last executing test programs: 7m11.812221325s ago: executing program 0 (id=565): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x10, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff1}, {0x6}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 7m11.588699136s ago: executing program 0 (id=566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0x94, 0x0, 0x1}) 7m11.197926547s ago: executing program 0 (id=569): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 7m10.941573085s ago: executing program 0 (id=574): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 7m10.777835766s ago: executing program 0 (id=575): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000018c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x3, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) 7m10.477595073s ago: executing program 0 (id=581): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 7m10.197020892s ago: executing program 32 (id=581): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 7m7.238301353s ago: executing program 3 (id=616): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 7m7.10147373s ago: executing program 3 (id=619): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r0, &(0x7f000000ae80)={0x2020}, 0x2020) 7m6.896545374s ago: executing program 3 (id=621): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}, 0x200040c4) 7m6.808543414s ago: executing program 3 (id=623): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 7m6.71601834s ago: executing program 3 (id=625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 7m6.418997201s ago: executing program 3 (id=629): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@host, 0xfed2}, {@my=0x0}, 0x400, "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"}, 0x418}) 7m6.12725834s ago: executing program 33 (id=629): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@host, 0xfed2}, {@my=0x0}, 0x400, "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"}, 0x418}) 4m38.158263679s ago: executing program 1 (id=3558): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m38.041573451s ago: executing program 1 (id=3560): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)={0x0, 0x10, 0x5, {0x5, 0xc, "74f18f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 4m35.956786234s ago: executing program 1 (id=3600): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001780)={0x44, &(0x7f0000001600)={0x0, 0x15, 0x1, "c3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f0000000080)=[{0xc0, 0x8000, 0x0, 0x0}], 0x1}) 4m34.379203176s ago: executing program 1 (id=3623): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000004060102000001000000000001000c090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) 4m33.462583163s ago: executing program 1 (id=3633): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00') 4m33.39824944s ago: executing program 1 (id=3635): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000003000100000000000800004095"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x2, 0x4, 0x9}, 0x10}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 4m18.352701247s ago: executing program 34 (id=3635): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000003000100000000000800004095"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x2, 0x4, 0x9}, 0x10}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 3.702746717s ago: executing program 6 (id=8048): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000001}, 0x4801) recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/48, 0x30}], 0x1}, 0x18}], 0x1, 0x101, 0x0) 3.662949339s ago: executing program 6 (id=8049): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 3.539577533s ago: executing program 6 (id=8051): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.264102345s ago: executing program 6 (id=8056): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2.153036167s ago: executing program 6 (id=8058): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000240), 0x0}, 0x20) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) 2.04366861s ago: executing program 6 (id=8060): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.043220858s ago: executing program 4 (id=8061): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x76, 0x10001, 0xe, 0x5, 0x8, 0x1, 0xa4, 0x8}, 0x0, 0x0, 0x0, 0x0) 2.013192088s ago: executing program 4 (id=8063): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000e0fffffdffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r1, 0x2000002, 0xe, 0xfd47, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.082027274s ago: executing program 4 (id=8070): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r1, &(0x7f0000001ac0)=""/4080, 0xff0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5100) 967.778462ms ago: executing program 5 (id=8073): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 902.526644ms ago: executing program 4 (id=8074): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {0x7}, {0xc, 0xfff3}}}, 0x24}}, 0x24040084) 871.048868ms ago: executing program 7 (id=8075): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000009c0)={0xa458, 0x98, 0x7, 0xf6, 0x8, "0982aa400000000000e6ffffab5b00", 0x5, 0x2}) r1 = syz_io_uring_setup(0xcd0, &(0x7f0000000dc0)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x152}, &(0x7f00000005c0)=0x0, &(0x7f0000000e40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) 783.076563ms ago: executing program 5 (id=8077): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) 782.268563ms ago: executing program 7 (id=8078): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x2}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x8080000, 0xb, 0xfffffffb, 0xfffffffe, 0x0, [{0xc, 0x3, 0x8, '\x00', 0xb4}, {0x83, 0x1d, 0x4, '\x00', 0x4b}, {0xf9, 0xf, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x8, 0x10, 0x8}, {0x2, 0x9, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x1, 0x9, 0x10, '\x00', 0x8}, {0x0, 0x0, 0x5, '\x00', 0x7}, {0x1, 0x8a, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x7, 0x4, 0x6, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xec, 0x3, 0x4}, {0xf, 0x6, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x56, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x7}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x4, 0x8, 0xfa, '\x00', 0x42}]}}) 752.270836ms ago: executing program 2 (id=8079): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x48800) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) shutdown(r0, 0x2) 706.726288ms ago: executing program 4 (id=8080): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x10, r2) 659.101047ms ago: executing program 2 (id=8081): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0xac}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x80000000}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xfff}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 636.083424ms ago: executing program 5 (id=8082): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0xf, @empty, 0x8}}, 0x9, 0x10, 0x5, 0x2, 0xce0206, 0x10000000, 0x25}, 0x9c) 555.347604ms ago: executing program 7 (id=8083): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000440)='./bus\x00', 0x11d) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) read$FUSE(r0, 0x0, 0x0) 521.407351ms ago: executing program 5 (id=8084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x6, 0x8, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 505.303315ms ago: executing program 2 (id=8085): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f00000007c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000000), 0x3, r1, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x20, r3, r1}) 437.815757ms ago: executing program 5 (id=8086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) 435.51553ms ago: executing program 7 (id=8096): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f0000001440)={{0x7, 0x0, 0x80, {0xffffffffffffffff, 0xd000, 0x1}}, "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", "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"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 426.850022ms ago: executing program 4 (id=8087): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 316.913154ms ago: executing program 2 (id=8088): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x10012, r0, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x3, 0x0, 0x0) r1 = syz_clone(0x1940380, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, 0x0, 0x0) 249.87522ms ago: executing program 5 (id=8089): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0xffffffff, 0x2, 0x1, 0x0, 0x2}) r1 = dup(r0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0xb, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) 131.258621ms ago: executing program 7 (id=8090): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2400c854, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) shutdown(r0, 0x1) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) pread64(r0, 0x0, 0x0, 0x4) 105.721768ms ago: executing program 2 (id=8091): r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000200)={r0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r0}) 719.538µs ago: executing program 7 (id=8092): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 0s ago: executing program 2 (id=8093): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0xe4}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) kernel console output (not intermixed with test programs): th: hci5: Opcode 0x1003 failed: -110 [ 466.749425][T27862] use of bytesused == 0 is deprecated and will be removed in the future, [ 466.817413][T27862] use the actual size instead. [ 466.935708][ T9] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 467.073804][ T30] audit: type=1326 audit(1754923074.574:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27879 comm="syz.7.7020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecabf8ebe9 code=0x7ffc0000 [ 467.110225][ T30] audit: type=1326 audit(1754923074.574:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27879 comm="syz.7.7020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecabf8ebe9 code=0x7ffc0000 [ 467.135100][ T30] audit: type=1326 audit(1754923074.574:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27879 comm="syz.7.7020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fecabf8ebe9 code=0x7ffc0000 [ 467.208433][ T30] audit: type=1326 audit(1754923074.574:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27879 comm="syz.7.7020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecabf8ebe9 code=0x7ffc0000 [ 467.232194][ T5844] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 467.243854][ T30] audit: type=1326 audit(1754923074.604:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27879 comm="syz.7.7020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecabf8ebe9 code=0x7ffc0000 [ 467.430176][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.447010][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.457071][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 467.485700][ T5844] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 467.507184][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.528845][ T5844] usb 5-1: config 0 descriptor?? [ 467.572578][ T9] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 467.586466][ T9] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 467.628490][ T9] asix 6-1:0.0: probe with driver asix failed with error -71 [ 467.643353][ T9] usb 6-1: USB disconnect, device number 66 [ 467.674766][T27897] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 467.682702][T12865] IPVS: starting estimator thread 0... [ 467.755774][T27903] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 467.778525][T27899] IPVS: using max 41 ests per chain, 98400 per kthread [ 467.916123][ T30] audit: type=1400 audit(1754923075.414:1246): avc: denied { connect } for pid=27911 comm="syz.2.7033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 467.940631][ T5844] hid-udraw 0003:20D6:CB17.006F: item fetching failed at offset 5/7 [ 467.949517][ T5844] hid-udraw 0003:20D6:CB17.006F: parse failed [ 467.955705][ T5844] hid-udraw 0003:20D6:CB17.006F: probe with driver hid-udraw failed with error -22 [ 468.158241][ T9] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 468.165251][ T5844] usb 5-1: USB disconnect, device number 83 [ 468.360203][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 468.376363][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.396516][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.414116][ T1207] kernel write not supported for file /sequencer (pid: 1207 comm: kworker/0:2) [ 468.423514][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 468.453291][ T9] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 468.463153][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.492354][ T9] usb 7-1: config 0 descriptor?? [ 468.541788][ T30] audit: type=1326 audit(1754923076.044:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27934 comm="syz.2.7044" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6d1f8ebe9 code=0x0 [ 468.935925][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0070/input/input134 [ 469.012216][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0070/input/input135 [ 469.033978][ T9] kye 0003:0458:5011.0070: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 469.128223][T12865] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 469.195008][ T9] usb 7-1: USB disconnect, device number 75 [ 469.289505][T12865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.301013][T12865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.311981][T12865] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 469.322855][T12865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.335432][T12865] usb 5-1: config 0 descriptor?? [ 469.413756][T27972] kernel read not supported for file /z¿ (pid: 27972 comm: syz.2.7060) [ 469.424519][ T30] audit: type=1800 audit(1754923076.924:1248): pid=27972 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.7060" name=7ABF17 dev="mqueue" ino=93513 res=0 errno=0 [ 469.600616][ T1207] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 469.760949][ T1207] usb 8-1: Using ep0 maxpacket: 8 [ 469.772502][T12865] cp2112 0003:10C4:EA90.0071: unknown main item tag 0x0 [ 469.791098][ T1207] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 469.808466][ T1207] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 469.808930][T12865] cp2112 0003:10C4:EA90.0071: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 469.835523][ T1207] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 469.867559][ T1207] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 469.883723][ T1207] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.900652][ T1207] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 469.910529][ T1207] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.966879][ T30] audit: type=1326 audit(1754923077.464:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28006 comm="syz.5.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a51f8ebe9 code=0x7ffc0000 [ 469.993005][ T30] audit: type=1326 audit(1754923077.464:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28006 comm="syz.5.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a51f8ebe9 code=0x7ffc0000 [ 469.995166][T12865] cp2112 0003:10C4:EA90.0071: Part Number: 0x82 Device Version: 0xFE [ 470.037427][ T30] audit: type=1326 audit(1754923077.494:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28006 comm="syz.5.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8a51f8ebe9 code=0x7ffc0000 [ 470.066839][ T30] audit: type=1326 audit(1754923077.494:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28006 comm="syz.5.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a51f8ebe9 code=0x7ffc0000 [ 470.090329][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.097791][ T30] audit: type=1326 audit(1754923077.494:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28006 comm="syz.5.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a51f8ebe9 code=0x7ffc0000 [ 470.121253][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.129332][ T30] audit: type=1326 audit(1754923077.534:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28006 comm="syz.5.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8a51f8ebe9 code=0x7ffc0000 [ 470.153058][T12830] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 470.168697][ T1207] usb 8-1: GET_CAPABILITIES returned 0 [ 470.174866][ T1207] usbtmc 8-1:16.0: can't read capabilities [ 470.196587][T12865] cp2112 0003:10C4:EA90.0071: error requesting SMBus config [ 470.209883][T12865] cp2112 0003:10C4:EA90.0071: probe with driver cp2112 failed with error -71 [ 470.244285][T12865] usb 5-1: USB disconnect, device number 84 [ 470.256392][ T30] audit: type=1326 audit(1754923077.754:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28006 comm="syz.5.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a51f8ebe9 code=0x7ffc0000 [ 470.322563][T12830] usb 3-1: Using ep0 maxpacket: 16 [ 470.329320][T12830] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 470.337511][T12830] usb 3-1: config 0 has no interface number 0 [ 470.347700][T12830] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 470.357297][T12830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.369370][ T1207] usb 8-1: USB disconnect, device number 42 [ 470.381319][T12830] usb 3-1: Product: syz [ 470.386821][T12830] usb 3-1: Manufacturer: syz [ 470.391583][T12830] usb 3-1: SerialNumber: syz [ 470.398797][T12830] usb 3-1: config 0 descriptor?? [ 470.406396][T12830] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 470.575481][T28033] netlink: 'syz.5.7085': attribute type 1 has an invalid length. [ 470.583609][T28033] netlink: 172 bytes leftover after parsing attributes in process `syz.5.7085'. [ 470.593233][T28033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7085'. [ 470.980368][T12865] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 471.138906][T12865] usb 6-1: Using ep0 maxpacket: 32 [ 471.145480][T12865] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 471.155201][T12865] usb 6-1: config 0 has no interface number 0 [ 471.162900][T12865] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 471.172073][T12865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.180274][T12865] usb 6-1: Product: syz [ 471.184467][T12865] usb 6-1: Manufacturer: syz [ 471.189380][T12865] usb 6-1: SerialNumber: syz [ 471.195695][T12865] usb 6-1: config 0 descriptor?? [ 471.202493][T12865] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 471.398667][ T1207] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 471.413377][T12830] gspca_spca1528: reg_w err -71 [ 471.415560][T12865] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 471.419066][T12830] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 471.433107][T12865] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 471.437962][T12830] usb 3-1: USB disconnect, device number 92 [ 471.558173][ T1207] usb 8-1: Using ep0 maxpacket: 32 [ 471.564752][ T1207] usb 8-1: config 0 interface 0 has no altsetting 0 [ 471.573429][ T1207] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 471.582751][ T1207] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.590856][ T1207] usb 8-1: Product: syz [ 471.595009][ T1207] usb 8-1: Manufacturer: syz [ 471.599602][ T1207] usb 8-1: SerialNumber: syz [ 471.605907][ T1207] usb 8-1: config 0 descriptor?? [ 471.835858][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 471.836205][T12830] usb 6-1: USB disconnect, device number 67 [ 471.851340][T12830] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 471.864421][T12830] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 471.875915][T12830] quatech2 6-1:0.51: device disconnected [ 472.018690][ T1207] gs_usb 8-1:0.0: Configuring for 2 interfaces [ 472.424436][T28092] syz.5.7109 (28092): /proc/28091/oom_adj is deprecated, please use /proc/28091/oom_score_adj instead. [ 472.476017][T28096] netlink: 'syz.5.7111': attribute type 29 has an invalid length. [ 472.484960][T28096] netlink: 'syz.5.7111': attribute type 29 has an invalid length. [ 472.497200][T28096] netlink: 500 bytes leftover after parsing attributes in process `syz.5.7111'. [ 472.621462][ T1207] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 472.680032][ T1207] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -71 [ 472.686938][T28103] syz.5.7114: attempt to access beyond end of device [ 472.686938][T28103] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 472.691909][ T1207] usb 8-1: USB disconnect, device number 43 [ 472.707405][T28103] FAT-fs (loop11): unable to read boot sector [ 473.192561][T28124] syzkaller1: entered promiscuous mode [ 473.199314][T28124] syzkaller1: entered allmulticast mode [ 473.491201][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 473.491218][ T30] audit: type=1400 audit(1754923080.984:1278): avc: denied { mounton } for pid=28140 comm="syz.5.7130" path="/1314/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 473.628067][T28150] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 473.641741][T28150] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 473.656525][T28150] overlayfs: failed to set uuid (1502/file1, err=-13); falling back to uuid=null. [ 473.745478][T28152] input: syz1 as /devices/virtual/input/input136 [ 474.118393][ T1207] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 474.241068][T28173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7146'. [ 474.290380][ T1207] usb 7-1: Using ep0 maxpacket: 8 [ 474.300791][ T1207] usb 7-1: config 0 has no interfaces? [ 474.306447][ T1207] usb 7-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 474.328372][ T1207] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.339929][ T1207] usb 7-1: config 0 descriptor?? [ 474.447316][T28190] netlink: 'syz.7.7153': attribute type 13 has an invalid length. [ 474.460525][T28190] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 474.473450][T28190] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 474.481620][T28190] gretap1: entered promiscuous mode [ 474.486959][T28190] gretap1: entered allmulticast mode [ 474.564727][ T1207] usb 7-1: USB disconnect, device number 76 [ 474.596696][ T30] audit: type=1326 audit(1754923082.094:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28197 comm="syz.5.7157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a51f8ebe9 code=0x0 [ 474.648606][T12865] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 474.809527][T12865] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 474.817726][T12865] usb 5-1: config 0 has no interface number 0 [ 474.824095][T12865] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 474.836927][T12865] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 474.846260][T12865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.854316][T12865] usb 5-1: Product: syz [ 474.858517][T12865] usb 5-1: Manufacturer: syz [ 474.863101][T12865] usb 5-1: SerialNumber: syz [ 474.869595][T12865] usb 5-1: config 0 descriptor?? [ 474.877100][T12865] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 475.299692][T12830] usb 5-1: USB disconnect, device number 85 [ 475.306826][T12830] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 475.350462][ T1207] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 475.498541][ T9] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 475.518299][ T1207] usb 7-1: Using ep0 maxpacket: 16 [ 475.525905][ T1207] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 475.550233][ T1207] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 475.564982][ T1207] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.573708][ T1207] usb 7-1: Product: syz [ 475.581401][ T1207] usb 7-1: Manufacturer: syz [ 475.586091][ T1207] usb 7-1: SerialNumber: syz [ 475.596867][ T1207] usb 7-1: config 0 descriptor?? [ 475.610349][ T1207] hub 7-1:0.0: bad descriptor, ignoring hub [ 475.616268][ T1207] hub 7-1:0.0: probe with driver hub failed with error -5 [ 475.635973][ T1207] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 475.648449][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 475.656491][ T9] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 475.668806][ T9] usb 3-1: config 0 has no interface number 0 [ 475.675751][ T9] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 475.690021][ T9] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 475.708018][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 475.717613][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.726991][ T9] usb 3-1: Product: syz [ 475.733272][ T9] usb 3-1: Manufacturer: syz [ 475.738062][ T9] usb 3-1: SerialNumber: syz [ 475.743928][ T30] audit: type=1400 audit(1754923083.244:1280): avc: denied { ioctl } for pid=28222 comm="syz.7.7168" path="socket:[94133]" dev="sockfs" ino=94133 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 475.773199][ T9] usb 3-1: config 0 descriptor?? [ 475.779096][T28211] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 475.786486][T28211] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 476.000737][T28211] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 476.025962][T28211] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 476.180135][ T5847] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 476.445862][ T9] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 476.457137][ T9] asix 3-1:0.251: probe with driver asix failed with error -524 [ 476.518331][T12865] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 476.655267][ T5844] usb 3-1: USB disconnect, device number 93 [ 476.673512][T12865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.690403][T12865] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 476.705531][T28257] input: syz0 as /devices/virtual/input/input137 [ 476.711088][T12865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.723152][T12865] usb 6-1: config 0 descriptor?? [ 477.130718][ T30] audit: type=1326 audit(1754923084.634:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28268 comm="syz.4.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 477.139297][T12865] lg-g15 0003:046D:C222.0072: unknown main item tag 0x0 [ 477.154209][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.179832][T12865] lg-g15 0003:046D:C222.0072: unknown main item tag 0x0 [ 477.186848][T12865] lg-g15 0003:046D:C222.0072: unknown main item tag 0x0 [ 477.198011][T12865] lg-g15 0003:046D:C222.0072: unknown main item tag 0x0 [ 477.205552][T12865] lg-g15 0003:046D:C222.0072: unknown main item tag 0x0 [ 477.215178][T12865] lg-g15 0003:046D:C222.0072: unknown main item tag 0x0 [ 477.238230][T12865] lg-g15 0003:046D:C222.0072: unknown main item tag 0x0 [ 477.238448][ T30] audit: type=1326 audit(1754923084.634:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28268 comm="syz.4.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 477.254357][T12865] lg-g15 0003:046D:C222.0072: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0 [ 477.309907][T28271] loop6: detected capacity change from 0 to 65535 [ 477.328039][ T30] audit: type=1326 audit(1754923084.634:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28268 comm="syz.4.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 477.354911][ T30] audit: type=1326 audit(1754923084.634:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28268 comm="syz.4.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 477.379059][ T30] audit: type=1326 audit(1754923084.634:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28268 comm="syz.4.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 477.433969][T12866] usb 6-1: USB disconnect, device number 68 [ 477.458652][ T30] audit: type=1326 audit(1754923084.714:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28268 comm="syz.4.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 477.504455][ T30] audit: type=1326 audit(1754923084.714:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28268 comm="syz.4.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 477.739554][ T5844] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 477.903467][ T5844] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 477.915924][ T5844] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 477.925355][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.945426][ T5844] usb 5-1: Product: syz [ 477.964693][ T5844] usb 5-1: Manufacturer: syz [ 477.978257][ T5844] usb 5-1: SerialNumber: syz [ 477.987638][ T5844] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 478.026050][T28284] fuse: Invalid gid '00000000000037777777777' [ 478.154135][T12866] usb 7-1: USB disconnect, device number 77 [ 478.402181][ T5844] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 478.421254][ T5844] usb 5-1: USB disconnect, device number 86 [ 478.461186][T28306] loop6: detected capacity change from 0 to 65535 [ 478.658453][ T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 478.758482][ T1207] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 478.808449][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 478.820322][ T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 478.829606][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.841161][ T9] usb 3-1: config 0 descriptor?? [ 478.929765][ T1207] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 478.948161][ T1207] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 478.968582][ T1207] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 478.977687][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.999539][T28308] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 479.009876][ T1207] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 479.054350][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 479.128328][ T5844] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 479.291911][ T5844] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 479.316233][T12830] usb 6-1: USB disconnect, device number 69 [ 479.317259][ T5844] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 479.356199][ T5844] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 479.378462][ T5844] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 479.410827][ T5844] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 479.438331][ T5844] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.454711][ T5844] usb 8-1: config 0 descriptor?? [ 479.468473][ T1207] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 479.630889][ T1207] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.648223][ T1207] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.659746][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 479.671673][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 479.688475][ T1207] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 479.699250][ T1207] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.719051][ T1207] usb 7-1: config 0 descriptor?? [ 479.725021][ T9] asix 3-1:0.0: probe with driver asix failed with error -71 [ 479.737375][ T9] usb 3-1: USB disconnect, device number 94 [ 479.908915][ T5844] plantronics 0003:047F:FFFF.0073: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 480.118545][T12838] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 480.141494][ T1207] cp2112 0003:10C4:EA90.0074: unknown main item tag 0x0 [ 480.149712][ T1207] cp2112 0003:10C4:EA90.0074: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 480.190333][ T9] usb 8-1: USB disconnect, device number 44 [ 480.270166][T12838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.281362][T12838] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 480.291820][T12838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.302230][T12838] usb 5-1: config 0 descriptor?? [ 480.342416][ T1207] cp2112 0003:10C4:EA90.0074: Part Number: 0x82 Device Version: 0xFE [ 480.440729][T28336] syz_tun: entered allmulticast mode [ 480.446777][T28336] syz_tun: left allmulticast mode [ 480.552670][ T1207] cp2112 0003:10C4:EA90.0074: error requesting SMBus config [ 480.562283][ T1207] cp2112 0003:10C4:EA90.0074: probe with driver cp2112 failed with error -71 [ 480.574563][ T1207] usb 7-1: USB disconnect, device number 78 [ 480.724651][T12838] prodikeys 0003:041E:2801.0075: unknown main item tag 0x0 [ 480.732429][T12838] prodikeys 0003:041E:2801.0075: unknown main item tag 0x0 [ 480.742093][T12838] prodikeys 0003:041E:2801.0075: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input0 [ 480.940902][ T1207] usb 5-1: USB disconnect, device number 87 [ 481.281554][T28348] netlink: 'syz.6.7219': attribute type 13 has an invalid length. [ 481.313012][T28348] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 481.339305][T28348] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 481.347066][T28348] gretap1: entered promiscuous mode [ 481.358249][T28348] gretap1: entered allmulticast mode [ 481.453209][T28352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.826486][T28377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.947174][T28382] netlink: 'syz.4.7233': attribute type 13 has an invalid length. [ 481.959108][T28382] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 481.970299][T28382] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 481.977994][T28382] gretap1: entered promiscuous mode [ 481.983475][T28382] gretap1: entered allmulticast mode [ 482.108227][ T5844] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 482.258280][ T5844] usb 8-1: Using ep0 maxpacket: 16 [ 482.264829][ T5844] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.276025][ T5844] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 482.289370][ T5844] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 482.298450][ T5844] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.307752][ T5844] usb 8-1: config 0 descriptor?? [ 482.540669][T12830] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 482.646510][T28402] netlink: 'syz.5.7251': attribute type 10 has an invalid length. [ 482.708219][T12830] usb 5-1: Using ep0 maxpacket: 16 [ 482.715040][T28369] raw-gadget.0 gadget.7: fail, usb_ep_set_halt returned -11 [ 482.727690][T12830] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.735671][ T5844] usbhid 8-1:0.0: can't add hid device: -71 [ 482.740496][T12830] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.758085][ T5844] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 482.778250][T12830] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 482.781782][ T5844] usb 8-1: USB disconnect, device number 45 [ 482.794995][T12830] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 482.849305][T12830] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 482.863694][T12830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 482.874104][T12830] usb 5-1: SerialNumber: syz [ 482.887030][T12830] hub 5-1:1.0: bad descriptor, ignoring hub [ 482.895242][T12830] hub 5-1:1.0: probe with driver hub failed with error -5 [ 482.953458][T12830] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 483.011878][T28420] netlink: 'syz.5.7245': attribute type 13 has an invalid length. [ 483.051824][T28420] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 483.074537][T28420] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 483.082836][T28420] gretap2: entered promiscuous mode [ 483.090686][T28420] gretap2: entered allmulticast mode [ 483.490723][T28436] input input139: cannot allocate more than FF_MAX_EFFECTS effects [ 483.988198][T12830] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 484.159732][T12830] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 484.181609][T12830] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 484.196086][T12830] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 484.205511][T12830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.216428][T28451] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 484.229486][T12830] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 484.472632][T12830] usb 7-1: USB disconnect, device number 79 [ 485.199903][T12830] usb 5-1: USB disconnect, device number 88 [ 485.788307][ T5844] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 485.808202][T12866] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 485.838208][T12830] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 485.944924][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.957223][ T5844] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 485.966462][T12866] usb 7-1: Using ep0 maxpacket: 16 [ 485.971741][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.984267][T12866] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 485.994607][T12866] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 486.003451][ T5844] usb 5-1: config 0 descriptor?? [ 486.009493][T12866] usb 7-1: Product: syz [ 486.016060][T12866] usb 7-1: Manufacturer: syz [ 486.024954][T12830] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 486.025123][T12866] usb 7-1: SerialNumber: syz [ 486.034963][T12830] usb 8-1: config 0 has no interface number 0 [ 486.044441][T12830] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.049219][T12866] usb 7-1: config 0 descriptor?? [ 486.055698][T12830] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.072119][T12830] usb 8-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 486.081223][T12830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.090960][T12830] usb 8-1: config 0 descriptor?? [ 486.335438][T12838] usb 7-1: USB disconnect, device number 80 [ 486.428994][ T5844] keytouch 0003:0926:3333.0076: fixing up Keytouch IEC report descriptor [ 486.441008][ T5844] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0076/input/input140 [ 486.506769][T12830] hid_parser_main: 5 callbacks suppressed [ 486.506782][T12830] prodikeys 0003:041E:2801.0077: unknown main item tag 0x0 [ 486.520850][T12830] prodikeys 0003:041E:2801.0077: unknown main item tag 0x0 [ 486.528140][T12830] prodikeys 0003:041E:2801.0077: unknown main item tag 0x0 [ 486.535450][T12830] prodikeys 0003:041E:2801.0077: unknown main item tag 0x0 [ 486.542951][T12830] prodikeys 0003:041E:2801.0077: unknown main item tag 0x0 [ 486.548476][ T5844] keytouch 0003:0926:3333.0076: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 486.550842][T12830] prodikeys 0003:041E:2801.0077: unknown main item tag 0x0 [ 486.570638][T12830] prodikeys 0003:041E:2801.0077: unknown main item tag 0x0 [ 486.585441][T12830] prodikeys 0003:041E:2801.0077: hidraw1: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.7-1/input1 [ 486.601062][T12830] hid_prodikeys: hid-prodikeys: failed to find output report [ 486.601062][T12830] [ 486.628534][T12866] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 486.664467][T28524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.673446][T28524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.741064][T12830] usb 8-1: USB disconnect, device number 46 [ 486.779532][T12866] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.791831][T12866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 486.802971][T12866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 486.812842][T12866] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 486.826680][T12866] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 486.836442][T12866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.843480][T28551] netlink: 'syz.2.7298': attribute type 10 has an invalid length. [ 486.849213][T12866] usb 6-1: config 0 descriptor?? [ 487.013685][ T5844] usb 5-1: USB disconnect, device number 89 [ 487.272163][T12866] plantronics 0003:047F:FFFF.0078: ignoring exceeding usage max [ 487.294352][T12866] plantronics 0003:047F:FFFF.0078: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 487.330241][T28567] netlink: 'syz.7.7305': attribute type 10 has an invalid length. [ 487.340084][T28567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.352112][T28567] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 487.372195][T28567] bond0: entered promiscuous mode [ 487.377332][T28567] bond_slave_0: entered promiscuous mode [ 487.386782][T28567] bond_slave_1: entered promiscuous mode [ 487.396666][T28567] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 487.404933][T28567] batadv0: entered promiscuous mode [ 487.447293][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 487.447309][ T30] audit: type=1326 audit(1754923094.944:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28568 comm="syz.2.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d1f8ebe9 code=0x7ffc0000 [ 487.480069][ T30] audit: type=1326 audit(1754923094.984:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28568 comm="syz.2.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6d1f8ebe9 code=0x7ffc0000 [ 487.505972][ T30] audit: type=1326 audit(1754923094.984:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28568 comm="syz.2.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d1f8ebe9 code=0x7ffc0000 [ 487.566197][ T30] audit: type=1326 audit(1754923094.984:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28568 comm="syz.2.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d1f8ebe9 code=0x7ffc0000 [ 487.589978][ T30] audit: type=1326 audit(1754923094.984:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28568 comm="syz.2.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6d1f8ebe9 code=0x7ffc0000 [ 487.614312][ T30] audit: type=1326 audit(1754923095.034:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28568 comm="syz.2.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d1f8ebe9 code=0x7ffc0000 [ 487.675931][ T30] audit: type=1326 audit(1754923095.034:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28568 comm="syz.2.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d1f8ebe9 code=0x7ffc0000 [ 487.712783][ T30] audit: type=1326 audit(1754923095.034:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28568 comm="syz.2.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe6d1f8ebe9 code=0x7ffc0000 [ 487.736304][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.746684][ T30] audit: type=1326 audit(1754923095.034:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28568 comm="syz.2.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d1f8ebe9 code=0x7ffc0000 [ 487.770189][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.798998][ T30] audit: type=1326 audit(1754923095.034:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28568 comm="syz.2.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d1f8ebe9 code=0x7ffc0000 [ 487.822505][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.833195][T28580] netlink: 'syz.4.7310': attribute type 10 has an invalid length. [ 487.895411][T28580] dummy0: entered promiscuous mode [ 487.909490][T28580] dummy0: entered allmulticast mode [ 487.918547][T12830] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 488.090719][T12830] usb 8-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 488.103268][T12830] usb 8-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.113402][T12830] usb 8-1: config 0 interface 0 has no altsetting 0 [ 488.120118][T12830] usb 8-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 488.129549][T12838] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 488.137133][T12830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.148587][T12830] usb 8-1: config 0 descriptor?? [ 488.158405][T12866] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 488.288372][T12838] usb 3-1: Using ep0 maxpacket: 16 [ 488.296651][T12838] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 488.306160][T12838] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 488.314309][T12838] usb 3-1: Product: syz [ 488.320030][T12838] usb 3-1: Manufacturer: syz [ 488.320833][T12866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.324706][T12838] usb 3-1: SerialNumber: syz [ 488.326914][T12838] usb 3-1: config 0 descriptor?? [ 488.339657][T12866] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 488.357443][T12866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.358355][ T1207] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 488.372057][T12866] usb 7-1: config 0 descriptor?? [ 488.530522][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.541813][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.551651][ T1207] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 488.560773][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.571679][ T1207] usb 5-1: config 0 descriptor?? [ 488.585159][T12830] uclogic 0003:5543:0064.0079: item fetching failed at offset 5/7 [ 488.595987][T12830] uclogic 0003:5543:0064.0079: parse failed [ 488.602342][T12830] uclogic 0003:5543:0064.0079: probe with driver uclogic failed with error -22 [ 488.606180][T12865] usb 3-1: USB disconnect, device number 95 [ 488.792686][T12866] prodikeys 0003:041E:2801.007A: unknown main item tag 0x0 [ 488.800129][T12866] prodikeys 0003:041E:2801.007A: unknown main item tag 0x0 [ 488.807347][T12866] prodikeys 0003:041E:2801.007A: unknown main item tag 0x0 [ 488.813110][T12830] usb 8-1: USB disconnect, device number 47 [ 488.825341][T12866] prodikeys 0003:041E:2801.007A: hidraw1: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.6-1/input0 [ 489.020189][T12866] usb 7-1: USB disconnect, device number 81 [ 489.185858][ T1207] usb 5-1: string descriptor 0 read error: -22 [ 489.236449][T28599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7319'. [ 489.250704][T28599] ubi31: attaching mtd0 [ 489.255631][T28599] ubi31 error: ubi_attach_mtd_dev: bad VID header (1073807368) or data offsets (1073807432) [ 489.360563][ T5844] usb 6-1: USB disconnect, device number 70 [ 489.397616][ T1207] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.007B/input/input141 [ 489.528280][T12866] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 489.551122][ T1207] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.007B/input/input142 [ 489.566916][ T1207] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.007B/input/input143 [ 489.583980][ T1207] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.007B/input/input144 [ 489.604527][ T1207] uclogic 0003:256C:006D.007B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 489.620285][ T1207] usb 5-1: USB disconnect, device number 90 [ 489.680360][T12866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.691392][T12866] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 489.700616][T12866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.710686][T12866] usb 3-1: config 0 descriptor?? [ 489.738613][T12838] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 489.798226][ T5844] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 489.891807][T12838] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 489.903552][T12838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 489.914517][T12838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 489.924535][T12838] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 489.937535][T12838] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 489.946679][T12838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.949742][ T5844] usb 6-1: config 0 has no interfaces? [ 489.960819][ T5844] usb 6-1: New USB device found, idVendor=0919, idProduct=3333, bcdDevice= 0.40 [ 489.962010][T12838] usb 8-1: config 0 descriptor?? [ 489.970094][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.984698][ T5844] usb 6-1: config 0 descriptor?? [ 490.126567][T12866] keytouch 0003:0926:3333.007C: fixing up Keytouch IEC report descriptor [ 490.139958][T12866] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.007C/input/input145 [ 490.206070][T28617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.215188][T28617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.228613][T28617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.230138][T12866] keytouch 0003:0926:3333.007C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 490.237277][T28617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.266598][ T1207] usb 6-1: USB disconnect, device number 71 [ 490.371687][T28603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.392176][T12838] plantronics 0003:047F:FFFF.007D: ignoring exceeding usage max [ 490.398955][T28603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.427702][T12838] plantronics 0003:047F:FFFF.007D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 490.718194][T12838] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 490.795757][ T1207] usb 3-1: USB disconnect, device number 96 [ 490.889896][T12838] usb 6-1: config index 0 descriptor too short (expected 72, got 36) [ 490.907613][T12838] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 490.926822][T12838] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 490.940325][T12838] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 490.961165][T12838] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 490.970341][T12838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.978639][T12838] usb 6-1: Product: syz [ 490.982847][T12838] usb 6-1: Manufacturer: syz [ 490.987456][T12838] usb 6-1: SerialNumber: syz [ 491.273431][T12838] usb 6-1: USB disconnect, device number 72 [ 491.288441][T12866] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 491.459888][T12866] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.475405][T12866] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 491.487898][T12866] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 491.501744][T12866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.510753][T12866] usb 7-1: Product: syz [ 491.516184][T12866] usb 7-1: Manufacturer: syz [ 491.523308][T12866] usb 7-1: SerialNumber: syz [ 491.549304][T12866] cdc_mbim 7-1:1.0: skipping garbage [ 491.629702][ T5844] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 491.633292][T28665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7346'. [ 491.767770][T28649] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 491.796081][T28670] netlink: 'syz.4.7349': attribute type 10 has an invalid length. [ 491.805165][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 491.812243][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.832235][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.845886][ T5844] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 491.855053][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.867019][ T5844] usb 3-1: config 0 descriptor?? [ 492.297101][ T5844] savu 0003:1E7D:2D5A.007E: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 492.392088][T28649] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 492.402661][T12866] cdc_mbim 7-1:1.0: setting rx_max = 16384 [ 492.416607][T28699] loop8: detected capacity change from 0 to 8 [ 492.434976][T28699] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 492.452342][T28699] loop8: partition table partially beyond EOD, truncated [ 492.461993][T28699] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 492.502865][ T976] usb 8-1: USB disconnect, device number 48 [ 492.528974][T12838] usb 3-1: USB disconnect, device number 97 [ 492.603329][T12866] cdc_mbim 7-1:1.0: setting tx_max = 184 [ 492.612261][T12866] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 492.634782][T12866] wwan wwan0: port wwan0mbim0 attached [ 492.648967][T12866] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 1a:49:e3:98:ef:73 [ 492.681267][T12866] usb 7-1: USB disconnect, device number 82 [ 492.698816][T12866] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 492.776619][T28708] batman_adv: batadv0: Interface deactivated: gretap1 [ 492.785342][T12866] wwan wwan0: port wwan0mbim0 disconnected [ 492.799933][T28708] bond1: left promiscuous mode [ 492.810595][T28708] bond2: left promiscuous mode [ 492.837703][T28708] gretap2: left promiscuous mode [ 492.868200][ T7369] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 492.876810][ T7369] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 492.894680][ T7369] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 492.913769][ T7369] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 493.140429][T28724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7380'. [ 493.163626][T28720] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 493.365185][T28737] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 493.534207][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 493.534222][ T30] audit: type=1400 audit(1754923357.041:1305): avc: denied { listen } for pid=28749 comm="syz.6.7382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 493.561050][ T30] audit: type=1400 audit(1754923357.041:1306): avc: denied { accept } for pid=28749 comm="syz.6.7382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 493.706825][T28759] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 493.739409][T28745] team0 (unregistering): Port device team_slave_0 removed [ 493.750261][T28745] team0 (unregistering): Port device team_slave_1 removed [ 493.791385][T28745] team0 (unregistering): Port device geneve0 removed [ 493.805458][T28765] netlink: 'syz.5.7387': attribute type 10 has an invalid length. [ 493.836447][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.850404][T28765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.863173][T28765] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 493.919849][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.943922][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.965314][T28762] bond0: entered promiscuous mode [ 493.973011][T28762] bond_slave_0: entered promiscuous mode [ 493.979223][T28762] bond_slave_1: entered promiscuous mode [ 493.985113][T28762] batadv0: entered promiscuous mode [ 493.991103][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.158454][T12838] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 494.328614][T12838] usb 3-1: Using ep0 maxpacket: 32 [ 494.337857][T12838] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 494.365523][T12838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.398834][T12838] usb 3-1: config 0 descriptor?? [ 494.559467][T28796] block nbd5: NBD_DISCONNECT [ 494.568799][T28796] block nbd5: Send disconnect failed -22 [ 494.575074][ T30] audit: type=1400 audit(1754923358.061:1307): avc: denied { write } for pid=28795 comm="syz.5.7401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 494.576156][T28795] block nbd5: Disconnected due to user request. [ 494.602675][T28795] block nbd5: shutting down sockets [ 494.631978][T12838] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 494.642551][T12838] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 494.662410][T12838] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 494.679087][T12838] usb 3-1: media controller created [ 494.690161][ T1207] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 494.728812][T12838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 494.752432][T28802] netlink: 'syz.6.7404': attribute type 10 has an invalid length. [ 494.777636][T28802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.791984][T28802] batadv0: entered promiscuous mode [ 494.799271][T28802] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 494.809265][ T12] bond0: (slave batadv0): interface is now down [ 494.821185][ T12] bond0: now running without any active interface! [ 494.828615][T28804] sock: sock_set_timeout: `syz.5.7414' (pid 28804) tries to set negative timeout [ 494.851498][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.853182][T28807] overlayfs: workdir and upperdir must reside under the same mount [ 494.868605][T12838] az6027: usb out operation failed. (-71) [ 494.886471][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.896834][T12838] az6027: usb out operation failed. (-71) [ 494.908754][T12838] stb0899_attach: Driver disabled by Kconfig [ 494.917756][ T1207] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 494.934810][T28802] bond_slave_0: left promiscuous mode [ 494.941642][T12838] az6027: no front-end attached [ 494.941642][T12838] [ 494.952959][ T1207] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 494.962452][T12838] az6027: usb out operation failed. (-71) [ 494.971046][T28802] batadv0: left promiscuous mode [ 494.976048][T12838] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 494.983445][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.993403][T12838] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input146 [ 495.004922][T28802] bond0: entered promiscuous mode [ 495.012082][ T1207] usb 5-1: config 0 descriptor?? [ 495.017192][T28802] bond_slave_0: entered promiscuous mode [ 495.024943][T12838] dvb-usb: schedule remote query interval to 400 msecs. [ 495.034462][T28802] batadv0: entered promiscuous mode [ 495.039780][T12838] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 495.064745][T12838] usb 3-1: USB disconnect, device number 98 [ 495.150594][T12838] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 495.186953][T28815] geneve2: entered promiscuous mode [ 495.192396][T28815] geneve2: entered allmulticast mode [ 495.238380][T12866] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 495.388554][T12866] usb 8-1: Using ep0 maxpacket: 16 [ 495.408741][T12866] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 495.417830][T12866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.433600][T12866] usb 8-1: config 0 descriptor?? [ 495.436748][ T1207] plantronics 0003:047F:FFFF.007F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 495.453551][T12866] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 495.648620][T12838] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 495.730396][ T1207] usb 5-1: USB disconnect, device number 91 [ 495.822762][T12838] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 495.833094][T12838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.846495][T12838] usb 6-1: config 0 descriptor?? [ 495.853612][T12838] cp210x 6-1:0.0: cp210x converter detected [ 496.257414][T12838] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 496.487993][T12838] usb 6-1: cp210x converter now attached to ttyUSB0 [ 496.501060][ T1207] usb 8-1: USB disconnect, device number 49 [ 496.690735][T12866] usb 6-1: USB disconnect, device number 73 [ 496.708662][T12866] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 496.729134][T12866] cp210x 6-1:0.0: device disconnected [ 497.195372][T28835] Set syz1 is full, maxelem 65536 reached [ 497.281800][ T30] audit: type=1326 audit(1754923360.781:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28841 comm="syz.6.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7878ebe9 code=0x7ffc0000 [ 497.305293][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.324369][ T30] audit: type=1326 audit(1754923360.781:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28841 comm="syz.6.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7878ebe9 code=0x7ffc0000 [ 497.338276][T28844] netlink: 'syz.2.7420': attribute type 10 has an invalid length. [ 497.352423][ T30] audit: type=1326 audit(1754923360.781:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28841 comm="syz.6.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8f7878ebe9 code=0x7ffc0000 [ 497.446124][ T30] audit: type=1326 audit(1754923360.781:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28841 comm="syz.6.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7878ebe9 code=0x7ffc0000 [ 497.469622][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.520360][ T30] audit: type=1326 audit(1754923360.781:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28841 comm="syz.6.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7878ebe9 code=0x7ffc0000 [ 497.572391][ T30] audit: type=1326 audit(1754923360.781:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28841 comm="syz.6.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f8f7878ebe9 code=0x7ffc0000 [ 497.743996][T12866] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 497.926375][T28879] syzkaller1: entered promiscuous mode [ 497.947185][T28879] syzkaller1: entered allmulticast mode [ 497.951424][T12866] usb 5-1: Using ep0 maxpacket: 32 [ 497.979158][T12866] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 497.994646][T12866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.020265][T12866] usb 5-1: config 0 descriptor?? [ 498.236497][T12866] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 498.258797][T12866] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 498.277327][T12866] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 498.285215][T12866] usb 5-1: media controller created [ 498.309135][T12866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 498.447270][T12866] az6027: usb out operation failed. (-71) [ 498.462682][T12866] az6027: usb out operation failed. (-71) [ 498.474655][T12866] stb0899_attach: Driver disabled by Kconfig [ 498.485672][T12866] az6027: no front-end attached [ 498.485672][T12866] [ 498.497616][T12866] az6027: usb out operation failed. (-71) [ 498.514176][T12866] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 498.528705][T12866] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input147 [ 498.542047][T12866] dvb-usb: schedule remote query interval to 400 msecs. [ 498.549198][T12866] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 498.559945][T12866] usb 5-1: USB disconnect, device number 92 [ 498.586438][T12866] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 498.744964][ T30] audit: type=1400 audit(1754923362.241:1314): avc: denied { ioctl } for pid=28928 comm="syz.6.7462" path="socket:[99478]" dev="sockfs" ino=99478 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 498.752630][T28929] netdevsim netdevsim6: Direct firmware load for ..€ failed with error -2 [ 498.782165][T28929] netdevsim netdevsim6: Falling back to sysfs fallback for: ..€ [ 499.148895][T28943] team0 (unregistering): Port device team_slave_0 removed [ 499.157404][T28943] team0 (unregistering): Port device team_slave_1 removed [ 499.366603][T28961] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7476'. [ 499.378822][T28961] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7476'. [ 499.390449][T28961] netlink: 50 bytes leftover after parsing attributes in process `syz.7.7476'. [ 499.549627][ T976] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 499.577053][T28932] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 499.583142][T28932] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 499.618629][T12865] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 499.698335][ T5844] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 499.706642][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 499.714900][ T976] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 499.723318][ T976] usb 5-1: config 0 has no interface number 0 [ 499.729849][ T976] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 499.740935][ T976] usb 5-1: config 0 interface 85 has no altsetting 0 [ 499.751327][ T976] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 499.768639][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.776632][ T976] usb 5-1: Product: syz [ 499.786734][ T976] usb 5-1: Manufacturer: syz [ 499.791703][ T976] usb 5-1: SerialNumber: syz [ 499.797529][T12865] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 499.807752][T12865] usb 3-1: config 0 has no interface number 1 [ 499.814615][ T976] usb 5-1: config 0 descriptor?? [ 499.819852][T12865] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 499.832600][T12865] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 499.845745][T12865] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 499.854909][T12865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 499.866618][ T5844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 499.879034][T12865] usb 3-1: SerialNumber: syz [ 499.884980][ T5844] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 499.895030][T12865] usb 3-1: config 0 descriptor?? [ 499.899599][ T30] audit: type=1326 audit(1754923363.401:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28974 comm="syz.7.7482" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fecabf8ebe9 code=0x0 [ 499.900025][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.922784][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.941798][ T5844] usb 6-1: config 0 descriptor?? [ 499.947255][T28969] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 500.128174][ T1207] usb 7-1: new full-speed USB device number 83 using dummy_hcd [ 500.140732][T12865] usb 3-1: Found UVC 0.00 device (0002:0000) [ 500.147720][T12865] usb 3-1: No valid video chain found. [ 500.161884][T12865] usb 3-1: USB disconnect, device number 99 [ 500.280253][ T1207] usb 7-1: unable to get BOS descriptor or descriptor too short [ 500.288703][ T1207] usb 7-1: not running at top speed; connect to a high speed hub [ 500.297324][ T1207] usb 7-1: config 1 has an invalid interface number: 138 but max is 0 [ 500.305525][ T1207] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.315680][ T1207] usb 7-1: config 1 has no interface number 0 [ 500.322090][ T1207] usb 7-1: config 1 interface 138 altsetting 252 endpoint 0xC has invalid wMaxPacketSize 0 [ 500.332221][ T1207] usb 7-1: config 1 interface 138 has no altsetting 0 [ 500.342585][ T1207] usb 7-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 500.352008][ T1207] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.360243][ T1207] usb 7-1: Product: syz [ 500.364414][ T1207] usb 7-1: Manufacturer: syz [ 500.367492][ T5844] pyra 0003:1E7D:2CF6.0080: item fetching failed at offset 2/3 [ 500.369054][ T1207] usb 7-1: SerialNumber: syz [ 500.382292][ T5844] pyra 0003:1E7D:2CF6.0080: parse failed [ 500.387983][ T5844] pyra 0003:1E7D:2CF6.0080: probe with driver pyra failed with error -22 [ 500.439600][ T976] appletouch 5-1:0.85: Geyser mode initialized. [ 500.446951][ T976] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input148 [ 500.598640][ T1207] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 500.624214][ T976] usb 6-1: USB disconnect, device number 74 [ 500.628662][ T1207] usb 7-1: USB disconnect, device number 83 [ 500.689779][ T5844] usb 5-1: USB disconnect, device number 93 [ 500.721893][ T5844] appletouch 5-1:0.85: input: appletouch disconnected [ 500.722908][T28988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7487'. [ 500.851002][T28996] syzkaller1: entered promiscuous mode [ 500.856875][T28996] syzkaller1: entered allmulticast mode [ 500.984470][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.045407][ T30] audit: type=1400 audit(1754923364.541:1316): avc: denied { accept } for pid=29006 comm="syz.7.7496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 501.087304][T29009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7497'. [ 501.388290][ T1207] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 501.500546][T29040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7510'. [ 501.552455][ T1207] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.574371][ T1207] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 501.584561][ T1207] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.599086][ T1207] usb 8-1: config 0 descriptor?? [ 501.608757][ T976] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 501.769363][ T976] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.779747][ T976] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 501.794431][ T976] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 501.804073][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.812142][ T976] usb 6-1: Product: syz [ 501.816303][ T976] usb 6-1: Manufacturer: syz [ 501.821025][ T976] usb 6-1: SerialNumber: syz [ 501.829035][T12830] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 501.888290][ T9] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 501.988277][T12830] usb 7-1: Using ep0 maxpacket: 32 [ 501.996279][T12830] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 502.005649][T12830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.016984][ T1207] keytouch 0003:0926:3333.0081: fixing up Keytouch IEC report descriptor [ 502.025875][T12830] usb 7-1: config 0 descriptor?? [ 502.035551][ T1207] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0081/input/input149 [ 502.050416][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 502.050885][T29030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.059173][ T9] usb 3-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 502.073429][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.075847][T29030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.081554][ T9] usb 3-1: Product: syz [ 502.093641][ T9] usb 3-1: Manufacturer: syz [ 502.098717][ T9] usb 3-1: SerialNumber: syz [ 502.108024][ T9] usb 3-1: config 0 descriptor?? [ 502.112774][ T976] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 502.124009][ T976] usb 6-1: USB disconnect, device number 75 [ 502.137389][ T1207] keytouch 0003:0926:3333.0081: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 502.234169][T29014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.243077][T29014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.266430][T12830] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 502.275136][T12830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 502.285239][T12830] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 502.292667][T12830] usb 7-1: media controller created [ 502.311266][T12830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 502.330349][ T9] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 502.354510][ T9] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 502.367909][ T9] usb 3-1: USB disconnect, device number 100 [ 502.470111][T12830] az6027: usb out operation failed. (-71) [ 502.476143][T12830] az6027: usb out operation failed. (-71) [ 502.481930][T12830] stb0899_attach: Driver disabled by Kconfig [ 502.487934][T12830] az6027: no front-end attached [ 502.487934][T12830] [ 502.495247][T12830] az6027: usb out operation failed. (-71) [ 502.501179][T12830] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 502.510260][T12830] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input150 [ 502.523041][T12830] dvb-usb: schedule remote query interval to 400 msecs. [ 502.530366][T12830] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 502.542105][T12830] usb 7-1: USB disconnect, device number 84 [ 502.574241][T12830] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 502.590771][ T976] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 502.654398][ T5844] usb 8-1: USB disconnect, device number 50 [ 502.654815][T29060] program syz.4.7520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 502.672617][T29060] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 502.763566][ T976] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 502.772044][ T976] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 502.782280][ T976] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 502.792047][ T976] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 502.803015][ T976] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 502.814539][ T976] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 502.825713][ T976] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 502.834954][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.860887][T29030] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 502.937278][T29071] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 503.098196][ T976] usb 6-1: usb_control_msg returned -71 [ 503.103803][ T976] usbtmc 6-1:16.0: can't read capabilities [ 503.126463][ T976] usb 6-1: USB disconnect, device number 76 [ 503.580552][T29102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7540'. [ 503.604028][T29102] openvswitch: netlink: nsh attr 179 is out of range max 3 [ 503.614092][T29102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.821765][T29122] netlink: 'syz.4.7548': attribute type 9 has an invalid length. [ 503.838148][T29122] netlink: 'syz.4.7548': attribute type 7 has an invalid length. [ 503.866849][T29122] netlink: 'syz.4.7548': attribute type 8 has an invalid length. [ 503.883939][T29124] binder: 29123:29124 ioctl c0306201 0 returned -14 [ 503.904659][T29124] binder: 29123:29124 ioctl c0306201 200000000540 returned -11 [ 504.022224][T29136] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7554'. [ 504.480645][ T30] audit: type=1326 audit(1754923367.971:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.4.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 504.504127][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.548247][ T30] audit: type=1326 audit(1754923367.971:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.4.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 504.571654][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.628633][ T30] audit: type=1326 audit(1754923367.971:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.4.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 504.652138][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.698653][ T30] audit: type=1326 audit(1754923367.971:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.4.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 504.722122][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.748566][ T30] audit: type=1326 audit(1754923367.981:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.4.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 504.772057][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.826232][ T30] audit: type=1326 audit(1754923367.981:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.4.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 504.958029][ T30] audit: type=1326 audit(1754923367.981:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.4.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 505.053707][ T30] audit: type=1326 audit(1754923367.981:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.4.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 505.083490][ T30] audit: type=1326 audit(1754923367.981:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.4.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 505.106964][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.114539][ T30] audit: type=1326 audit(1754923367.981:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29160 comm="syz.4.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 505.137988][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.210946][T29178] syzkaller1: entered promiscuous mode [ 505.216531][T29178] syzkaller1: entered allmulticast mode [ 505.238190][T12838] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 505.401484][T12838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.423910][T12838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.452725][T12838] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 505.462249][T12838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.489978][T12838] usb 5-1: config 0 descriptor?? [ 505.594137][T29205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.788721][T12830] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 505.846198][T29216] netlink: 'syz.6.7590': attribute type 12 has an invalid length. [ 505.857779][T29216] netlink: 'syz.6.7590': attribute type 29 has an invalid length. [ 505.868445][T29216] netlink: 148 bytes leftover after parsing attributes in process `syz.6.7590'. [ 505.877499][T29216] netlink: 59 bytes leftover after parsing attributes in process `syz.6.7590'. [ 505.908641][T12838] hid_parser_main: 4 callbacks suppressed [ 505.908662][T12838] isku 0003:1E7D:319C.0082: unknown main item tag 0x0 [ 505.925723][T12838] isku 0003:1E7D:319C.0082: item fetching failed at offset 6/7 [ 505.934251][T12838] isku 0003:1E7D:319C.0082: parse failed [ 505.942499][T12838] isku 0003:1E7D:319C.0082: probe with driver isku failed with error -22 [ 505.951261][T12830] usb 3-1: Using ep0 maxpacket: 32 [ 505.957775][T12830] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 505.966981][T12830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.978058][T12830] usb 3-1: config 0 descriptor?? [ 505.978373][ T976] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 506.129950][T12838] usb 5-1: USB disconnect, device number 94 [ 506.150834][ T976] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.178264][ T976] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.188011][ T976] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 506.194363][T12830] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 506.217408][T12830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 506.221733][ T976] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 506.231390][T12830] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 506.246143][T12830] usb 3-1: media controller created [ 506.248206][ T976] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.273450][ T976] usb 8-1: config 0 descriptor?? [ 506.277878][T12830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 506.396950][T12830] az6027: usb out operation failed. (-71) [ 506.411109][T12830] az6027: usb out operation failed. (-71) [ 506.423725][T12830] stb0899_attach: Driver disabled by Kconfig [ 506.441566][T12830] az6027: no front-end attached [ 506.441566][T12830] [ 506.450502][T12830] az6027: usb out operation failed. (-71) [ 506.456297][T12830] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 506.463807][ T1207] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 506.472534][T12830] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input151 [ 506.488407][T12830] dvb-usb: schedule remote query interval to 400 msecs. [ 506.495355][T12830] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 506.505746][T12830] usb 3-1: USB disconnect, device number 101 [ 506.527578][T12830] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 506.641109][ T1207] usb 7-1: config 0 has no interfaces? [ 506.646610][ T1207] usb 7-1: New USB device found, idVendor=0919, idProduct=3333, bcdDevice= 0.40 [ 506.655954][ T1207] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.668682][ T1207] usb 7-1: config 0 descriptor?? [ 506.690817][ T976] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 506.698396][ T976] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 506.705782][ T976] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 506.713383][ T976] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 506.723047][ T976] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 506.730769][ T976] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 506.751655][ T976] plantronics 0003:047F:FFFF.0083: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 506.882756][T29228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.891689][T29228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.902318][T29228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.911221][T29228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.921573][T12830] usb 7-1: USB disconnect, device number 85 [ 506.961853][ T1207] usb 8-1: USB disconnect, device number 51 [ 507.213349][T29248] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7602'. [ 507.222552][T29248] netlink: 'syz.2.7602': attribute type 7 has an invalid length. [ 507.230707][T29248] netlink: 'syz.2.7602': attribute type 8 has an invalid length. [ 507.239237][T29248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7602'. [ 507.378587][T12830] usb 7-1: new full-speed USB device number 86 using dummy_hcd [ 507.508193][ T976] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 507.553640][T12830] usb 7-1: config index 0 descriptor too short (expected 72, got 36) [ 507.562282][T12830] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 507.573841][T12830] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 507.584760][T12830] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 507.607988][T12830] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 507.617310][T12830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.625752][T12830] usb 7-1: Product: syz [ 507.630114][T12830] usb 7-1: Manufacturer: syz [ 507.634770][T12830] usb 7-1: SerialNumber: syz [ 507.662665][ T976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.683282][ T976] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 507.699711][ T976] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 507.713636][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.718647][ T1207] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 507.736577][ T976] usb 3-1: config 0 descriptor?? [ 507.743975][ T976] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 507.752949][ T976] dvb-usb: bulk message failed: -22 (3/0) [ 507.764927][ T976] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 507.776663][ T976] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 507.798290][ T976] usb 3-1: media controller created [ 507.805692][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 507.834447][ T976] dvb-usb: bulk message failed: -22 (6/0) [ 507.848319][ T976] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 507.860007][ T976] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input152 [ 507.876739][ T976] dvb-usb: schedule remote query interval to 150 msecs. [ 507.884293][ T976] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 507.892332][ T1207] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 507.929320][ T1207] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.942142][T12830] usb 7-1: USB disconnect, device number 86 [ 507.956390][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 507.986672][ T1207] usb 6-1: SerialNumber: syz [ 508.045085][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 508.053600][ T976] dvb-usb: error while querying for an remote control event. [ 508.183441][ T976] usb 3-1: USB disconnect, device number 102 [ 508.199288][ T976] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 508.618710][T12830] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 508.649284][ T1207] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 508.652529][T29300] binder: 29299:29300 ioctl c0306201 0 returned -14 [ 508.681928][T29300] binder: 29299:29300 ioctl c0306201 200000000540 returned -11 [ 508.778787][T12830] usb 8-1: Using ep0 maxpacket: 32 [ 508.788360][T12830] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 508.806691][T12830] usb 8-1: config 0 has no interface number 0 [ 508.813310][T12830] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 508.841658][T12830] usb 8-1: config 0 interface 85 has no altsetting 0 [ 508.858588][T12830] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 508.879017][T12830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.887066][T12830] usb 8-1: Product: syz [ 508.891444][T12830] usb 8-1: Manufacturer: syz [ 508.896042][T12830] usb 8-1: SerialNumber: syz [ 508.903247][T12830] usb 8-1: config 0 descriptor?? [ 509.042554][ T1207] usb 6-1: USB disconnect, device number 77 [ 509.055457][ T1207] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 509.318324][ T976] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 509.428458][ T9] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 509.469957][ T976] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 509.479122][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.488792][ T976] usb 3-1: config 0 descriptor?? [ 509.495172][ T976] cp210x 3-1:0.0: cp210x converter detected [ 509.516417][T12830] appletouch 8-1:0.85: Geyser mode initialized. [ 509.523924][T12830] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.85/input/input154 [ 509.588167][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 509.596643][ T9] usb 7-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 509.606638][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.617369][ T9] usb 7-1: Product: syz [ 509.621734][ T9] usb 7-1: Manufacturer: syz [ 509.626345][ T9] usb 7-1: SerialNumber: syz [ 509.736721][T12865] usb 8-1: USB disconnect, device number 52 [ 509.748923][T12865] appletouch 8-1:0.85: input: appletouch disconnected [ 509.898375][ T5844] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 509.908359][ T976] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 510.045720][ T9] mxuport 7-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 510.054682][ T9] mxuport 7-1:254.0: probe with driver mxuport failed with error -5 [ 510.059664][ T5844] usb 5-1: config 0 has no interfaces? [ 510.066762][ T9] usb 7-1: USB disconnect, device number 87 [ 510.076565][ T5844] usb 5-1: New USB device found, idVendor=0919, idProduct=3333, bcdDevice= 0.40 [ 510.085862][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.100453][ T5844] usb 5-1: config 0 descriptor?? [ 510.115605][T29331] netlink: 'syz.5.7639': attribute type 4 has an invalid length. [ 510.126011][T29331] netlink: 'syz.5.7639': attribute type 4 has an invalid length. [ 510.126932][ T976] usb 3-1: cp210x converter now attached to ttyUSB0 [ 510.328912][T29320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.340441][T29320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.351636][T29320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.358604][ T5844] usb 3-1: USB disconnect, device number 103 [ 510.362574][T29320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.377496][ T5844] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 510.384740][ T9] usb 5-1: USB disconnect, device number 95 [ 510.399658][ T5844] cp210x 3-1:0.0: device disconnected [ 510.408939][ T976] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 510.558296][ T976] usb 6-1: Using ep0 maxpacket: 8 [ 510.565424][ T976] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 510.584112][ T976] usb 6-1: config 179 has no interface number 0 [ 510.598453][ T976] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 510.626332][ T976] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 510.642115][T29351] tls_set_device_offload: netdev not found [ 510.643234][ T976] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 510.659441][ T976] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 510.681364][ T976] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 510.694752][ T976] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 510.703916][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.714620][T29333] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 510.858350][ T5844] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 510.878461][T12866] usb 8-1: new full-speed USB device number 53 using dummy_hcd [ 510.967455][T29366] loop3: detected capacity change from 0 to 1 [ 510.978464][T29366] Dev loop3: unable to read RDB block 1 [ 510.983446][T29368] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7655'. [ 510.993371][T29368] netlink: 'syz.6.7655': attribute type 7 has an invalid length. [ 510.993418][T29366] loop3: unable to read partition table [ 511.001175][T29368] netlink: 'syz.6.7655': attribute type 8 has an invalid length. [ 511.001192][T29368] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7655'. [ 511.026722][ T976] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input155 [ 511.040368][ T5844] usb 5-1: config index 0 descriptor too short (expected 72, got 36) [ 511.048862][ T5844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 511.054205][T29366] loop3: partition table beyond EOD, [ 511.063958][T12866] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 511.065730][T29366] truncated [ 511.069513][T12866] usb 8-1: config 0 has no interface number 0 [ 511.087115][ T5844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 511.098464][ T5844] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 511.108162][T29366] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 511.114342][ T5844] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 511.130532][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.139228][ T5844] usb 5-1: Product: syz [ 511.144698][T12866] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 511.154136][T12866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.168167][ T5844] usb 5-1: Manufacturer: syz [ 511.172078][T29372] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7657'. [ 511.172837][ T5844] usb 5-1: SerialNumber: syz [ 511.198294][T12866] usb 8-1: Product: syz [ 511.202549][T12866] usb 8-1: Manufacturer: syz [ 511.207202][T12866] usb 8-1: SerialNumber: syz [ 511.231634][T29333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.242924][T29333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.247512][T12866] usb 8-1: config 0 descriptor?? [ 511.266908][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 511.266923][ T30] audit: type=1400 audit(1754923374.761:1330): avc: denied { mounton } for pid=29373 comm="syz.6.7659" path="/proc/4506/task" dev="proc" ino=101683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 511.518617][ T5844] usb 5-1: USB disconnect, device number 96 [ 511.569826][T12865] usb 6-1: USB disconnect, device number 78 [ 511.575831][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 511.575870][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 511.897139][T29404] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 512.297303][T12866] usb 8-1: non-Atmel transceiver xxxxe6de [ 512.338502][ T9] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 512.489864][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.500470][ T9] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 512.501593][T12866] usb 8-1: Firmware version (0.0) predates our first public release. [ 512.510114][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.520390][T12866] usb 8-1: Please update to version 0.2 or newer [ 512.533257][T12866] usb 8-1: atusb_probe: initialization failed, error = -19 [ 512.533338][ T9] usb 5-1: config 0 descriptor?? [ 512.544264][T12866] usb 8-1: USB disconnect, device number 53 [ 512.973030][ T9] nintendo 0003:057E:200E.0084: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.4-1/input0 [ 513.038435][ T9] nintendo 0003:057E:200E.0084: Failed charging grip handshake [ 513.046302][ T9] nintendo 0003:057E:200E.0084: Failed to initialize controller; ret=-110 [ 513.059811][ T9] nintendo 0003:057E:200E.0084: probe - fail = -110 [ 513.080768][ T9] nintendo 0003:057E:200E.0084: probe with driver nintendo failed with error -110 [ 513.174211][ T9] usb 5-1: USB disconnect, device number 97 [ 513.528427][T12830] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 513.688603][T12830] usb 6-1: Using ep0 maxpacket: 16 [ 513.711713][T12830] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 513.723754][T12830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 513.740929][T12830] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 513.754028][T12830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.762150][T12830] usb 6-1: Product: syz [ 513.766354][T12830] usb 6-1: Manufacturer: syz [ 513.773697][T12830] usb 6-1: SerialNumber: syz [ 513.781032][T12830] usb 6-1: config 0 descriptor?? [ 513.790043][T12830] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 513.804511][T12830] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 513.828334][T29460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7697'. [ 514.039352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 514.395411][T12830] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 514.402466][T12830] em28xx 6-1:0.0: Config register raw data: 0xfe [ 514.412171][T12830] em28xx 6-1:0.0: I2S Audio (3 sample rate(s)) [ 514.429004][T12830] em28xx 6-1:0.0: No AC97 audio processor [ 514.806280][T12830] usb 6-1: USB disconnect, device number 79 [ 514.863146][T29487] SELinux: failed to load policy [ 514.885787][T29491] loop7: detected capacity change from 0 to 16384 [ 515.208573][T29491] loop7: detected capacity change from 16384 to 0 [ 515.371475][ T30] audit: type=1400 audit(1754923378.871:1331): avc: denied { map } for pid=29507 comm="syz.2.7718" path="socket:[102655]" dev="sockfs" ino=102655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 516.227898][T29546] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 516.307111][T29550] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7735'. [ 516.495174][T29561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7738'. [ 516.621895][ T30] audit: type=1326 audit(1754923380.121:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29567 comm="syz.2.7742" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6d1f8ebe9 code=0x0 [ 516.671596][T29571] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.7743'. [ 516.681330][T29571] netlink: 6320 bytes leftover after parsing attributes in process `syz.4.7743'. [ 517.355674][T12866] Process accounting resumed [ 517.656426][T29614] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 517.870931][ T7371] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 517.931629][T29629] netlink: 'syz.7.7768': attribute type 12 has an invalid length. [ 517.944599][T29629] netlink: 'syz.7.7768': attribute type 29 has an invalid length. [ 517.953457][T29629] netlink: 148 bytes leftover after parsing attributes in process `syz.7.7768'. [ 517.963054][T29629] netlink: 'syz.7.7768': attribute type 3 has an invalid length. [ 517.970958][T29629] netlink: 'syz.7.7768': attribute type 2 has an invalid length. [ 517.978980][T29629] netlink: 35 bytes leftover after parsing attributes in process `syz.7.7768'. [ 518.746583][T29656] netlink: 'syz.5.7776': attribute type 1 has an invalid length. [ 518.768476][T29656] netlink: 'syz.5.7776': attribute type 4 has an invalid length. [ 518.796248][T29656] netlink: 15334 bytes leftover after parsing attributes in process `syz.5.7776'. [ 519.648167][T12865] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 519.648474][T12830] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 519.811278][T12865] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 519.828142][T12830] usb 7-1: Using ep0 maxpacket: 32 [ 519.828141][T12865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.828164][T12865] usb 3-1: Product: syz [ 519.840436][T12830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.857000][T12865] usb 3-1: Manufacturer: syz [ 519.861675][T12865] usb 3-1: SerialNumber: syz [ 519.867709][T12830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.878637][T12865] usb 3-1: config 0 descriptor?? [ 519.880926][T12830] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 519.893297][T12830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.894144][T12865] ch341 3-1:0.0: ch341-uart converter detected [ 519.908755][T12830] usb 7-1: config 0 descriptor?? [ 519.916138][T12830] hub 7-1:0.0: USB hub found [ 520.135435][T12830] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 520.248166][ T9] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 520.399819][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 520.410046][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.423979][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 520.435440][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.541032][T12830] usbhid 7-1:0.0: can't add hid device: -71 [ 520.547068][T12830] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 520.580046][T12830] usb 7-1: USB disconnect, device number 88 [ 520.638441][T12866] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 520.652654][ T9] usb 6-1: usb_control_msg returned -32 [ 520.678456][ T9] usbtmc 6-1:16.0: can't read capabilities [ 520.791215][T12866] usb 5-1: Using ep0 maxpacket: 16 [ 520.802041][T12866] usb 5-1: config 0 has no interfaces? [ 520.807595][T12866] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 520.822337][T12866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.834402][T12866] usb 5-1: config 0 descriptor?? [ 521.047414][T12830] usb 5-1: USB disconnect, device number 98 [ 521.116824][T12865] ch341-uart ttyUSB0: failed to read break control: -71 [ 521.142829][T12865] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 521.173124][T12865] usb 3-1: USB disconnect, device number 104 [ 521.197334][T12865] ch341 3-1:0.0: device disconnected [ 521.350388][T29693] loop7: detected capacity change from 0 to 16384 [ 521.538357][T29695] loop7: detected capacity change from 16384 to 0 [ 521.538594][ C1] blk_print_req_error: 5 callbacks suppressed [ 521.538607][ C1] I/O error, dev loop7, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 521.610013][T29699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.048334][T12865] usb 7-1: new full-speed USB device number 89 using dummy_hcd [ 522.200120][T12865] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.222874][T12865] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 522.243020][T12865] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 522.273233][T12865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.307912][T12865] usb 7-1: config 0 descriptor?? [ 522.330513][T12865] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 522.340132][T12865] dvb-usb: bulk message failed: -22 (3/0) [ 522.349126][T12865] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 522.358489][T12865] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 522.373665][T12865] usb 7-1: media controller created [ 522.392490][T12865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 522.417856][T12865] dvb-usb: bulk message failed: -22 (6/0) [ 522.447207][T12865] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 522.476240][T12865] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input158 [ 522.515249][T12865] dvb-usb: schedule remote query interval to 150 msecs. [ 522.543677][T12865] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 522.728582][T12865] dvb-usb: bulk message failed: -22 (1/0) [ 522.748002][T12865] dvb-usb: error while querying for an remote control event. [ 522.760665][T12830] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 522.918188][T12865] dvb-usb: bulk message failed: -22 (1/0) [ 522.924079][T12865] dvb-usb: error while querying for an remote control event. [ 522.958299][T12830] usb 3-1: Using ep0 maxpacket: 32 [ 522.971016][T12830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.991181][T12830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.012812][T12830] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 523.038627][ T9] usb 6-1: USB disconnect, device number 80 [ 523.088384][T12865] dvb-usb: bulk message failed: -22 (1/0) [ 523.090608][T12830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.094512][T12865] dvb-usb: error while querying for an remote control event. [ 523.173732][T12830] usb 3-1: config 0 descriptor?? [ 523.209365][T12830] hub 3-1:0.0: USB hub found [ 523.317380][ T9] usb 7-1: USB disconnect, device number 89 [ 523.318181][T12865] dvb-usb: bulk message failed: -22 (1/0) [ 523.347569][T12865] dvb-usb: error while querying for an remote control event. [ 523.419713][T12830] hub 3-1:0.0: 1 port detected [ 523.457869][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 524.036913][T12830] hub 3-1:0.0: activate --> -90 [ 524.244258][T12830] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 524.559866][T12830] usb 3-1: USB disconnect, device number 105 [ 524.746187][T29771] syz.7.7821 (29771): drop_caches: 2 [ 524.886619][ T7385] Bluetooth: hci5: Frame reassembly failed (-84) [ 524.912269][ T30] audit: type=1400 audit(1754923388.411:1333): avc: denied { connect } for pid=29785 comm="syz.7.7827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 525.477676][ T30] audit: type=1326 audit(1754923388.971:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29824 comm="syz.4.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 525.506312][ T30] audit: type=1326 audit(1754923388.971:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29824 comm="syz.4.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 525.534267][ T30] audit: type=1326 audit(1754923388.971:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29824 comm="syz.4.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 525.559696][ T30] audit: type=1326 audit(1754923388.971:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29824 comm="syz.4.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 525.584092][ T30] audit: type=1326 audit(1754923389.011:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29824 comm="syz.4.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7f8ebe9 code=0x7ffc0000 [ 525.638624][T12865] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 525.788182][T12865] usb 7-1: Using ep0 maxpacket: 16 [ 525.794814][T12865] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 525.797064][T29839] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7853'. [ 525.826737][T12865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 525.850015][T12865] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 525.868187][T12865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.876278][T12865] usb 7-1: Product: syz [ 525.886385][T12865] usb 7-1: Manufacturer: syz [ 525.899900][T12865] usb 7-1: SerialNumber: syz [ 525.906591][T12865] usb 7-1: config 0 descriptor?? [ 525.917292][T12865] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 525.953439][T12865] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 526.054177][T29843] syz.2.7855 (29843): drop_caches: 2 [ 526.102965][T29847] netlink: 'syz.7.7857': attribute type 39 has an invalid length. [ 526.336111][T29857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7861'. [ 526.498197][T29868] input: syz1 as /devices/virtual/input/input159 [ 526.533145][T12865] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 526.540121][T12865] em28xx 7-1:0.0: Config register raw data: 0xfe [ 526.546918][T12865] em28xx 7-1:0.0: I2S Audio (3 sample rate(s)) [ 526.557041][T12865] em28xx 7-1:0.0: No AC97 audio processor [ 526.898695][ T5856] Bluetooth: hci5: command 0x1003 tx timeout [ 526.905811][ T5847] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 526.915681][T29874] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 526.954535][T12865] usb 7-1: USB disconnect, device number 90 [ 527.093358][ T30] audit: type=1400 audit(1754923390.591:1339): avc: denied { read } for pid=29881 comm="syz.7.7872" path="socket:[103879]" dev="sockfs" ino=103879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 527.193973][T29891] netlink: 240 bytes leftover after parsing attributes in process `syz.7.7872'. [ 527.248436][T29893] overlayfs: failed to set uuid (1657/file0, err=-1); falling back to uuid=null. [ 527.275488][T29893] overlayfs: failed to verify upper root origin [ 527.404508][T29908] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 527.419019][T29908] syzkaller1: Linktype set failed because interface is up [ 527.689726][T29922] syzkaller1: entered promiscuous mode [ 527.695355][T29922] syzkaller1: entered allmulticast mode [ 527.752254][T29926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 528.072458][T29949] netlink: 'syz.5.7899': attribute type 39 has an invalid length. [ 528.288659][ T9] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 528.458152][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 528.464472][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 528.476215][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 528.490583][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 528.508151][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.516181][ T9] usb 5-1: Product: syz [ 528.520417][ T9] usb 5-1: Manufacturer: syz [ 528.525010][ T9] usb 5-1: SerialNumber: syz [ 528.539083][ T9] usb 5-1: config 0 descriptor?? [ 528.546695][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 528.570768][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 528.948915][T12865] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 529.023216][ T7371] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb4 [ 529.078375][T12866] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 529.111130][T12865] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 529.121882][T12865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.135892][T12865] usb 3-1: config 0 descriptor?? [ 529.146060][T12865] cp210x 3-1:0.0: cp210x converter detected [ 529.179793][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 529.188900][ T9] em28xx 5-1:0.0: Config register raw data: 0xfe [ 529.195250][ T9] em28xx 5-1:0.0: I2S Audio (3 sample rate(s)) [ 529.207131][ T9] em28xx 5-1:0.0: No AC97 audio processor [ 529.240993][T12866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.253228][T12866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.264762][T12866] usb 8-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 529.274753][T12866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.290542][T12866] usb 8-1: config 0 descriptor?? [ 529.550641][T12865] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 529.596106][ T9] usb 5-1: USB disconnect, device number 99 [ 529.704321][T12866] hid_mf 0003:0079:1846.0085: item fetching failed at offset 10/11 [ 529.714276][T12866] hid_mf 0003:0079:1846.0085: HID parse failed. [ 529.720666][T12866] hid_mf 0003:0079:1846.0085: probe with driver hid_mf failed with error -22 [ 529.761868][T12865] usb 3-1: cp210x converter now attached to ttyUSB0 [ 529.905211][T12865] usb 8-1: USB disconnect, device number 54 [ 529.961430][ T9] usb 3-1: USB disconnect, device number 106 [ 529.968870][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 529.977333][ T9] cp210x 3-1:0.0: device disconnected [ 530.334296][T30010] netlink: 'syz.6.7924': attribute type 10 has an invalid length. [ 530.605834][T30028] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 530.612603][T30028] syzkaller1: Linktype set failed because interface is up [ 530.821586][T12830] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 530.988205][T12830] usb 5-1: Using ep0 maxpacket: 16 [ 530.994972][T12830] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.015720][T12830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 531.030585][T12830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 531.053614][T12830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 531.073766][T12830] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.087945][T12830] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 531.097741][T12830] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 531.106275][T12830] usb 5-1: Manufacturer: syz [ 531.118666][T12830] usb 5-1: config 0 descriptor?? [ 531.418383][T12830] rc_core: IR keymap rc-hauppauge not found [ 531.434140][T12830] Registered IR keymap rc-empty [ 531.449523][T12830] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 531.478835][T12830] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 531.509142][T12830] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 531.614175][T12830] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input160 [ 531.631240][T30073] netlink: 'syz.6.7951': attribute type 39 has an invalid length. [ 531.653526][T12830] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 531.718528][T12830] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 531.760082][T12830] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 531.853165][T12830] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 531.918318][T12830] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 531.939576][T12830] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 531.977388][T30088] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 531.988477][T12830] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 532.018715][T12830] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 532.040741][T12830] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 532.070729][T12830] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 532.099533][T12830] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 532.118277][T12830] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 532.134699][T12830] usb 5-1: USB disconnect, device number 100 [ 532.262106][T30103] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7961'. [ 532.288352][ T9] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 532.401417][T30111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7967'. [ 532.416302][ T7371] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.416367][T30111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7967'. [ 532.426832][ T7371] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.444959][ T7371] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.453809][ T7371] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.462476][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 532.469535][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.483416][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.502564][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 532.527254][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 532.542766][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.562860][T30117] netlink: 'syz.4.7968': attribute type 39 has an invalid length. [ 532.580237][ T9] usb 7-1: config 0 descriptor?? [ 532.791651][T12866] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 532.867007][T30134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7976'. [ 532.959431][T12866] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 532.977954][T12866] usb 6-1: config 0 has no interface number 0 [ 532.993570][T12866] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 533.003805][T12866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.012217][T12866] usb 6-1: Product: syz [ 533.015350][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 533.016858][T12866] usb 6-1: Manufacturer: syz [ 533.030712][T12866] usb 6-1: SerialNumber: syz [ 533.037371][T12866] usb 6-1: config 0 descriptor?? [ 533.040364][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0086/input/input161 [ 533.071788][ T9] microsoft 0003:045E:07DA.0086: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 533.088305][T12830] usb 8-1: new full-speed USB device number 55 using dummy_hcd [ 533.263601][T12830] usb 8-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 533.278220][T12830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.297398][T12830] usb 8-1: config 0 descriptor?? [ 533.297503][T12865] usb 7-1: USB disconnect, device number 91 [ 533.380240][T30155] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.458663][T12866] usb 6-1: Firmware: major: 230, minor: 61, hardware type: UNKNOWN (237) [ 533.665116][T12866] usb 6-1: Read permanent extended address 00:00:00:00:00:00:00:02 from device [ 533.674299][T12866] usb 6-1: atusb_probe: initialization failed, error = -524 [ 533.681863][T12866] atusb 6-1:0.128: probe with driver atusb failed with error -524 [ 533.889693][T12866] usb 6-1: USB disconnect, device number 81 [ 534.060591][T30180] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7997'. [ 534.246752][T30190] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8002'. [ 534.533460][T12830] pegasus 8-1:0.0: can't reset MAC [ 534.548526][T12830] pegasus 8-1:0.0: probe with driver pegasus failed with error -5 [ 534.570215][T12830] usb 8-1: USB disconnect, device number 55 [ 534.628196][T12866] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 534.794103][T12866] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 534.803534][T12866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.814415][T12866] usb 7-1: Product: syz [ 534.820664][T12866] usb 7-1: Manufacturer: syz [ 534.825415][T12866] usb 7-1: SerialNumber: syz [ 534.836249][T12866] r8152-cfgselector 7-1: Unknown version 0x0000 [ 534.842720][T12866] r8152-cfgselector 7-1: config 0 descriptor?? [ 535.269213][T30200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.277908][T30200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.465696][T30220] veth0: entered promiscuous mode [ 535.477241][T30219] veth0: left promiscuous mode [ 535.526593][T12866] r8152-cfgselector 7-1: USB disconnect, device number 92 [ 535.763363][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 536.082096][T30260] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8032'. [ 536.106437][ T7383] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.114975][T30260] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8032'. [ 536.124106][T12866] kernel read not supported for file /dsp (pid: 12866 comm: kworker/1:12) [ 536.133342][ T7371] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.148282][ T7371] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.163320][ T7371] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.265822][T30269] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8034'. [ 536.482847][T30282] netlink: 'syz.7.8040': attribute type 4 has an invalid length. [ 536.647521][T30283] SELinux: failed to load policy [ 536.848172][T12866] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 536.988315][T12865] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 537.000528][T12866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.012022][T12866] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 537.021190][T12866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.030446][T12866] usb 8-1: config 0 descriptor?? [ 537.149542][T12865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.162056][T12865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.171896][T12865] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 537.181092][T12865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.190571][T12865] usb 3-1: config 0 descriptor?? [ 537.243061][T12866] usbhid 8-1:0.0: can't add hid device: -71 [ 537.249726][T12866] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 537.258164][T12830] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 537.262176][T12866] usb 8-1: USB disconnect, device number 56 [ 537.428212][T12830] usb 6-1: Using ep0 maxpacket: 8 [ 537.434760][T12830] usb 6-1: config 6 has an invalid interface number: 171 but max is 0 [ 537.450234][T12830] usb 6-1: config 6 has no interface number 0 [ 537.466618][T12830] usb 6-1: config 6 interface 171 altsetting 8 endpoint 0x6 has invalid maxpacket 576, setting to 64 [ 537.489205][T12830] usb 6-1: config 6 interface 171 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 537.525413][T12830] usb 6-1: config 6 interface 171 altsetting 8 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 537.556230][T12830] usb 6-1: config 6 interface 171 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 537.573063][T12830] usb 6-1: config 6 interface 171 has no altsetting 0 [ 537.601391][T12830] usb 6-1: Dual-Role OTG device on HNP port [ 537.612629][T12830] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=d1.1e [ 537.625378][T12830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.625837][T12865] pyra 0003:1E7D:2CF6.0087: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 537.633493][T12830] usb 6-1: Product: syz [ 537.633511][T12830] usb 6-1: Manufacturer: syz [ 537.633526][T12830] usb 6-1: SerialNumber: syz [ 537.748205][T12866] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 537.908257][T12866] usb 8-1: Using ep0 maxpacket: 16 [ 537.916301][T12866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.930393][T12866] usb 8-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 537.986981][T12866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.110162][T12866] usb 8-1: config 0 descriptor?? [ 538.196078][T12830] usb_ehset_test 6-1:6.171: probe with driver usb_ehset_test failed with error -32 [ 538.422620][T12865] pyra 0003:1E7D:2CF6.0087: couldn't init struct pyra_device [ 538.445382][T12865] pyra 0003:1E7D:2CF6.0087: couldn't install mouse [ 538.504974][T12865] pyra 0003:1E7D:2CF6.0087: probe with driver pyra failed with error -71 [ 538.571332][T12865] usb 3-1: USB disconnect, device number 107 [ 538.662195][T12866] logitech-djreceiver 0003:046D:C714.0088: hidraw0: USB HID v0.05 Device [HID 046d:c714] on usb-dummy_hcd.7-1/input0 [ 538.836359][ T5844] usb 6-1: USB disconnect, device number 82 [ 538.999144][T30326] SELinux: failed to load policy [ 539.016432][T12830] usb 8-1: USB disconnect, device number 57 [ 539.278303][ T5844] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 539.439122][ T5844] usb 7-1: Using ep0 maxpacket: 8 [ 539.458941][ T5844] usb 7-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 539.488197][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.496219][ T5844] usb 7-1: Product: syz [ 539.508165][ T5844] usb 7-1: Manufacturer: syz [ 539.512826][ T5844] usb 7-1: SerialNumber: syz [ 539.529039][ T5844] usb 7-1: config 0 descriptor?? [ 539.540660][ T5844] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 539.638909][T30346] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8067'. [ 540.405311][ T30] audit: type=1400 audit(1754923403.901:1340): avc: denied { setopt } for pid=30367 comm="syz.5.8077" lport=60928 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 540.759066][ T5844] gspca_sonixj: reg_w1 err -71 [ 540.763927][ T5844] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 540.786326][ T5844] usb 7-1: USB disconnect, device number 93 [ 541.015722][ T30] audit: type=1400 audit(1754923404.511:1341): avc: denied { map } for pid=30396 comm="syz.5.8089" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 541.039565][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.155123][T30407] [ 541.157478][T30407] ===================================================== [ 541.164400][T30407] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 541.171850][T30407] 6.16.0-syzkaller-12063-g37816488247d #0 Not tainted [ 541.178600][T30407] ----------------------------------------------------- [ 541.185521][T30407] syz.7.8092/30407 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 541.193232][T30407] ffff888074b6e600 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 541.201947][T30407] [ 541.201947][T30407] and this task is already holding: [ 541.209293][T30407] ffff8880352c7028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 541.219111][T30407] which would create a new lock dependency: [ 541.224975][T30407] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 541.233051][T30407] [ 541.233051][T30407] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 541.242477][T30407] (&client->buffer_lock){..-.}-{3:3} [ 541.242498][T30407] [ 541.242498][T30407] ... which became SOFTIRQ-irq-safe at: [ 541.255519][T30407] lock_acquire+0x179/0x350 [ 541.260098][T30407] _raw_spin_lock+0x2e/0x40 [ 541.264669][T30407] evdev_pass_values+0x10e/0x9b0 [ 541.269676][T30407] evdev_events+0x1bb/0x390 [ 541.274244][T30407] input_pass_values+0x74e/0x880 [ 541.279245][T30407] input_handle_event+0xb29/0x14d0 [ 541.284419][T30407] input_event+0x8e/0xd0 [ 541.288725][T30407] hidinput_hid_event+0xa10/0x2420 [ 541.293896][T30407] hid_process_event+0x4b7/0x5e0 [ 541.298900][T30407] hid_report_raw_event+0xa0a/0x1290 [ 541.304251][T30407] __hid_input_report.constprop.0+0x33f/0x450 [ 541.310386][T30407] hid_irq_in+0x35e/0x870 [ 541.314795][T30407] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 541.320238][T30407] usb_hcd_giveback_urb+0x39b/0x450 [ 541.325503][T30407] dummy_timer+0x1814/0x3a30 [ 541.330187][T30407] __hrtimer_run_queues+0x202/0xad0 [ 541.335453][T30407] hrtimer_run_softirq+0x17d/0x350 [ 541.340633][T30407] handle_softirqs+0x216/0x8e0 [ 541.345462][T30407] __irq_exit_rcu+0x109/0x170 [ 541.350202][T30407] irq_exit_rcu+0x9/0x30 [ 541.354511][T30407] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 541.360212][T30407] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 541.366258][T30407] pv_native_safe_halt+0xf/0x20 [ 541.371179][T30407] default_idle+0x13/0x20 [ 541.375571][T30407] default_idle_call+0x6d/0xb0 [ 541.380830][T30407] do_idle+0x391/0x510 [ 541.384968][T30407] cpu_startup_entry+0x4f/0x60 [ 541.389794][T30407] start_secondary+0x21d/0x2b0 [ 541.394628][T30407] common_startup_64+0x13e/0x148 [ 541.399629][T30407] [ 541.399629][T30407] to a SOFTIRQ-irq-unsafe lock: [ 541.406615][T30407] (tasklist_lock){.+.+}-{3:3} [ 541.406635][T30407] [ 541.406635][T30407] ... which became SOFTIRQ-irq-unsafe at: [ 541.419223][T30407] ... [ 541.419229][T30407] lock_acquire+0x179/0x350 [ 541.426354][T30407] _raw_read_lock+0x5f/0x70 [ 541.430921][T30407] __do_wait+0x105/0x890 [ 541.435229][T30407] do_wait+0x21e/0x5a0 [ 541.439369][T30407] kernel_wait+0x9f/0x160 [ 541.443761][T30407] call_usermodehelper_exec_work+0xf1/0x170 [ 541.449724][T30407] process_one_work+0x9cc/0x1b70 [ 541.454734][T30407] worker_thread+0x6c8/0xf10 [ 541.459391][T30407] kthread+0x3c5/0x780 [ 541.463526][T30407] ret_from_fork+0x5d4/0x6f0 [ 541.468179][T30407] ret_from_fork_asm+0x1a/0x30 [ 541.473009][T30407] [ 541.473009][T30407] other info that might help us debug this: [ 541.473009][T30407] [ 541.483210][T30407] Chain exists of: [ 541.483210][T30407] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 541.483210][T30407] [ 541.496301][T30407] Possible interrupt unsafe locking scenario: [ 541.496301][T30407] [ 541.504593][T30407] CPU0 CPU1 [ 541.509929][T30407] ---- ---- [ 541.515275][T30407] lock(tasklist_lock); [ 541.519507][T30407] local_irq_disable(); [ 541.526249][T30407] lock(&client->buffer_lock); [ 541.533600][T30407] lock(&new->fa_lock); [ 541.540335][T30407] [ 541.543760][T30407] lock(&client->buffer_lock); [ 541.548758][T30407] [ 541.548758][T30407] *** DEADLOCK *** [ 541.548758][T30407] [ 541.556871][T30407] 7 locks held by syz.7.8092/30407: [ 541.562040][T30407] #0: ffff88802b044118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 541.571160][T30407] #1: ffff88801f767230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 541.581228][T30407] #2: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 541.590854][T30407] #3: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 541.600394][T30407] #4: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 541.609500][T30407] #5: ffff8880352c7028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 541.619752][T30407] #6: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 541.628778][T30407] [ 541.628778][T30407] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 541.639150][T30407] -> (&client->buffer_lock){..-.}-{3:3} { [ 541.644854][T30407] IN-SOFTIRQ-W at: [ 541.648805][T30407] lock_acquire+0x179/0x350 [ 541.654942][T30407] _raw_spin_lock+0x2e/0x40 [ 541.661074][T30407] evdev_pass_values+0x10e/0x9b0 [ 541.667638][T30407] evdev_events+0x1bb/0x390 [ 541.673764][T30407] input_pass_values+0x74e/0x880 [ 541.680326][T30407] input_handle_event+0xb29/0x14d0 [ 541.687061][T30407] input_event+0x8e/0xd0 [ 541.692927][T30407] hidinput_hid_event+0xa10/0x2420 [ 541.699660][T30407] hid_process_event+0x4b7/0x5e0 [ 541.706228][T30407] hid_report_raw_event+0xa0a/0x1290 [ 541.713142][T30407] __hid_input_report.constprop.0+0x33f/0x450 [ 541.720836][T30407] hid_irq_in+0x35e/0x870 [ 541.726791][T30407] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 541.733790][T30407] usb_hcd_giveback_urb+0x39b/0x450 [ 541.740616][T30407] dummy_timer+0x1814/0x3a30 [ 541.746834][T30407] __hrtimer_run_queues+0x202/0xad0 [ 541.753658][T30407] hrtimer_run_softirq+0x17d/0x350 [ 541.760393][T30407] handle_softirqs+0x216/0x8e0 [ 541.766783][T30407] __irq_exit_rcu+0x109/0x170 [ 541.773085][T30407] irq_exit_rcu+0x9/0x30 [ 541.778953][T30407] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 541.786214][T30407] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 541.793816][T30407] pv_native_safe_halt+0xf/0x20 [ 541.800294][T30407] default_idle+0x13/0x20 [ 541.806245][T30407] default_idle_call+0x6d/0xb0 [ 541.812633][T30407] do_idle+0x391/0x510 [ 541.818327][T30407] cpu_startup_entry+0x4f/0x60 [ 541.824715][T30407] start_secondary+0x21d/0x2b0 [ 541.831110][T30407] common_startup_64+0x13e/0x148 [ 541.837674][T30407] INITIAL USE at: [ 541.841546][T30407] lock_acquire+0x179/0x350 [ 541.847601][T30407] _raw_spin_lock+0x2e/0x40 [ 541.853642][T30407] evdev_pass_values+0x10e/0x9b0 [ 541.860118][T30407] evdev_events+0x1bb/0x390 [ 541.866160][T30407] input_pass_values+0x74e/0x880 [ 541.872634][T30407] input_handle_event+0xf00/0x14d0 [ 541.879283][T30407] input_inject_event+0x1e8/0x3b0 [ 541.885846][T30407] evdev_write+0x457/0x750 [ 541.891800][T30407] vfs_write+0x2a0/0x1150 [ 541.897668][T30407] ksys_write+0x1f8/0x250 [ 541.903535][T30407] do_syscall_64+0xcd/0x4c0 [ 541.909579][T30407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.917011][T30407] } [ 541.919483][T30407] ... key at: [] __key.1+0x0/0x40 [ 541.926574][T30407] [ 541.926574][T30407] the dependencies between the lock to be acquired [ 541.926580][T30407] and SOFTIRQ-irq-unsafe lock: [ 541.940036][T30407] -> (tasklist_lock){.+.+}-{3:3} { [ 541.945314][T30407] HARDIRQ-ON-R at: [ 541.949450][T30407] lock_acquire+0x179/0x350 [ 541.955943][T30407] _raw_read_lock+0x5f/0x70 [ 541.962435][T30407] __do_wait+0x105/0x890 [ 541.968655][T30407] do_wait+0x21e/0x5a0 [ 541.974697][T30407] kernel_wait+0x9f/0x160 [ 541.980998][T30407] call_usermodehelper_exec_work+0xf1/0x170 [ 541.988867][T30407] process_one_work+0x9cc/0x1b70 [ 541.995781][T30407] worker_thread+0x6c8/0xf10 [ 542.002344][T30407] kthread+0x3c5/0x780 [ 542.008383][T30407] ret_from_fork+0x5d4/0x6f0 [ 542.014947][T30407] ret_from_fork_asm+0x1a/0x30 [ 542.021698][T30407] SOFTIRQ-ON-R at: [ 542.025845][T30407] lock_acquire+0x179/0x350 [ 542.032343][T30407] _raw_read_lock+0x5f/0x70 [ 542.038831][T30407] __do_wait+0x105/0x890 [ 542.045051][T30407] do_wait+0x21e/0x5a0 [ 542.051092][T30407] kernel_wait+0x9f/0x160 [ 542.057394][T30407] call_usermodehelper_exec_work+0xf1/0x170 [ 542.065262][T30407] process_one_work+0x9cc/0x1b70 [ 542.072174][T30407] worker_thread+0x6c8/0xf10 [ 542.078738][T30407] kthread+0x3c5/0x780 [ 542.084778][T30407] ret_from_fork+0x5d4/0x6f0 [ 542.091339][T30407] ret_from_fork_asm+0x1a/0x30 [ 542.098077][T30407] INITIAL USE at: [ 542.102123][T30407] lock_acquire+0x179/0x350 [ 542.108518][T30407] _raw_write_lock_irq+0x36/0x50 [ 542.115348][T30407] copy_process+0x4caf/0x7690 [ 542.121912][T30407] kernel_clone+0xfc/0x930 [ 542.128219][T30407] user_mode_thread+0xc7/0x110 [ 542.134870][T30407] rest_init+0x23/0x2b0 [ 542.140910][T30407] start_kernel+0x3ee/0x4d0 [ 542.147299][T30407] x86_64_start_reservations+0x18/0x30 [ 542.154643][T30407] x86_64_start_kernel+0x130/0x190 [ 542.161640][T30407] common_startup_64+0x13e/0x148 [ 542.168466][T30407] INITIAL READ USE at: [ 542.172938][T30407] lock_acquire+0x179/0x350 [ 542.179766][T30407] _raw_read_lock+0x5f/0x70 [ 542.186591][T30407] __do_wait+0x105/0x890 [ 542.193148][T30407] do_wait+0x21e/0x5a0 [ 542.199532][T30407] kernel_wait+0x9f/0x160 [ 542.206185][T30407] call_usermodehelper_exec_work+0xf1/0x170 [ 542.214400][T30407] process_one_work+0x9cc/0x1b70 [ 542.221656][T30407] worker_thread+0x6c8/0xf10 [ 542.228569][T30407] kthread+0x3c5/0x780 [ 542.234953][T30407] ret_from_fork+0x5d4/0x6f0 [ 542.241863][T30407] ret_from_fork_asm+0x1a/0x30 [ 542.248956][T30407] } [ 542.251617][T30407] ... key at: [] tasklist_lock+0x18/0x40 [ 542.259482][T30407] ... acquired at: [ 542.263430][T30407] _raw_read_lock+0x5f/0x70 [ 542.268086][T30407] send_sigio+0xb8/0x3e0 [ 542.272484][T30407] dnotify_handle_event+0x15e/0x2b0 [ 542.277836][T30407] fsnotify_handle_inode_event.isra.0+0x1df/0x3f0 [ 542.284397][T30407] fsnotify+0x13d6/0x1dc0 [ 542.288874][T30407] path_openat+0x1b50/0x2cb0 [ 542.293612][T30407] do_filp_open+0x20b/0x470 [ 542.298262][T30407] do_sys_openat2+0x11b/0x1d0 [ 542.303092][T30407] __x64_sys_openat+0x174/0x210 [ 542.308098][T30407] do_syscall_64+0xcd/0x4c0 [ 542.312754][T30407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.318801][T30407] [ 542.321111][T30407] -> (&f_owner->lock){....}-{3:3} { [ 542.326405][T30407] INITIAL USE at: [ 542.330363][T30407] lock_acquire+0x179/0x350 [ 542.336590][T30407] _raw_write_lock_irq+0x36/0x50 [ 542.343242][T30407] __f_setown+0x61/0x3c0 [ 542.349198][T30407] fcntl_dirnotify+0x7b1/0xb60 [ 542.355697][T30407] do_fcntl+0xe62/0x15a0 [ 542.361654][T30407] __x64_sys_fcntl+0x163/0x200 [ 542.368133][T30407] do_syscall_64+0xcd/0x4c0 [ 542.374343][T30407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.381949][T30407] INITIAL READ USE at: [ 542.386336][T30407] lock_acquire+0x179/0x350 [ 542.392996][T30407] _raw_read_lock_irqsave+0x74/0x90 [ 542.400358][T30407] send_sigio+0x31/0x3e0 [ 542.406768][T30407] dnotify_handle_event+0x15e/0x2b0 [ 542.414129][T30407] fsnotify_handle_inode_event.isra.0+0x1df/0x3f0 [ 542.422695][T30407] fsnotify+0x13d6/0x1dc0 [ 542.429172][T30407] vfs_mkdir+0x71d/0x8c0 [ 542.435558][T30407] do_mkdirat+0x304/0x3e0 [ 542.442036][T30407] __x64_sys_mkdirat+0x83/0xb0 [ 542.448947][T30407] do_syscall_64+0xcd/0x4c0 [ 542.455595][T30407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.463631][T30407] } [ 542.466190][T30407] ... key at: [] __key.1+0x0/0x40 [ 542.473366][T30407] ... acquired at: [ 542.477226][T30407] _raw_read_lock_irqsave+0x74/0x90 [ 542.482583][T30407] send_sigio+0x31/0x3e0 [ 542.486977][T30407] kill_fasync+0x214/0x510 [ 542.491544][T30407] sock_wake_async+0x132/0x160 [ 542.496460][T30407] unix_release_sock+0xc0d/0x14f0 [ 542.501640][T30407] unix_release+0x91/0xf0 [ 542.506124][T30407] __sock_release+0xb3/0x270 [ 542.510867][T30407] sock_close+0x1c/0x30 [ 542.515167][T30407] __fput+0x402/0xb70 [ 542.519300][T30407] task_work_run+0x150/0x240 [ 542.524038][T30407] exit_to_user_mode_loop+0xeb/0x110 [ 542.529473][T30407] do_syscall_64+0x3f6/0x4c0 [ 542.534211][T30407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.540249][T30407] [ 542.542545][T30407] -> (&new->fa_lock){....}-{3:3} { [ 542.547649][T30407] INITIAL USE at: [ 542.551516][T30407] lock_acquire+0x179/0x350 [ 542.557561][T30407] _raw_write_lock_irq+0x36/0x50 [ 542.564043][T30407] fasync_remove_entry+0xb2/0x1e0 [ 542.570611][T30407] fasync_helper+0xaf/0xd0 [ 542.576572][T30407] pipe_fasync+0xc7/0x200 [ 542.582440][T30407] __fput+0x96b/0xb70 [ 542.587961][T30407] task_work_run+0x150/0x240 [ 542.594101][T30407] exit_to_user_mode_loop+0xeb/0x110 [ 542.600922][T30407] do_syscall_64+0x3f6/0x4c0 [ 542.607048][T30407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.614478][T30407] INITIAL READ USE at: [ 542.618781][T30407] lock_acquire+0x179/0x350 [ 542.625261][T30407] _raw_read_lock_irqsave+0x74/0x90 [ 542.632440][T30407] kill_fasync+0x138/0x510 [ 542.638835][T30407] anon_pipe_read+0xb3c/0x1210 [ 542.645574][T30407] vfs_read+0xa98/0xc60 [ 542.651700][T30407] ksys_read+0x1f8/0x250 [ 542.657932][T30407] do_syscall_64+0xcd/0x4c0 [ 542.664404][T30407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.672267][T30407] } [ 542.674739][T30407] ... key at: [] __key.0+0x0/0x40 [ 542.681829][T30407] ... acquired at: [ 542.685603][T30407] lock_acquire+0x179/0x350 [ 542.690261][T30407] _raw_read_lock_irqsave+0x74/0x90 [ 542.695612][T30407] kill_fasync+0x138/0x510 [ 542.700181][T30407] evdev_pass_values+0x619/0x9b0 [ 542.705268][T30407] evdev_events+0x1bb/0x390 [ 542.709920][T30407] input_pass_values+0x74e/0x880 [ 542.715010][T30407] input_handle_event+0xf00/0x14d0 [ 542.720282][T30407] input_inject_event+0x1e8/0x3b0 [ 542.725459][T30407] evdev_write+0x457/0x750 [ 542.730039][T30407] vfs_write+0x2a0/0x1150 [ 542.734518][T30407] ksys_write+0x1f8/0x250 [ 542.738995][T30407] do_syscall_64+0xcd/0x4c0 [ 542.743644][T30407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.749687][T30407] [ 542.751987][T30407] [ 542.751987][T30407] stack backtrace: [ 542.757849][T30407] CPU: 1 UID: 0 PID: 30407 Comm: syz.7.8092 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 542.757868][T30407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 542.757877][T30407] Call Trace: [ 542.757884][T30407] [ 542.757890][T30407] dump_stack_lvl+0x116/0x1f0 [ 542.757913][T30407] check_irq_usage+0x7dc/0x920 [ 542.757933][T30407] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 542.757953][T30407] ? check_path.constprop.0+0x24/0x50 [ 542.757975][T30407] ? __lock_acquire+0x12bc/0x1ce0 [ 542.757995][T30407] __lock_acquire+0x12bc/0x1ce0 [ 542.758018][T30407] lock_acquire+0x179/0x350 [ 542.758039][T30407] ? kill_fasync+0x138/0x510 [ 542.758060][T30407] _raw_read_lock_irqsave+0x74/0x90 [ 542.758079][T30407] ? kill_fasync+0x138/0x510 [ 542.758101][T30407] kill_fasync+0x138/0x510 [ 542.758127][T30407] evdev_pass_values+0x619/0x9b0 [ 542.758150][T30407] evdev_events+0x1bb/0x390 [ 542.758171][T30407] input_pass_values+0x74e/0x880 [ 542.758193][T30407] input_handle_event+0xf00/0x14d0 [ 542.758212][T30407] ? _copy_from_user+0x59/0xd0 [ 542.758234][T30407] input_inject_event+0x1e8/0x3b0 [ 542.758256][T30407] evdev_write+0x457/0x750 [ 542.758279][T30407] ? __pfx_evdev_write+0x10/0x10 [ 542.758300][T30407] ? bpf_lsm_file_permission+0x9/0x10 [ 542.758323][T30407] ? security_file_permission+0x71/0x210 [ 542.758348][T30407] ? rw_verify_area+0xcf/0x6c0 [ 542.758376][T30407] ? __pfx_evdev_write+0x10/0x10 [ 542.758396][T30407] vfs_write+0x2a0/0x1150 [ 542.758415][T30407] ? __pfx_vfs_write+0x10/0x10 [ 542.758427][T30407] ? find_held_lock+0x2b/0x80 [ 542.758443][T30407] ? __fget_files+0x204/0x3c0 [ 542.758460][T30407] ? __fget_files+0x20e/0x3c0 [ 542.758477][T30407] ksys_write+0x1f8/0x250 [ 542.758490][T30407] ? __pfx_ksys_write+0x10/0x10 [ 542.758506][T30407] do_syscall_64+0xcd/0x4c0 [ 542.758518][T30407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.758532][T30407] RIP: 0033:0x7fecabf8ebe9 [ 542.758543][T30407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.758556][T30407] RSP: 002b:00007fecacd7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 542.758574][T30407] RAX: ffffffffffffffda RBX: 00007fecac1b5fa0 RCX: 00007fecabf8ebe9 [ 542.758583][T30407] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 542.758591][T30407] RBP: 00007fecac011e19 R08: 0000000000000000 R09: 0000000000000000 [ 542.758600][T30407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.758608][T30407] R13: 00007fecac1b6038 R14: 00007fecac1b5fa0 R15: 00007fff35778b38 [ 542.758621][T30407] [ 543.017033][ C1] vkms_vblank_simulate: vblank timer overrun