last executing test programs: 2m56.216738699s ago: executing program 2 (id=5987): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff}}}}}, 0x0) 2m56.055720915s ago: executing program 2 (id=5988): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket(0x10, 0x2, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r2, r2) ioctl$KDSKBLED(r0, 0x4b65, 0x2) 2m56.003338484s ago: executing program 2 (id=5989): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbc3, &(0x7f0000002a40)=ANY=[], 0x0) 2m55.921679592s ago: executing program 2 (id=5990): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x14a) renameat(r1, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') 2m55.864749651s ago: executing program 2 (id=5991): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffe, 0xcd, 0xc3, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001180)="f52c29a9b9776b9c23553cda3a4e5b004f5191929de74b7a5471f1ddc2a3e832e17319805657c5ae19bc02fbea54b49ab5ca55dcd6b9f78a0d66a0f66b13d6ec9035442caf1cc7f9d84d4ba7e09846a3525f9e5909f1f5671d1f2adfd29704a5b3675d9f08f6d9c9d896d18fde0d6ea30afb3bc785ef413406f955d8e9c3fe448d9afe4f0e986dd88829f7c5d25405065603dd0e5264131f2a2c0ab770354b6c864daaac9a5e176da74106a5afe433f44e453ebdfd53e54e6860015646dc78cdb5c1a1f3d6643e773c2911fd5e", 0x0, 0x7e30, 0x10011, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m55.372117585s ago: executing program 2 (id=5997): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 2m55.064599803s ago: executing program 32 (id=5997): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 4.003068683s ago: executing program 3 (id=8441): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200000000000001, 0x4, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x84182080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x7, 0x1100) 2.8771441s ago: executing program 0 (id=8448): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/146, 0x92}], 0x1}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001a40)=""/25, 0x19}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000002940)=""/206, 0xce}], 0x1}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002340)=""/191, 0xbf}, {0x0}], 0x2, &(0x7f00000026c0)}}], 0x4, 0x58ca0280, 0x0) 2.871637969s ago: executing program 4 (id=8449): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 2.689775147s ago: executing program 4 (id=8452): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000540)=""/140, &(0x7f0000000400)=""/79, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2.577224361s ago: executing program 1 (id=8454): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[r5], 0x1, r3, r4, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 2.525634673s ago: executing program 4 (id=8456): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='source', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000440)='!', 0x1) tkill(r1, 0xb) 2.509283391s ago: executing program 1 (id=8457): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x1, 0x40, 0x4, 0x0) 2.339889551s ago: executing program 3 (id=8458): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x28f}, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) io_uring_enter(r0, 0x7277, 0x0, 0x0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x167342) r3 = syz_io_uring_setup(0x237, 0x0, &(0x7f0000000100), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0xd, {0x7, 0x9}, 0x2}, 0x8e) 2.168344874s ago: executing program 5 (id=8459): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a3000000000090002"], 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2.041424335s ago: executing program 4 (id=8460): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x28}, 0x0) 1.341347029s ago: executing program 5 (id=8461): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5}, 0x94) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1.341136215s ago: executing program 4 (id=8462): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x10000}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.250526996s ago: executing program 1 (id=8463): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x80, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x60000000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x70}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.162910896s ago: executing program 0 (id=8464): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 1.055457722s ago: executing program 5 (id=8465): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 860.235919ms ago: executing program 1 (id=8466): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read(r1, 0x0, 0x0) 853.397957ms ago: executing program 0 (id=8467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 760.118815ms ago: executing program 5 (id=8468): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffe0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x8, 0x39b, 0x8, 0x1}, 0xb4a9, 0x1, 0x2, 0x40, 0x80, 0xb, 0x5, 0x11, 0x4, 0xf5, {0x0, 0xc2dd, 0x8, 0x2, 0x3, 0xf1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xfff1}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4884}, 0x24000840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 668.269203ms ago: executing program 0 (id=8469): r0 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'veth0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) 598.67322ms ago: executing program 3 (id=8470): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 558.073664ms ago: executing program 0 (id=8471): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x14}], 0x18, 0x20000040}], 0x1, 0x8040) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="e42f9c6f74", 0x5}], 0x1}, 0x4008001) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 447.705364ms ago: executing program 0 (id=8472): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 409.986655ms ago: executing program 5 (id=8473): mknod(&(0x7f0000000040)='./file0\x00', 0x800141f, 0x4) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x242, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f00000002c0)=[{r0, 0x62}], 0x1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="06", 0x1}], 0x1) 367.302952ms ago: executing program 3 (id=8474): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x40200000, 0xfffffffc, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x4, 0x20084d82, 0x290302}) 310.01813ms ago: executing program 1 (id=8475): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0xb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 269.526417ms ago: executing program 4 (id=8476): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000080), 0xffffffffffffffd) 160.320774ms ago: executing program 3 (id=8477): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmmsg(r1, &(0x7f000000db40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) read$alg(r1, &(0x7f0000002300)=""/4128, 0x1020) 114.422952ms ago: executing program 1 (id=8478): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) unshare(0x2040400) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) 77.271732ms ago: executing program 5 (id=8479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 3 (id=8480): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x400, @loopback, 0x80}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x3000, 0x3, 0x1, 0x80, r0, 0x0}]) kernel console output (not intermixed with test programs): strings: Mfr=1, Product=2, SerialNumber=3 [ 437.016279][T10329] usb 5-1: Product: syz [ 437.020972][T10329] usb 5-1: Manufacturer: syz [ 437.025701][T10329] usb 5-1: SerialNumber: syz [ 437.041428][T21535] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 437.162212][ T976] plantronics 0003:047F:FFFF.004C: ignoring exceeding usage max [ 437.188473][ T976] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 437.252750][T21535] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 437.466903][T21535] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 437.871257][T21535] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 437.887170][T10329] cdc_ncm 5-1:1.1: bind() failure [ 438.097787][T10329] usb 5-1: USB disconnect, device number 60 [ 438.165423][T21597] syz_tun: entered allmulticast mode [ 438.172915][T21595] syz_tun: left allmulticast mode [ 439.177258][T10329] usb 2-1: USB disconnect, device number 47 [ 439.236637][ T30] audit: type=1400 audit(1772128192.621:1112): avc: denied { read } for pid=21636 comm="syz.1.6807" lport=49606 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 440.053809][ T30] audit: type=1400 audit(1772128193.482:1113): avc: denied { read } for pid=21656 comm="syz.1.6815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 440.246320][ T30] audit: type=1400 audit(1772128193.681:1114): avc: denied { create } for pid=21658 comm="syz.5.6817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 440.640770][T21676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6820'. [ 440.710578][T21682] overlayfs: failed to clone upperpath [ 441.301890][ T30] audit: type=1400 audit(1772128194.794:1115): avc: denied { accept } for pid=21719 comm="syz.1.6838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 441.699894][ T30] audit: type=1400 audit(1772128195.214:1116): avc: denied { connect } for pid=21747 comm="syz.0.6849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 441.723162][ T30] audit: type=1400 audit(1772128195.235:1117): avc: denied { read } for pid=21747 comm="syz.0.6849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 441.842403][T21754] netlink: 'syz.3.6851': attribute type 1 has an invalid length. [ 441.870105][T21754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.939981][ T30] audit: type=1400 audit(1772128195.466:1118): avc: denied { ioctl } for pid=21756 comm="syz.3.6852" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 442.239294][T21767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6856'. [ 442.518725][ T30] audit: type=1400 audit(1772128196.075:1119): avc: denied { create } for pid=21775 comm="syz.4.6861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 442.574471][ T30] audit: type=1400 audit(1772128196.106:1120): avc: denied { setopt } for pid=21775 comm="syz.4.6861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 442.584006][ T5881] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 442.594781][ T30] audit: type=1400 audit(1772128196.106:1121): avc: denied { bind } for pid=21775 comm="syz.4.6861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 442.712609][ T5826] udevd[5826]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 442.714920][T21780] Invalid argument reading file caps for ./file0 [ 442.780666][ T5826] udevd[5826]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 442.796780][ T5881] usb 6-1: Using ep0 maxpacket: 8 [ 442.822451][ T5881] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 442.830621][ T5881] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 442.871427][ T5881] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 442.908207][ T5881] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 442.944027][T21787] sctp: [Deprecated]: syz.4.6865 (pid 21787) Use of int in max_burst socket option deprecated. [ 442.944027][T21787] Use struct sctp_assoc_value instead [ 442.945947][ T5881] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 442.996587][ T5881] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.046181][ T5881] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 443.079796][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.312080][ T5881] usb 6-1: usb_control_msg returned -32 [ 443.340280][ T5881] usbtmc 6-1:16.0: can't read capabilities [ 443.773111][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 443.793174][T21815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6877'. [ 443.804164][T21809] usbtmc 6-1:16.0: Unable to send data, error -71 [ 443.822473][T21815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6877'. [ 443.852567][T21815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6877'. [ 443.879995][T21815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6877'. [ 444.014754][ T30] audit: type=1400 audit(1772128197.639:1122): avc: denied { mounton } for pid=21825 comm="syz.1.6882" path="/1462/file0" dev="tmpfs" ino=7459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 444.201813][T21839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6886'. [ 444.414481][T10329] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 444.511950][T21853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6891'. [ 444.590558][ T976] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 444.605522][T10329] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 444.615772][T10329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.627826][ T976] hid-generic 0000:0000:0000.004D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 444.640119][T10329] usb 2-1: config 0 descriptor?? [ 444.651106][T10329] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 445.032167][T10329] gspca_cpia1: usb_control_msg 03, error -32 [ 445.038881][T10329] gspca_cpia1: usb_control_msg 03, error -32 [ 445.046419][T10329] gspca_cpia1: usb_control_msg 03, error -32 [ 445.053557][T10329] gspca_cpia1: usb_control_msg 03, error -32 [ 445.059840][T10329] gspca_cpia1: usb_control_msg 01, error -71 [ 445.066326][T10329] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 445.076884][T10329] usb 2-1: USB disconnect, device number 48 [ 445.212678][ T976] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 445.225712][ T5881] usb 6-1: USB disconnect, device number 6 [ 445.353538][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 445.353930][ T30] audit: type=1400 audit(1772128199.046:1126): avc: denied { append } for pid=21872 comm="syz.5.6900" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 445.400463][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 445.408905][ T976] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 445.419105][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.442897][ T976] usb 5-1: config 0 descriptor?? [ 445.460960][ T976] gspca_main: sq930x-2.14.0 probing 041e:403c [ 445.493935][T21877] netlink: 'syz.0.6901': attribute type 8 has an invalid length. [ 445.517648][T21877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6901'. [ 445.704135][T21884] lo speed is unknown, defaulting to 1000 [ 445.832564][T21889] kvm: user requested TSC rate below hardware speed [ 445.864786][T21889] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 446.534485][T21911] input: syz0 as /devices/virtual/input/input60 [ 446.727565][ T976] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 446.733533][ T976] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 446.766048][ T976] usb 5-1: USB disconnect, device number 61 [ 446.935380][ T30] audit: type=1400 audit(1772128200.704:1127): avc: denied { read open } for pid=21923 comm="syz.3.6920" path="/" dev="configfs" ino=1169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 446.964262][T21926] overlayfs: failed to clone upperpath [ 447.142663][ T30] audit: type=1400 audit(1772128200.925:1128): avc: denied { getopt } for pid=21932 comm="syz.3.6924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 447.443845][T21950] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6932'. [ 447.480456][T21950] netlink: Unknown conntrack attr (0) [ 447.651368][T21961] Process accounting resumed [ 447.766053][ T5881] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 447.919277][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 447.922646][T21984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6946'. [ 447.926795][ T5881] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 447.934448][T21984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6946'. [ 447.945287][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.998913][ T5881] usb 4-1: config 0 descriptor?? [ 448.070483][ T976] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 448.234693][ T976] usb 6-1: Using ep0 maxpacket: 32 [ 448.253215][ T976] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 448.273305][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.319207][ T976] usb 6-1: config 0 descriptor?? [ 448.540605][ T976] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 448.568325][ T976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 448.595368][ T5881] as10x_usb: device has been detected [ 448.602954][ T5881] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 448.637207][ T976] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 448.652497][ T976] usb 6-1: media controller created [ 448.691472][ T5881] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 448.697377][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 448.774108][ T5881] as10x_usb: error during firmware upload part1 [ 448.774614][ T30] audit: type=1400 audit(1772128202.636:1129): avc: denied { firmware_load } for pid=5881 comm="kworker/0:5" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 448.800562][ T5881] Registered device nBox DVB-T Dongle [ 448.878049][ T5881] usb 4-1: USB disconnect, device number 61 [ 448.897102][ T976] DVB: Unable to find symbol dib7000p_attach() [ 448.917623][T21995] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6949'. [ 448.931706][ T976] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 448.942093][ T5881] Unregistered device nBox DVB-T Dongle [ 448.945484][ T5881] as10x_usb: device has been disconnected [ 449.043256][ T976] rc_core: IR keymap rc-dib0700-rc5 not found [ 449.049565][ T976] Registered IR keymap rc-empty [ 449.056074][ T976] dvb-usb: could not initialize remote control. [ 449.065287][ T976] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 449.095550][ T976] usb 6-1: USB disconnect, device number 7 [ 449.101849][T22003] netlink: 'syz.4.6951': attribute type 13 has an invalid length. [ 449.129198][ T976] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 449.868421][ T30] audit: type=1400 audit(1772128203.791:1130): avc: denied { write } for pid=22034 comm="syz.3.6965" name="file0" dev="tmpfs" ino=6900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 449.946301][ T30] audit: type=1400 audit(1772128203.791:1131): avc: denied { open } for pid=22034 comm="syz.3.6965" path="/1354/file0" dev="tmpfs" ino=6900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 450.023272][ T30] audit: type=1400 audit(1772128203.812:1132): avc: denied { ioctl } for pid=22034 comm="syz.3.6965" path="/1354/file0" dev="tmpfs" ino=6900 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 450.097344][ T30] audit: type=1400 audit(1772128203.959:1133): avc: denied { bind } for pid=22043 comm="syz.3.6969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 450.159034][ T30] audit: type=1400 audit(1772128203.959:1134): avc: denied { name_bind } for pid=22043 comm="syz.3.6969" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 450.271098][ T30] audit: type=1400 audit(1772128203.959:1135): avc: denied { node_bind } for pid=22043 comm="syz.3.6969" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 451.147238][ T5881] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 451.290258][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 451.301388][ T5881] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 451.326886][ T5881] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 451.341169][ T5881] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 451.351484][ T5881] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.365147][ T5881] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 451.377068][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.534835][T10329] libceph: connect (1)[c::]:6789 error -101 [ 451.542867][T10329] libceph: mon0 (1)[c::]:6789 connect error [ 451.549391][ T976] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 451.570560][T22119] ceph: No mds server is up or the cluster is laggy [ 451.594314][ T5881] usb 2-1: GET_CAPABILITIES returned 0 [ 451.610280][ T5881] usbtmc 2-1:16.0: can't read capabilities [ 451.626602][ T30] audit: type=1400 audit(1772128205.638:1136): avc: denied { setopt } for pid=22124 comm="syz.4.7005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 451.738079][ T976] usb 4-1: Using ep0 maxpacket: 16 [ 451.748766][ T976] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 451.780204][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 451.794829][ T976] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 451.803909][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.832107][ T976] usb 4-1: Product: syz [ 451.836693][ T976] usb 4-1: Manufacturer: syz [ 451.841320][ T976] usb 4-1: SerialNumber: syz [ 451.859736][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 451.868899][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 451.872682][ T976] usb 4-1: config 0 descriptor?? [ 451.878033][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 451.892406][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 451.901522][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 451.910574][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 451.925272][ T976] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 451.986549][ T976] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 452.014535][ T30] audit: type=1400 audit(1772128206.016:1137): avc: denied { listen } for pid=22143 comm="syz.0.7007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 452.055705][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.064925][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.074108][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.083227][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.097417][ T30] audit: type=1400 audit(1772128206.027:1138): avc: denied { accept } for pid=22143 comm="syz.0.7007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 452.122953][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.132134][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.141858][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.150930][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.160922][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.170709][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 452.211456][T10328] usb 2-1: USB disconnect, device number 49 [ 452.366070][ T30] audit: type=1400 audit(1772128206.405:1139): avc: denied { setopt } for pid=22152 comm="syz.5.7011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 452.592670][ T976] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 452.599855][ T976] em28xx 4-1:0.0: Config register raw data: 0xf1 [ 452.606713][ T976] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 452.613033][ T976] em28xx 4-1:0.0: No AC97 audio processor [ 452.816052][ T976] usb 4-1: USB disconnect, device number 62 [ 453.136538][T22185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7024'. [ 453.151688][T22185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7024'. [ 453.163008][T22185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7024'. [ 453.176036][T22185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7024'. [ 453.181677][ T976] Process accounting resumed [ 453.218206][T22181] Process accounting resumed [ 453.411298][T22199] IPv4: Oversized IP packet from 127.202.26.0 [ 453.459497][T22203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7031'. [ 453.938120][ T976] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 453.962829][T22221] netlink: 'syz.3.7040': attribute type 9 has an invalid length. [ 453.985802][T22221] netlink: 'syz.3.7040': attribute type 11 has an invalid length. [ 453.993676][T22221] netlink: 'syz.3.7040': attribute type 12 has an invalid length. [ 454.005980][T22221] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.7040'. [ 454.015920][T22221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7040'. [ 454.100148][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 454.110973][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 454.158930][ T976] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 454.168373][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.176395][ T976] usb 5-1: Product: syz [ 454.200773][ T976] usb 5-1: Manufacturer: syz [ 454.212853][ T976] usb 5-1: SerialNumber: syz [ 454.243906][ T976] usb 5-1: config 0 descriptor?? [ 454.305441][ T976] gs_usb 5-1:0.0: Required endpoints not found [ 454.335889][ T30] audit: type=1400 audit(1772128208.473:1140): avc: denied { write } for pid=22227 comm="syz.0.7043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 454.518064][ T976] usb 5-1: USB disconnect, device number 62 [ 454.602926][T22234] SELinux: failed to load policy [ 454.851705][T22256] netlink: 'syz.1.7055': attribute type 11 has an invalid length. [ 455.113603][T22267] ALSA: seq fatal error: cannot create timer (-16) [ 455.363928][ T30] audit: type=1400 audit(1772128209.554:1141): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 455.415198][T10328] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 455.581926][T10328] usb 4-1: Using ep0 maxpacket: 32 [ 455.593688][T10328] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 455.632313][T10328] usb 4-1: config 0 has no interface number 0 [ 455.654317][T10328] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 455.673628][T10328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.684237][T10328] usb 4-1: Product: syz [ 455.688430][T10328] usb 4-1: Manufacturer: syz [ 455.706778][T10328] usb 4-1: SerialNumber: syz [ 455.728692][T10328] usb 4-1: config 0 descriptor?? [ 455.758734][T10328] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 455.999645][T10328] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 456.026119][T10328] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 456.410719][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 456.418947][T10328] usb 4-1: USB disconnect, device number 63 [ 456.428360][T10328] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 456.433443][T22335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7088'. [ 456.461112][T10328] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 456.495136][T10328] quatech2 4-1:0.51: device disconnected [ 456.864405][ T30] audit: type=1400 audit(1772128211.139:1142): avc: denied { map } for pid=22352 comm="syz.0.7098" path="socket:[78263]" dev="sockfs" ino=78263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 457.124885][ T30] audit: type=1400 audit(1772128211.402:1143): avc: denied { bind } for pid=22368 comm="syz.5.7106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 457.254915][T22373] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7107'. [ 457.263225][T22379] netlink: 'syz.1.7110': attribute type 1 has an invalid length. [ 457.338093][T22379] 8021q: adding VLAN 0 to HW filter on device bond3 [ 457.359509][ T30] audit: type=1326 audit(1772128211.654:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22383 comm="syz.3.7113" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b3d19c799 code=0x0 [ 457.387746][T22384] bond3: (slave geneve2): making interface the new active one [ 457.408146][T22384] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 457.421173][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.434329][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.451458][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.470178][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.535986][ T30] audit: type=1326 audit(1772128211.832:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22392 comm="syz.1.7115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3205b9c799 code=0x0 [ 457.614563][T22397] binder: 22396:22397 ioctl c018620c 200000000240 returned -22 [ 457.693981][ T5881] IPVS: starting estimator thread 0... [ 457.797520][T22401] IPVS: using max 39 ests per chain, 93600 per kthread [ 458.089461][T22429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7130'. [ 458.112380][T22431] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7131'. [ 458.310351][T10328] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 458.473710][T10328] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.492725][T10328] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 458.529522][T10328] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.552777][T10328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.567681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 458.576216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 458.584941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 458.604002][T10328] usb 6-1: config 0 descriptor?? [ 458.633273][T22450] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7140'. [ 458.720348][ T5881] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 458.816250][T22427] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.7129'. [ 458.835221][T10328] usb 6-1: USB disconnect, device number 8 [ 458.891437][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 458.899073][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.916116][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.939774][ T5881] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 458.949019][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.963434][ T5881] usb 2-1: config 0 descriptor?? [ 458.975346][ T5881] hub 2-1:0.0: USB hub found [ 459.015478][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.196532][ T5881] hub 2-1:0.0: 1 port detected [ 459.289806][T22492] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.7155'. [ 459.582737][ T5927] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 459.796699][ T5881] hub 2-1:0.0: activate --> -90 [ 459.912393][ T5927] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 459.949437][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 459.974169][ T5927] usb 4-1: SerialNumber: syz [ 460.003134][ T5927] usb 4-1: config 0 descriptor?? [ 460.172323][T10328] usb 2-1: USB disconnect, device number 50 [ 460.377561][ T5881] usb 2-1-port1: config error [ 460.872302][T22540] netlink: 'syz.0.7174': attribute type 15 has an invalid length. [ 460.881275][T22540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7174'. [ 461.201349][ T5927] pegasus 4-1:0.0: can't reset MAC [ 461.207239][ T5927] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 461.228867][ T5927] usb 4-1: USB disconnect, device number 64 [ 461.476793][T22555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7184'. [ 461.970254][T22577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.033176][ T30] audit: type=1400 audit(1772128216.556:1146): avc: denied { write } for pid=22579 comm="syz.3.7194" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 462.258461][T22588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7199'. [ 462.363748][T22598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7202'. [ 462.511486][ T5881] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 462.680107][ T5881] usb 6-1: config 4 has an invalid interface number: 28 but max is 0 [ 462.698221][ T5881] usb 6-1: config 4 has no interface number 0 [ 462.730282][ T5881] usb 6-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 462.759303][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.767359][ T5881] usb 6-1: Product: syz [ 462.787881][ T5881] usb 6-1: Manufacturer: syz [ 462.792531][ T5881] usb 6-1: SerialNumber: syz [ 462.836582][ T5881] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:4.28/input/input62 [ 463.078191][ T5881] bcm5974 6-1:4.28: could not read from device [ 463.161420][ T5881] input: failed to attach handler mousedev to device input62, error: -5 [ 463.204903][ T5163] bcm5974 6-1:4.28: could not read from device [ 463.214771][ T5881] usb 6-1: USB disconnect, device number 9 [ 463.616486][ T5881] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 463.644716][T22639] lo speed is unknown, defaulting to 1000 [ 463.773811][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.795178][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.867301][ T5881] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 463.891774][ T5881] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 463.927759][ T5881] usb 2-1: Manufacturer: syz [ 463.944668][ T5881] usb 2-1: config 0 descriptor?? [ 464.940225][ T5881] uclogic 0003:256C:006D.004E: v1 frame probing failed: -71 [ 464.952303][ T5881] uclogic 0003:256C:006D.004E: failed probing parameters: -71 [ 464.954905][T22684] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.961099][ T5881] uclogic 0003:256C:006D.004E: probe with driver uclogic failed with error -71 [ 465.000386][ T5881] usb 2-1: USB disconnect, device number 51 [ 465.223032][T22691] netlink: 124 bytes leftover after parsing attributes in process `syz.3.7239'. [ 465.271092][T22691] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7239'. [ 465.564036][T22699] lo speed is unknown, defaulting to 1000 [ 465.779713][ T5881] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 465.891277][T22713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7248'. [ 465.950311][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 465.956961][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.992158][ T5881] usb 4-1: config 0 has no interfaces? [ 465.998757][ T5881] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 466.008690][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.037521][ T5881] usb 4-1: config 0 descriptor?? [ 466.465685][T22736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7256'. [ 466.502126][T22736] netlink: 'syz.1.7256': attribute type 15 has an invalid length. [ 466.531942][T10328] usb 4-1: USB disconnect, device number 65 [ 466.540251][T22736] netlink: 'syz.1.7256': attribute type 18 has an invalid length. [ 467.577915][ T30] audit: type=1400 audit(1772128222.372:1147): avc: denied { read } for pid=22774 comm="syz.3.7273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 468.121753][T10328] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 468.286151][T10328] usb 4-1: Using ep0 maxpacket: 16 [ 468.303205][T10328] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.331998][T10328] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 468.349592][T10328] usb 4-1: config 0 interface 0 has no altsetting 0 [ 468.363513][T10328] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 468.396739][T10328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.411038][T22802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7283'. [ 468.421286][T10328] usb 4-1: config 0 descriptor?? [ 468.441529][T10328] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 468.442285][T22802] netlink: 'syz.5.7283': attribute type 14 has an invalid length. [ 468.475364][T22802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7283'. [ 468.497937][ T506] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.498085][T22802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7283'. [ 468.512693][ T506] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.527317][T22802] netlink: 'syz.5.7283': attribute type 14 has an invalid length. [ 468.537525][ T506] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.546754][ T506] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.556417][T22802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7283'. [ 468.692588][T22784] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7277'. [ 468.725050][ T5927] usb 4-1: USB disconnect, device number 66 [ 468.844268][T22821] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.7291'. [ 468.854588][T22821] netlink: Conntrack attr has 4 unknown bytes [ 469.105382][ T30] audit: type=1400 audit(1772128223.989:1148): avc: denied { ioctl } for pid=22834 comm="syz.5.7298" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 469.352108][T22857] team0: No ports can be present during mode change [ 469.411318][T22860] ip6tnl1: entered promiscuous mode [ 469.509695][T22866] netlink: 'syz.0.7312': attribute type 9 has an invalid length. [ 469.517651][T22866] netlink: 'syz.0.7312': attribute type 11 has an invalid length. [ 469.525621][T22866] netlink: 'syz.0.7312': attribute type 12 has an invalid length. [ 469.700965][T22874] xt_hashlimit: size too large, truncated to 1048576 [ 470.160389][T10328] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 470.186961][T22894] __nla_validate_parse: 2 callbacks suppressed [ 470.186988][T22894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7324'. [ 470.230181][T22894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7324'. [ 470.239718][T22894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7324'. [ 470.269498][T22894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7324'. [ 470.285697][T22894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7324'. [ 470.299182][T22894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7324'. [ 470.353869][T10328] usb 2-1: Using ep0 maxpacket: 32 [ 470.378208][T10328] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 470.389592][T10328] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 470.398501][ T30] audit: type=1400 audit(1772128225.333:1149): avc: denied { getopt } for pid=22904 comm="syz.3.7330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 470.418897][T10328] usb 2-1: config 0 interface 0 has no altsetting 0 [ 470.420831][T10328] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 470.443448][T22907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7331'. [ 470.446266][T10328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.466371][T10328] usb 2-1: Product: syz [ 470.471230][T10328] usb 2-1: Manufacturer: syz [ 470.477198][T10328] usb 2-1: SerialNumber: syz [ 470.489489][T10328] usb 2-1: config 0 descriptor?? [ 470.534395][T22913] binder: 22912:22913 ioctl c0306201 0 returned -14 [ 470.560652][ T30] audit: type=1400 audit(1772128225.511:1150): avc: denied { write } for pid=22908 comm="syz.3.7332" path="socket:[80416]" dev="sockfs" ino=80416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 470.609412][ T30] audit: type=1400 audit(1772128225.564:1151): avc: denied { read } for pid=22908 comm="syz.3.7332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 470.906857][T10328] gs_usb 2-1:0.0: Couldn't get device config: (err=-71) [ 470.922560][T10328] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 470.942558][T10328] usb 2-1: USB disconnect, device number 52 [ 471.454227][T22930] netlink: 'syz.0.7341': attribute type 4 has an invalid length. [ 471.705693][T22948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7348'. [ 472.195192][T22970] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input63 [ 472.312229][ T30] audit: type=1326 audit(1772128227.338:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22971 comm="syz.5.7357" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1d8d9c799 code=0x0 [ 472.554205][T22978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7359'. [ 472.715793][T22985] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 472.767384][T22985] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 473.016337][T22998] ref_ctr_offset mismatch. inode: 0x1eeb offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 473.190748][ T30] audit: type=1400 audit(1772128228.272:1153): avc: denied { mounton } for pid=22999 comm="syz.1.7369" path="/1550/file0" dev="tmpfs" ino=7921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 473.234836][T23006] netlink: 'syz.1.7369': attribute type 8 has an invalid length. [ 473.540000][T23016] lo speed is unknown, defaulting to 1000 [ 473.579917][ T30] audit: type=1400 audit(1772128228.671:1154): avc: denied { map } for pid=23021 comm="syz.1.7377" path="/dev/sg0" dev="devtmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 473.606032][ T30] audit: type=1400 audit(1772128228.671:1155): avc: denied { execute } for pid=23021 comm="syz.1.7377" path="/dev/sg0" dev="devtmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 473.842006][T23020] lo speed is unknown, defaulting to 1000 [ 475.717548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 475.982453][ T30] audit: type=1400 audit(1772128231.191:1156): avc: denied { read } for pid=23089 comm="syz.4.7404" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 476.062009][T23094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7405'. [ 476.079649][ T30] audit: type=1400 audit(1772128231.201:1157): avc: denied { open } for pid=23089 comm="syz.4.7404" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 476.174059][ T30] audit: type=1400 audit(1772128231.380:1158): avc: denied { ioctl } for pid=23089 comm="syz.4.7404" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 476.709299][ T30] audit: type=1400 audit(1772128231.925:1159): avc: denied { name_bind 0x1000000 } for pid=23117 comm="syz.1.7416" path="socket:[81971]" dev="sockfs" ino=81971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 477.367926][T23142] loop5: detected capacity change from 0 to 2640 [ 477.392677][T23142] buffer_io_error: 10 callbacks suppressed [ 477.392699][T23142] Buffer I/O error on dev loop5, logical block 0, async page read [ 477.444038][T23146] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 477.469055][T23142] Buffer I/O error on dev loop5, logical block 1, async page read [ 477.489299][T23142] Dev loop5: unable to read RDB block 8 [ 477.491787][T23147] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 477.512412][T23142] Buffer I/O error on dev loop5, logical block 3, async page read [ 477.525404][T23142] loop5: unable to read partition table [ 477.542491][T23142] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 477.568486][ T5826] Buffer I/O error on dev loop5, logical block 3, async page read [ 477.596139][T23151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23151 comm=syz.5.7428 [ 477.639009][T23151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7428'. [ 477.666746][T23151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7428'. [ 477.705160][T23151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7428'. [ 477.719357][T23151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7428'. [ 477.845902][ T30] audit: type=1400 audit(1772128233.143:1160): avc: denied { write } for pid=23164 comm="syz.3.7435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 477.965015][T23170] SELinux: failed to load policy [ 478.244866][T23194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7445'. [ 479.089338][T23236] netlink: 'syz.3.7461': attribute type 15 has an invalid length. [ 479.125668][T23236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7461'. [ 479.172336][ T3554] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 479.181132][T23236] netlink: 'syz.3.7461': attribute type 15 has an invalid length. [ 479.189741][ T3554] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 479.198612][T23236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7461'. [ 479.208521][ T3554] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 479.217615][ T3554] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 479.529420][ T5881] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 479.694601][T23256] netlink: 'syz.3.7471': attribute type 1 has an invalid length. [ 479.718013][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 479.736402][ T5881] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 479.745481][ T5881] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 479.757914][ T5881] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 479.773163][ T5881] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 479.784689][ T5881] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 479.794920][ T5881] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.807971][ T5881] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 479.824134][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.842143][T23256] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.917899][T23261] bond2: (slave geneve2): making interface the new active one [ 479.927778][T23261] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 479.937903][ T3554] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 479.951602][ T3554] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 479.960327][T10328] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 479.987381][ T3554] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 480.010681][ T3554] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 480.031861][ T5881] usb 2-1: usb_control_msg returned -32 [ 480.037514][ T5881] usbtmc 2-1:16.0: can't read capabilities [ 480.162127][T10328] usb 5-1: Using ep0 maxpacket: 32 [ 480.169065][T10328] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 480.180967][T10328] usb 5-1: config 0 interface 0 has no altsetting 0 [ 480.189096][T10328] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 480.200191][T10328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.221193][T10328] usb 5-1: config 0 descriptor?? [ 480.294678][T23272] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.304091][T23272] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.339575][T23272] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.346837][T23272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.354378][T23272] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.361508][T23272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.373995][T23272] bridge0: entered promiscuous mode [ 480.378240][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 480.379425][T23272] bridge0: entered allmulticast mode [ 480.392423][T23275] usbtmc 2-1:16.0: Unable to send data, error -71 [ 480.436419][T23275] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 480.458645][ T976] usb 2-1: USB disconnect, device number 53 [ 480.971714][T10328] corsair-psu 0003:1B1C:1C09.004F: unknown main item tag 0x0 [ 480.987010][T10328] corsair-psu 0003:1B1C:1C09.004F: unknown main item tag 0x0 [ 481.010015][T10328] corsair-psu 0003:1B1C:1C09.004F: unknown main item tag 0x0 [ 481.030327][T10328] corsair-psu 0003:1B1C:1C09.004F: unknown main item tag 0x0 [ 481.038083][T10328] corsair-psu 0003:1B1C:1C09.004F: unknown main item tag 0x0 [ 481.057392][T10328] corsair-psu 0003:1B1C:1C09.004F: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 481.248402][ T30] audit: type=1400 audit(1772128236.713:1161): avc: denied { write } for pid=23301 comm="syz.0.7488" name="file0" dev="tmpfs" ino=8874 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 481.298198][ T30] audit: type=1400 audit(1772128236.713:1162): avc: denied { open } for pid=23301 comm="syz.0.7488" path="/1730/file0" dev="tmpfs" ino=8874 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 481.383063][T10328] corsair-psu 0003:1B1C:1C09.004F: unable to initialize device (-110) [ 481.414805][T10328] corsair-psu 0003:1B1C:1C09.004F: probe with driver corsair-psu failed with error -110 [ 481.441185][T23308] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.7492'. [ 481.460006][T10328] usb 5-1: USB disconnect, device number 63 [ 481.677556][T23321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7496'. [ 481.807055][T23328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.026091][ T30] audit: type=1400 audit(1772128237.542:1163): avc: denied { accept } for pid=23334 comm="syz.1.7501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 482.286662][ T5881] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 482.457744][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 482.506246][ T5881] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 482.515713][ T5881] usb 5-1: config 0 has no interface number 0 [ 482.530639][ T5881] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 482.541846][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.558495][ T5881] usb 5-1: Product: syz [ 482.573293][ T5881] usb 5-1: Manufacturer: syz [ 482.584974][ T5881] usb 5-1: SerialNumber: syz [ 482.604839][ T5881] usb 5-1: config 0 descriptor?? [ 482.813016][ T5881] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 482.830213][ T5881] uvcvideo 5-1:0.31: No valid video chain found. [ 482.856871][ T5881] usb 5-1: USB disconnect, device number 64 [ 483.724684][ T5881] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 483.881997][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.910043][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.926059][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 483.958567][ T5881] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 483.982340][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.004016][ T5881] usb 5-1: config 0 descriptor?? [ 484.277433][ T976] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 484.340371][ T30] audit: type=1400 audit(1772128239.977:1164): avc: denied { mounton } for pid=23410 comm="syz.1.7533" path="/1591/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 484.375546][T23411] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 484.408459][ T5881] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 484.449339][ T976] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.462436][ T976] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 484.472707][ T976] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 484.481618][ T976] usb 6-1: Product: syz [ 484.496062][ T976] usb 6-1: SerialNumber: syz [ 484.579235][T23416] kvm: kvm [23415]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0xc1) = 0x40 [ 484.616700][T23416] kvm: kvm [23415]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0xc2) = 0xbf [ 484.629512][T23416] kvm: kvm [23415]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0x11e) = 0xbe7021d1 [ 484.642412][T23416] kvm: kvm [23415]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0x186) = 0xff [ 484.651935][T23416] kvm: kvm [23415]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0x187) = 0xfc [ 484.663352][T23416] kvm_intel: kvm [23415]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0x1d9) = 0xea [ 484.672753][T10329] usb 5-1: USB disconnect, device number 65 [ 485.084327][ T30] audit: type=1400 audit(1772128240.754:1165): avc: denied { read } for pid=23439 comm="syz.3.7545" name="file0" dev="tmpfs" ino=7454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 485.327185][ T30] audit: type=1400 audit(1772128241.017:1166): avc: denied { watch watch_reads } for pid=23449 comm="syz.3.7550" path="/proc/3188/numa_maps" dev="proc" ino=82646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 485.378770][ T30] audit: type=1400 audit(1772128241.069:1167): avc: denied { mounton } for pid=23452 comm="syz.1.7551" path="/1596/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 485.520166][ T976] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 485.527085][ T976] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 485.547907][ T976] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 485.553315][ T30] audit: type=1400 audit(1772128241.248:1168): avc: denied { ioctl } for pid=23461 comm="syz.4.7557" path="socket:[83909]" dev="sockfs" ino=83909 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 485.586858][ T30] audit: type=1400 audit(1772128241.279:1169): avc: denied { create } for pid=23461 comm="syz.4.7557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 485.619800][T23465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7554'. [ 485.642246][T23465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7554'. [ 485.652170][ T30] audit: type=1400 audit(1772128241.290:1170): avc: denied { read } for pid=23461 comm="syz.4.7557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 485.714633][T23469] netlink: 208 bytes leftover after parsing attributes in process `syz.3.7558'. [ 485.718559][ T976] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 485.732707][T23469] netlink: 208 bytes leftover after parsing attributes in process `syz.3.7558'. [ 485.760745][ T976] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 485.813346][ T976] usb 6-1: USB disconnect, device number 10 [ 485.831420][ T976] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 486.053623][T23481] netlink: 'syz.4.7563': attribute type 1 has an invalid length. [ 486.097863][T23481] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7563'. [ 486.125966][ T30] audit: type=1400 audit(1772128241.846:1171): avc: denied { setopt } for pid=23480 comm="syz.4.7563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 486.702957][T23500] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 487.335172][ T5881] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 487.490032][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 487.516961][ T5881] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 487.544671][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.576250][ T5881] usb 5-1: config 0 descriptor?? [ 487.582765][T23511] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 487.679694][T23527] netlink: 'syz.3.7577': attribute type 3 has an invalid length. [ 487.946550][T23544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7583'. [ 488.017430][ T5881] elan 0003:04F3:0755.0051: unknown main item tag 0x0 [ 488.043853][ T5881] elan 0003:04F3:0755.0051: unknown main item tag 0x0 [ 488.076613][ T5881] elan 0003:04F3:0755.0051: unknown main item tag 0x0 [ 488.097353][ T5881] elan 0003:04F3:0755.0051: unknown main item tag 0x0 [ 488.104197][ T5881] elan 0003:04F3:0755.0051: unknown main item tag 0x0 [ 488.134362][ T5881] elan 0003:04F3:0755.0051: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 488.259425][ T976] usb 5-1: USB disconnect, device number 66 [ 488.347956][T23556] fido_id[23556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 488.979666][T23581] syzkaller1: entered allmulticast mode [ 489.079265][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 489.098205][T23584] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7596'. [ 489.108804][T23583] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7596'. [ 489.242061][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 489.266483][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 489.299116][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 489.316499][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.341195][T23571] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 489.385700][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 489.596569][ T9] usb 4-1: USB disconnect, device number 67 [ 491.053662][T23666] netlink: 'syz.4.7630': attribute type 16 has an invalid length. [ 491.079905][T23666] netlink: 'syz.4.7630': attribute type 17 has an invalid length. [ 491.422522][T23683] sg_write: process 604 (syz.5.7637) changed security contexts after opening file descriptor, this is not allowed. [ 491.552958][T23689] netlink: 'syz.4.7641': attribute type 1 has an invalid length. [ 491.692229][T23689] 8021q: adding VLAN 0 to HW filter on device bond2 [ 491.792768][T23692] bond2: (slave geneve2): making interface the new active one [ 491.824284][T23692] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 491.915107][ T3554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.927908][ T3554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.010805][ T3554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.020952][ T3554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.104922][T23710] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7648'. [ 492.212515][ T30] audit: type=1326 audit(1772128248.239:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23711 comm="syz.0.7647" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7bae99c799 code=0x0 [ 492.374062][T10329] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 492.516913][T10329] usb 6-1: Using ep0 maxpacket: 16 [ 492.523884][T10329] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 492.536696][T10329] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 492.551268][T10329] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 492.563554][T10329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.572589][T10329] usb 6-1: Product: syz [ 492.613576][T10329] usb 6-1: Manufacturer: syz [ 492.625148][T10329] usb 6-1: SerialNumber: syz [ 492.643460][T10329] usb 6-1: config 0 descriptor?? [ 492.673095][T10329] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 492.693756][T10329] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 493.236240][T10329] em28xx 6-1:0.0: unknown em28xx chip ID (10) [ 493.427388][T10329] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 493.472022][ T5927] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 493.493851][ T30] audit: type=1400 audit(1772128249.583:1173): avc: denied { write } for pid=23763 comm="syz.3.7670" path="socket:[85335]" dev="sockfs" ino=85335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 493.630165][T10329] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 493.643613][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 493.655128][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 493.677597][T10329] em28xx 6-1:0.0: No AC97 audio processor [ 493.687051][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 493.733076][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 493.755683][T10329] usb 6-1: USB disconnect, device number 11 [ 493.777960][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 493.784711][T10329] em28xx 6-1:0.0: Disconnecting em28xx [ 493.826111][T10329] em28xx 6-1:0.0: Freeing device [ 493.838945][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 493.911980][ T5927] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 493.923101][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.938939][ T5927] usb 2-1: Product: syz [ 493.953297][ T5927] usb 2-1: Manufacturer: syz [ 493.961803][ T5927] usb 2-1: SerialNumber: syz [ 493.980165][ T5927] usb 2-1: config 0 descriptor?? [ 494.388831][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 494.395456][ T5927] input input64: Device does not respond to id packet M [ 494.410159][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 494.425308][ T5927] input input64: Device does not respond to id packet P [ 494.448742][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 494.456280][ T30] audit: type=1400 audit(1772128250.591:1174): avc: denied { write } for pid=23795 comm="syz.5.7682" path="socket:[85380]" dev="sockfs" ino=85380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 494.480964][ T5927] input input64: Device does not respond to id packet B [ 494.728943][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 494.739324][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 494.767387][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 494.778514][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 494.832571][ T5927] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input64 [ 494.893493][ T5927] usb 2-1: USB disconnect, device number 54 [ 495.050792][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 495.231625][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 495.248367][ T9] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.259964][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 495.289183][ T9] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 495.307179][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.333768][ T9] usb 6-1: config 0 descriptor?? [ 495.534891][T23838] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.7701'. [ 495.669893][T10329] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 495.767276][ T9] nzxt-smart2 0003:1E71:2009.0052: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 495.812690][T10329] usb 2-1: Using ep0 maxpacket: 8 [ 495.824067][T10329] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 495.850868][T10329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.892045][T10329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.927591][T10329] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 495.964397][T10329] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 496.007417][T10329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.050227][T10329] usb 2-1: config 0 descriptor?? [ 496.158358][ T30] audit: type=1400 audit(1772128252.386:1175): avc: denied { module_load } for pid=23854 comm="syz.0.7708" path="/1782/bus" dev="tmpfs" ino=9143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 496.158735][T23855] Invalid ELF header magic: != ELF [ 496.278206][T10328] usb 6-1: USB disconnect, device number 12 [ 496.502558][T23859] 9pnet: p9_errstr2errno: server reported unknown error  [ 496.504538][T10329] itetech 0003:258A:6A88.0053: unbalanced collection at end of report description [ 496.557726][T10329] itetech 0003:258A:6A88.0053: probe with driver itetech failed with error -22 [ 496.582978][T23861] lo speed is unknown, defaulting to 1000 [ 496.684879][T23863] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.730801][T23863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 496.764443][T10329] usb 2-1: USB disconnect, device number 55 [ 496.819719][T23867] input: syz0 as /devices/virtual/input/input65 [ 496.942197][T23872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7715'. [ 496.952351][T23872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7715'. [ 497.003192][T23874] 9pnet_fd: p9_fd_create_tcp (23874): problem connecting socket to 127.0.0.1 [ 497.847203][T23899] netlink: 27 bytes leftover after parsing attributes in process `syz.0.7725'. [ 498.077122][T23905] netlink: 'syz.5.7728': attribute type 25 has an invalid length. [ 498.085720][T23905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7728'. [ 498.147932][T23905] netlink: 'syz.5.7728': attribute type 25 has an invalid length. [ 498.165770][T23905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7728'. [ 498.458583][T23919] netlink: 'syz.5.7734': attribute type 10 has an invalid length. [ 498.522814][T23919] team0: Port device dummy0 added [ 498.558632][T23919] netlink: 'syz.5.7734': attribute type 10 has an invalid length. [ 498.630055][T23919] team0: Port device dummy0 removed [ 498.681782][T23919] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 498.882316][T23939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.089577][ T5881] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 499.232548][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 499.258377][ T5881] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 499.288009][ T5881] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 499.308161][ T5881] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 499.322852][ T5881] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 499.357009][ T5881] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 499.376094][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.589645][ T5881] usb 2-1: GET_CAPABILITIES returned 0 [ 499.606271][ T5881] usbtmc 2-1:16.0: can't read capabilities [ 499.790142][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.803748][ T5881] usb 2-1: USB disconnect, device number 56 [ 499.813638][ T30] audit: type=1400 audit(1772128256.218:1176): avc: denied { bind } for pid=23971 comm="syz.4.7756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 499.946484][T23970] SELinux: failed to load policy [ 500.337911][T23986] binder: 23985:23986 ioctl c0306201 0 returned -14 [ 500.501276][T10329] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 500.655953][T10329] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 500.690655][T10329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 500.718968][T10329] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 500.763047][T10329] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 500.788005][T10329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.808165][T24002] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7769'. [ 500.821015][T10329] usb 5-1: config 0 descriptor?? [ 500.848568][T24004] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7770'. [ 500.864578][T24004] netlink: Conntrack attr has 3 unknown bytes [ 500.882297][T24002] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7769'. [ 500.929817][ T30] audit: type=1400 audit(1772128257.383:1177): avc: denied { write } for pid=23981 comm="syz.5.7760" path="socket:[86031]" dev="sockfs" ino=86031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 501.250859][T10329] uclogic 0003:5543:0003.0054: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.4-1/input0 [ 501.462547][T10328] usb 5-1: USB disconnect, device number 67 [ 501.519229][T10329] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 501.622917][T24038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7781'. [ 501.671382][T10329] usb 4-1: Using ep0 maxpacket: 8 [ 501.683054][T10329] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 501.699927][T10329] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 501.733764][T10329] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 501.753856][T10329] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 501.774347][T10329] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.804704][T10329] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 501.813786][T10329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.059751][ T30] audit: type=1400 audit(1772128258.580:1178): avc: denied { setopt } for pid=24025 comm="syz.3.7775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 502.081067][T10329] usb 4-1: GET_CAPABILITIES returned 0 [ 502.086581][T10329] usbtmc 4-1:16.0: can't read capabilities [ 502.219080][T24055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7789'. [ 502.234787][T24057] netlink: 'syz.5.7788': attribute type 10 has an invalid length. [ 502.243422][T24055] netlink: 'syz.4.7789': attribute type 5 has an invalid length. [ 502.251162][T24055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7789'. [ 502.260527][T24057] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7788'. [ 502.279740][T24026] usb 4-1: usbtmc_ioctl_clear_in_halt returned -32 [ 502.299014][T10329] usb 4-1: USB disconnect, device number 68 [ 502.792008][T24071] Bluetooth: hci0: invalid len left 7, exp >= 47 [ 502.976890][T24074] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7795'. [ 504.327757][ T5927] libceph: connect (1)[c::]:6789 error -22 [ 504.371950][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 504.390773][T10328] libceph: connect (1)[b::]:6789 error -22 [ 504.396894][T10328] libceph: mon0 (1)[b::]:6789 connect error [ 504.477908][T24122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7814'. [ 504.597532][T24122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7814'. [ 504.622001][ T30] audit: type=1400 audit(1772128261.267:1179): avc: denied { read } for pid=24127 comm="syz.3.7817" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 504.654430][ T30] audit: type=1400 audit(1772128261.267:1180): avc: denied { open } for pid=24127 comm="syz.3.7817" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 504.685237][T10328] libceph: connect (1)[b::]:6789 error -22 [ 504.691516][T10328] libceph: mon0 (1)[b::]:6789 connect error [ 504.691610][ T5881] libceph: connect (1)[c::]:6789 error -22 [ 504.709853][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 504.964712][T24139] netlink: 'syz.5.7822': attribute type 1 has an invalid length. [ 505.060554][T24111] ceph: No mds server is up or the cluster is laggy [ 505.068153][T24116] ceph: No mds server is up or the cluster is laggy [ 505.080922][T24143] overlayfs: failed to clone upperpath [ 505.407340][T24128] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 505.425091][T24128] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 505.431138][T24128] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 505.489701][T24128] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 505.509077][T24128] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 505.531857][T24128] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 505.626424][T24163] kernel read not supported for file /cpuacct.usage_percpu (pid: 24163 comm: syz.5.7829) [ 505.654202][ T30] audit: type=1800 audit(1772128262.359:1181): pid=24163 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.7829" name="cpuacct.usage_percpu" dev="mqueue" ino=85964 res=0 errno=0 [ 505.791638][T24171] __nla_validate_parse: 1 callbacks suppressed [ 505.791662][T24171] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7835'. [ 505.858377][ T30] audit: type=1400 audit(1772128262.569:1182): avc: denied { map } for pid=24175 comm="syz.1.7836" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 506.719513][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 507.039296][T24215] input: syz1 as /devices/virtual/input/input66 [ 507.255155][ T30] audit: type=1400 audit(1772128264.028:1183): avc: denied { mounton } for pid=24219 comm="syz.5.7856" path="/file0" dev="ramfs" ino=86493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 507.407137][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 507.413537][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 508.523814][T24287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.652341][T24295] kvm: emulating exchange as write [ 508.980787][ T30] audit: type=1400 audit(1772128265.844:1184): avc: denied { write } for pid=24315 comm="syz.5.7893" lport=51486 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 509.063144][ T5881] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 509.115604][T24325] lo: Caught tx_queue_len zero misconfig [ 509.224833][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 509.232361][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.263258][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.281973][ T5881] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 509.297438][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.310203][T24332] syzkaller0: entered promiscuous mode [ 509.318922][ T5881] usb 4-1: config 0 descriptor?? [ 509.324221][T24332] syzkaller0: entered allmulticast mode [ 509.388203][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 509.396986][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 509.416028][T10329] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 509.584275][T10329] usb 2-1: Using ep0 maxpacket: 32 [ 509.624410][T10329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.635636][T10329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.646106][T10329] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 509.655362][T10329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.677866][T10329] usb 2-1: config 0 descriptor?? [ 509.697405][T10329] hub 2-1:0.0: USB hub found [ 509.751815][ T5881] apple 0003:05AC:024B.0055: fixing up MacBook JIS keyboard report descriptor [ 509.766873][ T5881] apple 0003:05AC:024B.0055: unknown global tag 0xe [ 509.775834][ T5881] apple 0003:05AC:024B.0055: item 0 1 1 14 parsing failed [ 509.784572][ T5881] apple 0003:05AC:024B.0055: parse failed [ 509.790856][ T5881] apple 0003:05AC:024B.0055: probe with driver apple failed with error -22 [ 509.900668][T10329] hub 2-1:0.0: 1 port detected [ 509.995308][T10328] usb 4-1: USB disconnect, device number 69 [ 510.504409][T10329] hub 2-1:0.0: activate --> -90 [ 510.879651][ T30] audit: type=1400 audit(1772128267.839:1185): avc: denied { create } for pid=24358 comm="syz.3.7907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 510.900892][ T30] audit: type=1400 audit(1772128267.839:1186): avc: denied { write } for pid=24358 comm="syz.3.7907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 510.923432][T10329] usb 2-1-port1: cannot disable (err = -71) [ 510.923617][ T5881] usb 2-1: USB disconnect, device number 57 [ 511.374895][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 511.799573][T10328] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 511.899235][T24359] lo speed is unknown, defaulting to 1000 [ 512.041159][T10328] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.072728][T10328] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 512.120044][T10328] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 512.141372][T10328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.149537][T10328] usb 2-1: Product: syz [ 512.154719][T10328] usb 2-1: Manufacturer: syz [ 512.168537][T10328] usb 2-1: SerialNumber: syz [ 512.176733][T10328] cdc_mbim 2-1:1.0: skipping garbage [ 512.263969][T24377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7913'. [ 512.365607][ T30] audit: type=1400 audit(1772128269.393:1187): avc: denied { watch } for pid=24381 comm="syz.4.7916" path="/" dev="hugetlbfs" ino=86959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 512.404714][T24365] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 512.406758][ T30] audit: type=1400 audit(1772128269.393:1188): avc: denied { watch_sb watch_reads } for pid=24381 comm="syz.4.7916" path="/" dev="hugetlbfs" ino=86959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 512.806516][ T5881] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 512.969251][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 512.979440][ T5881] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 513.004851][ T5881] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 513.017853][ T5881] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 513.028691][T24365] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 513.051267][ T5881] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 513.067227][ T5881] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.067536][T10328] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 513.105317][ T5881] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 513.119112][T10328] wwan wwan0: port wwan0mbim0 attached [ 513.144315][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.155587][T24405] trusted_key: syz.0.7924 sent an empty control message without MSG_MORE. [ 513.162626][T10328] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, b2:43:e3:9f:31:b3 [ 513.293928][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 513.300670][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 513.307106][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 513.313800][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 513.320718][ C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 513.327415][ C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 513.335736][ T30] audit: type=1326 audit(1772128270.380:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24410 comm="syz.0.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bae99c799 code=0x7ffc0000 [ 513.365055][ T5927] usb 2-1: USB disconnect, device number 58 [ 513.393718][ T5927] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 513.407493][ T30] audit: type=1326 audit(1772128270.380:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24410 comm="syz.0.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bae99c799 code=0x7ffc0000 [ 513.457032][ T30] audit: type=1326 audit(1772128270.380:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24410 comm="syz.0.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bae99c799 code=0x7ffc0000 [ 513.491781][ T30] audit: type=1326 audit(1772128270.380:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24410 comm="syz.0.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bae99c799 code=0x7ffc0000 [ 513.525859][T24416] loop2: detected capacity change from 0 to 7 [ 513.542334][T24416] loop2: [ 513.548810][ T5927] wwan wwan0: port wwan0mbim0 disconnected [ 513.549755][T24416] loop2: partition table partially beyond EOD, truncated [ 513.587231][ T30] audit: type=1326 audit(1772128270.380:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24410 comm="syz.0.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bae99c799 code=0x7ffc0000 [ 513.694686][ T30] audit: type=1326 audit(1772128270.380:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24410 comm="syz.0.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7bae99c799 code=0x7ffc0000 [ 513.951670][T24443] netlink: 186628 bytes leftover after parsing attributes in process `syz.0.7935'. [ 514.075964][T24448] loop2: detected capacity change from 0 to 7 [ 514.128952][T23740] Dev loop2: unable to read RDB block 7 [ 514.137216][T23740] loop2: unable to read partition table [ 514.152743][T23740] loop2: partition table beyond EOD, truncated [ 514.183805][T24448] Dev loop2: unable to read RDB block 7 [ 514.232880][T24448] loop2: unable to read partition table [ 514.266868][T24448] loop2: partition table beyond EOD, truncated [ 514.290530][T24448] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 515.430668][ T5927] usb 5-1: USB disconnect, device number 68 [ 516.274137][ T5927] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 516.450651][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.482254][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.502527][ T5927] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 516.511628][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.533366][ T5927] usb 6-1: config 0 descriptor?? [ 516.600399][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 516.600424][ T30] audit: type=1400 audit(1772128273.823:1205): avc: denied { setopt } for pid=24532 comm="syz.1.7962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 516.938458][ T5927] cp2112 0003:10C4:EA90.0056: unknown main item tag 0x0 [ 516.951035][ T5927] cp2112 0003:10C4:EA90.0056: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 517.126614][ T5927] cp2112 0003:10C4:EA90.0056: Part Number: 0x82 Device Version: 0xFE [ 517.171270][T24543] syzkaller1: entered promiscuous mode [ 517.197369][T24543] syzkaller1: entered allmulticast mode [ 517.281510][T24546] vivid-008: disconnect [ 517.381395][T24544] vivid-008: reconnect [ 517.640047][T24553] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.666384][T24553] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.673356][T24553] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.907263][ T5927] usb 6-1: USB disconnect, device number 13 [ 518.020378][T24553] infiniband syz2: set down [ 518.025114][T10328] ip6_vti0 speed is unknown, defaulting to 1000 [ 518.035740][T24553] infiniband syz2: added ip6_vti0 [ 518.055624][ T976] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 518.113841][T24553] RDS/IB: syz2: added [ 518.117985][T24553] smc: adding ib device syz2 with port count 1 [ 518.124949][T24553] smc: ib device syz2 port 1 has no pnetid [ 518.132012][T10328] ip6_vti0 speed is unknown, defaulting to 1000 [ 518.142310][T24553] ip6_vti0 speed is unknown, defaulting to 1000 [ 518.214914][ T976] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 518.227722][ T976] usb 4-1: config 0 has no interface number 0 [ 518.240692][ T976] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 518.260095][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.285194][ T976] usb 4-1: config 0 descriptor?? [ 518.301331][ T976] usb 4-1: selecting invalid altsetting 1 [ 518.309915][ T976] dvb_ttusb_budget: ttusb_init_controller: error [ 518.316669][ T976] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 518.440937][ T976] DVB: Unable to find symbol cx22700_attach() [ 518.477847][T24553] ip6_vti0 speed is unknown, defaulting to 1000 [ 518.529686][ T976] DVB: Unable to find symbol tda10046_attach() [ 518.536247][ T976] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 518.551150][ T5927] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 518.569775][ T976] usb 4-1: USB disconnect, device number 70 [ 518.744766][T24553] ip6_vti0 speed is unknown, defaulting to 1000 [ 518.746265][ T5927] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 518.771249][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.789872][ T5927] usb 2-1: Product: syz [ 518.794076][ T5927] usb 2-1: Manufacturer: syz [ 518.809238][ T5927] usb 2-1: SerialNumber: syz [ 518.827752][ T5927] usb 2-1: config 0 descriptor?? [ 519.019167][T24553] ip6_vti0 speed is unknown, defaulting to 1000 [ 519.141216][T24581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7979'. [ 519.227649][ T5927] usb 2-1: Firmware: major: 182, minor: 167, hardware type: UNKNOWN (115) [ 519.240754][T24586] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 519.331590][T24553] ip6_vti0 speed is unknown, defaulting to 1000 [ 519.428585][ T5927] usb 2-1: no permanent extended address found, random address set [ 519.455523][ T5927] usb 2-1: atusb_probe: initialization failed, error = -524 [ 519.470029][ T5927] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 519.564255][ T30] audit: type=1400 audit(1772128276.951:1206): avc: denied { read } for pid=24596 comm="syz.5.7986" path="socket:[88468]" dev="sockfs" ino=88468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 519.680256][ T5927] usb 2-1: USB disconnect, device number 59 [ 519.739562][T24602] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.7988'. [ 519.749815][T24602] netlink: Unknown conntrack attr (type=15, max=9) [ 520.966266][T24656] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 521.018200][T10328] lo speed is unknown, defaulting to 1000 [ 521.118317][T24657] bond0: (slave bond_slave_0): Releasing backup interface [ 521.260098][T24659] xt_hashlimit: size too large, truncated to 1048576 [ 521.347419][T24660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8011'. [ 521.906186][ T30] audit: type=1800 audit(1772128279.397:1207): pid=24672 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.8015" name="bus" dev="overlay" ino=1776 res=0 errno=0 [ 522.411661][T24691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8024'. [ 522.450996][T24691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8024'. [ 522.488069][T24694] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8026'. [ 522.502773][T24694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8026'. [ 522.749288][T24712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8030'. [ 522.968894][T24719] 9p: Bad value for 'rfdno' [ 523.862142][T24745] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 523.910819][T24745] SELinux: failed to load policy [ 524.358876][ T30] audit: type=1400 audit(1772128281.990:1208): avc: denied { create } for pid=24764 comm="syz.1.8050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 524.381925][T24768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8050'. [ 524.410128][ T30] audit: type=1400 audit(1772128282.011:1209): avc: denied { write } for pid=24764 comm="syz.1.8050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 524.476798][T24772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8052'. [ 524.494897][T24772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8052'. [ 524.530627][T24772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8052'. [ 524.544858][T24772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8052'. [ 524.674348][T24774] netlink: 'syz.1.8053': attribute type 29 has an invalid length. [ 524.687359][T24774] netlink: 'syz.1.8053': attribute type 29 has an invalid length. [ 524.697969][T24774] netlink: 'syz.1.8053': attribute type 32 has an invalid length. [ 524.724840][T24774] netlink: 500 bytes leftover after parsing attributes in process `syz.1.8053'. [ 524.964734][T24789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8060'. [ 525.365768][T24812] overlayfs: failed to clone upperpath [ 525.580570][ T976] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 525.734271][ T976] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.744966][ T976] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 525.773361][ T976] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 525.790228][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 525.802329][ T976] usb 5-1: SerialNumber: syz [ 526.011813][ T976] usb 5-1: 0:2 : does not exist [ 526.073232][ T976] usb 5-1: USB disconnect, device number 69 [ 526.134766][T23740] udevd[23740]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 526.717761][ T30] audit: type=1400 audit(1772128284.457:1210): avc: denied { create } for pid=24869 comm="syz.0.8097" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 526.741344][ T30] audit: type=1400 audit(1772128284.457:1211): avc: denied { unlink } for pid=24869 comm="syz.0.8097" name="file0" dev="ramfs" ino=89207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 526.783768][T24874] netlink: 'syz.0.8099': attribute type 1 has an invalid length. [ 526.802729][T10329] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 526.818931][ T5927] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 526.850970][T24874] bond0: (slave geneve2): making interface the new active one [ 526.860066][T24874] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 526.869575][ T506] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 526.884708][ T506] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 526.904989][ T3554] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 526.916618][ T3554] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 526.953773][T10329] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 526.962904][T10329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.974859][T10329] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 526.982264][ T5927] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 526.985493][T10329] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 526.992674][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 526.992706][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 526.992732][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 526.992759][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 526.992795][ T5927] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 527.001816][T10329] usb 2-1: Manufacturer: syz [ 527.067391][T10329] usb 2-1: config 0 descriptor?? [ 527.079378][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.096063][ T5927] usb 5-1: config 0 descriptor?? [ 527.104890][T24863] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 527.132903][T10329] rc_core: IR keymap rc-hauppauge not found [ 527.139021][T10329] Registered IR keymap rc-empty [ 527.145067][T10329] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 527.152561][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 527.157597][T10329] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input67 [ 527.201505][ T5881] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 527.340016][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 527.353770][ T5881] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.354712][T10329] usb 2-1: USB disconnect, device number 60 [ 527.365864][ T5881] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 527.387160][ T5881] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 527.397630][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 527.413296][ T5881] usb 6-1: SerialNumber: syz [ 527.505668][ T5927] plantronics 0003:047F:FFFF.0057: reserved main item tag 0xd [ 527.529564][ T5927] plantronics 0003:047F:FFFF.0057: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 527.630239][ T5881] usb 6-1: 0:2 : does not exist [ 527.635962][ T5881] usb 6-1: unit 3 not found! [ 527.686969][ T5881] usb 6-1: USB disconnect, device number 14 [ 527.704208][T24896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8107'. [ 527.720094][T23740] udevd[23740]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 527.732169][T24896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8107'. [ 527.805765][T24898] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 528.284806][T24922] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8116'. [ 528.335487][T24922] geneve2: entered promiscuous mode [ 529.048365][T24958] netlink: 'syz.5.8125': attribute type 1 has an invalid length. [ 529.079204][T24958] bond1: entered promiscuous mode [ 529.085409][T24958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.092307][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 529.131012][T24958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.138649][T24958] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 529.152432][T24958] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 529.167157][T24958] bond1: (slave vti0): making interface the new active one [ 529.174749][T24958] vti0: entered promiscuous mode [ 529.181701][T24958] bond1: (slave vti0): Enslaving as an active interface with an up link [ 529.234677][T24966] veth0: entered promiscuous mode [ 529.241708][T24966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8128'. [ 529.260287][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 529.275369][ T9] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 529.285053][ T9] usb 2-1: config 0 has no interface number 0 [ 529.311001][ T9] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 529.347807][ T9] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 529.362061][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.370649][ T9] usb 2-1: Product: syz [ 529.377935][ T9] usb 2-1: Manufacturer: syz [ 529.400329][ T9] usb 2-1: SerialNumber: syz [ 529.408973][ T9] usb 2-1: config 0 descriptor?? [ 529.436511][ T9] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 529.449351][ T9] em28xx 2-1:0.132: Video interface 132 found: [ 529.518115][ T5881] usb 5-1: USB disconnect, device number 70 [ 529.818817][ T9] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 529.905795][ T5881] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 530.131920][ T5881] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 530.150682][ T5881] usb 5-1: config 0 has no interface number 0 [ 530.181071][ T5881] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 530.183709][T25003] loop2: detected capacity change from 0 to 7 [ 530.209622][ T5881] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 530.215003][T25003] Dev loop2: unable to read RDB block 7 [ 530.241363][T25003] loop2: AHDI p1 p2 p3 [ 530.250161][T25003] loop2: partition table partially beyond EOD, truncated [ 530.257626][ T5881] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 530.266554][T25003] loop2: p1 start 1601398130 is beyond EOD, truncated [ 530.279609][ T5881] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 530.286600][T25003] loop2: p2 start 1702059890 is beyond EOD, truncated [ 530.295411][ T5881] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 530.315919][ T5881] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 530.325666][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.343901][ T5881] usb 5-1: config 0 descriptor?? [ 530.350401][T24982] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 530.366034][ T5881] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 530.438991][T24984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 530.544023][T25005] loop2: detected capacity change from 0 to 3 [ 530.552050][ T5826] ldm_validate_privheads(): Disk read failed. [ 530.571914][ T5826] Dev loop2: unable to read RDB block 3 [ 530.577697][ T5826] loop2: unable to read partition table [ 530.584875][ T5826] loop2: partition table beyond EOD, truncated [ 530.593471][T25005] ldm_validate_privheads(): Disk read failed. [ 530.603877][T25005] Dev loop2: unable to read RDB block 3 [ 530.609605][T25005] loop2: unable to read partition table [ 530.616910][T25005] loop2: partition table beyond EOD, truncated [ 530.623959][T25005] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 530.698600][ T976] usb 5-1: USB disconnect, device number 71 [ 530.700333][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 530.716873][ T976] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 530.878699][T25017] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8148'. [ 530.952846][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.964025][ T9] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 530.997546][ T9] em28xx 2-1:0.132: board has no eeprom [ 531.115138][ T9] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 531.123031][ T9] em28xx 2-1:0.132: analog set to bulk mode. [ 531.147787][ T5881] em28xx 2-1:0.132: Registering V4L2 extension [ 531.179149][ T9] usb 2-1: USB disconnect, device number 61 [ 531.201579][ T9] em28xx 2-1:0.132: Disconnecting em28xx [ 531.378292][T25028] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.8151'. [ 531.452653][ T5881] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 531.500247][ T5881] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 531.534241][ T5881] em28xx 2-1:0.132: No AC97 audio processor [ 531.604656][ T5881] usb 2-1: Decoder not found [ 531.609299][ T5881] em28xx 2-1:0.132: failed to create media graph [ 531.665409][ T5881] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 531.726330][ T5881] em28xx 2-1:0.132: Remote control support is not available for this card. [ 531.735311][ T9] em28xx 2-1:0.132: Closing input extension [ 531.775332][ T9] em28xx 2-1:0.132: Freeing device [ 532.158371][T25055] overlayfs: failed to clone upperpath [ 532.371945][T25062] xt_hashlimit: size too large, truncated to 1048576 [ 533.040780][T10329] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 533.123271][ T51] Bluetooth: hci4: unexpected event for opcode 0x0404 [ 533.193284][T10329] usb 5-1: Using ep0 maxpacket: 16 [ 533.200850][T10329] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 533.210073][T10329] usb 5-1: config 1 has no interface number 0 [ 533.216626][T10329] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 533.227222][T10329] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 533.240183][T10329] usb 5-1: config 1 interface 105 has no altsetting 0 [ 533.252411][T10329] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 533.267831][T10329] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 533.283162][T10329] usb 5-1: Product: syz [ 533.286186][T25089] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8177'. [ 533.294828][T10329] usb 5-1: Manufacturer: syz [ 533.313184][T10329] usb 5-1: SerialNumber: syz [ 533.323125][T25072] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 533.343842][T25072] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 533.572236][ T5881] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 533.619944][T24236] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 533.717188][ T30] audit: type=1400 audit(1772128291.796:1212): avc: denied { ioctl } for pid=25097 comm="syz.0.8181" path="socket:[89609]" dev="sockfs" ino=89609 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 533.751787][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 533.764106][T25072] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 533.771478][T25072] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 533.785792][ T5881] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 533.794185][ T5881] usb 4-1: config 2 has no interface number 0 [ 533.801104][ T5881] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 533.814797][ T30] audit: type=1400 audit(1772128291.900:1213): avc: denied { write } for pid=25099 comm="syz.1.8183" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 533.842874][ T5881] usb 4-1: config 2 interface 88 has no altsetting 0 [ 533.852134][ T5881] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 533.861428][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.870610][ T5881] usb 4-1: Product: syz [ 533.875042][ T5881] usb 4-1: Manufacturer: syz [ 533.879871][ T5881] usb 4-1: SerialNumber: syz [ 533.886377][T25102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8182'. [ 533.904029][T25093] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 533.928745][T25102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8182'. [ 534.144897][T25093] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 534.170224][T10329] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 534.214369][T10329] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 534.243412][T10329] aqc111 5-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, de:ad:c9:da:e9:14 [ 534.396700][ T30] audit: type=1400 audit(1772128292.530:1214): avc: denied { write } for pid=25114 comm="syz.0.8190" path="socket:[90715]" dev="sockfs" ino=90715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 534.474432][T10329] usb 5-1: USB disconnect, device number 72 [ 534.488840][T10329] aqc111 5-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 534.504330][T25120] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8191'. [ 534.570973][T25120] ip6gre1: entered promiscuous mode [ 534.577214][T10329] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 534.587291][T25120] ip6gre1: entered allmulticast mode [ 534.594515][T10329] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 534.618654][T10329] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 534.930992][T25142] netlink: 166436 bytes leftover after parsing attributes in process `syz.5.8196'. [ 534.947683][T25142] netlink: Conntrack attr has 4 unknown bytes [ 535.137263][ T5881] asix 4-1:2.88 (unnamed net_device) (uninitialized): invalid hw address, using random [ 535.340747][ T5881] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 535.369163][ T5881] asix 4-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 535.402012][ T5881] asix 4-1:2.88: probe with driver asix failed with error -71 [ 535.463869][ T5881] usb 4-1: USB disconnect, device number 71 [ 535.716340][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 535.879316][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 535.916561][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.943899][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 535.973114][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 535.982192][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.014502][ T9] usb 2-1: config 0 descriptor?? [ 536.468935][ T9] nzxt-smart2 0003:1E71:2009.0058: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 536.471480][T25219] binder: 25218:25219 ioctl c0306201 200000000040 returned -11 [ 536.733367][T25234] lo speed is unknown, defaulting to 1000 [ 536.915757][ T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 536.961652][ T5881] usb 2-1: USB disconnect, device number 62 [ 537.079944][ T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 537.097677][ T9] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 537.116788][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 537.135448][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.247871][T25234] ip6_vti0 speed is unknown, defaulting to 1000 [ 537.358830][ T9] usb 4-1: USB disconnect, device number 72 [ 537.375023][ T30] audit: type=1326 audit(1772128295.659:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25231 comm="syz.4.8218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34d199c799 code=0x0 [ 537.935751][ T976] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 538.080136][ T976] usb 6-1: config 0 has an invalid interface number: 238 but max is 0 [ 538.090623][ T976] usb 6-1: config 0 has no interface number 0 [ 538.122009][ T976] usb 6-1: config 0 interface 238 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 538.158832][ T976] usb 6-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 538.213972][ T976] usb 6-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 538.325978][ T976] usb 6-1: config 0 interface 238 altsetting 2 bulk endpoint 0x88 has invalid maxpacket 0 [ 538.345076][ T976] usb 6-1: config 0 interface 238 has no altsetting 0 [ 538.355490][ T976] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 538.374597][ T976] usb 6-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 538.390713][ T976] usb 6-1: Product: syz [ 538.411460][ T976] usb 6-1: Manufacturer: syz [ 538.416108][ T976] usb 6-1: SerialNumber: syz [ 538.471327][ T976] usb 6-1: config 0 descriptor?? [ 538.560564][ T976] ni6501 6-1:0.238: driver 'ni6501' failed to auto-configure device. [ 540.661857][T25249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.699660][T25301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.743320][ T5881] usb 6-1: USB disconnect, device number 15 [ 540.857777][T25318] netlink: 'syz.5.8247': attribute type 7 has an invalid length. [ 540.930577][T25318] netlink: 'syz.5.8247': attribute type 7 has an invalid length. [ 541.157023][T25333] sctp: [Deprecated]: syz.0.8254 (pid 25333) Use of int in max_burst socket option. [ 541.157023][T25333] Use struct sctp_assoc_value instead [ 541.194019][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 541.264887][T25338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8257'. [ 541.284523][T25338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8257'. [ 541.343935][T25342] overlayfs: failed to clone lowerpath [ 541.351693][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 541.368822][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 541.382651][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.421045][ T9] usb 2-1: config 0 descriptor?? [ 541.463283][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 541.669722][T25357] loop5: detected capacity change from 0 to 7 [ 541.683804][T19581] loop5: p1 < > p4 [ 541.687670][T19581] loop5: partition table partially beyond EOD, truncated [ 541.712151][T25357] loop5: p1 < > p4 [ 541.716226][T25357] loop5: partition table partially beyond EOD, truncated [ 541.828095][T23740] udevd[23740]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 541.862699][ T5826] udevd[5826]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 541.939422][T23740] udevd[23740]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 541.940157][T25366] netlink: 'syz.0.8269': attribute type 11 has an invalid length. [ 541.960324][ T5826] udevd[5826]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 541.971932][T25366] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8269'. [ 542.015751][T25366] netlink: 'syz.0.8269': attribute type 11 has an invalid length. [ 542.024639][T25366] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8269'. [ 542.042016][T25366] netlink: 'syz.0.8269': attribute type 11 has an invalid length. [ 542.059593][T25366] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8269'. [ 542.289549][ T30] audit: type=1326 audit(1772128300.813:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25382 comm="syz.0.8275" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7bae99c799 code=0x0 [ 542.812395][ T9] gspca_sonixj: i2c_w8 err -71 [ 542.837747][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 542.867974][ T9] usb 2-1: USB disconnect, device number 63 [ 543.126628][ T5927] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 543.251613][T25411] netlink: 'syz.4.8286': attribute type 1 has an invalid length. [ 543.403721][ T5927] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 543.412871][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.420841][ T5927] usb 4-1: Product: syz [ 543.425087][ T5927] usb 4-1: Manufacturer: syz [ 543.431365][ T5927] usb 4-1: SerialNumber: syz [ 543.443511][ T5927] usb 4-1: config 0 descriptor?? [ 543.666523][T25413] bond3: (slave ip6gretap1): making interface the new active one [ 543.693720][T25413] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 543.720965][T25413] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 543.739389][T25413] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 543.780692][T25418] lo speed is unknown, defaulting to 1000 [ 543.918702][T25418] ip6_vti0 speed is unknown, defaulting to 1000 [ 544.060442][ T5927] usb 4-1: Firmware: major: 182, minor: 167, hardware type: UNKNOWN (115) [ 544.233426][ T5927] usb 4-1: Read permanent extended address ac:08:2e:a4:8a:62:04:56 from device [ 544.265811][ T5927] usb 4-1: atusb_probe: initialization failed, error = -524 [ 544.293016][ T5927] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 544.448166][ T5927] usb 4-1: USB disconnect, device number 73 [ 545.141817][T25458] lo speed is unknown, defaulting to 1000 [ 545.884287][T25492] netlink: 'syz.3.8313': attribute type 13 has an invalid length. [ 545.909387][ T30] audit: type=1326 audit(1772128304.614:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25455 comm="syz.4.8302" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34d199c799 code=0x0 [ 546.000103][T25494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.051422][ T30] audit: type=1400 audit(1772128304.761:1218): avc: denied { read } for pid=25497 comm="syz.1.8316" name="file0" dev="tmpfs" ino=8808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 546.119987][ T30] audit: type=1400 audit(1772128304.792:1219): avc: denied { watch watch_reads } for pid=25497 comm="syz.1.8316" path="/1715/file0" dev="tmpfs" ino=8808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 546.311968][T25458] ip6_vti0 speed is unknown, defaulting to 1000 [ 546.420357][T25508] lo: Caught tx_queue_len zero misconfig [ 547.083818][ T30] audit: type=1400 audit(1772128305.831:1220): avc: denied { setopt } for pid=25529 comm="syz.3.8331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 547.232422][ T976] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 547.259760][ T976] hid-generic 0000:0000:0000.0059: hidraw0: HID v0.00 Device [syz1] on syz0 [ 547.627197][T25544] overlayfs: failed to resolve './file1': -2 [ 548.077739][T25561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8342'. [ 548.694972][ T30] audit: type=1326 audit(1772128307.532:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25595 comm="syz.4.8357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d199c799 code=0x7ffc0000 [ 548.729452][ T30] audit: type=1326 audit(1772128307.564:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25595 comm="syz.4.8357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d199c799 code=0x7ffc0000 [ 548.755597][ T30] audit: type=1326 audit(1772128307.574:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25595 comm="syz.4.8357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34d199c799 code=0x7ffc0000 [ 548.779614][ T30] audit: type=1326 audit(1772128307.574:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25595 comm="syz.4.8357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d199c799 code=0x7ffc0000 [ 548.803433][ T30] audit: type=1326 audit(1772128307.574:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25595 comm="syz.4.8357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d199c799 code=0x7ffc0000 [ 548.830384][ T30] audit: type=1326 audit(1772128307.574:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25595 comm="syz.4.8357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f34d199c799 code=0x7ffc0000 [ 548.855913][ T30] audit: type=1326 audit(1772128307.574:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25595 comm="syz.4.8357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d199c799 code=0x7ffc0000 [ 548.880066][ T5927] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 548.882582][ T30] audit: type=1326 audit(1772128307.574:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25595 comm="syz.4.8357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d199c799 code=0x7ffc0000 [ 548.912109][ T30] audit: type=1326 audit(1772128307.585:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25595 comm="syz.4.8357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34d199c799 code=0x7ffc0000 [ 548.961147][T25603] netlink: 'syz.0.8358': attribute type 1 has an invalid length. [ 548.970755][T25603] netlink: 'syz.0.8358': attribute type 1 has an invalid length. [ 549.051306][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 549.059916][ T5927] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 549.070073][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.081221][T25607] overlayfs: failed to clone upperpath [ 549.087871][ T5927] usb 4-1: Product: syz [ 549.101396][ T5927] usb 4-1: Manufacturer: syz [ 549.116310][ T5927] usb 4-1: SerialNumber: syz [ 549.132208][ T5927] usb 4-1: config 0 descriptor?? [ 549.147612][ T5927] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 549.192565][T25614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8361'. [ 549.719118][T25647] team0 (unregistering): Port device C removed [ 549.768791][T25647] team0 (unregistering): Port device team_slave_1 removed [ 550.522404][ T5927] usb 4-1: USB disconnect, device number 74 [ 552.241980][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 552.242001][ T30] audit: type=1400 audit(1772128311.259:1234): avc: denied { mounton } for pid=25689 comm="syz.0.8391" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 552.312511][ T30] audit: type=1400 audit(1772128311.332:1235): avc: denied { unmount } for pid=25689 comm="syz.0.8391" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 552.345126][T25690] lo speed is unknown, defaulting to 1000 [ 552.575855][ T30] audit: type=1400 audit(1772128311.605:1236): avc: denied { create } for pid=25695 comm="syz.4.8393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 552.649282][T25690] ip6_vti0 speed is unknown, defaulting to 1000 [ 552.656787][T25698] lo speed is unknown, defaulting to 1000 [ 553.018556][T25698] ip6_vti0 speed is unknown, defaulting to 1000 [ 553.255883][ T30] audit: type=1400 audit(1772128312.330:1237): avc: denied { ioctl } for pid=25703 comm="syz.3.8395" path="mnt:[4026532803]" dev="nsfs" ino=4026532803 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 553.662600][T10333] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 553.852408][T10333] usb 2-1: Using ep0 maxpacket: 32 [ 553.859185][T10333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.896857][T10333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.929067][T10333] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 553.938212][T10333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.983139][T10333] usb 2-1: config 0 descriptor?? [ 554.203613][T25726] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 554.451545][T10333] ft260 0003:0403:6030.005A: unknown main item tag 0x0 [ 555.238323][T10333] ft260 0003:0403:6030.005A: chip code: 5e81 abf2 [ 555.254303][T25743] loop5: detected capacity change from 0 to 7 [ 555.263086][T25743] Dev loop5: unable to read RDB block 7 [ 555.268974][T25743] loop5: unable to read partition table [ 555.275328][T25743] loop5: partition table beyond EOD, truncated [ 555.313957][T25743] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 555.422957][T10333] ft260 0003:0403:6030.005A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 555.617106][T10333] ft260 0003:0403:6030.005A: failed to retrieve status: -32, no wakeup [ 555.796030][ T5927] usb 2-1: reset high-speed USB device number 64 using dummy_hcd [ 556.219936][ T1034] Bluetooth: (null): Invalid header checksum [ 556.319867][ T1034] Bluetooth: (null): Invalid header checksum [ 556.426696][ T1034] Bluetooth: (null): Invalid header checksum [ 556.529343][ T1034] Bluetooth: (null): Invalid header checksum [ 556.569112][T10333] usb 2-1: USB disconnect, device number 64 [ 556.636625][ T1034] Bluetooth: (null): Invalid header checksum [ 556.738786][ T3554] Bluetooth: (null): Invalid header checksum [ 556.843860][ T3554] Bluetooth: (null): Invalid header checksum [ 556.921666][T25785] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.936899][T25785] bridge_slave_0 (unregistering): left allmulticast mode [ 556.945125][T25785] bridge_slave_0 (unregistering): left promiscuous mode [ 556.952766][ T506] Bluetooth: (null): Invalid header checksum [ 556.953919][T25785] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.023414][T25766] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 557.031468][T25766] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 557.037771][T25766] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 557.291471][T10329] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 557.312033][T25799] netlink: 'syz.3.8433': attribute type 11 has an invalid length. [ 557.329601][T25799] netlink: 'syz.3.8433': attribute type 4 has an invalid length. [ 557.337366][T25799] netlink: 'syz.3.8433': attribute type 5 has an invalid length. [ 557.350451][T25799] netlink: 'syz.3.8433': attribute type 6 has an invalid length. [ 557.358872][T25799] netlink: 199748 bytes leftover after parsing attributes in process `syz.3.8433'. [ 557.435082][T25804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8436'. [ 557.445539][T25804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8436'. [ 557.473984][T10329] usb 2-1: Using ep0 maxpacket: 32 [ 557.482155][T10329] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 557.500983][T10329] usb 2-1: config 0 has no interface number 0 [ 557.507150][T10329] usb 2-1: config 0 interface 184 has no altsetting 0 [ 557.531585][T10329] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 557.540856][T10329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.558615][T10329] usb 2-1: Product: syz [ 557.562811][T10329] usb 2-1: Manufacturer: syz [ 557.577448][T10329] usb 2-1: SerialNumber: syz [ 557.597045][T10329] usb 2-1: config 0 descriptor?? [ 557.617278][T25808] : entered promiscuous mode [ 558.230274][T10329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 558.263212][T24236] Bluetooth: hci2: command 0x0406 tx timeout [ 558.269352][T10329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 558.481879][T10329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 558.511065][T10329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 558.536808][ T30] audit: type=1400 audit(1772128317.862:1238): avc: denied { name_bind 0x1000000 } for pid=25825 comm="syz.5.8444" path="socket:[92987]" dev="sockfs" ino=92987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 558.568246][T10329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 558.587077][T10329] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 558.609745][T10329] usb 2-1: USB disconnect, device number 65 [ 558.998816][T24236] Bluetooth: hci1: command 0x0c1a tx timeout [ 559.005771][T24236] Bluetooth: hci4: command 0x0405 tx timeout [ 559.214519][ T30] audit: type=1400 audit(1772128318.576:1239): avc: denied { execute } for pid=25815 comm="syz.3.8441" name="cgroup" dev="tmpfs" ino=8364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 559.317255][T10329] libceph: connect (1)[c::]:6789 error -22 [ 559.324761][T10329] libceph: mon0 (1)[c::]:6789 connect error [ 559.460207][T25854] ceph: No mds server is up or the cluster is laggy [ 559.807014][T25867] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.8459'. [ 559.853098][T25867] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 561.363993][T25901] netlink: 'syz.0.8472': attribute type 1 has an invalid length. [ 561.522698][T25901] bond1: entered promiscuous mode [ 561.538407][T25901] bond1: entered allmulticast mode [ 561.560578][T25901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 561.647463][T25908] erspan2: entered allmulticast mode [ 561.707457][T25908] bond1: (slave erspan2): making interface the new active one [ 561.750446][T25908] erspan2: entered promiscuous mode [ 561.779813][T25908] [ 561.782183][T25908] ============================================ [ 561.788351][T25908] WARNING: possible recursive locking detected [ 561.794520][T25908] syzkaller #0 Tainted: G L [ 561.800502][T25908] -------------------------------------------- [ 561.806643][T25908] syz.0.8472/25908 is trying to acquire lock: [ 561.812736][T25908] ffff88803396a558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc60 [ 561.822615][T25908] [ 561.822615][T25908] but task is already holding lock: [ 561.829958][T25908] ffff888026096d58 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc60 [ 561.839785][T25908] [ 561.839785][T25908] other info that might help us debug this: [ 561.847819][T25908] Possible unsafe locking scenario: [ 561.847819][T25908] [ 561.855243][T25908] CPU0 [ 561.858502][T25908] ---- [ 561.861760][T25908] lock(&qdisc_xmit_lock_key#3); [ 561.866777][T25908] lock(&qdisc_xmit_lock_key#3); [ 561.871780][T25908] [ 561.871780][T25908] *** DEADLOCK *** [ 561.871780][T25908] [ 561.879896][T25908] May be due to missing lock nesting notation [ 561.879896][T25908] [ 561.888190][T25908] 10 locks held by syz.0.8472/25908: [ 561.893455][T25908] #0: ffffffff90db1a48 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 561.903040][T25908] #1: ffffffff9060f5a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 561.912075][T25908] #2: ffffffff8e7e9380 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x4750 [ 561.921975][T25908] #3: ffff888030eeb228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x226a/0x4750 [ 561.934568][T25908] #4: ffff888026096d58 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc60 [ 561.944819][T25908] #5: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0xb3/0xec0 [ 561.953668][T25908] #6: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x356/0x24d0 [ 561.963384][T25908] #7: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x26/0x2e0 [ 561.972172][T25908] #8: ffffffff8e7e9380 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x4750 [ 561.982182][T25908] #9: ffff88802aad3228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x226a/0x4750 [ 561.994800][T25908] [ 561.994800][T25908] stack backtrace: [ 562.000717][T25908] CPU: 1 UID: 0 PID: 25908 Comm: syz.0.8472 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.000744][T25908] Tainted: [L]=SOFTLOCKUP [ 562.000749][T25908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.000767][T25908] Call Trace: [ 562.000785][T25908] [ 562.000797][T25908] dump_stack_lvl+0x100/0x190 [ 562.000834][T25908] print_deadlock_bug.cold+0xbd/0xca [ 562.000860][T25908] __lock_acquire+0x12bb/0x2630 [ 562.000890][T25908] ? __alloc_skb+0x185/0x710 [ 562.000915][T25908] lock_acquire+0x1cf/0x380 [ 562.000936][T25908] ? sch_direct_xmit+0x3b5/0xc60 [ 562.000962][T25908] _raw_spin_lock+0x2e/0x40 [ 562.000986][T25908] ? sch_direct_xmit+0x3b5/0xc60 [ 562.001006][T25908] sch_direct_xmit+0x3b5/0xc60 [ 562.001029][T25908] ? lock_acquire+0x1cf/0x380 [ 562.001049][T25908] ? __pfx_sch_direct_xmit+0x10/0x10 [ 562.001077][T25908] ? do_raw_spin_lock+0x190/0x260 [ 562.001095][T25908] __dev_queue_xmit+0x250e/0x4750 [ 562.001117][T25908] ? __pfx_arpt_do_table+0x10/0x10 [ 562.001142][T25908] ? __pfx___dev_queue_xmit+0x10/0x10 [ 562.001160][T25908] ? lock_acquire+0x100/0x380 [ 562.001181][T25908] ? find_held_lock+0x2b/0x80 [ 562.001197][T25908] ? nf_hook.constprop.0+0x2f0/0x760 [ 562.001215][T25908] ? nf_hook.constprop.0+0x2f0/0x760 [ 562.001234][T25908] ? nf_hook.constprop.0+0x2fa/0x760 [ 562.001251][T25908] ? __pfx_arp_xmit_finish+0x10/0x10 [ 562.001274][T25908] arp_xmit+0x106/0x2e0 [ 562.001291][T25908] arp_send_dst+0x200/0x280 [ 562.001310][T25908] arp_solicit+0x672/0x1070 [ 562.001328][T25908] ? rcu_is_watching+0x12/0xc0 [ 562.001348][T25908] ? __pfx_arp_solicit+0x10/0x10 [ 562.001366][T25908] ? neigh_probe+0x72/0x110 [ 562.001387][T25908] ? __pfx_arp_solicit+0x10/0x10 [ 562.001405][T25908] neigh_probe+0xce/0x110 [ 562.001424][T25908] __neigh_event_send+0xae9/0x1430 [ 562.001443][T25908] neigh_resolve_output+0x550/0x8f0 [ 562.001462][T25908] ip_finish_output2+0x851/0x24d0 [ 562.001481][T25908] ? __pfx_ip_finish_output2+0x10/0x10 [ 562.001495][T25908] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 562.001510][T25908] ? nf_nat_ipv4_out+0xb2/0x510 [ 562.001530][T25908] ? find_held_lock+0x2b/0x80 [ 562.001547][T25908] __ip_finish_output.part.0+0x444/0x6f0 [ 562.001563][T25908] ip_output+0x39b/0xec0 [ 562.001577][T25908] ? __pfx_ip_output+0x10/0x10 [ 562.001590][T25908] ? __pfx_get_random_u32+0x10/0x10 [ 562.001613][T25908] ? __pfx_ip_finish_output+0x10/0x10 [ 562.001629][T25908] ip_local_out+0x35b/0x4a0 [ 562.001645][T25908] iptunnel_xmit+0x6d2/0xac0 [ 562.001666][T25908] ip_tunnel_xmit+0x1b85/0x3200 [ 562.001686][T25908] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 562.001700][T25908] ? kasan_quarantine_put+0x104/0x240 [ 562.001722][T25908] ? lockdep_hardirqs_on+0x78/0x100 [ 562.001740][T25908] ? skb_free_head+0x1cb/0x220 [ 562.001760][T25908] __gre_xmit+0x820/0xb20 [ 562.001774][T25908] ? __pfx___gre_xmit+0x10/0x10 [ 562.001786][T25908] ? __pfx_pskb_expand_head+0x10/0x10 [ 562.001801][T25908] erspan_xmit+0x55a/0x1ec0 [ 562.001816][T25908] ? __pfx_erspan_xmit+0x10/0x10 [ 562.001830][T25908] ? rcu_lockdep_current_cpu_online+0x30/0x150 [ 562.001850][T25908] dev_hard_start_xmit+0x121/0x7d0 [ 562.001871][T25908] sch_direct_xmit+0x1b2/0xc60 [ 562.001892][T25908] ? lock_acquire+0x1cf/0x380 [ 562.001912][T25908] ? __pfx_sch_direct_xmit+0x10/0x10 [ 562.001932][T25908] ? do_raw_spin_lock+0x190/0x260 [ 562.001949][T25908] __dev_queue_xmit+0x250e/0x4750 [ 562.001970][T25908] ? rcu_is_watching+0x12/0xc0 [ 562.001985][T25908] ? __pfx___dev_queue_xmit+0x10/0x10 [ 562.002002][T25908] ? __kasan_slab_alloc+0x89/0x90 [ 562.002025][T25908] ? kmalloc_reserve+0xf9/0x350 [ 562.002042][T25908] ? __asan_memset+0x23/0x50 [ 562.002057][T25908] ? __alloc_skb+0x4e9/0x710 [ 562.002085][T25908] ? __netdev_alloc_skb+0x10d/0x960 [ 562.002105][T25908] ? dev_addr_mod+0x31b/0x500 [ 562.002123][T25908] alb_send_lp_vid+0x31e/0x540 [ 562.002142][T25908] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 562.002158][T25908] alb_send_learning_packets+0xe0/0x2f0 [ 562.002173][T25908] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 562.002189][T25908] ? __pfx_alb_swap_mac_addr+0x10/0x10 [ 562.002204][T25908] alb_fasten_mac_swap+0x47f/0xa90 [ 562.002219][T25908] bond_alb_handle_active_change+0x634/0x10b0 [ 562.002237][T25908] ? __pfx_bond_alb_handle_active_change+0x10/0x10 [ 562.002252][T25908] ? __hw_addr_add_ex+0x646/0x7e0 [ 562.002272][T25908] ? dev_mc_sync+0x121/0x180 [ 562.002289][T25908] ? __local_bh_enable_ip+0x9e/0x120 [ 562.002309][T25908] bond_change_active_slave+0x160c/0x2ef0 [ 562.002332][T25908] ? __pfx_bond_change_active_slave+0x10/0x10 [ 562.002352][T25908] bond_select_active_slave+0x3f5/0xca0 [ 562.002372][T25908] ? __pfx_bond_select_active_slave+0x10/0x10 [ 562.002390][T25908] ? __pfx_bond_set_carrier+0x10/0x10 [ 562.002407][T25908] ? sysfs_create_files+0x14f/0x1e0 [ 562.002431][T25908] ? netdev_is_rx_handler_busy+0x83/0x140 [ 562.002447][T25908] bond_enslave+0x42a9/0x5970 [ 562.002470][T25908] ? __pfx_bond_enslave+0x10/0x10 [ 562.002488][T25908] ? nlmsg_notify+0xdc/0x290 [ 562.002506][T25908] ? rtmsg_ifinfo+0x70/0x1b0 [ 562.002525][T25908] ? __pfx___dev_change_flags+0x10/0x10 [ 562.002548][T25908] ? __pfx_bond_enslave+0x10/0x10 [ 562.002565][T25908] do_set_master+0x40f/0x730 [ 562.002585][T25908] ? rtnl_configure_link+0xe0/0x280 [ 562.002608][T25908] rtnl_newlink+0x15c2/0x2380 [ 562.002623][T25908] ? __pfx_rtnl_newlink+0x10/0x10 [ 562.002635][T25908] ? find_held_lock+0x2b/0x80 [ 562.002651][T25908] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 562.002674][T25908] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 562.002694][T25908] ? avc_has_perm_noaudit+0x145/0x3b0 [ 562.002720][T25908] ? find_held_lock+0x2b/0x80 [ 562.002736][T25908] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 562.002749][T25908] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 562.002762][T25908] ? __pfx_rtnl_newlink+0x10/0x10 [ 562.002775][T25908] rtnetlink_rcv_msg+0x95e/0xe90 [ 562.002789][T25908] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 562.002805][T25908] ? ref_tracker_free+0x37e/0x6c0 [ 562.002829][T25908] netlink_rcv_skb+0x159/0x420 [ 562.002844][T25908] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 562.002858][T25908] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 562.002876][T25908] ? netlink_deliver_tap+0x1ae/0xcc0 [ 562.002891][T25908] netlink_unicast+0x5aa/0x870 [ 562.002907][T25908] ? __pfx_netlink_unicast+0x10/0x10 [ 562.002924][T25908] netlink_sendmsg+0x8b0/0xda0 [ 562.002941][T25908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.002955][T25908] ? PageHuge+0x170/0x180 [ 562.002977][T25908] ____sys_sendmsg+0xa54/0xc30 [ 562.002996][T25908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 562.003014][T25908] ? kasan_quarantine_put+0x104/0x240 [ 562.003034][T25908] ___sys_sendmsg+0x190/0x1e0 [ 562.003052][T25908] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.003074][T25908] ? tomoyo_path_number_perm+0x188/0x580 [ 562.003108][T25908] __sys_sendmsg+0x170/0x220 [ 562.003121][T25908] ? __pfx___sys_sendmsg+0x10/0x10 [ 562.003133][T25908] ? rcu_is_watching+0x12/0xc0 [ 562.003150][T25908] ? kcov_ioctl+0x16a/0x720 [ 562.003174][T25908] do_syscall_64+0x106/0xf80 [ 562.003190][T25908] ? clear_bhb_loop+0x40/0x90 [ 562.003209][T25908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.003224][T25908] RIP: 0033:0x7f7bae99c799 [ 562.003240][T25908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.003253][T25908] RSP: 002b:00007f7baf8ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.003281][T25908] RAX: ffffffffffffffda RBX: 00007f7baec16090 RCX: 00007f7bae99c799 [ 562.003290][T25908] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 562.003299][T25908] RBP: 00007f7baea32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 562.003308][T25908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.003316][T25908] R13: 00007f7baec16128 R14: 00007f7baec16090 R15: 00007ffd889aee68 [ 562.003330][T25908] [ 562.761730][T25908] bond1: (slave erspan2): Enslaving as an active interface with an up link [ 562.787442][T25921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8479'. [ 562.796330][T25921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8479'.