last executing test programs: 53.895900679s ago: executing program 1 (id=146): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xdcb, &(0x7f0000000480)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x20, 0xdbd, 0x64, 0x0, 0x20, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0xc}}, {0x4e21, 0x4e24, 0xda9, 0x0, @wg=@data={0x4, 0xa9, 0xe1e0, "38c85a60c0dc57703d935e873b0b3aa0a47a99f9d8b01bb1dcfdd99ba650fb39532ddde1d80b3a7185c84b99816ee35ba51fda597f4267d39b2d7622b7598b043ef18ad339c1e6ba022b1248e8d16b3d6522ac4a93cd98177564961655f4a3d7667d31ccd04a2009df07f970704ed74b67c7efd528882c3a8b88624e205a6c9373801f4adea161e91de43d1b1e21f51a7b079506ff7e6753c14069d8fb6ff1eea67952badeb8858001738c68fd1faa2e265f0856d25798f0a9d30541da779a6678e0c30a9909dbc42e5441e45541d184108d90b394296b463515da9127df7b1cd24d7735e9a9f37988a706547792d853fbdcb65d47844da0af9dac39f741d2102f6b2a42a2a6dbcc2e095ea4e5fec53911a7a34bdef503b34982537dc4fb081d38d5e722e0f577852f04a9577003d64886fb8a7ae53ac1bdd656aec2191c8d4694a3780ca3dcc132995d2b8926a06c73b46780098531a16a435ae0bed03860723ab546d26073cc84658d6e401c238e913817eb215441008b36a8cea676ba4300fef778d9243bb0e1be7cd53604e985bc2167afe2b55b80f0bf9e3c98fd46dc9e7154cbbc8efa7a41708cd5e57e84af13070208b9a280d7c506a09877823df522aff1e592c7a2123c9a168062288b478578ba0f4762e301f1afcff6fdc2466cae3a1ccccd790129e59b40f0dad131d4fd498f649e0dd02910a89f984b81bd29195f201b60b0bb5c18a37d4726e004be1933a1999df63d9e31de414fcd187ebfe2a9dd1e7505b2b4d494c54edee280960687420e8d788a290279c6ffd9183ae6ee71f922310b6cea3aa1ff1383da0ba7ac29c98e7d5ff90d74ef125e0c79e67ba53c0ec840e6dca2defea2e21bca0ad804ecd4af1f827c24a8823e281591185ce1be15f8c42d8fb28654814250145915e81fd951f71b8c0e4b0f349f8c9090edc3adac3be9a39c16821cd1e72569688342c11d9f5f8a2611f0a607a22ada215b159039ced803c289b7ccff1109c559895de99fc70d1af4dc9ec4fd65a1bc941ebb069805eee8c3cd1fd5edea151eb760e8b6cf22cb4ce054ea260519eb4ac21f7b779c49425692502a833507966b2cec50786777eeb848ab05eca9bf229e7b6a37faf7ac32a7d201cd862025a40ee903d0703a90b29e71f9e9ea6f5775bd5d9d6853ff78f7376c03b2aa801b776cf18ee2cb285769b5580d9ad74d390bc5ad1bd718540c31243ac63c7d4eb6440b3e1f8d4ddf5aa636ea8feb61511fa717d22710d9d4f69014f90154ad2c9599186760e3dd4990defeef4c89dd03435c6ca2a0aa8c97e5f4d4ddbea8a93abec62dfc04a22a2eb6c01a44065addfc90b75dcadabdf707f0ffd356ab767d1547bf4d69b2942d7c5b231a044ebf609ba687c4085a88546278ec48cbd59b1a9a336a8a41514022b67abb4a69b48cbd1185e85bfb56d23c818cb0c6c622c477fbea986ff9d5277d7f55ecc22d5856cb1cac89d4604e9b415dfa3e90ca85461c6c0be7ade601e3f10a3e0e16a9c3b19c7d1de8eb7b983dec3c0809b4c856942ada4a28a7925be7f8b79d85c8617cab5143cb9c34950aed03e68907251271b0181f74190f84c64f78b1f1026fc36ca57dcc1bcfc3ca21c96a6b546059eabf24b1af300127aed9af53e8626e1a3efc7b1bac05aed3ff56d2dcff7b9b4ae929ee89f1861e67144ec9741b1544ede151adba074737aca8a240b1f36e9d9dbd2304fdc0175ac236cec792a727727cf7ff2db4a52bd8d7aa4b71a9264088b2cc8aa341a2ecbae1daf17961a55994785716e4d0b926c3fa7805feed5e9f1e5761ecd05da536ef50df3d17f0dbe116d6d7b6c9cc1a26c5b9cb0f66604b5859af4ce42556dc2671e35ebd383a096b14336d694943810ec77ccca1077cf7f826d2e3c8999e87923ca04b634f0d0e0854ea09b27c9a44c594ebc60dd28342faf318188b00e058d937c821e683547ad54150d1185e59d74212947abbc14624e399d47090f3c5a37129b9c69b9103fb1ef3d152d3a9940825ee5fc4162cafcbe09ada1ef0a6fb3624729f61e221fa346931f45883003cc2fd4ccb83eb661d814d3a7fb41ecefc714c5276cb35ef200b99a5872ca884561c672f2dea47a89c88373c6b7d4cac5a4a3f4340378d28bb3a043e77ff5668a685ff585c81847e11479a2d713600bf1f8f7f53c0fe1a302da31eba635dbbcaccee5c94ba2b9d341fe0dbb46d814e34de13d9742e6c5f3de2bb6e725dfe0b44c1fd64ea7a3de6129bb3f6b4e0080883e377eb9909cd0dc4bef7b24390866f86aa236fee37f61e9fd199bfce1a0dcd2a7885dc358ec1ed8a52d92ebd21716f571d8de2ae9717bc28e14eb9650cd51735ca65bff0f8955dadcb8432f94298212d70e38c5ca5520387cd0c04d2bc27e7fe83de31cc80bbac0ee44c51a8fb57ca42e9c7d35907aa4fe508833c8e4366099b20b0dc0dd092d263170f83bcfdec599c9b17410f1d97959f5b756bf38f46515a33861e8fdd06999b90fef7527a67f967595ff8124396096a2836d54f28a1eedf592da3666caa4bf999278c880fc3e4bac767c72cfc633fcb239c40bb778662b88ae4481ecb88f32fdc465257ac6daf03da09ecb01f79de09632344213fe8a14de7adb746c46cb748b8f4476e0cf6edd93d0a3be5110eccfa225e1509a47c56cd2be113c0cd750e0e7ab2b095a6d1d69a449f4a96009d274dd6aa32de090596c63444ffc60c5550f7314c63ecd2751f5bb6d92c3cbc9a9dd9a4c4ab04dd0a31bfb402202ca808a11096d560efdb6fa4814249721d928d8d2f51df3f69c18758aa9ac3fe9b7aee2da460ddc58d605cc4637362c371878b531887fba8582d8edf1e400c41fad6b928989b79693c4663f0e66358747e54f43349677098d2706b0ef59e7dd1987425b8049f9167caa8aba22aa256796fea5711687ae7610c3c2e92e02c14b93df831525fd6bd41c8e8200bb8d5f214750813308fb81482bed5f81a094d194d2de7aca199436862bc21955047d2e60514c749ebc98f5322b9a50cb60d68bd5efce42c3ef99e41187867604622bb8875cdeb6aaa2dee55661e17f405b4ad1d13780360da0a09451d8fdc154a57c3982e7a04f268ebaa270044f5dbf903d2a172360aca5e5cd156073b8b4d90dce324f05823c6a772aa55a47bfca9991d071e7e00de7f18df087f9c61da30de76387d7196b237160ef31942d16377918fc83352bb07e5391f9dbaf5ebf14ebb4f01cc68e64cd940f6a4a04c25642e6273c49524f53900031895b818942a3aadf7bc71d6d942c40ac188db20ab30b147c2da7e644a02bcbb2878fea35ef895ca2df86d23d7d48dd1add542b0d10e3a7b3e3ff481f17ca2aec18daf66fd26ce607369462b90c3f117c9d019b88a5d0f75aa74754d72be124384f01cdb327c89c77d742fe95a5f24f86196defd90ffca19d00704a64156de9a867440ad128bc7f7dfbe9acd32f2e1693e2d4e675d787d6232057bdff3e7bb3a21e0f2960d3ae3b4360e0e878444d7c481bae660acb8e11bbcbdf7e4becd31d422245aeb4a4dd243ddbc51b47f9e06cdef8a3a5da56671f712ba37437dec022e485b5706154683d34868f56f0f56a5bfdde349bfd2f5220e705221f911eeeeead7cc058f289408afa4bd37b2b783c72f54f7d522d91b82e548bbbb0c51c770686a9e4d688008f414ba259defebd656d543232057d0ecd8b30b393968f990fd256c273e7ef735ff20de97b472d6e6b0eb15322681d76834c3fef13bdea0b67cf6b65b37e3603500391701eee537cacf7bbd6c512817610f6af3912e6de18cb284cf1ed7a6e5b10a83eec21b7aaf54876e529af6ff830ba5d044f90bc7b5df937bada78f0a88f3c9c534190a8fa63dd285ca7403ab3b19f0f11df46c0a6cb083d162c2d25ec80dfe04d74433c5d029775fc3788b79033e5387f1fbcfcab7df7910d634a8ca3abab1c9baabe9b2476f54eed96f5c9bfcf13f86a6eadb2b7ad9b5019034eb844a1f86fff29443791dd79660942c70808bd12e25b7c33b3891369ba738d49436fd0af9f91ec52c51bf88de7f5b84e11eccf89a84dcee7759f7d10f7572fe190c481fa828b5d7a21fb5d3d1f3ca0c7364e3259772e574bca9acd6e9c881cd4bbaab12162c806fc8152164c13d7f927be314117cc314956538e7f486f8f3bc10b021ad2b3c6261b506426e5d605911cfa9b5202d48c3e2440df6520248fc0101f425516b193a8a249c8ba7f65d4bc65f196897687339aa667d4eb9805775e74f3528c5e06e654dddc76a90a8e56741bf635d9226cf0bdbea741bafc3fdd304259d04ca3533468cc802bc9949b83e249b0542b71de3ce368add9903aa75cecc0669d6dfa67695b4725f70519e36bb7695973d2c3b42bce97902464eacb885ef18bacd5e150be10878bbd697048b3172313a9d6e020cb35509a93ec2b726dab38bf7654fcbe2edd25d87af9c90ec58bbbdeb026b2d187bd6d1b40ea3bea9c0d09c9bf9ecd53c2f1c26732c73063ec056f025d62ef75ee73c7c19dd92cd2cdcccfbfceb092637e8b185510e3dc9c91c1413e09df96137769bcaaf973f94ca879890c6deb4400be077551af3a63e187b2283d85d5915690a7569c552079eadb883aabf4f68d18075278f9e471e343ec3c7106796372fd40093bbbe531c1477043ee8a5156816149226569ac9a21d1698ca03a8a8aa9b7a2c52537ee14f15f75fce2f24f90c7c51fdd9c5311a6b8875ead1784182c7d0c36a02bfdf10f32201f98ed55da43b301286f0ae492bbdae703010681bf920e60707b1d2309b50a8dac0da3d6cf44e37bcb89d08501992b09196364e87e8a5d671ccc8fdd861649d21214340080b886a20adbe50ee8ca40452d63050286d27128c006b55b7a9c81b3e1254"}}}}}}, 0x0) 53.819414285s ago: executing program 1 (id=149): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 52.109603728s ago: executing program 1 (id=167): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r0}, 0xc) 52.046498628s ago: executing program 1 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x4, &(0x7f0000006680)) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 52.001859987s ago: executing program 1 (id=169): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x1, 0x6, 0xd, @broadcast}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 51.695961739s ago: executing program 1 (id=174): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000600), 0x1000, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r0, &(0x7f0000000880)}, 0x20) 51.613628451s ago: executing program 32 (id=174): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000600), 0x1000, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r0, &(0x7f0000000880)}, 0x20) 39.420600163s ago: executing program 0 (id=334): syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xfffffffffffffe9c, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) syz_usb_disconnect(r0) 37.409530778s ago: executing program 0 (id=360): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 36.416923853s ago: executing program 0 (id=367): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x12, r2, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_RATE={0x6, 0x5, {0x12, 0xe}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44004}, 0x4000010) 36.335790113s ago: executing program 0 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 36.233451747s ago: executing program 0 (id=374): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x0, {0x0, 0xf1, 0x4}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000640)={0x1d, r1}, 0x18) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000080)="82", 0x1}], 0x1) 35.898411518s ago: executing program 0 (id=379): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000100)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 35.546200642s ago: executing program 33 (id=379): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000100)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 5.233433209s ago: executing program 3 (id=803): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 3.81114546s ago: executing program 4 (id=820): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.24245162s ago: executing program 4 (id=826): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) membarrier(0x10, 0x0) 3.14777476s ago: executing program 4 (id=827): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x5f86, &(0x7f0000000180)={0x0, 0x2a97, 0x10000, 0x2, 0x3b7}, &(0x7f0000001040), &(0x7f0000000080), &(0x7f0000000000)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x54) 2.58212565s ago: executing program 3 (id=832): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0xf, r2, 0x34}, 0x10) 2.460497221s ago: executing program 4 (id=833): r0 = socket$isdn(0x22, 0x2, 0x2) r1 = dup(r0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 2.403606222s ago: executing program 3 (id=835): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff", 0x5}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x40800) 2.282646399s ago: executing program 4 (id=837): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006}, &(0x7f0000ffe000), 0x0, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) 2.210467418s ago: executing program 3 (id=839): bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf250220"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 2.073259904s ago: executing program 3 (id=842): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 2.028122911s ago: executing program 5 (id=844): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x8, &(0x7f00000000c0), 0x8) 1.861834146s ago: executing program 2 (id=846): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.839443328s ago: executing program 5 (id=847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.595638216s ago: executing program 5 (id=849): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1.590702819s ago: executing program 2 (id=850): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/155, 0x9b}], 0x1, &(0x7f0000000540)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) 1.288305473s ago: executing program 6 (id=851): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) 1.288033733s ago: executing program 4 (id=852): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.210446347s ago: executing program 2 (id=853): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20241, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000040)="b969080000b80b00000014000000000ff3400f08410f79450041dee60f4dc3b8010000000f01c10f00d00f090fc76c17000f00d80f01d10f01c2", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.026230421s ago: executing program 6 (id=854): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, 0x0, 0x8, 0x0, 0x1000000000006}) 938.571218ms ago: executing program 5 (id=855): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) listen(r0, 0x0) close(0x3) 819.512318ms ago: executing program 6 (id=856): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) 669.36909ms ago: executing program 5 (id=857): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 610.625325ms ago: executing program 2 (id=858): connect$qrtr(0xffffffffffffffff, &(0x7f0000000440)={0x2d, 0x0, 0x4001}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 544.335977ms ago: executing program 5 (id=859): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x1}) 403.8197ms ago: executing program 6 (id=860): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x102) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 343.298189ms ago: executing program 6 (id=861): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 250.489907ms ago: executing program 6 (id=862): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x4}) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000001c0)="03", 0x1}], 0x1}}], 0x1, 0x34000811) 116.671192ms ago: executing program 2 (id=863): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000007fc0)={0x2020}, 0x2020) 105.573098ms ago: executing program 3 (id=864): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1906000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/215, 0xd7}], 0x1, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/233, 0xe9}], 0x1, 0x0) 0s ago: executing program 2 (id=865): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x42}, &(0x7f0000000240)='./file1\x00', 0x18, 0x0, 0x12345}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1, 0x21, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): b 5-1: Manufacturer: syz [ 67.956808][ T792] usb 5-1: SerialNumber: syz [ 67.985942][ T50] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 67.988995][ T792] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input6 [ 67.997010][ T50] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 68.034458][ T50] usb 1-1: selecting invalid altsetting 1 [ 68.034477][ T5902] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 68.040740][ T50] usb 1-1: unit 6 not found! [ 68.056090][ T50] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 68.129336][ T50] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 68.150551][ T50] usb 1-1: USB disconnect, device number 2 [ 68.164542][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 68.183228][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 68.208511][ T5165] bcm5974 5-1:1.0: could not read from device [ 68.227256][ T29] audit: type=1400 audit(1775466072.760:153): avc: denied { setopt } for pid=6047 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.253476][ T29] audit: type=1400 audit(1775466072.760:154): avc: denied { create } for pid=6047 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.259680][ T792] bcm5974 5-1:1.0: could not read from device [ 68.274837][ T29] audit: type=1400 audit(1775466072.760:155): avc: denied { write } for pid=6047 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.284865][ T10] usb 2-1: USB disconnect, device number 3 [ 68.330529][ T792] input: failed to attach handler mousedev to device input6, error: -5 [ 68.342774][ T5165] bcm5974 5-1:1.0: could not read from device [ 68.360204][ T5165] bcm5974 5-1:1.0: could not read from device [ 68.361481][ T792] usb 5-1: USB disconnect, device number 2 [ 68.375911][ T5902] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 68.531333][ T29] audit: type=1400 audit(1775466073.060:156): avc: denied { create } for pid=6053 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.543728][ T5902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.575150][ T29] audit: type=1400 audit(1775466073.060:157): avc: denied { getopt } for pid=6053 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.591293][ T5902] usb 3-1: config 0 has no interfaces? [ 68.602035][ T5902] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 68.623685][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.658929][ T29] audit: type=1400 audit(1775466073.060:158): avc: denied { setopt } for pid=6053 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.659242][ T5902] usb 3-1: config 0 descriptor?? [ 68.755675][ T6062] bridge: RTM_NEWNEIGH with invalid ether address [ 68.763748][ T6062] bridge: RTM_NEWNEIGH with invalid ether address [ 69.074872][ T5902] usb 3-1: USB disconnect, device number 4 [ 69.562337][ T1212] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.722683][ T1212] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 69.734086][ T50] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.746046][ T1212] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 69.759487][ T1212] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 69.773281][ T1212] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 69.788694][ T1212] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.798041][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 69.813730][ T1212] usb 1-1: SerialNumber: syz [ 69.823037][ T6085] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.833781][ T6085] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.921876][ T50] usb 4-1: Using ep0 maxpacket: 8 [ 69.929867][ T50] usb 4-1: unable to get BOS descriptor or descriptor too short [ 69.952416][ T50] usb 4-1: config 4 interface 0 has no altsetting 0 [ 69.963167][ T50] usb 4-1: string descriptor 0 read error: -22 [ 69.969548][ T50] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 69.990385][ T50] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 70.035332][ T50] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 70.071661][ T50] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 70.086689][ T50] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 70.094617][ T50] usb 4-1: media controller created [ 70.131926][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 70.454091][ T6085] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 70.462594][ T6085] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 70.675825][ T1212] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 70.690158][ T1212] usb 1-1: USB disconnect, device number 3 [ 70.771316][ T5902] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.931273][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 70.936501][ T6131] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 70.947580][ T5902] usb 5-1: unable to get BOS descriptor or descriptor too short [ 70.958207][ T5902] usb 5-1: New USB device found, idVendor=17cc, idProduct=2305, bcdDevice= 0.40 [ 70.967609][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.988886][ T5902] usb 5-1: Product: syz [ 70.998104][ T5902] usb 5-1: Manufacturer: syz [ 71.004939][ T5902] usb 5-1: SerialNumber: syz [ 71.007444][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'. [ 71.253495][ T5902] usb 5-1: selecting invalid altsetting 1 [ 71.267670][ T5902] snd-usb-caiaq 5-1:1.0: can't set alt interface. [ 71.282463][ T5902] usb 5-1: unable to init card! (ret=-5) [ 71.295857][ T5902] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 71.326340][ T6141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 71.341986][ T5902] usb 5-1: USB disconnect, device number 3 [ 71.388891][ T50] usb 4-1: USB disconnect, device number 2 [ 71.985712][ T6163] netlink: 20 bytes leftover after parsing attributes in process `syz.4.102'. [ 72.141308][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 72.313325][ T24] usb 3-1: config index 0 descriptor too short (expected 1572, got 36) [ 72.321950][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.336860][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 72.356157][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.374131][ T24] usb 3-1: Product: syz [ 72.381557][ T24] usb 3-1: Manufacturer: syz [ 72.386251][ T24] usb 3-1: SerialNumber: syz [ 72.395673][ T5821] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 72.406430][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 72.406452][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 72.406464][ T5821] Workqueue: hci2 hci_rx_work [ 72.406491][ T5821] Call Trace: [ 72.406497][ T5821] [ 72.406505][ T5821] dump_stack_lvl+0x100/0x190 [ 72.406537][ T5821] sysfs_warn_dup.cold+0x1c/0x28 [ 72.406564][ T5821] sysfs_create_dir_ns+0x24b/0x2b0 [ 72.406594][ T5821] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 72.406624][ T5821] ? find_held_lock+0x2b/0x80 [ 72.406647][ T5821] ? kobject_add_internal+0x25f/0x930 [ 72.406667][ T5821] ? kobject_add_internal+0x25f/0x930 [ 72.406697][ T5821] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.406721][ T5821] kobject_add_internal+0x2c8/0x930 [ 72.406743][ T5821] kobject_add+0x16a/0x1e0 [ 72.406761][ T5821] ? __pfx_kobject_add+0x10/0x10 [ 72.406779][ T5821] ? class_to_subsys+0x10f/0x150 [ 72.406804][ T5821] ? kobject_put+0xb9/0x640 [ 72.406821][ T5821] ? _raw_spin_unlock+0x28/0x50 [ 72.406854][ T5821] device_add+0x294/0x1950 [ 72.406877][ T5821] ? __pfx_dev_set_name+0x10/0x10 [ 72.406902][ T5821] ? __pfx_device_add+0x10/0x10 [ 72.406924][ T5821] ? mgmt_send_event_skb+0x2fb/0x460 [ 72.406956][ T5821] hci_conn_add_sysfs+0x1a3/0x260 [ 72.406985][ T5821] le_conn_complete_evt+0x11eb/0x1f60 [ 72.407017][ T5821] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 72.407049][ T5821] hci_le_conn_complete_evt+0x23c/0x3a0 [ 72.407075][ T5821] ? skb_pull_data+0x15f/0x1e0 [ 72.407099][ T5821] hci_le_meta_evt+0x34a/0x5f0 [ 72.407126][ T5821] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 72.407155][ T5821] hci_event_packet+0x51c/0xcd0 [ 72.407182][ T5821] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 72.407208][ T5821] ? __pfx_hci_event_packet+0x10/0x10 [ 72.407236][ T5821] ? kcov_remote_start+0x374/0x660 [ 72.407261][ T5821] ? lockdep_hardirqs_on+0x78/0x100 [ 72.407295][ T5821] hci_rx_work+0x451/0xfc0 [ 72.407325][ T5821] process_one_work+0xa23/0x19a0 [ 72.407357][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 72.407385][ T5821] ? __pfx_hci_rx_work+0x10/0x10 [ 72.407412][ T5821] worker_thread+0x5ef/0xe50 [ 72.407445][ T5821] ? kthread+0x13a/0x450 [ 72.407463][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 72.407481][ T5821] kthread+0x370/0x450 [ 72.407498][ T5821] ? __pfx_kthread+0x10/0x10 [ 72.407518][ T5821] ret_from_fork+0x754/0xd80 [ 72.407537][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 72.407556][ T5821] ? __switch_to+0x7b4/0x1120 [ 72.407578][ T5821] ? __pfx_kthread+0x10/0x10 [ 72.407596][ T5821] ret_from_fork_asm+0x1a/0x30 [ 72.407631][ T5821] [ 72.407772][ T5821] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 72.410504][ T24] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7 [ 72.417712][ T5821] Bluetooth: hci2: failed to register connection device [ 72.618936][ T24] bcm5974 3-1:1.0: could not read from device [ 72.726597][ T24] input: failed to attach handler mousedev to device input7, error: -5 [ 72.763333][ T5165] bcm5974 3-1:1.0: could not read from device [ 72.792075][ T5165] bcm5974 3-1:1.0: could not read from device [ 72.798259][ T24] usb 3-1: USB disconnect, device number 5 [ 72.823171][ T5797] bcm5974 3-1:1.0: could not read from device [ 72.840099][ T6195] xt_hashlimit: size too large, truncated to 1048576 [ 72.865818][ T5797] udevd[5797]: Error opening device "/dev/input/event4": No such file or directory [ 72.890583][ T5797] udevd[5797]: Unable to EVIOCGABS device "/dev/input/event4" [ 72.898875][ T5797] udevd[5797]: Unable to EVIOCGABS device "/dev/input/event4" [ 72.910664][ T5797] udevd[5797]: Unable to EVIOCGABS device "/dev/input/event4" [ 72.924991][ T5797] udevd[5797]: Unable to EVIOCGABS device "/dev/input/event4" [ 73.102194][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 73.305507][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 73.305524][ T29] audit: type=1400 audit(1775466077.840:205): avc: denied { write } for pid=6211 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.435467][ T6217] loop5: detected capacity change from 0 to 7 [ 73.479722][ T5800] Dev loop5: unable to read RDB block 7 [ 73.491304][ T5800] loop5: unable to read partition table [ 73.501751][ T5800] loop5: partition table beyond EOD, truncated [ 73.517912][ T6217] Dev loop5: unable to read RDB block 7 [ 73.524999][ T29] audit: type=1400 audit(1775466078.050:206): avc: denied { create } for pid=6208 comm="syz.0.117" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 73.536029][ T6217] loop5: unable to read partition table [ 73.555002][ T6217] loop5: partition table beyond EOD, truncated [ 73.579200][ T29] audit: type=1400 audit(1775466078.110:207): avc: denied { bind } for pid=6222 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.600202][ T6217] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 73.629330][ T29] audit: type=1400 audit(1775466078.110:208): avc: denied { name_bind } for pid=6222 comm="syz.2.123" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 73.651686][ T29] audit: type=1400 audit(1775466078.110:209): avc: denied { node_bind } for pid=6222 comm="syz.2.123" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 73.674675][ T29] audit: type=1400 audit(1775466078.130:210): avc: denied { write } for pid=6222 comm="syz.2.123" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.699900][ T29] audit: type=1400 audit(1775466078.130:211): avc: denied { name_connect } for pid=6222 comm="syz.2.123" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 73.775606][ T29] audit: type=1400 audit(1775466078.310:212): avc: denied { create } for pid=6228 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.803367][ T29] audit: type=1400 audit(1775466078.330:213): avc: denied { sqpoll } for pid=6230 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.823952][ T29] audit: type=1400 audit(1775466078.340:214): avc: denied { setopt } for pid=6228 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.026920][ T6240] SELinux: failed to load policy [ 74.134046][ T6246] vivid-003: ================= START STATUS ================= [ 74.145952][ T6246] vivid-003: Radio HW Seek Mode: Bounded [ 74.158987][ T6246] vivid-003: Radio Programmable HW Seek: false [ 74.166011][ T6246] vivid-003: RDS Rx I/O Mode: Block I/O [ 74.171994][ T6246] vivid-003: Generate RBDS Instead of RDS: false [ 74.180344][ T6251] netlink: 36 bytes leftover after parsing attributes in process `syz.2.134'. [ 74.191450][ T6246] vivid-003: RDS Reception: true [ 74.197193][ T6246] vivid-003: RDS Program Type: 0 inactive [ 74.219153][ T6246] vivid-003: RDS PS Name: inactive [ 74.237503][ T6246] vivid-003: RDS Radio Text: inactive [ 74.263747][ T6246] vivid-003: RDS Traffic Announcement: false inactive [ 74.281287][ T6246] vivid-003: RDS Traffic Program: false inactive [ 74.304296][ T6246] vivid-003: RDS Music: false inactive [ 74.325060][ T6246] vivid-003: ================== END STATUS ================== [ 74.382290][ T6265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 74.569380][ T6274] can: request_module (can-proto-3) failed. [ 74.674169][ T6284] Illegal XDP return value 1627189928 on prog (id 11) dev syz_tun, expect packet loss! [ 74.831268][ T1212] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 74.974855][ T6296] syz.2.152 uses obsolete (PF_INET,SOCK_PACKET) [ 74.981365][ T1212] usb 1-1: Using ep0 maxpacket: 8 [ 74.994019][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 75.003440][ T1212] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 75.015430][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.023999][ T1212] usb 1-1: Product: syz [ 75.028184][ T1212] usb 1-1: Manufacturer: syz [ 75.033221][ T1212] usb 1-1: SerialNumber: syz [ 75.039258][ T1212] usb 1-1: config 0 descriptor?? [ 75.047167][ T1212] gspca_main: se401-2.14.0 probing 047d:5003 [ 75.156917][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 75.168300][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.177032][ T10] usb 2-1: Product: syz [ 75.181387][ T10] usb 2-1: Manufacturer: syz [ 75.186132][ T10] usb 2-1: SerialNumber: syz [ 75.193062][ T10] usb 2-1: config 0 descriptor?? [ 75.449120][ T1212] gspca_se401: ExtraFeatures: 114 [ 75.454463][ T1212] gspca_se401: Too many frame sizes [ 75.511876][ T792] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 75.609538][ T10] usb 2-1: Firmware version (0.0) predates our first public release. [ 75.617934][ T10] usb 2-1: Please update to version 0.2 or newer [ 75.625464][ T10] usb 2-1: Firmware: build [ 75.652466][ T1212] usb 1-1: USB disconnect, device number 4 [ 75.661968][ T792] usb 3-1: Using ep0 maxpacket: 16 [ 75.671782][ T792] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 75.681190][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.692043][ T792] usb 3-1: config 0 descriptor?? [ 75.699830][ T792] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 75.736692][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880568d0800: rx timeout, send abort [ 75.745782][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880568d0800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 75.844437][ T10] usb 2-1: USB disconnect, device number 4 [ 76.026733][ T9] cfg80211: failed to load regulatory.db [ 76.300889][ T6322] delete_channel: no stack [ 76.722520][ T24] usb 3-1: USB disconnect, device number 6 [ 76.817041][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.905200][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.009470][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.035195][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.047135][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.057948][ T5821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.071766][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.083754][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.093946][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.401805][ T5902] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.464074][ T35] bridge_slave_1: left allmulticast mode [ 77.470348][ T35] bridge_slave_1: left promiscuous mode [ 77.477618][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.525124][ T35] bridge_slave_0: left allmulticast mode [ 77.530794][ T35] bridge_slave_0: left promiscuous mode [ 77.540064][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.566478][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.593535][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 77.632844][ T5902] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.656578][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.684711][ T5902] usb 4-1: config 0 descriptor?? [ 77.705745][ T5902] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 77.751531][ T50] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 77.827177][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.830076][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'. [ 77.847540][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.858388][ T35] bond0 (unregistering): Released all slaves [ 77.932666][ T50] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 77.957220][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.974476][ T50] usb 1-1: Product: syz [ 77.978827][ T50] usb 1-1: Manufacturer: syz [ 77.983694][ T50] usb 1-1: SerialNumber: syz [ 77.992774][ T50] usb 1-1: config 0 descriptor?? [ 77.999288][ T50] hub 1-1:0.0: bad descriptor, ignoring hub [ 78.006661][ T50] hub 1-1:0.0: probe with driver hub failed with error -5 [ 78.183259][ T6348] chnl_net:caif_netlink_parms(): no params data found [ 78.205710][ T50] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 78.236224][ T50] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 78.281815][ T50] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 78.301387][ T50] usb 1-1: media controller created [ 78.334019][ T792] usb 4-1: USB disconnect, device number 3 [ 78.343543][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.364777][ T35] hsr_slave_0: left promiscuous mode [ 78.387318][ T35] hsr_slave_1: left promiscuous mode [ 78.395149][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.404120][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 78.404133][ T29] audit: type=1400 audit(1775466082.940:278): avc: denied { mount } for pid=6395 comm="syz.4.193" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 78.433952][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.442751][ T29] audit: type=1400 audit(1775466082.940:279): avc: denied { append } for pid=6371 comm="syz.0.188" name="i2c-1" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.466681][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.474944][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.479461][ T50] DVB: Unable to find symbol dib7000p_attach() [ 78.489285][ T50] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 78.499232][ T35] veth1_macvtap: left promiscuous mode [ 78.528016][ T35] veth0_macvtap: left promiscuous mode [ 78.550764][ T29] audit: type=1400 audit(1775466083.080:280): avc: denied { add_name } for pid=6389 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.579236][ T35] veth1_vlan: left promiscuous mode [ 78.586314][ T50] rc_core: IR keymap rc-dib0700-rc5 not found [ 78.592835][ T50] Registered IR keymap rc-empty [ 78.595840][ T35] veth0_vlan: left promiscuous mode [ 78.598272][ T50] dvb-usb: could not initialize remote control. [ 78.614796][ T29] audit: type=1400 audit(1775466083.080:281): avc: denied { create } for pid=6389 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.620162][ T50] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 78.663664][ T50] usb 1-1: USB disconnect, device number 5 [ 78.712627][ T50] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 78.739382][ T29] audit: type=1400 audit(1775466083.080:282): avc: denied { write } for pid=6389 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.795381][ T29] audit: type=1400 audit(1775466083.080:283): avc: denied { append } for pid=6389 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.827526][ T29] audit: type=1400 audit(1775466083.310:284): avc: denied { remove_name } for pid=6409 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.853006][ T29] audit: type=1400 audit(1775466083.310:285): avc: denied { unlink } for pid=6409 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.963697][ T29] audit: type=1400 audit(1775466083.500:286): avc: denied { create } for pid=6417 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.000771][ T29] audit: type=1400 audit(1775466083.530:287): avc: denied { connect } for pid=6417 comm="syz.2.197" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.076144][ T35] team0 (unregistering): Port device team_slave_1 removed [ 79.087420][ T35] team0 (unregistering): Port device team_slave_0 removed [ 79.121429][ T5821] Bluetooth: hci3: command tx timeout [ 79.172671][ T6415] netlink: 132 bytes leftover after parsing attributes in process `syz.3.196'. [ 79.327984][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.340779][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.354127][ T6348] bridge_slave_0: entered allmulticast mode [ 79.365864][ T6348] bridge_slave_0: entered promiscuous mode [ 79.376082][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.385431][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.392809][ T6348] bridge_slave_1: entered allmulticast mode [ 79.406952][ T6348] bridge_slave_1: entered promiscuous mode [ 79.510136][ T6348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.518753][ T6437] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.536831][ T6348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.628216][ T6442] syzkaller1: entered promiscuous mode [ 79.651325][ T6442] syzkaller1: entered allmulticast mode [ 79.675337][ T6348] team0: Port device team_slave_0 added [ 79.727326][ T6348] team0: Port device team_slave_1 added [ 79.765937][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.772959][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.807243][ T6348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.813855][ T5869] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 79.857570][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.879833][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.911383][ T50] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 79.923268][ T6348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.027065][ T6348] hsr_slave_0: entered promiscuous mode [ 80.042038][ T6348] hsr_slave_1: entered promiscuous mode [ 80.042661][ T5869] usb 4-1: config 0 has no interfaces? [ 80.056996][ T6348] debugfs: 'hsr0' already exists in 'hsr' [ 80.073645][ T5869] usb 4-1: config 0 has no interfaces? [ 80.077716][ T6348] Cannot create hsr debugfs directory [ 80.080409][ T5869] usb 4-1: config 0 has no interfaces? [ 80.093101][ T50] usb 1-1: Using ep0 maxpacket: 8 [ 80.106550][ T50] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 80.122786][ T50] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 80.136198][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 80.154554][ T5869] usb 4-1: string descriptor 0 read error: -22 [ 80.160830][ T5869] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 80.181571][ T50] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 80.194216][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.208937][ T50] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 80.223287][ T5869] usb 4-1: config 0 descriptor?? [ 80.228319][ T50] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 80.238858][ T50] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.256752][ T50] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.268514][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.309340][ T6348] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.326351][ T6348] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.336622][ T6348] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.347808][ T6348] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.351249][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 80.360985][ T24] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 80.374899][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 80.401612][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 80.427638][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 80.437207][ T6348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.459810][ T6348] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.470613][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 80.494544][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.501710][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.513368][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.515723][ T50] usb 1-1: usb_control_msg returned -32 [ 80.520488][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.549975][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.578517][ T50] usbtmc 1-1:16.0: can't read capabilities [ 80.587157][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.598686][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.735183][ T6440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.746784][ T6440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.768941][ T6348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.779938][ T792] usb 4-1: USB disconnect, device number 4 [ 80.826782][ T24] usb 3-1: usb_control_msg returned -32 [ 80.833948][ T24] usbtmc 3-1:16.0: can't read capabilities [ 81.087676][ T6348] veth0_vlan: entered promiscuous mode [ 81.117624][ T6348] veth1_vlan: entered promiscuous mode [ 81.159788][ T6348] veth0_macvtap: entered promiscuous mode [ 81.169604][ T6348] veth1_macvtap: entered promiscuous mode [ 81.193729][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.201357][ T5821] Bluetooth: hci3: command tx timeout [ 81.235517][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.261176][ T127] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.277138][ T127] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.318176][ T127] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.353001][ T127] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.463725][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.485158][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.560951][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.574180][ T6521] netlink: 49 bytes leftover after parsing attributes in process `syz.4.215'. [ 81.584836][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.593944][ T6521] netlink: 140 bytes leftover after parsing attributes in process `syz.4.215'. [ 81.619288][ T6521] netlink: 49 bytes leftover after parsing attributes in process `syz.4.215'. [ 81.826964][ T6532] input: syz0 as /devices/virtual/input/input9 [ 81.855649][ T6535] Zero length message leads to an empty skb [ 82.100213][ T6548] netlink: 88 bytes leftover after parsing attributes in process `syz.4.224'. [ 82.226319][ T6556] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 82.368344][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.376396][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.666929][ T24] usb 1-1: USB disconnect, device number 6 [ 82.888317][ T1212] usb 3-1: USB disconnect, device number 7 [ 83.181611][ T24] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 83.315000][ T5821] Bluetooth: hci3: command tx timeout [ 83.393027][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 83.415085][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 83.425655][ T24] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 83.452835][ T1212] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 83.467492][ T24] usb 1-1: config 0 has no interface number 0 [ 83.479544][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 83.479556][ T29] audit: type=1400 audit(1775466088.010:340): avc: denied { unmount } for pid=6348 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 83.507476][ T24] usb 1-1: config 0 interface 175 has no altsetting 0 [ 83.525446][ T24] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 83.535249][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.543563][ T24] usb 1-1: Product: syz [ 83.548164][ T24] usb 1-1: Manufacturer: syz [ 83.552953][ T24] usb 1-1: SerialNumber: syz [ 83.560461][ T24] usb 1-1: config 0 descriptor?? [ 83.612033][ T29] audit: type=1400 audit(1775466088.140:341): avc: denied { create } for pid=6608 comm="syz.5.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.639152][ T1212] usb 3-1: Using ep0 maxpacket: 32 [ 83.657371][ T1212] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 83.679608][ T1212] usb 3-1: config 0 has no interface number 0 [ 83.721778][ T29] audit: type=1400 audit(1775466088.180:342): avc: denied { setopt } for pid=6608 comm="syz.5.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.751463][ T1212] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 83.760538][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.803963][ T24] ums-alauda 1-1:0.175: USB Mass Storage device detected [ 83.816014][ T1212] usb 3-1: Product: syz [ 83.830729][ T29] audit: type=1400 audit(1775466088.180:343): avc: denied { connect } for pid=6608 comm="syz.5.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.850497][ T1212] usb 3-1: Manufacturer: syz [ 83.866905][ T1212] usb 3-1: SerialNumber: syz [ 83.893435][ T24] ums-alauda 1-1:0.175: This device (07b4,010a,0102 S 06 P 01) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 83.893435][ T24] Please send a copy of this message to and [ 83.941336][ T1212] usb 3-1: config 0 descriptor?? [ 83.948467][ T1212] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 83.957348][ T29] audit: type=1326 audit(1775466088.480:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.5.253" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc08d9c819 code=0x0 [ 84.049345][ T24] usb 1-1: USB disconnect, device number 7 [ 84.202406][ T1212] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 84.233761][ T1212] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 84.611159][ T29] audit: type=1400 audit(1775466089.140:345): avc: denied { connect } for pid=6635 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.655770][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 84.663856][ T24] usb 3-1: USB disconnect, device number 8 [ 84.672553][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 84.701681][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 84.716778][ T24] quatech2 3-1:0.51: device disconnected [ 84.783612][ T29] audit: type=1400 audit(1775466089.310:346): avc: denied { mounton } for pid=6640 comm="syz.0.263" path=2F34382FE91F7189591E9233614B dev="tmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 84.867687][ T29] audit: type=1400 audit(1775466089.400:347): avc: denied { create } for pid=6645 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 85.341648][ T29] audit: type=1400 audit(1775466089.870:348): avc: denied { read write } for pid=6656 comm="syz.0.270" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 85.369553][ T5821] Bluetooth: hci3: command tx timeout [ 85.375625][ T29] audit: type=1400 audit(1775466089.880:349): avc: denied { open } for pid=6656 comm="syz.0.270" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 85.559328][ T6663] loop6: detected capacity change from 0 to 7 [ 85.584171][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 85.623738][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.633483][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.674519][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.684137][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.718602][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.728204][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.737320][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.746900][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.756751][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.766319][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.823518][ T6665] input: syz0 as /devices/virtual/input/input10 [ 85.932933][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.277'. [ 85.995709][ T6673] gtp0: entered promiscuous mode [ 86.000673][ T6673] gtp0: entered allmulticast mode [ 86.187624][ T6684] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.282'. [ 86.201061][ T6682] overlay: filesystem on ./bus not supported as upperdir [ 86.373514][ T6689] netlink: 203340 bytes leftover after parsing attributes in process `syz.0.284'. [ 86.530631][ T6583] Set syz1 is full, maxelem 65536 reached [ 86.640016][ T6700] binder: 6699:6700 ioctl c0306201 2000000001c0 returned -14 [ 87.031289][ T5892] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 87.192550][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.209056][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.237263][ T5892] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 87.246435][ T5902] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 87.258313][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 87.278037][ T5892] usb 3-1: SerialNumber: syz [ 87.422918][ T5902] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 87.436453][ T6729] Bluetooth: MGMT ver 1.23 [ 87.489082][ T5902] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.506703][ T6709] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 87.513327][ T6709] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 87.539094][ T5902] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 87.549490][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 87.573569][ T6709] vhci_hcd vhci_hcd.0: Device attached [ 87.607285][ T5902] usb 1-1: Product: syz [ 87.616539][ T6731] vhci_hcd: connection closed [ 87.620554][ T5892] usb 3-1: 0:2 : does not exist [ 87.620601][ T35] vhci_hcd vhci_hcd.2: stop threads [ 87.625790][ T5902] usb 1-1: Manufacturer: syz [ 87.643314][ T5902] usb 1-1: SerialNumber: syz [ 87.661919][ T35] vhci_hcd vhci_hcd.2: release socket [ 87.667356][ T35] vhci_hcd vhci_hcd.2: disconnect device [ 87.682515][ T5902] usb 1-1: config 0 descriptor?? [ 87.709104][ T5902] usb 1-1: selecting invalid altsetting 0 [ 87.725222][ T5892] usb 3-1: USB disconnect, device number 9 [ 87.758481][ T6743] netlink: 'syz.3.307': attribute type 7 has an invalid length. [ 87.778499][ T6743] netlink: 'syz.3.307': attribute type 8 has an invalid length. [ 87.813414][ T6743] netlink: 209828 bytes leftover after parsing attributes in process `syz.3.307'. [ 87.883373][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.929864][ T6747] dummy0: entered promiscuous mode [ 87.935791][ T6749] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 87.968126][ T6747] dummy0: left promiscuous mode [ 88.012316][ T10] usb 1-1: USB disconnect, device number 8 [ 88.065195][ T6754] warning: `syz.4.311' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.195699][ T6758] ip6erspan0: entered allmulticast mode [ 88.482254][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 88.482270][ T29] audit: type=1400 audit(1775466093.020:366): avc: denied { read } for pid=6773 comm="syz.5.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.645864][ T29] audit: type=1400 audit(1775466093.170:367): avc: denied { mounton } for pid=6777 comm="syz.2.321" path="/proc/118/cgroup" dev="proc" ino=12681 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 88.688226][ T29] audit: type=1400 audit(1775466093.170:368): avc: denied { remount } for pid=6777 comm="syz.2.321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 88.739800][ T29] audit: type=1400 audit(1775466093.270:369): avc: denied { append } for pid=6779 comm="syz.4.323" name="dvr0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 88.874866][ T29] audit: type=1326 audit(1775466093.400:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1899c819 code=0x7ffc0000 [ 88.933776][ T29] audit: type=1326 audit(1775466093.400:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1899c819 code=0x7ffc0000 [ 88.983454][ T29] audit: type=1326 audit(1775466093.410:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f6d1899c819 code=0x7ffc0000 [ 89.064698][ T29] audit: type=1400 audit(1775466093.410:373): avc: denied { kexec_image_load } for pid=6787 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 89.087279][ T29] audit: type=1326 audit(1775466093.410:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1899c819 code=0x7ffc0000 [ 89.113517][ T29] audit: type=1326 audit(1775466093.410:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1899c819 code=0x7ffc0000 [ 89.221465][ T6808] netlink: 240 bytes leftover after parsing attributes in process `syz.3.331'. [ 89.331274][ T50] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 89.391401][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 89.491526][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 89.502775][ T50] usb 6-1: config 2 has an invalid interface number: 255 but max is 0 [ 89.534341][ T50] usb 6-1: config 2 has no interface number 0 [ 89.540467][ T50] usb 6-1: too many endpoints for config 2 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 89.541756][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 89.557939][ T50] usb 6-1: config 2 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 89.584007][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 89.585327][ T50] usb 6-1: config 2 interface 255 has no altsetting 0 [ 89.592488][ T10] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 89.598685][ T50] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 89.619527][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.630105][ T10] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 89.661270][ T10] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 89.680374][ T10] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 89.695925][ T10] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 89.709902][ T10] usb 1-1: config 168 interface 0 has no altsetting 0 [ 89.717942][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 89.725703][ T10] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 89.737150][ T10] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 89.749606][ T10] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 89.761783][ T10] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 89.773577][ T10] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 89.801328][ T10] usb 1-1: config 168 interface 0 has no altsetting 0 [ 89.808906][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 89.816584][ T10] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 89.841739][ T10] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 89.861311][ T10] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 89.867492][ T50] usb 6-1: string descriptor 0 read error: -71 [ 89.883615][ T10] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 89.890649][ T50] usb 6-1: USB disconnect, device number 2 [ 89.915142][ T10] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 89.949706][ T10] usb 1-1: config 168 interface 0 has no altsetting 0 [ 89.959036][ T10] usb 1-1: string descriptor 0 read error: -22 [ 89.965463][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 89.982583][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.036668][ T10] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 90.337523][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 90.351856][ T792] usb 1-1: USB disconnect, device number 9 [ 90.491269][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 90.509652][ T10] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 90.528149][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.545576][ T10] usb 3-1: Product: syz [ 90.552294][ T10] usb 3-1: Manufacturer: syz [ 90.557703][ T10] usb 3-1: SerialNumber: syz [ 90.564501][ T6847] binder: 6846:6847 ioctl c0306201 2000000001c0 returned -14 [ 90.595024][ T10] usb 3-1: config 0 descriptor?? [ 90.673532][ T6852] sp0: Synchronizing with TNC [ 90.758541][ T6855] sp0: Synchronizing with TNC [ 90.881291][ T50] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 90.942551][ T1212] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.011432][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 91.025390][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.036023][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 91.041509][ T50] usb 4-1: Using ep0 maxpacket: 8 [ 91.048725][ T10] usb 3-1: media controller created [ 91.053092][ T50] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.062166][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.071696][ T50] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.082689][ T50] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.093029][ T50] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.109027][ T50] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.119513][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.130802][ T1212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.145370][ T1212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.157389][ T1212] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 91.167771][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.192560][ T1212] usb 5-1: config 0 descriptor?? [ 91.387629][ T50] usb 4-1: GET_CAPABILITIES returned 0 [ 91.394173][ T50] usbtmc 4-1:16.0: can't read capabilities [ 91.416763][ T6870] netlink: 11 bytes leftover after parsing attributes in process `syz.5.361'. [ 91.631953][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 91.654220][ T5877] usb 4-1: USB disconnect, device number 5 [ 91.657117][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 91.687250][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 91.707596][ T6877] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 91.727402][ T10] usb 3-1: USB disconnect, device number 10 [ 91.814336][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 92.024836][ T1212] hid-led 0003:27B8:01ED.0001: probe with driver hid-led failed with error -71 [ 92.055986][ T1212] usb 5-1: USB disconnect, device number 4 [ 92.591538][ T5892] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 92.733723][ T146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.772032][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 92.785328][ T5892] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.805879][ T5892] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.837285][ T5892] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.857578][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.883368][ T146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.893979][ T5892] usb 6-1: Product: syz [ 92.898140][ T5892] usb 6-1: Manufacturer: syz [ 92.911288][ T5892] usb 6-1: SerialNumber: syz [ 92.974702][ T146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.035540][ T146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.150717][ T5892] usb 6-1: 0:2 : does not exist [ 93.171308][ T5892] usb 6-1: unit 9 not found! [ 93.188761][ T5892] usb 6-1: 4:0: cannot get min/max values for control 1 (id 4) [ 93.200861][ T5892] usb 6-1: 4:0: cannot get min/max values for control 2 (id 4) [ 93.203325][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.205363][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.206259][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.208168][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.208940][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.359444][ T5892] usb 6-1: USB disconnect, device number 3 [ 93.428907][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.455353][ T146] bridge_slave_1: left allmulticast mode [ 93.455391][ T146] bridge_slave_1: left promiscuous mode [ 93.455512][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.457454][ T146] bridge_slave_0: left allmulticast mode [ 93.457472][ T146] bridge_slave_0: left promiscuous mode [ 93.457608][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.510059][ T6944] process 'syz.4.388' launched '/dev/fd/3' with NULL argv: empty string added [ 93.512979][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 93.512993][ T29] audit: type=1400 audit(1775466098.040:395): avc: denied { execute } for pid=6943 comm="syz.4.388" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.513033][ T29] audit: type=1400 audit(1775466098.040:396): avc: denied { execute_no_trans } for pid=6943 comm="syz.4.388" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.515067][ T29] audit: type=1400 audit(1775466098.050:397): avc: denied { mounton } for pid=6943 comm="syz.4.388" path="/101/file0" dev="configfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.600932][ T29] audit: type=1400 audit(1775466098.130:398): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 93.705144][ T29] audit: type=1400 audit(1775466098.240:399): avc: denied { getopt } for pid=6947 comm="syz.4.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.841550][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.887889][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.889009][ T146] bond0 (unregistering): Released all slaves [ 94.281658][ T6968] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6968 comm=syz.4.394 [ 94.354490][ T29] audit: type=1400 audit(1775466098.890:400): avc: denied { create } for pid=6971 comm="syz.5.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.436838][ T6976] netlink: 'syz.4.397': attribute type 5 has an invalid length. [ 94.447475][ T29] audit: type=1400 audit(1775466098.930:401): avc: denied { bind } for pid=6971 comm="syz.5.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.579716][ T6985] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.399'. [ 94.790447][ T6933] chnl_net:caif_netlink_parms(): no params data found [ 94.817182][ T7001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.400'. [ 94.824100][ T7000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.401'. [ 94.896641][ T7005] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.402'. [ 95.016626][ T5800] udevd[5800]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 95.085943][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.403'. [ 95.101938][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.403'. [ 95.144739][ T146] hsr_slave_0: left promiscuous mode [ 95.182875][ T146] hsr_slave_1: left promiscuous mode [ 95.209108][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.231238][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.257677][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.271237][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.282920][ T5818] Bluetooth: hci4: command tx timeout [ 95.326896][ T146] veth1_macvtap: left promiscuous mode [ 95.342478][ T146] veth0_macvtap: left promiscuous mode [ 95.349923][ T146] veth1_vlan: left promiscuous mode [ 95.359625][ T146] veth0_vlan: left promiscuous mode [ 95.757323][ T146] team0 (unregistering): Port device team_slave_1 removed [ 95.790733][ T146] team0 (unregistering): Port device team_slave_0 removed [ 96.192285][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 96.233252][ T6933] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.240536][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.248767][ T6933] bridge_slave_0: entered allmulticast mode [ 96.256372][ T6933] bridge_slave_0: entered promiscuous mode [ 96.308251][ T6933] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.334609][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.351025][ T6933] bridge_slave_1: entered allmulticast mode [ 96.360540][ T7067] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.419'. [ 96.370082][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 96.380267][ T6933] bridge_slave_1: entered promiscuous mode [ 96.389087][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 96.430631][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.484684][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 96.506549][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.520732][ T6933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.549779][ T24] usb 4-1: Product: syz [ 96.558741][ T6933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.568058][ T24] usb 4-1: Manufacturer: syz [ 96.573734][ T24] usb 4-1: SerialNumber: syz [ 96.591028][ T24] usb 4-1: config 0 descriptor?? [ 96.622601][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 96.664933][ T6933] team0: Port device team_slave_0 added [ 96.671371][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 96.700326][ T6933] team0: Port device team_slave_1 added [ 96.771376][ T6933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.778367][ T6933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.816579][ T6933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.871849][ T6933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.878842][ T6933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.918709][ T6933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.972210][ T6933] hsr_slave_0: entered promiscuous mode [ 96.983147][ T6933] hsr_slave_1: entered promiscuous mode [ 97.011781][ T6933] debugfs: 'hsr0' already exists in 'hsr' [ 97.017572][ T6933] Cannot create hsr debugfs directory [ 97.241742][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (37) [ 97.337270][ T29] audit: type=1400 audit(1775466101.870:402): avc: denied { name_bind } for pid=7111 comm="syz.5.432" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 97.362015][ T5818] Bluetooth: hci4: command tx timeout [ 97.386423][ T6933] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 97.408169][ T6933] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 97.426711][ T6933] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 97.441387][ T5877] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 97.450200][ T24] em28xx 4-1:0.0: Config register raw data: 0x25 [ 97.460366][ T29] audit: type=1400 audit(1775466101.990:403): avc: denied { watch_mount } for pid=7116 comm="syz.5.433" path="/63" dev="tmpfs" ino=339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 97.469275][ T24] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 97.483507][ T6933] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 97.491272][ T24] em28xx 4-1:0.0: No AC97 audio processor [ 97.615055][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 97.654056][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.679403][ T24] usb 4-1: USB disconnect, device number 6 [ 97.684455][ T6933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.710818][ T5877] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 97.742513][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.750697][ T6933] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.775362][ T5877] usb 3-1: config 0 descriptor?? [ 97.788235][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.795389][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.828592][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.835703][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.942044][ T792] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.037750][ T5877] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 98.101948][ T792] usb 5-1: Using ep0 maxpacket: 8 [ 98.108596][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.123366][ T792] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 98.138819][ T792] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 98.153583][ T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.186467][ T792] usb 5-1: config 0 descriptor?? [ 98.233264][ T6933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.552349][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'. [ 98.573123][ T24] usb 3-1: USB disconnect, device number 11 [ 98.609422][ T792] hid (null): usage index exceeded [ 98.655967][ T792] uclogic 0003:5543:0781.0002: unknown main item tag 0x0 [ 98.678274][ T792] uclogic 0003:5543:0781.0002: ignoring exceeding usage max [ 98.698157][ T792] uclogic 0003:5543:0781.0002: ignoring exceeding usage max [ 98.713048][ T792] uclogic 0003:5543:0781.0002: usage index exceeded [ 98.732742][ T792] uclogic 0003:5543:0781.0002: item 0 1 2 2 parsing failed [ 98.752134][ T792] uclogic 0003:5543:0781.0002: parse failed [ 98.760302][ T792] uclogic 0003:5543:0781.0002: probe with driver uclogic failed with error -22 [ 98.816295][ T792] usb 5-1: USB disconnect, device number 5 [ 98.839172][ T6933] veth0_vlan: entered promiscuous mode [ 98.863867][ T6933] veth1_vlan: entered promiscuous mode [ 98.871496][ T5902] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 98.895861][ T6933] veth0_macvtap: entered promiscuous mode [ 98.905227][ T6933] veth1_macvtap: entered promiscuous mode [ 98.923615][ T6933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.937703][ T6933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.947694][ T5877] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 98.963622][ T1319] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.982272][ T1319] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.001187][ T1319] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.018368][ T1319] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.041838][ T5902] usb 6-1: Using ep0 maxpacket: 32 [ 99.058274][ T5902] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.078847][ T5902] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 99.095334][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.110710][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.120009][ T5902] usb 6-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 99.132389][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.134548][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 99.147231][ T5902] usb 6-1: Product: syz [ 99.161013][ T5902] usb 6-1: Manufacturer: syz [ 99.175369][ T5902] usb 6-1: SerialNumber: syz [ 99.182906][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.190715][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.193621][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.228782][ T5902] usb 6-1: config 0 descriptor?? [ 99.245464][ T5877] usb 4-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 99.279702][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.307950][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.382'. [ 99.323471][ T5877] usb 4-1: config 0 descriptor?? [ 99.441380][ T5818] Bluetooth: hci4: command tx timeout [ 99.603061][ T5902] usb 6-1: USB disconnect, device number 4 [ 99.774211][ T5877] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 99.785013][ T5877] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 99.792828][ T5877] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 99.800423][ T5877] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 99.808816][ T5877] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 99.817025][ T5877] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 99.824791][ T5877] holtek_mouse 0003:04D9:A04A.0003: unexpected long global item [ 99.839305][ T5877] holtek_mouse 0003:04D9:A04A.0003: hid parse failed: -22 [ 99.854678][ T5877] holtek_mouse 0003:04D9:A04A.0003: probe with driver holtek_mouse failed with error -22 [ 99.987752][ T5877] usb 4-1: USB disconnect, device number 7 [ 100.245224][ T29] audit: type=1400 audit(1775466104.770:404): avc: denied { read } for pid=7232 comm="syz.5.454" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 100.277763][ T29] audit: type=1400 audit(1775466104.780:405): avc: denied { open } for pid=7232 comm="syz.5.454" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 100.311022][ T29] audit: type=1400 audit(1775466104.810:406): avc: denied { ioctl } for pid=7232 comm="syz.5.454" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 100.711166][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 100.740940][ T7247] netlink: 'syz.2.459': attribute type 30 has an invalid length. [ 100.793678][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 100.827725][ T7251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 100.847794][ T7250] netlink: 'syz.2.459': attribute type 30 has an invalid length. [ 100.936104][ T1319] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.961678][ T1346] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.970565][ T1346] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.004320][ T1346] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.038841][ T7255] syzkaller1: entered promiscuous mode [ 101.071281][ T7255] syzkaller1: entered allmulticast mode [ 101.521818][ T5818] Bluetooth: hci4: command tx timeout [ 101.565506][ T1212] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 101.768218][ T1212] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 101.774516][ T29] audit: type=1400 audit(1775466106.310:407): avc: denied { create } for pid=7299 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 101.796848][ T1212] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 101.819192][ T7303] vcan0: tx address claim with different name [ 101.830312][ T1212] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 101.852409][ T29] audit: type=1400 audit(1775466106.340:408): avc: denied { ioctl } for pid=7299 comm="syz.4.484" path="socket:[15089]" dev="sockfs" ino=15089 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 101.860458][ T1212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.933944][ T7274] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 101.941283][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 102.133628][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.154577][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 102.173771][ T7274] netlink: 'syz.5.470': attribute type 1 has an invalid length. [ 102.188931][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.214670][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.470'. [ 102.226572][ T24] usb 3-1: config 0 descriptor?? [ 102.259622][ T1212] usb 6-1: string descriptor 0 read error: -71 [ 102.280389][ T1212] hub 6-1:32.0: USB hub found [ 102.287291][ T1212] hub 6-1:32.0: config failed, can't read hub descriptor (err -22) [ 102.312703][ T7323] geneve2: entered promiscuous mode [ 102.443006][ T1212] usb 6-1: USB disconnect, device number 5 [ 102.649265][ T29] audit: type=1400 audit(1775466107.180:409): avc: denied { mount } for pid=7335 comm="syz.3.498" name="/" dev="autofs" ino=15175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 102.691383][ T29] audit: type=1400 audit(1775466107.200:410): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 102.711501][ T24] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 102.761467][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input11 [ 102.774448][ T29] audit: type=1326 audit(1775466107.290:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="syz.3.500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff259f9c819 code=0x0 [ 102.884008][ T7295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.906268][ T7295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.931939][ T24] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 103.239615][ T29] audit: type=1400 audit(1775466107.770:412): avc: denied { write } for pid=7359 comm="syz.4.508" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 103.400467][ T5892] usb 3-1: USB disconnect, device number 12 [ 103.470002][ T7370] input: syz0 as /devices/virtual/input/input12 [ 103.508530][ T29] audit: type=1400 audit(1775466108.040:413): avc: denied { read } for pid=5165 comm="acpid" name="event4" dev="devtmpfs" ino=2977 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.092245][ T7406] ======================================================= [ 104.092245][ T7406] WARNING: The mand mount option has been deprecated and [ 104.092245][ T7406] and is ignored by this kernel. Remove the mand [ 104.092245][ T7406] option from the mount to silence this warning. [ 104.092245][ T7406] ======================================================= [ 104.228300][ T7406] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 104.541475][ T5877] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 104.722969][ T5877] usb 4-1: config 0 has no interfaces? [ 104.731904][ T1212] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.742271][ T5877] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 104.764482][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.793419][ T5877] usb 4-1: config 0 descriptor?? [ 104.924081][ T1212] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 104.942062][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.964971][ T1212] usb 5-1: config 0 descriptor?? [ 104.971266][ T5902] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 104.995980][ T1212] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 105.089308][ T5877] usb 4-1: USB disconnect, device number 8 [ 105.141547][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 105.154493][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.173168][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.193790][ T5902] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 105.231528][ T5902] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 105.241908][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.294183][ T5902] usb 6-1: config 0 descriptor?? [ 105.401848][ T1212] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 105.523131][ T5818] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 105.532073][ T5818] Bluetooth: hci2: Injecting HCI hardware error event [ 105.539460][ T5818] Bluetooth: hci2: hardware error 0x00 [ 105.669141][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 105.669158][ T29] audit: type=1400 audit(1775466110.200:429): avc: denied { map } for pid=7452 comm="syz.6.550" path="socket:[16478]" dev="sockfs" ino=16478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.714193][ T5902] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 105.743469][ T5902] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 105.759575][ T29] audit: type=1400 audit(1775466110.200:430): avc: denied { accept } for pid=7452 comm="syz.6.550" path="socket:[16478]" dev="sockfs" ino=16478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.764663][ T5902] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 105.804958][ T1212] gspca_cpia1: usb_control_msg 02, error -71 [ 105.832001][ T1212] gspca_cpia1: usb_control_msg 05, error -71 [ 105.848270][ T1212] cpia1 5-1:0.0: unexpected systemstate: 00 [ 105.849296][ T5902] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 105.864036][ T5902] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 105.880611][ T29] audit: type=1400 audit(1775466110.370:431): avc: denied { read } for pid=7459 comm="syz.2.552" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 105.886973][ T5902] input: HID 0955:7214 Haptics as /devices/virtual/input/input13 [ 105.911395][ T1212] usb 5-1: USB disconnect, device number 6 [ 105.947909][ T29] audit: type=1400 audit(1775466110.370:432): avc: denied { open } for pid=7459 comm="syz.2.552" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.005751][ T7460] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.007956][ T5902] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 106.030571][ T5902] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 106.054347][ T7460] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 106.061293][ T792] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 106.074203][ T7460] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 106.082752][ T7460] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.089246][ T7460] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.110392][ T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 106.131916][ T5902] usb 6-1: USB disconnect, device number 6 [ 106.139693][ T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 106.159251][ T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 106.174575][ T7460] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.191746][ T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 106.215506][ T792] usb 7-1: Using ep0 maxpacket: 8 [ 106.223795][ T792] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 106.233298][ T792] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.241829][ T7460] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.248959][ T792] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.259248][ T792] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.269470][ T792] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.284998][ T792] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.294981][ T792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.296275][ T7460] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.404906][ T29] audit: type=1400 audit(1775466110.940:433): avc: denied { create } for pid=7471 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.412060][ T7460] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.440441][ T7472] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.497847][ T29] audit: type=1400 audit(1775466111.020:434): avc: denied { setopt } for pid=7471 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.527613][ T29] audit: type=1400 audit(1775466111.020:435): avc: denied { bind } for pid=7471 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.593577][ T7460] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 106.635946][ T7460] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 106.668058][ T7460] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 106.781268][ T29] audit: type=1400 audit(1775466111.310:436): avc: denied { write } for pid=7481 comm="syz.4.560" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 106.864610][ T29] audit: type=1400 audit(1775466111.310:437): avc: denied { open } for pid=7481 comm="syz.4.560" path="/143/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 106.929316][ T29] audit: type=1400 audit(1775466111.450:438): avc: denied { ioctl } for pid=7459 comm="syz.2.552" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 107.078013][ T7493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.565'. [ 107.138789][ T7493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.146268][ T7493] IPv6: NLM_F_CREATE should be set when creating new route [ 107.155481][ T7498] usbtmc 7-1:16.0: simple usb_control_msg returned 0 [ 107.179875][ T7493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.565'. [ 107.372766][ T1212] usb 7-1: USB disconnect, device number 2 [ 107.586136][ T7520] loop8: detected capacity change from 0 to 7 [ 107.596692][ T7520] Dev loop8: unable to read RDB block 7 [ 107.601445][ T5818] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 107.603011][ T7520] loop8: unable to read partition table [ 107.614567][ T7520] loop8: partition table beyond EOD, truncated [ 107.622124][ T7520] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 107.781261][ T5869] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 107.965265][ T5869] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.984359][ T5869] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 108.004029][ T5869] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 108.036236][ T5869] usb 3-1: config 63 has no interface number 0 [ 108.055436][ T5869] usb 3-1: config 63 interface 66 has no altsetting 0 [ 108.080051][ T5869] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 108.090060][ T5818] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.100009][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.151940][ T5869] usb 3-1: Product: syz [ 108.161675][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.165819][ T5869] usb 3-1: Manufacturer: syz [ 108.199266][ T5869] usb 3-1: SerialNumber: syz [ 108.321562][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.376662][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.592'. [ 108.385951][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.592'. [ 108.446930][ T5869] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 108.464992][ T5869] uvcvideo 3-1:63.66: No valid video chain found. [ 108.490880][ T5869] usb 3-1: USB disconnect, device number 13 [ 108.531895][ T1212] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 108.642433][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 108.703913][ T1212] usb 6-1: Using ep0 maxpacket: 32 [ 108.728223][ T1212] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 108.748808][ T1212] usb 6-1: config 0 has no interface number 0 [ 108.768650][ T1212] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.806681][ T1212] usb 6-1: config 0 interface 85 has no altsetting 0 [ 108.818860][ T1212] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 108.860038][ T1212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.901273][ T1212] usb 6-1: Product: syz [ 108.915646][ T1212] usb 6-1: Manufacturer: syz [ 108.937961][ T1212] usb 6-1: SerialNumber: syz [ 108.955128][ T1212] usb 6-1: config 0 descriptor?? [ 109.191294][ T5902] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 109.321341][ T7589] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 109.366953][ T5902] usb 7-1: Using ep0 maxpacket: 32 [ 109.382003][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.411252][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.421015][ T5902] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 109.452571][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.486064][ T5902] usb 7-1: config 0 descriptor?? [ 109.526521][ T7593] loop5: detected capacity change from 0 to 7 [ 109.533794][ T7593] Dev loop5: unable to read RDB block 7 [ 109.542981][ T7593] loop5: AHDI p1 p3 p4 [ 109.547173][ T7593] loop5: partition table partially beyond EOD, truncated [ 109.561459][ T7593] loop5: p1 size 100663296 extends beyond EOD, truncated [ 109.574378][ T7593] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 109.691793][ T5800] udevd[5800]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 109.712283][ T5797] udevd[5797]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 109.714853][ T1212] appletouch 6-1:0.85: Geyser mode initialized. [ 109.752383][ T1212] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input14 [ 109.937431][ T5902] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 109.957927][ T9] usb 6-1: USB disconnect, device number 7 [ 109.957944][ C1] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 110.007194][ T9] appletouch 6-1:0.85: input: appletouch disconnected [ 110.161525][ T5818] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.174550][ T792] usb 7-1: USB disconnect, device number 3 [ 110.241273][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.402243][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.728087][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 111.273528][ T7655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 111.768878][ T7685] netlink: 20 bytes leftover after parsing attributes in process `syz.5.643'. [ 111.822964][ T7689] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.645'. [ 111.867542][ T7689] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 112.241311][ T5818] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.322067][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.401684][ T5902] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 112.486258][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.555308][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 112.572449][ T5902] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.585233][ T5902] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.610787][ T5902] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 112.622422][ T5902] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 112.624048][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 112.624060][ T29] audit: type=1400 audit(1775466117.160:448): avc: denied { mount } for pid=7728 comm="syz.5.654" name="/" dev="hugetlbfs" ino=18061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 112.633997][ T5902] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 112.672661][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.676731][ T29] audit: type=1400 audit(1775466117.210:449): avc: denied { create } for pid=7728 comm="syz.5.654" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 112.730473][ T5902] hub 4-1:1.0: bad descriptor, ignoring hub [ 112.747286][ T5902] hub 4-1:1.0: probe with driver hub failed with error -5 [ 112.755133][ T5902] cdc_wdm 4-1:1.0: skipping garbage [ 112.760518][ T5902] cdc_wdm 4-1:1.0: skipping garbage [ 112.808324][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 112.842483][ T29] audit: type=1400 audit(1775466117.380:450): avc: denied { write } for pid=7735 comm="syz.2.655" name="mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 112.872509][ T5902] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 112.878509][ T5902] cdc_wdm 4-1:1.0: Unknown control protocol [ 113.035428][ T29] audit: type=1400 audit(1775466117.560:451): avc: denied { read write } for pid=7713 comm="syz.3.652" name="cdc-wdm0" dev="devtmpfs" ino=3023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 113.111313][ T29] audit: type=1400 audit(1775466117.560:452): avc: denied { open } for pid=7713 comm="syz.3.652" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 113.282768][ T7759] syzkaller1: entered promiscuous mode [ 113.310207][ T7759] syzkaller1: entered allmulticast mode [ 113.439265][ T7714] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 113.453373][ T29] audit: type=1400 audit(1775466117.990:453): avc: denied { create } for pid=7762 comm="syz.5.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.575279][ T29] audit: type=1400 audit(1775466118.010:454): avc: denied { connect } for pid=7762 comm="syz.5.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.616101][ T29] audit: type=1400 audit(1775466118.010:455): avc: denied { write } for pid=7762 comm="syz.5.664" laddr=172.20.20.10 lport=22422 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.842167][ T5902] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 113.945166][ T9] usb 4-1: USB disconnect, device number 9 [ 113.971412][ T792] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 114.022742][ T5902] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 114.041324][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.062372][ T5902] usb 6-1: config 0 descriptor?? [ 114.076897][ T5902] cp210x 6-1:0.0: cp210x converter detected [ 114.132823][ T792] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 114.153710][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.160191][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.672'. [ 114.166445][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.183814][ T792] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 114.196861][ T1212] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 114.213378][ T792] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 114.223136][ T792] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 114.231714][ T792] usb 5-1: Manufacturer: syz [ 114.247320][ T792] usb 5-1: config 0 descriptor?? [ 114.306131][ T7799] netlink: 28 bytes leftover after parsing attributes in process `syz.6.674'. [ 114.316030][ T7799] netlink: 'syz.6.674': attribute type 7 has an invalid length. [ 114.324833][ T7799] netlink: 'syz.6.674': attribute type 8 has an invalid length. [ 114.333369][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.6.674'. [ 114.346284][ T7799] gretap0: entered promiscuous mode [ 114.353544][ T7799] gretap0: left promiscuous mode [ 114.371295][ T1212] usb 3-1: Using ep0 maxpacket: 32 [ 114.377966][ T1212] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.388876][ T1212] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.400728][ T1212] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 114.410347][ T1212] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 114.419920][ T1212] usb 3-1: Product: syz [ 114.427424][ T1212] usb 3-1: Manufacturer: syz [ 114.436377][ T1212] hub 3-1:4.0: USB hub found [ 114.480875][ T5902] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 114.655645][ T1212] hub 3-1:4.0: 2 ports detected [ 114.695992][ T792] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 114.717222][ T5902] usb 6-1: cp210x converter now attached to ttyUSB0 [ 114.737755][ T792] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 114.789120][ T7813] Bluetooth: MGMT ver 1.23 [ 114.796596][ T7813] Bluetooth: hci1: service_discovery: too big uuid_count value 16387 [ 114.853629][ C1] raw-gadget.3 gadget.2: ignoring, device is not running [ 114.869215][ T1212] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 114.878924][ T1212] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 114.914073][ T1212] usb 3-1: USB disconnect, device number 14 [ 114.919188][ T792] usb 6-1: USB disconnect, device number 8 [ 114.947075][ T792] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 114.984946][ T792] cp210x 6-1:0.0: device disconnected [ 115.001329][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 115.012245][ T50] usb 5-1: USB disconnect, device number 7 [ 115.163498][ T24] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 115.171655][ T24] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 115.181758][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.190068][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 115.199328][ T24] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 115.210444][ T24] usb 4-1: Product: syz [ 115.219967][ T24] usb 4-1: Manufacturer: syz [ 115.231392][ T24] usb 4-1: SerialNumber: syz [ 115.251923][ T24] usb 4-1: config 0 descriptor?? [ 115.259766][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 115.260110][ T7825] GUP no longer grows the stack in syz.6.685 (7825): 200000004000-20000000a000 (200000002000) [ 115.266689][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 115.279543][ T7825] CPU: 0 UID: 0 PID: 7825 Comm: syz.6.685 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.279569][ T7825] Tainted: [L]=SOFTLOCKUP [ 115.279575][ T7825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 115.279585][ T7825] Call Trace: [ 115.279591][ T7825] [ 115.279598][ T7825] dump_stack_lvl+0x100/0x190 [ 115.279627][ T7825] gup_vma_lookup.cold+0x83/0x96 [ 115.279650][ T7825] __get_user_pages+0x241/0x34d0 [ 115.279679][ T7825] ? find_held_lock+0x2b/0x80 [ 115.279700][ T7825] ? mtree_load+0x311/0xa40 [ 115.279716][ T7825] ? __pfx___get_user_pages+0x10/0x10 [ 115.279742][ T7825] get_user_pages_remote+0x3d2/0xb10 [ 115.279761][ T7825] ? mas_new_root+0x690/0x6e0 [ 115.279778][ T7825] ? __pfx_get_user_pages_remote+0x10/0x10 [ 115.279797][ T7825] ? __access_remote_vm+0x84d/0xa70 [ 115.279830][ T7825] __access_remote_vm+0x3ba/0xa70 [ 115.279860][ T7825] ? do_raw_spin_lock+0x128/0x260 [ 115.279879][ T7825] ? __pfx___access_remote_vm+0x10/0x10 [ 115.279905][ T7825] ? alloc_pages_noprof+0x238/0x390 [ 115.279930][ T7825] proc_pid_cmdline_read+0x4f2/0x8c0 [ 115.279958][ T7825] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 115.279986][ T7825] ? rw_verify_area+0xce/0x6d0 [ 115.280011][ T7825] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 115.280035][ T7825] vfs_readv+0x5d8/0x8d0 [ 115.280065][ T7825] ? __pfx_vfs_readv+0x10/0x10 [ 115.280106][ T7825] ? __fget_files+0x21f/0x3d0 [ 115.280131][ T7825] ? do_preadv+0x1ac/0x270 [ 115.280151][ T7825] do_preadv+0x1ac/0x270 [ 115.280174][ T7825] ? __pfx_do_preadv+0x10/0x10 [ 115.280204][ T7825] do_syscall_64+0x106/0xf80 [ 115.280218][ T7825] ? clear_bhb_loop+0x40/0x90 [ 115.280237][ T7825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.280253][ T7825] RIP: 0033:0x7fe66439c819 [ 115.280267][ T7825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.280282][ T7825] RSP: 002b:00007fe665285028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 115.280298][ T7825] RAX: ffffffffffffffda RBX: 00007fe664615fa0 RCX: 00007fe66439c819 [ 115.280309][ T7825] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 115.280318][ T7825] RBP: 00007fe664432c91 R08: 00000000fffffff9 R09: 0000000000000000 [ 115.280327][ T7825] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 115.280336][ T7825] R13: 00007fe664616038 R14: 00007fe664615fa0 R15: 00007ffd3d123598 [ 115.280358][ T7825] [ 115.365815][ T29] audit: type=1400 audit(1775466119.900:456): avc: denied { override_creds } for pid=7826 comm="syz.6.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 115.394390][ T24] usb 4-1: selecting invalid altsetting 0 [ 115.861374][ T792] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 115.951255][ T50] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 115.985871][ T7844] netlink: 36 bytes leftover after parsing attributes in process `syz.6.693'. [ 115.991881][ T24] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 116.017786][ T792] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 116.031243][ T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.047641][ T792] usb 6-1: Product: syz [ 116.052394][ T792] usb 6-1: Manufacturer: syz [ 116.057956][ T792] usb 6-1: SerialNumber: syz [ 116.068949][ T792] usb 6-1: config 0 descriptor?? [ 116.097740][ T792] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 009 [ 116.150616][ T7851] batadv_slave_1: entered promiscuous mode [ 116.161505][ T7850] batadv_slave_1: left promiscuous mode [ 116.173791][ T50] usb 3-1: Using ep0 maxpacket: 8 [ 116.189456][ T50] usb 3-1: unable to get BOS descriptor or descriptor too short [ 116.211961][ T50] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 116.220174][ T50] usb 3-1: config 0 has no interface number 0 [ 116.239353][ T50] usb 3-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 116.259144][ T50] usb 3-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 116.272188][ T50] usb 3-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 116.283907][ T50] usb 3-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 116.294497][ T50] usb 3-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 116.306975][ T50] usb 3-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 116.317280][ T50] usb 3-1: config 0 interface 122 has no altsetting 0 [ 116.333123][ T50] usb 3-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 116.337742][ T29] audit: type=1400 audit(1775466120.870:457): avc: denied { bind } for pid=7857 comm="syz.6.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.342410][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.342432][ T50] usb 3-1: Product: syz [ 116.379319][ T50] usb 3-1: Manufacturer: syz [ 116.384231][ T50] usb 3-1: SerialNumber: syz [ 116.391582][ T50] usb 3-1: config 0 descriptor?? [ 116.397708][ T7836] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 116.405264][ T7836] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 116.499773][ T792] (null): failure reading functionality [ 116.512257][ T5869] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 116.517488][ T792] i2c i2c-1: connected i2c-tiny-usb device [ 116.620646][ T50] pl2303 3-1:0.122: pl2303 converter detected [ 116.627167][ T50] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 116.635422][ T50] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 116.645490][ T50] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 116.654094][ T50] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 116.662645][ T50] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 116.671072][ T50] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 116.683896][ T50] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 116.691987][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 116.697388][ T50] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 116.705982][ T50] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 116.714636][ T50] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 116.723129][ T5869] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 116.732555][ T9] usb 6-1: USB disconnect, device number 9 [ 116.733127][ T5869] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 116.748512][ T50] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 116.760239][ T5869] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.767867][ T50] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 116.772378][ T792] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 116.777175][ T5869] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 116.793723][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.810489][ T50] usb 3-1: USB disconnect, device number 15 [ 116.816477][ T24] usb 4-1: USB disconnect, device number 10 [ 116.827266][ T50] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 116.836012][ T5869] usb 5-1: Product: syz [ 116.840176][ T5869] usb 5-1: Manufacturer: syz [ 116.848731][ T50] pl2303 3-1:0.122: device disconnected [ 116.856074][ T5869] usb 5-1: SerialNumber: syz [ 116.873076][ T5869] usb 5-1: config 0 descriptor?? [ 116.932675][ T792] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 116.946551][ T792] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.956620][ T792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.965703][ T792] usb 7-1: SerialNumber: syz [ 117.187861][ T7864] netlink: 64 bytes leftover after parsing attributes in process `syz.2.703'. [ 117.299522][ T5869] gs_usb 5-1:0.0: Configuring for 154 interfaces [ 117.610587][ T792] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 117.678072][ T29] audit: type=1400 audit(1775466122.210:458): avc: denied { read } for pid=5476 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 117.718441][ T7884] netlink: 'syz.2.713': attribute type 10 has an invalid length. [ 117.740770][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.713'. [ 117.904479][ T5869] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 117.976606][ T5869] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 118.013640][ T5869] usb 5-1: USB disconnect, device number 8 [ 118.062368][ T24] usb 7-1: USB disconnect, device number 4 [ 118.071903][ T24] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 118.637972][ T29] audit: type=1400 audit(1775466123.170:459): avc: denied { module_request } for pid=7917 comm="syz.4.722" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 118.703506][ T29] audit: type=1400 audit(1775466123.230:460): avc: denied { mount } for pid=7922 comm="syz.2.723" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 119.022675][ T7944] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 119.041345][ T29] audit: type=1400 audit(1775466123.560:461): avc: denied { mounton } for pid=7942 comm="syz.2.730" path="/120/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 119.100601][ T7944] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 119.138850][ T7944] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 119.149290][ T7946] binder_alloc: binder_alloc_mmap_handler: 7945 200000fed000-200001000000 already mapped failed -16 [ 119.156641][ T29] audit: type=1400 audit(1775466123.670:462): avc: denied { map } for pid=7945 comm="syz.3.732" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 119.637193][ T7973] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 119.745068][ T29] audit: type=1400 audit(1775466124.280:463): avc: denied { getopt } for pid=7977 comm="syz.4.743" lport=40349 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 119.841269][ T50] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 120.002022][ T50] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 120.019916][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.039944][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.067548][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 120.078541][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.087650][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.113686][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 120.141676][ T7993] netlink: 'syz.3.750': attribute type 1 has an invalid length. [ 120.151003][ T7993] netlink: 'syz.3.750': attribute type 6 has an invalid length. [ 120.166875][ T7993] netlink: 52 bytes leftover after parsing attributes in process `syz.3.750'. [ 120.176137][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.185497][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.212020][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 120.232023][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.240925][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.251907][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 120.272788][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 120.289728][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.298901][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.328991][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 120.339483][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.372002][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.396555][ T8002] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 120.412733][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 120.413588][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.413629][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.413653][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 120.414432][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.438473][ T8002] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 120.471262][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.487397][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.501402][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.519181][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.541245][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 120.547983][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 120.562479][ T50] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 120.571663][ T50] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 120.580000][ T50] usb 7-1: Product: syz [ 120.591256][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.600573][ T50] usb 7-1: Manufacturer: syz [ 120.610374][ T24] usb 5-1: config 0 descriptor?? [ 120.615703][ T50] usb 7-1: SerialNumber: syz [ 120.635034][ T50] usb 7-1: config 0 descriptor?? [ 120.653404][ T50] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 120.695131][ T29] audit: type=1400 audit(1775466125.230:464): avc: denied { map } for pid=8006 comm="syz.5.756" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.964004][ T9] usb 7-1: USB disconnect, device number 5 [ 120.987362][ T9] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 121.027107][ T7989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.061665][ T7989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.076448][ T24] lg-g15 0003:046D:C22E.0008: unknown main item tag 0x0 [ 121.087228][ T24] lg-g15 0003:046D:C22E.0008: unknown main item tag 0x0 [ 121.094550][ T24] lg-g15 0003:046D:C22E.0008: unknown main item tag 0x0 [ 121.107759][ T24] lg-g15 0003:046D:C22E.0008: unknown main item tag 0x0 [ 121.115492][ T24] lg-g15 0003:046D:C22E.0008: unknown main item tag 0x0 [ 121.164889][ T24] lg-g15 0003:046D:C22E.0008: unknown main item tag 0x0 [ 121.176126][ T24] lg-g15 0003:046D:C22E.0008: unknown main item tag 0x0 [ 121.185445][ T24] lg-g15 0003:046D:C22E.0008: unknown main item tag 0x0 [ 121.193195][ T24] lg-g15 0003:046D:C22E.0008: unknown main item tag 0x0 [ 121.224461][ T24] lg-g15 0003:046D:C22E.0008: unknown main item tag 0x0 [ 121.232912][ T24] lg-g15 0003:046D:C22E.0008: item 0 0 0 8 parsing failed [ 121.241626][ T24] lg-g15 0003:046D:C22E.0008: probe with driver lg-g15 failed with error -22 [ 121.294081][ T24] usb 5-1: USB disconnect, device number 9 [ 121.387850][ T8030] netlink: 'syz.3.767': attribute type 29 has an invalid length. [ 121.420246][ T8030] netlink: 'syz.3.767': attribute type 29 has an invalid length. [ 121.444974][ T8030] netlink: 500 bytes leftover after parsing attributes in process `syz.3.767'. [ 121.650086][ T5869] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.796624][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 122.015334][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 122.026122][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 122.035853][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.061670][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.075965][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.087184][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.106090][ T24] usb 3-1: Product: syz [ 122.110261][ T24] usb 3-1: Manufacturer: syz [ 122.115124][ T24] usb 3-1: SerialNumber: syz [ 122.545536][ T24] usb 3-1: 0:2 : does not exist [ 122.760124][ T29] audit: type=1400 audit(1775466127.290:465): avc: denied { bind } for pid=8083 comm="syz.4.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.784410][ T29] audit: type=1400 audit(1775466127.320:466): avc: denied { connect } for pid=8083 comm="syz.4.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.841851][ T8086] syzkaller1: entered promiscuous mode [ 122.859935][ T8086] syzkaller1: entered allmulticast mode [ 122.997386][ T29] audit: type=1400 audit(1775466127.530:467): avc: denied { create } for pid=8093 comm="syz.5.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.023713][ T29] audit: type=1400 audit(1775466127.550:468): avc: denied { bind } for pid=8093 comm="syz.5.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.198993][ T24] usb 3-1: USB disconnect, device number 16 [ 123.248582][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.281716][ T792] IPVS: starting estimator thread 0... [ 123.411339][ T8109] IPVS: using max 50 ests per chain, 120000 per kthread [ 123.442427][ T50] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 123.581269][ T5869] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 123.622894][ T50] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 123.633670][ T50] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 123.652762][ T50] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 123.661827][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.669787][ T50] usb 5-1: Product: syz [ 123.677921][ T50] usb 5-1: Manufacturer: syz [ 123.682835][ T50] usb 5-1: SerialNumber: syz [ 123.691375][ T50] usb 5-1: config 0 descriptor?? [ 123.700181][ T8106] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 123.714601][ T8106] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 123.752898][ T5869] usb 4-1: config 0 has no interfaces? [ 123.758770][ T5869] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 123.778376][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.788882][ T5869] usb 4-1: config 0 descriptor?? [ 123.810986][ T29] audit: type=1400 audit(1775466128.340:469): avc: denied { ioctl } for pid=8120 comm="syz.2.807" path="socket:[19050]" dev="sockfs" ino=19050 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.839341][ T29] audit: type=1400 audit(1775466128.370:470): avc: denied { connect } for pid=8120 comm="syz.2.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.859656][ T29] audit: type=1400 audit(1775466128.380:471): avc: denied { write } for pid=8120 comm="syz.2.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.881424][ T29] audit: type=1400 audit(1775466128.390:472): avc: denied { read } for pid=8120 comm="syz.2.807" path="socket:[19050]" dev="sockfs" ino=19050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.935366][ T8106] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 123.943271][ T8106] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 123.962311][ T8125] syzkaller1: entered promiscuous mode [ 123.967907][ T8125] syzkaller1: entered allmulticast mode [ 124.006710][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.015688][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.026199][ T5877] usb 4-1: USB disconnect, device number 11 [ 124.151261][ T5902] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 124.158390][ T50] Error reading MAC address [ 124.173216][ T50] usb 5-1: USB disconnect, device number 10 [ 124.311449][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 124.323022][ T5902] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 124.331476][ T5902] usb 6-1: config 1 has no interface number 0 [ 124.341353][ T5902] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 124.360670][ T5902] usb 6-1: config 1 interface 105 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 124.372725][ T5902] usb 6-1: config 1 interface 105 has no altsetting 0 [ 124.382961][ T5902] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 124.392989][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 124.401069][ T5902] usb 6-1: Product: syz [ 124.406237][ T5902] usb 6-1: Manufacturer: syz [ 124.411172][ T5902] usb 6-1: SerialNumber: syz [ 124.424981][ T8117] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 124.481295][ T792] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 124.501274][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 124.631358][ T792] usb 4-1: Using ep0 maxpacket: 16 [ 124.644166][ T792] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 124.653263][ T5902] aqc111 6-1:1.105: probe with driver aqc111 failed with error -22 [ 124.662250][ T792] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 124.680137][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.690716][ T792] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 124.700477][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.711483][ T792] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 124.727850][ T792] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 124.741576][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 124.750642][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 124.764941][ T792] usb 4-1: config 1 interface 0 has no altsetting 0 [ 124.772501][ T9] usb 3-1: SerialNumber: syz [ 124.780797][ T792] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 124.795333][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.815017][ T792] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 124.863224][ T5902] usb 6-1: USB disconnect, device number 10 [ 124.999036][ T9] usb 3-1: 0:2 : does not exist [ 125.024810][ T792] scsi host1: usb-storage 4-1:1.0 [ 125.081470][ T9] usb 3-1: USB disconnect, device number 17 [ 125.124654][ T8158] netlink: 'syz.6.823': attribute type 3 has an invalid length. [ 125.133586][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.240394][ T5877] usb 4-1: USB disconnect, device number 12 [ 125.952763][ T8176] loop5: detected capacity change from 0 to 4095 [ 126.168365][ T29] audit: type=1400 audit(1775466130.700:473): avc: denied { write } for pid=8181 comm="syz.4.833" path="socket:[20202]" dev="sockfs" ino=20202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 126.407989][ T8195] netlink: 204 bytes leftover after parsing attributes in process `syz.3.839'. [ 126.573324][ T29] audit: type=1400 audit(1775466131.110:474): avc: denied { mount } for pid=8202 comm="syz.2.843" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 126.791492][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 126.988251][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 126.995104][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.025720][ T10] usb 4-1: config 0 has no interfaces? [ 127.040328][ T10] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 127.057230][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.075449][ T10] usb 4-1: Product: syz [ 127.079656][ T10] usb 4-1: Manufacturer: syz [ 127.097678][ T10] usb 4-1: SerialNumber: syz [ 127.114336][ T10] usb 4-1: config 0 descriptor?? [ 127.207194][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.213676][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.719372][ T10] usb 4-1: USB disconnect, device number 13 [ 127.789145][ T8228] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888073ea8c00 pfn:0x73ea8 [ 127.930155][ T8228] memcg:ffff88802d4eb500 [ 127.974100][ T8228] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 128.007376][ T8228] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 128.056732][ T8228] raw: ffff888073ea8c00 0000000000000000 00000001ffffffff ffff88802d4eb500 [ 128.102693][ T8228] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 128.130518][ T8228] page_owner tracks the page as allocated [ 128.202206][ T8228] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 8228, tgid 8225 (syz.4.852), ts 127789104924, free_ts 127751784133 [ 128.241288][ T8228] post_alloc_hook+0x153/0x170 [ 128.246131][ T8228] get_page_from_freelist+0x111d/0x3140 [ 128.254570][ T8228] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 128.260488][ T8228] alloc_pages_mpol+0x1fb/0x550 [ 128.307835][ T8228] folio_alloc_noprof+0x22/0x330 [ 128.323406][ T8228] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 128.346328][ T8228] filemap_alloc_folio_noprof+0x5e/0x80 [ 128.356427][ T8228] page_cache_ra_order+0x54b/0xf30 [ 128.363783][ T8228] filemap_fault+0x191a/0x2eb0 [ 128.371262][ T8228] __do_fault+0x10d/0x550 [ 128.381223][ T8228] do_fault+0xabb/0x18e0 [ 128.385531][ T8228] __handle_mm_fault+0x1815/0x2b60 [ 128.396597][ T8228] handle_mm_fault+0x36d/0xa20 [ 128.406682][ T8228] __get_user_pages+0xf9c/0x34d0 [ 128.417786][ T8228] populate_vma_page_range+0x267/0x3f0 [ 128.451978][ T8228] __mm_populate+0x107/0x3a0 [ 128.456743][ T8228] page last free pid 8230 tgid 8230 stack trace: [ 128.476920][ T8228] __free_frozen_pages+0x7e1/0x10d0 [ 128.552369][ T8228] kvm_mmu_free_memory_cache+0x189/0x2d0 [ 128.566796][ T8228] kvm_mmu_destroy+0x64/0x150 [ 128.580485][ T8228] kvm_arch_vcpu_destroy+0x282/0x3e0 [ 128.596034][ T8228] kvm_destroy_vcpus+0x24e/0x3c0 [ 128.607584][ T8228] kvm_arch_destroy_vm+0xd2/0x350 [ 128.612762][ T8228] kvm_put_kvm+0x512/0xb10 [ 128.617291][ T8228] kvm_vm_release+0x3c/0x50 [ 128.621882][ T8228] __fput+0x3ff/0xb40 [ 128.625940][ T8228] task_work_run+0x150/0x240 [ 128.630632][ T8228] exit_to_user_mode_loop+0x100/0x4a0 [ 128.636153][ T8228] do_syscall_64+0x67c/0xf80 [ 128.640878][ T8228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.647545][ T8228] ------------[ cut here ]------------ [ 128.653764][ T8228] kernel BUG at mm/filemap.c:858! [ 128.659407][ T8228] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 128.665826][ T8228] CPU: 1 UID: 0 PID: 8228 Comm: syz.4.852 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.676586][ T8228] Tainted: [L]=SOFTLOCKUP [ 128.680898][ T8228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 128.690945][ T8228] RIP: 0010:__filemap_add_folio+0xfcf/0x1280 [ 128.696914][ T8228] Code: 2e c5 ff 48 c7 c6 e0 39 bd 8b 4c 89 ef e8 d9 3f 12 00 90 0f 0b e8 11 2e c5 ff 48 c7 c6 40 3a bd 8b 4c 89 ef e8 c2 3f 12 00 90 <0f> 0b e8 fa 2d c5 ff 90 0f 0b 90 e9 4b fe ff ff e8 ec 2d c5 ff 90 [ 128.716501][ T8228] RSP: 0018:ffffc9000e4b73f8 EFLAGS: 00010287 [ 128.722561][ T8228] RAX: 000000000007b1f3 RBX: 0000000000112cc0 RCX: ffffc9000ecb9000 [ 128.730521][ T8228] RDX: 0000000000080000 RSI: ffffffff825609a8 RDI: ffff888054dece44 [ 128.738495][ T8228] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 128.746470][ T8228] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 128.754440][ T8228] R13: ffffea0001cfaa00 R14: 0000000000000000 R15: 1ffff92001c96ea9 [ 128.762427][ T8228] FS: 00007f71923026c0(0000) GS:ffff888124439000(0000) knlGS:0000000000000000 [ 128.771354][ T8228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.777929][ T8228] CR2: 00007f907564edd5 CR3: 0000000050453000 CR4: 00000000003526f0 [ 128.785897][ T8228] Call Trace: [ 128.789164][ T8228] [ 128.792081][ T8228] ? __pfx___filemap_add_folio+0x10/0x10 [ 128.797708][ T8228] filemap_add_folio+0x1d8/0x690 [ 128.802634][ T8228] ? __lock_acquire+0x4a5/0x2630 [ 128.807551][ T8228] ? __pfx_filemap_add_folio+0x10/0x10 [ 128.812995][ T8228] ? css_rstat_updated+0x1ce/0x5a0 [ 128.818094][ T8228] page_cache_ra_order+0x614/0xf30 [ 128.823193][ T8228] filemap_fault+0x191a/0x2eb0 [ 128.827948][ T8228] ? __pfx_filemap_fault+0x10/0x10 [ 128.833050][ T8228] ? __pfx_filemap_map_pages+0x10/0x10 [ 128.838496][ T8228] __do_fault+0x10d/0x550 [ 128.842807][ T8228] do_fault+0xabb/0x18e0 [ 128.847031][ T8228] __handle_mm_fault+0x1815/0x2b60 [ 128.852129][ T8228] ? mt_find+0x45e/0x8e0 [ 128.856351][ T8228] ? __pfx___handle_mm_fault+0x10/0x10 [ 128.861792][ T8228] ? __pfx_mt_find+0x10/0x10 [ 128.866368][ T8228] handle_mm_fault+0x36d/0xa20 [ 128.871119][ T8228] __get_user_pages+0xf9c/0x34d0 [ 128.876042][ T8228] ? __pfx___get_user_pages+0x10/0x10 [ 128.881402][ T8228] populate_vma_page_range+0x267/0x3f0 [ 128.886843][ T8228] ? __pfx_populate_vma_page_range+0x10/0x10 [ 128.892802][ T8228] ? __pfx_find_vma_intersection+0x10/0x10 [ 128.898588][ T8228] ? do_mmap+0x93f/0x12f0 [ 128.902900][ T8228] __mm_populate+0x107/0x3a0 [ 128.907472][ T8228] ? __pfx___mm_populate+0x10/0x10 [ 128.912565][ T8228] ? up_write+0x290/0x4f0 [ 128.916876][ T8228] vm_mmap_pgoff+0x37f/0x470 [ 128.921448][ T8228] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 128.926543][ T8228] ? __fget_files+0x215/0x3d0 [ 128.931201][ T8228] ? __fget_files+0x21f/0x3d0 [ 128.935858][ T8228] ksys_mmap_pgoff+0x3c8/0x650 [ 128.940600][ T8228] ? kcov_ioctl+0x16a/0x720 [ 128.945087][ T8228] ? kfree+0x2ec/0x6b0 [ 128.949139][ T8228] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 128.954403][ T8228] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 128.960208][ T8228] __x64_sys_mmap+0x125/0x190 [ 128.964869][ T8228] do_syscall_64+0x106/0xf80 [ 128.969439][ T8228] ? clear_bhb_loop+0x40/0x90 [ 128.974098][ T8228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.979969][ T8228] RIP: 0033:0x7f719139c819 [ 128.984364][ T8228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.003950][ T8228] RSP: 002b:00007f7192302028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 129.012342][ T8228] RAX: ffffffffffffffda RBX: 00007f7191616090 RCX: 00007f719139c819 [ 129.020291][ T8228] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 129.028242][ T8228] RBP: 00007f7191432c91 R08: 0000000000000004 R09: 000000002c93a000 [ 129.036190][ T8228] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 129.044140][ T8228] R13: 00007f7191616128 R14: 00007f7191616090 R15: 00007fffd3b8be38 [ 129.052097][ T8228] [ 129.055097][ T8228] Modules linked in: [ 129.059518][ T8228] ---[ end trace 0000000000000000 ]--- [ 129.067948][ T8228] RIP: 0010:__filemap_add_folio+0xfcf/0x1280 [ 129.074284][ T8228] Code: 2e c5 ff 48 c7 c6 e0 39 bd 8b 4c 89 ef e8 d9 3f 12 00 90 0f 0b e8 11 2e c5 ff 48 c7 c6 40 3a bd 8b 4c 89 ef e8 c2 3f 12 00 90 <0f> 0b e8 fa 2d c5 ff 90 0f 0b 90 e9 4b fe ff ff e8 ec 2d c5 ff 90 [ 129.113418][ T8228] RSP: 0018:ffffc9000e4b73f8 EFLAGS: 00010287 [ 129.130889][ T8228] RAX: 000000000007b1f3 RBX: 0000000000112cc0 RCX: ffffc9000ecb9000 [ 129.148364][ T8228] RDX: 0000000000080000 RSI: ffffffff825609a8 RDI: ffff888054dece44 [ 129.197960][ T8228] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 129.213764][ T8228] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 129.229264][ T8228] R13: ffffea0001cfaa00 R14: 0000000000000000 R15: 1ffff92001c96ea9 [ 129.244178][ T8228] FS: 00007f71923026c0(0000) GS:ffff888124439000(0000) knlGS:0000000000000000 [ 129.261258][ T8228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.269326][ T8228] CR2: 000000110c2e6601 CR3: 0000000050453000 CR4: 00000000003526f0 [ 129.277648][ T8228] Kernel panic - not syncing: Fatal exception [ 129.283993][ T8228] Kernel Offset: disabled [ 129.288297][ T8228] Rebooting in 86400 seconds..