last executing test programs: 3m28.505357154s ago: executing program 2 (id=3752): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 3m28.449719334s ago: executing program 2 (id=3754): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) poll(&(0x7f0000000080)=[{r0, 0x81}], 0x1, 0x8) 3m28.356141372s ago: executing program 2 (id=3757): r0 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0xcd34, 0x1, 0x0, 0x34}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r0, 0x2418, 0xcabb, 0x44, 0x0, 0x0) 3m28.190532293s ago: executing program 2 (id=3760): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x9) 3m28.060180049s ago: executing program 2 (id=3763): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) 3m27.709174504s ago: executing program 2 (id=3769): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x3, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xffffff57, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0xfe], 0x0, [0x6, 0x4], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbff3}]}]}]}}]}, 0xb4}, 0x1, 0x7a00}, 0x0) 3m27.593542601s ago: executing program 32 (id=3769): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x3, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xffffff57, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0xfe], 0x0, [0x6, 0x4], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbff3}]}]}]}}]}, 0xb4}, 0x1, 0x7a00}, 0x0) 57.814202357s ago: executing program 5 (id=7276): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26, 0x0, 0x0, @void, @value}, 0x10) 57.777211283s ago: executing program 5 (id=7277): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @p_u32=0x0}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) 57.696415043s ago: executing program 5 (id=7278): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 57.696258455s ago: executing program 5 (id=7279): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 57.650141456s ago: executing program 5 (id=7280): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fc}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)) 57.452732119s ago: executing program 5 (id=7284): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000380)={0xa, 0xfffe, 0x4, @remote, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000800)=0x7, 0x4) 57.264491862s ago: executing program 33 (id=7284): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000380)={0xa, 0xfffe, 0x4, @remote, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000800)=0x7, 0x4) 1.959341397s ago: executing program 4 (id=8577): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406070a02040c5c000900580006040a0000000d0085a168d0bf46d32345653600648d27000b000a05000000935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a327a0407160005000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) 1.933898441s ago: executing program 4 (id=8578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1.811335048s ago: executing program 4 (id=8581): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x100, 0x0) getdents64(r0, &(0x7f0000000280)=""/103, 0x67) 1.753384483s ago: executing program 4 (id=8583): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.156480139s ago: executing program 6 (id=8598): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1f, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x741, 0x0, 0x0) 873.132755ms ago: executing program 4 (id=8601): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r1, 0xffffffffffffffff, 0x0) 831.430273ms ago: executing program 4 (id=8603): r0 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) 716.090768ms ago: executing program 3 (id=8606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000002c0)='./file0\x00', r2, 0x4000, r1}, 0x18) 708.33042ms ago: executing program 3 (id=8607): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x0, 0x2}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') unshare(0x400) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 655.071051ms ago: executing program 3 (id=8609): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x1, r1}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000180)={0x1, r1}) 654.432078ms ago: executing program 3 (id=8610): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) write(r0, &(0x7f0000000040)=':', 0x1) 632.439391ms ago: executing program 3 (id=8611): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x560, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 601.186531ms ago: executing program 3 (id=8613): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 536.517745ms ago: executing program 0 (id=8614): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="afe61b8a9d9da6", 0x7) 510.995325ms ago: executing program 0 (id=8615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 482.748247ms ago: executing program 0 (id=8616): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 382.662846ms ago: executing program 0 (id=8618): r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000180)={0x2, 0xfffe, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 288.370164ms ago: executing program 1 (id=8619): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x4043, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 288.20654ms ago: executing program 0 (id=8620): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00'}, 0x10) sendto$packet(r0, &(0x7f00000002c0)="0203100020fc80d53d103328", 0x6d, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) 288.109943ms ago: executing program 6 (id=8621): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 273.27583ms ago: executing program 6 (id=8622): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fcntl$setlease(r2, 0x400, 0x3) 262.919203ms ago: executing program 1 (id=8623): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 212.50875ms ago: executing program 0 (id=8624): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 212.351017ms ago: executing program 1 (id=8625): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x100000000, 0x0, 0x2, r2, 0x2}) 206.722608ms ago: executing program 6 (id=8626): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000940)="b3fe", 0x2}], 0x1}}], 0x2, 0xc044) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @multicast1}}}}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000300), 0x5b0) 165.605366ms ago: executing program 6 (id=8627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) 60.51162ms ago: executing program 1 (id=8628): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48811}, 0x40000c4) 51.179221ms ago: executing program 1 (id=8629): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r1 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000009c0)=ANY=[@ANYBLOB="0020000002000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000000080000000000000", @ANYRES32=r1]) 39.794485ms ago: executing program 6 (id=8630): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) 0s ago: executing program 1 (id=8631): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80341) ioctl$int_in(r0, 0x5452, &(0x7f0000000c40)=0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) kernel console output (not intermixed with test programs): ng): Released all slaves [ 364.101481][ T30] audit: type=1400 audit(1742934719.498:1785): avc: denied { setopt } for pid=21798 comm="syz.3.7316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 364.121365][T21798] delete_channel: no stack [ 364.347942][T21816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.368286][ T30] audit: type=1400 audit(1742934719.758:1786): avc: denied { ioctl } for pid=21811 comm="syz.1.7323" path="socket:[79864]" dev="sockfs" ino=79864 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 364.427909][ T3469] hsr_slave_0: left promiscuous mode [ 364.436244][ T3469] hsr_slave_1: left promiscuous mode [ 364.446873][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.454300][ T30] audit: type=1400 audit(1742934719.838:1787): avc: denied { ioctl } for pid=21819 comm="syz.4.7326" path="socket:[80171]" dev="sockfs" ino=80171 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 364.480096][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.488426][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.496170][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.512241][ T3469] veth1_macvtap: left promiscuous mode [ 364.517856][ T3469] veth0_macvtap: left promiscuous mode [ 364.523342][ T3469] veth1_vlan: left promiscuous mode [ 364.528658][ T3469] veth0_vlan: left promiscuous mode [ 364.851880][ T3469] team_slave_1 (unregistering): left allmulticast mode [ 364.865008][ T3469] team0 (unregistering): Port device team_slave_1 removed [ 364.900303][ T3469] team_slave_0 (unregistering): left allmulticast mode [ 364.909122][ T3469] team0 (unregistering): Port device team_slave_0 removed [ 365.176159][ T5141] Bluetooth: hci4: command tx timeout [ 365.272866][T21749] chnl_net:caif_netlink_parms(): no params data found [ 365.503937][T21749] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.525862][T21749] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.552958][T21861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7342'. [ 365.562815][T21749] bridge_slave_0: entered allmulticast mode [ 365.575539][T21749] bridge_slave_0: entered promiscuous mode [ 365.587941][T21861] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7342'. [ 365.589267][T21749] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.615831][T21861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7342'. [ 365.615867][T21749] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.625089][T21861] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7342'. [ 365.632332][T21749] bridge_slave_1: entered allmulticast mode [ 365.656893][T21749] bridge_slave_1: entered promiscuous mode [ 365.717445][T21749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.730878][T21867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7345'. [ 365.741479][T20063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.749674][T21869] netlink: 280 bytes leftover after parsing attributes in process `syz.1.7347'. [ 365.750214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.766622][T21749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.840201][T21749] team0: Port device team_slave_0 added [ 365.851557][T21749] team0: Port device team_slave_1 added [ 365.889244][T21749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.897023][T21749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.932853][T21749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.945046][T21749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.953846][T21749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.992261][T21749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.031643][T21749] hsr_slave_0: entered promiscuous mode [ 366.038726][T21749] hsr_slave_1: entered promiscuous mode [ 366.044638][T21749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.052510][T21749] Cannot create hsr debugfs directory [ 366.112774][T21891] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 366.152586][T21749] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 366.164597][T21749] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 366.179807][T21749] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 366.203417][T21749] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 366.262387][T21749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.274999][T21749] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.284341][T20042] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.291431][T20042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.305030][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.312127][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.398272][T21749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.495759][ T47] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 366.532438][T21749] veth0_vlan: entered promiscuous mode [ 366.540478][T21749] veth1_vlan: entered promiscuous mode [ 366.560858][T21749] veth0_macvtap: entered promiscuous mode [ 366.569257][T21749] veth1_macvtap: entered promiscuous mode [ 366.581372][T21749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.592695][T21749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.603090][T21749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.613675][T21749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.624480][T21749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.637349][T21749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.648478][T21749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.657923][ T30] audit: type=1400 audit(1742934722.048:1788): avc: denied { watch } for pid=21914 comm="syz.0.7363" path="anon_inode:[fanotify]" dev="anon_inodefs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:anon_inodefs_t tclass=filesystem permissive=1 [ 366.659268][T21749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.708109][ T47] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 366.718141][T21917] kernel read not supported for file /eth0 (pid: 21917 comm: syz.0.7364) [ 366.726968][ T30] audit: type=1800 audit(1742934722.128:1789): pid=21917 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.7364" name="eth0" dev="mqueue" ino=28368 res=0 errno=0 [ 366.727006][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.751690][ T30] audit: type=1400 audit(1742934722.148:1790): avc: denied { append } for pid=21916 comm="syz.0.7364" name="usbmon5" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 366.758258][T21749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.796922][ T47] usb 5-1: config 0 descriptor?? [ 366.806516][ T30] audit: type=1400 audit(1742934722.208:1791): avc: denied { append } for pid=21918 comm="syz.1.7365" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 366.807584][ T47] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 366.841560][T21749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.857389][T21749] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.869187][T21749] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.878166][T21749] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.886988][T21749] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.959940][T20063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.972698][T20063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.981799][T21925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.003964][T20042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.011905][T20042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.070117][T21928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.081896][T21928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.091321][T21928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.101055][T21928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.109786][T21928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.118202][T21928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.257519][ T5141] Bluetooth: hci4: command tx timeout [ 367.366015][ T5904] kernel read not supported for file /dsp1 (pid: 5904 comm: kworker/0:7) [ 367.518328][T21950] @: renamed from vlan0 (while UP) [ 367.619601][ T47] usb 5-1: USB disconnect, device number 69 [ 367.973077][ T30] audit: type=1400 audit(1742934723.368:1792): avc: denied { mount } for pid=21979 comm="syz.1.7386" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 368.082699][T21983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7388'. [ 368.134465][T21938] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 368.145783][T21938] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 368.161202][ T30] audit: type=1400 audit(1742934723.558:1793): avc: denied { getopt } for pid=21990 comm="syz.0.7391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 368.223921][T21995] syz.1.7394: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 368.239368][T21995] CPU: 0 UID: 0 PID: 21995 Comm: syz.1.7394 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 368.239397][T21995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 368.239408][T21995] Call Trace: [ 368.239414][T21995] [ 368.239421][T21995] dump_stack_lvl+0x16c/0x1f0 [ 368.239447][T21995] warn_alloc+0x248/0x3a0 [ 368.239467][T21995] ? __pfx_warn_alloc+0x10/0x10 [ 368.239483][T21995] ? __pfx_stack_trace_save+0x10/0x10 [ 368.239510][T21995] ? kasan_save_stack+0x42/0x60 [ 368.239526][T21995] ? kasan_save_stack+0x33/0x60 [ 368.239541][T21995] ? kasan_save_track+0x14/0x30 [ 368.239554][T21995] ? __kasan_kmalloc+0xaa/0xb0 [ 368.239566][T21995] ? xskq_create+0x52/0x1d0 [ 368.239590][T21995] ? do_sock_setsockopt+0x221/0x470 [ 368.239614][T21995] ? __sys_setsockopt+0x1a0/0x230 [ 368.239632][T21995] ? __x64_sys_setsockopt+0xbd/0x160 [ 368.239656][T21995] __vmalloc_node_range_noprof+0x10ea/0x1540 [ 368.239686][T21995] ? xskq_create+0xfb/0x1d0 [ 368.239715][T21995] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 368.239745][T21995] ? xskq_create+0xfb/0x1d0 [ 368.239769][T21995] vmalloc_user_noprof+0x6b/0x90 [ 368.239794][T21995] ? xskq_create+0xfb/0x1d0 [ 368.239819][T21995] xskq_create+0xfb/0x1d0 [ 368.239844][T21995] xsk_setsockopt+0x640/0x840 [ 368.239868][T21995] ? __pfx_xsk_setsockopt+0x10/0x10 [ 368.239896][T21995] ? selinux_socket_setsockopt+0x6a/0x80 [ 368.239922][T21995] ? __pfx_xsk_setsockopt+0x10/0x10 [ 368.239946][T21995] do_sock_setsockopt+0x221/0x470 [ 368.239971][T21995] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 368.240008][T21995] __sys_setsockopt+0x1a0/0x230 [ 368.240031][T21995] __x64_sys_setsockopt+0xbd/0x160 [ 368.240051][T21995] ? do_syscall_64+0x91/0x260 [ 368.240071][T21995] ? lockdep_hardirqs_on+0x7c/0x110 [ 368.240091][T21995] do_syscall_64+0xcd/0x260 [ 368.240113][T21995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.240131][T21995] RIP: 0033:0x7fb97b58d169 [ 368.240145][T21995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.240162][T21995] RSP: 002b:00007fb97c4b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 368.240180][T21995] RAX: ffffffffffffffda RBX: 00007fb97b7a5fa0 RCX: 00007fb97b58d169 [ 368.240198][T21995] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 368.240210][T21995] RBP: 00007fb97b60e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 368.240225][T21995] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.240236][T21995] R13: 0000000000000000 R14: 00007fb97b7a5fa0 R15: 00007ffe8a1484f8 [ 368.240258][T21995] [ 368.240265][T21995] Mem-Info: [ 368.385121][T22005] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 368.390339][T21995] active_anon:27752 inactive_anon:0 isolated_anon:0 [ 368.390339][T21995] active_file:9937 inactive_file:14173 isolated_file:0 [ 368.390339][T21995] unevictable:753 dirty:473 writeback:0 [ 368.390339][T21995] slab_reclaimable:12709 slab_unreclaimable:123576 [ 368.390339][T21995] mapped:28678 shmem:25244 pagetables:1227 [ 368.390339][T21995] sec_pagetables:0 bounce:0 [ 368.390339][T21995] kernel_misc_reclaimable:0 [ 368.390339][T21995] free:1295593 free_pcp:3807 free_cma:0 [ 368.453700][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.562704][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.578990][T21995] Node 0 active_anon:110976kB inactive_anon:0kB active_file:39640kB inactive_file:56560kB unevictable:1508kB isolated(anon):0kB isolated(file):0kB mapped:114480kB dirty:1884kB writeback:0kB shmem:99440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12280kB pagetables:5208kB sec_pagetables:0kB all_unreclaimable? no [ 368.611426][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.627292][T21995] Node 1 active_anon:32kB inactive_anon:0kB active_file:108kB inactive_file:132kB unevictable:1504kB isolated(anon):0kB isolated(file):0kB mapped:232kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 368.657902][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.673318][T22016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7402'. [ 368.673414][T21995] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 368.709767][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.735218][T21995] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 368.742259][T21995] Node 0 DMA32 free:1266368kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:110804kB inactive_anon:0kB active_file:39584kB inactive_file:54960kB unevictable:1508kB writepending:1880kB present:3129332kB managed:2544960kB mlocked:0kB bounce:0kB free_pcp:13456kB local_pcp:11996kB free_cma:0kB [ 368.772873][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.785972][T21995] lowmem_reserve[]: 0 0 1 1 1 [ 368.794279][T21995] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:172kB inactive_anon:0kB active_file:56kB inactive_file:1600kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:44kB local_pcp:20kB free_cma:0kB [ 368.821860][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.848317][T21995] lowmem_reserve[]: 0 0 0 0 0 [ 368.856318][T21995] Node 1 Normal free:3901360kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:108kB inactive_file:132kB unevictable:1504kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:1700kB local_pcp:1700kB free_cma:0kB [ 368.915974][T21995] lowmem_reserve[]: 0 0 0 0 0 [ 368.920747][T21995] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 368.965853][T21995] Node 0 DMA32: 47*4kB (UME) 201*8kB (UME) 145*16kB (UME) 575*32kB (UME) 435*64kB (UME) 507*128kB (UME) 388*256kB (UME) 308*512kB (UM) 189*1024kB (UM) 4*2048kB (UM) 169*4096kB (M) = 1266228kB [ 369.008210][T21995] Node 0 Normal: 3*4kB (M) 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 369.042593][T21995] Node 1 Normal: 7*4kB (ME) 11*8kB (UME) 7*16kB (ME) 196*32kB (UME) 100*64kB (UME) 35*128kB (UME) 16*256kB (UME) 10*512kB (UME) 4*1024kB (UM) 8*2048kB (UME) 941*4096kB (M) = 3901412kB [ 369.097637][T21995] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.128486][T21995] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 369.181211][T21995] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.195519][T21995] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 369.205180][T21995] 52205 total pagecache pages [ 369.210246][T21995] 0 pages in swap cache [ 369.214396][T21995] Free swap = 124840kB [ 369.219668][T21995] Total swap = 124996kB [ 369.235884][T21995] 2097051 pages RAM [ 369.239796][T21995] 0 pages HighMem/MovableOnly [ 369.244486][T21995] 428705 pages reserved [ 369.249154][T21995] 0 pages cma reserved [ 369.395219][ T30] audit: type=1400 audit(1742934724.788:1794): avc: denied { mounton } for pid=22059 comm="syz.3.7420" path="/1481/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 369.948529][ T30] audit: type=1400 audit(1742934725.348:1795): avc: denied { bind } for pid=22096 comm="syz.3.7433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 370.072188][T22102] netlink: 277 bytes leftover after parsing attributes in process `syz.3.7436'. [ 370.159813][T22111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7439'. [ 370.293221][T22121] netlink: 'syz.3.7442': attribute type 1 has an invalid length. [ 370.311570][T22121] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7442'. [ 370.382754][T22131] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7445'. [ 370.583730][T22149] loop8: detected capacity change from 0 to 7 [ 370.595104][T22149] Dev loop8: unable to read RDB block 7 [ 370.603325][T22149] loop8: unable to read partition table [ 370.609342][T22149] loop8: partition table beyond EOD, truncated [ 370.615641][T22149] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 370.716335][ T47] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 370.771120][T22164] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7462'. [ 370.867829][ T47] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 370.879663][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 370.891150][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 370.902433][ T47] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 370.911569][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.921316][ T47] usb 1-1: config 0 descriptor?? [ 370.926885][T22139] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 370.934996][ T47] hub 1-1:0.0: USB hub found [ 370.995780][ T5189] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 371.137916][ T47] hub 1-1:0.0: 1 port detected [ 371.147085][ T5189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 371.158638][ T5189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.171207][ T5189] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 371.190325][ T5189] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 371.198705][ T5189] usb 5-1: Manufacturer: syz [ 371.204675][ T5189] usb 5-1: config 0 descriptor?? [ 371.505734][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 371.506097][ T3469] net_ratelimit: 3 callbacks suppressed [ 371.506109][ T3469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.527477][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.540883][ T47] usb 1-1: USB disconnect, device number 70 [ 371.617841][ T5189] cougar 0003:060B:700A.0069: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 371.656305][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 371.662668][ T10] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 371.671050][ T10] usb 2-1: config 0 has no interface number 0 [ 371.677380][ T10] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 371.687597][ T10] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 371.700507][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 371.709759][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.719253][ T10] usb 2-1: Product: syz [ 371.723535][ T10] usb 2-1: Manufacturer: syz [ 371.728414][ T10] usb 2-1: SerialNumber: syz [ 371.734367][ T10] usb 2-1: config 0 descriptor?? [ 371.741928][T22184] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 371.749307][T22184] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 371.778390][T22201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.813909][ T30] audit: type=1400 audit(1742934727.208:1796): avc: denied { write } for pid=22202 comm="syz.6.7480" path="socket:[82757]" dev="sockfs" ino=82757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 371.821763][ T47] usb 5-1: USB disconnect, device number 70 [ 371.837346][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.838080][T22202] delete_channel: no stack [ 371.854064][ T5820] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 371.913678][T22207] new mount options do not match the existing superblock, will be ignored [ 371.927687][ T30] audit: type=1400 audit(1742934727.328:1797): avc: denied { remount } for pid=22206 comm="syz.6.7482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 371.930072][T22207] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 371.963458][T22184] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 371.971732][T22184] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 372.001288][T22209] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7483'. [ 372.001287][ T30] audit: type=1400 audit(1742934727.398:1798): avc: denied { nlmsg_read } for pid=22208 comm="syz.6.7483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 372.031896][ T5820] usb 4-1: Using ep0 maxpacket: 32 [ 372.038550][ T5820] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.048449][ T5820] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 372.061813][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 372.071722][ T5820] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 372.080850][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.091095][ T5820] usb 4-1: config 0 descriptor?? [ 372.361754][T22226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7491'. [ 372.390776][ T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 372.421270][ T10] asix 2-1:0.251: probe with driver asix failed with error -524 [ 372.508407][ T5820] corsair 0003:1B1C:1B3E.006A: report_id 3291754556 is invalid [ 372.521708][ T5820] corsair 0003:1B1C:1B3E.006A: item 0 4 1 8 parsing failed [ 372.612725][ T10] usb 2-1: USB disconnect, device number 68 [ 372.632860][ T5820] corsair 0003:1B1C:1B3E.006A: parse failed [ 372.639021][ T5820] corsair 0003:1B1C:1B3E.006A: probe with driver corsair failed with error -22 [ 372.725999][ T5189] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 372.727357][ T5820] usb 4-1: USB disconnect, device number 70 [ 372.825987][ T47] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 372.916001][ T5189] usb 5-1: Using ep0 maxpacket: 8 [ 372.924585][ T5189] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 372.955745][ T5189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.963756][ T5189] usb 5-1: Product: syz [ 372.974800][T22233] syz.0.7494 (22233): drop_caches: 2 [ 372.985319][ T5189] usb 5-1: Manufacturer: syz [ 372.992665][ T5189] usb 5-1: SerialNumber: syz [ 372.999837][ T5189] usb 5-1: config 0 descriptor?? [ 373.008013][ T47] usb 7-1: config 0 interface 0 altsetting 32 endpoint 0x8D has invalid maxpacket 200, setting to 64 [ 373.019520][ T5189] gspca_main: sq930x-2.14.0 probing 2770:930c [ 373.025665][ T47] usb 7-1: config 0 interface 0 altsetting 32 endpoint 0x5 has invalid wMaxPacketSize 0 [ 373.035483][ T47] usb 7-1: config 0 interface 0 altsetting 32 endpoint 0x8B has invalid wMaxPacketSize 0 [ 373.045611][ T47] usb 7-1: config 0 interface 0 has no altsetting 0 [ 373.052317][ T47] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 373.061425][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.071047][ T47] usb 7-1: config 0 descriptor?? [ 373.086997][ T5141] Bluetooth: hci5: urb ffff888053742300 submission failed (90) [ 373.164121][ T30] audit: type=1400 audit(1742934728.558:1799): avc: denied { append } for pid=22246 comm="syz.1.7501" name="event3" dev="devtmpfs" ino=1019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 373.243005][T22251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7503'. [ 373.288683][ T47] usb 7-1: USB disconnect, device number 2 [ 373.375266][T22260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.383920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.392565][ T5141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.401248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.409335][T22260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.417432][ T5141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.425535][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.433616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.451601][ T5189] gspca_sq930x: ucbus_write failed -71 [ 373.466959][T22262] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 373.565813][ T5860] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 373.675762][ T5189] gspca_sq930x: Sensor ov9630 not yet treated [ 373.681892][ T5189] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 373.691437][ T5189] usb 5-1: USB disconnect, device number 71 [ 373.719204][ T30] audit: type=1400 audit(1742934729.118:1800): avc: denied { execheap } for pid=22278 comm="syz.3.7516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 373.741010][ T5860] usb 2-1: Using ep0 maxpacket: 16 [ 373.749425][ T5860] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 373.757668][ T5860] usb 2-1: config 0 has no interface number 0 [ 373.768216][ T5860] usb 2-1: New USB device found, idVendor=05ac, idProduct=e7da, bcdDevice=4b.a9 [ 373.778504][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.786719][ T5860] usb 2-1: Product: syz [ 373.790879][ T5860] usb 2-1: Manufacturer: syz [ 373.795465][ T5860] usb 2-1: SerialNumber: syz [ 373.801622][ T5860] usb 2-1: config 0 descriptor?? [ 374.017361][ T5860] ipheth 2-1:0.15: Unable to find alternate settings interface [ 374.033228][ T5860] usb 2-1: USB disconnect, device number 69 [ 374.437612][T22332] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7542'. [ 374.540194][ T30] audit: type=1400 audit(1742934729.938:1801): avc: denied { mount } for pid=22340 comm="syz.4.7544" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 374.577177][T22343] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7546'. [ 374.636863][T22347] overlayfs: failed to resolve './file1': -2 [ 374.746575][ T5860] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 374.759929][ T10] IPVS: starting estimator thread 0... [ 374.865912][T22356] IPVS: using max 37 ests per chain, 88800 per kthread [ 374.895756][ T5860] usb 4-1: Using ep0 maxpacket: 16 [ 374.902138][ T5860] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 374.912406][ T5860] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.933292][ T5860] usb 4-1: config 0 has no interface number 0 [ 374.943448][ T5860] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 374.976348][ T5189] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 374.985464][ T5860] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 375.005452][ T5860] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 375.022175][ T5860] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 375.032527][ T5860] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 375.046033][ T5860] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 375.055787][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.075168][ T5860] usb 4-1: config 0 descriptor?? [ 375.081490][T22338] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 375.098303][ T5860] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 375.148747][ T5189] usb 1-1: Using ep0 maxpacket: 32 [ 375.164946][ T5189] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 375.179608][ T5189] usb 1-1: config 0 has no interface number 0 [ 375.197315][ T5189] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 375.212667][ T5189] usb 1-1: config 0 interface 85 has no altsetting 0 [ 375.221917][ T5189] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 375.232176][ T5189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.240481][ T30] audit: type=1400 audit(1742934730.648:1802): avc: denied { read } for pid=22376 comm="syz.6.7560" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 375.240671][ T5189] usb 1-1: Product: syz [ 375.270359][ T5893] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 375.285812][ T5189] usb 1-1: Manufacturer: syz [ 375.290688][ T5189] usb 1-1: SerialNumber: syz [ 375.297217][ T5189] usb 1-1: config 0 descriptor?? [ 375.312592][ T30] audit: type=1400 audit(1742934730.648:1803): avc: denied { open } for pid=22376 comm="syz.6.7560" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 375.337362][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.348533][ T30] audit: type=1400 audit(1742934730.678:1804): avc: denied { ioctl } for pid=22376 comm="syz.6.7560" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 375.369235][ T5860] usb 4-1: USB disconnect, device number 71 [ 375.374752][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.435911][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 375.443303][ T5893] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 375.453694][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.461757][ T5893] usb 5-1: Product: syz [ 375.465946][ T5893] usb 5-1: Manufacturer: syz [ 375.470564][ T5893] usb 5-1: SerialNumber: syz [ 375.478906][ T5893] usb 5-1: config 0 descriptor?? [ 375.494602][ T5893] gspca_main: se401-2.14.0 probing 047d:5003 [ 375.598198][T22389] mkiss: ax0: crc mode is auto. [ 375.617958][T22391] __nla_validate_parse: 2 callbacks suppressed [ 375.617973][T22391] netlink: 912 bytes leftover after parsing attributes in process `syz.6.7567'. [ 375.764163][ T5860] kernel write not supported for file /uhid (pid: 5860 comm: kworker/1:3) [ 375.928394][ T5189] appletouch 1-1:0.85: Geyser mode initialized. [ 375.935529][ T5189] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input92 [ 375.971401][ T30] audit: type=1400 audit(1742934731.368:1805): avc: denied { setopt } for pid=22407 comm="syz.3.7575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 375.992120][ T30] audit: type=1400 audit(1742934731.388:1806): avc: denied { getopt } for pid=22407 comm="syz.3.7575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 376.025804][ T5893] usb 5-1: reset high-speed USB device number 72 using dummy_hcd [ 376.138742][ T30] audit: type=1326 audit(1742934731.538:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22416 comm="syz.3.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed518d169 code=0x7ffc0000 [ 376.197490][ T30] audit: type=1326 audit(1742934731.538:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22416 comm="syz.3.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ed518d169 code=0x7ffc0000 [ 376.221064][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.230023][ T10] usb 1-1: USB disconnect, device number 71 [ 376.242523][T22419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7580'. [ 376.242985][ T30] audit: type=1326 audit(1742934731.538:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22416 comm="syz.3.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed518d169 code=0x7ffc0000 [ 376.277617][ T10] appletouch 1-1:0.85: input: appletouch disconnected [ 376.278559][ T30] audit: type=1326 audit(1742934731.538:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22416 comm="syz.3.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed518d169 code=0x7ffc0000 [ 376.355647][T22423] futex_wake_op: syz.3.7582 tries to shift op by 32; fix this program [ 376.475288][T22431] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.7586'. [ 376.588927][ T5893] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 376.598995][ T5893] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 376.607973][ T5893] usb 5-1: USB disconnect, device number 72 [ 376.699698][T22443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7592'. [ 376.745776][ T5189] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 376.836705][ T5860] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 376.918382][ T5189] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 376.927610][ T5189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.935599][ T5189] usb 4-1: Product: syz [ 376.940635][ T5189] usb 4-1: Manufacturer: syz [ 376.947010][ T5189] usb 4-1: SerialNumber: syz [ 376.953425][ T5189] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 376.987815][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.999021][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.009356][ T5860] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 377.018460][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.028359][ T5860] usb 2-1: config 0 descriptor?? [ 377.038519][ T5893] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 377.075905][ T5820] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 377.141132][T22456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7598'. [ 377.252324][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.263566][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 377.275425][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 28514, setting to 64 [ 377.286906][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 377.301386][ T5820] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 377.310837][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 377.319315][ T5820] usb 1-1: Product: syz [ 377.323587][ T5820] usb 1-1: Manufacturer: syz [ 377.328308][ T5820] usb 1-1: SerialNumber: syz [ 377.334358][ T5820] usb 1-1: config 0 descriptor?? [ 377.344374][T22453] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 377.446654][ T5860] hid-led 0003:1D34:0004.006B: unknown main item tag 0x0 [ 377.452707][ T5862] usb 4-1: USB disconnect, device number 72 [ 377.545262][T22465] net_ratelimit: 3 callbacks suppressed [ 377.545277][T22465] openvswitch: netlink: Key type 775 is out of range max 32 [ 377.558695][ T5820] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 377.565620][ T5820] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 377.645135][ T5860] hid-led 0003:1D34:0004.006B: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.1-1/input0 [ 377.679843][ T5860] hid-led 0003:1D34:0004.006B: Dream Cheeky Webmail Notifier initialized [ 377.760086][ T5820] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 377.768103][ T5820] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 377.780484][ T5820] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 377.877145][ T47] usb 2-1: USB disconnect, device number 70 [ 377.960506][ T5820] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 377.965932][ T5860] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 377.970741][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 377.983513][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 377.990179][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 377.996755][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 378.003317][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 378.010412][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 378.017977][ T5820] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 378.026557][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 378.033309][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 378.040569][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 378.047185][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 378.053783][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 378.055833][ T5893] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 378.062503][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 378.074265][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 378.080897][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 378.088960][ T5820] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 378.095003][T22486] SELinux: failed to load policy [ 378.103412][ T5893] ath9k_htc: Failed to initialize the device [ 378.106042][ T5820] usb 1-1: USB disconnect, device number 72 [ 378.116947][ T5862] usb 4-1: ath9k_htc: USB layer deinitialized [ 378.137684][ T5860] usb 5-1: unable to get BOS descriptor or descriptor too short [ 378.147271][ T5860] usb 5-1: config 6 has an invalid interface number: 200 but max is 0 [ 378.155441][ T5860] usb 5-1: config 6 has no interface number 0 [ 378.162392][ T5860] usb 5-1: config 6 interface 200 has no altsetting 0 [ 378.179055][ T5860] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 378.188409][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.196776][ T5860] usb 5-1: Product: syz [ 378.201053][ T5860] usb 5-1: Manufacturer: syz [ 378.205645][ T5860] usb 5-1: SerialNumber: syz [ 378.631348][T22519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7627'. [ 378.646020][T22519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7627'. [ 378.836232][ T47] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 378.979821][ T5860] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 378.991852][ T5860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 379.001386][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 379.007759][ T5860] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 379.016156][ T5860] usb 5-1: media controller created [ 379.021570][ T47] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 379.033046][ T47] usb 4-1: config 0 has no interface number 0 [ 379.043603][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 379.055770][ T47] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 379.068939][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.079767][ T47] usb 4-1: Product: syz [ 379.084022][ T47] usb 4-1: Manufacturer: syz [ 379.088817][ T47] usb 4-1: SerialNumber: syz [ 379.094921][ T47] usb 4-1: config 0 descriptor?? [ 379.102341][ T47] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 379.188221][ T5860] dvb-usb: bulk message failed: -71 (6/0) [ 379.194767][ T5860] dvb-usb: bulk message failed: -71 (6/0) [ 379.203979][ T5860] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 379.223359][ T5860] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input94 [ 379.247331][ T5860] dvb-usb: schedule remote query interval to 150 msecs. [ 379.254392][ T5860] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 379.279579][ T5860] usb 5-1: USB disconnect, device number 73 [ 379.313684][ T47] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 379.328328][ T47] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 379.359181][ T5860] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 379.489794][T22548] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7638'. [ 379.696115][ T47] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 379.740272][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 379.749587][ T5893] usb 4-1: USB disconnect, device number 73 [ 379.766491][ T5893] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 379.787433][ T5893] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 379.808084][ T5893] quatech2 4-1:0.51: device disconnected [ 379.818505][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 379.818520][ T30] audit: type=1400 audit(1742934735.208:1829): avc: denied { bind } for pid=22559 comm="syz.4.7644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 379.857179][ T47] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 379.865968][ T10] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 379.873692][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.925818][ T47] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 379.934931][ T47] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 379.949974][ T47] usb 2-1: Manufacturer: syz [ 379.961271][ T47] usb 2-1: config 0 descriptor?? [ 380.037714][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 380.057786][ T47] rc_core: IR keymap rc-hauppauge not found [ 380.058116][ T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.063691][ T47] Registered IR keymap rc-empty [ 380.064015][ T47] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 380.085247][ T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.127679][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 380.131881][ T47] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input95 [ 380.148170][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.174267][ T10] hub 1-1:4.0: USB hub found [ 380.194354][T22571] netlink: 'syz.4.7648': attribute type 21 has an invalid length. [ 380.384270][ T10] hub 1-1:4.0: 2 ports detected [ 380.390792][ T10] usb 1-1: selecting invalid altsetting 1 [ 380.397308][ T10] hub 1-1:4.0: Using single TT (err -22) [ 380.474983][ C1] igorplugusb 2-1:0.0: receive overflow invalid: 236 [ 380.595163][ T10] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 380.616152][ T10] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 380.648618][ T10] usb 1-1: USB disconnect, device number 73 [ 380.683856][ T47] usb 2-1: USB disconnect, device number 71 [ 380.840158][ T30] audit: type=1400 audit(1742934736.238:1830): avc: denied { mount } for pid=22609 comm="syz.3.7666" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 381.379995][T22635] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7678'. [ 381.674968][T22657] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7689'. [ 381.860945][T22672] netlink: del zone limit has 4 unknown bytes [ 381.945817][ T30] audit: type=1400 audit(1742934737.338:1831): avc: denied { mounton } for pid=22679 comm="syz.6.7700" path="/106/file0" dev="configfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 382.183206][T22699] netlink: 236 bytes leftover after parsing attributes in process `syz.0.7709'. [ 382.355808][ T5189] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 382.508175][ T5189] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 382.516606][ T5189] usb 5-1: config 0 has no interface number 0 [ 382.522704][ T5189] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.546001][ T5189] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.566119][ T5189] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 382.575269][ T5189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.584760][ T5189] usb 5-1: config 0 descriptor?? [ 382.625859][ T5893] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 382.635181][ T30] audit: type=1400 audit(1742934738.028:1832): avc: denied { ioctl } for pid=22724 comm="syz.0.7722" path="socket:[85013]" dev="sockfs" ino=85013 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 382.775911][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 382.783975][ T5893] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 382.805836][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.813864][ T5893] usb 2-1: Product: syz [ 382.821670][ T5893] usb 2-1: Manufacturer: syz [ 382.835765][ T5893] usb 2-1: SerialNumber: syz [ 382.842830][ T5893] r8152-cfgselector 2-1: Unknown version 0x0000 [ 382.849428][ T5893] r8152-cfgselector 2-1: config 0 descriptor?? [ 383.000195][ T5189] prodikeys 0003:041E:2801.006C: unknown main item tag 0x0 [ 383.007504][ T5189] prodikeys 0003:041E:2801.006C: unknown main item tag 0x0 [ 383.014744][ T5189] prodikeys 0003:041E:2801.006C: unknown main item tag 0x0 [ 383.026718][ T5189] prodikeys 0003:041E:2801.006C: unknown main item tag 0x0 [ 383.033973][ T5189] prodikeys 0003:041E:2801.006C: unknown main item tag 0x0 [ 383.052280][ T5189] prodikeys 0003:041E:2801.006C: unknown main item tag 0x0 [ 383.059837][ T5189] prodikeys 0003:041E:2801.006C: unknown main item tag 0x0 [ 383.076336][ T5189] prodikeys 0003:041E:2801.006C: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 383.090247][ T5893] r8152-cfgselector 2-1: Needed 1 retries to read version [ 383.097998][ T5893] r8152-cfgselector 2-1: Unknown version 0x5cb0 [ 383.104320][ T5893] r8152-cfgselector 2-1: bad CDC descriptors [ 383.137915][ T5189] hid_prodikeys: hid-prodikeys: failed to find output report [ 383.137915][ T5189] [ 383.157724][T22735] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.7726'. [ 383.168239][T22735] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 383.222593][ T5189] usb 5-1: USB disconnect, device number 74 [ 383.304424][ T5893] r8152-cfgselector 2-1: USB disconnect, device number 72 [ 383.385450][T22746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7732'. [ 383.406058][ T5820] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 383.567274][ T5820] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.577548][ T5820] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 383.593292][ T5820] usb 1-1: config 1 has no interface number 1 [ 383.600151][ T5820] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 383.613176][ T5820] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 383.628640][ T5820] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 383.638877][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.647377][ T5820] usb 1-1: Product: syz [ 383.651533][ T5820] usb 1-1: Manufacturer: syz [ 383.656860][ T5820] usb 1-1: SerialNumber: syz [ 383.686092][ T10] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 383.747901][T22757] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7737'. [ 383.850396][T22765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7740'. [ 383.860419][T22765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7740'. [ 383.867984][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.893786][ T5820] usb 1-1: 2:1 : invalid UAC_AS_GENERAL desc [ 383.903927][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.917410][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 383.920896][ T5820] usb 1-1: USB disconnect, device number 74 [ 383.936263][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.948774][ T10] usb 4-1: config 0 descriptor?? [ 383.977557][T22769] SELinux: ebitmap: truncated map [ 383.987758][T22769] SELinux: failed to load policy [ 384.146430][ T5189] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 384.194193][T22785] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 384.306962][ T5189] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 384.324635][ T5189] usb 2-1: config 1 interface 0 has no altsetting 0 [ 384.333221][ T5189] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.343123][ T5189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.352474][ T5189] usb 2-1: Product: syz [ 384.357357][ T5189] usb 2-1: Manufacturer: syz [ 384.361955][ T5189] usb 2-1: SerialNumber: syz [ 384.368411][T22767] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 384.382301][ T10] pyra 0003:1E7D:2CF6.006D: item fetching failed at offset 5/7 [ 384.391168][ T10] pyra 0003:1E7D:2CF6.006D: parse failed [ 384.396895][ T10] pyra 0003:1E7D:2CF6.006D: probe with driver pyra failed with error -22 [ 384.453420][T22799] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7757'. [ 384.546298][ T5820] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 384.590194][ T5189] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 384.601684][ T30] audit: type=1400 audit(1742934739.998:1833): avc: denied { module_load } for pid=22806 comm="syz.0.7761" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 384.611447][ T5189] usb 2-1: USB disconnect, device number 73 [ 384.640634][ T5893] usb 4-1: USB disconnect, device number 74 [ 384.739625][ T5820] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 384.748992][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.757024][ T5820] usb 7-1: Product: syz [ 384.761312][ T5820] usb 7-1: Manufacturer: syz [ 384.766115][ T5820] usb 7-1: SerialNumber: syz [ 384.771642][ T5820] usb 7-1: config 0 descriptor?? [ 384.778893][ T5820] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 385.218539][T22827] input: syz0 as /devices/virtual/input/input97 [ 385.276013][ T10] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 385.287884][ T30] audit: type=1326 audit(1742934740.688:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22832 comm="syz.1.7773" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb97b58d169 code=0x0 [ 385.394935][ T5820] gspca_sunplus: reg_r err -71 [ 385.400060][ T5820] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 385.409063][ T5820] usb 7-1: USB disconnect, device number 3 [ 385.436374][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 385.442722][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 150, changing to 7 [ 385.453859][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 42231, setting to 1024 [ 385.467715][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 385.477004][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.484966][ T10] usb 1-1: Product: syz [ 385.489183][ T10] usb 1-1: Manufacturer: syz [ 385.493762][ T10] usb 1-1: SerialNumber: syz [ 385.501578][ T10] usb 1-1: config 0 descriptor?? [ 385.508125][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 385.518256][ T10] em28xx 1-1:0.0: DVB interface 0 found: isoc [ 385.575902][ T5893] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 385.726901][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.738451][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.749111][ T5893] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 385.758671][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.776108][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 385.783558][ T5893] usb 4-1: config 0 descriptor?? [ 385.842308][ T10] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 385.851145][ T10] em28xx 1-1:0.0: board has no eeprom [ 385.916119][ T10] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 385.936528][ T10] em28xx 1-1:0.0: dvb set to isoc mode. [ 385.947773][ T5904] em28xx 1-1:0.0: Binding DVB extension [ 385.957398][ T10] usb 1-1: USB disconnect, device number 75 [ 385.963762][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 385.996767][ T5904] em28xx 1-1:0.0: Registering input extension [ 386.004969][ T10] em28xx 1-1:0.0: Closing input extension [ 386.033699][ T10] em28xx 1-1:0.0: Freeing device [ 386.195823][ T5189] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 386.210140][ T5893] playstation 0003:054C:0DF2.006E: unknown main item tag 0x0 [ 386.221499][ T5893] playstation 0003:054C:0DF2.006E: unknown main item tag 0x0 [ 386.230712][ T5893] playstation 0003:054C:0DF2.006E: unknown main item tag 0x0 [ 386.238346][ T5893] playstation 0003:054C:0DF2.006E: unknown main item tag 0x0 [ 386.257330][ T5893] playstation 0003:054C:0DF2.006E: unknown main item tag 0x0 [ 386.278182][ T5893] playstation 0003:054C:0DF2.006E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 386.356098][ T5189] usb 5-1: Using ep0 maxpacket: 32 [ 386.363858][ T5189] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 386.372606][ T5189] usb 5-1: config 0 has no interface number 0 [ 386.382630][ T5189] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 386.391689][ T5189] usb 5-1: config 0 has no interface number 0 [ 386.405794][ T5189] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 386.414218][ T5189] usb 5-1: config 0 has no interface number 0 [ 386.425445][ T5189] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 386.434854][ T5189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.438995][T22873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7791'. [ 386.455017][ T5189] usb 5-1: Product: syz [ 386.463925][ T5189] usb 5-1: Manufacturer: syz [ 386.469894][ T5189] usb 5-1: SerialNumber: syz [ 386.479954][ T5189] usb 5-1: config 0 descriptor?? [ 386.489849][ T5189] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 386.614584][ T5893] playstation 0003:054C:0DF2.006E: Failed to retrieve feature with reportID 32: -71 [ 386.625782][ T5893] playstation 0003:054C:0DF2.006E: Failed to retrieve DualSense firmware info: -71 [ 386.635119][ T5893] playstation 0003:054C:0DF2.006E: Failed to get firmware info from DualSense [ 386.644860][ T5893] playstation 0003:054C:0DF2.006E: Failed to create dualsense. [ 386.669213][ T5893] playstation 0003:054C:0DF2.006E: probe with driver playstation failed with error -71 [ 386.682783][ T5893] usb 4-1: USB disconnect, device number 75 [ 386.699354][ T5189] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 386.712908][ T5189] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 386.834958][T22892] netlink: 'syz.0.7800': attribute type 1 has an invalid length. [ 386.843915][T22892] netlink: 134708 bytes leftover after parsing attributes in process `syz.0.7800'. [ 386.930044][T22896] netlink: 'syz.0.7802': attribute type 1 has an invalid length. [ 387.066538][ T5189] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 387.120987][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 387.121288][ T10] usb 5-1: USB disconnect, device number 75 [ 387.137022][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 387.149345][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 387.161061][ T10] quatech2 5-1:0.51: device disconnected [ 387.216042][ T5904] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 387.218793][ T5189] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 387.231897][ T5189] usb 2-1: config 0 has no interface number 0 [ 387.241116][ T5189] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 387.256744][ T5189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.266846][ T5189] usb 2-1: Product: syz [ 387.271029][ T5189] usb 2-1: Manufacturer: syz [ 387.277297][ T5189] usb 2-1: SerialNumber: syz [ 387.283093][ T5189] usb 2-1: config 0 descriptor?? [ 387.289890][ T5189] yurex 2-1:0.50: Could not find endpoints [ 387.378787][ T5904] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 387.389969][ T5904] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.402629][ T5904] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.413495][ T5904] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 387.428214][ T5904] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 387.437643][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.448292][ T5904] usb 7-1: config 0 descriptor?? [ 387.520456][ T5189] usb 2-1: USB disconnect, device number 74 [ 387.583408][T22928] vivid-000: disconnect [ 387.589155][T22926] vivid-000: reconnect [ 387.694279][T22934] input: syz1 as /devices/virtual/input/input99 [ 387.835265][T22946] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 387.863732][ T5904] hid-picolcd 0003:04D8:C002.006F: unknown main item tag 0x0 [ 387.875741][ T5904] hid-picolcd 0003:04D8:C002.006F: unknown main item tag 0x0 [ 387.883172][ T5904] hid-picolcd 0003:04D8:C002.006F: unknown main item tag 0x0 [ 387.891566][ T5904] hid-picolcd 0003:04D8:C002.006F: unknown main item tag 0x0 [ 387.899116][ T5904] hid-picolcd 0003:04D8:C002.006F: unknown main item tag 0x0 [ 387.961183][T22951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7827'. [ 387.972340][ T5904] hid-picolcd 0003:04D8:C002.006F: No report with id 0x11 found [ 388.050098][ T30] audit: type=1400 audit(1742934743.448:1835): avc: denied { setopt } for pid=22960 comm="syz.4.7831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 388.065823][ T5189] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 388.085998][ T5893] usb 7-1: USB disconnect, device number 4 [ 388.141986][T22967] input: syz1 as /devices/virtual/input/input100 [ 388.253192][T22973] SELinux: failed to load policy [ 388.258658][ T5189] usb 4-1: Using ep0 maxpacket: 8 [ 388.268501][ T5189] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 388.287697][ T5189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.304213][ T5189] usb 4-1: Product: syz [ 388.316492][ T5189] usb 4-1: Manufacturer: syz [ 388.325754][ T5189] usb 4-1: SerialNumber: syz [ 388.333736][ T5189] usb 4-1: config 0 descriptor?? [ 388.554652][ T5189] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 388.570684][T22992] netlink: 'syz.1.7844': attribute type 9 has an invalid length. [ 388.578938][ T5904] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 388.743211][T23004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.752026][T23004] batadv_slave_1: entered promiscuous mode [ 388.769335][ T5904] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 388.781824][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.791082][ T5904] usb 5-1: Product: syz [ 388.795245][ T5904] usb 5-1: Manufacturer: syz [ 388.801108][ T5904] usb 5-1: SerialNumber: syz [ 388.807930][ T5904] usb 5-1: config 0 descriptor?? [ 388.814598][ T5904] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 076 [ 388.834225][T23006] mkiss: ax0: crc mode is auto. [ 388.875784][ T5893] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 388.926609][ T5820] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 389.038423][ T5893] usb 7-1: config 0 has an invalid interface number: 39 but max is 0 [ 389.053306][ T5893] usb 7-1: config 0 has no interface number 0 [ 389.061482][ T5893] usb 7-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 389.076084][ T5820] usb 1-1: Using ep0 maxpacket: 32 [ 389.083052][ T5820] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 389.091821][ T5820] usb 1-1: config 0 has no interface number 0 [ 389.099219][ T5893] usb 7-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 389.099227][ T5820] usb 1-1: config 0 interface 184 has no altsetting 0 [ 389.110996][ T5820] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 389.116090][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.126140][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.134001][ T5893] usb 7-1: Product: syz [ 389.142546][ T5820] usb 1-1: Product: syz [ 389.144465][ T5893] usb 7-1: Manufacturer: syz [ 389.150140][ T5820] usb 1-1: Manufacturer: syz [ 389.153646][ T5893] usb 7-1: SerialNumber: syz [ 389.158009][ T30] audit: type=1400 audit(1742934744.548:1836): avc: denied { write } for pid=23013 comm="syz.1.7855" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 389.158048][ T30] audit: type=1400 audit(1742934744.548:1837): avc: denied { open } for pid=23013 comm="syz.1.7855" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 389.159006][ T5820] usb 1-1: SerialNumber: syz [ 389.166465][ T5893] usb 7-1: config 0 descriptor?? [ 389.219418][ T5820] usb 1-1: config 0 descriptor?? [ 389.222030][ T5189] gspca_sunplus: reg_w_riv err -71 [ 389.231736][ T5189] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 389.232407][ T5820] smsc75xx v1.0.0 [ 389.241275][ T5189] usb 4-1: USB disconnect, device number 76 [ 389.427833][ T5904] i2c i2c-1: failure reading functionality [ 389.434916][ T5904] i2c i2c-1: connected i2c-tiny-usb device [ 389.442495][ T5904] usb 5-1: USB disconnect, device number 76 [ 389.464409][ T5893] usb 7-1: USB disconnect, device number 5 [ 389.776892][T23016] sctp: [Deprecated]: syz.3.7856 (pid 23016) Use of int in max_burst socket option. [ 389.776892][T23016] Use struct sctp_assoc_value instead [ 390.052140][ T5820] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 390.077329][ T5820] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 390.089437][ T5820] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 390.101297][ T5820] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 390.127059][ T5820] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 390.148860][ T5820] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 390.178175][ T5820] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 390.206984][ T5820] usb 1-1: USB disconnect, device number 76 [ 390.459803][T23052] QAT: Invalid ioctl 21531 [ 390.545835][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 390.659287][T23069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7880'. [ 390.725978][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 390.732294][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 390.752753][ T10] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 390.777496][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.785504][ T10] usb 7-1: Product: syz [ 390.795755][ T10] usb 7-1: Manufacturer: syz [ 390.804291][ T10] usb 7-1: SerialNumber: syz [ 390.817772][ T10] usb 7-1: config 0 descriptor?? [ 390.989912][T23086] input: syz1 as /devices/virtual/input/input101 [ 391.246484][ T10] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 391.306592][ T5904] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 391.480251][ T5904] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 391.490273][ T5904] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 391.501792][ T5904] usb 5-1: config 4 has no interface number 0 [ 391.508563][ T5904] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 391.525186][ T5904] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 391.535260][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.543777][ T5904] usb 5-1: Product: syz [ 391.548707][ T5904] usb 5-1: Manufacturer: syz [ 391.553856][ T5904] usb 5-1: SerialNumber: syz [ 391.647493][ T10] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 391.663351][ T10] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 391.683082][ T10] usb 7-1: USB disconnect, device number 6 [ 391.766784][ T5189] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 391.925804][ T5189] usb 2-1: Using ep0 maxpacket: 8 [ 391.934203][ T5189] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 391.943926][ T5189] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 391.952357][ T5189] usb 2-1: Product: syz [ 391.956603][ T5189] usb 2-1: Manufacturer: syz [ 391.961220][ T5189] usb 2-1: SerialNumber: syz [ 391.969255][ T5189] usb 2-1: config 0 descriptor?? [ 391.982086][ T5904] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 391.992016][ T5904] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 392.001113][ T5904] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 392.008541][ T5904] usb 5-1: media controller created [ 392.014701][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 392.039909][ T5904] DVB: Unable to find symbol dib7000p_attach() [ 392.046213][ T5904] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 392.096125][ T5904] rc_core: IR keymap rc-dib0700-rc5 not found [ 392.102284][ T5904] Registered IR keymap rc-empty [ 392.107974][ T5904] dvb-usb: could not initialize remote control. [ 392.114234][ T5904] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 392.414537][ T5904] usb 5-1: USB disconnect, device number 77 [ 392.423648][ T5904] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 392.435809][ T5893] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 392.587407][ T5893] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 392.601067][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.610895][ T5893] usb 7-1: config 0 descriptor?? [ 392.627018][ T5893] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 392.796504][ T5904] usb 2-1: USB disconnect, device number 75 [ 393.054842][ T5893] gp8psk: usb in 128 operation failed. [ 393.065955][ T5893] gp8psk: usb in 137 operation failed. [ 393.084949][ T5893] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 393.109214][ T5893] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 393.131945][ T5893] usb 7-1: USB disconnect, device number 7 [ 393.215045][ T30] audit: type=1400 audit(1742935004.608:1838): avc: denied { watch watch_reads } for pid=23157 comm="syz.4.7919" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 393.419192][T23170] SELinux: failed to load policy [ 393.457980][T23174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7927'. [ 393.629476][T23184] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.747554][T23184] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.786606][ T5893] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 393.855164][T23184] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.934055][T23184] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.957420][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 393.964593][ T5893] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 393.974827][ T5893] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 393.983823][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 393.994836][ T5893] usb 2-1: config 1 has no interface number 0 [ 394.001079][ T5893] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 394.013545][T23184] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.024664][ T5893] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 394.026495][T23184] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.039041][ T5893] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 394.055008][T23184] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.057021][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.079982][T23184] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.083352][ T5893] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 394.116066][ T5904] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 394.209033][T23219] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 394.269128][ T5904] usb 5-1: unable to get BOS descriptor or descriptor too short [ 394.277330][ T5904] usb 5-1: not running at top speed; connect to a high speed hub [ 394.289242][ T5904] usb 5-1: config 1 interface 0 has no altsetting 0 [ 394.299546][ T5904] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.40 [ 394.310632][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.314282][ T5893] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 394.319529][ T5904] usb 5-1: Product: syz [ 394.341438][ T5904] usb 5-1: SerialNumber: syz [ 394.365646][ T30] audit: type=1400 audit(1742935005.758:1839): avc: denied { mount } for pid=23228 comm="syz.3.7953" name="/" dev="autofs" ino=88250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 394.409330][ T30] audit: type=1400 audit(1742935005.808:1840): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 394.536234][ T5860] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 394.579286][ T5904] usbhid 5-1:1.0: can't add hid device: -71 [ 394.585263][ T5904] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 394.603044][ T5904] usb 5-1: USB disconnect, device number 78 [ 394.717031][ T5860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 394.728208][ T30] audit: type=1400 audit(1742935006.118:1841): avc: denied { write } for pid=23242 comm="syz.0.7960" path="socket:[87471]" dev="sockfs" ino=87471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 394.755780][ T5860] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.776116][ T5860] usb 7-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 394.778714][ T5820] IPVS: starting estimator thread 0... [ 394.785781][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.818934][ T5904] usb 2-1: USB disconnect, device number 76 [ 394.826257][ T5860] usb 7-1: config 0 descriptor?? [ 394.828621][ T5904] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 394.897571][T23249] IPVS: using max 45 ests per chain, 108000 per kthread [ 395.240569][ T5860] smartjoyplus 0003:6666:8802.0070: unknown main item tag 0x0 [ 395.253742][ T5860] smartjoyplus 0003:6666:8802.0070: unknown main item tag 0x0 [ 395.265900][ T5860] smartjoyplus 0003:6666:8802.0070: unknown main item tag 0x0 [ 395.285055][ T5860] smartjoyplus 0003:6666:8802.0070: unknown main item tag 0x0 [ 395.298977][ T5860] smartjoyplus 0003:6666:8802.0070: unknown main item tag 0x0 [ 395.310440][ T5860] smartjoyplus 0003:6666:8802.0070: hidraw0: USB HID v0.00 Device [HID 6666:8802] on usb-dummy_hcd.6-1/input0 [ 395.310475][T23275] netlink: 'syz.4.7975': attribute type 4 has an invalid length. [ 395.322482][ T5860] smartjoyplus 0003:6666:8802.0070: no output reports found [ 395.355783][ T5893] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 395.450275][ T5904] usb 7-1: USB disconnect, device number 8 [ 395.519135][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 395.528295][ T5893] usb 4-1: no configurations [ 395.532881][ T5893] usb 4-1: can't read configurations, error -22 [ 395.586144][ T5189] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 395.689859][T23303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7988'. [ 395.747131][ T5189] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.757664][ T5189] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.767515][ T5189] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 395.776694][ T5189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 395.784684][ T5189] usb 1-1: SerialNumber: syz [ 395.996961][ T5189] usb 1-1: 0:2 : does not exist [ 396.025925][ T5189] usb 1-1: USB disconnect, device number 77 [ 396.094656][ T5860] kernel write not supported for file /snd/seq (pid: 5860 comm: kworker/1:3) [ 396.444046][T23348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8009'. [ 396.521092][T23354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.652641][T23362] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 396.691708][T23371] mkiss: ax0: crc mode is auto. [ 396.949101][T23389] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 396.996196][ T5860] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 397.147296][ T5860] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 397.158012][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.167516][ T5860] usb 4-1: config 0 descriptor?? [ 397.229797][T23410] program syz.6.8039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.276903][T23412] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 397.303038][T23412] syzkaller0: owner set to 0 [ 397.323423][T23418] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 397.393493][ T5860] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 397.416049][ T5860] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 397.596053][ T5860] [drm:udl_init] *ERROR* Selecting channel failed [ 397.614515][ T5860] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 397.636696][ T5860] [drm] Initialized udl on minor 2 [ 397.645505][ T5860] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 397.661289][ T5860] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 397.673280][ T5893] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 397.682878][ T5860] usb 4-1: USB disconnect, device number 79 [ 397.692465][ T5893] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 397.797983][T23449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8055'. [ 398.232719][ T30] audit: type=1400 audit(1742935009.628:1842): avc: denied { bind } for pid=23490 comm="syz.0.8076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 398.385798][ T5904] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 398.491936][ T30] audit: type=1400 audit(1742935009.888:1843): avc: denied { getopt } for pid=23501 comm="syz.4.8080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 398.511666][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.547562][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.560892][ T5904] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 398.570181][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.581763][ T5904] usb 2-1: config 0 descriptor?? [ 398.689387][T23514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.755800][ T10] kernel read not supported for file /dsp1 (pid: 10 comm: kworker/0:1) [ 398.945166][T23526] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8091'. [ 398.954731][T23524] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8091'. [ 398.965338][T23526] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8091'. [ 398.977935][T23530] delete_channel: no stack [ 398.995853][T23528] delete_channel: no stack [ 399.010366][ T5904] keytouch 0003:0926:3333.0071: fixing up Keytouch IEC report descriptor [ 399.028417][ T5904] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0071/input/input104 [ 399.112410][ T5904] keytouch 0003:0926:3333.0071: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 399.206089][ T5860] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 399.356108][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 399.362498][ T5860] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.374333][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 399.385524][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 399.398534][ T5860] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 399.408078][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.421403][ T5860] usb 4-1: config 0 descriptor?? [ 399.436656][T23529] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 399.444851][ T5860] hub 4-1:0.0: USB hub found [ 399.461776][T23554] CIFS: VFS: Malformed UNC in devname [ 399.600693][ T10] usb 2-1: USB disconnect, device number 77 [ 399.652498][ T5860] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 399.946060][ T5893] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 400.047492][T23571] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.059400][ T5860] usbhid 4-1:0.0: can't add hid device: -71 [ 400.065427][ T5860] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 400.097510][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 400.103347][ T5860] usb 4-1: USB disconnect, device number 80 [ 400.110535][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.124060][ T5893] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 400.134107][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.144972][ T5893] usb 5-1: config 0 descriptor?? [ 400.193470][ T5893] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 400.432858][ T30] audit: type=1326 audit(1742935011.828:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23597 comm="syz.1.8124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb97b58d169 code=0x0 [ 400.728086][ T30] audit: type=1400 audit(1742935012.128:1845): avc: denied { mounton } for pid=23607 comm="syz.3.8128" path="/1621/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 400.860045][T23613] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8130'. [ 400.993488][ T5893] gspca_vc032x: reg_w err -71 [ 400.993797][ T10] kernel read not supported for file /usbmon0 (pid: 10 comm: kworker/0:1) [ 400.998829][ T5893] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 401.022795][ T5893] usb 5-1: USB disconnect, device number 79 [ 401.167982][T23631] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8138'. [ 401.468291][T23651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8147'. [ 401.554468][T23655] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8149'. [ 401.611355][T23659] SELinux: failed to load policy [ 402.035787][ T5893] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 402.205772][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 402.227164][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.246276][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.265815][ T5893] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 402.274871][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.304396][ T5893] usb 2-1: config 0 descriptor?? [ 402.486312][T23717] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 402.720325][ T5893] logitech 0003:046D:C24F.0072: unknown main item tag 0x0 [ 402.727754][ T5893] logitech 0003:046D:C24F.0072: unknown main item tag 0x0 [ 402.734932][ T5893] logitech 0003:046D:C24F.0072: unknown main item tag 0x0 [ 402.742489][ T5893] logitech 0003:046D:C24F.0072: unknown main item tag 0x0 [ 402.750205][ T5893] logitech 0003:046D:C24F.0072: unknown main item tag 0x0 [ 402.757958][ T5893] logitech 0003:046D:C24F.0072: hidraw0: USB HID v0.00 Device [HID 046d:c24f] on usb-dummy_hcd.1-1/input0 [ 402.769687][ T5893] logitech 0003:046D:C24F.0072: no inputs found [ 402.943086][ T10] usb 2-1: USB disconnect, device number 78 [ 402.966028][ T5904] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 403.072064][ T30] audit: type=1326 audit(1742935014.468:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23702 comm="syz.4.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38078d169 code=0x7fc00000 [ 403.128773][ T5904] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 403.138024][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.147688][ T5904] usb 7-1: Product: syz [ 403.152265][ T5904] usb 7-1: Manufacturer: syz [ 403.158233][ T5904] usb 7-1: SerialNumber: syz [ 403.166378][ T5904] usb 7-1: config 0 descriptor?? [ 403.340952][T23739] input: syz0 as /devices/virtual/input/input105 [ 403.578685][ T5904] usb 7-1: Firmware: major: 227, minor: 157, hardware type: UNKNOWN (181) [ 403.779603][ T5904] usb 7-1: failed to fetch extended address, random address set [ 403.790816][ T5904] usb 7-1: atusb_probe: initialization failed, error = -524 [ 403.793127][T23767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8200'. [ 403.799707][ T5904] atusb 7-1:0.0: probe with driver atusb failed with error -524 [ 403.819788][ T5904] usb 7-1: USB disconnect, device number 9 [ 403.983413][T23782] netlink: 'syz.1.8207': attribute type 1 has an invalid length. [ 404.083309][T23790] vxcan1: tx address claim with dest, not broadcast [ 404.382381][T23809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8220'. [ 404.415015][T23811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8221'. [ 404.497663][T23817] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8224'. [ 404.712438][ T30] audit: type=1400 audit(1742935016.108:1847): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 404.712478][ T30] audit: type=1400 audit(1742935016.108:1848): avc: denied { open } for pid=5826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 404.712507][ T30] audit: type=1400 audit(1742935016.108:1849): avc: denied { ioctl } for pid=5826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 404.880894][T23833] netlink: 188 bytes leftover after parsing attributes in process `syz.4.8231'. [ 404.880914][T23833] netlink: 'syz.4.8231': attribute type 1 has an invalid length. [ 404.883549][ T30] audit: type=1400 audit(1742935016.278:1850): avc: denied { read } for pid=23832 comm="syz.4.8231" dev="nsfs" ino=4026533268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 404.883588][ T30] audit: type=1400 audit(1742935016.278:1851): avc: denied { open } for pid=23832 comm="syz.4.8231" path="net:[4026533268]" dev="nsfs" ino=4026533268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 404.883618][ T30] audit: type=1400 audit(1742935016.278:1852): avc: denied { create } for pid=23832 comm="syz.4.8231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 404.883651][ T30] audit: type=1400 audit(1742935016.278:1853): avc: denied { write } for pid=23832 comm="syz.4.8231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 404.939579][ T30] audit: type=1400 audit(1742935016.338:1854): avc: denied { create } for pid=23835 comm="syz.4.8233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 404.962816][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.975481][T23839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8234'. [ 405.033402][ T30] audit: type=1400 audit(1742935016.338:1855): avc: denied { create } for pid=23834 comm="syz.1.8232" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 405.112695][ T30] audit: type=1400 audit(1742935016.338:1856): avc: denied { map } for pid=23834 comm="syz.1.8232" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=90696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 405.367772][T23859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 405.491861][T23867] sp0: Synchronizing with TNC [ 405.497901][ T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 405.522043][T23870] netdevsim netdevsim6 netdevsim0: Unsupported IPsec algorithm [ 405.585561][T23872] kvm: kvm [23871]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x35000bf4a7e59801 [ 405.615872][ T5904] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 405.656011][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 405.662583][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 405.674586][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 405.687488][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 405.698129][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.706483][ T10] usb 2-1: Product: syz [ 405.710783][ T10] usb 2-1: Manufacturer: syz [ 405.715371][ T10] usb 2-1: SerialNumber: syz [ 405.738675][ T10] usb 2-1: config 0 descriptor?? [ 405.745774][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 405.757970][ T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 405.775802][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 405.782247][ T5904] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 405.795805][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.814794][ T5904] usb 4-1: config 0 descriptor?? [ 405.824980][ T5904] gspca_main: sunplus-2.14.0 probing 041e:400b [ 405.995436][T23894] xt_CT: No such helper "snmp" [ 406.237936][ T5904] gspca_sunplus: reg_w_riv err -71 [ 406.253615][ T5904] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 406.263199][ T5904] usb 4-1: USB disconnect, device number 81 [ 406.360247][ T10] em28xx 2-1:0.0: chip ID is em2874 [ 406.491185][T23916] team0: entered promiscuous mode [ 406.496784][T23916] team_slave_0: entered promiscuous mode [ 406.502668][T23916] team_slave_1: entered promiscuous mode [ 406.512870][T23915] team0: left promiscuous mode [ 406.518004][T23915] team_slave_0: left promiscuous mode [ 406.524857][T23915] team_slave_1: left promiscuous mode [ 406.572417][ T5189] usb 2-1: USB disconnect, device number 79 [ 406.579520][ T5189] em28xx 2-1:0.0: Disconnecting em28xx [ 406.597370][ T5189] em28xx 2-1:0.0: Freeing device [ 407.474962][T23995] syz.3.8305: attempt to access beyond end of device [ 407.474962][T23995] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 407.488472][T23995] XFS (nbd3): SB validate failed with error -5. [ 407.616738][ T10] kernel write not supported for file /3485/attr/exec (pid: 10 comm: kworker/0:1) [ 407.696813][ T5189] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 407.707469][T24016] IPVS: persistence engine module ip_vs_pe_ not found [ 407.771344][T24027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8317'. [ 407.855792][ T5189] usb 1-1: Using ep0 maxpacket: 16 [ 407.868284][ T5189] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.886682][ T5189] usb 1-1: config 0 interface 0 has no altsetting 0 [ 407.900120][ T5189] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 407.915891][ T5189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.926884][ T5189] usb 1-1: config 0 descriptor?? [ 408.039016][T24051] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8328'. [ 408.332951][T24070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8338'. [ 408.346171][ T5189] nzxt-smart2 0003:1E71:2009.0073: item fetching failed at offset 0/5 [ 408.364772][T24070] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 408.372418][ T5189] nzxt-smart2 0003:1E71:2009.0073: probe with driver nzxt-smart2 failed with error -22 [ 408.550417][ T5189] usb 1-1: USB disconnect, device number 78 [ 408.700920][ T5904] kernel read not supported for file /dsp (pid: 5904 comm: kworker/0:7) [ 408.831854][T24097] input: syz0 as /devices/virtual/input/input107 [ 409.005763][ T5189] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 409.141727][T24107] netlink: 'syz.3.8354': attribute type 10 has an invalid length. [ 409.164487][T24107] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 409.173297][T24107] batman_adv: batadv0: Adding interface: wlan1 [ 409.177022][ T5189] usb 5-1: Using ep0 maxpacket: 8 [ 409.182333][T24107] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.186302][ T5189] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 409.219729][T24107] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 409.230250][ T5189] usb 5-1: config 2 has no interface number 0 [ 409.266203][ T5189] usb 5-1: config 2 interface 31 has no altsetting 0 [ 409.289427][ T5189] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 409.315857][ T5189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.324027][ T5189] usb 5-1: Product: syz [ 409.328782][ T5189] usb 5-1: Manufacturer: syz [ 409.333385][ T5189] usb 5-1: SerialNumber: syz [ 409.340809][T24115] ax25_connect(): syz.1.8359 uses autobind, please contact jreuter@yaina.de [ 409.407451][ T5904] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 409.567005][ T5904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.586012][ T5904] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 409.610793][ T5904] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.635765][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.643785][ T5904] usb 1-1: Product: syz [ 409.663958][ T5904] usb 1-1: Manufacturer: syz [ 409.669599][ T5904] usb 1-1: SerialNumber: syz [ 409.746308][ T30] kauditd_printk_skb: 122 callbacks suppressed [ 409.746324][ T30] audit: type=1400 audit(1742935021.148:1979): avc: denied { sys_module } for pid=24148 comm="syz.1.8376" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 409.752870][T24152] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 409.791562][T20042] Bluetooth: hci5: Frame reassembly failed (-84) [ 409.813553][ T30] audit: type=1400 audit(1742935021.208:1980): avc: denied { append } for pid=24155 comm="syz.6.8378" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 409.881987][ T30] audit: type=1400 audit(1742935021.278:1981): avc: denied { listen } for pid=24157 comm="syz.1.8379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 409.889150][T24110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.902005][ T30] audit: type=1400 audit(1742935021.278:1982): avc: denied { accept } for pid=24157 comm="syz.1.8379" lport=32911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 409.971639][T24110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.977785][T24165] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8382'. [ 409.990547][T24164] input: syz0 as /devices/virtual/input/input108 [ 410.001607][ T5904] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 410.004795][ T5189] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 410.012294][ T5904] usb 1-1: USB disconnect, device number 79 [ 410.038434][ T5189] usb 5-1: USB disconnect, device number 80 [ 410.069791][ T30] audit: type=1400 audit(1742935021.468:1983): avc: denied { create } for pid=24167 comm="syz.6.8384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 410.094085][ T30] audit: type=1400 audit(1742935021.468:1984): avc: denied { write } for pid=24167 comm="syz.6.8384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 410.183398][ T30] audit: type=1400 audit(1742935021.578:1985): avc: denied { append } for pid=24174 comm="syz.6.8387" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 410.249149][T24175] dlm: no local IP address has been set [ 410.258643][T24175] dlm: cannot start dlm midcomms -107 [ 410.353643][ T30] audit: type=1400 audit(1742935021.748:1986): avc: denied { write } for pid=24179 comm="syz.6.8389" path="socket:[92047]" dev="sockfs" ino=92047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 410.358699][T24182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8390'. [ 410.377263][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.464947][ T30] audit: type=1400 audit(1742935021.858:1987): avc: denied { create } for pid=24187 comm="syz.1.8393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 410.495551][ T30] audit: type=1400 audit(1742935021.858:1988): avc: denied { getopt } for pid=24187 comm="syz.1.8393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 410.516490][ T5904] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 410.675830][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 410.687225][ T5904] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 410.695741][ T5904] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 410.714630][ T5904] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 410.724929][ T5904] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 410.745587][ T5904] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 410.759799][ T5904] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.771276][ T5904] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 410.776123][ T5189] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 410.781269][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.885415][T24218] netlink: 'syz.1.8408': attribute type 2 has an invalid length. [ 410.893400][T24218] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8408'. [ 410.946881][ T5189] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 410.962009][ T5189] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 410.971165][ T5189] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 410.981929][ T5189] usb 7-1: config 220 has no interface number 2 [ 410.988523][ T5189] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 411.012066][ T5904] usb 1-1: usb_control_msg returned -71 [ 411.012203][ T5189] usb 7-1: config 220 interface 0 has no altsetting 0 [ 411.017694][ T5904] usbtmc 1-1:16.0: can't read capabilities [ 411.030886][ T5189] usb 7-1: config 220 interface 76 has no altsetting 0 [ 411.033027][ T5904] usb 1-1: USB disconnect, device number 80 [ 411.037795][ T5189] usb 7-1: config 220 interface 1 has no altsetting 0 [ 411.039305][ T5189] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 411.060316][ T5189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.068502][ T5189] usb 7-1: Product: syz [ 411.072737][ T5189] usb 7-1: Manufacturer: syz [ 411.077583][ T5189] usb 7-1: SerialNumber: syz [ 411.206960][ T10] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 411.286579][ T5189] usb 7-1: selecting invalid altsetting 0 [ 411.292627][ T5189] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 411.299390][ T5189] usb 7-1: No valid video chain found. [ 411.307455][ T5189] usb 7-1: selecting invalid altsetting 0 [ 411.313236][ T5189] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 411.323570][ T5189] usb 7-1: USB disconnect, device number 10 [ 411.378550][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 411.403982][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 411.413124][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 411.425631][ T10] usb 2-1: Product: syz [ 411.430801][ T10] usb 2-1: Manufacturer: syz [ 411.435546][ T10] usb 2-1: SerialNumber: syz [ 411.447961][ T10] usb 2-1: config 0 descriptor?? [ 411.455429][ T10] usb 2-1: selecting invalid altsetting 0 [ 411.681175][ T5189] usb 2-1: USB disconnect, device number 80 [ 411.815886][ T5141] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 411.816197][ T5818] Bluetooth: hci5: command 0x1003 tx timeout [ 411.880642][T24257] netlink: 45 bytes leftover after parsing attributes in process `syz.3.8426'. [ 412.129108][T24282] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.8438'. [ 412.139781][T24282] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 412.208685][T24286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8440'. [ 412.222915][ T5904] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 412.404003][ T5904] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 412.416803][ T5904] usb 5-1: config 0 has no interface number 0 [ 412.439796][ T5904] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 412.449615][T24299] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8446'. [ 412.450849][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.492467][ T5904] usb 5-1: Product: syz [ 412.499515][T24286] team0 (unregistering): Port device team_slave_0 removed [ 412.511278][ T5904] usb 5-1: Manufacturer: syz [ 412.515969][ T5904] usb 5-1: SerialNumber: syz [ 412.528210][T24286] team0 (unregistering): Port device team_slave_1 removed [ 412.531687][ T5904] usb 5-1: config 0 descriptor?? [ 412.544249][ T5904] hub 5-1:0.217: bad descriptor, ignoring hub [ 412.563533][ T5904] hub 5-1:0.217: probe with driver hub failed with error -5 [ 412.766115][ T5904] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 412.785336][ T5904] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 412.802389][ T5904] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 412.811268][ T5904] usb 5-1: media controller created [ 412.823589][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.827314][T24319] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8455'. [ 412.896667][ T5189] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 412.921532][ T5904] DVB: Unable to find symbol dib7000p_attach() [ 412.942885][ T5904] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 412.957692][T24324] netlink: 'syz.3.8456': attribute type 1 has an invalid length. [ 413.015860][ T5904] rc_core: IR keymap rc-dib0700-rc5 not found [ 413.021956][ T5904] Registered IR keymap rc-empty [ 413.036108][ T5904] dvb-usb: could not initialize remote control. [ 413.042388][ T5904] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 413.063413][ T5904] usb 5-1: USB disconnect, device number 81 [ 413.075331][T24333] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8461'. [ 413.084720][T24333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 413.091977][T24333] IPv6: NLM_F_CREATE should be set when creating new route [ 413.099246][T24333] IPv6: NLM_F_CREATE should be set when creating new route [ 413.107337][ T5189] usb 1-1: Using ep0 maxpacket: 16 [ 413.116882][ T5189] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.128986][ T5189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 413.129303][ T5904] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 413.154863][T24333] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8461'. [ 413.171775][ T5189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 413.195471][T24333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 413.203450][ T5189] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 413.214976][ T5189] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.251672][ T5189] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 413.262294][ T5189] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 413.271943][ T5189] usb 1-1: Manufacturer: syz [ 413.277784][ T5189] usb 1-1: config 0 descriptor?? [ 413.309258][T24343] dvmrp0: entered allmulticast mode [ 413.545763][ T5189] rc_core: IR keymap rc-hauppauge not found [ 413.551805][ T5189] Registered IR keymap rc-empty [ 413.561926][ T5189] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.595813][ T5189] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.626068][ T5189] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 413.646315][ T5893] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 413.655169][ T5189] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input110 [ 413.697661][ T5189] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.730848][ T5189] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.776968][ T5189] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.796383][ T5189] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.805977][ T5893] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 413.823077][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.844432][ T5893] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 413.853752][ T5189] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.861926][ T5893] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 413.864939][T24373] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 413.875771][ T5189] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.889428][T24373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.894662][ T5893] usb 7-1: Manufacturer: syz [ 413.916707][ T5893] usb 7-1: config 0 descriptor?? [ 413.921834][ T5189] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.949058][ T5189] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.986403][ T5189] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.995764][ T5893] rc_core: IR keymap rc-hauppauge not found [ 414.001692][ T5893] Registered IR keymap rc-empty [ 414.013725][ T5893] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc1 [ 414.026682][ T5189] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 414.034861][ T5893] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc1/input111 [ 414.047208][ T5189] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 414.076841][ T5189] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 414.095059][ T5189] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 414.119039][ T5189] usb 1-1: USB disconnect, device number 81 [ 414.236321][ C1] igorplugusb 7-1:0.0: Error: urb status = -32 [ 414.243920][ T5893] usb 7-1: USB disconnect, device number 11 [ 414.318838][T24401] bond0: option resend_igmp: invalid value (7540) [ 414.325385][T24401] bond0: option resend_igmp: allowed values 0 - 255 [ 414.418582][ T5904] kernel write not supported for file /snd/seq (pid: 5904 comm: kworker/0:7) [ 414.595814][ T5189] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 414.758736][ T5189] usb 5-1: Using ep0 maxpacket: 32 [ 414.766853][ T5189] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.790779][ T5189] usb 5-1: config 0 has no interfaces? [ 414.803567][ T5189] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 414.813602][ T5189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.823412][ T5189] usb 5-1: config 0 descriptor?? [ 414.846842][T24429] netlink: 'syz.6.8502': attribute type 10 has an invalid length. [ 414.861791][T24429] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 414.951826][T24434] macvlan3: entered promiscuous mode [ 414.957753][T24434] bond0: entered promiscuous mode [ 414.963027][T24434] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 415.051332][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 415.051353][ T30] audit: type=1400 audit(1742935026.448:2039): avc: denied { read } for pid=24437 comm="syz.1.8507" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 415.080703][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.089519][ T10] usb 5-1: USB disconnect, device number 82 [ 415.119976][ T30] audit: type=1400 audit(1742935026.488:2040): avc: denied { write } for pid=10 comm="kworker/0:1" path="socket:[93135]" dev="sockfs" ino=93135 scontext=system_u:system_r:kernel_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 415.143563][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.152264][ T30] audit: type=1400 audit(1742935026.488:2041): avc: denied { open } for pid=24437 comm="syz.1.8507" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 415.179106][ T30] audit: type=1400 audit(1742935026.488:2042): avc: denied { write } for pid=24437 comm="syz.1.8507" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 415.211429][T24450] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24450 comm=syz.1.8512 [ 415.226760][ T30] audit: type=1400 audit(1742935026.628:2043): avc: denied { read } for pid=24449 comm="syz.1.8512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 415.327969][ T30] audit: type=1400 audit(1742935026.728:2044): avc: denied { ioctl } for pid=24454 comm="syz.0.8514" path="/dev/sg0" dev="devtmpfs" ino=725 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 415.430418][T24463] netlink: 'syz.3.8517': attribute type 1 has an invalid length. [ 415.467254][T24465] sctp: [Deprecated]: syz.1.8518 (pid 24465) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.467254][T24465] Use struct sctp_sack_info instead [ 415.495371][ T30] audit: type=1400 audit(1742935026.888:2045): avc: denied { bind } for pid=24469 comm="syz.6.8521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 415.575179][ T30] audit: type=1800 audit(1742935026.968:2046): pid=24474 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.8523" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 415.596510][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.725252][T24485] netlink: 'syz.6.8528': attribute type 5 has an invalid length. [ 415.779141][ T30] audit: type=1326 audit(1742935027.178:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24490 comm="syz.4.8531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38078d169 code=0x7ffc0000 [ 415.817794][ T30] audit: type=1326 audit(1742935027.178:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24490 comm="syz.4.8531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38078d169 code=0x7ffc0000 [ 416.319047][T24520] __nla_validate_parse: 1 callbacks suppressed [ 416.319064][T24520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8543'. [ 416.346122][ T5904] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 416.509704][T24538] autofs4:pid:24538:validate_dev_ioctl: invalid path supplied for cmd(0xc0189379) [ 416.519049][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 416.525099][ T5904] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 416.534190][ T5904] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 416.547769][ T5904] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 416.560027][ T5904] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 416.572069][ T5904] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 416.584333][ T5904] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 416.591967][ T5904] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 416.611253][ T5904] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 416.626421][ T5904] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 416.637928][ T5904] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 416.651352][ T5904] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 416.667225][ T5904] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 416.678915][ T5904] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 416.692097][ T5904] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 416.704325][ T5904] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 416.719856][ T5904] usb 5-1: string descriptor 0 read error: -22 [ 416.726366][ T5904] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 416.735450][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.749547][ T5904] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 416.895088][T24553] netlink: 'syz.0.8558': attribute type 5 has an invalid length. [ 416.928621][T24555] tipc: Enabling not permitted [ 416.934235][T24555] tipc: Enabling of bearer rejected, failed to enable media [ 416.959519][ T5904] usb 5-1: USB disconnect, device number 83 [ 416.994977][T24559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8561'. [ 417.008982][T24559] gretap0: entered promiscuous mode [ 417.014622][T24559] macvtap1: entered promiscuous mode [ 417.020237][T24559] macvtap1: entered allmulticast mode [ 417.025590][T24559] gretap0: entered allmulticast mode [ 417.131605][T24567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8564'. [ 417.141350][T24567] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8564'. [ 417.576218][ T5904] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 417.615760][ T5862] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 417.747337][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.759121][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.769165][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 417.782137][ T5904] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 417.791234][ T5862] usb 7-1: Using ep0 maxpacket: 32 [ 417.796486][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.805505][ T5862] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.817965][ T5904] usb 4-1: config 0 descriptor?? [ 417.827852][ T5862] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 417.837084][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.845121][ T5862] usb 7-1: Product: syz [ 417.851781][ T5862] usb 7-1: Manufacturer: syz [ 417.856475][ T5862] usb 7-1: SerialNumber: syz [ 417.862486][ T5862] usb 7-1: config 0 descriptor?? [ 417.869556][ T5862] usb 7-1: bad CDC descriptors [ 417.875611][ T5862] usb 7-1: unsupported MDLM descriptors [ 417.923696][T24592] netlink: 'syz.4.8576': attribute type 9 has an invalid length. [ 417.933246][T24592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8576'. [ 418.001487][T24598] syzkaller1: entered promiscuous mode [ 418.007701][T24598] syzkaller1: entered allmulticast mode [ 418.083614][ T5189] usb 7-1: USB disconnect, device number 12 [ 418.087358][T24602] input: syz1 as /devices/virtual/input/input112 [ 418.229576][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.239323][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.247331][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.255134][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.264754][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.272844][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.282174][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.290332][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.300352][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.307816][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.315336][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.324417][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.332276][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.339805][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.347468][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.355088][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.363297][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.370919][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.378481][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.394922][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.402843][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.410589][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.418800][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.426859][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.434305][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.442567][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.450354][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.457760][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.465503][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.473203][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.481502][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.489046][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.499179][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.507939][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.515553][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.523012][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.530487][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.538289][ T5904] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 418.546056][ T5904] plantronics 0003:047F:FFFF.0074: No inputs registered, leaving [ 418.555106][ T5904] plantronics 0003:047F:FFFF.0074: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 418.571548][ T5904] usb 4-1: USB disconnect, device number 82 [ 419.346377][ T5189] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 419.506335][ T5189] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.517882][ T5189] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 419.537116][ T5189] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 419.546811][ T5189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.554878][ T5189] usb 5-1: Product: syz [ 419.569882][ T5189] usb 5-1: Manufacturer: syz [ 419.578556][ T5189] usb 5-1: SerialNumber: syz [ 419.773769][T24703] syzkaller1: entered promiscuous mode [ 419.779390][T24703] syzkaller1: entered allmulticast mode [ 419.790810][T24651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.802965][T24651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.830548][ T5189] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 419.843805][ T5189] usb 5-1: USB disconnect, device number 84 [ 419.948310][T24711] [ 419.950661][T24711] ===================================================== [ 419.957584][T24711] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 419.965030][T24711] 6.14.0-syzkaller-01103-g2df0c02dab82 #0 Not tainted [ 419.971778][T24711] ----------------------------------------------------- [ 419.978695][T24711] syz.1.8631/24711 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 419.986406][T24711] ffff8880365a5948 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 419.995115][T24711] [ 419.995115][T24711] and this task is already holding: [ 420.002468][T24711] ffff88802b7bb230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x390 [ 420.012147][T24711] which would create a new lock dependency: [ 420.018030][T24711] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 420.025968][T24711] [ 420.025968][T24711] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 420.035416][T24711] (&dev->event_lock#2){..-.}-{3:3} [ 420.035452][T24711] [ 420.035452][T24711] ... which became SOFTIRQ-irq-safe at: [ 420.048337][T24711] lock_acquire+0x179/0x350 [ 420.052933][T24711] _raw_spin_lock_irqsave+0x3a/0x60 [ 420.058224][T24711] input_event+0x70/0xb0 [ 420.062554][T24711] hidinput_hid_event+0x1d55/0x2420 [ 420.067839][T24711] hid_process_event+0x4b7/0x5e0 [ 420.072872][T24711] hid_report_raw_event+0xa0a/0x1290 [ 420.078251][T24711] __hid_input_report.constprop.0+0x33f/0x450 [ 420.084392][T24711] hid_irq_in+0x35e/0x870 [ 420.088790][T24711] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 420.094231][T24711] usb_hcd_giveback_urb+0x39b/0x450 [ 420.099497][T24711] dummy_timer+0x180e/0x3a20 [ 420.104160][T24711] __hrtimer_run_queues+0x1ff/0xad0 [ 420.109424][T24711] hrtimer_run_softirq+0x17d/0x350 [ 420.114598][T24711] handle_softirqs+0x216/0x8e0 [ 420.119433][T24711] __irq_exit_rcu+0x109/0x170 [ 420.124175][T24711] irq_exit_rcu+0x9/0x30 [ 420.128484][T24711] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 420.134182][T24711] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.140227][T24711] _raw_spin_unlock_irqrestore+0x31/0x80 [ 420.145928][T24711] debug_check_no_obj_freed+0x31f/0x600 [ 420.151544][T24711] free_frozen_pages+0x281/0xf40 [ 420.156555][T24711] qlist_free_all+0x4e/0x120 [ 420.161218][T24711] kasan_quarantine_reduce+0x195/0x1e0 [ 420.166752][T24711] __kasan_slab_alloc+0x69/0x90 [ 420.171668][T24711] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 420.177112][T24711] usb_control_msg+0xbc/0x4a0 [ 420.181855][T24711] hub_port_init+0x1d0a/0x3a40 [ 420.186683][T24711] hub_event+0x2c67/0x4fa0 [ 420.191166][T24711] process_one_work+0x9cc/0x1b70 [ 420.196167][T24711] worker_thread+0x6c1/0xef0 [ 420.200819][T24711] kthread+0x3a4/0x760 [ 420.204955][T24711] ret_from_fork+0x45/0x80 [ 420.209449][T24711] ret_from_fork_asm+0x1a/0x30 [ 420.214283][T24711] [ 420.214283][T24711] to a SOFTIRQ-irq-unsafe lock: [ 420.221274][T24711] (tasklist_lock){.+.+}-{3:3} [ 420.221294][T24711] [ 420.221294][T24711] ... which became SOFTIRQ-irq-unsafe at: [ 420.233879][T24711] ... [ 420.233885][T24711] lock_acquire+0x179/0x350 [ 420.241012][T24711] _raw_read_lock+0x5f/0x70 [ 420.245580][T24711] __do_wait+0x105/0x890 [ 420.249899][T24711] do_wait+0x214/0x560 [ 420.254036][T24711] kernel_wait+0x9f/0x160 [ 420.258437][T24711] call_usermodehelper_exec_work+0xf1/0x170 [ 420.264395][T24711] process_one_work+0x9cc/0x1b70 [ 420.269399][T24711] worker_thread+0x6c1/0xef0 [ 420.274052][T24711] kthread+0x3a4/0x760 [ 420.278182][T24711] ret_from_fork+0x45/0x80 [ 420.282662][T24711] ret_from_fork_asm+0x1a/0x30 [ 420.287497][T24711] [ 420.287497][T24711] other info that might help us debug this: [ 420.287497][T24711] [ 420.297699][T24711] Chain exists of: [ 420.297699][T24711] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 420.297699][T24711] [ 420.310628][T24711] Possible interrupt unsafe locking scenario: [ 420.310628][T24711] [ 420.318921][T24711] CPU0 CPU1 [ 420.324266][T24711] ---- ---- [ 420.329622][T24711] lock(tasklist_lock); [ 420.333842][T24711] local_irq_disable(); [ 420.340572][T24711] lock(&dev->event_lock#2); [ 420.347752][T24711] lock(&new->fa_lock); [ 420.354493][T24711] [ 420.357926][T24711] lock(&dev->event_lock#2); [ 420.362764][T24711] [ 420.362764][T24711] *** DEADLOCK *** [ 420.362764][T24711] [ 420.370881][T24711] 6 locks held by syz.1.8631/24711: [ 420.376066][T24711] #0: ffff88802cf38118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 420.385197][T24711] #1: ffff88802b7bb230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x390 [ 420.395280][T24711] #2: ffffffff8e3be0c0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x390 [ 420.404918][T24711] #3: ffffffff8e3be0c0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x890 [ 420.414474][T24711] #4: ffffffff8e3be0c0 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x32/0xa30 [ 420.424550][T24711] #5: ffffffff8e3be0c0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 420.433579][T24711] [ 420.433579][T24711] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 420.443958][T24711] -> (&dev->event_lock#2){..-.}-{3:3} { [ 420.449498][T24711] IN-SOFTIRQ-W at: [ 420.453455][T24711] lock_acquire+0x179/0x350 [ 420.459592][T24711] _raw_spin_lock_irqsave+0x3a/0x60 [ 420.466421][T24711] input_event+0x70/0xb0 [ 420.472300][T24711] hidinput_hid_event+0x1d55/0x2420 [ 420.479132][T24711] hid_process_event+0x4b7/0x5e0 [ 420.485708][T24711] hid_report_raw_event+0xa0a/0x1290 [ 420.492637][T24711] __hid_input_report.constprop.0+0x33f/0x450 [ 420.500343][T24711] hid_irq_in+0x35e/0x870 [ 420.506319][T24711] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 420.513327][T24711] usb_hcd_giveback_urb+0x39b/0x450 [ 420.520159][T24711] dummy_timer+0x180e/0x3a20 [ 420.526385][T24711] __hrtimer_run_queues+0x1ff/0xad0 [ 420.533213][T24711] hrtimer_run_softirq+0x17d/0x350 [ 420.539949][T24711] handle_softirqs+0x216/0x8e0 [ 420.546342][T24711] __irq_exit_rcu+0x109/0x170 [ 420.552651][T24711] irq_exit_rcu+0x9/0x30 [ 420.558522][T24711] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 420.565783][T24711] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.573392][T24711] _raw_spin_unlock_irqrestore+0x31/0x80 [ 420.580651][T24711] debug_check_no_obj_freed+0x31f/0x600 [ 420.587828][T24711] free_frozen_pages+0x281/0xf40 [ 420.594400][T24711] qlist_free_all+0x4e/0x120 [ 420.600623][T24711] kasan_quarantine_reduce+0x195/0x1e0 [ 420.607715][T24711] __kasan_slab_alloc+0x69/0x90 [ 420.614191][T24711] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 420.621194][T24711] usb_control_msg+0xbc/0x4a0 [ 420.627523][T24711] hub_port_init+0x1d0a/0x3a40 [ 420.633915][T24711] hub_event+0x2c67/0x4fa0 [ 420.639960][T24711] process_one_work+0x9cc/0x1b70 [ 420.646525][T24711] worker_thread+0x6c1/0xef0 [ 420.652743][T24711] kthread+0x3a4/0x760 [ 420.658436][T24711] ret_from_fork+0x45/0x80 [ 420.664479][T24711] ret_from_fork_asm+0x1a/0x30 [ 420.670888][T24711] INITIAL USE at: [ 420.674760][T24711] lock_acquire+0x179/0x350 [ 420.680809][T24711] _raw_spin_lock_irqsave+0x3a/0x60 [ 420.687550][T24711] input_inject_event+0x9f/0x390 [ 420.694031][T24711] led_set_brightness+0x214/0x290 [ 420.700595][T24711] kbd_led_trigger_activate+0xcb/0x110 [ 420.707599][T24711] led_trigger_set+0x597/0xc50 [ 420.713908][T24711] led_trigger_set_default+0x1bd/0x2a0 [ 420.720910][T24711] led_classdev_register_ext+0x7b8/0xa10 [ 420.728086][T24711] input_leds_connect+0x552/0x8e0 [ 420.734656][T24711] input_attach_handler.isra.0+0x181/0x260 [ 420.742002][T24711] input_register_device+0xa84/0x1130 [ 420.748924][T24711] atkbd_connect+0x5da/0xa20 [ 420.755057][T24711] serio_driver_probe+0x74/0xb0 [ 420.761454][T24711] really_probe+0x23e/0xa90 [ 420.767512][T24711] __driver_probe_device+0x1de/0x440 [ 420.774339][T24711] driver_probe_device+0x4c/0x1b0 [ 420.780909][T24711] __driver_attach+0x283/0x580 [ 420.787215][T24711] bus_for_each_dev+0x13b/0x1d0 [ 420.793619][T24711] serio_handle_event+0x247/0xa50 [ 420.800194][T24711] process_one_work+0x9cc/0x1b70 [ 420.806675][T24711] worker_thread+0x6c1/0xef0 [ 420.812803][T24711] kthread+0x3a4/0x760 [ 420.818425][T24711] ret_from_fork+0x45/0x80 [ 420.824383][T24711] ret_from_fork_asm+0x1a/0x30 [ 420.830706][T24711] } [ 420.833182][T24711] ... key at: [] __key.7+0x0/0x40 [ 420.840275][T24711] [ 420.840275][T24711] the dependencies between the lock to be acquired [ 420.840282][T24711] and SOFTIRQ-irq-unsafe lock: [ 420.853744][T24711] -> (tasklist_lock){.+.+}-{3:3} { [ 420.859023][T24711] HARDIRQ-ON-R at: [ 420.863155][T24711] lock_acquire+0x179/0x350 [ 420.869637][T24711] _raw_read_lock+0x5f/0x70 [ 420.876114][T24711] __do_wait+0x105/0x890 [ 420.882340][T24711] do_wait+0x214/0x560 [ 420.888398][T24711] kernel_wait+0x9f/0x160 [ 420.894707][T24711] call_usermodehelper_exec_work+0xf1/0x170 [ 420.902576][T24711] process_one_work+0x9cc/0x1b70 [ 420.909504][T24711] worker_thread+0x6c1/0xef0 [ 420.916068][T24711] kthread+0x3a4/0x760 [ 420.922111][T24711] ret_from_fork+0x45/0x80 [ 420.928515][T24711] ret_from_fork_asm+0x1a/0x30 [ 420.935258][T24711] SOFTIRQ-ON-R at: [ 420.939387][T24711] lock_acquire+0x179/0x350 [ 420.945868][T24711] _raw_read_lock+0x5f/0x70 [ 420.952350][T24711] __do_wait+0x105/0x890 [ 420.958574][T24711] do_wait+0x214/0x560 [ 420.964623][T24711] kernel_wait+0x9f/0x160 [ 420.970931][T24711] call_usermodehelper_exec_work+0xf1/0x170 [ 420.978799][T24711] process_one_work+0x9cc/0x1b70 [ 420.985711][T24711] worker_thread+0x6c1/0xef0 [ 420.992304][T24711] kthread+0x3a4/0x760 [ 420.998349][T24711] ret_from_fork+0x45/0x80 [ 421.004740][T24711] ret_from_fork_asm+0x1a/0x30 [ 421.011483][T24711] INITIAL USE at: [ 421.015530][T24711] lock_acquire+0x179/0x350 [ 421.021923][T24711] _raw_write_lock_irq+0x36/0x50 [ 421.028750][T24711] copy_process+0x4132/0x9130 [ 421.035318][T24711] kernel_clone+0xfc/0x960 [ 421.041626][T24711] user_mode_thread+0xc7/0x110 [ 421.048282][T24711] rest_init+0x23/0x2b0 [ 421.054330][T24711] start_kernel+0x3e9/0x4d0 [ 421.060726][T24711] x86_64_start_reservations+0x18/0x30 [ 421.068073][T24711] x86_64_start_kernel+0xb0/0xc0 [ 421.074901][T24711] common_startup_64+0x13e/0x148 [ 421.081726][T24711] INITIAL READ USE at: [ 421.086204][T24711] lock_acquire+0x179/0x350 [ 421.093032][T24711] _raw_read_lock+0x5f/0x70 [ 421.099854][T24711] __do_wait+0x105/0x890 [ 421.106424][T24711] do_wait+0x214/0x560 [ 421.112821][T24711] kernel_wait+0x9f/0x160 [ 421.119477][T24711] call_usermodehelper_exec_work+0xf1/0x170 [ 421.127692][T24711] process_one_work+0x9cc/0x1b70 [ 421.134949][T24711] worker_thread+0x6c1/0xef0 [ 421.141859][T24711] kthread+0x3a4/0x760 [ 421.148257][T24711] ret_from_fork+0x45/0x80 [ 421.155002][T24711] ret_from_fork_asm+0x1a/0x30 [ 421.162102][T24711] } [ 421.164755][T24711] ... key at: [] tasklist_lock+0x18/0x40 [ 421.172635][T24711] ... acquired at: [ 421.176589][T24711] _raw_read_lock+0x5f/0x70 [ 421.181254][T24711] send_sigurg+0xed/0xc80 [ 421.185747][T24711] sk_send_sigurg+0x76/0x360 [ 421.190495][T24711] unix_stream_sendmsg+0xe77/0x1160 [ 421.195853][T24711] ____sys_sendmsg+0xa8d/0xc60 [ 421.200767][T24711] ___sys_sendmsg+0x134/0x1d0 [ 421.205599][T24711] __sys_sendmsg+0x16d/0x220 [ 421.210349][T24711] do_syscall_64+0xcd/0x260 [ 421.215007][T24711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.221053][T24711] [ 421.223357][T24711] -> (&f_owner->lock){....}-{3:3} { [ 421.228635][T24711] INITIAL USE at: [ 421.232590][T24711] lock_acquire+0x179/0x350 [ 421.238819][T24711] _raw_write_lock_irq+0x36/0x50 [ 421.245470][T24711] __f_setown+0x61/0x3c0 [ 421.251429][T24711] f_setown+0x122/0x290 [ 421.257298][T24711] sock_ioctl+0x46b/0x6c0 [ 421.263340][T24711] __x64_sys_ioctl+0x190/0x200 [ 421.269821][T24711] do_syscall_64+0xcd/0x260 [ 421.276040][T24711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.283648][T24711] INITIAL READ USE at: [ 421.288040][T24711] lock_acquire+0x179/0x350 [ 421.294694][T24711] _raw_read_lock_irq+0x67/0x80 [ 421.301694][T24711] f_getown+0x57/0x300 [ 421.307926][T24711] sock_ioctl+0x1f2/0x6c0 [ 421.314417][T24711] __x64_sys_ioctl+0x190/0x200 [ 421.321347][T24711] do_syscall_64+0xcd/0x260 [ 421.328013][T24711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.336065][T24711] } [ 421.338632][T24711] ... key at: [] __key.1+0x0/0x40 [ 421.345823][T24711] ... acquired at: [ 421.349694][T24711] _raw_read_lock_irqsave+0x74/0x90 [ 421.355050][T24711] send_sigio+0x31/0x3e0 [ 421.359454][T24711] kill_fasync+0x214/0x510 [ 421.364039][T24711] lease_break_callback+0x23/0x30 [ 421.369236][T24711] __break_lease+0x671/0x1810 [ 421.374087][T24711] do_dentry_open+0x6e1/0x1c10 [ 421.379029][T24711] vfs_open+0x82/0x3f0 [ 421.383257][T24711] path_openat+0x1e5e/0x2d40 [ 421.388003][T24711] do_filp_open+0x20b/0x470 [ 421.392659][T24711] do_sys_openat2+0x11b/0x1d0 [ 421.397491][T24711] __x64_sys_openat+0x174/0x210 [ 421.402498][T24711] do_syscall_64+0xcd/0x260 [ 421.407157][T24711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.413201][T24711] [ 421.415522][T24711] -> (&new->fa_lock){....}-{3:3} { [ 421.420629][T24711] INITIAL USE at: [ 421.424501][T24711] lock_acquire+0x179/0x350 [ 421.430548][T24711] _raw_write_lock_irq+0x36/0x50 [ 421.437041][T24711] fasync_remove_entry+0xb2/0x1e0 [ 421.443611][T24711] fasync_helper+0xaf/0xd0 [ 421.449574][T24711] lease_modify+0x232/0x500 [ 421.455624][T24711] locks_remove_file+0x29e/0x5b0 [ 421.462108][T24711] __fput+0x351/0xb70 [ 421.467634][T24711] task_work_run+0x14d/0x240 [ 421.473765][T24711] syscall_exit_to_user_mode+0x27b/0x2a0 [ 421.480939][T24711] do_syscall_64+0xda/0x260 [ 421.486986][T24711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.494417][T24711] INITIAL READ USE at: [ 421.498722][T24711] lock_acquire+0x179/0x350 [ 421.505205][T24711] _raw_read_lock_irqsave+0x74/0x90 [ 421.512381][T24711] kill_fasync+0x138/0x510 [ 421.518773][T24711] sock_wake_async+0x132/0x160 [ 421.525517][T24711] unix_shutdown+0x4be/0xa50 [ 421.532085][T24711] __sys_shutdown+0x113/0x1a0 [ 421.538740][T24711] __x64_sys_shutdown+0x53/0x80 [ 421.545567][T24711] do_syscall_64+0xcd/0x260 [ 421.552046][T24711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.559915][T24711] } [ 421.562392][T24711] ... key at: [] __key.0+0x0/0x40 [ 421.569498][T24711] ... acquired at: [ 421.573294][T24711] lock_acquire+0x179/0x350 [ 421.577967][T24711] _raw_read_lock_irqsave+0x74/0x90 [ 421.583322][T24711] kill_fasync+0x138/0x510 [ 421.587897][T24711] mousedev_notify_readers+0x6d8/0xa30 [ 421.593521][T24711] mousedev_event+0x84e/0x1490 [ 421.598455][T24711] input_handle_events_default+0x116/0x1b0 [ 421.604426][T24711] input_pass_values+0x6c4/0x890 [ 421.609520][T24711] input_handle_event+0xf00/0x14d0 [ 421.614789][T24711] input_inject_event+0x1cd/0x390 [ 421.619968][T24711] evdev_write+0x457/0x750 [ 421.624535][T24711] vfs_write+0x25c/0x1180 [ 421.629023][T24711] ksys_write+0x205/0x240 [ 421.633509][T24711] do_syscall_64+0xcd/0x260 [ 421.638166][T24711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.644208][T24711] [ 421.646508][T24711] [ 421.646508][T24711] stack backtrace: [ 421.652373][T24711] CPU: 1 UID: 0 PID: 24711 Comm: syz.1.8631 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 421.652392][T24711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 421.652400][T24711] Call Trace: [ 421.652408][T24711] [ 421.652415][T24711] dump_stack_lvl+0x116/0x1f0 [ 421.652432][T24711] check_irq_usage+0x7dc/0x920 [ 421.652452][T24711] ? check_path.constprop.0+0x24/0x50 [ 421.652470][T24711] ? __lock_acquire+0x1189/0x1ba0 [ 421.652486][T24711] __lock_acquire+0x1189/0x1ba0 [ 421.652506][T24711] lock_acquire+0x179/0x350 [ 421.652523][T24711] ? kill_fasync+0x138/0x510 [ 421.652540][T24711] _raw_read_lock_irqsave+0x74/0x90 [ 421.652554][T24711] ? kill_fasync+0x138/0x510 [ 421.652568][T24711] kill_fasync+0x138/0x510 [ 421.652589][T24711] mousedev_notify_readers+0x6d8/0xa30 [ 421.652613][T24711] mousedev_event+0x84e/0x1490 [ 421.652632][T24711] ? __pfx_mousedev_event+0x10/0x10 [ 421.652651][T24711] ? lock_acquire+0x179/0x350 [ 421.652669][T24711] input_handle_events_default+0x116/0x1b0 [ 421.652689][T24711] input_pass_values+0x6c4/0x890 [ 421.652703][T24711] input_handle_event+0xf00/0x14d0 [ 421.652716][T24711] ? _copy_from_user+0x59/0xd0 [ 421.652733][T24711] input_inject_event+0x1cd/0x390 [ 421.652748][T24711] evdev_write+0x457/0x750 [ 421.652762][T24711] ? __pfx_evdev_write+0x10/0x10 [ 421.652776][T24711] ? bpf_lsm_file_permission+0x9/0x10 [ 421.652789][T24711] ? security_file_permission+0x71/0x210 [ 421.652803][T24711] ? rw_verify_area+0xcf/0x680 [ 421.652820][T24711] vfs_write+0x25c/0x1180 [ 421.652838][T24711] ? __pfx_evdev_write+0x10/0x10 [ 421.652853][T24711] ? __pfx_vfs_write+0x10/0x10 [ 421.652871][T24711] ? find_held_lock+0x2b/0x80 [ 421.652884][T24711] ? __fget_files+0x204/0x3c0 [ 421.652896][T24711] ? __fget_files+0x20e/0x3c0 [ 421.652910][T24711] ksys_write+0x205/0x240 [ 421.652928][T24711] ? __pfx_ksys_write+0x10/0x10 [ 421.652947][T24711] ? rcu_is_watching+0x12/0xc0 [ 421.652962][T24711] do_syscall_64+0xcd/0x260 [ 421.652978][T24711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.652990][T24711] RIP: 0033:0x7fb97b58d169 [ 421.653001][T24711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.653014][T24711] RSP: 002b:00007fb97c4b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 421.653028][T24711] RAX: ffffffffffffffda RBX: 00007fb97b7a5fa0 RCX: 00007fb97b58d169 [ 421.653037][T24711] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000004 [ 421.653045][T24711] RBP: 00007fb97b60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 421.653053][T24711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.653061][T24711] R13: 0000000000000000 R14: 00007fb97b7a5fa0 R15: 00007ffe8a1484f8 [ 421.653073][T24711] [ 421.926078][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.235740][ T5189] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 422.385788][ T5189] usb 5-1: Using ep0 maxpacket: 8 [ 422.391985][ T5189] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 422.400779][ T5189] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 422.410954][ T5189] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 422.420689][ T5189] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 422.430752][ T5189] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 422.440840][ T5189] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.451818][ T5189] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 422.461281][ T5189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.669395][ T5189] usb 5-1: usb_control_msg returned -71 [ 422.674956][ T5189] usbtmc 5-1:16.0: can't read capabilities [ 422.683168][ T5189] usb 5-1: USB disconnect, device number 85