x5aa/0x870 [ 325.268092][T16259] ? __pfx_netlink_unicast+0x10/0x10 [ 325.268114][T16259] ? __asan_memset+0x23/0x50 [ 325.268134][T16259] ? __build_skb_around+0x278/0x390 [ 325.268170][T16259] netlink_sendmsg+0x8c8/0xdd0 [ 325.268199][T16259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.268235][T16259] sock_sendmsg+0x3cc/0x470 [ 325.268262][T16259] ? __pfx_sock_sendmsg+0x10/0x10 [ 325.268308][T16259] splice_to_socket+0xaf4/0x1110 [ 325.268355][T16259] ? __pfx_splice_to_socket+0x10/0x10 [ 325.268396][T16259] ? inode_has_perm+0x16d/0x1d0 [ 325.268444][T16259] ? bpf_lsm_file_permission+0x9/0x10 [ 325.268464][T16259] ? security_file_permission+0x71/0x210 [ 325.268493][T16259] ? rw_verify_area+0xcf/0x6c0 [ 325.268512][T16259] ? __pfx_splice_to_socket+0x10/0x10 [ 325.268544][T16259] do_splice+0x1478/0x1fc0 [ 325.268574][T16259] ? __lock_acquire+0x436/0x2890 [ 325.268608][T16259] ? __pfx_do_splice+0x10/0x10 [ 325.268635][T16259] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 325.268666][T16259] ? find_held_lock+0x2b/0x80 [ 325.268699][T16259] __do_splice+0x32a/0x360 [ 325.268731][T16259] ? __pfx___do_splice+0x10/0x10 [ 325.268769][T16259] __x64_sys_splice+0x187/0x250 [ 325.268803][T16259] do_syscall_64+0xcd/0xf80 [ 325.268836][T16259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.268858][T16259] RIP: 0033:0x7f952d58f749 [ 325.268875][T16259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.268896][T16259] RSP: 002b:00007f952e482038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 325.268915][T16259] RAX: ffffffffffffffda RBX: 00007f952d7e6090 RCX: 00007f952d58f749 [ 325.268928][T16259] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 325.268939][T16259] RBP: 00007f952d613f91 R08: 000000000004fbe6 R09: 0000000000000004 [ 325.268951][T16259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.268962][T16259] R13: 00007f952d7e6128 R14: 00007f952d7e6090 R15: 00007ffca6b2d4d8 [ 325.268994][T16259] [ 325.789766][ T30] audit: type=1400 audit(1767008227.620:780): avc: denied { write } for pid=16264 comm="syz.5.4447" path="socket:[58083]" dev="sockfs" ino=58083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 326.167763][T16287] trusted_key: syz.3.4452 sent an empty control message without MSG_MORE. [ 326.322978][T16291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4455'. [ 326.885724][ T5872] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 326.977664][T16332] netlink: 'syz.3.4467': attribute type 12 has an invalid length. [ 327.005881][T16332] netlink: 'syz.3.4467': attribute type 29 has an invalid length. [ 327.053236][T16332] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4467'. [ 327.059716][ T5872] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 327.088947][ T5872] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 327.090548][T16332] netlink: 59 bytes leftover after parsing attributes in process `syz.3.4467'. [ 327.106625][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.134491][ T5872] usb 6-1: Product: syz [ 327.138685][ T5872] usb 6-1: Manufacturer: syz [ 327.152764][ T5872] usb 6-1: SerialNumber: syz [ 327.374752][ T5821] Bluetooth: hci1: Unknown advertising packet type: 0x1e [ 327.374801][ T5821] Bluetooth: hci1: Malformed LE Event: 0x0d [ 327.399430][ T5872] as10x_usb: device has been detected [ 327.400455][ T5872] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 327.420249][ T5872] usb 6-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 327.436982][ T5872] as10x_usb: error during firmware upload part1 [ 327.437425][ T5872] Registered device Elgato EyeTV DTT Deluxe [ 327.439542][ T5872] usb 6-1: USB disconnect, device number 39 [ 327.476302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 327.479805][ T5872] Unregistered device Elgato EyeTV DTT Deluxe [ 327.481169][ T5872] as10x_usb: device has been disconnected [ 327.638907][T16351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 327.659163][T16351] IPv6: NLM_F_CREATE should be set when creating new route [ 327.754520][T16289] kexec: Could not allocate control_code_buffer [ 328.173848][T16374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4478'. [ 328.634955][T16398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4489'. [ 330.413264][ T30] audit: type=1400 audit(1767008232.481:781): avc: denied { append } for pid=16416 comm="syz.3.4499" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 330.710453][T16428] macvlan5: entered promiscuous mode [ 330.771641][T16428] macvlan6: entered promiscuous mode [ 331.247755][ T5184] udevd[5184]: worker [5827] /devices/virtual/block/nbd1 is taking a long time [ 331.371040][ T30] audit: type=1400 audit(1767008233.478:782): avc: denied { create } for pid=16454 comm="syz.3.4515" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 331.531653][T16465] [U] ¹ [ 331.549599][T16469] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4521'. [ 331.616659][T16469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4521'. [ 331.794654][T16476] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4524'. [ 331.962364][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4529'. [ 331.983480][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4529'. [ 332.276600][ T5872] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 332.413363][T16514] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 332.424576][T16514] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 332.434370][T16514] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 332.437617][ T5872] usb 7-1: config 255 has too many interfaces: 223, using maximum allowed: 32 [ 332.474927][ T5872] usb 7-1: config 255 has 1 interface, different from the descriptor's value: 223 [ 332.506966][ T5872] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 332.522992][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.553160][ T5872] usb 7-1: Product: syz [ 332.557890][ T5872] usb 7-1: Manufacturer: syz [ 332.563083][ T5872] usb 7-1: SerialNumber: syz [ 332.584042][ T5872] gspca_main: sq930x-2.14.0 probing 2770:930c [ 332.914484][ T5921] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 332.974467][ T5821] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 332.982442][ T5821] Bluetooth: hci2: connection err: -111 [ 333.058642][ T5921] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.069455][ T5921] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.081705][ T5921] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.091339][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.099469][ T5921] usb 5-1: Product: syz [ 333.103839][ T5921] usb 5-1: Manufacturer: syz [ 333.109643][ T5921] usb 5-1: SerialNumber: syz [ 333.249304][T16557] ip6tnl1: entered promiscuous mode [ 333.254646][T16557] ip6tnl1: entered allmulticast mode [ 333.510777][ T5921] usb 5-1: 0:2 : does not exist [ 333.533572][ T5966] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 333.581470][ T5872] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 333.587541][ T5872] sq930x 7-1:255.0: probe with driver sq930x failed with error -71 [ 333.601907][ T5872] usb 7-1: USB disconnect, device number 30 [ 333.639312][T16561] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4562'. [ 333.654097][T16561] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4562'. [ 333.676718][ T5966] usb 1-1: Using ep0 maxpacket: 16 [ 333.696077][ T5966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.721702][ T5966] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 333.744348][ T5966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.760417][ T5966] usb 1-1: config 0 descriptor?? [ 333.810939][T16567] IPv6: sit1: Disabled Multicast RS [ 333.828488][T16567] sit1: entered allmulticast mode [ 333.957845][ T5921] usb 5-1: USB disconnect, device number 54 [ 334.177277][ T5966] mcp2221 0003:04D8:00DD.0045: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 334.195792][T16586] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4573'. [ 334.270418][ T30] audit: type=1400 audit(1767008236.533:783): avc: denied { unmount } for pid=8795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 334.315838][ T24] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 334.343245][T16592] input: syz1 as /devices/virtual/input/input87 [ 334.349662][T16592] input: failed to attach handler leds to device input87, error: -6 [ 334.371750][ T5879] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 334.393625][ T5966] usb 1-1: USB disconnect, device number 59 [ 334.468862][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.481717][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.491909][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 334.505934][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 334.515262][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.532889][ T24] usb 4-1: config 0 descriptor?? [ 334.544961][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.568380][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.578543][ T5879] usb 7-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 334.587630][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.598199][ T5879] usb 7-1: config 0 descriptor?? [ 335.003430][ T24] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 335.004252][ T5879] logitech-djreceiver 0003:046D:C71F.0047: unknown main item tag 0x7 [ 335.092011][ T5879] logitech-djreceiver 0003:046D:C71F.0047: hidraw1: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.6-1/input0 [ 335.221176][ T5879] usb 7-1: USB disconnect, device number 31 [ 335.279151][ T10] usb 4-1: USB disconnect, device number 72 [ 335.287660][T16610] fido_id[16610]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 335.577909][T16631] syzkaller1: entered promiscuous mode [ 335.584910][T16631] syzkaller1: entered allmulticast mode [ 335.773036][T16645] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4597'. [ 335.791315][T16641] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4597'. [ 336.057568][ T10] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 336.210069][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 336.216707][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 336.226419][ T10] usb 7-1: config 5 has an invalid interface number: 52 but max is 0 [ 336.234842][ T10] usb 7-1: config 5 has no interface number 0 [ 336.241298][ T10] usb 7-1: config 5 interface 52 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 336.251294][ T10] usb 7-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 336.263450][ T10] usb 7-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 336.272997][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.281061][ T10] usb 7-1: Product: syz [ 336.285241][ T10] usb 7-1: Manufacturer: syz [ 336.292714][ T10] usb 7-1: SerialNumber: syz [ 336.509642][ T10] aircable 7-1:5.52: aircable converter detected [ 336.517739][ T10] usb 7-1: aircable converter now attached to ttyUSB0 [ 336.528382][ T10] usb 7-1: USB disconnect, device number 32 [ 336.537322][ T10] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 336.546147][ T10] aircable 7-1:5.52: device disconnected [ 336.971926][ T24] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 337.110148][ T30] audit: type=1400 audit(1767008239.515:784): avc: denied { ioctl } for pid=16692 comm="syz.3.4619" path="socket:[60051]" dev="sockfs" ino=60051 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 337.116300][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.158010][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 337.169361][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 337.196230][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.218533][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.227115][ T24] usb 1-1: Product: syz [ 337.232191][ T24] usb 1-1: Manufacturer: syz [ 337.236794][ T24] usb 1-1: SerialNumber: syz [ 337.257053][ T24] cdc_mbim 1-1:1.0: skipping garbage [ 337.269813][ T24] cdc_mbim 1-1:1.0: skipping garbage [ 337.429978][ T30] audit: type=1400 audit(1767008239.830:785): avc: denied { ioctl } for pid=16708 comm="syz.5.4626" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 337.460714][ T30] audit: type=1400 audit(1767008239.841:786): avc: denied { mount } for pid=16710 comm="syz.6.4627" name="/" dev="autofs" ino=60065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 337.483754][T16673] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 337.497785][ T10] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 337.514958][T16673] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 337.532219][ T30] audit: type=1400 audit(1767008239.935:787): avc: denied { unmount } for pid=11742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 337.648399][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 337.655487][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 337.664398][ T10] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 337.672788][ T10] usb 4-1: config 13 has no interface number 0 [ 337.679751][ T10] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 337.693806][ T10] usb 4-1: config 13 interface 50 has no altsetting 0 [ 337.702934][ T10] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 337.713402][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.727997][ T10] usb 4-1: Product: syz [ 337.738675][ T10] usb 4-1: Manufacturer: syz [ 337.748909][ T10] usb 4-1: SerialNumber: syz [ 337.768410][T16698] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 338.025430][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.046283][ T10] usb 4-1: MIDIStreaming interface descriptor not found [ 338.112851][ T10] usb 4-1: USB disconnect, device number 73 [ 338.138609][T16673] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 338.169203][T16673] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 338.173493][ T7962] udevd[7962]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.204105][ T24] cdc_mbim 1-1:1.0: dwNtbInMaxSize=512 is too small. Using 2048 [ 338.230258][ T24] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 338.408550][ T24] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 338.427627][ T24] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 338.452267][ T24] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 338.487805][ T24] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 338.523385][ T24] usb 1-1: USB disconnect, device number 60 [ 338.583081][T16746] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 338.699317][T16749] tipc: Started in network mode [ 338.704231][T16749] tipc: Node identity ac14142f, cluster identity 4711 [ 338.723596][T16749] tipc: New replicast peer: 0.0.0.0 [ 338.730408][T16749] tipc: Enabled bearer , priority 10 [ 338.743671][T16749] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 339.267530][ T10] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 339.358706][T16781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4652'. [ 339.367965][T16781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4652'. [ 339.411693][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.431387][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.458022][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 339.486740][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 339.503732][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.514213][ T30] audit: type=1400 audit(1767008242.035:788): avc: denied { ioctl } for pid=16789 comm="syz.6.4657" path="socket:[60196]" dev="sockfs" ino=60196 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 339.544462][ T10] usb 4-1: config 0 descriptor?? [ 339.810895][ T5879] tipc: Node number set to 2886997039 [ 339.947174][ T10] plantronics 0003:047F:FFFF.0048: reserved main item tag 0xd [ 339.972903][ T10] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 340.081985][ T10] kernel write not supported for file /vcs (pid: 10 comm: kworker/0:1) [ 340.280243][ T10] usb 4-1: USB disconnect, device number 74 [ 340.497266][ T5966] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 340.639068][ T10] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 340.661421][ T5966] usb 1-1: Using ep0 maxpacket: 16 [ 340.688641][ T5966] usb 1-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config [ 340.715149][ T5966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 340.743984][ T5966] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x37, changing to 0x7 [ 340.775046][ T5966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 240, changing to 11 [ 340.800797][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 340.805182][ T5966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 49986, setting to 1024 [ 340.816105][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.827351][ T5966] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.842794][ T10] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 340.857168][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 340.869564][ T5966] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 340.875491][ T30] audit: type=1326 audit(1767008243.463:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16837 comm="syz.3.4677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f781cf8f749 code=0x0 [ 340.901933][ T5966] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 340.901959][ T5966] usb 1-1: Manufacturer: syz [ 340.923369][ T5966] usb 1-1: config 0 descriptor?? [ 340.930108][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.940349][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.949777][ T10] usb 7-1: Product: syz [ 340.955000][ T10] usb 7-1: Manufacturer: syz [ 340.959713][ T10] usb 7-1: SerialNumber: syz [ 340.977093][T16830] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 341.003363][T16841] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4678'. [ 341.157195][ T5879] kernel read not supported for file /input/event2 (pid: 5879 comm: kworker/0:5) [ 341.192701][ T5966] rc_core: IR keymap rc-hauppauge not found [ 341.208270][ T5966] Registered IR keymap rc-empty [ 341.220773][ T5966] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 341.250525][ T5966] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 341.277912][ T5966] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 341.301174][ T5966] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input89 [ 341.320349][ T5966] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 341.336234][T16858] netlink: 212324 bytes leftover after parsing attributes in process `syz.5.4684'. [ 341.346395][ T5966] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 341.372866][ T5966] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 341.401973][ T5966] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 341.430608][ T5966] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 341.448680][ T5966] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 341.468793][ T5966] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 341.496383][ T5966] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 341.515245][ T5966] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 341.541417][ T5966] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 341.563120][ T5966] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 341.584904][ T5966] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 90 [ 341.596503][ T5966] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 341.610581][ T5966] usb 1-1: USB disconnect, device number 61 [ 341.857363][ T30] audit: type=1400 audit(1767008244.492:790): avc: denied { mounton } for pid=16874 comm="syz.5.4692" path="/791/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 341.881609][ T30] audit: type=1400 audit(1767008244.523:791): avc: denied { unmount } for pid=8795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 341.921610][T16877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4693'. [ 341.974035][ T10] cdc_ncm 7-1:1.0: bind() failure [ 341.993214][ T10] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 342.015266][ T10] usb 7-1: USB disconnect, device number 33 [ 342.237399][T16897] bridge1: entered promiscuous mode [ 342.242939][T16897] bridge1: entered allmulticast mode [ 342.273754][T16897] team0: Port device bridge1 added [ 342.322310][T16897] bridge0: port 3(team0) entered blocking state [ 342.341283][T16897] bridge0: port 3(team0) entered disabled state [ 342.349156][T16897] team0: entered allmulticast mode [ 342.359694][T16897] team_slave_0: entered allmulticast mode [ 342.372888][T16897] team_slave_1: entered allmulticast mode [ 342.390959][T16897] team0: left allmulticast mode [ 342.403691][T16897] team_slave_0: left allmulticast mode [ 342.411495][T16897] team_slave_1: left allmulticast mode [ 343.185749][ C1] scsi_io_completion_action: 6 callbacks suppressed [ 343.185804][ C1] sd 0:0:1:0: [sda] tag#3884 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 343.202909][ C1] sd 0:0:1:0: [sda] tag#3884 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 343.513426][T16942] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 343.521359][T16942] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 343.529273][T16942] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 343.537138][T16942] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 343.545106][T16942] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 343.552984][T16942] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 343.560893][T16942] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 343.568784][T16942] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 343.576660][T16942] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 343.584556][T16942] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 344.447393][T16985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4737'. [ 344.785080][ T5821] Bluetooth: hci5: command tx timeout [ 345.102881][T17002] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 345.431081][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4747'. [ 345.460366][T17011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4747'. [ 345.519135][T17011] geneve2: entered promiscuous mode [ 345.524512][T17011] geneve2: entered allmulticast mode [ 345.648807][ T24] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 345.811039][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 345.817922][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 345.827480][ T24] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 345.848190][ T24] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 345.877394][ T24] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 345.893167][ T24] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 345.914278][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 345.927869][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 345.934156][ T24] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 345.953957][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.976099][ T24] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 346.030024][ T5879] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 346.097023][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 346.107628][ T10] usb 5-1: config 1 has an invalid interface number: 79 but max is 0 [ 346.125769][ T10] usb 5-1: config 1 has no interface number 0 [ 346.131929][ T10] usb 5-1: config 1 interface 79 has no altsetting 0 [ 346.141077][ T10] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=34.45 [ 346.160434][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.170125][ T10] usb 5-1: Product: syz [ 346.176292][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 346.188331][ T10] usb 5-1: Manufacturer: syz [ 346.193750][ T5879] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 346.203803][ T10] usb 5-1: SerialNumber: syz [ 346.203838][ T24] scsi host1: usb-storage 7-1:1.0 [ 346.212943][ T5879] usb 4-1: config 0 has no interface number 0 [ 346.219519][ T5879] usb 4-1: config 0 interface 85 has no altsetting 0 [ 346.257986][ T5879] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 346.268130][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.278252][ T5879] usb 4-1: Product: syz [ 346.282453][ T5879] usb 4-1: Manufacturer: syz [ 346.287548][ T5879] usb 4-1: SerialNumber: syz [ 346.297769][ T5879] usb 4-1: config 0 descriptor?? [ 346.306311][ T5872] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 346.319410][ T5879] appletouch 4-1:0.85: Could not find int-in endpoint [ 346.327071][ T5879] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 346.337973][ T5879] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 346.403528][ T5879] usb 7-1: USB disconnect, device number 34 [ 346.445673][ T10] usb_ehset_test 5-1:1.79: probe with driver usb_ehset_test failed with error -32 [ 346.470327][ T10] usb 5-1: USB disconnect, device number 55 [ 346.489400][ T5872] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 346.512188][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.523813][ T5872] usb 6-1: config 0 descriptor?? [ 346.798405][ T5879] usb 4-1: USB disconnect, device number 75 [ 347.184094][T17047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4761'. [ 347.203416][T17047] hsr_slave_0: left promiscuous mode [ 347.220692][T17047] hsr_slave_1: left promiscuous mode [ 347.509310][ T5872] pegasus 6-1:0.0: probe with driver pegasus failed with error -71 [ 347.531618][ T5872] usb 6-1: USB disconnect, device number 40 [ 348.097034][T17080] netlink: 'syz.4.4774': attribute type 32 has an invalid length. [ 348.117420][T17080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4774'. [ 348.498630][T17097] Bluetooth: MGMT ver 1.23 [ 348.573300][ T30] audit: type=1326 audit(1767008251.537:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17098 comm="syz.0.4780" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbde618f749 code=0x0 [ 348.601722][ C0] net_ratelimit: 45 callbacks suppressed [ 348.601741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.615883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.624320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.632785][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.641240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.649727][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.911460][T17112] syzkaller1: entered promiscuous mode [ 348.932259][T17112] syzkaller1: entered allmulticast mode [ 349.273454][ T30] audit: type=1400 audit(1767008252.282:793): avc: denied { remount } for pid=17124 comm="syz.6.4791" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 349.454446][T17136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17136 comm=syz.5.4797 [ 349.591931][ T6015] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 349.747109][ T6015] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 349.767008][ T6015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.794381][ T6015] usb 4-1: config 0 descriptor?? [ 349.825669][ T6015] cp210x 4-1:0.0: cp210x converter detected [ 350.173512][ T5921] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 350.219238][ T6015] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 350.327877][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.340416][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.363693][ T5921] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 350.392473][ T5921] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 350.412670][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.431090][T17175] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 350.449253][ T5921] usb 6-1: config 0 descriptor?? [ 350.458269][ T6015] usb 4-1: cp210x converter now attached to ttyUSB0 [ 350.551553][T17177] loop6: detected capacity change from 0 to 1024 [ 350.559237][ T6086] buffer_io_error: 25 callbacks suppressed [ 350.559253][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.577269][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.585976][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.594378][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.602698][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.616565][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.636934][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.669636][ T6015] usb 4-1: USB disconnect, device number 76 [ 350.680671][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.699882][ T6015] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 350.710835][ T6086] ldm_validate_partition_table(): Disk read failed. [ 350.726618][ T6015] cp210x 4-1:0.0: device disconnected [ 350.733742][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.746278][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.757238][ T6086] Dev loop6: unable to read RDB block 0 [ 350.764688][ T6086] loop6: unable to read partition table [ 350.772548][T17177] ldm_validate_partition_table(): Disk read failed. [ 350.796785][T17177] Dev loop6: unable to read RDB block 0 [ 350.809838][T17177] loop6: unable to read partition table [ 350.835512][T17177] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 350.858858][ T5921] plantronics 0003:047F:FFFF.0049: reserved main item tag 0xd [ 350.890577][ T5921] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 350.925317][ T5184] ldm_validate_partition_table(): Disk read failed. [ 350.942741][ T5184] Dev loop6: unable to read RDB block 0 [ 350.962423][ T5184] loop6: unable to read partition table [ 351.187800][ T24] usb 6-1: USB disconnect, device number 41 [ 351.258815][ T6015] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 351.442792][ T6015] usb 1-1: Using ep0 maxpacket: 16 [ 351.452328][ T6015] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 351.461560][ T6015] usb 1-1: config 0 has no interface number 0 [ 351.475306][ T6015] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 351.505017][ T6015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.534957][ T6015] usb 1-1: Product: syz [ 351.540491][ T6015] usb 1-1: Manufacturer: syz [ 351.564390][ T6015] usb 1-1: SerialNumber: syz [ 351.575164][ T6015] usb 1-1: config 0 descriptor?? [ 351.629715][ T6015] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 352.124440][ T30] audit: type=1400 audit(1767008255.274:794): avc: denied { setopt } for pid=17209 comm="syz.6.4827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 352.147642][T17210] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4827'. [ 352.621493][ T6015] gspca_spca1528: reg_w err -71 [ 352.626434][ T6015] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 352.676827][ T6015] usb 1-1: USB disconnect, device number 62 [ 353.086474][T17233] netlink: 'syz.4.4838': attribute type 4 has an invalid length. [ 353.112030][T17233] lo speed is unknown, defaulting to 1000 [ 353.145211][ T30] audit: type=1400 audit(1767008256.335:795): avc: denied { create } for pid=17234 comm="syz.5.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 353.171078][T17233] lo speed is unknown, defaulting to 1000 [ 353.183940][ T30] audit: type=1400 audit(1767008256.335:796): avc: denied { write } for pid=17234 comm="syz.5.4839" path="socket:[63623]" dev="sockfs" ino=63623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 353.214102][T17233] lo speed is unknown, defaulting to 1000 [ 353.539421][ T9826] block nbd1: Possible stuck request ffff888026780000: control (read@0,1024B). Runtime 180 seconds [ 353.550323][ T9826] block nbd1: Possible stuck request ffff888026780200: control (read@1024,1024B). Runtime 180 seconds [ 353.561408][ T9826] block nbd1: Possible stuck request ffff888026780400: control (read@2048,1024B). Runtime 180 seconds [ 353.572506][ T9826] block nbd1: Possible stuck request ffff888026780600: control (read@3072,1024B). Runtime 180 seconds [ 353.787738][T17233] infiniband syz0: set down [ 353.815257][ T5921] lo speed is unknown, defaulting to 1000 [ 353.823080][T17233] infiniband syz0: added lo [ 353.983532][T17233] RDS/IB: syz0: added [ 354.043568][T17233] smc: adding ib device syz0 with port count 1 [ 354.059881][T17233] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 354.071900][ T5921] lo speed is unknown, defaulting to 1000 [ 354.117793][T17233] lo speed is unknown, defaulting to 1000 [ 354.287369][T17267] binder: 17266:17267 ioctl c0306201 0 returned -14 [ 354.327374][T17267] binder: 17266:17267 ioctl 400c620e 200000000340 returned -22 [ 354.768509][T17233] lo speed is unknown, defaulting to 1000 [ 355.222101][T17233] lo speed is unknown, defaulting to 1000 [ 355.819647][T17291] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4863'. [ 355.831489][T17233] lo speed is unknown, defaulting to 1000 [ 356.226735][T17233] lo speed is unknown, defaulting to 1000 [ 356.543531][T17197] Set syz1 is full, maxelem 65536 reached [ 356.621981][T17306] geneve2: entered promiscuous mode [ 356.659224][T17306] geneve2: entered allmulticast mode [ 356.684331][T17311] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 356.686650][ T30] audit: type=1400 audit(1767008260.062:797): avc: denied { create } for pid=17310 comm="syz.6.4871" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 356.802895][T17233] lo speed is unknown, defaulting to 1000 [ 356.947671][ T30] audit: type=1400 audit(1767008260.062:798): avc: denied { associate } for pid=17310 comm="syz.6.4871" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 356.948130][ T30] audit: type=1400 audit(1767008260.062:799): avc: denied { mounton } for pid=17310 comm="syz.6.4871" path="/437/file0" dev="tmpfs" ino=2243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 357.198900][ T30] audit: type=1400 audit(1767008260.062:800): avc: denied { add_name } for pid=17310 comm="syz.6.4871" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 357.365331][ T30] audit: type=1400 audit(1767008260.062:801): avc: denied { setattr } for pid=17310 comm="syz.6.4871" name="work" dev="tmpfs" ino=2244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 357.535378][ T5872] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 357.669476][ T30] audit: type=1400 audit(1767008260.062:802): avc: denied { write open } for pid=17310 comm="syz.6.4871" path=2F202864656C6574656429 dev="tmpfs" ino=2245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 357.669930][ T30] audit: type=1400 audit(1767008260.062:803): avc: denied { create } for pid=17310 comm="syz.6.4871" name="#13" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 357.927571][ T5872] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 358.041687][ T30] audit: type=1400 audit(1767008260.062:804): avc: denied { remove_name } for pid=17310 comm="syz.6.4871" name="#13" dev="tmpfs" ino=2246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 358.042142][ T30] audit: type=1400 audit(1767008260.062:805): avc: denied { rename } for pid=17310 comm="syz.6.4871" name="#13" dev="tmpfs" ino=2246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 358.150091][T17349] sctp: [Deprecated]: syz.5.4884 (pid 17349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.150091][T17349] Use struct sctp_sack_info instead [ 358.271558][ T5872] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 358.282155][ T5872] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 358.291846][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.303438][T17321] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 358.314273][ T5872] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 358.377754][ T30] audit: type=1400 audit(1767008260.062:806): avc: denied { unlink } for pid=17310 comm="syz.6.4871" name="#13" dev="tmpfs" ino=2247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 358.542409][ T5872] usb 7-1: USB disconnect, device number 35 [ 358.683478][T17360] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.4888'. [ 358.874988][T17370] ªªªªªª: renamed from wg2 (while UP) [ 359.022935][ T31] INFO: task syz.1.2215:11197 blocked for more than 143 seconds. [ 359.030891][ T31] Tainted: G L syzkaller #0 [ 359.037398][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.067041][ T31] task:syz.1.2215 state:D stack:28808 pid:11197 tgid:11196 ppid:6868 task_flags:0x400040 flags:0x00080002 [ 359.092905][ T31] Call Trace: [ 359.101109][ T31] [ 359.108437][ T31] ? __schedule+0x10b9/0x6150 [ 359.117677][ T31] __schedule+0x1139/0x6150 [ 359.128836][ T31] ? __lock_acquire+0x436/0x2890 [ 359.139438][ T31] ? __pfx___schedule+0x10/0x10 [ 359.150940][ T31] ? find_held_lock+0x2b/0x80 [ 359.169165][ T31] ? schedule+0x2d7/0x3a0 [ 359.183732][ T31] schedule+0xe7/0x3a0 [ 359.187855][ T31] schedule_preempt_disabled+0x13/0x30 [ 359.202849][ T31] __mutex_lock+0xc69/0x1ca0 [ 359.207487][ T31] ? bdev_open+0x41a/0xe40 [ 359.217763][ T31] ? find_held_lock+0x2b/0x80 [ 359.230997][ T31] ? find_held_lock+0x2b/0x80 [ 359.236063][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 359.241184][ T5966] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 359.256868][ T31] ? bdev_open+0x41a/0xe40 [ 359.261548][ T31] bdev_open+0x41a/0xe40 [ 359.266660][ T31] ? iput+0x35/0x40 [ 359.281395][ T31] blkdev_open+0x34e/0x4f0 [ 359.291343][ T31] do_dentry_open+0x748/0x1590 [ 359.296375][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 359.302671][ T31] vfs_open+0x82/0x3f0 [ 359.311145][ T31] path_openat+0x2078/0x3140 [ 359.322505][ T31] ? __pfx_path_openat+0x10/0x10 [ 359.335235][ T31] do_filp_open+0x20b/0x470 [ 359.346165][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 359.357886][ T31] ? alloc_fd+0x471/0x7d0 [ 359.366921][ T31] do_sys_openat2+0x121/0x290 [ 359.378396][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 359.389205][ T31] ? count_memcg_events+0x122/0x290 [ 359.395870][ T5966] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 359.401197][ T31] __x64_sys_openat+0x174/0x210 [ 359.404383][ T5966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.417822][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 359.432001][ T31] ? do_user_addr_fault+0x843/0x1370 [ 359.432131][ T5966] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 359.463770][ T31] do_syscall_64+0xcd/0xf80 [ 359.469376][ T5966] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 359.473817][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.477377][ T5966] usb 4-1: Manufacturer: syz [ 359.488409][ T31] RIP: 0033:0x7fc24c58df90 [ 359.492857][ T31] RSP: 002b:00007fc24d383b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 359.504815][ T5966] usb 4-1: config 0 descriptor?? [ 359.507174][ T31] RAX: ffffffffffffffda RBX: 00000000001c1400 RCX: 00007fc24c58df90 [ 359.518117][ T31] RDX: 00000000001c1400 RSI: 00007fc24d383c10 RDI: 00000000ffffff9c [ 359.527433][ T31] RBP: 00007fc24d383c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 359.556052][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 359.574198][ T31] R13: 00007fc24c7e6038 R14: 00007fc24c7e5fa0 R15: 00007ffffdb130d8 [ 359.588118][ T31] [ 359.591217][ T31] [ 359.591217][ T31] Showing all locks held in the system: [ 359.600181][ T31] 1 lock held by khungtaskd/31: [ 359.624275][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 359.631286][ T5966] rc_core: IR keymap rc-hauppauge not found [ 359.661538][ T31] 2 locks held by getty/5574: [ 359.671758][ T31] #0: ffff88814db350a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 359.678904][ T5966] Registered IR keymap rc-empty [ 359.687224][ T5966] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 359.691406][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 359.708632][ T31] 1 lock held by udevd/5827: [ 359.713354][ T31] #0: ffff888141ba1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 359.718339][ T5966] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input91 [ 359.723466][ T31] 4 locks held by kworker/1:5/5919: [ 359.744623][ T31] 5 locks held by kworker/1:9/5966: [ 359.751519][ T31] #0: ffff88801e2c9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 359.767112][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 359.803542][ T31] #1: ffff8880b8524608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x19b1/0x6150 [ 359.833913][ T31] #2: ffffffff8e3c9640 (rcu_read_lock_bh){....}-{1:3}, at: wg_packet_tx_worker+0x237/0x810 [ 359.867720][ T31] #3: ffffffff9ac26c88 (&____s->seqcount#2){----}-{0:0}, at: clockevents_program_event+0x151/0x370 [ 359.879798][ T31] #4: ffffffff9adc3fe0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 359.890547][ T31] 1 lock held by udevd/6086: [ 359.895142][ T31] #0: ffffffff8e3d4df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 359.905549][ T31] 1 lock held by syz.1.2215/11197: [ 359.910898][ T31] #0: ffff888141ba1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 359.920506][ T31] 1 lock held by syz.3.4898/17377: [ 359.925621][ T31] #0: ffffffff8e3d4df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 359.937706][ T5872] usb 4-1: USB disconnect, device number 77 [ 359.995552][ T31] [ 359.997912][ T31] ============================================= [ 359.997912][ T31] [ 360.017786][ T31] NMI backtrace for cpu 0 [ 360.017805][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 360.017830][ T31] Tainted: [L]=SOFTLOCKUP [ 360.017836][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.017854][ T31] Call Trace: [ 360.017860][ T31] [ 360.017868][ T31] dump_stack_lvl+0x116/0x1f0 [ 360.017896][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 360.017926][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 360.017948][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 360.017978][ T31] sys_info+0x133/0x180 [ 360.018004][ T31] watchdog+0xe66/0x1180 [ 360.018029][ T31] ? rcu_is_watching+0x12/0xc0 [ 360.018047][ T31] ? __pfx_watchdog+0x10/0x10 [ 360.018064][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 360.018087][ T31] ? __kthread_parkme+0x19e/0x250 [ 360.018105][ T31] ? __pfx_watchdog+0x10/0x10 [ 360.018124][ T31] kthread+0x3c5/0x780 [ 360.018146][ T31] ? __pfx_kthread+0x10/0x10 [ 360.018167][ T31] ? rcu_is_watching+0x12/0xc0 [ 360.018183][ T31] ? __pfx_kthread+0x10/0x10 [ 360.018205][ T31] ret_from_fork+0x983/0xb10 [ 360.018225][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 360.018245][ T31] ? __switch_to+0x7af/0x10d0 [ 360.018269][ T31] ? __pfx_kthread+0x10/0x10 [ 360.018291][ T31] ret_from_fork_asm+0x1a/0x30 [ 360.018331][ T31] [ 360.018339][ T31] Sending NMI from CPU 0 to CPUs 1: [ 360.160751][ C1] NMI backtrace for cpu 1 [ 360.160772][ C1] CPU: 1 UID: 0 PID: 5919 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.160795][ C1] Tainted: [L]=SOFTLOCKUP [ 360.160801][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.160811][ C1] Workqueue: events team_mcast_rejoin_work [ 360.160841][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x66/0x70 [ 360.160861][ C1] Code: 82 48 16 00 00 83 f8 02 75 20 48 8b 8a 50 16 00 00 8b 92 4c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 15 4c bc 09 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 360.160875][ C1] RSP: 0018:ffffc900031c7968 EFLAGS: 00000293 [ 360.160886][ C1] RAX: 0000000000000000 RBX: 0000000000000a94 RCX: ffffffff8aad1b88 [ 360.160895][ C1] RDX: ffff88803254c980 RSI: ffffffff8aad1aec RDI: 0000000000000005 [ 360.160904][ C1] RBP: 0000000000001a95 R08: 0000000000000005 R09: 0000000000002000 [ 360.160913][ C1] R10: 0000000000001a95 R11: ffff88803254d4b0 R12: dffffc0000000000 [ 360.160922][ C1] R13: 0000000000000000 R14: ffff888031b64800 R15: ffff888031b64808 [ 360.160931][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 360.160946][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.160955][ C1] CR2: 00007f11943b42f8 CR3: 000000007d0e5000 CR4: 00000000003526f0 [ 360.160964][ C1] Call Trace: [ 360.160969][ C1] [ 360.160974][ C1] vlan_device_event+0x21c/0x2620 [ 360.160995][ C1] ? phonet_device_notify+0x4ad/0xa20 [ 360.161015][ C1] ? __pfx_phonet_device_notify+0x10/0x10 [ 360.161033][ C1] ? __pfx_vlan_device_event+0x10/0x10 [ 360.161050][ C1] ? __pfx_br_device_event+0x10/0x10 [ 360.161068][ C1] ? raw_notifier+0xa4/0x860 [ 360.161085][ C1] ? isotp_notifier+0xa4/0x6d0 [ 360.161104][ C1] ? bcm_notifier+0xa4/0x810 [ 360.161121][ C1] ? ax25_device_event+0x74/0x6d0 [ 360.161134][ C1] ? cgw_notifier+0xa2/0x340 [ 360.161148][ C1] notifier_call_chain+0xbc/0x3e0 [ 360.161165][ C1] ? __pfx_vlan_device_event+0x10/0x10 [ 360.161184][ C1] call_netdevice_notifiers_info+0xbe/0x110 [ 360.161204][ C1] call_netdevice_notifiers+0x7c/0xb0 [ 360.161221][ C1] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 360.161241][ C1] team_mcast_rejoin_work+0xf8/0x230 [ 360.161260][ C1] process_one_work+0x9ba/0x1b20 [ 360.161281][ C1] ? __pfx_team_mcast_rejoin_work+0x10/0x10 [ 360.161300][ C1] ? __pfx_process_one_work+0x10/0x10 [ 360.161320][ C1] ? assign_work+0x1a0/0x250 [ 360.161336][ C1] worker_thread+0x6c8/0xf10 [ 360.161358][ C1] ? __pfx_worker_thread+0x10/0x10 [ 360.161375][ C1] kthread+0x3c5/0x780 [ 360.161391][ C1] ? __pfx_kthread+0x10/0x10 [ 360.161407][ C1] ? rcu_is_watching+0x12/0xc0 [ 360.161420][ C1] ? __pfx_kthread+0x10/0x10 [ 360.161436][ C1] ret_from_fork+0x983/0xb10 [ 360.161451][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 360.161466][ C1] ? rcu_is_watching+0x12/0xc0 [ 360.161479][ C1] ? __switch_to+0x7af/0x10d0 [ 360.161497][ C1] ? __pfx_kthread+0x10/0x10 [ 360.161512][ C1] ret_from_fork_asm+0x1a/0x30 [ 360.161538][ C1] [ 360.481214][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 360.488095][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 360.498782][ T31] Tainted: [L]=SOFTLOCKUP [ 360.503104][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.513155][ T31] Call Trace: [ 360.516441][ T31] [ 360.519376][ T31] dump_stack_lvl+0x3d/0x1f0 [ 360.523979][ T31] vpanic+0x640/0x6f0 [ 360.527972][ T31] panic+0xca/0xd0 [ 360.531704][ T31] ? __pfx_panic+0x10/0x10 [ 360.536121][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 360.542124][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 360.548302][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 360.554480][ T31] ? watchdog+0xe83/0x1180 [ 360.558915][ T31] ? watchdog+0xe76/0x1180 [ 360.563343][ T31] watchdog+0xe94/0x1180 [ 360.567597][ T31] ? rcu_is_watching+0x12/0xc0 [ 360.572353][ T31] ? __pfx_watchdog+0x10/0x10 [ 360.577013][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 360.582196][ T31] ? __kthread_parkme+0x19e/0x250 [ 360.587209][ T31] ? __pfx_watchdog+0x10/0x10 [ 360.591867][ T31] kthread+0x3c5/0x780 [ 360.595919][ T31] ? __pfx_kthread+0x10/0x10 [ 360.600495][ T31] ? rcu_is_watching+0x12/0xc0 [ 360.605246][ T31] ? __pfx_kthread+0x10/0x10 [ 360.609838][ T31] ret_from_fork+0x983/0xb10 [ 360.614591][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 360.619695][ T31] ? __switch_to+0x7af/0x10d0 [ 360.624360][ T31] ? __pfx_kthread+0x10/0x10 [ 360.628937][ T31] ret_from_fork_asm+0x1a/0x30 [ 360.633700][ T31] [ 360.636980][ T31] Kernel Offset: disabled [ 360.641279][ T31] Rebooting in 86400 seconds..