last executing test programs: 3m7.47536673s ago: executing program 1 (id=1293): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000700)="2e3665f2af6766c74424005f0000006766c7442402000000006766c744240600000000670f011c2466b9030100c066b85bd1e45366bad6062a620f3066b9370200000f320f01d1440f20c066350f000000440f22c066660f383b8032500fe99400003e2e660fc7b302000f20e06635200000000f22e0", 0x76}], 0xaaaaaaaaaaaaaae, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m7.20277516s ago: executing program 1 (id=1297): r0 = socket(0x2, 0x80805, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="f89fcfb587", 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r2, 0x8}, 0x8) 3m7.12624828s ago: executing program 1 (id=1298): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) 3m6.982130847s ago: executing program 1 (id=1300): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) writev(r1, &(0x7f0000003a00)=[{&(0x7f0000002700)="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", 0x1000}], 0x1) 3m6.83297307s ago: executing program 1 (id=1301): openat$comedi(0xffffffffffffff9c, 0x0, 0x80600, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) 3m6.763254427s ago: executing program 1 (id=1302): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008c0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) 2m51.731772822s ago: executing program 32 (id=1302): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008c0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) 1m37.24296956s ago: executing program 3 (id=2537): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x8000, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 1m37.061552301s ago: executing program 3 (id=2539): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x300}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f000062f000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x3000, 0x2}) 1m36.978963076s ago: executing program 3 (id=2541): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0xa0000004}) 1m36.934557394s ago: executing program 3 (id=2542): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chroot(&(0x7f0000000d00)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') 1m36.883394671s ago: executing program 3 (id=2543): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f00000000c0)=@udp6=r1, 0x1}, 0x20) recvfrom(r1, &(0x7f00000004c0)=""/182, 0xb6, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000001380)}, 0x20) shutdown(r1, 0x0) 1m36.559163322s ago: executing program 3 (id=2547): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x60, r3, 0x1, 0x70bd29, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x85}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0xf000}, 0x40010) 1m36.414678463s ago: executing program 33 (id=2547): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x60, r3, 0x1, 0x70bd29, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x85}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0xf000}, 0x40010) 1m22.329076995s ago: executing program 5 (id=2728): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m20.175715975s ago: executing program 5 (id=2731): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m19.831527035s ago: executing program 5 (id=2737): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={r1, 0xc, "132bf2b2631e4a669e5ab545"}, &(0x7f0000000180)=0x14) 1m19.39589392s ago: executing program 5 (id=2739): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x103) 1m19.394599753s ago: executing program 5 (id=2741): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1m19.05550576s ago: executing program 5 (id=2743): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fdatasync(0xffffffffffffffff) 1m18.900560045s ago: executing program 34 (id=2743): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fdatasync(0xffffffffffffffff) 10.713784246s ago: executing program 0 (id=3541): syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x1f85, 0x40110a, 0x4d, 0x0, 0x85) 10.623465854s ago: executing program 0 (id=3543): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0341, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 10.57182039s ago: executing program 0 (id=3544): fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x6a98047402e98331, 0x0, 0xffffffff}, 0x14}}, 0x0) 10.438223254s ago: executing program 0 (id=3546): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 10.396968714s ago: executing program 0 (id=3547): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x1, r1}) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) 10.147786321s ago: executing program 0 (id=3550): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 9.981029973s ago: executing program 35 (id=3550): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 2.307943076s ago: executing program 2 (id=3656): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000180)='i', 0x1}, {0x0}], 0x2}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.046276648s ago: executing program 6 (id=3662): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x2, 0x0) 1.718961606s ago: executing program 4 (id=3667): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00'], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x22) 1.601639049s ago: executing program 4 (id=3670): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.329394186s ago: executing program 2 (id=3677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000680), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f00000001c0), 0x0) 1.239325682s ago: executing program 4 (id=3679): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x0) read$msr(r2, &(0x7f0000002140)=""/102400, 0x19000) 1.184443274s ago: executing program 8 (id=3681): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x7fffffff, 0x3, 0x0, 0xfff, 0xffffffff}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r0, 0x0) 1.118981169s ago: executing program 6 (id=3682): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[], 0x48) syz_open_dev$sndctrl(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000180)={0x2, 0x1, 0x0, {0x7, 0x909f, 0x106, 0xb}}) 1.062192575s ago: executing program 6 (id=3683): ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003180)='ns/net\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) open$dir(0x0, 0x100, 0x6c) syz_open_dev$vcsu(0x0, 0xfffffffffffffff7, 0x10000) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 1.000447499s ago: executing program 2 (id=3684): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x40000, 0x19) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x800b3000) 939.49391ms ago: executing program 6 (id=3685): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) shutdown(r0, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x805, 0x0, 0x0) 899.881757ms ago: executing program 8 (id=3687): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1ff, 0x802, 0xff, 0x1e, 0x402, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 864.968155ms ago: executing program 6 (id=3688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x3, 0x0, &(0x7f0000000000), 0x0) 808.576ms ago: executing program 8 (id=3689): getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x10}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000a00)={0x5c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 759.496927ms ago: executing program 2 (id=3690): getpid() r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 742.914717ms ago: executing program 6 (id=3691): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) 634.763717ms ago: executing program 7 (id=3692): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close(r1) 407.685064ms ago: executing program 2 (id=3693): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x1, 0x0) close(r0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 373.314903ms ago: executing program 7 (id=3694): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x3, 0x0, &(0x7f0000000180)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f0000000240)={'macsec0\x00', 0x1}) 365.113905ms ago: executing program 8 (id=3695): mkdir(0x0, 0xc0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) chdir(0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r0, 0x0, 0x0) 360.708919ms ago: executing program 2 (id=3696): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) close(0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x800, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 329.911461ms ago: executing program 4 (id=3697): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c80)="f50cb6", 0x3}], 0x1}}], 0x1, 0x8011) recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x10120, 0x0) shutdown(r0, 0x1) 252.900311ms ago: executing program 7 (id=3698): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x4}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r4, 0x4, r0}, 0x10) 223.138405ms ago: executing program 7 (id=3699): memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 188.344849ms ago: executing program 7 (id=3700): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) 179.797606ms ago: executing program 8 (id=3701): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 124.037928ms ago: executing program 7 (id=3702): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d40)={0x44, &(0x7f0000000a80)={0x40, 0x6, 0x6, "8ff64c7b54db"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000500)={0x40, 0x1a, 0x1, "e1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 83.736542ms ago: executing program 4 (id=3703): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) 76.285333ms ago: executing program 8 (id=3704): ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000200)="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") r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x80000) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 0s ago: executing program 4 (id=3705): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) kernel console output (not intermixed with test programs): nc page read [ 253.988168][ T5834] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.997345][ T5834] Buffer I/O error on dev nbd2, logical block 0, async page read [ 254.024509][ T5834] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.037223][ T5834] Buffer I/O error on dev nbd2, logical block 1, async page read [ 254.050501][ T5834] ldm_validate_partition_table(): Disk read failed. [ 254.059748][ T5834] Dev nbd2: unable to read RDB block 0 [ 254.067570][ T5834] nbd2: unable to read partition table [ 254.082635][ T5834] ldm_validate_partition_table(): Disk read failed. [ 254.091895][ T5834] Dev nbd2: unable to read RDB block 0 [ 254.099201][ T5834] nbd2: unable to read partition table [ 254.255259][ T5967] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 254.267800][ T5967] usb 1-1: No valid video chain found. [ 254.273654][ T5967] usb 1-1: selecting invalid altsetting 0 [ 254.293873][ T5967] usb 1-1: selecting invalid altsetting 0 [ 254.309616][ T5967] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 254.371312][ T5967] usb 1-1: USB disconnect, device number 39 [ 254.371568][T11798] netlink: 'syz.4.2441': attribute type 4 has an invalid length. [ 254.412725][T11802] netlink: 'syz.4.2441': attribute type 4 has an invalid length. [ 254.871436][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2444'. [ 255.058643][ T3533] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.067972][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2444'. [ 255.092870][ T3533] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.120311][ T3533] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.148871][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.363420][ T5902] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 255.541681][ T5902] usb 6-1: Using ep0 maxpacket: 32 [ 255.548055][ T5902] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 255.561747][ T5902] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 255.570801][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 255.579035][ T5902] usb 6-1: Product: syz [ 255.583221][ T5902] usb 6-1: Manufacturer: syz [ 255.587800][ T5902] usb 6-1: SerialNumber: syz [ 255.594607][ T5902] usb 6-1: config 0 descriptor?? [ 255.600012][T11812] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 255.883248][ T5864] usb 6-1: USB disconnect, device number 14 [ 256.029729][T11831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.167457][T11836] program syz.2.2464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.492178][ T5902] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 256.623404][T11858] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input45 [ 256.664562][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 256.687548][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.723118][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.766155][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 256.793886][T11866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.809209][ T5902] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 256.840348][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.862762][ T5902] usb 3-1: config 0 descriptor?? [ 256.930726][T11872] netlink: 'syz.3.2472': attribute type 4 has an invalid length. [ 257.286594][ T5902] hid_parser_main: 6 callbacks suppressed [ 257.286612][ T5902] shield 0003:0955:7214.0038: unknown main item tag 0x0 [ 257.304996][ T5902] shield 0003:0955:7214.0038: unknown main item tag 0x0 [ 257.323235][ T5902] shield 0003:0955:7214.0038: unknown main item tag 0x0 [ 257.421670][ T5864] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 257.437757][ T5902] shield 0003:0955:7214.0038: unknown main item tag 0x0 [ 257.447735][T11889] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2478'. [ 257.523312][ T5902] shield 0003:0955:7214.0038: unknown main item tag 0x0 [ 257.534042][ T5902] input: HID 0955:7214 Haptics as /devices/virtual/input/input46 [ 257.582062][ T5902] shield 0003:0955:7214.0038: Registered Thunderstrike controller [ 257.583649][ T5864] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.594290][ T5902] shield 0003:0955:7214.0038: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 257.617339][ T5864] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 257.633831][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.647747][T11894] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2480'. [ 257.660623][ T5864] usb 4-1: config 0 descriptor?? [ 257.679848][ T6008] shield 0003:0955:7214.0038: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 257.721566][ T5902] usb 3-1: USB disconnect, device number 37 [ 257.736858][ T6008] shield 0003:0955:7214.0038: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 257.778348][ T6008] shield 0003:0955:7214.0038: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 257.791434][ T6008] shield 0003:0955:7214.0038: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 257.995899][T11908] netlink: 'syz.5.2487': attribute type 4 has an invalid length. [ 258.012084][T11908] netlink: 'syz.5.2487': attribute type 4 has an invalid length. [ 258.083350][ T5864] zeroplus 0003:0C12:0005.0039: item fetching failed at offset 0/3 [ 258.092994][ T5864] zeroplus 0003:0C12:0005.0039: parse failed [ 258.099032][ T5864] zeroplus 0003:0C12:0005.0039: probe with driver zeroplus failed with error -22 [ 258.225258][T11912] block nbd5: shutting down sockets [ 258.311203][ T5902] usb 4-1: USB disconnect, device number 41 [ 258.339765][ T3567] Bluetooth: hci3: Frame reassembly failed (-84) [ 258.346959][ T3567] Bluetooth: hci3: Frame reassembly failed (-84) [ 258.523702][T11927] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 258.529685][T11927] syzkaller1: Linktype set failed because interface is up [ 259.287775][T11966] netlink: 'syz.2.2513': attribute type 4 has an invalid length. [ 259.376856][T11968] SELinux: failed to load policy [ 259.420945][T11973] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2516'. [ 259.929250][ T1148] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb4 [ 260.031745][ T5864] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 260.184048][ T5864] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 260.193229][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.203709][ T5864] usb 1-1: config 0 descriptor?? [ 260.210426][ T5864] cp210x 1-1:0.0: cp210x converter detected [ 260.342590][ T51] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 260.342670][ T5847] Bluetooth: hci3: command 0x1003 tx timeout [ 260.356363][ T5169] Bluetooth: hci0: command 0x0401 tx timeout [ 260.356374][T11922] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 260.614324][ T5864] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 260.626935][ T5864] usb 1-1: cp210x converter now attached to ttyUSB0 [ 260.651560][ T5914] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 260.692033][T12005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2529'. [ 260.749333][T12007] netlink: 'syz.3.2530': attribute type 4 has an invalid length. [ 260.758460][T12007] netlink: 'syz.3.2530': attribute type 4 has an invalid length. [ 260.801741][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 260.826480][ T5914] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 260.846796][ T5914] usb 6-1: config 1 has no interface number 0 [ 260.855563][ T5864] usb 1-1: USB disconnect, device number 40 [ 260.865360][ T5914] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 260.881724][ T5914] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 260.893675][ T5864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 260.903206][ T5914] usb 6-1: config 1 interface 105 has no altsetting 0 [ 260.917881][ T5864] cp210x 1-1:0.0: device disconnected [ 260.925993][ T5914] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 260.946210][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.957657][ T5914] usb 6-1: Product: syz [ 260.963608][ T5914] usb 6-1: Manufacturer: syz [ 260.968260][ T5914] usb 6-1: SerialNumber: syz [ 260.982172][T12002] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 261.001626][T12002] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 261.109202][ T30] audit: type=1400 audit(1755049138.730:908): avc: denied { mount } for pid=12018 comm="syz.3.2536" name="/" dev="hugetlbfs" ino=40749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 261.157441][ T30] audit: type=1400 audit(1755049138.780:909): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 261.435919][T12002] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 261.443340][T12002] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 261.584423][ T6008] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 261.606852][T12037] program syz.0.2544 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.743751][ T6008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.755474][ T6008] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 261.764576][ T6008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.775146][ T6008] usb 3-1: config 0 descriptor?? [ 261.859128][ T5914] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 261.990018][ T6008] usbhid 3-1:0.0: can't add hid device: -71 [ 262.008369][ T6008] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 262.039232][ T6008] usb 3-1: USB disconnect, device number 38 [ 262.097264][ T5914] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 262.152385][ T5914] aqc111 6-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 62:ad:09:5a:53:c1 [ 262.188013][ T5914] usb 6-1: USB disconnect, device number 15 [ 262.222944][ T5914] aqc111 6-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 262.352616][ T5914] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 262.391998][ T5169] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.401053][ T5169] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.410801][ T5169] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.419012][ T5169] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.426572][ T5914] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 262.436401][ T5169] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 262.464763][ T5914] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 262.474429][ T5864] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 262.641517][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 262.652963][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.672744][ T5864] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 262.693136][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.712987][ T5864] usb 3-1: config 0 descriptor?? [ 262.765392][T12052] chnl_net:caif_netlink_parms(): no params data found [ 262.933499][T12052] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.950822][T12052] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.967921][T12052] bridge_slave_0: entered allmulticast mode [ 262.975501][T12052] bridge_slave_0: entered promiscuous mode [ 262.986281][T12052] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.993743][T12052] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.004825][T12052] bridge_slave_1: entered allmulticast mode [ 263.014806][T12052] bridge_slave_1: entered promiscuous mode [ 263.080269][T12052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.110259][T12052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.148825][ T5864] mcp2221 0003:04D8:00DD.003A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 263.217850][T12052] team0: Port device team_slave_0 added [ 263.238238][T12052] team0: Port device team_slave_1 added [ 263.346903][T12052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.389223][T12052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.486140][T12052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.551215][T12052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.578861][T12052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.672253][T12052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.702482][ T5902] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 263.744421][ T5864] usb 3-1: USB disconnect, device number 39 [ 263.893203][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.917504][T12052] hsr_slave_0: entered promiscuous mode [ 263.929338][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.940713][T12052] hsr_slave_1: entered promiscuous mode [ 263.960205][ T5902] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 263.971165][T12052] debugfs: 'hsr0' already exists in 'hsr' [ 263.980098][ T5950] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 263.986844][T12052] Cannot create hsr debugfs directory [ 263.996794][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.012973][ T5950] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 264.016658][ T5902] usb 1-1: config 0 descriptor?? [ 264.374917][T12090] input: syz0 as /devices/virtual/input/input47 [ 264.386622][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2564'. [ 264.518015][ T51] Bluetooth: hci1: command tx timeout [ 264.608554][T12052] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 264.637594][T12052] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 264.650327][T12052] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 264.682269][T12052] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 264.900571][T12052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.968997][T12052] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.999271][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.006469][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.022971][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.030122][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.263002][ T5902] uclogic 0003:256C:006D.003C: failed retrieving string descriptor #100: -71 [ 265.277848][ T5902] uclogic 0003:256C:006D.003C: failed retrieving pen parameters: -71 [ 265.310086][ T5902] uclogic 0003:256C:006D.003C: failed probing pen v1 parameters: -71 [ 265.337536][ T5902] uclogic 0003:256C:006D.003C: failed probing parameters: -71 [ 265.349684][ T5902] uclogic 0003:256C:006D.003C: probe with driver uclogic failed with error -71 [ 265.413260][ T5902] usb 1-1: USB disconnect, device number 41 [ 265.591379][T12052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.054299][T12142] tls_set_device_offload: netdev not found [ 266.128302][T12138] SELinux: failed to load policy [ 266.216655][T12052] veth0_vlan: entered promiscuous mode [ 266.240833][T12052] veth1_vlan: entered promiscuous mode [ 266.418712][T12052] veth0_macvtap: entered promiscuous mode [ 266.429551][T12052] veth1_macvtap: entered promiscuous mode [ 266.489284][T12052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.492458][T12161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.522068][T12052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.550290][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.569620][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.589044][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.598697][ T51] Bluetooth: hci1: command tx timeout [ 266.613989][ T3533] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.688176][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.701492][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.734126][ T3567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.749349][ T3567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.757000][ T30] audit: type=1400 audit(1755049144.370:910): avc: denied { getopt } for pid=12168 comm="syz.4.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 266.803333][ T30] audit: type=1400 audit(1755049144.420:911): avc: denied { mount } for pid=12052 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 266.881261][T12176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2596'. [ 266.982048][ T5909] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 267.094747][T12188] input: syz0 as /devices/virtual/input/input48 [ 267.150160][ T5909] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 267.160162][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.195689][ T5909] usb 3-1: Product: syz [ 267.200067][ T5909] usb 3-1: Manufacturer: syz [ 267.206633][ T5909] usb 3-1: SerialNumber: syz [ 267.226274][ T5909] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 267.278350][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 267.636508][ T30] audit: type=1400 audit(1755049145.250:912): avc: denied { connect } for pid=12204 comm="syz.0.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 267.926952][ T30] audit: type=1400 audit(1755049145.550:913): avc: denied { mounton } for pid=12216 comm="syz.6.2612" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 268.001341][ T5864] usb 3-1: USB disconnect, device number 40 [ 268.019605][T12219] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2614'. [ 268.339107][ T30] audit: type=1400 audit(1755049145.960:914): avc: denied { write } for pid=12233 comm="syz.5.2622" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 268.408123][ T30] audit: type=1400 audit(1755049146.030:915): avc: denied { watch_reads } for pid=12237 comm="syz.5.2623" path="/193/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 268.661617][ T51] Bluetooth: hci1: command tx timeout [ 268.667796][ T24] usb 3-1: Service connection timeout for: 256 [ 268.705717][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 268.722460][ T24] ath9k_htc: Failed to initialize the device [ 268.728729][ T5864] usb 3-1: ath9k_htc: USB layer deinitialized [ 268.869079][T12259] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input49 [ 268.929863][T12261] input: syz0 as /devices/virtual/input/input50 [ 269.022077][ T30] audit: type=1400 audit(1755049146.630:916): avc: denied { read } for pid=12265 comm="syz.0.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 269.052068][ T5864] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 269.125695][T12272] input: syz0 as /devices/virtual/input/input51 [ 269.214612][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 269.232357][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 269.254520][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 97, changing to 10 [ 269.285816][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24929, setting to 1024 [ 269.319237][ T5864] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 269.341208][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.365015][ T5864] usb 3-1: Product: syz [ 269.369195][ T5864] usb 3-1: Manufacturer: syz [ 269.404415][ T5864] usb 3-1: SerialNumber: syz [ 269.422317][ T5864] usb 3-1: config 0 descriptor?? [ 269.562013][ T5864] rc_core: IR keymap rc-streamzap not found [ 269.578902][ T5864] Registered IR keymap rc-empty [ 269.590005][ T5864] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 269.633323][ T5864] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input52 [ 269.698309][ T5864] usb 3-1: USB disconnect, device number 41 [ 269.707409][T12291] input: syz1 as /devices/virtual/input/input53 [ 270.147351][ T30] audit: type=1400 audit(1755049147.770:917): avc: denied { map } for pid=12307 comm="syz.0.2654" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 270.332736][T12311] input: syz1 as /devices/virtual/input/input54 [ 270.508635][T12319] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2659'. [ 270.681665][ T5864] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 270.751928][ T51] Bluetooth: hci1: command tx timeout [ 270.844079][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.865857][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2668'. [ 270.866924][ T5864] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 270.907056][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.922742][T12343] netlink: 'syz.5.2669': attribute type 30 has an invalid length. [ 270.932951][ T5864] usb 1-1: config 0 descriptor?? [ 271.221881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.288333][ T5950] kernel read not supported for file /dsp (pid: 5950 comm: kworker/0:5) [ 271.365655][ T5864] keytouch 0003:0926:3333.003D: fixing up Keytouch IEC report descriptor [ 271.400187][ T5864] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.003D/input/input55 [ 271.608105][ T5864] keytouch 0003:0926:3333.003D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 271.634807][ T30] audit: type=1400 audit(1755049149.230:918): avc: denied { mount } for pid=12368 comm="syz.5.2680" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 271.704634][ T30] audit: type=1400 audit(1755049149.290:919): avc: denied { mounton } for pid=12368 comm="syz.5.2680" path="/208/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 271.773023][ T30] audit: type=1400 audit(1755049149.290:920): avc: denied { read } for pid=12368 comm="syz.5.2680" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 271.822317][ T30] audit: type=1400 audit(1755049149.290:921): avc: denied { open } for pid=12368 comm="syz.5.2680" path="/208/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 271.846443][ T30] audit: type=1400 audit(1755049149.290:922): avc: denied { read } for pid=12368 comm="syz.5.2680" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 271.895528][ T30] audit: type=1400 audit(1755049149.290:923): avc: denied { read } for pid=12368 comm="syz.5.2680" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 271.922371][ T30] audit: type=1400 audit(1755049149.430:924): avc: denied { unmount } for pid=9657 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 272.404835][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2690'. [ 273.322674][ T24] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 273.371547][ T5909] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 273.469310][ T5967] usb 1-1: USB disconnect, device number 42 [ 273.484550][ T24] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 273.501056][ T24] usb 7-1: config 0 has no interface number 0 [ 273.515111][ T24] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 273.526550][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.541484][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.556353][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.567578][ T24] usb 7-1: Product: syz [ 273.573185][T12424] netlink: 'syz.0.2702': attribute type 11 has an invalid length. [ 273.573740][ T24] usb 7-1: Manufacturer: syz [ 273.585716][ T5909] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.598766][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2702'. [ 273.608043][ T24] usb 7-1: SerialNumber: syz [ 273.613172][ T5909] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.622773][T12424] netlink: 'syz.0.2702': attribute type 11 has an invalid length. [ 273.632064][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.640771][ T24] usb 7-1: config 0 descriptor?? [ 273.647641][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2702'. [ 273.657374][ T5909] usb 6-1: config 0 descriptor?? [ 274.096477][ T5909] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 274.145018][ T5967] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 274.304009][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.327642][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.337901][ T5967] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.357252][ T5967] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.367997][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.380278][ T5967] usb 3-1: config 0 descriptor?? [ 274.733364][ C1] plantronics 0003:047F:FFFF.003E: hid_field_extract() called with n (132) > 32! (syz.0.2711) [ 274.819789][ T24] usb 7-1: non-Atmel transceiver xxxxe6de [ 274.842387][ T5967] plantronics 0003:047F:FFFF.003F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 274.953537][ T5967] usb 6-1: USB disconnect, device number 16 [ 275.038001][ T24] usb 7-1: Firmware version (0.0) predates our first public release. [ 275.046816][ T5864] usb 3-1: USB disconnect, device number 42 [ 275.060753][ T24] usb 7-1: Please update to version 0.2 or newer [ 275.216364][ T24] usb 7-1: atusb_probe: initialization failed, error = -19 [ 275.232367][ T24] usb 7-1: USB disconnect, device number 2 [ 275.550451][T12466] input: syz1 as /devices/virtual/input/input56 [ 276.281989][ T6008] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 276.456077][ T6008] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 276.466622][ T6008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.481716][ T6008] usb 3-1: config 0 descriptor?? [ 277.698845][ T6008] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 277.709029][ T6008] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 277.719729][ T6008] asix 3-1:0.0: probe with driver asix failed with error -71 [ 277.729321][ T6008] usb 3-1: USB disconnect, device number 43 [ 278.511936][ T5902] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 278.681868][ T5902] usb 7-1: Using ep0 maxpacket: 8 [ 278.694032][ T5902] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 278.715245][ T5902] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 278.734981][ T5902] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 278.751620][ T5902] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.767608][ T5902] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 278.777649][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.791481][ T5902] usb 7-1: Product: syz [ 278.795665][ T5902] usb 7-1: Manufacturer: syz [ 278.800400][ T5902] usb 7-1: SerialNumber: syz [ 278.815513][T12501] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 278.828595][ T5902] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 278.840874][ T5902] usbtest 7-1:1.0: Linux user mode ISO test driver [ 278.850014][ T5902] usbtest 7-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 279.039590][ T5902] usb 7-1: USB disconnect, device number 3 [ 279.363892][T12529] No control pipe specified [ 279.379479][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.397169][T12529] overlayfs: missing 'lowerdir' [ 279.469886][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.556846][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.611755][T12534] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2745'. [ 279.630535][T12537] binder: 12536:12537 ioctl c0306201 2000000001c0 returned -14 [ 279.727599][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.838965][ T5169] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.849654][ T5169] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.858502][ T5169] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.868657][ T5169] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.878353][ T5169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.968187][ T30] audit: type=1400 audit(1755049157.580:925): avc: denied { ioctl } for pid=12550 comm="syz.0.2751" path="socket:[44772]" dev="sockfs" ino=44772 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 280.001583][ T5967] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 280.075120][ T12] bridge_slave_1: left allmulticast mode [ 280.080792][ T12] bridge_slave_1: left promiscuous mode [ 280.099275][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.128075][ T12] bridge_slave_0: left allmulticast mode [ 280.134773][ T12] bridge_slave_0: left promiscuous mode [ 280.145551][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.186958][ T5967] usb 7-1: Using ep0 maxpacket: 16 [ 280.406887][ T5967] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 280.419381][ T5967] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 280.429891][ T5967] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.449301][ T5967] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 280.464409][ T5967] usb 7-1: config 0 has no interface number 0 [ 280.471689][ T5967] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 280.482855][ T5967] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 280.493139][ T5967] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 280.507701][ T5967] usb 7-1: config 0 interface 125 has no altsetting 0 [ 280.516861][ T5967] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 280.534351][ T5967] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.555973][ T5967] usb 7-1: Product: syz [ 280.572200][ T5967] usb 7-1: Manufacturer: syz [ 280.581262][ T5967] usb 7-1: SerialNumber: syz [ 280.622523][ T5967] usb 7-1: config 0 descriptor?? [ 280.867528][ T5864] usb 7-1: USB disconnect, device number 4 [ 280.939252][T12554] ceph: No mds server is up or the cluster is laggy [ 281.116934][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.127797][ T12] bond0 (unregistering): Released all slaves [ 281.481049][T12543] chnl_net:caif_netlink_parms(): no params data found [ 281.657813][T12588] Bluetooth: hci0: too big key_count value 47413 [ 281.698806][ T12] hsr_slave_0: left promiscuous mode [ 281.717311][ T12] hsr_slave_1: left promiscuous mode [ 281.734334][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.746085][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.757757][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.765729][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.789035][ T12] veth1_macvtap: left promiscuous mode [ 281.796810][ T12] veth0_macvtap: left promiscuous mode [ 281.802466][ T12] veth1_vlan: left promiscuous mode [ 281.808512][ T12] veth0_vlan: left promiscuous mode [ 281.907984][T12567] ceph: No mds server is up or the cluster is laggy [ 281.922642][T12563] ceph: No mds server is up or the cluster is laggy [ 281.941647][ T51] Bluetooth: hci3: command tx timeout [ 282.551341][T12617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2774'. [ 282.817532][ T12] team0 (unregistering): Port device team_slave_1 removed [ 282.868441][ T12] team0 (unregistering): Port device team_slave_0 removed [ 283.298510][T12543] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.325671][T12543] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.335029][T12543] bridge_slave_0: entered allmulticast mode [ 283.342446][T12543] bridge_slave_0: entered promiscuous mode [ 283.351435][T12543] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.358846][T12543] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.366256][T12543] bridge_slave_1: entered allmulticast mode [ 283.374614][T12543] bridge_slave_1: entered promiscuous mode [ 283.448799][T12543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.483693][T12543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.594590][T12543] team0: Port device team_slave_0 added [ 283.613820][T12543] team0: Port device team_slave_1 added [ 283.668697][T12543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.675987][T12543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.701852][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.710591][T12543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.727274][T12543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.734533][T12543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.760486][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.772368][T12543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.876573][T12543] hsr_slave_0: entered promiscuous mode [ 283.887739][T12543] hsr_slave_1: entered promiscuous mode [ 283.894025][T12543] debugfs: 'hsr0' already exists in 'hsr' [ 283.899833][T12543] Cannot create hsr debugfs directory [ 284.022177][ T51] Bluetooth: hci3: command tx timeout [ 284.168934][T12543] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 284.183449][T12543] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 284.194454][T12543] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 284.205273][T12543] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 284.242366][T12543] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.249490][T12543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.256933][T12543] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.264054][T12543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.278458][ T5950] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 284.332186][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.370430][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.483562][ T5950] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 284.490216][T12677] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2795'. [ 284.501815][ T5950] usb 3-1: config 0 has no interface number 0 [ 284.507974][ T5950] usb 3-1: config 0 interface 98 has no altsetting 0 [ 284.530136][ T5950] usb 3-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 284.539445][T12543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.547029][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.558918][ T5950] usb 3-1: Product: syz [ 284.566141][ T5950] usb 3-1: Manufacturer: syz [ 284.570740][ T5950] usb 3-1: SerialNumber: syz [ 284.586211][ T5950] usb 3-1: config 0 descriptor?? [ 284.607241][T12543] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.625698][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.632882][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.649688][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.656865][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.813376][ T5950] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 284.919853][T12543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.215768][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2803'. [ 285.289894][T12543] veth0_vlan: entered promiscuous mode [ 285.316794][T12543] veth1_vlan: entered promiscuous mode [ 285.434755][T12543] veth0_macvtap: entered promiscuous mode [ 285.482408][T12543] veth1_macvtap: entered promiscuous mode [ 285.530132][T12543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.548780][T12543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.574719][ T3567] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.605945][ T3567] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.610900][ T5950] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 285.643614][ T5950] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 285.651620][ T5864] usb 3-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 285.669338][ T3567] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.679745][ T5864] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 285.713326][ T5950] usb 3-1: USB disconnect, device number 44 [ 285.720902][ T3567] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.766768][T12722] input: syz1 as /devices/virtual/input/input57 [ 285.935579][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.967394][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.045178][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.054350][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.102176][ T51] Bluetooth: hci3: command tx timeout [ 286.206352][ T30] audit: type=1400 audit(1755049163.830:926): avc: denied { listen } for pid=12736 comm="syz.7.2744" path=2F302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 286.321789][ T30] audit: type=1400 audit(1755049163.950:927): avc: denied { watch watch_reads } for pid=12740 comm="syz.7.2819" path="pipe:[46513]" dev="pipefs" ino=46513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 286.385216][T12745] netlink: 'syz.6.2820': attribute type 7 has an invalid length. [ 286.395809][T12745] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2820'. [ 286.398725][T12742] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 286.644452][T12760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.765813][ T5909] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 286.923501][ T5909] usb 8-1: Using ep0 maxpacket: 8 [ 286.931384][ T5909] usb 8-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 286.951667][ T5909] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.962943][ T5909] usb 8-1: Product: syz [ 286.967122][ T5909] usb 8-1: Manufacturer: syz [ 286.982636][ T5909] usb 8-1: SerialNumber: syz [ 286.989373][ T5909] usb 8-1: config 0 descriptor?? [ 287.007184][ T5909] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 287.054642][ T30] audit: type=1400 audit(1755049164.680:928): avc: denied { append } for pid=12781 comm="syz.6.2838" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 287.629927][T12798] input: syz1 as /devices/virtual/input/input58 [ 288.191897][ T51] Bluetooth: hci3: command tx timeout [ 288.245579][ T5909] gspca_sonixj: reg_w1 err -71 [ 288.250492][ T5909] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 288.275981][ T5909] usb 8-1: USB disconnect, device number 2 [ 288.442568][ T30] audit: type=1400 audit(1755049166.070:929): avc: denied { name_bind } for pid=12829 comm="syz.2.2856" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 289.274201][ T5967] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 289.441914][ T5967] usb 8-1: Using ep0 maxpacket: 8 [ 289.459112][ T5967] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.498364][ T5967] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.521368][ T5967] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.556979][ T5967] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.584786][ T5967] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 289.600205][ T5967] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.746554][T12864] SELinux: ebitmap: truncated map [ 289.768807][T12864] SELinux: failed to load policy [ 289.799005][T12871] netlink: 'syz.0.2875': attribute type 4 has an invalid length. [ 289.811197][T12871] netlink: 'syz.0.2875': attribute type 4 has an invalid length. [ 289.851577][ T5967] usb 8-1: GET_CAPABILITIES returned 0 [ 289.859668][ T5967] usbtmc 8-1:16.0: can't read capabilities [ 290.077058][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.086182][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.095255][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.104373][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.113729][T12883] veth0: entered promiscuous mode [ 290.117247][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.127927][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.137020][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.146189][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.155278][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 290.164355][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.174098][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2880'. [ 290.177883][ T5967] usb 8-1: USB disconnect, device number 3 [ 290.194920][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 290.327372][T12888] bridge: RTM_NEWNEIGH with invalid ether address [ 290.868295][T12908] overlayfs: failed to verify upper (563/file0, ino=2942, err=-116) [ 290.890436][T12908] overlayfs: failed to verify index dir 'upper' xattr [ 290.899100][T12908] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 290.904128][ T30] audit: type=1400 audit(1755049168.510:930): avc: denied { read } for pid=12911 comm="syz.0.2891" path="socket:[46797]" dev="sockfs" ino=46797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 291.501867][ T5889] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 291.641609][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 291.661615][ T5889] usb 7-1: Using ep0 maxpacket: 16 [ 291.670089][ T5889] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 291.680101][ T5889] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.695531][ T5889] usb 7-1: config 0 has no interface number 0 [ 291.710357][ T5889] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 291.729982][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.867019][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 291.877958][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 291.887323][ T24] usb 3-1: config 0 has no interface number 0 [ 291.923634][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 291.936449][ T5889] usb 7-1: Product: syz [ 291.945599][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 291.950470][ T5889] usb 7-1: Manufacturer: syz [ 291.954956][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.969321][ T5889] usb 7-1: SerialNumber: syz [ 291.971636][ T24] usb 3-1: Product: syz [ 291.997135][ T24] usb 3-1: Manufacturer: syz [ 292.038512][ T24] usb 3-1: SerialNumber: syz [ 292.044627][ T5889] usb 7-1: config 0 descriptor?? [ 292.060259][ T24] usb 3-1: config 0 descriptor?? [ 292.063770][ T5889] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 292.067542][ T24] smsc75xx v1.0.0 [ 292.097306][ T5889] usb 7-1: No valid video chain found. [ 292.297345][ T5889] usb 7-1: USB disconnect, device number 5 [ 292.709376][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 292.722325][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 292.755475][ T30] audit: type=1400 audit(1755049170.380:931): avc: denied { module_load } for pid=12964 comm="syz.4.2912" path="/sys/power/wakeup_count" dev="sysfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 293.141359][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 293.156552][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 293.171752][ T6008] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 293.189106][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 293.209741][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 293.243631][ T24] usb 3-1: USB disconnect, device number 45 [ 293.333957][ T6008] usb 7-1: config 0 has an invalid interface number: 98 but max is 0 [ 293.356191][ T6008] usb 7-1: config 0 has no interface number 0 [ 293.371614][ T6008] usb 7-1: config 0 interface 98 has no altsetting 0 [ 293.383553][ T6008] usb 7-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 293.400507][ T6008] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.409495][ T6008] usb 7-1: Product: syz [ 293.417856][ T6008] usb 7-1: Manufacturer: syz [ 293.424529][ T6008] usb 7-1: SerialNumber: syz [ 293.431255][ T6008] usb 7-1: config 0 descriptor?? [ 293.464841][ T5914] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 293.528262][T12985] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 293.545006][T12985] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 293.644200][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 293.665700][ T5914] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 293.685725][ T5914] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.687836][ T6008] usb 7-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 293.702786][ T5914] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.718061][ T5914] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.731533][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.787262][ T5914] usb 1-1: Product: syz [ 293.800607][ T5914] usb 1-1: Manufacturer: syz [ 293.834071][ T5914] usb 1-1: SerialNumber: syz [ 294.258717][ T5914] usb 1-1: 0:2 : does not exist [ 294.512778][ T6008] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 294.524274][ T6008] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 294.537070][ T6008] usb 7-1: USB disconnect, device number 6 [ 294.730565][ T30] audit: type=1400 audit(1755049172.350:932): avc: denied { mounton } for pid=13017 comm="syz.2.2934" path="/570/file0" dev="tmpfs" ino=2990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 294.753649][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.845399][ T6008] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 295.002412][ T6008] usb 7-1: Using ep0 maxpacket: 16 [ 295.044216][ T6008] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.076797][ T6008] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2039, setting to 1024 [ 295.108441][ T6008] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 295.131647][ T6008] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 295.156780][ T5914] usb 1-1: USB disconnect, device number 43 [ 295.167301][ T6008] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.197781][ T6008] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.227875][ T6008] usb 7-1: Product: syz [ 295.244967][ T6008] usb 7-1: Manufacturer: syz [ 295.249711][ T6008] usb 7-1: SerialNumber: syz [ 295.277872][T13010] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 295.425162][T13031] syzkaller1: entered promiscuous mode [ 295.431991][T13031] syzkaller1: entered allmulticast mode [ 295.440199][T13031] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 295.554791][T13010] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 295.585620][T13010] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 296.021957][ T5967] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 296.190525][ T5967] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.206430][ T5967] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 296.216227][ T6008] cdc_ncm 7-1:1.0: SET_CRC_MODE failed [ 296.221679][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.221702][ T5967] usb 1-1: Product: syz [ 296.221716][ T5967] usb 1-1: Manufacturer: syz [ 296.221730][ T5967] usb 1-1: SerialNumber: syz [ 296.230585][ T5967] usb 1-1: config 0 descriptor?? [ 296.256551][ T6008] cdc_ncm 7-1:1.0: SET_NTB_FORMAT failed [ 296.283051][ T6008] cdc_ncm 7-1:1.0: bind() failure [ 296.295663][ T6008] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 296.302558][ T6008] cdc_ncm 7-1:1.1: bind() failure [ 296.320207][ T6008] usb 7-1: USB disconnect, device number 7 [ 296.444523][T13047] veth1_to_bridge: entered allmulticast mode [ 296.472343][T13047] veth1_to_bridge: left allmulticast mode [ 296.483087][ T5902] usb 1-1: USB disconnect, device number 44 [ 297.361548][ T5889] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 297.567949][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.591481][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.601247][ T5889] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 298.203926][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.257769][ T5889] usb 7-1: config 0 descriptor?? [ 298.888722][ T5889] usb 7-1: language id specifier not provided by device, defaulting to English [ 299.070403][ T30] audit: type=1400 audit(1755049176.690:933): avc: denied { name_connect } for pid=13099 comm="syz.4.2971" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 299.302846][ T5889] input: HID 256c:006d as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0040/input/input59 [ 299.397972][ T5889] input: HID 256c:006d as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0040/input/input60 [ 299.462059][ T5889] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0040/input/input61 [ 299.556537][ T5889] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0040/input/input62 [ 299.626887][ T5889] uclogic 0003:256C:006D.0040: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 299.712768][ T5889] usb 7-1: USB disconnect, device number 8 [ 299.741670][ T5902] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 299.806022][T13118] fido_id[13118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 299.911743][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 299.932142][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.948397][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.018878][ T5902] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 300.049423][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.117482][ T5902] usb 1-1: config 0 descriptor?? [ 300.130406][T13122] veth0: entered promiscuous mode [ 300.144026][ T5902] hub 1-1:0.0: USB hub found [ 300.191571][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2978'. [ 300.276538][T13122] veth0 (unregistering): left promiscuous mode [ 300.303531][T13126] netlink: 'syz.7.2980': attribute type 1 has an invalid length. [ 300.311350][T13126] netlink: 'syz.7.2980': attribute type 2 has an invalid length. [ 300.367079][ T5902] hub 1-1:0.0: 1 port detected [ 300.417939][T13130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.043151][ T5902] hub 1-1:0.0: activate --> -90 [ 301.354082][T13163] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2997'. [ 301.453283][ T43] usb 1-1: USB disconnect, device number 45 [ 302.826307][ T5889] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 302.908920][T13195] netlink: 'syz.6.3012': attribute type 3 has an invalid length. [ 302.961732][T13195] netlink: 'syz.6.3012': attribute type 3 has an invalid length. [ 303.004171][ T5889] usb 8-1: Using ep0 maxpacket: 32 [ 303.114663][ T5889] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 303.131839][ T5889] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.169498][ T5889] usb 8-1: config 0 descriptor?? [ 303.284248][ T5889] gspca_main: sq930x-2.14.0 probing 041e:403c [ 303.862389][ T5902] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 304.015291][ T5902] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 304.023511][ T5902] usb 1-1: config 0 has no interface number 0 [ 304.031354][ T5902] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 304.043385][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.051386][ T5902] usb 1-1: Product: syz [ 304.056177][ T5902] usb 1-1: Manufacturer: syz [ 304.063210][ T5902] usb 1-1: SerialNumber: syz [ 304.070247][ T5902] usb 1-1: config 0 descriptor?? [ 304.290506][ T5902] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 304.298353][ T5902] usb 1-1: No valid video chain found. [ 304.308394][ T5902] usb 1-1: USB disconnect, device number 46 [ 304.531497][ T5889] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 304.537414][ T5889] sq930x 8-1:0.0: probe with driver sq930x failed with error -71 [ 304.561951][ T5889] usb 8-1: USB disconnect, device number 4 [ 304.931527][ T5950] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 305.088358][ T5950] usb 3-1: unable to get BOS descriptor or descriptor too short [ 305.106994][ T5950] usb 3-1: not running at top speed; connect to a high speed hub [ 305.116928][ T5950] usb 3-1: config 13 has an invalid interface number: 90 but max is 0 [ 305.126425][ T5950] usb 3-1: config 13 has no interface number 0 [ 305.134953][ T5950] usb 3-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 305.152744][ T5950] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7 [ 305.168435][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.184778][ T5950] usb 3-1: Product: syz [ 305.193499][ T5950] usb 3-1: Manufacturer: syz [ 305.208218][ T5950] usb 3-1: SerialNumber: syz [ 305.253478][T13262] syzkaller1: entered promiscuous mode [ 305.259020][T13262] syzkaller1: entered allmulticast mode [ 305.444578][ T5950] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.484903][T13270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.506293][ T5950] usb 3-1: USB disconnect, device number 46 [ 305.576449][T13275] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.3045'. [ 305.668411][ T6311] udevd[6311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.90/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.763031][ T6008] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 306.767184][T13323] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 306.772042][ T3567] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 306.943167][ T6008] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.968874][ T6008] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 306.996371][ T6008] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.012785][ T6008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.020796][ T6008] usb 3-1: Product: syz [ 307.031955][ T5950] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 307.046327][ T6008] usb 3-1: Manufacturer: syz [ 307.050946][ T6008] usb 3-1: SerialNumber: syz [ 307.074867][ T6008] cdc_mbim 3-1:1.0: skipping garbage [ 307.193090][ T5950] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 307.214756][ T5950] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 307.228418][ T30] audit: type=1400 audit(1755049184.850:934): avc: denied { bind } for pid=13333 comm="syz.0.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 307.258704][ T5950] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 307.276205][ T5950] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.295785][T13311] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 307.722665][ T5950] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 307.735107][ T5950] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input63 [ 307.804883][ T5950] input: failed to attach handler kbd to device input63, error: -5 [ 307.826505][ T5950] usb 8-1: USB disconnect, device number 5 [ 307.918996][T13311] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 307.954520][ T6008] cdc_mbim 3-1:1.0: setting rx_max = 16384 [ 307.968023][ T30] audit: type=1400 audit(1755049185.590:935): avc: denied { mounton } for pid=13347 comm="syz.6.3076" path="/94/file0" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 308.028576][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3078'. [ 308.039034][T13352] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3078'. [ 308.060725][ T3496] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.069802][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3078'. [ 308.079067][ T3496] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.087880][T13352] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3078'. [ 308.097052][ T3496] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.107456][ T3496] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.158552][ T6008] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 308.164378][ T30] audit: type=1400 audit(1755049185.780:936): avc: denied { create } for pid=13356 comm="syz.0.3080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 308.188198][ T6008] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 308.210602][ T6008] wwan wwan0: port wwan0mbim0 attached [ 308.234043][ T6008] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 12:3b:9f:ab:20:20 [ 308.257842][ T6008] usb 3-1: USB disconnect, device number 47 [ 308.274533][ T6008] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 308.344099][ T6008] wwan wwan0: port wwan0mbim0 disconnected [ 308.462314][ T43] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 308.652294][ T30] audit: type=1400 audit(1755049186.280:937): avc: denied { read } for pid=13369 comm="syz.7.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 309.001530][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 309.008144][ T43] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 309.017535][ T43] usb 7-1: config 0 has no interface number 0 [ 309.031540][ T43] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 309.044212][ T43] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 309.063460][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.076912][ T43] usb 7-1: Product: syz [ 309.081092][ T43] usb 7-1: Manufacturer: syz [ 309.101572][ T43] usb 7-1: SerialNumber: syz [ 309.108271][ T43] usb 7-1: config 0 descriptor?? [ 309.135356][ T43] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 309.179184][ T43] em28xx 7-1:0.132: Video interface 132 found: [ 309.541161][ T43] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 310.026486][T13393] netlink: 'syz.0.3094': attribute type 39 has an invalid length. [ 310.186841][ T30] audit: type=1326 audit(1755049187.810:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13388 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68818ebe9 code=0x7fc00000 [ 310.664780][ T43] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 310.678317][T13360] em28xx 7-1:0.132: failed to trigger write to i2c address 0x2 (error=-5) [ 310.688703][ T43] em28xx 7-1:0.132: board has no eeprom [ 310.751641][ T43] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 310.765582][ T43] em28xx 7-1:0.132: analog set to bulk mode. [ 310.771979][ T6008] em28xx 7-1:0.132: Registering V4L2 extension [ 310.791114][ T30] audit: type=1326 audit(1755049188.410:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13388 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb68818ebe9 code=0x7fc00000 [ 310.805827][ T43] usb 7-1: USB disconnect, device number 9 [ 310.842096][ T6008] em28xx 7-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 310.851297][ T6008] em28xx 7-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 310.868568][ T43] em28xx 7-1:0.132: Disconnecting em28xx [ 311.015108][T13425] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3103'. [ 311.061695][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 311.164380][ T6008] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 311.183193][ T6008] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 311.190516][ T6008] em28xx 7-1:0.132: No AC97 audio processor [ 311.230768][ T6008] usb 7-1: Decoder not found [ 311.240201][ T6008] em28xx 7-1:0.132: failed to create media graph [ 311.248416][ T6008] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 311.274361][ T6008] em28xx 7-1:0.132: Remote control support is not available for this card. [ 311.284866][ T43] em28xx 7-1:0.132: Closing input extension [ 311.312628][ T43] em28xx 7-1:0.132: Freeing device [ 312.188507][T13462] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 312.471670][ T6008] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 312.622811][ T6008] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 312.634591][ T6008] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 312.645720][ T43] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 312.653408][ T6008] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 312.665621][ T6008] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 312.678595][ T6008] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.687794][ T6008] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.698287][ T6008] usb 7-1: config 0 descriptor?? [ 312.813832][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.826007][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 312.837513][ T43] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 312.846809][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.854926][ T43] usb 3-1: Product: syz [ 312.859104][ T43] usb 3-1: Manufacturer: syz [ 312.864081][ T43] usb 3-1: SerialNumber: syz [ 312.870846][ T43] usb 3-1: config 0 descriptor?? [ 312.878012][ T43] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 312.889330][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 312.899038][ T43] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 312.911517][ T43] usb 3-1: media controller created [ 312.925586][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.966140][ T43] DVB: Unable to find symbol tda10046_attach() [ 312.973340][ T43] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 313.001500][ T43] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 313.127472][ T6008] plantronics 0003:047F:FFFF.0041: ignoring exceeding usage max [ 313.181235][ T6008] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 313.966187][T13512] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3140'. [ 313.992100][T13512] bridge_slave_1: left allmulticast mode [ 313.998017][T13512] bridge_slave_1: left promiscuous mode [ 314.011415][T13512] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.024395][T13512] bridge_slave_0: left allmulticast mode [ 314.030344][T13512] bridge_slave_0: left promiscuous mode [ 314.037337][T13512] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.107752][ T43] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 314.129583][ T43] usb 3-1: USB disconnect, device number 48 [ 314.378240][T13521] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3145'. [ 314.401824][T13523] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 314.666229][T13535] SELinux: failed to load policy [ 314.760407][T13542] syzkaller1: entered promiscuous mode [ 314.766600][T13542] syzkaller1: entered allmulticast mode [ 315.304918][ T5909] usb 7-1: USB disconnect, device number 10 [ 315.325342][T13568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3164'. [ 315.344249][T13568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3164'. [ 315.690400][ T51] Bluetooth: hci0: connection err: -111 [ 315.851302][T13583] overlayfs: upper fs does not support file handles, falling back to index=off. [ 315.875103][ T5889] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 315.978872][T13589] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3175'. [ 316.044915][ T5889] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 316.071757][ T5889] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 316.120833][ T5889] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 316.140422][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.171493][ T5889] usb 7-1: Product: syz [ 316.175675][ T5889] usb 7-1: Manufacturer: syz [ 316.180726][ T5889] usb 7-1: SerialNumber: syz [ 316.203792][ T5889] usb 7-1: config 0 descriptor?? [ 316.211853][T13576] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 316.218554][T13595] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3176'. [ 316.220588][T13576] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 316.291805][ T5909] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 316.456953][T13576] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 316.475111][T13576] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 316.484276][ T5909] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 316.497175][ T5909] usb 1-1: config 0 has no interface number 0 [ 316.510023][ T5909] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 316.531030][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.539314][ T5909] usb 1-1: Product: syz [ 316.551614][ T5909] usb 1-1: Manufacturer: syz [ 316.557239][ T5909] usb 1-1: SerialNumber: syz [ 316.565478][ T5909] usb 1-1: config 0 descriptor?? [ 316.587707][ T5909] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 316.600704][ T5909] ems_usb 1-1:0.204: probe with driver ems_usb failed with error -22 [ 316.818661][ T5950] usb 1-1: USB disconnect, device number 47 [ 317.129060][ T30] audit: type=1400 audit(1755049194.750:940): avc: denied { audit_write } for pid=13626 comm="syz.4.3188" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 317.248054][ T30] audit: type=1400 audit(1755049194.870:941): avc: denied { append } for pid=13628 comm="syz.7.3190" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 317.549898][ T5889] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 317.593373][ T5889] dm9601 7-1:0.0 eth9: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 317.644966][ T5889] usb 7-1: USB disconnect, device number 11 [ 317.666412][ T5889] dm9601 7-1:0.0 eth9: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet [ 317.824825][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3201'. [ 317.884883][T13660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3202'. [ 317.911568][ T5967] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 318.073029][ T5967] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 318.083748][ T5967] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 318.093899][ T5967] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.103840][T13670] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 318.136125][ T5967] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 318.197608][ T5967] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 318.210178][ T5967] usb 8-1: Product: syz [ 318.216174][ T5967] usb 8-1: Manufacturer: syz [ 318.221998][ T5967] usb 8-1: SerialNumber: syz [ 318.459343][ T5967] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 318.655113][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3215'. [ 318.726384][ T5967] usb 8-1: USB disconnect, device number 6 [ 318.732295][ T30] audit: type=1400 audit(1755049196.350:942): avc: denied { read write } for pid=13647 comm="syz.7.3198" name="lp0" dev="devtmpfs" ino=4226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 318.766499][ T5967] usblp0: removed [ 318.786201][ T30] audit: type=1400 audit(1755049196.350:943): avc: denied { open } for pid=13647 comm="syz.7.3198" path="/dev/usb/lp0" dev="devtmpfs" ino=4226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 319.432378][ T30] audit: type=1400 audit(1755049197.060:944): avc: denied { name_bind 0x1000000 } for pid=13722 comm="syz.0.3229" path="socket:[50849]" dev="sockfs" ino=50849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 319.549533][ T30] audit: type=1400 audit(1755049197.170:945): avc: denied { listen } for pid=13725 comm="syz.6.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 319.622098][ T43] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 319.792764][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 319.800965][ T43] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 319.829106][ T43] usb 8-1: config 0 has no interface number 0 [ 319.848624][ T43] usb 8-1: config 0 interface 184 has no altsetting 0 [ 319.861662][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 319.882436][ T43] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 319.902053][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.910070][ T43] usb 8-1: Product: syz [ 319.914884][ T43] usb 8-1: Manufacturer: syz [ 319.919481][ T43] usb 8-1: SerialNumber: syz [ 319.942097][ T43] usb 8-1: config 0 descriptor?? [ 319.970562][ T43] smsc75xx v1.0.0 [ 319.999763][T13742] program syz.2.3238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.161788][ C1] sd 0:0:1:0: [sda] tag#8070 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 320.172242][ C1] sd 0:0:1:0: [sda] tag#8070 CDB: Write(6) 0a 00 00 00 00 00 [ 320.259030][T13746] virtiofs: Unknown parameter 'always 1 V3 [ 320.259030][T13746] 010000E0 1 0:00000000 0 [ 320.259030][T13746] 21 vxcan0 : 1 V3 [ 320.259030][T13746] 010000E0 1 0:00000000 0 [ 320.259030][T13746] 22 vxcan1 : 1 V3 [ 320.259030][T13746] 010000E0 1 0:00000000 0 [ 320.259030][T13746] 23 veth0 : 1 V3 [ 320.259030][T13746] 010000E0 1 0:00000000 0 [ 320.259030][T13746] 24 veth1 : 1 V3 [ 320.259030][T13746] 010000E0 1 0:00000000 0 [ 320.259030][T13746] 25 wg0 : 1 V3 [ 320.259030][T13746] 010000E0 1 0:00000000 0 [ 320.259030][T13746] 26 wg1 : 1 V3 [ 320.259030][T13746] 010000E0 1 0:00000000 0 [ 320.259030][T13746] 27 wg2 : 1 V3 [ 320.259030][T13746] 010000E0 1 0:00000000 0 [ 320.259030][T13746] 28 veth0_to_bridge: 1 V1 [ 320.259030][T13746] 010000E0 1 0:00000000 0 [ 320.259030][T13746] 29 bridge_slave_0: 1 V3 [ 320.259030][T13746] 010000E0 1 0:00000000 0 [ 320.259030][T13746] 30 veth1_to_bridge: 1 V1 [ 320.259030][T13746] 010000E0 1 0:00000000 0 [ 320.259030][T13746] 31 bridge_slave_1: 1 V3 [ 320.259030][T13746] 010000E0 1 0:00000000 0 [ 320.259030][T13746] 32 veth0_to_bond: 1 V3 [ 320.259030][T13746] 010000E0 1 0:00000000 0 [ 320.259030][T13746] 33 bond_slave_0: 1 V3 [ 320.259030][T13746] 010000E0 1 0:00000000 0 [ 320.259030][T13746] 34 veth1_to_bond: 1 V3 [ 320.259030][T13746] 010000E0 1 0:00000000 0 [ 320.259030][T13746] 35 bond_slave_1: 1 V3 [ 320.259030][T13746] 010000E0 [ 320.259760][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3239'. [ 320.821734][ T6008] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 320.981735][ T6008] usb 3-1: Using ep0 maxpacket: 32 [ 320.990236][ T6008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.001398][ T6008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.011185][ T6008] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 321.020372][ T6008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.030560][ T6008] usb 3-1: config 0 descriptor?? [ 321.040049][ T6008] hub 3-1:0.0: USB hub found [ 321.240539][ T6008] hub 3-1:0.0: 1 port detected [ 321.266871][ T43] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 321.277805][ T43] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 321.287552][ T43] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 321.298370][ T43] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 321.310259][ T43] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 321.320713][ T43] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 321.331297][ T43] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 321.345747][ T43] usb 8-1: USB disconnect, device number 7 [ 321.417258][T13766] netlink: 'syz.6.3246': attribute type 39 has an invalid length. [ 321.848007][ T6008] hub 3-1:0.0: activate --> -90 [ 322.171546][ T5914] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 322.250036][ T5950] usb 3-1: USB disconnect, device number 49 [ 322.321658][ T5914] usb 8-1: Using ep0 maxpacket: 16 [ 322.328158][ T5914] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.374122][ T5914] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.404053][ T5914] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 322.451620][ T5914] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 322.468458][ T5914] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.503735][ T5914] usb 8-1: config 0 descriptor?? [ 322.826527][T13804] kvm: user requested TSC rate below hardware speed [ 322.846278][T13804] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 322.901487][T13806] netlink: 'syz.2.3262': attribute type 1 has an invalid length. [ 322.909309][T13806] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3262'. [ 322.932276][ T5914] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 322.942889][ T5914] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 322.971711][ T5914] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 322.978947][ T5914] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 323.011974][ T5914] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 323.125985][ T5914] microsoft 0003:045E:07DA.0042: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 323.204409][ T5914] microsoft 0003:045E:07DA.0042: no inputs found [ 323.224969][ T5914] microsoft 0003:045E:07DA.0042: could not initialize ff, continuing anyway [ 323.265781][ T5914] usb 8-1: USB disconnect, device number 8 [ 323.318080][T13809] fido_id[13809]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 323.496638][ T30] audit: type=1400 audit(1755049201.120:946): avc: denied { ioctl } for pid=13812 comm="syz.4.3265" path="socket:[52111]" dev="sockfs" ino=52111 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 323.921655][ T6008] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 324.083561][ T6008] usb 3-1: Using ep0 maxpacket: 8 [ 324.090292][ T6008] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 324.101683][ T6008] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 324.119102][ T6008] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 324.130906][ T6008] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 324.146296][ T6008] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 324.184304][ T6008] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.201890][ T6008] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 324.255282][ T6008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.527723][ T6008] usb 3-1: GET_CAPABILITIES returned 0 [ 324.546612][ T6008] usbtmc 3-1:16.0: can't read capabilities [ 324.767522][ T5950] usb 3-1: USB disconnect, device number 50 [ 325.091526][ T5914] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 325.258196][ T5914] usb 8-1: Using ep0 maxpacket: 32 [ 325.265565][ T5914] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.276856][ T5914] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.287855][ T5914] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 325.300889][ T5914] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.317797][ T5914] usb 8-1: config 0 descriptor?? [ 325.330016][ T5914] hub 8-1:0.0: USB hub found [ 325.511794][ T43] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 325.539512][ T5914] hub 8-1:0.0: 1 port detected [ 325.694358][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 325.717153][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.738328][ T43] usb 1-1: config 0 descriptor?? [ 325.756429][ T43] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 326.153064][ T5914] hub 8-1:0.0: activate --> -90 [ 326.465840][T13896] netlink: 'syz.2.3298': attribute type 4 has an invalid length. [ 326.567927][ T5914] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 326.576305][ T5950] usb 8-1: USB disconnect, device number 9 [ 326.582361][ T43] gspca_stv06xx: I2C: Read error writing address: -71 [ 326.644135][ T43] usb 1-1: USB disconnect, device number 48 [ 326.790456][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3302'. [ 326.800791][T13904] netlink: 'syz.6.3302': attribute type 30 has an invalid length. [ 326.923482][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3302'. [ 326.951062][T13904] netlink: 'syz.6.3302': attribute type 30 has an invalid length. [ 327.553430][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3308'. [ 327.562356][T13919] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3308'. [ 327.616833][T13919] netlink: 'syz.7.3308': attribute type 20 has an invalid length. [ 327.690141][ T36] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.699139][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3308'. [ 327.737810][ T36] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.754206][T13924] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input64 [ 327.761713][T13919] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3308'. [ 327.787492][ T36] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.805024][T13919] netlink: 'syz.7.3308': attribute type 20 has an invalid length. [ 327.818260][ T36] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.196987][ T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 328.568235][T13926] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 328.819468][T13961] ALSA: seq fatal error: cannot create timer (-16) [ 328.873200][ T5967] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 329.033626][ T5967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.045174][ T5967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.055778][ T5967] usb 7-1: New USB device found, idVendor=38de, idProduct=1142, bcdDevice= 0.00 [ 329.066398][ T5967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.082324][ T5967] usb 7-1: config 0 descriptor?? [ 329.505953][ T5967] hid-generic 0003:38DE:1142.0043: unknown main item tag 0x0 [ 329.516925][ T5967] hid-generic 0003:38DE:1142.0043: unknown main item tag 0x0 [ 329.527602][ T5967] hid-generic 0003:38DE:1142.0043: unknown main item tag 0x0 [ 329.538461][ T5967] hid-generic 0003:38DE:1142.0043: unknown main item tag 0x0 [ 329.558657][ T5967] hid-generic 0003:38DE:1142.0043: unknown main item tag 0x0 [ 329.576607][ T5967] hid-generic 0003:38DE:1142.0043: hidraw0: USB HID v0.00 Device [HID 38de:1142] on usb-dummy_hcd.6-1/input0 [ 329.743290][T14004] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3341'. [ 331.007617][ T30] audit: type=1400 audit(1755049208.630:947): avc: denied { read } for pid=14027 comm="syz.2.3348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 331.119434][T14035] netlink: 'syz.0.3353': attribute type 12 has an invalid length. [ 331.127490][ T30] audit: type=1400 audit(1755049208.740:948): avc: denied { setopt } for pid=14034 comm="syz.0.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.614270][ T5914] usb 7-1: USB disconnect, device number 12 [ 332.066160][T14073] netlink: 'syz.7.3368': attribute type 1 has an invalid length. [ 332.133301][T14073] 8021q: adding VLAN 0 to HW filter on device bond1 [ 332.228051][T14078] bond1: (slave geneve2): making interface the new active one [ 332.264204][T14078] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 332.397199][T14048] ceph: No mds server is up or the cluster is laggy [ 332.641736][ T5914] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 332.741089][ T30] audit: type=1400 audit(1755049210.360:949): avc: denied { write } for pid=14087 comm="syz.0.3372" path="socket:[52701]" dev="sockfs" ino=52701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 332.813008][ T5914] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.822995][ T5914] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.836557][ T5914] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.845947][ T5914] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.064295][ T5914] usb 8-1: usb_control_msg returned -32 [ 333.089847][ T5914] usbtmc 8-1:16.0: can't read capabilities [ 333.286838][T14110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.371708][ T5917] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 333.526130][ T5917] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 333.535554][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.543702][ T5917] usb 3-1: Product: syz [ 333.548044][ T5917] usb 3-1: Manufacturer: syz [ 333.555899][ T5917] usb 3-1: SerialNumber: syz [ 333.565440][ T5917] usb 3-1: config 0 descriptor?? [ 333.979840][ T5917] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 333.994961][ T5917] asix 3-1:0.0: probe with driver asix failed with error -71 [ 334.006871][ T5917] usb 3-1: USB disconnect, device number 51 [ 334.061661][ T5914] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 334.222746][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 334.229213][ T5914] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 334.237801][ T5914] usb 1-1: config 0 has no interface number 0 [ 334.247248][ T5914] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 334.258246][ T5914] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 334.274593][ T5914] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 334.286845][ T5914] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 334.303905][ T5914] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 334.314401][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.327334][ T5914] usb 1-1: config 0 descriptor?? [ 334.339764][ T5914] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 334.411676][ T5967] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 334.584225][ T5967] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 334.597512][ T5914] usb 1-1: USB disconnect, device number 49 [ 334.613292][ T5914] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 334.621142][ T5967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.650862][ T5967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.664685][ T5967] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 334.679554][ T5967] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 334.690944][ T5967] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 334.699550][ T5967] usb 7-1: Manufacturer: syz [ 334.722175][ T5967] usb 7-1: config 0 descriptor?? [ 334.801170][T14133] Bluetooth: hci0: service_discovery: too big uuid_count value 65535 [ 335.134714][ T5967] appleir 0003:05AC:8243.0044: unknown main item tag 0x0 [ 335.184457][ T5967] appleir 0003:05AC:8243.0044: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 335.400669][ T5909] usb 8-1: USB disconnect, device number 10 [ 335.561515][ T5914] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 335.731492][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 335.739430][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.757139][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.769422][ T5914] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 335.784521][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.798281][ T5914] usb 1-1: config 0 descriptor?? [ 336.224733][ T5914] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0045/input/input65 [ 336.325466][ T5914] appleir 0003:05AC:8241.0045: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 337.143269][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 337.177132][ T5914] usb 7-1: USB disconnect, device number 13 [ 337.224657][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3406'. [ 337.637737][T14183] netlink: 212264 bytes leftover after parsing attributes in process `syz.7.3408'. [ 337.651769][ T5914] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 337.680436][T14185] binder: 14184:14185 ioctl 40046205 0 returned -22 [ 337.804090][ T5914] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 337.813501][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.824181][ T5914] usb 7-1: config 0 descriptor?? [ 338.008002][T14198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.144766][ T5917] usb 1-1: USB disconnect, device number 50 [ 339.084756][ T5914] usb 7-1: Cannot set autoneg [ 339.090332][ T5914] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 339.114263][ T5914] usb 7-1: USB disconnect, device number 14 [ 339.730099][T14248] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3434'. [ 339.776124][ T30] audit: type=1400 audit(1755049217.380:950): avc: denied { read } for pid=14250 comm="syz.4.3436" path="socket:[53141]" dev="sockfs" ino=53141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 339.800017][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.814360][T14253] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3436'. [ 340.721552][ T5950] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 340.883242][ T5950] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 340.893426][ T5950] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 340.907091][ T5950] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 340.929428][ T5950] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 340.964870][ T5950] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.985109][ T5950] usb 8-1: Product: syz [ 340.989303][ T5950] usb 8-1: Manufacturer: syz [ 341.017548][ T5950] usb 8-1: SerialNumber: syz [ 341.061292][ T5950] usb 8-1: config 0 descriptor?? [ 341.073509][T14288] netlink: 'syz.6.3453': attribute type 10 has an invalid length. [ 341.086806][T14288] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.092048][T14263] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 341.094322][T14288] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.112103][T14263] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 341.145490][ T5950] usb 8-1: ucan: probing device on interface #0 [ 341.165500][T14288] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.172671][T14288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.180131][T14288] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.187460][T14288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.256419][T14288] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 341.411527][ T43] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 341.568749][ T5950] usb 8-1: ucan: device reported invalid device info [ 341.572859][ T43] usb 1-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 341.582922][ T5950] usb 8-1: ucan: probe failed; try to update the device firmware [ 341.591657][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 341.604957][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.619390][ T30] audit: type=1400 audit(1755049219.250:951): avc: denied { ioctl } for pid=14300 comm="syz.6.3459" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 341.645785][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.655613][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.678512][ T43] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 341.688551][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.712037][ T43] usb 1-1: config 0 descriptor?? [ 341.776431][ T5169] Bluetooth: hci3: link tx timeout [ 341.783157][ T5169] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 341.794142][ T5169] Bluetooth: hci3: link tx timeout [ 341.799304][ T5169] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 341.838512][ T5950] usb 8-1: USB disconnect, device number 11 [ 341.848941][T14309] loop6: detected capacity change from 0 to 524287999 [ 341.958420][T14315] loop3: detected capacity change from 0 to 1 [ 341.968143][ T6325] Dev loop3: unable to read RDB block 1 [ 341.974254][ T6325] loop3: unable to read partition table [ 341.981833][ T6325] loop3: partition table beyond EOD, truncated [ 341.992564][T14315] Dev loop3: unable to read RDB block 1 [ 342.018464][T14315] loop3: unable to read partition table [ 342.033183][T14315] loop3: partition table beyond EOD, truncated [ 342.039650][T14315] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 342.146627][ T43] input: HID 28bd:0909 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0909.0046/input/input66 [ 342.234809][ T43] uclogic 0003:28BD:0909.0046: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.0-1/input0 [ 342.263259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.344626][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3470'. [ 342.373547][ T43] usb 1-1: USB disconnect, device number 51 [ 342.391517][ T5950] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 342.564086][ T5950] usb 7-1: Using ep0 maxpacket: 32 [ 342.570776][ T5950] usb 7-1: config 0 has an invalid interface number: 225 but max is 0 [ 342.583156][ T5950] usb 7-1: config 0 has no interface number 0 [ 342.591010][ T5950] usb 7-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 342.604022][ T5950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.616497][ T5950] usb 7-1: Product: syz [ 342.620675][ T5950] usb 7-1: Manufacturer: syz [ 342.628111][ T5950] usb 7-1: SerialNumber: syz [ 342.637261][ T5950] usb 7-1: config 0 descriptor?? [ 342.784644][T14347] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3478'. [ 343.259550][ T5950] mos7840 7-1:0.225: required endpoints missing [ 343.271348][ T5950] usb 7-1: USB disconnect, device number 15 [ 343.451639][ T5889] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 343.505362][T14374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.547757][T14376] netlink: 'syz.2.3491': attribute type 12 has an invalid length. [ 343.555794][T14376] netlink: 'syz.2.3491': attribute type 29 has an invalid length. [ 343.564052][T14376] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3491'. [ 343.573704][T14376] netlink: 'syz.2.3491': attribute type 2 has an invalid length. [ 343.581819][T14376] netlink: 23 bytes leftover after parsing attributes in process `syz.2.3491'. [ 343.595062][T14376] netlink: 'syz.2.3491': attribute type 12 has an invalid length. [ 343.602975][T14376] netlink: 'syz.2.3491': attribute type 29 has an invalid length. [ 343.610786][T14376] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3491'. [ 343.620106][T14376] netlink: 'syz.2.3491': attribute type 2 has an invalid length. [ 343.623433][ T5889] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 343.627889][T14376] netlink: 23 bytes leftover after parsing attributes in process `syz.2.3491'. [ 343.642580][ T5889] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.663682][ T5889] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 343.674169][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.861766][ T5169] Bluetooth: hci3: command 0x0406 tx timeout [ 343.898269][ T5889] usb 1-1: usb_control_msg returned -32 [ 343.919009][ T5889] usbtmc 1-1:16.0: can't read capabilities [ 343.947934][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3498'. [ 343.970551][T14388] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3498'. [ 343.980859][T14388] netlink: 'syz.7.3498': attribute type 6 has an invalid length. [ 343.990758][ T43] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 343.994022][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3498'. [ 344.035269][T14388] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3498'. [ 344.044845][T14388] netlink: 'syz.7.3498': attribute type 6 has an invalid length. [ 344.152217][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 344.167410][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.178826][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.190178][ T43] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 344.200793][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.231128][ T43] usb 3-1: config 0 descriptor?? [ 344.317079][T14402] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -32 [ 344.334644][ T5917] usb 1-1: USB disconnect, device number 52 [ 344.659420][ T43] hid-multitouch 0003:1FD2:6007.0047: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 344.904240][ T43] usb 3-1: USB disconnect, device number 52 [ 344.938954][ T30] audit: type=1326 audit(1755049222.560:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87a78ebe9 code=0x7ffc0000 [ 344.975755][ T30] audit: type=1326 audit(1755049222.560:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87a78ebe9 code=0x7ffc0000 [ 345.005412][ T30] audit: type=1326 audit(1755049222.560:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fd87a78ebe9 code=0x7ffc0000 [ 345.035233][ T30] audit: type=1326 audit(1755049222.560:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87a78ebe9 code=0x7ffc0000 [ 345.070768][ T30] audit: type=1326 audit(1755049222.560:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87a78ebe9 code=0x7ffc0000 [ 345.227072][T14431] evm: overlay not supported [ 345.300828][T14435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.307840][ T5917] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 345.387831][T14439] SELinux: failed to load policy [ 345.473040][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.494490][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.521816][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 345.539817][ T5917] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 345.553877][ T30] audit: type=1400 audit(1755049223.180:957): avc: denied { read } for pid=14443 comm="syz.4.3523" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 345.600550][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.612308][ T30] audit: type=1400 audit(1755049223.180:958): avc: denied { open } for pid=14443 comm="syz.4.3523" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 345.638294][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.649406][ T5917] usb 1-1: config 0 descriptor?? [ 345.761661][ T5950] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 345.931499][ T5950] usb 8-1: Using ep0 maxpacket: 32 [ 345.938100][ T5950] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 345.950343][ T5950] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 345.961406][ T5950] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 345.994775][ T5950] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 346.016936][ T5950] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 346.040283][ T5950] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 346.053793][ T5950] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.063130][ T5950] usb 8-1: Product: syz [ 346.067423][ T5950] usb 8-1: Manufacturer: syz [ 346.076408][ T5950] usb 8-1: SerialNumber: syz [ 346.109146][ T5950] usb 8-1: config 0 descriptor?? [ 346.118382][ T5917] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 346.241775][ T43] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 346.375239][ T5914] usb 1-1: USB disconnect, device number 53 [ 346.427407][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.441328][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.456792][ T43] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 346.469525][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.479223][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.488323][ T43] usb 3-1: Product: syz [ 346.492937][ T43] usb 3-1: Manufacturer: syz [ 346.497530][ T43] usb 3-1: SerialNumber: syz [ 346.559293][ T5950] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 346.570183][ T5950] input input68: Device does not respond to id packet M [ 346.578561][ T5950] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 346.611710][ T5950] input input68: Device does not respond to id packet P [ 346.630139][ T5950] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 346.636518][ T5950] input input68: Device does not respond to id packet B [ 346.726665][T14458] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 346.851996][ T5950] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 346.860220][ T5950] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 346.866973][ T5950] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 346.881784][ T5950] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 346.891168][ T5950] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input68 [ 346.921709][ T5950] usb 8-1: USB disconnect, device number 12 [ 347.385705][ T24] usb 7-1: [UEAGLE-ATM] firmware is not available [ 347.386693][ T5864] usb 3-1: [UEAGLE-ATM] firmware is not available [ 347.544197][T14458] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 347.671824][ T5902] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 347.769873][ T43] cdc_ncm 3-1:1.0: bind() failure [ 347.790350][ T43] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 347.800197][ T43] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 347.812206][ T43] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 347.843779][ T43] usb 3-1: USB disconnect, device number 53 [ 347.853298][ T5902] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 347.901646][ T5902] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 347.918649][ T5902] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 347.949042][ T5902] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.965069][ T5902] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.975256][ T5902] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.995829][ T5902] usb 8-1: config 0 descriptor?? [ 348.005748][T14476] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 348.452416][ T30] audit: type=1400 audit(1755049226.070:959): avc: denied { mounton } for pid=14507 comm="syz.2.3553" path="/690/file0" dev="tmpfs" ino=3602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 348.457612][T14508] Invalid source name [ 348.491681][ T5902] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 348.498323][T14508] UBIFS error (pid: 14508): cannot open "./file0", error -22 [ 348.541557][ T30] audit: type=1400 audit(1755049226.080:960): avc: denied { mounton } for pid=14507 comm="syz.2.3553" path="/690/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 348.571235][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.702812][ T30] audit: type=1326 audit(1755049226.330:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14512 comm="syz.6.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7b98ebe9 code=0x7fc00000 [ 348.840780][ T5169] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 348.860020][ T5169] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 348.870854][ T5169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 348.882875][ T5169] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 348.893105][ T5169] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.156229][T14521] chnl_net:caif_netlink_parms(): no params data found [ 349.254015][T14521] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.261233][T14521] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.274090][T14521] bridge_slave_0: entered allmulticast mode [ 349.283119][T14521] bridge_slave_0: entered promiscuous mode [ 349.294566][T14521] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.302847][T14521] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.310728][T14521] bridge_slave_1: entered allmulticast mode [ 349.322288][T14521] bridge_slave_1: entered promiscuous mode [ 349.368228][T14521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.377809][ T5902] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 349.390141][T14521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.433456][T14521] team0: Port device team_slave_0 added [ 349.442369][T14521] team0: Port device team_slave_1 added [ 349.494290][T14521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.501331][T14521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.530444][T14521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.542139][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 349.554584][ T5902] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 349.556110][T14521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.569571][ T5902] usb 3-1: config 0 has no interface number 0 [ 349.576827][T14521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.603709][T14521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.606823][ T5902] usb 3-1: config 0 interface 184 has no altsetting 0 [ 349.625822][ T5902] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 349.636329][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.645229][ T5902] usb 3-1: Product: syz [ 349.649467][ T5902] usb 3-1: Manufacturer: syz [ 349.654247][ T5902] usb 3-1: SerialNumber: syz [ 349.662580][ T5902] usb 3-1: config 0 descriptor?? [ 349.668575][T14550] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3567'. [ 349.676382][ T5902] smsc75xx v1.0.0 [ 349.740343][T14521] hsr_slave_0: entered promiscuous mode [ 349.758630][T14521] hsr_slave_1: entered promiscuous mode [ 349.776216][T14521] debugfs: 'hsr0' already exists in 'hsr' [ 349.785814][T14521] Cannot create hsr debugfs directory [ 350.091624][T14521] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 350.103265][T14521] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 350.113992][T14521] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 350.127498][T14521] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 350.163998][T14521] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.171252][T14521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.178673][T14521] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.185836][T14521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.203938][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.213573][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.330213][T14521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.359918][T14521] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.396619][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.403806][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.468527][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.475703][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.613167][ T43] usb 8-1: USB disconnect, device number 13 [ 350.897389][T14521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.900814][ T5902] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 350.929051][ T5902] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 350.965068][ T5902] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 350.990757][ T51] Bluetooth: hci0: command tx timeout [ 351.002413][ T5902] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 351.031806][ T5902] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 351.048903][ T5902] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 351.061025][ T5902] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 351.073617][ T5902] usb 3-1: USB disconnect, device number 54 [ 351.166385][T14589] Bluetooth: MGMT ver 1.23 [ 351.410266][T14521] veth0_vlan: entered promiscuous mode [ 351.430212][T14521] veth1_vlan: entered promiscuous mode [ 351.476329][T14521] veth0_macvtap: entered promiscuous mode [ 351.488980][T14521] veth1_macvtap: entered promiscuous mode [ 351.508956][T14521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.541373][T14521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.569577][ T1148] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.580820][ T1148] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.612934][ T1148] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.643747][ T1148] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.679343][ T51] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 351.727980][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.740067][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.768639][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.777207][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.871735][ T5864] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 351.891710][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 351.891725][ T30] audit: type=1400 audit(1755049229.510:965): avc: denied { view } for pid=14611 comm="syz.8.3585" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 351.916631][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.042289][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 352.108701][ T30] audit: type=1400 audit(1755049229.730:966): avc: denied { module_load } for pid=14615 comm="syz.8.3587" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 352.136641][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.194955][ T5864] usb 3-1: unable to get BOS descriptor or descriptor too short [ 352.216368][ T5864] usb 3-1: no configurations [ 352.222788][ T5864] usb 3-1: can't read configurations, error -22 [ 352.408310][T14624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3590'. [ 352.534353][T14624] hsr_slave_1 (unregistering): left promiscuous mode [ 352.945277][T14640] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3597'. [ 352.976051][T14640] gretap0: entered promiscuous mode [ 353.058403][T14640] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3597'. [ 353.072340][ T51] Bluetooth: hci0: command tx timeout [ 353.079655][T14640] 0ªî{X¹¦: renamed from gretap0 [ 353.102722][T14640] 0ªî{X¹¦: left promiscuous mode [ 353.114336][T14640] 0ªî{X¹¦: entered allmulticast mode [ 353.122116][T14640] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 353.148128][ T30] audit: type=1400 audit(1755049230.770:967): avc: denied { associate } for pid=14652 comm="syz.8.3600" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 353.169205][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.446221][T14666] netlink: 'syz.7.3609': attribute type 2 has an invalid length. [ 353.531702][ T5864] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 353.717694][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.755145][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.819166][ T5864] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 353.922037][ T5864] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 353.946600][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.978292][ T5864] usb 7-1: config 0 descriptor?? [ 354.282976][T14691] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 354.418725][ T5864] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 354.438571][ T5864] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 354.448453][ T5864] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 354.456142][ T5864] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 354.464365][ T5864] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 354.472829][ T5864] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 354.501825][ T5864] plantronics 0003:047F:FFFF.004A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 354.857800][T14721] netlink: 63503 bytes leftover after parsing attributes in process `syz.7.3631'. [ 355.141590][ T51] Bluetooth: hci0: command tx timeout [ 355.483785][T14756] loop4: detected capacity change from 0 to 7 [ 355.498511][T14756] Dev loop4: unable to read RDB block 7 [ 355.504291][T14756] loop4: unable to read partition table [ 355.515993][T14756] loop4: partition table beyond EOD, truncated [ 355.523154][T14756] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 355.537939][T14758] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3646'. [ 355.636807][T14761] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3646'. [ 355.696725][T14761] nbd: device at index 64 is going down [ 355.812233][ T5834] udevd[5834]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 355.839477][ T5834] udevd[5834]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 355.987398][T14775] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 356.573318][ T5864] usb 7-1: USB disconnect, device number 16 [ 356.838411][T14821] netlink: 'syz.4.3670': attribute type 22 has an invalid length. [ 356.850512][T14821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3670'. [ 356.923408][T14821] netlink: 'syz.4.3670': attribute type 22 has an invalid length. [ 356.941490][T14821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3670'. [ 356.969168][T14828] netlink: 830 bytes leftover after parsing attributes in process `syz.8.3674'. [ 357.222416][ T51] Bluetooth: hci0: command tx timeout [ 357.733755][T14869] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.741099][T14869] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.828046][T14869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.913504][T14874] tipc: Started in network mode [ 357.920077][T14874] tipc: Node identity , cluster identity 4711 [ 357.928207][T14874] tipc: Failed to set node id, please configure manually [ 357.935526][T14874] tipc: Enabling of bearer rejected, failed to enable media [ 357.950118][ T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.960578][ T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.979521][ T36] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.990486][ T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.388086][T14905] [ 358.390430][T14905] ===================================================== [ 358.397347][T14905] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 358.404789][T14905] 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 Not tainted [ 358.411873][T14905] ----------------------------------------------------- [ 358.418791][T14905] syz.8.3704/14905 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 358.426498][T14905] ffff88807cbc3be8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 358.435184][T14905] [ 358.435184][T14905] and this task is already holding: [ 358.442524][T14905] ffff888057308028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 358.452334][T14905] which would create a new lock dependency: [ 358.458194][T14905] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 358.466260][T14905] [ 358.466260][T14905] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 358.475680][T14905] (&client->buffer_lock){..-.}-{3:3} [ 358.475698][T14905] [ 358.475698][T14905] ... which became SOFTIRQ-irq-safe at: [ 358.488715][T14905] lock_acquire+0x179/0x350 [ 358.493301][T14905] _raw_spin_lock+0x2e/0x40 [ 358.497876][T14905] evdev_pass_values+0x10e/0x9b0 [ 358.502881][T14905] evdev_events+0x1bb/0x390 [ 358.507453][T14905] input_pass_values+0x74e/0x880 [ 358.512477][T14905] input_handle_event+0xb29/0x14d0 [ 358.517654][T14905] input_event+0x8e/0xd0 [ 358.521963][T14905] hidinput_hid_event+0xa10/0x2420 [ 358.527142][T14905] hid_process_event+0x4b7/0x5e0 [ 358.532152][T14905] hid_report_raw_event+0xa0a/0x1290 [ 358.537509][T14905] __hid_input_report.constprop.0+0x33f/0x450 [ 358.543669][T14905] hid_irq_in+0x35e/0x870 [ 358.548084][T14905] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 358.553529][T14905] usb_hcd_giveback_urb+0x39b/0x450 [ 358.558809][T14905] dummy_timer+0x1814/0x3a30 [ 358.563460][T14905] __hrtimer_run_queues+0x202/0xad0 [ 358.568747][T14905] hrtimer_run_softirq+0x17d/0x350 [ 358.573922][T14905] handle_softirqs+0x216/0x8e0 [ 358.578757][T14905] __irq_exit_rcu+0x109/0x170 [ 358.583498][T14905] irq_exit_rcu+0x9/0x30 [ 358.587818][T14905] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 358.593522][T14905] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 358.599565][T14905] __sanitizer_cov_trace_const_cmp4+0x0/0x20 [ 358.605611][T14905] __d_lookup_rcu+0x101/0x4c0 [ 358.610358][T14905] lookup_fast+0x90/0x610 [ 358.614748][T14905] walk_component+0x5b/0x5b0 [ 358.619406][T14905] link_path_walk+0x627/0xe20 [ 358.624142][T14905] path_openat+0x1b0/0x2cb0 [ 358.628710][T14905] do_filp_open+0x20b/0x470 [ 358.633274][T14905] do_sys_openat2+0x11b/0x1d0 [ 358.638020][T14905] __x64_sys_openat+0x174/0x210 [ 358.642942][T14905] do_syscall_64+0xcd/0x4c0 [ 358.647528][T14905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.653483][T14905] [ 358.653483][T14905] to a SOFTIRQ-irq-unsafe lock: [ 358.660473][T14905] (tasklist_lock){.+.+}-{3:3} [ 358.660493][T14905] [ 358.660493][T14905] ... which became SOFTIRQ-irq-unsafe at: [ 358.673087][T14905] ... [ 358.673092][T14905] lock_acquire+0x179/0x350 [ 358.680217][T14905] _raw_read_lock+0x5f/0x70 [ 358.684790][T14905] __do_wait+0x105/0x890 [ 358.689103][T14905] do_wait+0x21e/0x5a0 [ 358.693252][T14905] kernel_wait+0x9f/0x160 [ 358.697642][T14905] call_usermodehelper_exec_work+0xf1/0x170 [ 358.703599][T14905] process_one_work+0x9cc/0x1b70 [ 358.708597][T14905] worker_thread+0x6c8/0xf10 [ 358.713249][T14905] kthread+0x3c5/0x780 [ 358.717381][T14905] ret_from_fork+0x5d7/0x6f0 [ 358.722045][T14905] ret_from_fork_asm+0x1a/0x30 [ 358.726875][T14905] [ 358.726875][T14905] other info that might help us debug this: [ 358.726875][T14905] [ 358.737076][T14905] Chain exists of: [ 358.737076][T14905] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 358.737076][T14905] [ 358.750180][T14905] Possible interrupt unsafe locking scenario: [ 358.750180][T14905] [ 358.758494][T14905] CPU0 CPU1 [ 358.763846][T14905] ---- ---- [ 358.769196][T14905] lock(tasklist_lock); [ 358.773427][T14905] local_irq_disable(); [ 358.780193][T14905] lock(&client->buffer_lock); [ 358.787561][T14905] lock(&new->fa_lock); [ 358.794311][T14905] [ 358.797748][T14905] lock(&client->buffer_lock); [ 358.802754][T14905] [ 358.802754][T14905] *** DEADLOCK *** [ 358.802754][T14905] [ 358.810875][T14905] 7 locks held by syz.8.3704/14905: [ 358.816055][T14905] #0: ffff888147365118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 358.825206][T14905] #1: ffff888142ee6230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 358.835288][T14905] #2: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 358.844927][T14905] #3: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 358.854474][T14905] #4: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 358.863588][T14905] #5: ffff888057308028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 358.873826][T14905] #6: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 358.882861][T14905] [ 358.882861][T14905] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 358.893239][T14905] -> (&client->buffer_lock){..-.}-{3:3} { [ 358.898949][T14905] IN-SOFTIRQ-W at: [ 358.902903][T14905] lock_acquire+0x179/0x350 [ 358.909042][T14905] _raw_spin_lock+0x2e/0x40 [ 358.915214][T14905] evdev_pass_values+0x10e/0x9b0 [ 358.921802][T14905] evdev_events+0x1bb/0x390 [ 358.927946][T14905] input_pass_values+0x74e/0x880 [ 358.934513][T14905] input_handle_event+0xb29/0x14d0 [ 358.941253][T14905] input_event+0x8e/0xd0 [ 358.947124][T14905] hidinput_hid_event+0xa10/0x2420 [ 358.953863][T14905] hid_process_event+0x4b7/0x5e0 [ 358.960433][T14905] hid_report_raw_event+0xa0a/0x1290 [ 358.967349][T14905] __hid_input_report.constprop.0+0x33f/0x450 [ 358.975059][T14905] hid_irq_in+0x35e/0x870 [ 358.981018][T14905] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 358.988021][T14905] usb_hcd_giveback_urb+0x39b/0x450 [ 358.994853][T14905] dummy_timer+0x1814/0x3a30 [ 359.001066][T14905] __hrtimer_run_queues+0x202/0xad0 [ 359.007902][T14905] hrtimer_run_softirq+0x17d/0x350 [ 359.014655][T14905] handle_softirqs+0x216/0x8e0 [ 359.021058][T14905] __irq_exit_rcu+0x109/0x170 [ 359.027372][T14905] irq_exit_rcu+0x9/0x30 [ 359.033253][T14905] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 359.040535][T14905] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 359.048150][T14905] __sanitizer_cov_trace_const_cmp4+0x0/0x20 [ 359.055765][T14905] __d_lookup_rcu+0x101/0x4c0 [ 359.062081][T14905] lookup_fast+0x90/0x610 [ 359.068046][T14905] walk_component+0x5b/0x5b0 [ 359.074275][T14905] link_path_walk+0x627/0xe20 [ 359.080575][T14905] path_openat+0x1b0/0x2cb0 [ 359.086714][T14905] do_filp_open+0x20b/0x470 [ 359.092860][T14905] do_sys_openat2+0x11b/0x1d0 [ 359.099168][T14905] __x64_sys_openat+0x174/0x210 [ 359.105655][T14905] do_syscall_64+0xcd/0x4c0 [ 359.111805][T14905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.119324][T14905] INITIAL USE at: [ 359.123192][T14905] lock_acquire+0x179/0x350 [ 359.129241][T14905] _raw_spin_lock_irq+0x36/0x50 [ 359.135662][T14905] evdev_read+0x436/0xee0 [ 359.141551][T14905] vfs_readv+0x5be/0x8b0 [ 359.147342][T14905] do_readv+0x28c/0x340 [ 359.153065][T14905] do_syscall_64+0xcd/0x4c0 [ 359.159122][T14905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.166557][T14905] } [ 359.169033][T14905] ... key at: [] __key.1+0x0/0x40 [ 359.176124][T14905] [ 359.176124][T14905] the dependencies between the lock to be acquired [ 359.176130][T14905] and SOFTIRQ-irq-unsafe lock: [ 359.189618][T14905] -> (tasklist_lock){.+.+}-{3:3} { [ 359.194909][T14905] HARDIRQ-ON-R at: [ 359.199037][T14905] lock_acquire+0x179/0x350 [ 359.205520][T14905] _raw_read_lock+0x5f/0x70 [ 359.212003][T14905] __do_wait+0x105/0x890 [ 359.218226][T14905] do_wait+0x21e/0x5a0 [ 359.224274][T14905] kernel_wait+0x9f/0x160 [ 359.230574][T14905] call_usermodehelper_exec_work+0xf1/0x170 [ 359.238444][T14905] process_one_work+0x9cc/0x1b70 [ 359.245356][T14905] worker_thread+0x6c8/0xf10 [ 359.251926][T14905] kthread+0x3c5/0x780 [ 359.257990][T14905] ret_from_fork+0x5d7/0x6f0 [ 359.264565][T14905] ret_from_fork_asm+0x1a/0x30 [ 359.271306][T14905] SOFTIRQ-ON-R at: [ 359.275435][T14905] lock_acquire+0x179/0x350 [ 359.281921][T14905] _raw_read_lock+0x5f/0x70 [ 359.288419][T14905] __do_wait+0x105/0x890 [ 359.294656][T14905] do_wait+0x21e/0x5a0 [ 359.300705][T14905] kernel_wait+0x9f/0x160 [ 359.307018][T14905] call_usermodehelper_exec_work+0xf1/0x170 [ 359.314889][T14905] process_one_work+0x9cc/0x1b70 [ 359.321821][T14905] worker_thread+0x6c8/0xf10 [ 359.328385][T14905] kthread+0x3c5/0x780 [ 359.334426][T14905] ret_from_fork+0x5d7/0x6f0 [ 359.340989][T14905] ret_from_fork_asm+0x1a/0x30 [ 359.347730][T14905] INITIAL USE at: [ 359.351790][T14905] lock_acquire+0x179/0x350 [ 359.358187][T14905] _raw_write_lock_irq+0x36/0x50 [ 359.365019][T14905] copy_process+0x4caf/0x7690 [ 359.371586][T14905] kernel_clone+0xfc/0x930 [ 359.377901][T14905] user_mode_thread+0xc7/0x110 [ 359.384558][T14905] rest_init+0x23/0x2b0 [ 359.390604][T14905] start_kernel+0x3ee/0x4d0 [ 359.396999][T14905] x86_64_start_reservations+0x18/0x30 [ 359.404349][T14905] x86_64_start_kernel+0x130/0x190 [ 359.411350][T14905] common_startup_64+0x13e/0x148 [ 359.418174][T14905] INITIAL READ USE at: [ 359.422651][T14905] lock_acquire+0x179/0x350 [ 359.429484][T14905] _raw_read_lock+0x5f/0x70 [ 359.436314][T14905] __do_wait+0x105/0x890 [ 359.442895][T14905] do_wait+0x21e/0x5a0 [ 359.449289][T14905] kernel_wait+0x9f/0x160 [ 359.455936][T14905] call_usermodehelper_exec_work+0xf1/0x170 [ 359.464148][T14905] process_one_work+0x9cc/0x1b70 [ 359.471410][T14905] worker_thread+0x6c8/0xf10 [ 359.478323][T14905] kthread+0x3c5/0x780 [ 359.484709][T14905] ret_from_fork+0x5d7/0x6f0 [ 359.491617][T14905] ret_from_fork_asm+0x1a/0x30 [ 359.498701][T14905] } [ 359.501346][T14905] ... key at: [] tasklist_lock+0x18/0x40 [ 359.509212][T14905] ... acquired at: [ 359.513163][T14905] _raw_read_lock+0x5f/0x70 [ 359.517825][T14905] send_sigurg+0xed/0xc80 [ 359.522309][T14905] sk_send_sigurg+0x76/0x360 [ 359.527052][T14905] unix_stream_sendmsg+0xfa5/0x1340 [ 359.532413][T14905] ____sys_sendmsg+0xa98/0xc70 [ 359.537330][T14905] ___sys_sendmsg+0x134/0x1d0 [ 359.542152][T14905] __sys_sendmmsg+0x200/0x420 [ 359.546975][T14905] __x64_sys_sendmmsg+0x9c/0x100 [ 359.552059][T14905] do_syscall_64+0xcd/0x4c0 [ 359.556710][T14905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.562766][T14905] [ 359.565067][T14905] -> (&f_owner->lock){....}-{3:3} { [ 359.570342][T14905] INITIAL USE at: [ 359.574294][T14905] lock_acquire+0x179/0x350 [ 359.580518][T14905] _raw_write_lock_irq+0x36/0x50 [ 359.587173][T14905] __f_setown+0x61/0x3c0 [ 359.593131][T14905] generic_setlease+0xef2/0x1300 [ 359.599779][T14905] kernel_setlease+0x106/0x140 [ 359.606254][T14905] vfs_setlease+0x258/0x2d0 [ 359.612470][T14905] fcntl_setlease+0x3ed/0x5a0 [ 359.618859][T14905] do_fcntl+0x751/0x15a0 [ 359.624816][T14905] __x64_sys_fcntl+0x163/0x200 [ 359.631295][T14905] do_syscall_64+0xcd/0x4c0 [ 359.637513][T14905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.645121][T14905] INITIAL READ USE at: [ 359.649524][T14905] lock_acquire+0x179/0x350 [ 359.656180][T14905] _raw_read_lock_irqsave+0x74/0x90 [ 359.663532][T14905] send_sigio+0x31/0x3e0 [ 359.669929][T14905] kill_fasync+0x214/0x510 [ 359.676493][T14905] lease_break_callback+0x23/0x30 [ 359.683669][T14905] __break_lease+0x674/0x1810 [ 359.690489][T14905] do_dentry_open+0x91f/0x1530 [ 359.697398][T14905] vfs_open+0x82/0x3f0 [ 359.703615][T14905] path_openat+0x1de4/0x2cb0 [ 359.710350][T14905] do_filp_open+0x20b/0x470 [ 359.717001][T14905] do_sys_openat2+0x11b/0x1d0 [ 359.723825][T14905] __x64_sys_creat+0xcc/0x120 [ 359.730652][T14905] do_syscall_64+0xcd/0x4c0 [ 359.737299][T14905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.745338][T14905] } [ 359.747897][T14905] ... key at: [] __key.1+0x0/0x40 [ 359.755068][T14905] ... acquired at: [ 359.758932][T14905] _raw_read_lock_irqsave+0x74/0x90 [ 359.764286][T14905] send_sigio+0x31/0x3e0 [ 359.768681][T14905] kill_fasync+0x214/0x510 [ 359.773251][T14905] lease_break_callback+0x23/0x30 [ 359.778431][T14905] __break_lease+0x674/0x1810 [ 359.783268][T14905] do_dentry_open+0x91f/0x1530 [ 359.788182][T14905] vfs_open+0x82/0x3f0 [ 359.792577][T14905] path_openat+0x1de4/0x2cb0 [ 359.797316][T14905] do_filp_open+0x20b/0x470 [ 359.801968][T14905] do_sys_openat2+0x11b/0x1d0 [ 359.806800][T14905] __x64_sys_creat+0xcc/0x120 [ 359.811634][T14905] do_syscall_64+0xcd/0x4c0 [ 359.816286][T14905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.822328][T14905] [ 359.824624][T14905] -> (&new->fa_lock){....}-{3:3} { [ 359.829720][T14905] INITIAL USE at: [ 359.833588][T14905] lock_acquire+0x179/0x350 [ 359.839643][T14905] _raw_write_lock_irq+0x36/0x50 [ 359.846143][T14905] fasync_remove_entry+0xb2/0x1e0 [ 359.852725][T14905] fasync_helper+0xaf/0xd0 [ 359.858688][T14905] snd_fasync_helper+0xdd/0x250 [ 359.865076][T14905] snd_pcm_fasync+0xeb/0x160 [ 359.871207][T14905] __fput+0x968/0xb70 [ 359.876732][T14905] task_work_run+0x150/0x240 [ 359.882861][T14905] exit_to_user_mode_loop+0xeb/0x110 [ 359.889683][T14905] do_syscall_64+0x3f6/0x4c0 [ 359.895811][T14905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.903244][T14905] INITIAL READ USE at: [ 359.907544][T14905] lock_acquire+0x179/0x350 [ 359.914024][T14905] _raw_read_lock_irqsave+0x74/0x90 [ 359.921200][T14905] kill_fasync+0x138/0x510 [ 359.927592][T14905] do_splice+0x80c/0x1fc0 [ 359.933895][T14905] __do_splice+0x15d/0x360 [ 359.940282][T14905] __x64_sys_splice+0x187/0x250 [ 359.947103][T14905] do_syscall_64+0xcd/0x4c0 [ 359.953583][T14905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.961454][T14905] } [ 359.963934][T14905] ... key at: [] __key.0+0x0/0x40 [ 359.971027][T14905] ... acquired at: [ 359.974814][T14905] lock_acquire+0x179/0x350 [ 359.979492][T14905] _raw_read_lock_irqsave+0x74/0x90 [ 359.984849][T14905] kill_fasync+0x138/0x510 [ 359.989429][T14905] evdev_pass_values+0x619/0x9b0 [ 359.994522][T14905] evdev_events+0x1bb/0x390 [ 359.999181][T14905] input_pass_values+0x74e/0x880 [ 360.004272][T14905] input_handle_event+0xf00/0x14d0 [ 360.009534][T14905] input_inject_event+0x1e8/0x3b0 [ 360.014710][T14905] evdev_write+0x457/0x750 [ 360.019279][T14905] vfs_write+0x29d/0x11d0 [ 360.023755][T14905] ksys_write+0x1f8/0x250 [ 360.028234][T14905] do_syscall_64+0xcd/0x4c0 [ 360.032892][T14905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.038946][T14905] [ 360.041246][T14905] [ 360.041246][T14905] stack backtrace: [ 360.047115][T14905] CPU: 0 UID: 0 PID: 14905 Comm: syz.8.3704 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 360.047135][T14905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.047144][T14905] Call Trace: [ 360.047150][T14905] [ 360.047157][T14905] dump_stack_lvl+0x116/0x1f0 [ 360.047173][T14905] check_irq_usage+0x7dc/0x920 [ 360.047192][T14905] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 360.047212][T14905] ? check_path.constprop.0+0x24/0x50 [ 360.047233][T14905] ? __lock_acquire+0x12bc/0x1ce0 [ 360.047252][T14905] __lock_acquire+0x12bc/0x1ce0 [ 360.047276][T14905] lock_acquire+0x179/0x350 [ 360.047295][T14905] ? kill_fasync+0x138/0x510 [ 360.047317][T14905] _raw_read_lock_irqsave+0x74/0x90 [ 360.047339][T14905] ? kill_fasync+0x138/0x510 [ 360.047356][T14905] kill_fasync+0x138/0x510 [ 360.047375][T14905] evdev_pass_values+0x619/0x9b0 [ 360.047396][T14905] evdev_events+0x1bb/0x390 [ 360.047413][T14905] input_pass_values+0x74e/0x880 [ 360.047433][T14905] input_handle_event+0xf00/0x14d0 [ 360.047450][T14905] ? _copy_from_user+0x59/0xd0 [ 360.047469][T14905] input_inject_event+0x1e8/0x3b0 [ 360.047488][T14905] evdev_write+0x457/0x750 [ 360.047507][T14905] ? __pfx_evdev_write+0x10/0x10 [ 360.047525][T14905] ? bpf_lsm_file_permission+0x9/0x10 [ 360.047544][T14905] ? security_file_permission+0x71/0x210 [ 360.047564][T14905] ? rw_verify_area+0xcf/0x6c0 [ 360.047586][T14905] ? __pfx_evdev_write+0x10/0x10 [ 360.047603][T14905] vfs_write+0x29d/0x11d0 [ 360.047617][T14905] ? __pfx_vfs_write+0x10/0x10 [ 360.047629][T14905] ? find_held_lock+0x2b/0x80 [ 360.047645][T14905] ? __fget_files+0x204/0x3c0 [ 360.047660][T14905] ? __fget_files+0x20e/0x3c0 [ 360.047676][T14905] ksys_write+0x1f8/0x250 [ 360.047689][T14905] ? __pfx_ksys_write+0x10/0x10 [ 360.047704][T14905] do_syscall_64+0xcd/0x4c0 [ 360.047733][T14905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.047747][T14905] RIP: 0033:0x7f8a8338ebe9 [ 360.047758][T14905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.047771][T14905] RSP: 002b:00007f8a842a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 360.047784][T14905] RAX: ffffffffffffffda RBX: 00007f8a835b5fa0 RCX: 00007f8a8338ebe9 [ 360.047793][T14905] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 360.047801][T14905] RBP: 00007f8a83411e19 R08: 0000000000000000 R09: 0000000000000000 [ 360.047809][T14905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.047817][T14905] R13: 00007f8a835b6038 R14: 00007f8a835b5fa0 R15: 00007ffe5e82f858 [ 360.047830][T14905] [ 360.308101][ T5914] kernel read not supported for file /dsp (pid: 5914 comm: kworker/0:4) [ 360.353284][T14908] Bluetooth: hci0: unsupported parameter 64317 [ 360.359554][T14908] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 360.451544][ T5864] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 360.622688][ T5864] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 360.631816][ T5864] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.640481][ T5864] usb 8-1: config 0 descriptor?? [ 360.647788][ T5864] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 360.850569][ T5864] gp8psk: usb in 128 operation failed. [ 361.057754][ T5864] gp8psk: usb in 146 operation failed. [ 361.063263][ T5864] gp8psk: failed to get FW version [ 361.068895][ T5864] gp8psk: usb in 149 operation failed. [ 361.074571][ T5864] gp8psk: failed to get FPGA version [ 361.281074][ T5864] gp8psk: usb out operation failed. [ 361.287419][ T5864] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 361.298002][ T5864] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 361.308980][ T5864] usb 8-1: USB disconnect, device number 14