last executing test programs: 4.07314447s ago: executing program 0 (id=8101): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000000c0), 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000080), 0x4) 4.02998646s ago: executing program 0 (id=8102): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) 3.574559356s ago: executing program 0 (id=8113): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000001880)=[{&(0x7f00000005c0)='~', 0x1}, {&(0x7f0000000680)='T', 0x1}], 0x2) 3.233473077s ago: executing program 3 (id=8122): socket(0x1d, 0x1, 0x1) getuid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000f00)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2019}}}, 0x7) 3.021999072s ago: executing program 3 (id=8124): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r0, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 2.66266984s ago: executing program 3 (id=8129): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000ac0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a86003d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730481032af14a31f9145634c2eed3db17a6e7592d00bdb3b777a5822fe0ca824aed6f5d1caef567d43abd31dc72c6a9238d4f3c2bcf0d81cbb6464279fba326d4ee259e8e65fdd91a87e2462260ef0bc82615b2651fee418882d594446d31936f2bfbaf2dbda2fc8f85e", 0xb5}, {&(0x7f00000003c0)="e8700e444d50a969e367347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d51f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b9376", 0x73}, {&(0x7f0000000980)="f7094f66a231f97d559f0e49819afb5f301e2a138f86616ea21652242789a1ee951bb5bf9128146990f5503577911c5784a7734e5a602ee2d12155980bd920f7f8cdca8c8fb20f51928a2a0db9c96c551aa9e89795592c235674774ff985b21f7f8cdbabee4b551e9ee1a10ca1d88fdf7bb75432e5d61400925b06f92991d883b0dcea4561dd76216258187f796baea7ecceb09c9159515096f90e990f6757fcce7d08c1af5988118c22acd907827ab327ee93ce355c", 0xb6}, {&(0x7f0000000b80)="e4656b9c78ec04b1bd70b7f1e8576ec74f95", 0x12}], 0x5}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.576610706s ago: executing program 3 (id=8131): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) bind$bt_hci(r1, &(0x7f00000011c0)={0x1f, 0x2, 0x4}, 0x6) 1.453049973s ago: executing program 2 (id=8148): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.405170251s ago: executing program 2 (id=8149): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) 1.330446676s ago: executing program 2 (id=8151): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) 1.050643867s ago: executing program 4 (id=8155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="242dce1454b3", 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}, {&(0x7f0000000080)="f9ae", 0x2}, {&(0x7f0000000140)="000012404646a281a48d5991b7e57d93", 0x10}], 0x5) 847.626891ms ago: executing program 1 (id=8158): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 847.455441ms ago: executing program 4 (id=8159): r0 = syz_io_uring_setup(0x4e84, &(0x7f00000000c0)={0x0, 0xd6d7, 0x80, 0x2, 0x60a}, &(0x7f0000000040), &(0x7f0000000140)) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4a4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000240)={0x6}, 0x0) 812.35927ms ago: executing program 1 (id=8160): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 808.46451ms ago: executing program 4 (id=8161): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r2) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x30, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}}, 0x20000000) 754.291462ms ago: executing program 1 (id=8162): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x6}, 0x50) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x2, 0x1, 0x7, 0x2, 0x4003, 0x200}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 700.816638ms ago: executing program 1 (id=8163): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000008c0)=""/148, 0x94}], 0x1}}], 0x1, 0x41, 0x0) 644.938768ms ago: executing program 4 (id=8164): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r1, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) 589.943218ms ago: executing program 1 (id=8165): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r1 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x5, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978155c384d00", "79f56ca74227234da829edb7"]}) 534.298937ms ago: executing program 1 (id=8166): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x3a) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) 512.315264ms ago: executing program 0 (id=8167): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) umount2(&(0x7f0000000100)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x4) 402.671453ms ago: executing program 4 (id=8168): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x6, 0x1000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) 321.691814ms ago: executing program 3 (id=8169): sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 299.945444ms ago: executing program 4 (id=8170): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x4c, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x403c6, 0xa, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5d, 0x0, 0x1, 0x8, 0xffff, 0x2, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0x40000c, 0x36, 0xa, 0x6, 0x2d, 0x9, 0x98, 0x8, 0x0, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0x400d, 0x5, 0x0, 0x6e38, 0x6, 0x8, 0x1, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0x7fff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x2, 0x8, 0x0, 0x34f1, 0x1fc, 0x4, 0x1b2c5a17, 0x2, 0x9, 0x7, 0x0, 0x2, 0x1, 0x9, 0x6, 0xac, 0x5, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x6, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d0, 0x34, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0xfffffffe, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x1, 0x0, 0x1, 0xfffffffe, 0x6, 0x6, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x8, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0x9, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xece9165b, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x0, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0x1, 0x80000000, 0x401, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x7, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x7, 0x4f, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x7, 0x1000, 0xfffffffe, 0x15, 0x800a, 0x5, 0x81, 0x5, 0x7, 0xfff7fffc, 0x4, 0x6, 0xeff]}, 0x45c) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) 205.838262ms ago: executing program 2 (id=8171): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000440)=[@request_death, @release], 0x0, 0x0, 0x0}) 188.638264ms ago: executing program 0 (id=8172): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x9, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x34004804}, 0x840) 108.01373ms ago: executing program 2 (id=8173): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x59b0, 0x3180, 0x3, 0x2c0}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x63, 0x0, 0x100000) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0xe, 0x4e, 0x32315559, 0x4, 0x7, 0x9, 0x0, 0x2, 0x0, 0x6, 0x0, 0x2}}) 107.002307ms ago: executing program 3 (id=8174): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x20000) r0 = syz_io_uring_setup(0xfd9, &(0x7f0000000640)={0x0, 0x4e826, 0x800, 0x401, 0xc0}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 917.984µs ago: executing program 0 (id=8175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 0s ago: executing program 2 (id=8176): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x62}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): /root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a1f9c799 code=0x7fc00000 [ 385.441239][ T30] audit: type=1326 audit(1774489062.721:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20650 comm="syz.1.6587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07d959c799 code=0x0 [ 385.629820][T20645] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 385.984900][ T30] audit: type=1326 audit(1774489063.261:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20637 comm="syz.2.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80a1f9c799 code=0x7fc00000 [ 386.020720][ T30] audit: type=1326 audit(1774489063.261:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20637 comm="syz.2.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a1f9c799 code=0x7fc00000 [ 386.045738][ T30] audit: type=1326 audit(1774489063.261:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20637 comm="syz.2.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a1f9c799 code=0x7fc00000 [ 386.071244][ T30] audit: type=1326 audit(1774489063.261:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20637 comm="syz.2.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a1f9c799 code=0x7fc00000 [ 386.101898][ T976] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 386.265759][ T976] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 386.284982][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 386.296379][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 386.307266][ T976] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 386.320736][ T976] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 386.330692][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.358428][ T976] usb 1-1: config 0 descriptor?? [ 386.779469][ T976] hid_parser_main: 443 callbacks suppressed [ 386.779491][ T976] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 386.779518][ T976] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 386.779539][ T976] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 386.779560][ T976] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 386.779584][ T976] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 386.797132][ T976] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 386.961466][ T30] audit: type=1400 audit(1774489064.231:920): avc: denied { connect } for pid=20701 comm="syz.4.6607" lport=46938 faddr=::ffff:172.30.0.5 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 386.961856][ T30] audit: type=1400 audit(1774489064.231:921): avc: denied { name_connect } for pid=20701 comm="syz.4.6607" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 387.053220][ T24] usb 1-1: USB disconnect, device number 71 [ 387.462057][ T976] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 387.623798][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 387.631919][ T976] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 387.643367][ T976] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 387.663695][ T976] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 387.674121][ T976] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.687200][T14660] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 387.699400][ T976] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 387.709850][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.864671][T14660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.884465][T14660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.912070][T14660] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 387.921595][T14660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.938245][ T976] usb 4-1: GET_CAPABILITIES returned 0 [ 387.946244][ T976] usbtmc 4-1:16.0: can't read capabilities [ 387.955541][T14660] usb 2-1: config 0 descriptor?? [ 387.961737][T14644] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 388.142003][T14644] usb 1-1: Using ep0 maxpacket: 32 [ 388.163930][T14644] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 388.211712][T14644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 388.235286][T14644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 388.276011][T14644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 388.301330][T14644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 388.357535][T14644] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 388.372976][T14644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.386304][T14644] usb 1-1: Product: syz [ 388.390898][T14644] usb 1-1: Manufacturer: syz [ 388.398356][T14660] cp2112 0003:10C4:EA90.0043: unknown main item tag 0x0 [ 388.407149][T14644] usb 1-1: SerialNumber: syz [ 388.415728][T14660] cp2112 0003:10C4:EA90.0043: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 388.433755][T14644] usb 1-1: config 0 descriptor?? [ 388.611909][T14660] cp2112 0003:10C4:EA90.0043: error requesting version [ 388.633666][T14660] cp2112 0003:10C4:EA90.0043: probe with driver cp2112 failed with error -71 [ 388.669798][T14660] usb 2-1: USB disconnect, device number 60 [ 388.697895][ T976] usb 4-1: USB disconnect, device number 55 [ 388.862896][T14644] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 388.872301][T14644] input input56: Device does not respond to id packet M [ 388.892817][T14644] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 388.899817][T14644] input input56: Device does not respond to id packet P [ 388.909556][T14644] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 388.923422][T14644] input input56: Device does not respond to id packet B [ 388.941081][T14644] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 388.947263][T14644] input input56: Device does not respond to id packet N [ 388.958433][T14644] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 388.973583][T20779] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6639'. [ 388.983163][T14644] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 388.989881][T14644] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 388.996450][T14644] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 389.027308][T14644] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input56 [ 389.058928][T14644] usb 1-1: USB disconnect, device number 72 [ 389.623184][ T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 389.781762][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 389.788973][ T24] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.809292][ T24] usb 2-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 389.823618][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 389.830403][ T24] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 389.842350][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.854890][ T24] usb 2-1: config 0 descriptor?? [ 390.278322][ T24] elo 0003:04E7:0030.0044: unknown main item tag 0x0 [ 390.287480][ T24] elo 0003:04E7:0030.0044: unknown main item tag 0x0 [ 390.296839][ T24] elo 0003:04E7:0030.0044: unknown main item tag 0x0 [ 390.304155][ T24] elo 0003:04E7:0030.0044: unknown main item tag 0x0 [ 390.311024][ T24] elo 0003:04E7:0030.0044: unexpected long global item [ 390.323070][ T24] elo 0003:04E7:0030.0044: parse failed [ 390.328783][ T24] elo 0003:04E7:0030.0044: probe with driver elo failed with error -22 [ 390.466240][T20836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6664'. [ 390.491919][T20836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6664'. [ 390.511482][ T24] usb 2-1: USB disconnect, device number 61 [ 390.685548][T20844] GUP no longer grows the stack in syz.0.6668 (20844): 200000004000-20000000a000 (200000003000) [ 390.714665][T20844] CPU: 1 UID: 0 PID: 20844 Comm: syz.0.6668 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.714700][T20844] Tainted: [L]=SOFTLOCKUP [ 390.714707][T20844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 390.714719][T20844] Call Trace: [ 390.714725][T20844] [ 390.714733][T20844] dump_stack_lvl+0x100/0x190 [ 390.714769][T20844] gup_vma_lookup.cold+0x83/0x96 [ 390.714792][T20844] __get_user_pages+0x241/0x34d0 [ 390.714821][T20844] ? __pfx___get_user_pages+0x10/0x10 [ 390.714852][T20844] __gup_longterm_locked+0x87d/0x16f0 [ 390.714878][T20844] ? irqentry_exit+0x180/0x670 [ 390.714908][T20844] ? __pfx___gup_longterm_locked+0x10/0x10 [ 390.714941][T20844] pin_user_pages_remote+0xed/0x140 [ 390.714965][T20844] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 390.714998][T20844] process_vm_rw_core.constprop.0+0x412/0x950 [ 390.715038][T20844] ? __kasan_kmalloc+0xaa/0xb0 [ 390.715071][T20844] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 390.715116][T20844] ? iovec_from_user+0xda/0x140 [ 390.715141][T20844] process_vm_rw+0x309/0x370 [ 390.715174][T20844] ? __pfx_process_vm_rw+0x10/0x10 [ 390.715209][T20844] ? __pfx_css_rstat_updated+0x10/0x10 [ 390.715246][T20844] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 390.715279][T20844] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 390.715324][T20844] ? xfd_validate_state+0x129/0x190 [ 390.715348][T20844] __x64_sys_process_vm_writev+0xe2/0x1c0 [ 390.715379][T20844] ? do_syscall_64+0x95/0xf80 [ 390.715405][T20844] ? lockdep_hardirqs_on+0x78/0x100 [ 390.715428][T20844] do_syscall_64+0x106/0xf80 [ 390.715450][T20844] ? clear_bhb_loop+0x40/0x90 [ 390.715473][T20844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.715492][T20844] RIP: 0033:0x7f4cfa19c799 [ 390.715509][T20844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.715526][T20844] RSP: 002b:00007f4cf83f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 390.715544][T20844] RAX: ffffffffffffffda RBX: 00007f4cfa415fa0 RCX: 00007f4cfa19c799 [ 390.715556][T20844] RDX: 0000000000000020 RSI: 0000200000001c80 RDI: 0000000000000aac [ 390.715567][T20844] RBP: 00007f4cfa232c99 R08: 0000000000000001 R09: 0000000000000000 [ 390.715578][T20844] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000000 [ 390.715589][T20844] R13: 00007f4cfa416038 R14: 00007f4cfa415fa0 R15: 00007ffc0c77fab8 [ 390.715614][T20844] [ 391.086287][T20864] sctp: [Deprecated]: syz.2.6679 (pid 20864) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.086287][T20864] Use struct sctp_sack_info instead [ 391.451199][T20887] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.6686'. [ 391.809754][ T30] audit: type=1400 audit(1774489069.091:922): avc: denied { write } for pid=20899 comm="syz.2.6695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 391.865197][T20906] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.6697'. [ 391.879679][T20906] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 392.021873][T14662] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 392.201516][T14662] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.221364][T14662] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.244328][T14662] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 392.258267][T14662] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.268413][T14662] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.281495][T14662] usb 5-1: config 0 descriptor?? [ 392.417890][T20933] overlayfs: failed to clone upperpath [ 392.471791][ T24] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 392.641836][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 392.648381][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 392.660048][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 392.670252][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 392.680183][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 392.691908][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 392.702102][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 392.711174][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.723641][T14662] hid_parser_main: 11 callbacks suppressed [ 392.723661][T14662] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 392.727227][ T24] usb 1-1: config 0 descriptor?? [ 392.729721][T14662] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 392.746268][T20925] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 392.756705][T14651] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 392.766103][T14662] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 392.774498][T14662] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 392.782507][T14662] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 392.789919][T14662] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 392.798311][T14662] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 392.814408][T14662] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 392.822052][T14662] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 392.829639][T14662] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 392.850637][T14662] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 392.941837][T14651] usb 4-1: Using ep0 maxpacket: 16 [ 392.956357][T14651] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 392.974304][T14651] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 392.992218][T14651] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.021686][T14651] usb 4-1: config 1 interface 0 has no altsetting 0 [ 393.030196][T14651] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 393.030919][ C0] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 393.039822][T14651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.052492][T14644] usb 5-1: USB disconnect, device number 63 [ 393.055920][ T5810] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 393.070541][T14651] usb 4-1: Product: syz [ 393.074915][T14651] usb 4-1: Manufacturer: syz [ 393.079799][T14651] usb 4-1: SerialNumber: syz [ 393.092700][T14662] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 393.261773][T14662] usb 2-1: Using ep0 maxpacket: 16 [ 393.268946][T14662] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 393.276686][ T24] usb 1-1: USB disconnect, device number 73 [ 393.280410][ T5809] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 393.291262][T14662] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.304986][T14651] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 393.318353][T14662] usb 2-1: config 0 descriptor?? [ 393.328421][T14662] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 393.536915][T14644] usb 4-1: USB disconnect, device number 56 [ 393.637135][ T30] audit: type=1400 audit(1774489070.911:923): avc: denied { read } for pid=20959 comm="syz.4.6721" path="socket:[65511]" dev="sockfs" ino=65511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 393.737715][T20936] usblp0: removed [ 394.091774][ T24] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 394.203914][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 394.277811][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 394.286094][ T24] usb 5-1: config 0 has no interface number 0 [ 394.293139][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 394.315236][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 394.328907][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 394.338869][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.354741][ T24] usb 5-1: config 0 descriptor?? [ 394.355321][T14662] usb 2-1: USB disconnect, device number 62 [ 394.370550][T20971] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 394.403645][ T24] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 394.591723][T14644] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 394.633717][ T24] usb 5-1: USB disconnect, device number 64 [ 394.639708][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 394.751651][T14644] usb 4-1: Using ep0 maxpacket: 32 [ 394.758940][T14644] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 394.771113][T14644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 394.782538][T14644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 394.792850][T14644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 394.804435][T14644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 394.820796][T14644] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 394.830520][T14644] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.838843][T14644] usb 4-1: Product: syz [ 394.843595][T14644] usb 4-1: Manufacturer: syz [ 394.848327][T14644] usb 4-1: SerialNumber: syz [ 394.857624][T14644] usb 4-1: config 0 descriptor?? [ 395.278901][T14644] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 395.291679][T14644] input input57: Device does not respond to id packet M [ 395.310905][T14644] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 395.323696][T14644] input input57: Device does not respond to id packet P [ 395.341721][ T24] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 395.341935][T14644] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 395.401754][T14644] input input57: Device does not respond to id packet B [ 395.421997][T14644] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 395.428234][T14644] input input57: Device does not respond to id packet N [ 395.445841][T14644] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 395.462603][T14644] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 395.472997][T14644] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 395.492047][T14644] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 395.518563][T14644] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input57 [ 395.522905][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 395.563863][T14644] usb 4-1: USB disconnect, device number 57 [ 395.633447][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 395.648449][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 395.677054][ T24] usb 1-1: can't read configurations, error -71 [ 396.441819][T14644] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 396.593112][T14644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.611903][T14644] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 396.679791][T14644] usb 2-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 396.699618][T14644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.714224][T14644] usb 2-1: config 0 descriptor?? [ 396.751616][T14651] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 396.912325][T14651] usb 5-1: Using ep0 maxpacket: 16 [ 396.919069][T14651] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 396.931662][T14651] usb 5-1: config 0 has no interface number 0 [ 396.937857][T14651] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 396.961834][T14651] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 396.983437][T14651] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 397.001654][T14651] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.009656][T14651] usb 5-1: Product: syz [ 397.021684][T14651] usb 5-1: Manufacturer: syz [ 397.026298][T14651] usb 5-1: SerialNumber: syz [ 397.042925][T14651] usb 5-1: config 0 descriptor?? [ 397.048579][T21064] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 397.056411][T21064] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 397.157325][T14644] logitech-djreceiver 0003:046D:C539.0046: hidraw0: USB HID v0.04 Device [HID 046d:c539] on usb-dummy_hcd.1-1/input0 [ 397.273163][T21064] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 397.287831][T21064] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 397.371081][ T24] usb 2-1: USB disconnect, device number 63 [ 397.838928][T21107] netlink: 'syz.2.6782': attribute type 39 has an invalid length. [ 397.901676][T14651] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 397.921824][T14651] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 397.935300][T14651] asix 5-1:0.251: probe with driver asix failed with error -71 [ 397.974565][T14651] usb 5-1: USB disconnect, device number 65 [ 398.092714][ T24] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 398.269090][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.291587][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.313479][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 398.327131][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.343865][ T24] usb 1-1: config 0 descriptor?? [ 398.421907][T14644] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 398.572223][T14644] usb 2-1: Using ep0 maxpacket: 16 [ 398.579827][T14644] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.594816][T14644] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.604873][T14644] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 398.618240][T14644] usb 2-1: config 0 interface 0 has no altsetting 0 [ 398.626110][T14644] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 398.635929][T14644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.638170][ T30] audit: type=1326 audit(1774489075.911:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21153 comm="syz.4.6803" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea63f9c799 code=0x0 [ 398.662669][T14644] usb 2-1: config 0 descriptor?? [ 398.780686][T21160] bridge0: port 3(syz_tun) entered blocking state [ 398.790318][ T24] hid_parser_main: 40 callbacks suppressed [ 398.790340][ T24] arvo 0003:1E7D:30D4.0047: unknown main item tag 0x0 [ 398.807214][T21160] bridge0: port 3(syz_tun) entered disabled state [ 398.814741][T21160] syz_tun: entered allmulticast mode [ 398.820196][ T24] arvo 0003:1E7D:30D4.0047: unknown main item tag 0x0 [ 398.829272][T21160] syz_tun: entered promiscuous mode [ 398.834768][ T24] arvo 0003:1E7D:30D4.0047: unknown main item tag 0x0 [ 398.847135][ T24] arvo 0003:1E7D:30D4.0047: unknown main item tag 0x0 [ 398.854742][ T24] arvo 0003:1E7D:30D4.0047: unknown main item tag 0x0 [ 398.871606][ T24] arvo 0003:1E7D:30D4.0047: unknown main item tag 0x0 [ 398.888944][ T24] arvo 0003:1E7D:30D4.0047: unknown main item tag 0x0 [ 398.903702][ T24] arvo 0003:1E7D:30D4.0047: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 398.988666][ T24] arvo 0003:1E7D:30D4.0047: couldn't init struct arvo_device [ 399.000805][ T24] arvo 0003:1E7D:30D4.0047: couldn't install keyboard [ 399.028516][ T24] arvo 0003:1E7D:30D4.0047: probe with driver arvo failed with error -71 [ 399.060272][ T24] usb 1-1: USB disconnect, device number 76 [ 399.319208][T14644] usb 2-1: USB disconnect, device number 64 [ 399.653273][T21188] netlink: 'syz.0.6817': attribute type 10 has an invalid length. [ 399.661222][T21188] syz_tun: entered promiscuous mode [ 399.668350][T21188] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 399.821934][T14644] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 399.933087][T21196] netlink: 'syz.1.6821': attribute type 39 has an invalid length. [ 399.976865][T21200] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6823'. [ 400.013850][T14644] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 400.031819][T14644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.062147][T14644] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 400.077577][T14644] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 400.100692][T14644] usb 5-1: Manufacturer: syz [ 400.113886][T14644] usb 5-1: config 0 descriptor?? [ 400.193656][T14644] rc_core: IR keymap rc-hauppauge not found [ 400.199585][T14644] Registered IR keymap rc-empty [ 400.207224][T14644] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 400.228399][T14644] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input58 [ 400.366295][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 400.371662][ T24] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 400.388056][T14651] usb 5-1: USB disconnect, device number 66 [ 400.535105][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 400.554357][ T24] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 400.563331][ T24] usb 2-1: config 0 has no interface number 0 [ 400.573283][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 400.584060][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.609463][ T24] usb 2-1: Product: syz [ 400.616500][ T24] usb 2-1: Manufacturer: syz [ 400.621615][ T24] usb 2-1: SerialNumber: syz [ 400.629296][ T24] usb 2-1: config 0 descriptor?? [ 400.778333][ T30] audit: type=1400 audit(1774489078.051:925): avc: denied { ioctl } for pid=21241 comm="syz.2.6843" path="socket:[67147]" dev="sockfs" ino=67147 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 400.861858][T14651] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 400.901502][T21250] 9p: Bad value for 'rfdno' [ 401.011815][T14651] usb 4-1: Using ep0 maxpacket: 16 [ 401.026659][T14651] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 401.042223][T14651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.050446][T14651] usb 4-1: Product: syz [ 401.055074][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 401.066537][T14651] usb 4-1: Manufacturer: syz [ 401.071147][T14651] usb 4-1: SerialNumber: syz [ 401.076160][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 401.102593][T14651] usb 4-1: config 0 descriptor?? [ 401.385202][T21278] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 401.489999][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 401.501194][ T24] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 401.512883][ T24] usb 2-1: USB disconnect, device number 65 [ 401.519549][T14651] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 401.539868][T14651] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 401.549863][T14651] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 401.558106][T14651] usb 4-1: media controller created [ 401.568461][T14651] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.681624][T14644] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 401.755428][T21282] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 401.775285][T21282] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 401.841699][T14644] usb 1-1: Using ep0 maxpacket: 16 [ 401.849220][T14644] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.863330][T14644] usb 1-1: config 0 interface 0 has no altsetting 0 [ 401.870046][T14644] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 401.879780][T14644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.890925][T14644] usb 1-1: config 0 descriptor?? [ 402.122121][T14651] zl10353_read_register: readreg error (reg=127, ret==0) [ 402.129319][T14651] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 402.148232][T14651] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 402.164287][T14651] usb 4-1: USB disconnect, device number 58 [ 402.173191][T21298] overlayfs: upper fs does not support tmpfile. [ 402.235955][T14651] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 402.332826][T14644] nzxt-smart2 0003:1E71:2009.0049: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 402.379673][T21301] SELinux: failed to load policy [ 402.477290][T21308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6874'. [ 402.553148][T14662] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 402.621661][T14644] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 402.722806][T14662] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 402.734700][T14662] usb 2-1: config 0 has no interface number 0 [ 402.740870][T14662] usb 2-1: config 0 interface 41 has no altsetting 0 [ 402.742695][T14651] usb 1-1: USB disconnect, device number 77 [ 402.761309][T14662] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 402.773018][T14662] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.781227][T14662] usb 2-1: Product: syz [ 402.787229][T14662] usb 2-1: Manufacturer: syz [ 402.792461][T14644] usb 5-1: Using ep0 maxpacket: 16 [ 402.798030][T14662] usb 2-1: SerialNumber: syz [ 402.803867][T14644] usb 5-1: config index 0 descriptor too short (expected 4495, got 71) [ 402.814489][T14662] usb 2-1: config 0 descriptor?? [ 402.819694][T14644] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 402.827610][T21319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.829755][T14644] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.850016][T14644] usb 5-1: config 0 has no interface number 0 [ 402.858195][T14644] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 402.868157][T14644] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.876230][T14644] usb 5-1: Product: syz [ 402.880475][T14644] usb 5-1: Manufacturer: syz [ 402.885869][T14644] usb 5-1: SerialNumber: syz [ 402.903651][T14644] usb 5-1: config 0 descriptor?? [ 402.915051][T14644] uvcvideo 5-1:0.105: probe with driver uvcvideo failed with error -22 [ 403.153806][T14644] usb 5-1: USB disconnect, device number 67 [ 403.406972][T21347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6891'. [ 403.419024][T21347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6891'. [ 403.523842][T21355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6895'. [ 403.711685][T14644] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 403.772107][T14651] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 403.882476][T14662] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 403.892938][T14644] usb 4-1: Using ep0 maxpacket: 16 [ 403.902783][T14662] usb 2-1: USB disconnect, device number 66 [ 403.912912][T14644] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 403.922501][T14644] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.943679][T14651] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 403.946615][T14644] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.968405][T14644] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.976389][T14651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.979294][T14644] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.997409][T14644] usb 4-1: Product: syz [ 404.004899][T14651] usb 1-1: config 0 descriptor?? [ 404.012471][T14644] usb 4-1: Manufacturer: syz [ 404.017167][T14644] usb 4-1: SerialNumber: syz [ 404.026366][T14651] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 404.233358][ T976] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 404.394934][ T976] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 404.404545][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.414683][ T976] usb 5-1: Product: syz [ 404.422024][ T976] usb 5-1: Manufacturer: syz [ 404.426895][ T976] usb 5-1: SerialNumber: syz [ 404.447635][ T976] usb 5-1: config 0 descriptor?? [ 404.448856][T14651] gspca_cpia1: usb_control_msg 03, error -32 [ 404.466947][T14644] usb 4-1: 0:2 : does not exist [ 404.469785][T14651] gspca_cpia1: usb_control_msg 03, error -71 [ 404.479808][ T976] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 068 [ 404.481136][T14651] gspca_cpia1: usb_control_msg 01, error -71 [ 404.496150][T14651] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 404.507820][T14651] usb 1-1: USB disconnect, device number 78 [ 404.889975][ T976] (null): failure reading functionality [ 404.930093][ T976] i2c i2c-1: connected i2c-tiny-usb device [ 405.129571][ T30] audit: type=1326 audit(1774489082.401:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="syz.1.6922" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07d959c799 code=0x0 [ 405.136112][T14644] usb 4-1: USB disconnect, device number 59 [ 405.165460][ T976] usb 5-1: USB disconnect, device number 68 [ 405.216434][ T6110] udevd[6110]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.266763][T21414] syzkaller1: entered promiscuous mode [ 405.273152][T21414] syzkaller1: entered allmulticast mode [ 406.041253][T21437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6933'. [ 406.157445][ T30] audit: type=1400 audit(1774489083.431:927): avc: denied { ioctl } for pid=21442 comm="syz.3.6935" path="socket:[67458]" dev="sockfs" ino=67458 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 406.813090][T21489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6957'. [ 406.831982][T21486] support for cryptoloop has been removed. Use dm-crypt instead. [ 407.174021][T21506] could not open pipe file descriptor [ 407.581254][ T30] audit: type=1400 audit(1774489084.851:928): avc: denied { write } for pid=14651 comm="kworker/1:13" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=68306 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 407.675421][T21531] SELinux: failed to load policy [ 409.491657][T14662] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 409.653604][T14662] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 409.676647][T14662] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 409.677850][T21615] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7011'. [ 409.698879][T14662] usb 1-1: config 0 interface 0 has no altsetting 0 [ 409.710940][T14662] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 409.720309][T14662] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 409.740536][T14662] usb 1-1: Product: syz [ 409.750645][T14662] usb 1-1: Manufacturer: syz [ 409.755491][T14662] usb 1-1: SerialNumber: syz [ 409.782729][T14662] usb 1-1: config 0 descriptor?? [ 409.797464][T14662] usb 1-1: selecting invalid altsetting 0 [ 410.078502][ T30] audit: type=1400 audit(1774489087.351:929): avc: denied { write } for pid=21627 comm="syz.3.7017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 410.183298][T14662] usb 1-1: USB disconnect, device number 79 [ 411.147299][T21659] syzkaller1: entered promiscuous mode [ 411.181685][T21659] syzkaller1: entered allmulticast mode [ 411.411855][ T24] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 411.489389][T21678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7038'. [ 411.594795][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 411.614872][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 411.640806][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.663585][ T24] usb 2-1: config 0 descriptor?? [ 412.384562][T21716] overlayfs: failed to clone lowerpath [ 412.484230][T21721] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7056'. [ 412.683677][ T24] video4linux radio48: keene_cmd_set failed (-71) [ 412.696705][ T24] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 412.720663][ T24] usb 2-1: USB disconnect, device number 67 [ 412.927751][T21740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.945383][T21740] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.989827][T21740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.437010][T21766] netlink: 'syz.2.7071': attribute type 29 has an invalid length. [ 413.488905][T21766] netlink: 'syz.2.7071': attribute type 29 has an invalid length. [ 413.518061][T21766] netlink: 500 bytes leftover after parsing attributes in process `syz.2.7071'. [ 413.597368][T21772] SELinux: ebitmap start bit (24) is not a multiple of the map unit size (64) [ 413.616195][ T30] audit: type=1800 audit(1774489090.881:930): pid=21767 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.7073" name="/newroot/1339/pids.events" dev="tmpfs" ino=6825 res=0 errno=0 [ 413.616759][T21772] SELinux: failed to load policy [ 413.764298][T21788] input: syz0 as /devices/virtual/input/input59 [ 413.825977][T21794] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.7085'. [ 414.292010][T21819] xt_hashlimit: size too large, truncated to 1048576 [ 414.682535][T21839] netlink: 'syz.0.7103': attribute type 12 has an invalid length. [ 414.698281][T21839] netlink: 'syz.0.7103': attribute type 29 has an invalid length. [ 414.715982][T21839] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7103'. [ 414.751727][T21839] netlink: 'syz.0.7103': attribute type 2 has an invalid length. [ 414.947345][T21858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7111'. [ 415.181981][T21872] 9p: Bad value for 'wfdno' [ 415.224047][ T24] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 415.255426][ T24] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 415.338485][T21879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.400749][T21881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7122'. [ 415.423877][T21881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7122'. [ 415.471650][ T24] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 415.484392][T21886] netlink: 203340 bytes leftover after parsing attributes in process `syz.0.7124'. [ 415.536311][T21889] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7125'. [ 415.626109][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 415.641382][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 415.662280][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 415.676551][ T24] usb 2-1: can't read configurations, error -71 [ 415.870889][ T30] audit: type=1400 audit(1774489093.141:931): avc: denied { setcurrent } for pid=21905 comm="syz.0.7133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 416.616365][T21938] __nla_validate_parse: 1 callbacks suppressed [ 416.616383][T21938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7147'. [ 416.616400][T21938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7147'. [ 417.821727][T14662] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 417.994784][T14662] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 418.011079][T14662] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 418.031608][T14662] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 418.040765][T14662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.054705][T21983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 418.294047][T21983] netlink: 'syz.0.7165': attribute type 1 has an invalid length. [ 418.303163][T21983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7165'. [ 418.314819][T14662] usb 1-1: string descriptor 0 read error: -71 [ 418.321699][ T29] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 418.331976][T14662] hub 1-1:32.0: USB hub found [ 418.337407][T14662] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 418.442737][T14662] usb 1-1: USB disconnect, device number 80 [ 418.473818][ T29] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 418.500484][ T29] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 418.513490][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 418.530781][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 418.542479][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 418.556190][ T29] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 418.575757][ T29] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 418.585872][ T29] usb 5-1: Product: syz [ 418.592304][ T29] usb 5-1: Manufacturer: syz [ 418.608721][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 418.614514][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 418.626461][ T29] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 418.636975][ T29] cdc_wdm 5-1:1.0: Unknown control protocol [ 418.964579][T22020] xt_hashlimit: size too large, truncated to 1048576 [ 419.409211][T22038] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 419.521626][T14662] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 419.573736][ T29] usb 5-1: USB disconnect, device number 69 [ 419.681635][T14662] usb 1-1: Using ep0 maxpacket: 32 [ 419.692450][T14662] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 419.702763][T14662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.719166][T14662] usb 1-1: config 0 descriptor?? [ 419.953524][T14662] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 419.975110][T14662] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 419.997648][T14662] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 420.005644][T14662] usb 1-1: media controller created [ 420.017233][T22072] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 420.031515][T14662] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.154953][T14662] az6027: usb out operation failed. (-71) [ 420.175787][T14662] az6027: usb out operation failed. (-71) [ 420.204491][T14662] stb0899_attach: Driver disabled by Kconfig [ 420.212967][T14662] az6027: no front-end attached [ 420.212967][T14662] [ 420.220448][T14662] az6027: usb out operation failed. (-71) [ 420.231653][T14662] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 420.252016][ T5810] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 420.259799][T14662] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input60 [ 420.321477][T14662] dvb-usb: schedule remote query interval to 400 msecs. [ 420.370646][T14662] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 420.414776][T14662] usb 1-1: USB disconnect, device number 81 [ 420.550651][T14662] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 420.619195][T22104] IPVS: nq: FWM 3 0x00000003 - no destination available [ 421.014710][T22127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.360977][ T30] audit: type=1400 audit(1774489098.631:932): avc: denied { append } for pid=22150 comm="syz.3.7223" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 421.509268][T22162] bridge: RTM_NEWNEIGH with invalid ether address [ 421.519170][T22162] bridge: RTM_NEWNEIGH with invalid ether address [ 421.720421][ T30] audit: type=1400 audit(1774489098.991:933): avc: denied { read } for pid=22173 comm="syz.1.7233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 421.968341][T22191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 422.120404][T22201] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7244'. [ 422.168651][T22201] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7244'. [ 422.513034][T22214] netlink: 71 bytes leftover after parsing attributes in process `syz.4.7250'. [ 422.652868][T22219] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7252'. [ 424.738017][T22293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7280'. [ 424.945515][T22298] kvm: user requested TSC rate below hardware speed [ 425.128712][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 425.572007][T22308] IPVS: Error connecting to the multicast addr [ 426.003394][ T30] audit: type=1400 audit(1774489103.281:934): avc: denied { write } for pid=22346 comm="syz.0.7301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 426.401162][T22364] netlink: 'syz.1.7308': attribute type 1 has an invalid length. [ 426.431594][T22364] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7308'. [ 426.440557][T22364] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7308'. [ 426.495676][T22364] netlink: 'syz.1.7308': attribute type 1 has an invalid length. [ 426.512398][T14662] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 426.531650][T22364] netlink: 634 bytes leftover after parsing attributes in process `syz.1.7308'. [ 426.596278][T22370] binder: 22369:22370 ioctl c0306201 200000000540 returned -22 [ 426.692262][T14662] usb 1-1: Using ep0 maxpacket: 32 [ 426.708138][T14662] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 426.716525][T14662] usb 1-1: config 0 has no interface number 0 [ 426.727659][T14662] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 426.768007][T14662] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 426.785950][T14662] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.809187][T14662] usb 1-1: Product: syz [ 426.821913][T14662] usb 1-1: Manufacturer: syz [ 426.838485][T14662] usb 1-1: SerialNumber: syz [ 426.866885][T14662] usb 1-1: config 0 descriptor?? [ 426.884889][T22384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7317'. [ 426.886123][T22359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 426.907583][T22384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7317'. [ 427.156671][T22359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 427.333049][ T29] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 427.501673][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 427.513893][ T29] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 427.537580][ T29] usb 5-1: config 0 has no interface number 0 [ 427.557785][ T29] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 427.567335][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.576321][ T29] usb 5-1: Product: syz [ 427.580694][ T29] usb 5-1: Manufacturer: syz [ 427.585654][ T29] usb 5-1: SerialNumber: syz [ 427.601455][ T29] usb 5-1: config 0 descriptor?? [ 427.616840][ T29] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 427.731855][ T976] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 427.793055][T14662] asix 1-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 427.824974][ T29] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 427.846523][ T29] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 427.893329][ T976] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 427.901919][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.914993][ T976] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 427.926391][ T976] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 427.934446][ T976] usb 4-1: Manufacturer: syz [ 427.941068][ T976] usb 4-1: config 0 descriptor?? [ 427.994087][ T976] rc_core: IR keymap rc-hauppauge not found [ 428.000038][ T976] Registered IR keymap rc-empty [ 428.006527][T14662] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 428.019511][ T976] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 428.031049][T14662] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 428.044108][ T976] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input62 [ 428.056806][T14662] asix 1-1:0.188: probe with driver asix failed with error -71 [ 428.087248][T14662] usb 1-1: USB disconnect, device number 82 [ 428.093914][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 38 [ 428.189062][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 428.199264][ T976] usb 4-1: USB disconnect, device number 60 [ 428.306195][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 428.306550][T14644] usb 5-1: USB disconnect, device number 70 [ 428.323696][T14644] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 428.337284][T14644] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 428.351027][T14644] quatech2 5-1:0.51: device disconnected [ 428.411912][ T29] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 428.584784][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 428.595930][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 428.605842][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 428.624871][ T29] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 428.641894][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.654091][ T29] usb 2-1: Product: syz [ 428.658272][ T29] usb 2-1: Manufacturer: syz [ 428.663172][ T29] usb 2-1: SerialNumber: syz [ 428.672670][ T29] usb 2-1: config 0 descriptor?? [ 428.851506][T22442] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 428.891011][ T29] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 428.959483][T22444] SELinux: failed to load policy [ 429.098874][ T29] usb 2-1: USB disconnect, device number 70 [ 429.116942][T22459] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7350'. [ 429.331779][T14644] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 429.491838][T14644] usb 5-1: Using ep0 maxpacket: 32 [ 429.501854][T14644] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 429.510905][T14644] usb 5-1: config 0 has no interface number 0 [ 429.517825][ T30] audit: type=1400 audit(1774489106.781:935): avc: denied { override_creds } for pid=22482 comm="syz.0.7362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 429.539840][T14644] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 429.550376][T14644] usb 5-1: config 0 interface 196 has no altsetting 0 [ 429.559378][T14644] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 429.568822][T14644] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.577451][T14644] usb 5-1: Product: syz [ 429.577671][T22485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7363'. [ 429.581818][T14644] usb 5-1: Manufacturer: syz [ 429.581839][T14644] usb 5-1: SerialNumber: syz [ 429.591114][T14644] usb 5-1: config 0 descriptor?? [ 429.634899][T22457] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 429.671627][ T976] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 429.740338][T22491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7366'. [ 429.765521][T22491] netlink: 'syz.1.7366': attribute type 30 has an invalid length. [ 429.782250][T22491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7366'. [ 429.863406][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 429.886434][ T976] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 429.901693][ T976] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 429.917058][ T976] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 429.927963][ T976] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.941633][ T976] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 429.950876][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.176314][ T976] usb 4-1: GET_CAPABILITIES returned 0 [ 430.192958][ T976] usbtmc 4-1:16.0: can't read capabilities [ 430.380962][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.390072][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.399122][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.408165][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.419357][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.428459][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.437507][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.446542][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.460027][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.469135][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.478190][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.487228][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.496261][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.506631][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.515746][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.517138][T14644] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 430.524857][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.534158][T14644] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 430.555106][ T976] usb 4-1: USB disconnect, device number 61 [ 430.623586][T14644] usb 5-1: USB disconnect, device number 71 [ 431.153419][T22521] vivid-003: disconnect [ 431.182904][T22520] vivid-003: reconnect [ 431.251631][T14644] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 431.306723][T22529] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 431.329260][ T30] audit: type=1400 audit(1774489108.591:936): avc: denied { write } for pid=22526 comm="syz.0.7380" name="file1" dev="tmpfs" ino=7327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 431.453337][T14644] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 431.464290][T14644] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 431.483613][T14644] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 431.500854][T14644] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 431.512090][T14644] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 431.524700][T14644] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 431.535546][T14644] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 431.543688][T14644] usb 2-1: Product: syz [ 431.547851][T14644] usb 2-1: Manufacturer: syz [ 431.573218][T14644] cdc_wdm 2-1:1.0: skipping garbage [ 431.578477][T14644] cdc_wdm 2-1:1.0: skipping garbage [ 431.592977][T14644] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 431.598945][T14644] cdc_wdm 2-1:1.0: Unknown control protocol [ 431.621620][ T976] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 431.636725][T22542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7386'. [ 431.653553][T22542] openvswitch: netlink: Unknown nsh attribute 0 [ 431.781629][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 431.794461][ T976] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.806117][ T976] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.816440][ T976] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 431.832994][ T976] usb 1-1: config 0 interface 0 has no altsetting 0 [ 431.839673][ T976] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 431.849135][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.860076][ T976] usb 1-1: config 0 descriptor?? [ 432.047550][ C0] cdc_wdm 2-1:1.0: Unexpected error -71 [ 432.047951][T14651] usb 2-1: USB disconnect, device number 71 [ 432.054701][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 432.066019][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 432.072085][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 432.105857][ T30] audit: type=1326 audit(1774489109.381:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.3.7395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c599c799 code=0x7ffc0000 [ 432.130074][ T30] audit: type=1326 audit(1774489109.381:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.3.7395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c599c799 code=0x7ffc0000 [ 432.156352][ T30] audit: type=1326 audit(1774489109.391:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.3.7395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c599c799 code=0x7ffc0000 [ 432.180057][ T30] audit: type=1326 audit(1774489109.391:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.3.7395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23c599c799 code=0x7ffc0000 [ 432.203917][ T30] audit: type=1326 audit(1774489109.391:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.3.7395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c599c799 code=0x7ffc0000 [ 432.227840][ T30] audit: type=1326 audit(1774489109.391:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.3.7395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c599c799 code=0x7ffc0000 [ 432.251503][ T30] audit: type=1326 audit(1774489109.391:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.3.7395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c599c799 code=0x7ffc0000 [ 432.275272][ T30] audit: type=1326 audit(1774489109.391:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.3.7395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c599c799 code=0x7ffc0000 [ 432.553285][ T976] usb 1-1: USB disconnect, device number 83 [ 432.567235][T22579] syz.4.7403 (22579) used obsolete PPPIOCDETACH ioctl [ 432.839251][T22596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7411'. [ 432.946468][T22600] netlink: 'syz.3.7413': attribute type 13 has an invalid length. [ 433.096678][T22602] bond1: invalid ARP target 0.0.0.0 specified for addition [ 433.125904][T22602] bond1: option arp_ip_target: invalid value (0) [ 433.145145][T22602] bond1 (unregistering): Released all slaves [ 433.154793][T22615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.368220][T22626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7424'. [ 433.413782][T22630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7424'. [ 433.516096][T22632] netlink: 165 bytes leftover after parsing attributes in process `syz.1.7426'. [ 433.676978][T22639] input: syz1 as /devices/virtual/input/input63 [ 433.960972][T22660] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 434.476688][T22698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7454'. [ 434.488413][T22698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7454'. [ 434.503178][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.510370][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.632533][T14644] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 434.783685][T14644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.817320][T14644] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 434.836640][T14644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.853173][T14644] usb 1-1: config 0 descriptor?? [ 434.910226][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 434.910244][ T30] audit: type=1400 audit(1774489112.181:996): avc: denied { read open } for pid=22716 comm="syz.3.7462" path="/" dev="configfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 434.979238][ T30] audit: type=1400 audit(1774489112.221:997): avc: denied { write } for pid=22716 comm="syz.3.7462" name="/" dev="configfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 435.075038][T14644] usbhid 1-1:0.0: can't add hid device: -71 [ 435.081053][T14644] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 435.096037][T14644] usb 1-1: USB disconnect, device number 84 [ 435.141684][T14651] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 435.414106][ T24] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 435.431611][T14651] usb 5-1: Using ep0 maxpacket: 16 [ 435.438517][T14651] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.449690][T14651] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.542806][T14651] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 435.592163][ T24] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 435.604549][T14651] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 435.631904][T14644] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 435.663036][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.672629][T14651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.699436][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.787871][T14651] usb 5-1: config 0 descriptor?? [ 435.801705][T14644] usb 1-1: Using ep0 maxpacket: 32 [ 435.812735][T14644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.814264][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 435.833464][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.841597][T14644] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 435.843476][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.869172][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 435.878580][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.888600][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.900106][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 435.906203][T14644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.908889][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.924881][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.950529][T14644] usb 1-1: config 0 descriptor?? [ 435.960980][T14644] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 435.971660][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 435.989893][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.994848][T14644] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 436.000140][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.063202][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 436.078090][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.088197][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.109560][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 436.117714][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.127385][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.139232][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 436.150249][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.159741][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.171668][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 436.183409][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 436.184746][ C0] ldusb 1-1:0.0: Ring buffer overflow, 8 bytes dropped [ 436.193281][ T24] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 436.202010][ T30] audit: type=1400 audit(1774489113.471:998): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 436.210624][ T24] usb 2-1: Product: syz [ 436.241609][ T24] usb 2-1: Manufacturer: syz [ 436.258322][ T24] usb 2-1: SerialNumber: syz [ 436.277385][ T24] usb 2-1: config 0 descriptor?? [ 436.291157][T14651] microsoft 0003:045E:07DA.004C: ignoring exceeding usage max [ 436.302140][T14651] microsoft 0003:045E:07DA.004C: unknown main item tag 0x0 [ 436.309435][T14651] microsoft 0003:045E:07DA.004C: unknown main item tag 0x0 [ 436.322101][T14651] microsoft 0003:045E:07DA.004C: unknown main item tag 0x0 [ 436.329385][T14651] microsoft 0003:045E:07DA.004C: unknown main item tag 0x0 [ 436.337189][ T24] yurex 2-1:0.0: USB YUREX device now attached to Yurex #1 [ 436.358852][T14651] microsoft 0003:045E:07DA.004C: unknown main item tag 0x0 [ 436.377381][T14651] microsoft 0003:045E:07DA.004C: unknown main item tag 0x0 [ 436.396311][T14651] microsoft 0003:045E:07DA.004C: unknown main item tag 0x0 [ 436.404743][T14651] microsoft 0003:045E:07DA.004C: unknown main item tag 0x0 [ 436.446276][T14651] microsoft 0003:045E:07DA.004C: unknown main item tag 0x0 [ 436.474994][T14651] microsoft 0003:045E:07DA.004C: unknown main item tag 0x0 [ 436.497191][T14651] microsoft 0003:045E:07DA.004C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 436.516199][ C0] ldusb 1-1:0.0: Ring buffer overflow, 8 bytes dropped [ 436.532869][T14651] microsoft 0003:045E:07DA.004C: no inputs found [ 436.539268][T14651] microsoft 0003:045E:07DA.004C: could not initialize ff, continuing anyway [ 436.573800][T14651] usb 5-1: USB disconnect, device number 72 [ 436.653780][ T24] usb 2-1: USB disconnect, device number 72 [ 436.683414][ T24] yurex 2-1:0.0: USB YUREX #1 now disconnected [ 436.692472][T22753] fido_id[22753]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 437.567083][T14644] usb 1-1: USB disconnect, device number 85 [ 437.590977][T14644] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 437.786285][T22797] input: syz0 as /devices/virtual/input/input64 [ 438.436459][T22830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7507'. [ 438.447442][T22830] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7507'. [ 438.474522][T22830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7507'. [ 438.510058][T22830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7507'. [ 438.514102][T22837] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 438.764103][T22843] netlink: 'syz.3.7512': attribute type 3 has an invalid length. [ 439.200523][T22863] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7522'. [ 439.372248][T22872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.471632][ T976] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 439.509609][ T30] audit: type=1400 audit(1774489116.771:999): avc: denied { write } for pid=22876 comm="syz.1.7530" path="socket:[74472]" dev="sockfs" ino=74472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 439.602977][T22883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7531'. [ 439.623107][T22885] usb usb8: usbfs: process 22885 (syz.4.7532) did not claim interface 0 before use [ 439.644675][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 439.658193][ T976] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 439.677477][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.740021][ T976] usb 4-1: config 0 descriptor?? [ 439.990821][ T976] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 440.020971][ T976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 440.066582][ T976] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 440.082904][ T976] usb 4-1: media controller created [ 440.117234][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 440.208351][ T976] az6027: usb out operation failed. (-71) [ 440.220441][ T976] az6027: usb out operation failed. (-71) [ 440.242262][ T976] stb0899_attach: Driver disabled by Kconfig [ 440.248273][ T976] az6027: no front-end attached [ 440.248273][ T976] [ 440.262422][ T976] az6027: usb out operation failed. (-71) [ 440.271634][ T976] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 440.292321][ T976] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input65 [ 440.343396][ T976] dvb-usb: schedule remote query interval to 400 msecs. [ 440.355597][ T976] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 440.382040][ T976] usb 4-1: USB disconnect, device number 62 [ 440.474201][ T976] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 441.342425][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 441.360057][T22942] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 441.493607][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 441.505838][ T24] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 441.521504][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 441.531060][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 441.546689][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 441.559871][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 441.569447][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 441.577982][ T24] usb 4-1: Product: syz [ 441.583658][ T24] usb 4-1: Manufacturer: syz [ 441.614041][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 441.622233][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 441.630441][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 441.639313][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 441.646728][T22957] netlink: 'syz.1.7564': attribute type 1 has an invalid length. [ 441.813548][ T24] usb 4-1: USB disconnect, device number 63 [ 441.996047][T22973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7571'. [ 442.025030][T22975] overlayfs: failed to clone lowerpath [ 442.295288][ T30] audit: type=1400 audit(1774489119.571:1000): avc: denied { create } for pid=22983 comm="syz.2.7576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 442.491927][ T976] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 442.643233][ T976] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 442.660933][ T976] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 442.682897][ T976] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 442.711603][ T976] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 442.722730][ T976] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 442.752805][ T976] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 442.762122][ T976] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 442.770249][ T976] usb 4-1: Product: syz [ 442.774607][ T976] usb 4-1: Manufacturer: syz [ 442.785968][ T976] cdc_wdm 4-1:1.0: skipping garbage [ 442.791212][ T976] cdc_wdm 4-1:1.0: skipping garbage [ 442.801904][ T976] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 442.807960][ T976] cdc_wdm 4-1:1.0: Unknown control protocol [ 442.941591][T14644] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 443.006564][ T976] usb 4-1: USB disconnect, device number 64 [ 443.093137][T14644] usb 2-1: not running at top speed; connect to a high speed hub [ 443.109308][T14644] usb 2-1: config 45 has an invalid interface number: 2 but max is 0 [ 443.117839][T14644] usb 2-1: config 45 has no interface number 0 [ 443.126408][T14644] usb 2-1: config 45 interface 2 has no altsetting 0 [ 443.139053][T14644] usb 2-1: string descriptor 0 read error: -22 [ 443.151841][T14644] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 443.171667][T14644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.203437][T14644] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 443.211164][T14644] dvb-usb: bulk message failed: -22 (3/0) [ 443.232731][T14644] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 443.262267][T14644] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 443.270413][T14644] usb 2-1: media controller created [ 443.291921][T14644] dvb-usb: bulk message failed: -22 (5/0) [ 443.297747][T14644] dvb-usb: MAC address reading failed. [ 443.333290][T14644] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 443.376171][T14644] dvb-usb: bulk message failed: -22 (6/0) [ 443.396998][T14644] dvb-usb: bulk message failed: -22 (6/0) [ 443.417170][T14644] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 443.446621][T14644] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input67 [ 443.498126][T14644] dvb-usb: schedule remote query interval to 100 msecs. [ 443.522017][T14644] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 443.561417][T14644] usb 2-1: USB disconnect, device number 73 [ 443.638802][T14644] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 444.167254][T23036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7597'. [ 444.187600][T23036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7597'. [ 444.542423][T23053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7605'. [ 444.553834][T23053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7605'. [ 445.457508][ T30] audit: type=1400 audit(1774489122.731:1001): avc: denied { accept } for pid=23091 comm="syz.0.7621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 445.710393][ T30] audit: type=1400 audit(1774489122.981:1002): avc: denied { shutdown } for pid=23107 comm="syz.1.7629" laddr=::ffff:172.20.20.170 lport=255 faddr=::ffff:172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 446.121675][ T24] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 446.151864][T14651] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 446.160317][T23133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7641'. [ 446.170038][T23133] syz_tun: left allmulticast mode [ 446.178075][T23133] syz_tun: left promiscuous mode [ 446.187983][T23133] bridge0: port 3(syz_tun) entered disabled state [ 446.196597][T23133] bridge_slave_1: left allmulticast mode [ 446.203052][T23133] bridge_slave_1: left promiscuous mode [ 446.208869][T23133] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.218647][T23133] bridge_slave_0: left allmulticast mode [ 446.225215][T23133] bridge_slave_0: left promiscuous mode [ 446.231062][T23133] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.293137][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.303533][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 446.312535][T14651] usb 2-1: Using ep0 maxpacket: 16 [ 446.315075][ T30] audit: type=1400 audit(1774489123.591:1003): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 446.318932][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 8 [ 446.351758][ T24] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 446.361276][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.370050][T14651] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 446.378722][T14651] usb 2-1: config 1 has no interface number 0 [ 446.391651][T14651] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 446.411228][T14651] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 446.422625][T23120] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 446.430876][T14651] usb 2-1: config 1 interface 105 has no altsetting 0 [ 446.439336][ T24] hub 5-1:1.0: bad descriptor, ignoring hub [ 446.447071][ T24] hub 5-1:1.0: probe with driver hub failed with error -5 [ 446.456931][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 446.464700][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 446.470928][T14651] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 446.481575][T14651] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 446.490622][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 446.505298][T14651] usb 2-1: Product: syz [ 446.509845][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 446.515867][T14651] usb 2-1: Manufacturer: syz [ 446.520623][T14651] usb 2-1: SerialNumber: syz [ 446.539170][T23148] netlink: 'syz.3.7647': attribute type 9 has an invalid length. [ 446.539471][T23123] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 446.548716][T23148] netlink: 'syz.3.7647': attribute type 11 has an invalid length. [ 446.557849][T23123] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 446.562593][T23148] netlink: 'syz.3.7647': attribute type 12 has an invalid length. [ 446.579852][T23148] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.7647'. [ 446.589688][T23148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7647'. [ 446.721919][T14644] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 446.891635][T14644] usb 1-1: Using ep0 maxpacket: 16 [ 446.917995][T14644] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 446.942971][T14644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 446.969435][T14644] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 446.978747][T14644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.986841][T14644] usb 1-1: Product: syz [ 446.991010][T14644] usb 1-1: Manufacturer: syz [ 446.995757][T14644] usb 1-1: SerialNumber: syz [ 447.002669][T14644] usb 1-1: config 0 descriptor?? [ 447.008255][T23123] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 447.018525][T14644] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 447.026298][T23123] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 447.044146][T14644] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 447.233747][T23120] usb 5-1: reset low-speed USB device number 73 using dummy_hcd [ 447.446161][T14651] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 447.545026][T23120] usb 5-1: device firmware changed [ 447.551787][ T24] usb 5-1: USB disconnect, device number 73 [ 447.560263][T23120] cdc_wdm 5-1:1.0: Error autopm - -16 [ 447.625573][T14644] em28xx 1-1:0.0: unknown em28xx chip ID (44) [ 447.659316][T14651] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 447.679882][T14651] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 34:32:02:8f:b4:26 [ 447.695294][T14651] usb 2-1: USB disconnect, device number 74 [ 447.704906][ T24] usb 5-1: new low-speed USB device number 74 using dummy_hcd [ 447.716996][T14651] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 447.784151][T14651] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 447.798881][T14651] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 447.813338][T14651] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 447.826603][T14644] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 447.844734][T14644] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 447.858221][T14644] em28xx 1-1:0.0: No AC97 audio processor [ 447.877528][ T24] usb 5-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 447.891715][T14644] usb 1-1: USB disconnect, device number 86 [ 447.900780][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 447.908931][T14644] em28xx 1-1:0.0: Disconnecting em28xx [ 447.917870][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 447.923187][T14644] em28xx 1-1:0.0: Freeing device [ 447.931383][ T24] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 447.954897][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.999375][T23155] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 448.017321][ T24] hub 5-1:1.0: bad descriptor, ignoring hub [ 448.030120][ T24] hub 5-1:1.0: probe with driver hub failed with error -5 [ 448.048444][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 448.060289][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 448.071622][ T24] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 448.392316][ T24] usb 5-1: USB disconnect, device number 74 [ 449.144690][T23227] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7665'. [ 449.650655][T23249] SELinux: Context system_u:object_r:root_t:s0 is not valid (left unmapped). [ 449.696608][ T30] audit: type=1400 audit(1774489126.971:1004): avc: denied { relabelto } for pid=23248 comm="syz.1.7672" name="file1" dev="overlay" ino=7343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:root_t:s0" [ 449.743705][T23258] binder: 23257:23258 ioctl c0306201 0 returned -14 [ 449.775091][T23258] binder: 23257:23258 ioctl c0306201 2000000004c0 returned -22 [ 450.037967][T23277] overlayfs: failed to clone lowerpath [ 450.584756][T23307] netlink: 'syz.4.7689': attribute type 3 has an invalid length. [ 451.093845][T23341] netlink: 'syz.4.7704': attribute type 13 has an invalid length. [ 451.761029][T23369] cgroup: Unknown subsys name 'cpuset' [ 452.079883][ T30] audit: type=1400 audit(1774489129.351:1005): avc: denied { read } for pid=23379 comm="syz.1.7720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 452.772370][T23399] xt_hashlimit: size too large, truncated to 1048576 [ 452.877454][ T30] audit: type=1400 audit(1774489130.131:1006): avc: denied { read } for pid=23402 comm="syz.2.7728" path="socket:[76825]" dev="sockfs" ino=76825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 454.062112][T14644] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 454.221685][T14644] usb 2-1: Using ep0 maxpacket: 32 [ 454.230187][T14644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.269217][T14644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.297712][T14644] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 454.315224][T14644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.325750][T14644] usb 2-1: config 0 descriptor?? [ 454.334248][T14644] hub 2-1:0.0: USB hub found [ 454.520244][T23448] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.7747'. [ 454.545144][T14644] hub 2-1:0.0: 9 ports detected [ 454.561340][T14644] hub 2-1:0.0: insufficient power available to use all downstream ports [ 454.577624][T23448] netlink: Conntrack attr has 4 unknown bytes [ 454.716094][ T30] audit: type=1804 audit(1774489131.991:1007): pid=23455 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.7750" name="/newroot/1484/file1" dev="tmpfs" ino=7579 res=1 errno=0 [ 454.748805][T14644] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 454.790575][T14644] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 454.814378][T14644] usbhid 2-1:0.0: can't add hid device: -71 [ 454.820382][T14644] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 454.873150][T14644] usb 2-1: USB disconnect, device number 75 [ 455.005751][T23472] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 455.231710][T14644] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 455.384740][T14644] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 455.394122][T14644] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 455.402586][T14644] usb 5-1: Product: syz [ 455.406841][T14644] usb 5-1: Manufacturer: syz [ 455.411438][T14644] usb 5-1: SerialNumber: syz [ 455.431067][T14644] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 455.535872][T23503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7770'. [ 455.548050][T23503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7770'. [ 455.558155][T23503] netlink: 'syz.0.7770': attribute type 6 has an invalid length. [ 455.567466][T23503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7770'. [ 455.581859][T23503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7770'. [ 455.590851][T23503] netlink: 'syz.0.7770': attribute type 6 has an invalid length. [ 455.900843][ T5810] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 455.914106][T14644] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 455.924870][T14644] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 456.037376][T23521] dvmrp0: entered allmulticast mode [ 456.053326][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 456.145793][ T976] usb 5-1: USB disconnect, device number 75 [ 456.930657][T23559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7794'. [ 456.950525][T23559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7794'. [ 457.281655][ T24] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 457.433718][ T24] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 457.448268][ T24] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 457.461046][ T24] usb 4-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 457.474533][ T24] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 457.484555][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.493968][ T30] audit: type=1326 audit(1774489134.771:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23579 comm="syz.0.7802" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4cfa19c799 code=0x0 [ 457.523062][T23567] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 457.757565][T23567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.791854][T23567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.818954][ T24] usbhid 4-1:2.0: can't add hid device: -71 [ 457.825481][ T24] usbhid 4-1:2.0: probe with driver usbhid failed with error -71 [ 457.843401][ T24] usb 4-1: USB disconnect, device number 65 [ 458.097508][ T30] audit: type=1400 audit(1774489135.371:1009): avc: denied { write } for pid=23599 comm="syz.4.7811" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 458.259499][ T30] audit: type=1400 audit(1774489135.531:1010): avc: denied { setopt } for pid=23605 comm="syz.4.7813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 458.301731][ T976] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 458.407843][ T30] audit: type=1400 audit(1774489135.681:1011): avc: denied { setopt } for pid=23617 comm="syz.0.7818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 458.462721][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 458.469375][ T976] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 458.479572][ T976] usb 4-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 458.501689][ T976] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 458.521719][ T24] libceph: connect (1)[c::]:6789 error -22 [ 458.525188][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.527722][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 458.554780][T14644] libceph: connect (1)[c::]:6789 error -22 [ 458.561062][T14644] libceph: mon0 (1)[c::]:6789 connect error [ 458.573460][ T976] hub 4-1:2.0: bad descriptor, ignoring hub [ 458.583776][ T976] hub 4-1:2.0: probe with driver hub failed with error -5 [ 458.665383][ T30] audit: type=1326 audit(1774489135.941:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23627 comm="syz.1.7820" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07d959c799 code=0x0 [ 458.815039][ T24] libceph: connect (1)[c::]:6789 error -22 [ 458.824930][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 458.863418][T14644] libceph: connect (1)[c::]:6789 error -22 [ 458.869401][T14644] libceph: mon0 (1)[c::]:6789 connect error [ 458.976808][ T976] hid_parser_main: 3 callbacks suppressed [ 458.976833][ T976] hid-multitouch 0003:0EEF:72C4.004D: unknown main item tag 0x0 [ 458.999659][ T976] hid-multitouch 0003:0EEF:72C4.004D: unknown main item tag 0x0 [ 459.013412][ T976] hid-multitouch 0003:0EEF:72C4.004D: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 459.174247][T23641] netlink: 'syz.4.7824': attribute type 4 has an invalid length. [ 459.308500][T23620] ceph: No mds server is up or the cluster is laggy [ 459.315958][T23624] ceph: No mds server is up or the cluster is laggy [ 459.356165][ T976] usb 4-1: USB disconnect, device number 66 [ 459.602477][ T976] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 459.771712][ T976] usb 5-1: Using ep0 maxpacket: 8 [ 459.800289][ T976] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 459.818793][ T976] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 459.841550][ T976] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 459.869820][ T976] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 459.883719][T23661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7832'. [ 459.902583][ T976] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.925884][T23661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7832'. [ 459.943082][ T5810] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 459.953341][ T5810] Bluetooth: hci0: Injecting HCI hardware error event [ 459.962638][ T5810] Bluetooth: hci0: hardware error 0x00 [ 459.980872][ T976] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 460.001595][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.005869][T23661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7832'. [ 460.054570][T23661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7832'. [ 460.228834][ T976] usb 5-1: usb_control_msg returned -32 [ 460.243573][ T976] usbtmc 5-1:16.0: can't read capabilities [ 460.284403][T23671] team0: Port device syz_tun added [ 460.396451][T23680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7838'. [ 460.532906][T23648] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 460.539348][ T24] usb 5-1: USB disconnect, device number 76 [ 460.905857][T23700] netlink: 'syz.3.7847': attribute type 64 has an invalid length. [ 460.967742][T23704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7849'. [ 460.971893][ T24] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 461.132988][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 461.139562][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 461.154934][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 461.173788][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 461.183897][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 461.211619][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.231619][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 461.240756][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.318051][T23713] binder: 23712:23713 ioctl c0306201 2000000001c0 returned -14 [ 461.374533][ T5809] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 461.445974][T23722] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 461.471691][ T976] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 461.482619][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 461.488154][ T24] usbtmc 2-1:16.0: can't read capabilities [ 461.651713][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 461.658825][ T976] usb 1-1: config 0 has no interfaces? [ 461.666760][ T976] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 461.676965][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.688491][ T976] usb 1-1: Product: syz [ 461.711961][ T976] usb 1-1: Manufacturer: syz [ 461.717762][ T976] usb 1-1: SerialNumber: syz [ 461.718776][T23692] usb 2-1: usbtmc_ioctl_clear_in_halt returned -32 [ 461.735678][ T976] usb 1-1: config 0 descriptor?? [ 461.742224][ T24] usb 2-1: USB disconnect, device number 76 [ 461.821352][ T30] audit: type=1326 audit(1774489139.091:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23734 comm="syz.2.7862" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80a1f9c799 code=0x0 [ 461.985526][ T24] usb 1-1: USB disconnect, device number 87 [ 462.101839][ T5810] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 462.636497][ T24] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 462.825891][T23765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7873'. [ 462.873752][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 462.892115][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 24929, setting to 1024 [ 462.906942][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 463.002734][ T24] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 463.028831][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.047543][ T24] usb 5-1: Product: syz [ 463.058130][ T24] usb 5-1: Manufacturer: syz [ 463.070495][ T24] usb 5-1: SerialNumber: syz [ 463.087241][ T24] usb 5-1: config 0 descriptor?? [ 463.108158][T23747] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 463.116743][T23747] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 463.343273][T23747] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 463.350523][T23747] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 463.531798][ T976] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 463.684888][ T976] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 463.694082][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.710063][ T976] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 463.722535][ T976] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 463.730746][ T976] usb 1-1: Manufacturer: syz [ 463.743907][ T976] usb 1-1: config 0 descriptor?? [ 463.882008][ T976] rc_core: IR keymap rc-hauppauge not found [ 463.893464][ T976] Registered IR keymap rc-empty [ 463.909846][ T976] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 463.941816][ T976] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input68 [ 463.982175][ T976] usb 1-1: USB disconnect, device number 88 [ 463.986465][ T24] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 464.015164][ T24] usb 5-1: USB disconnect, device number 77 [ 464.401600][ T30] audit: type=1400 audit(1774489141.671:1014): avc: denied { mount } for pid=23816 comm="syz.3.7895" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 464.402251][T23817] overlayfs: failed to clone lowerpath [ 464.493207][ T30] audit: type=1400 audit(1774489141.681:1015): avc: denied { mounton } for pid=23816 comm="syz.3.7895" path="/1544/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 464.586104][ T30] audit: type=1400 audit(1774489141.861:1016): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 464.981777][T23845] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 465.396125][T23868] SELinux: ebitmap start bit (2944) is beyond the end of the bitmap (1472) [ 465.417299][T23868] SELinux: failed to load policy [ 465.460718][T23875] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7917'. [ 465.473547][ T976] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 465.548313][T23875] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7917'. [ 465.561608][ T24] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 465.679807][ T976] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.694588][ T976] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.712705][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 465.715625][ T976] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 465.720284][ T24] usb 4-1: config 0 has no interfaces? [ 465.747287][ T24] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 465.749177][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 465.762276][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.786097][ T24] usb 4-1: Product: syz [ 465.793655][ T24] usb 4-1: Manufacturer: syz [ 465.795135][ T976] usb 5-1: SerialNumber: syz [ 465.803054][ T24] usb 4-1: SerialNumber: syz [ 465.820238][ T24] usb 4-1: config 0 descriptor?? [ 465.962873][T14644] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 466.022910][ T976] usb 5-1: 0:2 : does not exist [ 466.087747][ T976] usb 5-1: USB disconnect, device number 78 [ 466.121740][T14644] usb 1-1: Using ep0 maxpacket: 32 [ 466.145415][T14644] usb 1-1: unable to get BOS descriptor or descriptor too short [ 466.175697][T14644] usb 1-1: config 1 interface 0 altsetting 58 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 466.207559][T14644] usb 1-1: config 1 interface 0 has no altsetting 0 [ 466.224709][T14644] usb 1-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.40 [ 466.235825][T14644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.265356][T14644] usb 1-1: Product: syz [ 466.269560][T14644] usb 1-1: Manufacturer: syz [ 466.283249][T14644] usb 1-1: SerialNumber: syz [ 466.614798][ T24] usb 4-1: USB disconnect, device number 67 [ 466.828931][T23894] "syz.1.7925" (23894) uses obsolete ecb(arc4) skcipher [ 466.955858][T17726] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 467.076015][ T30] audit: type=1326 audit(1774489144.341:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23905 comm="syz.1.7929" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07d959c799 code=0x0 [ 467.164332][T23908] 9pnet: p9_errstr2errno: server reported unknown error -tun [ 467.334078][T14644] elecom 0003:056E:010C.004E: invalid report_size -1306074948 [ 467.345031][T14644] elecom 0003:056E:010C.004E: item 0 4 1 7 parsing failed [ 467.363459][T14644] elecom 0003:056E:010C.004E: probe with driver elecom failed with error -22 [ 467.432135][ T30] audit: type=1326 audit(1774489144.711:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23922 comm="syz.3.7936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c599c799 code=0x7ffc0000 [ 467.485584][ T30] audit: type=1326 audit(1774489144.741:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23922 comm="syz.3.7936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c599c799 code=0x7ffc0000 [ 467.509604][ T30] audit: type=1326 audit(1774489144.741:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23922 comm="syz.3.7936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c599c799 code=0x7ffc0000 [ 467.535152][ T30] audit: type=1326 audit(1774489144.741:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23922 comm="syz.3.7936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f23c599c799 code=0x7ffc0000 [ 467.538060][T14644] usb 1-1: USB disconnect, device number 89 [ 467.559933][ T30] audit: type=1326 audit(1774489144.741:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23922 comm="syz.3.7936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c599c799 code=0x7ffc0000 [ 467.634555][ T30] audit: type=1326 audit(1774489144.741:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23922 comm="syz.3.7936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c599c799 code=0x7ffc0000 [ 467.659228][ T30] audit: type=1326 audit(1774489144.741:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23922 comm="syz.3.7936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c599c799 code=0x7ffc0000 [ 467.691773][ T30] audit: type=1326 audit(1774489144.741:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23922 comm="syz.3.7936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f23c599c799 code=0x7ffc0000 [ 467.717222][ T30] audit: type=1326 audit(1774489144.741:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23922 comm="syz.3.7936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c599c799 code=0x7ffc0000 [ 468.596140][T23958] mmap: syz.0.7948 (23958): VmData 37416960 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 468.790245][T23970] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7953'. [ 469.285681][T23991] netlink: 'syz.4.7961': attribute type 1 has an invalid length. [ 469.412641][T23991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.473913][T23997] IPVS: stopping master sync thread 13082 ... [ 469.500435][T23994] bond1: (slave veth3): Enslaving as an active interface with a down link [ 470.313624][T14644] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 470.484747][T14644] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 470.494138][T14644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.502523][T14644] usb 2-1: Product: syz [ 470.506768][T14644] usb 2-1: Manufacturer: syz [ 470.511395][T14644] usb 2-1: SerialNumber: syz [ 470.518095][T14644] usb 2-1: config 0 descriptor?? [ 470.525256][T14644] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 077 [ 471.025515][T24056] input: syz0 as /devices/virtual/input/input69 [ 471.127432][T14644] i2c i2c-1: failure reading functionality [ 471.138689][T14644] i2c i2c-1: connected i2c-tiny-usb device [ 471.146860][T14644] usb 2-1: USB disconnect, device number 77 [ 471.302155][ T24] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 471.331627][T14651] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 471.464986][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 471.477307][ T24] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 471.488133][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.496366][ T24] usb 1-1: Product: syz [ 471.500804][ T24] usb 1-1: Manufacturer: syz [ 471.506236][ T24] usb 1-1: SerialNumber: syz [ 471.511365][T14651] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.523752][T14651] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 471.537721][ T24] usb 1-1: config 0 descriptor?? [ 471.551885][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 471.557814][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 471.566431][T14651] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 471.575820][T14651] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.586711][ T24] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input70 [ 471.596288][T14651] usb 5-1: Product: syz [ 471.600463][T14651] usb 5-1: Manufacturer: syz [ 471.607572][T14651] usb 5-1: SerialNumber: syz [ 471.829525][T24060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.852210][T24060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.876308][T24086] netlink: 'syz.2.7999': attribute type 9 has an invalid length. [ 471.887447][T24086] netlink: 'syz.2.7999': attribute type 11 has an invalid length. [ 471.897138][T24086] netlink: 'syz.2.7999': attribute type 12 has an invalid length. [ 471.904870][T14651] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 471.909846][T24086] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.7999'. [ 471.929653][T24086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7999'. [ 471.932046][T14651] usb 5-1: USB disconnect, device number 79 [ 471.954073][T14644] usb 1-1: USB disconnect, device number 90 [ 472.443771][T14651] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 472.611623][T14651] usb 5-1: Using ep0 maxpacket: 8 [ 472.619289][T14651] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 472.628033][T14651] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 472.639887][T14651] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 472.654079][T14651] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 472.699039][T14651] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 472.711236][T14651] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.722544][T14651] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 472.793069][T14651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.905320][T24128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 472.964920][T24130] netlink: 'syz.0.8019': attribute type 29 has an invalid length. [ 472.975941][T24130] netlink: 'syz.0.8019': attribute type 29 has an invalid length. [ 472.988072][T24130] netlink: 'syz.0.8019': attribute type 32 has an invalid length. [ 472.996035][T24130] netlink: 500 bytes leftover after parsing attributes in process `syz.0.8019'. [ 473.035013][T14651] usb 5-1: usb_control_msg returned -71 [ 473.056185][T14651] usbtmc 5-1:16.0: can't read capabilities [ 473.143804][T14651] usb 5-1: USB disconnect, device number 80 [ 473.202659][T24134] ip6gre1: entered promiscuous mode [ 473.212948][T24134] ip6gre1: entered allmulticast mode [ 473.336119][ T30] kauditd_printk_skb: 2279 callbacks suppressed [ 473.336136][ T30] audit: type=1400 audit(1774489150.611:3306): avc: denied { mounton } for pid=24136 comm="syz.3.8022" path="/1561/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 473.360339][T24139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.373869][T24137] overlayfs: failed to clone lowerpath [ 473.778881][T24160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8030'. [ 473.947655][T24165] syzkaller1: entered promiscuous mode [ 473.957203][T24165] syzkaller1: entered allmulticast mode [ 474.801919][ T976] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 474.952873][ T976] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.963138][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 474.972850][ T976] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 474.982610][ T976] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 474.997548][ T976] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 475.006675][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.014745][ T976] usb 5-1: Product: syz [ 475.018896][ T976] usb 5-1: Manufacturer: syz [ 475.024006][ T976] usb 5-1: SerialNumber: syz [ 475.030072][ T976] usb 5-1: config 0 descriptor?? [ 475.036389][ T976] usb 5-1: ucan: probing device on interface #0 [ 475.042698][ T976] usb 5-1: ucan: invalid EP count (1) [ 475.048071][ T976] usb 5-1: ucan: probe failed; try to update the device firmware [ 475.527717][T24217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8051'. [ 475.546689][T14651] Process accounting resumed [ 475.548782][T24217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8051'. [ 475.560313][T14651] Process accounting resumed [ 475.875629][T14651] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 476.034712][T14651] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 476.044013][T14651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.052126][T14651] usb 4-1: Product: syz [ 476.056297][T14651] usb 4-1: Manufacturer: syz [ 476.059540][T24245] SELinux: failed to load policy [ 476.060919][T14651] usb 4-1: SerialNumber: syz [ 476.073167][T14651] usb 4-1: config 0 descriptor?? [ 476.607211][ T30] audit: type=1400 audit(1774489153.881:3307): avc: denied { execute } for pid=24263 comm="syz.1.8072" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=80656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 476.888002][ T30] audit: type=1326 audit(1774489154.161:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24276 comm="syz.0.8078" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4cfa19c799 code=0x0 [ 477.113195][T14651] usb 4-1: unexpected transceiver, part 0xf6 version 0x03 [ 477.321161][T14651] usb 4-1: Firmware version (0.0) predates our first public release. [ 477.332942][T14651] usb 4-1: Please update to version 0.2 or newer [ 477.339738][T14651] usb 4-1: atusb_probe: initialization failed, error = -19 [ 477.350268][T14651] usb 4-1: USB disconnect, device number 68 [ 477.401609][ T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 477.519107][ T5918] usb 5-1: USB disconnect, device number 81 [ 477.564168][ T24] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 477.574533][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.583117][ T24] usb 2-1: Product: syz [ 477.587288][ T24] usb 2-1: Manufacturer: syz [ 477.592190][ T24] usb 2-1: SerialNumber: syz [ 477.603270][ T24] usb 2-1: config 0 descriptor?? [ 477.615130][ T24] hub 2-1:0.0: bad descriptor, ignoring hub [ 477.621074][ T24] hub 2-1:0.0: probe with driver hub failed with error -5 [ 477.824656][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 477.846395][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 477.872647][ T24] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 477.891354][ T24] usb 2-1: media controller created [ 477.914970][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 477.957977][ T30] audit: type=1326 audit(1774489155.231:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24300 comm="syz.4.8089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63f9c799 code=0x7fc00000 [ 478.036654][ T24] DVB: Unable to find symbol dib7000p_attach() [ 478.046649][ T24] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 478.141716][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 478.151578][ T24] Registered IR keymap rc-empty [ 478.156652][ T24] dvb-usb: could not initialize remote control. [ 478.172173][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 478.538513][T24337] i2c i2c-1: Invalid block size returned: 58 [ 478.570337][ T30] audit: type=1326 audit(1774489155.831:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24300 comm="syz.4.8089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea63f9c799 code=0x7fc00000 [ 478.740549][ T976] usb 2-1: USB disconnect, device number 78 [ 478.769317][T24350] overlayfs: failed to clone upperpath [ 478.794828][ T976] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 478.887897][T24356] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.8111'. [ 479.161643][ T24] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 479.391916][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 479.398511][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 479.411602][ T24] usb 1-1: config 0 has no interface number 0 [ 479.417745][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 479.437697][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 479.454688][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 479.485066][T24384] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.496972][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 479.545811][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 479.561844][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.583050][ T24] usb 1-1: config 0 descriptor?? [ 479.617042][ T24] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 480.486375][T24420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8137'. [ 480.512228][T24420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8137'. [ 480.522887][T24420] netlink: 'syz.2.8137': attribute type 11 has an invalid length. [ 481.775686][ T5809] block nbd2: Receive control failed (result -107) [ 481.802933][T24473] nbd2: detected capacity change from 0 to 127 [ 481.810445][ T6110] block nbd2: Dead connection, failed to find a fallback [ 481.824310][ T6110] block nbd2: shutting down sockets [ 481.831132][ T6110] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.841912][ T6110] buffer_io_error: 138 callbacks suppressed [ 481.841928][ T6110] Buffer I/O error on dev nbd2, logical block 0, async page read [ 481.857172][ T6110] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.867263][ T6110] Buffer I/O error on dev nbd2, logical block 1, async page read [ 481.875598][ T6110] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.885382][ T6110] Buffer I/O error on dev nbd2, logical block 2, async page read [ 481.893789][ T6110] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.903827][ T6110] Buffer I/O error on dev nbd2, logical block 3, async page read [ 481.916196][ T6110] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.929756][ T6110] Buffer I/O error on dev nbd2, logical block 0, async page read [ 481.952371][ T5918] usb 1-1: USB disconnect, device number 91 [ 481.970135][ T6110] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.981422][ T5918] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 481.990109][ T6110] Buffer I/O error on dev nbd2, logical block 1, async page read [ 482.000366][ T6110] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.013086][ T5810] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 482.027419][ T6110] Buffer I/O error on dev nbd2, logical block 2, async page read [ 482.036110][ T6110] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.045897][ T6110] Buffer I/O error on dev nbd2, logical block 3, async page read [ 482.053927][ T6110] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.064032][ T6110] Buffer I/O error on dev nbd2, logical block 0, async page read [ 482.072217][ T6110] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.081976][ T6110] Buffer I/O error on dev nbd2, logical block 1, async page read [ 482.091908][ T6110] ldm_validate_partition_table(): Disk read failed. [ 482.098863][ T6110] Dev nbd2: unable to read RDB block 0 [ 482.105961][ T6110] nbd2: unable to read partition table [ 482.115275][ T6110] ldm_validate_partition_table(): Disk read failed. [ 482.122509][ T6110] Dev nbd2: unable to read RDB block 0 [ 482.132264][ T6110] nbd2: unable to read partition table [ 482.337878][T24497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8172'. [ 482.511696][ T976] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 482.521596][T24506] [ 482.523950][T24506] ====================================================== [ 482.524862][T24508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8176'. [ 482.530966][T24506] WARNING: possible circular locking dependency detected [ 482.530980][T24506] syzkaller #0 Tainted: G L [ 482.530990][T24506] ------------------------------------------------------ [ 482.530996][T24506] syz.0.8175/24506 is trying to acquire lock: [ 482.531006][T24506] ffffffff8e9ab580 [ 482.540012][T24508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8176'. [ 482.546838][T24506] (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x4c/0x6e0 [ 482.586317][T24506] [ 482.586317][T24506] but task is already holding lock: [ 482.593681][T24506] ffffffff8e979148 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x420 [ 482.603193][T24506] [ 482.603193][T24506] which lock already depends on the new lock. [ 482.603193][T24506] [ 482.613609][T24506] [ 482.613609][T24506] the existing dependency chain (in reverse order) is: [ 482.622637][T24506] [ 482.622637][T24506] -> #8 (slab_mutex){+.+.}-{4:4}: [ 482.629858][T24506] __mutex_lock+0x1a2/0x1b90 [ 482.634980][T24506] kmem_cache_destroy+0x59/0x180 [ 482.640485][T24506] p9_client_destroy+0x20c/0x3a0 [ 482.645956][T24506] v9fs_session_close+0x49/0x2d0 [ 482.651505][T24506] v9fs_kill_super+0x4d/0xa0 [ 482.656611][T24506] deactivate_locked_super+0xc1/0x1b0 [ 482.662481][T24506] v9fs_get_tree+0x68c/0xb50 [ 482.667563][T24506] vfs_get_tree+0x92/0x320 [ 482.672478][T24506] path_mount+0x7d0/0x23d0 [ 482.677394][T24506] __x64_sys_mount+0x293/0x310 [ 482.682655][T24506] do_syscall_64+0x106/0xf80 [ 482.687741][T24506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.694154][T24506] [ 482.694154][T24506] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 482.701867][T24506] cpus_read_lock+0x42/0x170 [ 482.706958][T24506] static_key_disable+0x12/0x20 [ 482.712303][T24506] __inet_hash_connect+0x1378/0x1e40 [ 482.718083][T24506] tcp_v4_connect+0xeb0/0x1b40 [ 482.723351][T24506] __inet_stream_connect+0x208/0xfa0 [ 482.729158][T24506] inet_stream_connect+0x57/0xa0 [ 482.734626][T24506] __sys_connect_file+0x141/0x1a0 [ 482.740170][T24506] __sys_connect+0x141/0x170 [ 482.745267][T24506] __x64_sys_connect+0x72/0xb0 [ 482.750532][T24506] do_syscall_64+0x106/0xf80 [ 482.755629][T24506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.762029][T24506] [ 482.762029][T24506] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 482.769736][T24506] lock_sock_nested+0x41/0xf0 [ 482.774935][T24506] inet_shutdown+0x67/0x410 [ 482.779944][T24506] nbd_mark_nsock_dead+0xae/0x5c0 [ 482.785472][T24506] recv_work+0x5fb/0x8c0 [ 482.790218][T24506] process_one_work+0xa23/0x19a0 [ 482.795656][T24506] worker_thread+0x5ef/0xe50 [ 482.800742][T24506] kthread+0x370/0x450 [ 482.805309][T24506] ret_from_fork+0x754/0xd80 [ 482.810403][T24506] ret_from_fork_asm+0x1a/0x30 [ 482.815674][T24506] [ 482.815674][T24506] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 482.823292][T24506] __mutex_lock+0x1a2/0x1b90 [ 482.828387][T24506] nbd_queue_rq+0x428/0x1080 [ 482.833476][T24506] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 482.839528][T24506] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 482.846358][T24506] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 482.852843][T24506] blk_mq_run_hw_queue+0x23c/0x670 [ 482.858456][T24506] blk_mq_dispatch_list+0x51d/0x1360 [ 482.864240][T24506] blk_mq_flush_plug_list+0x130/0x600 [ 482.870121][T24506] __blk_flush_plug+0x2c4/0x4b0 [ 482.875497][T24506] __submit_bio+0x584/0x6c0 [ 482.880501][T24506] submit_bio_noacct_nocheck+0x562/0xc10 [ 482.886643][T24506] submit_bio_noacct+0xd17/0x2010 [ 482.892190][T24506] submit_bh_wbc+0x59c/0x770 [ 482.897284][T24506] block_read_full_folio+0x264/0x8e0 [ 482.903507][T24506] filemap_read_folio+0xfc/0x3b0 [ 482.908951][T24506] do_read_cache_folio+0x2d7/0x6b0 [ 482.914585][T24506] read_part_sector+0xd1/0x370 [ 482.919876][T24506] adfspart_check_ICS+0x93/0x910 [ 482.925318][T24506] bdev_disk_changed+0x7f8/0xc80 [ 482.930754][T24506] blkdev_get_whole+0x187/0x290 [ 482.936105][T24506] bdev_open+0x2c7/0xe40 [ 482.940850][T24506] blkdev_open+0x34e/0x4f0 [ 482.945780][T24506] do_dentry_open+0x6d8/0x1660 [ 482.951044][T24506] vfs_open+0x82/0x3f0 [ 482.955618][T24506] path_openat+0x208c/0x31a0 [ 482.960717][T24506] do_file_open+0x20e/0x430 [ 482.965719][T24506] do_sys_openat2+0x10d/0x1e0 [ 482.970902][T24506] __x64_sys_openat+0x12d/0x210 [ 482.976254][T24506] do_syscall_64+0x106/0xf80 [ 482.981348][T24506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.987743][T24506] [ 482.987743][T24506] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 482.994932][T24506] __mutex_lock+0x1a2/0x1b90 [ 483.000030][T24506] nbd_queue_rq+0xba/0x1080 [ 483.005075][T24506] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 483.011126][T24506] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 483.017955][T24506] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 483.024437][T24506] blk_mq_run_hw_queue+0x23c/0x670 [ 483.030048][T24506] blk_mq_dispatch_list+0x51d/0x1360 [ 483.035833][T24506] blk_mq_flush_plug_list+0x130/0x600 [ 483.041712][T24506] __blk_flush_plug+0x2c4/0x4b0 [ 483.047081][T24506] __submit_bio+0x584/0x6c0 [ 483.052092][T24506] submit_bio_noacct_nocheck+0x562/0xc10 [ 483.058234][T24506] submit_bio_noacct+0xd17/0x2010 [ 483.063760][T24506] submit_bh_wbc+0x59c/0x770 [ 483.068856][T24506] block_read_full_folio+0x264/0x8e0 [ 483.074646][T24506] filemap_read_folio+0xfc/0x3b0 [ 483.080087][T24506] do_read_cache_folio+0x2d7/0x6b0 [ 483.085704][T24506] read_part_sector+0xd1/0x370 [ 483.090968][T24506] adfspart_check_ICS+0x93/0x910 [ 483.096492][T24506] bdev_disk_changed+0x7f8/0xc80 [ 483.101931][T24506] blkdev_get_whole+0x187/0x290 [ 483.107281][T24506] bdev_open+0x2c7/0xe40 [ 483.112036][T24506] blkdev_open+0x34e/0x4f0 [ 483.116956][T24506] do_dentry_open+0x6d8/0x1660 [ 483.122218][T24506] vfs_open+0x82/0x3f0 [ 483.126788][T24506] path_openat+0x208c/0x31a0 [ 483.131879][T24506] do_file_open+0x20e/0x430 [ 483.136888][T24506] do_sys_openat2+0x10d/0x1e0 [ 483.142066][T24506] __x64_sys_openat+0x12d/0x210 [ 483.147417][T24506] do_syscall_64+0x106/0xf80 [ 483.152510][T24506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.158905][T24506] [ 483.158905][T24506] -> #3 (set->srcu){.+.+}-{0:0}: [ 483.166019][T24506] __synchronize_srcu+0xa1/0x2a0 [ 483.171472][T24506] blk_mq_quiesce_queue+0x149/0x1c0 [ 483.177168][T24506] elevator_switch+0x17b/0x7e0 [ 483.182433][T24506] elevator_change+0x352/0x530 [ 483.187694][T24506] elevator_set_default+0x29e/0x360 [ 483.193393][T24506] blk_register_queue+0x412/0x590 [ 483.198913][T24506] __add_disk+0x73f/0xe40 [ 483.203745][T24506] add_disk_fwnode+0x118/0x5c0 [ 483.209011][T24506] nbd_dev_add+0x77a/0xb10 [ 483.213934][T24506] nbd_init+0x291/0x2b0 [ 483.218587][T24506] do_one_initcall+0x11d/0x760 [ 483.223852][T24506] kernel_init_freeable+0x6e5/0x7a0 [ 483.229548][T24506] kernel_init+0x1f/0x1e0 [ 483.234373][T24506] ret_from_fork+0x754/0xd80 [ 483.239474][T24506] ret_from_fork_asm+0x1a/0x30 [ 483.244740][T24506] [ 483.244740][T24506] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 483.252534][T24506] __mutex_lock+0x1a2/0x1b90 [ 483.257627][T24506] elevator_change+0x1bc/0x530 [ 483.262887][T24506] elevator_set_none+0x92/0xf0 [ 483.268149][T24506] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 483.274458][T24506] nbd_start_device+0x1a6/0xbd0 [ 483.279814][T24506] nbd_genl_connect+0xff2/0x1a40 [ 483.285266][T24506] genl_family_rcv_msg_doit+0x214/0x300 [ 483.291309][T24506] genl_rcv_msg+0x560/0x800 [ 483.296309][T24506] netlink_rcv_skb+0x159/0x420 [ 483.301583][T24506] genl_rcv+0x28/0x40 [ 483.306068][T24506] netlink_unicast+0x5aa/0x870 [ 483.311335][T24506] netlink_sendmsg+0x8b0/0xda0 [ 483.316605][T24506] ____sys_sendmsg+0x9e1/0xb70 [ 483.321876][T24506] ___sys_sendmsg+0x190/0x1e0 [ 483.327049][T24506] __sys_sendmsg+0x170/0x220 [ 483.332140][T24506] do_syscall_64+0x106/0xf80 [ 483.337233][T24506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.343718][T24506] [ 483.343718][T24506] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 483.352311][T24506] blk_alloc_queue+0x610/0x790 [ 483.357590][T24506] blk_mq_alloc_queue+0x174/0x290 [ 483.363122][T24506] __blk_mq_alloc_disk+0x29/0x120 [ 483.368653][T24506] nbd_dev_add+0x492/0xb10 [ 483.373582][T24506] nbd_init+0x291/0x2b0 [ 483.378237][T24506] do_one_initcall+0x11d/0x760 [ 483.383501][T24506] kernel_init_freeable+0x6e5/0x7a0 [ 483.389196][T24506] kernel_init+0x1f/0x1e0 [ 483.394020][T24506] ret_from_fork+0x754/0xd80 [ 483.399109][T24506] ret_from_fork_asm+0x1a/0x30 [ 483.404387][T24506] [ 483.404387][T24506] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 483.411587][T24506] __lock_acquire+0x14b8/0x2630 [ 483.416937][T24506] lock_acquire+0x1cf/0x380 [ 483.421936][T24506] fs_reclaim_acquire+0xc4/0x100 [ 483.427371][T24506] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 483.433247][T24506] __kmem_cache_create_args+0x366/0x420 [ 483.439293][T24506] ieee80211_mesh_init_sdata+0x596/0x690 [ 483.445421][T24506] ieee80211_setup_sdata+0xabd/0xcf0 [ 483.451214][T24506] ieee80211_if_change_type+0x2a9/0x790 [ 483.457257][T24506] ieee80211_change_iface+0xad/0x970 [ 483.463044][T24506] cfg80211_change_iface+0x53d/0xd90 [ 483.468832][T24506] nl80211_set_interface+0x875/0xc80 [ 483.474626][T24506] genl_family_rcv_msg_doit+0x214/0x300 [ 483.480670][T24506] genl_rcv_msg+0x560/0x800 [ 483.485671][T24506] netlink_rcv_skb+0x159/0x420 [ 483.490936][T24506] genl_rcv+0x28/0x40 [ 483.495422][T24506] netlink_unicast+0x5aa/0x870 [ 483.500690][T24506] netlink_sendmsg+0x8b0/0xda0 [ 483.505955][T24506] ____sys_sendmsg+0x9e1/0xb70 [ 483.511224][T24506] ___sys_sendmsg+0x190/0x1e0 [ 483.516396][T24506] __sys_sendmsg+0x170/0x220 [ 483.521487][T24506] do_syscall_64+0x106/0xf80 [ 483.526586][T24506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.532977][T24506] [ 483.532977][T24506] other info that might help us debug this: [ 483.532977][T24506] [ 483.543178][T24506] Chain exists of: [ 483.543178][T24506] fs_reclaim --> cpu_hotplug_lock --> slab_mutex [ 483.543178][T24506] [ 483.555403][T24506] Possible unsafe locking scenario: [ 483.555403][T24506] [ 483.562823][T24506] CPU0 CPU1 [ 483.568163][T24506] ---- ---- [ 483.573501][T24506] lock(slab_mutex); [ 483.577460][T24506] lock(cpu_hotplug_lock); [ 483.584459][T24506] lock(slab_mutex); [ 483.590935][T24506] lock(fs_reclaim); [ 483.594894][T24506] [ 483.594894][T24506] *** DEADLOCK *** [ 483.594894][T24506] [ 483.603009][T24506] 4 locks held by syz.0.8175/24506: [ 483.608177][T24506] #0: ffffffff906be910 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 483.616340][T24506] #1: ffffffff906125e8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xae0 [ 483.625586][T24506] #2: ffff88807ca80788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_pre_doit+0x30e/0xae0 [ 483.635395][T24506] #3: ffffffff8e979148 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x420 [ 483.645292][T24506] [ 483.645292][T24506] stack backtrace: [ 483.651155][T24506] CPU: 1 UID: 0 PID: 24506 Comm: syz.0.8175 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.651176][T24506] Tainted: [L]=SOFTLOCKUP [ 483.651181][T24506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 483.651190][T24506] Call Trace: [ 483.651195][T24506] [ 483.651201][T24506] dump_stack_lvl+0x100/0x190 [ 483.651225][T24506] print_circular_bug.cold+0x178/0x1c7 [ 483.651248][T24506] check_noncircular+0x146/0x160 [ 483.651273][T24506] __lock_acquire+0x14b8/0x2630 [ 483.651288][T24506] ? __kmem_cache_create_args+0x44/0x420 [ 483.651308][T24506] lock_acquire+0x1cf/0x380 [ 483.651321][T24506] ? kmem_cache_alloc_noprof+0x4c/0x6e0 [ 483.651344][T24506] fs_reclaim_acquire+0xc4/0x100 [ 483.651359][T24506] ? kmem_cache_alloc_noprof+0x4c/0x6e0 [ 483.651379][T24506] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 483.651398][T24506] ? __kmem_cache_create_args+0x366/0x420 [ 483.651418][T24506] __kmem_cache_create_args+0x366/0x420 [ 483.651438][T24506] ieee80211_mesh_init_sdata+0x596/0x690 [ 483.651454][T24506] ? __pfx_ieee80211_mesh_init_sdata+0x10/0x10 [ 483.651468][T24506] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 483.651485][T24506] ? find_held_lock+0x2b/0x80 [ 483.651504][T24506] ? lockdep_init_map_type+0x5c/0x250 [ 483.651522][T24506] ieee80211_setup_sdata+0xabd/0xcf0 [ 483.651540][T24506] ieee80211_if_change_type+0x2a9/0x790 [ 483.651558][T24506] ieee80211_change_iface+0xad/0x970 [ 483.651576][T24506] ? cfg80211_mlme_purge_registrations+0x1eb/0x2b0 [ 483.651594][T24506] cfg80211_change_iface+0x53d/0xd90 [ 483.651614][T24506] nl80211_set_interface+0x875/0xc80 [ 483.651636][T24506] ? __pfx_nl80211_set_interface+0x10/0x10 [ 483.651657][T24506] ? nl80211_pre_doit+0x30e/0xae0 [ 483.651671][T24506] ? nl80211_pre_doit+0x19a/0xae0 [ 483.651687][T24506] genl_family_rcv_msg_doit+0x214/0x300 [ 483.651703][T24506] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 483.651719][T24506] ? bpf_lsm_capable+0x9/0x10 [ 483.651733][T24506] ? security_capable+0x80/0x260 [ 483.651750][T24506] ? ns_capable+0xd2/0xf0 [ 483.651767][T24506] genl_rcv_msg+0x560/0x800 [ 483.651781][T24506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.651794][T24506] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 483.651809][T24506] ? __pfx_nl80211_set_interface+0x10/0x10 [ 483.651828][T24506] ? __pfx_nl80211_post_doit+0x10/0x10 [ 483.651850][T24506] ? __lock_acquire+0x4a5/0x2630 [ 483.651864][T24506] netlink_rcv_skb+0x159/0x420 [ 483.651884][T24506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.651897][T24506] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.651921][T24506] ? netlink_deliver_tap+0x1ae/0xcc0 [ 483.651941][T24506] genl_rcv+0x28/0x40 [ 483.651961][T24506] netlink_unicast+0x5aa/0x870 [ 483.651982][T24506] ? __pfx_netlink_unicast+0x10/0x10 [ 483.652005][T24506] netlink_sendmsg+0x8b0/0xda0 [ 483.652027][T24506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.652050][T24506] ____sys_sendmsg+0x9e1/0xb70 [ 483.652072][T24506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.652092][T24506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.652116][T24506] ? __pfx_futex_wake_mark+0x10/0x10 [ 483.652134][T24506] ___sys_sendmsg+0x190/0x1e0 [ 483.652148][T24506] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.652172][T24506] __sys_sendmsg+0x170/0x220 [ 483.652190][T24506] ? __pfx___sys_sendmsg+0x10/0x10 [ 483.652207][T24506] ? __x64_sys_futex+0x34f/0x4d0 [ 483.652226][T24506] do_syscall_64+0x106/0xf80 [ 483.652245][T24506] ? clear_bhb_loop+0x40/0x90 [ 483.652260][T24506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.652274][T24506] RIP: 0033:0x7f4cfa19c799 [ 483.652287][T24506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.652300][T24506] RSP: 002b:00007f4cf83f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.652314][T24506] RAX: ffffffffffffffda RBX: 00007f4cfa415fa0 RCX: 00007f4cfa19c799 [ 483.652323][T24506] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 483.652331][T24506] RBP: 00007f4cfa232c99 R08: 0000000000000000 R09: 0000000000000000 [ 483.652340][T24506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.652349][T24506] R13: 00007f4cfa416038 R14: 00007f4cfa415fa0 R15: 00007ffc0c77fab8 [ 483.652363][T24506] [ 483.662240][T14644] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 483.706684][ T5809] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 483.746625][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.752244][ T5809] Bluetooth: hci2: Injecting HCI hardware error event [ 483.752328][ T5809] Bluetooth: hci2: hardware error 0x00 [ 483.764792][T24508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8176'. [ 484.108311][T24508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8176'. [ 484.108539][ T976] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 484.130291][ T976] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 484.140020][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.153959][ T976] usb 5-1: config 0 descriptor?? [ 484.291611][T14644] usb 4-1: Using ep0 maxpacket: 16 [ 484.298299][T14644] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 484.306491][T14644] usb 4-1: config 0 has no interface number 0 [ 484.312640][T14644] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 484.323586][T14644] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 484.334315][T14644] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 484.343809][T14644] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 484.352004][T14644] usb 4-1: Product: syz [ 484.356174][T14644] usb 4-1: SerialNumber: syz [ 484.362329][T14644] usb 4-1: config 0 descriptor?? [ 484.369465][T14644] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 484.376960][T14644] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input72 [ 484.571054][ T976] plantronics 0003:047F:FFFF.004F: reserved main item tag 0xd [ 484.598060][ T976] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 484.600031][ T5918] usb 4-1: USB disconnect, device number 69 [ 484.610449][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 484.623256][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 484.638360][ T5918] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 484.832534][ T976] usb 5-1: USB disconnect, device number 82 [ 486.171607][ T5809] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 486.978088][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)