last executing test programs: 35.574259652s ago: executing program 4 (id=3164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xbbf}]}, 0x28}}, 0x0) 35.518351885s ago: executing program 4 (id=3166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x2e, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 35.455145748s ago: executing program 4 (id=3168): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000004c40)={@ipv4={'\x00', '\xff\xff', @multicast2}, r2}, 0x14) 35.434271899s ago: executing program 4 (id=3169): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 35.407436442s ago: executing program 4 (id=3170): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r0, 0x12a, 0x14, 0x17, 0x0, 0x0) 35.042317547s ago: executing program 4 (id=3171): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 34.867750213s ago: executing program 32 (id=3171): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 5.105280383s ago: executing program 5 (id=3609): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb0800450e005c000040020511"], 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x1, 0x1, 0x1, 0x24, 0x0, @void}, "3fe2f040"}}}}}}, 0x0) 5.044698647s ago: executing program 5 (id=3610): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, 0x0) 2.392802408s ago: executing program 5 (id=3652): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="4cce925400"}) 1.963687643s ago: executing program 5 (id=3655): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) get_mempolicy(0x0, &(0x7f0000000100), 0x7811, &(0x7f00001df000/0x4000)=nil, 0x2) 1.865652476s ago: executing program 5 (id=3657): syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 1.812412251s ago: executing program 5 (id=3659): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.689379542s ago: executing program 2 (id=3661): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x10, 0x4) 1.590603988s ago: executing program 2 (id=3664): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) 1.498990771s ago: executing program 2 (id=3666): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$inet6_udp(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 1.390802837s ago: executing program 1 (id=3671): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 1.26105677s ago: executing program 1 (id=3674): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000011c0)={0x1, 0x1, 0x1, 0x81, @vifc_lcl_addr=@local, @multicast2}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.027431454s ago: executing program 1 (id=3678): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 907.964839ms ago: executing program 3 (id=3680): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\a'], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 831.331063ms ago: executing program 3 (id=3682): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 830.613859ms ago: executing program 1 (id=3683): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r1}, 0x94) 762.239819ms ago: executing program 1 (id=3685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) 712.253205ms ago: executing program 0 (id=3687): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1, r0}, 0xc) 667.780195ms ago: executing program 3 (id=3688): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) 629.929514ms ago: executing program 1 (id=3689): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102fcfc9008b80421054a150102030109023d00010002c00009047abb04930a9607090582ffffff0703060915000000020ae13309050c1020000f6800070595be474b7409050602"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 622.095799ms ago: executing program 0 (id=3690): r0 = socket(0xa, 0x3, 0x87) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x2) sendto(r0, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 569.945672ms ago: executing program 3 (id=3691): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 492.071921ms ago: executing program 3 (id=3692): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newchain={0x24, 0x64, 0x214, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {0x5, 0xfffd}, {0x6, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008014) accept4(r1, 0x0, 0x0, 0x80800) 466.303605ms ago: executing program 0 (id=3693): mkdir(&(0x7f0000000040)='./bus\x00', 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) 448.632262ms ago: executing program 3 (id=3694): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010026bd70000000001c3b00000008000300", @ANYRES32=r1, @ANYBLOB="5200330080200900ffffffffffff080211"], 0x84}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 380.213414ms ago: executing program 0 (id=3695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006012000001282f00fe88a43de1a400000000000000027d01ff02000000000000000000000000000128"], 0xfdef) 274.352959ms ago: executing program 0 (id=3696): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fafffffb00000000030000008500000036000000670000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r0, r2, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[], 0x0) 274.019273ms ago: executing program 0 (id=3697): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r1 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000080)=0x8) 97.275454ms ago: executing program 2 (id=3698): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f0000000000)='./file0\x00', r1, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 54.073361ms ago: executing program 2 (id=3699): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) 0s ago: executing program 2 (id=3700): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f00000005c0)={0x280a00300, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) kernel console output (not intermixed with test programs): disconnected [ 193.767378][ T976] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 193.801851][ T976] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 193.822080][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.833171][ T976] usb 2-1: Product: syz [ 193.837335][ T976] usb 2-1: Manufacturer: syz [ 193.842788][ T976] usb 2-1: SerialNumber: syz [ 193.859866][ T976] usb 2-1: config 0 descriptor?? [ 193.869674][T11537] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 193.879012][T11537] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 193.895650][T11561] binder: 11559:11561 ioctl 541b 0 returned -22 [ 194.103352][T11537] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 194.110748][T11537] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 194.271041][ T5863] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 194.320986][ T5862] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 194.440953][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 194.447604][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.458034][ T5863] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 194.469528][ T5863] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 194.479242][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.488687][ T5863] usb 5-1: Product: syz [ 194.493743][ T5863] usb 5-1: Manufacturer: syz [ 194.498414][ T5863] usb 5-1: SerialNumber: syz [ 194.503139][ T5862] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 194.514646][ T5862] usb 4-1: config 0 has no interface number 0 [ 194.521181][ T5862] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 194.532748][ T5863] usb 5-1: config 0 descriptor?? [ 194.546587][ T5862] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 194.556098][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 194.564312][ T5862] usb 4-1: Manufacturer: syz [ 194.568992][ T5862] usb 4-1: SerialNumber: syz [ 194.581589][ T5862] usb 4-1: config 0 descriptor?? [ 194.732409][ T976] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 194.743577][ T976] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 194.754739][ T976] asix 2-1:0.251: probe with driver asix failed with error -71 [ 194.766148][ T976] usb 2-1: USB disconnect, device number 26 [ 194.795578][ T5863] usb 5-1: USB disconnect, device number 30 [ 194.932164][ T5890] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 195.082103][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 195.093202][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.102972][ T5890] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 195.112044][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.121000][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 195.129785][ T5890] usb 3-1: config 0 descriptor?? [ 195.204762][ T5862] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.214/input/input31 [ 195.420500][ T792] usb 4-1: USB disconnect, device number 26 [ 195.521545][ T5989] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 195.550010][ T5890] petalynx 0003:18B1:0037.0020: unknown main item tag 0x0 [ 195.558188][ T5890] petalynx 0003:18B1:0037.0020: unknown main item tag 0x0 [ 195.566279][ T5890] petalynx 0003:18B1:0037.0020: unknown main item tag 0x0 [ 195.574754][ T5890] petalynx 0003:18B1:0037.0020: unknown main item tag 0x0 [ 195.582952][ T5890] petalynx 0003:18B1:0037.0020: unknown main item tag 0x0 [ 195.590241][ T5890] petalynx 0003:18B1:0037.0020: unknown main item tag 0x0 [ 195.597785][ T5890] petalynx 0003:18B1:0037.0020: unknown global tag 0xd [ 195.605442][ T5890] petalynx 0003:18B1:0037.0020: item 0 0 1 13 parsing failed [ 195.615671][ T5890] petalynx 0003:18B1:0037.0020: parse failed [ 195.623476][ T5890] petalynx 0003:18B1:0037.0020: probe with driver petalynx failed with error -22 [ 195.635901][T11608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.644029][T11608] IPv6: NLM_F_CREATE should be set when creating new route [ 195.651280][T11608] IPv6: NLM_F_CREATE should be set when creating new route [ 195.661705][T11608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.682984][ T5989] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 195.698082][ T5989] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 195.709189][ T5989] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 195.718573][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.726961][ T5989] usb 2-1: Product: syz [ 195.733156][ T5989] usb 2-1: Manufacturer: syz [ 195.737758][ T5989] usb 2-1: SerialNumber: syz [ 195.751474][ T5989] usb 2-1: config 0 descriptor?? [ 195.760974][ T5989] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 195.786891][ T5863] usb 3-1: USB disconnect, device number 32 [ 195.955835][T11626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11626 comm=syz.0.2479 [ 196.207546][T11642] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2487'. [ 196.404796][ T5862] usb 2-1: USB disconnect, device number 27 [ 196.753365][ T30] audit: type=1400 audit(1775691167.213:556): avc: denied { setopt } for pid=11668 comm="syz.3.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 196.821554][T11673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.967455][T11686] netlink: 'syz.2.2507': attribute type 9 has an invalid length. [ 196.992344][T11686] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2507'. [ 197.014446][T11691] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2508'. [ 197.175888][T11701] netlink: 'syz.2.2511': attribute type 4 has an invalid length. [ 197.183892][T11701] netlink: 4168 bytes leftover after parsing attributes in process `syz.2.2511'. [ 197.535054][T11709] netlink: 'syz.3.2516': attribute type 16 has an invalid length. [ 198.029211][ T30] audit: type=1400 audit(1775691168.483:557): avc: denied { setopt } for pid=11726 comm="syz.2.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 198.070988][ T5862] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 198.220985][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 198.227666][ T5862] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 198.237839][ T5989] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 198.267429][ T5862] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 198.276804][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 198.289822][ T5862] usb 4-1: Product: syz [ 198.308169][ T5862] usb 4-1: Manufacturer: syz [ 198.321079][ T5862] usb 4-1: SerialNumber: syz [ 198.328427][ T5862] usb 4-1: config 0 descriptor?? [ 198.339084][T11719] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 198.386377][ T5989] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 198.405842][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.429809][ T5989] usb 2-1: config 0 descriptor?? [ 198.442817][ T5989] cp210x 2-1:0.0: cp210x converter detected [ 198.464128][ T30] audit: type=1400 audit(1775691168.923:558): avc: denied { getopt } for pid=11749 comm="syz.4.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.607872][ T5890] usb 4-1: USB disconnect, device number 27 [ 198.806088][ T30] audit: type=1400 audit(1775691169.263:559): avc: denied { read } for pid=11772 comm="syz.2.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 199.053721][T11785] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2552'. [ 199.066367][ T5989] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 199.076133][ T5989] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 199.095577][ T5989] usb 2-1: cp210x converter now attached to ttyUSB0 [ 199.116414][ T5989] usb 2-1: USB disconnect, device number 28 [ 199.134895][ T5989] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 199.153753][ T5989] cp210x 2-1:0.0: device disconnected [ 199.283448][T11794] tipc: Started in network mode [ 199.288652][T11794] tipc: Node identity ac14140f, cluster identity 4711 [ 199.299061][T11794] tipc: New replicast peer: 255.255.255.255 [ 199.306890][T11794] tipc: Enabled bearer , priority 10 [ 199.591082][ T5863] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 199.761106][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 199.767562][ T5863] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 199.776227][ T5863] usb 5-1: config 0 has no interface number 0 [ 199.783317][ T5863] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 199.794640][ T5863] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 199.806523][ T5863] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.817734][ T5863] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 199.831152][ T5863] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 199.840976][ T5989] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 199.853491][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.865019][ T5863] usb 5-1: config 0 descriptor?? [ 199.875942][ T5863] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 199.910991][ T5862] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 199.939911][T11818] netlink: 'syz.0.2567': attribute type 1 has an invalid length. [ 199.947788][T11818] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2567'. [ 199.956808][T11818] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2567'. [ 199.965665][T11818] netlink: 'syz.0.2567': attribute type 1 has an invalid length. [ 199.973619][T11818] netlink: 'syz.0.2567': attribute type 8 has an invalid length. [ 199.982092][T11818] netlink: 606 bytes leftover after parsing attributes in process `syz.0.2567'. [ 199.993350][ T5989] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.002938][ T5989] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.021018][ T5989] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.030131][ T5989] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.045606][ T5989] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.055643][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.064373][ T5989] usb 3-1: Product: syz [ 200.068668][ T5989] usb 3-1: Manufacturer: syz [ 200.070951][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 200.076975][ T5989] cdc_wdm 3-1:1.0: skipping garbage [ 200.086985][ T5989] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 200.096916][ T5862] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.115484][ T5862] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 200.117893][T11822] netlink: 'syz.0.2569': attribute type 2 has an invalid length. [ 200.135492][ T5863] usb 5-1: USB disconnect, device number 31 [ 200.146948][ T5862] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.147671][T11822] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2569'. [ 200.165333][ T5862] usb 2-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 200.175457][ T5863] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 200.184993][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.200221][ T5862] usb 2-1: config 0 descriptor?? [ 200.292573][ T5989] usb 3-1: USB disconnect, device number 33 [ 200.432212][ T5863] tipc: Node number set to 2886997007 [ 200.616309][ T5862] smartjoyplus 0003:6666:8801.0021: unknown main item tag 0x0 [ 200.628140][ T5862] smartjoyplus 0003:6666:8801.0021: unknown main item tag 0x0 [ 200.636043][ T5862] smartjoyplus 0003:6666:8801.0021: unknown main item tag 0x0 [ 200.646446][ T5862] smartjoyplus 0003:6666:8801.0021: unknown main item tag 0x0 [ 200.654429][ T5812] Bluetooth: hci0: command 0x0406 tx timeout [ 200.671638][ T5862] smartjoyplus 0003:6666:8801.0021: unknown main item tag 0x0 [ 200.679137][ T5862] smartjoyplus 0003:6666:8801.0021: unknown main item tag 0x0 [ 200.691731][ T5862] smartjoyplus 0003:6666:8801.0021: unknown main item tag 0x0 [ 200.703336][ T5862] smartjoyplus 0003:6666:8801.0021: unknown main item tag 0x0 [ 200.710826][ T5862] smartjoyplus 0003:6666:8801.0021: unknown main item tag 0x0 [ 200.718525][ T5862] smartjoyplus 0003:6666:8801.0021: unknown main item tag 0x0 [ 200.740841][ T5862] smartjoyplus 0003:6666:8801.0021: hidraw0: USB HID v0.08 Device [HID 6666:8801] on usb-dummy_hcd.1-1/input0 [ 200.752903][T11846] netlink: 'syz.0.2580': attribute type 1 has an invalid length. [ 200.753513][ T5862] smartjoyplus 0003:6666:8801.0021: no output reports found [ 200.780400][T11846] netlink: 'syz.0.2580': attribute type 2 has an invalid length. [ 200.793316][T11846] netlink: 'syz.0.2580': attribute type 1 has an invalid length. [ 200.801242][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2580'. [ 200.811262][ T5863] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 200.843771][ T5862] usb 2-1: USB disconnect, device number 29 [ 200.983144][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 200.993964][ T5863] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 201.010934][ T5863] usb 4-1: config 0 has no interface number 0 [ 201.030958][ T5863] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 201.047164][ T5863] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 201.066402][ T5863] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 201.077302][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.085503][ T5863] usb 4-1: Product: syz [ 201.089734][ T5863] usb 4-1: Manufacturer: syz [ 201.094730][ T5863] usb 4-1: SerialNumber: syz [ 201.102314][ T5863] usb 4-1: config 0 descriptor?? [ 201.326566][T11880] SELinux: ebitmap: truncated map [ 201.362124][T11880] SELinux: failed to load policy [ 201.479352][T11892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.517397][ T5863] radio-si470x 4-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 201.531770][ T5863] radio-si470x 4-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 201.717986][ T5863] radio-si470x 4-1:0.35: software version 146, hardware version 66 [ 201.726363][ T5863] radio-si470x 4-1:0.35: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 201.918700][ T5863] radio-si470x 4-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 201.950922][ T5863] radio-si470x 4-1:0.35: submitting int urb failed (-90) [ 201.958315][ T5863] radio-si470x 4-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 201.977180][ T5863] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -22 [ 202.021261][ T5863] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 202.052404][ T5863] usb 4-1: USB disconnect, device number 28 [ 202.710994][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 202.834473][ T30] audit: type=1400 audit(1775691173.293:560): avc: denied { map } for pid=11950 comm="syz.4.2625" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 202.870933][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 202.882474][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 202.911003][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 202.937557][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 202.959819][ T10] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 202.979571][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.997765][ T10] usb 2-1: Product: syz [ 203.030932][ T10] usb 2-1: Manufacturer: syz [ 203.035541][ T10] usb 2-1: SerialNumber: syz [ 203.052544][ T10] usb 2-1: config 0 descriptor?? [ 203.073492][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input32 [ 203.337229][ T10] usb 2-1: USB disconnect, device number 30 [ 203.343307][ C0] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 203.414797][ T30] audit: type=1326 audit(1775691941.874:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.2.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3bb9c819 code=0x7ffc0000 [ 203.442594][ T30] audit: type=1326 audit(1775691941.874:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.2.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3bb9c819 code=0x7ffc0000 [ 203.472425][ T30] audit: type=1326 audit(1775691941.894:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.2.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb3bb9c819 code=0x7ffc0000 [ 203.496423][ T30] audit: type=1326 audit(1775691941.894:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.2.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3bb9c819 code=0x7ffc0000 [ 203.571907][ T30] audit: type=1326 audit(1775691941.904:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.2.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3bb9c819 code=0x7ffc0000 [ 203.625771][ T30] audit: type=1326 audit(1775691941.934:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.2.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbb3bb9c819 code=0x7ffc0000 [ 203.691452][ T30] audit: type=1326 audit(1775691941.934:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.2.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3bb9c819 code=0x7ffc0000 [ 203.752539][ T30] audit: type=1326 audit(1775691941.934:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.2.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3bb9c819 code=0x7ffc0000 [ 203.810981][ T30] audit: type=1326 audit(1775691941.934:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.2.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fbb3bb9c819 code=0x7ffc0000 [ 203.851124][ T30] audit: type=1326 audit(1775691941.934:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.2.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3bb9c819 code=0x7ffc0000 [ 204.480910][ T5863] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 204.634227][ T5863] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 204.655784][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.672767][ T5863] usb 3-1: Product: syz [ 204.683921][ T5863] usb 3-1: Manufacturer: syz [ 204.690799][ T5863] usb 3-1: SerialNumber: syz [ 204.949405][ T5863] rtl8150 3-1:1.0: couldn't reset the device [ 204.962546][ T5863] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 205.005183][ T5863] usb 3-1: USB disconnect, device number 34 [ 205.136789][T12069] macvlan0: entered promiscuous mode [ 205.145618][T12069] netlink: 'syz.0.2677': attribute type 1 has an invalid length. [ 205.157310][T12069] netlink: 'syz.0.2677': attribute type 2 has an invalid length. [ 205.162166][T12075] __nla_validate_parse: 4 callbacks suppressed [ 205.162178][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2679'. [ 205.371900][ T5989] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 205.522199][ T5989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 205.533846][ T5989] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 205.544555][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.554752][ T5989] usb 4-1: config 0 descriptor?? [ 205.560334][T12073] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 205.980982][ T5989] hid (null): global environment stack underflow [ 205.992059][ T5989] hid_parser_main: 28 callbacks suppressed [ 205.992079][ T5989] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 206.005435][ T5989] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 206.012810][ T5989] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 206.019782][ T5989] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 206.026865][ T5989] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 206.034128][ T5989] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 206.041053][ T5989] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 206.047988][ T5989] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 206.054940][ T5989] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 206.061936][ T5989] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 206.070645][ T5989] asus 0003:0B05:1ABE.0022: global environment stack underflow [ 206.078433][ T5989] asus 0003:0B05:1ABE.0022: item 0 1 1 11 parsing failed [ 206.087037][ T5989] asus 0003:0B05:1ABE.0022: Asus hid parse failed: -22 [ 206.094348][ T5989] asus 0003:0B05:1ABE.0022: probe with driver asus failed with error -22 [ 206.111078][ T5863] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 206.233190][ T5989] usb 4-1: USB disconnect, device number 29 [ 206.281975][ T5863] usb 3-1: unable to get BOS descriptor or descriptor too short [ 206.342218][ T5863] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 206.349936][ T5863] usb 3-1: can't read configurations, error -71 [ 206.896928][T12155] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2714'. [ 207.231197][ T976] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 207.390968][ T976] usb 5-1: Using ep0 maxpacket: 16 [ 207.399013][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 207.412849][ T5863] kernel read not supported for file /dsp1 (pid: 5863 comm: kworker/1:5) [ 207.417852][T12190] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2732'. [ 207.422606][ T976] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 207.469806][ T976] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 207.479122][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.503760][ T976] usb 5-1: config 0 descriptor?? [ 207.517879][T12194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2734'. [ 207.920504][ T976] uclogic 0003:28BD:0078.0023: interface is invalid, ignoring [ 208.093205][T12219] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2745'. [ 208.176958][ T5863] usb 5-1: USB disconnect, device number 32 [ 208.349148][T12235] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2753'. [ 208.401077][ T976] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 208.426435][ T5863] kernel read not supported for file /vcs (pid: 5863 comm: kworker/1:5) [ 208.570964][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 208.576167][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 208.576180][ T30] audit: type=1400 audit(1775691947.034:577): avc: denied { bind } for pid=12246 comm="syz.3.2759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 208.613116][ T976] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 208.630888][ T976] usb 3-1: config 0 has no interface number 0 [ 208.636967][ T976] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.661732][ T976] usb 3-1: config 0 interface 85 has no altsetting 0 [ 208.670246][ T976] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 208.690917][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.698933][ T976] usb 3-1: Product: syz [ 208.720906][ T976] usb 3-1: Manufacturer: syz [ 208.725578][ T976] usb 3-1: SerialNumber: syz [ 208.734040][ T976] usb 3-1: config 0 descriptor?? [ 208.891422][ T5822] Bluetooth: hci5: command 0x1003 tx timeout [ 208.898730][ T5812] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 208.991404][ T30] audit: type=1400 audit(1775691947.444:578): avc: denied { mount } for pid=12254 comm="syz.3.2764" name="/" dev="hugetlbfs" ino=34482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 209.069279][T12257] usb usb9: usbfs: process 12257 (syz.4.2763) did not claim interface 48 before use [ 209.331864][ T30] audit: type=1400 audit(1775691947.794:579): avc: denied { listen } for pid=12269 comm="syz.1.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 209.359782][T12265] veth3: entered promiscuous mode [ 209.369776][T12265] veth3: entered allmulticast mode [ 209.372917][ T976] appletouch 3-1:0.85: Geyser mode initialized. [ 209.387119][ T30] audit: type=1400 audit(1775691947.794:580): avc: denied { accept } for pid=12269 comm="syz.1.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 209.406646][ T976] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input33 [ 209.521139][ T5849] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 209.586699][ T5989] usb 3-1: USB disconnect, device number 37 [ 209.600604][ T5989] appletouch 3-1:0.85: input: appletouch disconnected [ 209.680930][ T5849] usb 4-1: Using ep0 maxpacket: 16 [ 209.687480][ T5849] usb 4-1: unable to get BOS descriptor or descriptor too short [ 209.690943][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 209.696474][ T5849] usb 4-1: config 1 has an invalid interface number: 206 but max is 0 [ 209.711293][ T5849] usb 4-1: config 1 has an invalid descriptor of length 104, skipping remainder of the config [ 209.722078][ T5849] usb 4-1: config 1 has no interface number 0 [ 209.728148][ T5849] usb 4-1: config 1 interface 206 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.743828][ T5849] usb 4-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 209.752916][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.760917][ T5849] usb 4-1: Product: syz [ 209.765101][ T5849] usb 4-1: Manufacturer: syz [ 209.770322][ T5849] usb 4-1: SerialNumber: syz [ 209.851091][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 209.857729][ T10] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 209.866448][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 209.878245][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 209.888299][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.898343][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.911469][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 209.920509][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.001405][ T5849] uvcvideo 4-1:1.206: probe with driver uvcvideo failed with error -22 [ 210.016197][ T5849] usb 4-1: USB disconnect, device number 30 [ 210.139851][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 210.146305][ T10] usbtmc 5-1:16.0: can't read capabilities [ 210.371073][T12287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2777'. [ 210.393213][ T976] usb 5-1: USB disconnect, device number 33 [ 210.419473][T12287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2777'. [ 210.513041][T12295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2781'. [ 210.591287][T12298] block device autoloading is deprecated and will be removed. [ 210.706544][ T5812] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 210.758841][ T30] audit: type=1400 audit(1775691949.214:581): avc: denied { bind } for pid=12312 comm="syz.1.2790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 210.892662][ T976] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 210.910976][ T30] audit: type=1400 audit(1775691949.364:582): avc: denied { connect } for pid=12323 comm="syz.1.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.080960][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 211.087445][ T976] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 211.100645][ T976] usb 4-1: config 0 has no interface number 0 [ 211.107070][ T976] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.118151][ T976] usb 4-1: config 0 interface 85 has no altsetting 0 [ 211.128692][ T976] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 211.138382][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.147029][ T976] usb 4-1: Product: syz [ 211.151600][ T976] usb 4-1: Manufacturer: syz [ 211.156656][ T976] usb 4-1: SerialNumber: syz [ 211.164477][ T976] usb 4-1: config 0 descriptor?? [ 211.306974][T12346] netlink: 'syz.0.2804': attribute type 2 has an invalid length. [ 211.355028][T12346] ‚#{6c: entered promiscuous mode [ 211.384490][T12346] netlink: 'syz.0.2804': attribute type 2 has an invalid length. [ 211.408488][T12346] ‚#{6c: left promiscuous mode [ 211.932730][ T976] appletouch 4-1:0.85: Geyser mode initialized. [ 211.946518][ T976] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input34 [ 211.959346][ C1] appletouch 4-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 212.101297][ T30] audit: type=1400 audit(1775691950.554:583): avc: denied { read } for pid=12386 comm="syz.2.2822" path="socket:[35339]" dev="sockfs" ino=35339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.173409][ T976] usb 4-1: USB disconnect, device number 31 [ 212.185801][ T30] audit: type=1800 audit(1775691950.634:584): pid=12393 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2824" name="file0" dev="tmpfs" ino=2654 res=0 errno=0 [ 212.212457][ T976] appletouch 4-1:0.85: input: appletouch disconnected [ 212.626212][T12414] Bluetooth: MGMT ver 1.23 [ 212.696543][T12418] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:256 [ 213.363041][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2854'. [ 213.390963][T12458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2854'. [ 213.481237][ T30] audit: type=1400 audit(1775691951.934:585): avc: denied { read } for pid=12464 comm="syz.4.2857" path="socket:[35537]" dev="sockfs" ino=35537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 213.820934][ T5989] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 213.855262][ T30] audit: type=1400 audit(1775691952.314:586): avc: denied { getopt } for pid=12488 comm="syz.4.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 213.876079][T12489] 9p: Unknown uid 00000000004294967295 [ 213.908752][T12491] bridge0: entered promiscuous mode [ 213.915197][T12491] bridge0: port 3(vlan2) entered blocking state [ 213.922881][T12491] bridge0: port 3(vlan2) entered disabled state [ 213.929250][T12491] vlan2: entered allmulticast mode [ 213.934552][T12491] bridge0: entered allmulticast mode [ 213.941316][T12491] vlan2: left allmulticast mode [ 213.946150][T12491] bridge0: left allmulticast mode [ 213.951708][T12491] bridge0: left promiscuous mode [ 213.980987][ T5989] usb 3-1: Using ep0 maxpacket: 32 [ 213.987711][ T5989] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 137, changing to 11 [ 214.002716][ T5989] usb 3-1: config 1 interface 0 has no altsetting 0 [ 214.013811][ T5989] usb 3-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.40 [ 214.025013][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.033594][ T5989] usb 3-1: Product: syz [ 214.037913][ T5989] usb 3-1: Manufacturer: syz [ 214.042761][ T5989] usb 3-1: SerialNumber: syz [ 214.262160][ T5812] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 214.262215][ T5812] Bluetooth: hci3: Dropping invalid advertising data [ 214.278059][ T5812] Bluetooth: hci3: unknown advertising packet type: 0x40 [ 214.278080][ T5812] Bluetooth: hci3: Malformed LE Event: 0x02 [ 214.326217][ T5989] usbhid 3-1:1.0: can't add hid device: -71 [ 214.339865][ T5989] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 214.350331][ T5989] usb 3-1: USB disconnect, device number 38 [ 214.690994][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 214.811219][ T5862] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 214.842151][ T10] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 214.850386][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.861609][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.872848][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.885924][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.899692][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.911414][ T10] usb 2-1: config 0 descriptor?? [ 214.980898][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 214.993538][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.004550][ T976] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 215.023003][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.034904][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 215.049117][ T5862] usb 5-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 215.059279][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.082010][ T5862] usb 5-1: config 0 descriptor?? [ 215.212392][ T976] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 215.222588][ T976] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 215.238454][ T976] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 215.252889][ T976] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 215.262267][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.270639][ T976] usb 4-1: Product: syz [ 215.276676][ T976] usb 4-1: Manufacturer: syz [ 215.281548][ T976] usb 4-1: SerialNumber: syz [ 215.289420][ T976] usb 4-1: config 0 descriptor?? [ 215.295722][T12531] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 215.304645][T12531] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 215.314971][ T976] usb 4-1: ucan: probing device on interface #0 [ 215.334286][ T10] hid_parser_main: 302 callbacks suppressed [ 215.334306][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 215.348428][ T5989] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 215.356425][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 215.364783][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 215.372929][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 215.380344][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 215.388445][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 215.396403][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 215.404746][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 215.412216][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 215.419619][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 215.439826][ T10] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 215.505268][T12519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.510949][ T5989] usb 3-1: Using ep0 maxpacket: 16 [ 215.519076][T12519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.531788][ T5989] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.542867][ T5989] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.549220][ T5862] apple 0003:05AC:027D.0025: hidraw1: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.4-1/input0 [ 215.549503][ T5989] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 215.577399][ T5989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.592455][ T5989] usb 3-1: config 0 descriptor?? [ 215.664348][ T5863] usb 2-1: USB disconnect, device number 31 [ 215.765918][ T10] usb 5-1: USB disconnect, device number 34 [ 215.942319][ T976] ucan 4-1:0.0 can0: registered device [ 216.012243][ T5989] mcp2221 0003:04D8:00DD.0026: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 216.143385][ T976] ucan 4-1:0.0 can0: firmware string: unknown [ 216.149147][T12569] tipc: New replicast peer: 255.255.255.255 [ 216.152570][ T976] usb 4-1: USB disconnect, device number 32 [ 216.160445][T12569] tipc: Enabled bearer , priority 10 [ 216.242320][ T5862] kernel write not supported for file /sg0 (pid: 5862 comm: kworker/1:4) [ 216.253161][ T30] audit: type=1400 audit(1775691954.704:587): avc: denied { create } for pid=12572 comm="syz.0.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 216.322007][ T30] audit: type=1400 audit(1775691954.724:588): avc: denied { sys_admin } for pid=12572 comm="syz.0.2909" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 216.435830][ T5989] usb 3-1: USB disconnect, device number 39 [ 216.610936][ T5862] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 216.770661][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.781730][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.792624][ T5862] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 216.804704][ T5862] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 216.813163][ T5862] usb 5-1: Manufacturer: syz [ 216.819149][ T5862] usb 5-1: config 0 descriptor?? [ 216.891605][ T5989] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 217.040983][ T5989] usb 2-1: Using ep0 maxpacket: 8 [ 217.052265][ T5989] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 217.068913][ T5989] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 217.080078][ T5989] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.095880][ T5989] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.109629][ T5989] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.119767][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.159537][T12623] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2933'. [ 217.204164][T12625] sctp: [Deprecated]: syz.3.2934 (pid 12625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.204164][T12625] Use struct sctp_sack_info instead [ 217.271014][ T5890] tipc: Node number set to 3758096385 [ 217.353266][ T5989] usb 2-1: GET_CAPABILITIES returned 0 [ 217.361101][ T5989] usbtmc 2-1:16.0: can't read capabilities [ 217.580439][ T5849] usb 2-1: USB disconnect, device number 32 [ 217.837697][ T5862] uclogic 0003:256C:006D.0027: failed retrieving string descriptor #100: -71 [ 217.868756][ T5862] uclogic 0003:256C:006D.0027: failed retrieving pen parameters: -71 [ 217.891081][ T5862] uclogic 0003:256C:006D.0027: failed probing pen v1 parameters: -71 [ 217.900536][ T5862] uclogic 0003:256C:006D.0027: failed probing parameters: -71 [ 217.910954][ T5862] uclogic 0003:256C:006D.0027: probe with driver uclogic failed with error -71 [ 217.926964][ T5862] usb 5-1: USB disconnect, device number 35 [ 217.932893][ T976] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 217.985407][T12659] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2949'. [ 218.100976][ T976] usb 4-1: Using ep0 maxpacket: 16 [ 218.107903][ T976] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.120450][ T976] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.131057][ T976] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 218.140698][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.252185][ T5989] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 218.401011][ T5989] usb 3-1: Using ep0 maxpacket: 8 [ 218.412967][ T5989] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 218.427285][ T5989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.449153][ T5989] pvrusb2: Hardware description: Terratec Grabster AV400 [ 218.469352][ T5989] pvrusb2: ********** [ 218.476855][ T5989] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 218.487091][ T5890] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 218.504941][ T5989] pvrusb2: Important functionality might not be entirely working. [ 218.521127][ T5989] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 218.533876][ T5989] pvrusb2: ********** [ 218.567457][ T976] mcp2221 0003:04D8:00DD.0028: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 218.660494][ T5890] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 218.681192][ T2337] pvrusb2: Invalid write control endpoint [ 218.692374][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.714284][ T5890] usb 2-1: Product: syz [ 218.718485][ T5890] usb 2-1: Manufacturer: syz [ 218.724082][ T5890] usb 2-1: SerialNumber: syz [ 218.761486][ T5890] usb 2-1: config 0 descriptor?? [ 218.779498][ T792] usb 4-1: USB disconnect, device number 33 [ 218.793130][ T2337] pvrusb2: Invalid write control endpoint [ 218.808231][ T5890] hub 2-1:0.0: bad descriptor, ignoring hub [ 218.821347][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 218.832890][ T5890] hub 2-1:0.0: probe with driver hub failed with error -5 [ 218.846071][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 218.853969][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 218.864345][ T2337] pvrusb2: Device being rendered inoperable [ 218.872761][ T2337] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 218.881236][ T2337] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 218.896280][ T2337] pvrusb2: Attached sub-driver cx25840 [ 218.903707][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 218.916631][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 218.916861][ T5849] usb 3-1: USB disconnect, device number 40 [ 219.017725][ T5890] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 219.038323][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 219.048527][ T5890] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 219.057336][ T5890] usb 2-1: media controller created [ 219.076343][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.159404][ T5890] DVB: Unable to find symbol dib7000p_attach() [ 219.166164][ T5890] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 219.197842][T12698] ip6erspan0: entered allmulticast mode [ 219.218607][T12669] dib0700: tx buffer length is larger than 4. Not supported. [ 219.220919][ T5890] rc_core: IR keymap rc-dib0700-rc5 not found [ 219.244879][ T5890] Registered IR keymap rc-empty [ 219.256987][ T5890] dvb-usb: could not initialize remote control. [ 219.263375][ T5890] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 219.292181][ T5890] usb 2-1: USB disconnect, device number 33 [ 219.359692][ T5890] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 219.539644][T12711] netlink: 'syz.2.2972': attribute type 29 has an invalid length. [ 219.569807][ T30] audit: type=1326 audit(1775691958.024:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12712 comm="syz.3.2973" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f938d19c819 code=0x0 [ 219.576184][T12711] netlink: 'syz.2.2972': attribute type 29 has an invalid length. [ 219.619922][T12711] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2972'. [ 219.629784][T12711] unsupported nla_type 58 [ 219.693739][ T30] audit: type=1400 audit(1775691958.144:590): avc: denied { accept } for pid=12715 comm="syz.2.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.730919][T12718] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2975'. [ 219.954312][T12728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2979'. [ 220.098068][ T30] audit: type=1400 audit(1775691958.554:591): avc: denied { ioctl } for pid=12731 comm="syz.1.2980" path="socket:[36315]" dev="sockfs" ino=36315 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 220.139865][ T30] audit: type=1400 audit(1775691958.594:592): avc: denied { open } for pid=12733 comm="syz.1.2981" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 220.165949][ T30] audit: type=1400 audit(1775691958.594:593): avc: denied { ioctl } for pid=12733 comm="syz.1.2981" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 220.590364][ T30] audit: type=1400 audit(1775691959.044:594): avc: denied { write } for pid=12753 comm="syz.4.2991" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 220.628400][ T30] audit: type=1400 audit(1775691959.044:595): avc: denied { open } for pid=12753 comm="syz.4.2991" path="/551/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 220.762349][ T5849] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 220.901711][ T792] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 220.933197][ T5849] usb 4-1: unable to get BOS descriptor or descriptor too short [ 220.946698][ T5849] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 220.959530][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.968120][ T5849] usb 4-1: Product: syz [ 220.972791][ T5849] usb 4-1: Manufacturer: syz [ 220.977438][ T5849] usb 4-1: SerialNumber: syz [ 221.074026][ T792] usb 3-1: Using ep0 maxpacket: 32 [ 221.080641][ T792] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 221.100937][ T792] usb 3-1: config 0 has no interface number 0 [ 221.118666][ T792] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 221.125925][T12776] could not open pipe file descriptor [ 221.128946][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.145080][ T792] usb 3-1: Product: syz [ 221.149296][ T792] usb 3-1: Manufacturer: syz [ 221.154232][ T792] usb 3-1: SerialNumber: syz [ 221.161618][ T792] usb 3-1: config 0 descriptor?? [ 221.173174][ T792] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 221.378524][ T792] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 221.409641][ T792] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 221.747355][ T30] audit: type=1400 audit(1775691960.204:596): avc: denied { create } for pid=12796 comm="syz.1.3008" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 221.781749][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 221.797098][ T792] usb 3-1: USB disconnect, device number 41 [ 221.807351][ T792] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 221.826843][ T792] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 221.843780][ T792] quatech2 3-1:0.51: device disconnected [ 222.026552][ T5849] usb 4-1: us122l: couldn't allocate write buffer [ 222.038077][ T5849] snd-usb-us122l 4-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 222.058567][ T5849] usb 4-1: USB disconnect, device number 34 [ 222.501106][ T792] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 222.578418][ T30] audit: type=1400 audit(1775691961.034:597): avc: denied { listen } for pid=12825 comm="syz.3.3021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 222.601002][ T30] audit: type=1400 audit(1775691961.034:598): avc: denied { accept } for pid=12825 comm="syz.3.3021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 222.652258][ T792] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.665669][ T792] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 222.680180][ T792] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.689474][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.697628][ T792] usb 2-1: Product: syz [ 222.701961][ T792] usb 2-1: Manufacturer: syz [ 222.706553][ T792] usb 2-1: SerialNumber: syz [ 222.725420][ T792] cdc_mbim 2-1:1.0: skipping garbage [ 222.804511][T12834] syzkaller1: entered promiscuous mode [ 222.810021][T12834] syzkaller1: entered allmulticast mode [ 222.856142][T12838] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3026'. [ 222.927682][T12812] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 223.583647][T12812] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 223.591478][ T792] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 223.599590][ T792] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 223.693566][T12865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3037'. [ 223.798340][ T792] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 223.818718][ T792] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 223.868874][ T792] wwan wwan0: port wwan0mbim0 attached [ 223.890461][ T792] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 76:bd:e6:b3:3c:8b [ 223.936384][ T6026] udevd[6026]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 223.953320][ T792] usb 2-1: USB disconnect, device number 34 [ 223.965714][ T792] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 224.062708][ T792] wwan wwan0: port wwan0mbim0 disconnected [ 224.202844][ T5849] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 224.342772][T12903] overlayfs: failed to clone lowerpath [ 224.381474][ T5849] usb 5-1: Using ep0 maxpacket: 8 [ 224.401447][ T5849] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68 [ 224.410512][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.429271][ T5849] usb 5-1: Product: syz [ 224.447210][ T5849] usb 5-1: Manufacturer: syz [ 224.452206][ T5849] usb 5-1: SerialNumber: syz [ 224.673809][ T5849] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71 [ 224.690911][ T5849] kalmia 5-1:1.0: probe with driver kalmia failed with error -71 [ 224.707768][ T5849] usb 5-1: USB disconnect, device number 36 [ 225.182892][ T5989] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 225.350982][ T5989] usb 4-1: Using ep0 maxpacket: 8 [ 225.362990][ T5989] usb 4-1: unable to get BOS descriptor or descriptor too short [ 225.372570][ T5989] usb 4-1: config 140 has an invalid interface number: 182 but max is 1 [ 225.381225][ T5989] usb 4-1: config 140 has no interface number 1 [ 225.387493][ T5989] usb 4-1: config 140 interface 182 has no altsetting 0 [ 225.396818][ T5989] usb 4-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 225.406099][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.414327][ T5989] usb 4-1: Product: syz [ 225.418648][ T5989] usb 4-1: Manufacturer: syz [ 225.423320][ T5989] usb 4-1: SerialNumber: syz [ 225.650691][ T5989] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 225.715528][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3083'. [ 225.737111][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 225.737124][ T30] audit: type=1400 audit(1775691964.194:600): avc: denied { append } for pid=12979 comm="syz.2.3084" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 225.768175][T12982] vcan0: tx drop: invalid sa for name 0x0000000007fffffe [ 226.006949][T12987] SELinux: failed to load policy [ 226.068987][ T30] audit: type=1400 audit(1775691964.524:601): avc: denied { name_bind } for pid=12990 comm="syz.4.3089" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 226.282310][ T5989] usb 4-1: reset high-speed USB device number 35 using dummy_hcd [ 226.472239][ T5989] usb 4-1: unable to get BOS descriptor or descriptor too short [ 226.487780][ T5989] usb 4-1: device firmware changed [ 226.505279][ T5989] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 226.519024][ T5989] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 226.529870][ T5890] usb 4-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 226.562902][ T5989] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 226.580548][ T5890] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 226.582288][T13011] input: syz0 as /devices/virtual/input/input36 [ 226.589851][ T30] audit: type=1400 audit(1775691965.034:602): avc: denied { firmware_load } for pid=5890 comm="kworker/0:3" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 226.619586][ T5989] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 226.627683][ T5989] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 226.638979][ T5989] usb 4-1: USB disconnect, device number 35 [ 226.679997][ T5989] usb 4-1: [ueagle-atm] ADSL device removed [ 226.820510][T13019] input: syz0 as /devices/virtual/input/input37 [ 227.141185][ T5849] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 227.303568][T13045] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3113'. [ 227.321000][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 227.331106][ T5849] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 227.341039][ T5849] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 227.350818][ T5849] usb 5-1: config 0 interface 0 has no altsetting 0 [ 227.362704][ T5849] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 227.373659][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.383877][ T5849] usb 5-1: Product: syz [ 227.388223][ T5849] usb 5-1: Manufacturer: syz [ 227.392925][ T5849] usb 5-1: SerialNumber: syz [ 227.405276][ T5849] usb 5-1: config 0 descriptor?? [ 227.643955][T13053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.655212][T13053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.661248][ T29] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 227.791773][T13056] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 227.819666][T13057] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.854458][ T53] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.854865][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.863661][ T53] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.880945][ T5849] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 227.882394][ T53] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.889044][ T29] usb 4-1: not running at top speed; connect to a high speed hub [ 227.906285][ T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 227.919009][ T29] usb 4-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 227.929407][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.937456][ T29] usb 4-1: Product: syz [ 227.941773][ T29] usb 4-1: Manufacturer: syz [ 227.946385][ T29] usb 4-1: SerialNumber: syz [ 228.002175][T13056] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.014932][T13056] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 228.026040][T13056] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 228.035852][T13056] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.049022][T13056] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.058099][T13056] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.068607][T13056] usb 3-1: config 0 descriptor?? [ 228.171452][ T29] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 228.178483][ T29] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 228.236317][ T29] usb 4-1: USB disconnect, device number 36 [ 228.481071][T13056] plantronics 0003:047F:FFFF.0029: ignoring exceeding usage max [ 228.502763][T13056] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 228.520628][ T29] usb 5-1: USB disconnect, device number 37 [ 228.747426][ T5934] usb 3-1: USB disconnect, device number 42 [ 228.806622][T13092] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3121'. [ 228.870208][T13096] sg_read: process 1194 (syz.3.3122) changed security contexts after opening file descriptor, this is not allowed. [ 229.394946][ T30] audit: type=1400 audit(1775691967.854:603): avc: denied { mount } for pid=13136 comm="syz.2.3136" name="/" dev="autofs" ino=37965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 229.432074][ T9] IPVS: starting estimator thread 0... [ 229.461873][ T30] audit: type=1400 audit(1775691967.924:604): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 229.525419][T13141] IPVS: using max 45 ests per chain, 108000 per kthread [ 229.574561][ T29] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 229.608051][ T30] audit: type=1400 audit(1775691968.064:605): avc: denied { getopt } for pid=13152 comm="syz.0.3143" lport=51930 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 229.679988][ T30] audit: type=1400 audit(1775691968.134:606): avc: denied { create } for pid=13156 comm="syz.0.3145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 229.711696][ T30] audit: type=1400 audit(1775691968.134:607): avc: denied { write } for pid=13156 comm="syz.0.3145" path="socket:[39028]" dev="sockfs" ino=39028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 229.740947][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 229.750758][ T29] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 229.770699][ T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.796934][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.819033][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.839782][ T29] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.879664][ T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.903655][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.986228][T13169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3149'. [ 229.998283][T13169] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3149'. [ 230.007453][T13169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3149'. [ 230.070789][T13174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3152'. [ 230.102405][ T5934] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 230.164157][ T30] audit: type=1400 audit(1775691968.624:608): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 230.274664][ T5934] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.283439][ T5934] usb 3-1: config 0 has no interface number 0 [ 230.289551][ T5934] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 230.331291][ T5934] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.364901][ T5934] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.391044][ T5934] usb 3-1: config 0 interface 1 has no altsetting 0 [ 230.398411][ T5934] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 230.401112][T13192] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 230.407850][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.439609][ T5934] usb 3-1: config 0 descriptor?? [ 230.519009][T13199] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3163'. [ 230.593018][ T29] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 230.728116][T13213] usbtmc 4-1:16.0: simple usb_control_msg returned 0 [ 230.753218][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 230.765726][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 230.777079][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.799603][ T29] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 230.808966][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.839229][ T29] usb 2-1: config 0 descriptor?? [ 230.855961][ T5934] hid (null): invalid report_count 252767622 [ 230.929474][T13062] usb 4-1: USB disconnect, device number 37 [ 231.068262][ T5934] input: HID 145f:0212 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:145F:0212.002A/input/input38 [ 231.103203][ T5934] input: HID 145f:0212 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:145F:0212.002A/input/input39 [ 231.182371][ T5934] uclogic 0003:145F:0212.002A: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.2-1/input1 [ 231.275612][ T29] itetech 0003:06CB:73F4.002B: item fetching failed at offset 2/41 [ 231.304915][ T29] itetech 0003:06CB:73F4.002B: probe with driver itetech failed with error -22 [ 231.338638][ T5870] usb 3-1: USB disconnect, device number 43 [ 231.379228][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 231.389756][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 231.398235][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 231.407663][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 231.417361][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.457696][ T5934] usb 2-1: USB disconnect, device number 35 [ 231.752309][T13216] chnl_net:caif_netlink_parms(): no params data found [ 231.850098][T13216] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.862570][T13216] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.899756][T13216] bridge_slave_0: entered allmulticast mode [ 231.922309][T13216] bridge_slave_0: entered promiscuous mode [ 231.949238][T13216] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.984657][T13216] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.028295][T13216] bridge_slave_1: entered allmulticast mode [ 232.052886][T13216] bridge_slave_1: entered promiscuous mode [ 232.167641][T13259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3191'. [ 232.196830][T13216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.219816][T13216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.272473][T13216] team0: Port device team_slave_0 added [ 232.280730][T13216] team0: Port device team_slave_1 added [ 232.321121][T13216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.334128][T13216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.379934][T13216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.396159][T13269] netlink: 'syz.0.3194': attribute type 13 has an invalid length. [ 232.405404][T13216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.413188][T13216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.440545][T13062] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 232.448549][T13216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.560475][T13216] hsr_slave_0: entered promiscuous mode [ 232.586147][T13216] hsr_slave_1: entered promiscuous mode [ 232.599184][T13216] debugfs: 'hsr0' already exists in 'hsr' [ 232.606156][T13216] Cannot create hsr debugfs directory [ 232.612505][T13062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.624223][T13062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.635834][T13062] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.664416][T13062] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.682823][T13062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.712337][T13062] usb 2-1: config 0 descriptor?? [ 232.943321][T13216] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 232.965779][T13216] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.978971][T13216] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 233.001773][T13216] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 233.135956][T13062] hid_parser_main: 20 callbacks suppressed [ 233.135975][T13062] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 233.177530][T13062] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 233.195440][T13062] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 233.204237][T13216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.212826][T13062] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 233.228052][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3205'. [ 233.229681][T13216] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.243802][T13062] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 233.248694][T13303] netlink: 'syz.0.3205': attribute type 30 has an invalid length. [ 233.251950][T13062] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 233.290623][T13062] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 233.301686][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3205'. [ 233.330187][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.337347][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.361061][T13306] netlink: 'syz.0.3205': attribute type 30 has an invalid length. [ 233.375938][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.383110][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.406610][ T53] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.417284][ T53] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.453522][T13056] usb 2-1: USB disconnect, device number 36 [ 233.459496][ T53] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.462730][ T5822] Bluetooth: hci0: command tx timeout [ 233.474917][ T53] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.563113][T13216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.739641][T13328] loop1: detected capacity change from 0 to 7 [ 233.752019][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 233.761616][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.775571][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 233.781780][T13216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.785165][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.792360][ T29] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 233.801749][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 233.816815][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.825644][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 233.835236][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.843447][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 233.853037][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.863872][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 233.873478][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.884132][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 233.893758][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.902437][ T8821] ldm_validate_partition_table(): Disk read failed. [ 233.909153][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 233.919291][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.927678][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 233.937271][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.947481][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 233.957075][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.965181][ T8821] Dev loop1: unable to read RDB block 0 [ 233.981354][ T8821] loop1: unable to read partition table [ 233.983716][ T29] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 233.987224][ T8821] loop1: partition table beyond EOD, truncated [ 234.007431][T13328] ldm_validate_partition_table(): Disk read failed. [ 234.016527][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.017621][T13328] Dev loop1: unable to read RDB block 0 [ 234.038968][T13328] loop1: unable to read partition table [ 234.039007][ T29] usb 3-1: Product: syz [ 234.045128][T13328] loop1: partition table beyond EOD, truncated [ 234.056637][T13328] loop_reread_partitions: partition scan of loop1 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 234.058852][T13216] veth0_vlan: entered promiscuous mode [ 234.081163][ T29] usb 3-1: Manufacturer: syz [ 234.091972][ T29] usb 3-1: SerialNumber: syz [ 234.109507][ T29] usb 3-1: config 0 descriptor?? [ 234.125333][T13216] veth1_vlan: entered promiscuous mode [ 234.222319][T13216] veth0_macvtap: entered promiscuous mode [ 234.240111][T13216] veth1_macvtap: entered promiscuous mode [ 234.261747][T13216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.283481][T13216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.303184][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.328955][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.373985][T13062] usb 3-1: USB disconnect, device number 44 [ 234.387334][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.412627][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.492919][T13344] team0 (unregistering): Port device team_slave_0 removed [ 234.502500][T13344] team0 (unregistering): Port device team_slave_1 removed [ 234.527180][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.536150][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.637905][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.663255][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.705610][ T30] audit: type=1400 audit(1775691973.144:609): avc: denied { mounton } for pid=13216 comm="syz-executor" path="/root/syzkaller.RJfTRq/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 234.756700][ T30] audit: type=1400 audit(1775691973.194:610): avc: denied { mounton } for pid=13216 comm="syz-executor" path="/root/syzkaller.RJfTRq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 234.834891][ T30] audit: type=1400 audit(1775691973.194:611): avc: denied { mounton } for pid=13216 comm="syz-executor" path="/root/syzkaller.RJfTRq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=39694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 234.921290][ T30] audit: type=1400 audit(1775691973.204:612): avc: denied { mounton } for pid=13216 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 235.009317][ T30] audit: type=1400 audit(1775691973.394:613): avc: denied { read append } for pid=13355 comm="syz.5.3172" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 235.059385][ T30] audit: type=1400 audit(1775691973.514:614): avc: denied { firmware_load } for pid=13355 comm="syz.5.3172" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 235.214827][ T30] audit: type=1400 audit(1775691973.564:615): avc: denied { sys_module } for pid=13361 comm="syz.1.3226" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 235.296811][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3228'. [ 235.535561][ T5822] Bluetooth: hci0: command tx timeout [ 235.563736][ T30] audit: type=1400 audit(1775691974.024:616): avc: denied { setopt } for pid=13384 comm="syz.3.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 235.608810][ T30] audit: type=1400 audit(1775691974.064:617): avc: denied { create } for pid=13386 comm="syz.3.3235" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 235.645549][ T30] audit: type=1400 audit(1775691974.064:618): avc: denied { map } for pid=13386 comm="syz.3.3235" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 235.754412][T13356] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.772318][T13360] syz.5.3172 (13360) used greatest stack depth: 19672 bytes left [ 235.782711][T13356] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 235.797374][T13356] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.803570][T13356] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 235.813253][T13356] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 235.819409][T13356] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 235.884446][T13356] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 235.891167][T13356] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 235.903238][T13356] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 236.151131][T13062] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 236.160925][ T5992] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 236.303452][T13062] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 236.321878][T13062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.342892][ T5992] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 236.355376][ T5992] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 236.365773][T13062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.376013][ T5992] usb 4-1: config 0 interface 0 has no altsetting 0 [ 236.384266][T13062] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 236.412483][ T5992] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 236.423951][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 236.439517][T13062] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 236.458838][ T5992] usb 4-1: Product: syz [ 236.473242][ T5992] usb 4-1: Manufacturer: syz [ 236.477861][ T5992] usb 4-1: SerialNumber: syz [ 236.495492][T13062] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 236.524903][ T5992] usb 4-1: config 0 descriptor?? [ 236.534537][T13062] usb 3-1: Manufacturer: syz [ 236.548017][ T5992] hub 4-1:0.0: bad descriptor, ignoring hub [ 236.556796][T13062] usb 3-1: config 0 descriptor?? [ 236.570671][ T5992] hub 4-1:0.0: probe with driver hub failed with error -5 [ 236.621355][ T5992] usb 4-1: selecting invalid altsetting 0 [ 237.017868][T13062] appleir 0003:05AC:8243.002D: unknown main item tag 0x0 [ 237.051851][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 237.067888][T13062] appleir 0003:05AC:8243.002D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 237.302978][ T5934] usb 3-1: USB disconnect, device number 45 [ 237.472763][T13391] usb 4-1: reset high-speed USB device number 38 using dummy_hcd [ 237.857258][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 237.857263][ T5812] Bluetooth: hci3: command 0x0c1a tx timeout [ 237.931639][ T5822] Bluetooth: hci0: command 0x0419 tx timeout [ 238.079904][ T5992] usb 4-1: USB disconnect, device number 38 [ 239.132103][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 239.220048][T13592] loop2: detected capacity change from 0 to 7 [ 239.234700][ T8821] Dev loop2: unable to read RDB block 7 [ 239.240290][ T8821] loop2: unable to read partition table [ 239.278644][ T8821] loop2: partition table beyond EOD, truncated [ 239.303571][T13595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3280'. [ 239.325521][T13592] Dev loop2: unable to read RDB block 7 [ 239.342641][T13592] loop2: unable to read partition table [ 239.351112][T13592] loop2: partition table beyond EOD, truncated [ 239.381212][T13592] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 239.426222][ T5179] Dev loop2: unable to read RDB block 7 [ 239.436074][ T5179] loop2: unable to read partition table [ 239.457208][ T5179] loop2: partition table beyond EOD, truncated [ 239.508345][T13612] loop5: detected capacity change from 0 to 7 [ 239.539737][T13612] Dev loop5: unable to read RDB block 7 [ 239.562587][T13612] loop5: unable to read partition table [ 239.576880][T13612] loop5: partition table beyond EOD, truncated [ 239.595619][T13612] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 239.931216][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 239.937417][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 240.001288][ T29] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 240.011565][ T5822] Bluetooth: hci0: command 0x0419 tx timeout [ 240.177866][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 240.190267][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.210978][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.233924][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 240.283097][ T29] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 240.304704][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.330796][ T29] usb 3-1: config 0 descriptor?? [ 240.762326][T13688] overlayfs: failed to clone upperpath [ 240.768302][ T29] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 240.799696][ T29] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 240.832078][ T29] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 240.839055][ T29] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 240.893181][ T29] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 240.928305][ T29] input: HID 0955:7214 Haptics as /devices/virtual/input/input40 [ 240.977972][T13627] random: crng reseeded on system resumption [ 241.018032][ T29] shield 0003:0955:7214.002E: Registered Thunderstrike controller [ 241.083027][ T29] shield 0003:0955:7214.002E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 241.105445][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 241.105459][ T30] audit: type=1400 audit(1775691979.554:630): avc: denied { read } for pid=13707 comm="syz.1.3313" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 241.144340][ T30] audit: type=1400 audit(1775691979.554:631): avc: denied { open } for pid=13707 comm="syz.1.3313" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 241.207256][ T5849] shield 0003:0955:7214.002E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 241.222699][ T5849] shield 0003:0955:7214.002E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 241.262980][ T29] usb 3-1: USB disconnect, device number 46 [ 241.271298][ T5849] shield 0003:0955:7214.002E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 241.291569][ T30] audit: type=1400 audit(1775691979.594:632): avc: denied { ioctl } for pid=13707 comm="syz.1.3313" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 241.318184][T13717] netlink: 'syz.3.3316': attribute type 1 has an invalid length. [ 241.339180][ T5849] shield 0003:0955:7214.002E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 241.773465][ T5849] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 241.887610][ T30] audit: type=1400 audit(1775691980.344:633): avc: denied { create } for pid=13734 comm="syz.0.3324" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 241.953581][ T5849] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 241.970894][ T5849] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 242.000949][ T5849] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 242.030062][ T5849] usb 2-1: config 220 has no interface number 2 [ 242.045129][ T5849] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 242.080937][ T5849] usb 2-1: config 220 interface 0 has no altsetting 0 [ 242.089482][ T5849] usb 2-1: config 220 interface 76 has no altsetting 0 [ 242.097779][ T5822] Bluetooth: hci0: command 0x0419 tx timeout [ 242.107875][ T5849] usb 2-1: config 220 interface 1 has no altsetting 0 [ 242.116521][ T5849] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 242.125867][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.135093][ T5849] usb 2-1: Product: syz [ 242.139310][ T5849] usb 2-1: Manufacturer: syz [ 242.143926][ T5849] usb 2-1: SerialNumber: syz [ 242.367550][ T5849] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 242.381993][ T5849] uvcvideo 2-1:220.0: No valid video chain found. [ 242.403171][ T5849] usb 2-1: selecting invalid altsetting 0 [ 242.436854][ T5849] usb 2-1: selecting invalid altsetting 0 [ 242.449224][ T5849] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 242.479186][ T5849] usb 2-1: USB disconnect, device number 37 [ 242.764853][ T30] audit: type=1400 audit(1775691981.224:634): avc: denied { add_name } for pid=13758 comm="syz.5.3334" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.787561][T13759] o2cb: This node has not been configured. [ 242.793972][T13759] o2cb: Cluster check failed. Fix errors before retrying. [ 242.801642][T13759] (syz.5.3334,13759,1):user_dlm_register:674 ERROR: status = -22 [ 242.812019][ T30] audit: type=1400 audit(1775691981.244:635): avc: denied { create } for pid=13758 comm="syz.5.3334" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 242.832549][T13759] (syz.5.3334,13759,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 242.846263][ T30] audit: type=1400 audit(1775691981.244:636): avc: denied { associate } for pid=13758 comm="syz.5.3334" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 242.896581][ T30] audit: type=1400 audit(1775691981.354:637): avc: denied { read write } for pid=13216 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 242.965185][ T30] audit: type=1400 audit(1775691981.384:638): avc: denied { open } for pid=13216 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.021925][T13749] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.028360][T13749] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 243.056875][ T30] audit: type=1400 audit(1775691981.384:639): avc: denied { ioctl } for pid=13216 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.120984][T13749] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 243.126975][T13749] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 243.513368][ T5849] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 243.686316][T13794] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3345'. [ 243.715980][ T5849] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 243.728756][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.740232][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.760776][ T5849] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 243.780906][ T5849] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 243.800264][ T5849] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 243.816505][ T5849] usb 4-1: Manufacturer: syz [ 243.824864][ T5849] usb 4-1: config 0 descriptor?? [ 244.237049][ T5849] appleir 0003:05AC:8243.002F: unknown main item tag 0x0 [ 244.261743][ T5849] appleir 0003:05AC:8243.002F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 244.331273][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 244.392220][T13807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3350'. [ 244.402582][T13807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3350'. [ 245.051276][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 245.132022][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 245.138119][ T5822] Bluetooth: hci0: command 0x0419 tx timeout [ 245.196039][T13843] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 245.301761][T13849] loop2: detected capacity change from 0 to 7 [ 245.323740][T13849] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 245.329078][T13849] loop2: partition table partially beyond EOD, truncated [ 245.341337][T13849] loop2: p1 size 284998237 extends beyond EOD, truncated [ 245.491618][ T8821] udevd[8821]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 245.983683][ T5849] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 245.993148][T13883] netlink: 'syz.2.3384': attribute type 1 has an invalid length. [ 246.001073][T13883] netlink: 'syz.2.3384': attribute type 6 has an invalid length. [ 246.009035][T13883] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3384'. [ 246.128625][T13892] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3388'. [ 246.173133][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 246.185214][ T5849] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 246.203808][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.226486][ T5849] usb 6-1: config 0 descriptor?? [ 246.234357][T13872] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 246.303245][ T5992] usb 4-1: USB disconnect, device number 39 [ 246.395237][T13904] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 246.404502][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 246.404515][ T30] audit: type=1400 audit(1775691984.854:646): avc: denied { mounton } for pid=13901 comm="syz.2.3393" path="/611/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 246.436518][T13904] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 246.708259][ T5849] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0 [ 246.720906][ T5849] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0 [ 246.731290][ T5849] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0 [ 246.749757][ T5849] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0 [ 246.766895][ T5849] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0 [ 246.780897][ T5849] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0 [ 246.797910][ T5849] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0 [ 246.809645][ T5849] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0 [ 246.831156][ T5849] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0 [ 246.850905][ T5849] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0 [ 246.860341][ T5849] asus 0003:0B05:1ABE.0030: unbalanced collection at end of report description [ 246.879997][ T5849] asus 0003:0B05:1ABE.0030: Asus hid parse failed: -22 [ 246.890381][ T5849] asus 0003:0B05:1ABE.0030: probe with driver asus failed with error -22 [ 246.925727][ T5849] usb 6-1: USB disconnect, device number 2 [ 247.399490][ T30] audit: type=1400 audit(1775691985.854:647): avc: denied { name_connect } for pid=13930 comm="syz.2.3403" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 247.920959][ T5934] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 248.101057][ T5934] usb 6-1: Using ep0 maxpacket: 8 [ 248.125342][ T5934] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 248.164202][ T5934] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 248.366646][T13970] xt_hashlimit: size too large, truncated to 1048576 [ 248.600925][ T5934] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 248.610724][ T5934] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 248.631092][ T5934] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.651018][ T5934] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 248.679094][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.840010][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.849873][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.901878][ T5934] usb 6-1: GET_CAPABILITIES returned 0 [ 248.907402][ T5934] usbtmc 6-1:16.0: can't read capabilities [ 249.060918][ T5849] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 249.180052][T13943] usbtmc 6-1:16.0: stb usb_control_msg returned -71 [ 249.180857][T13056] usb 6-1: USB disconnect, device number 3 [ 249.204515][ T5934] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 249.226702][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 249.248230][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50064, setting to 1024 [ 249.269584][ T5849] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 249.278972][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.288539][ T5849] usb 3-1: config 0 descriptor?? [ 249.372315][ T5934] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.382999][ T5934] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.394397][ T5934] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 249.410188][ T5934] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.419400][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.427543][ T5934] usb 2-1: Product: syz [ 249.431889][ T5934] usb 2-1: Manufacturer: syz [ 249.436474][ T5934] usb 2-1: SerialNumber: syz [ 249.449501][ T5934] cdc_mbim 2-1:1.0: skipping garbage [ 249.591677][ T5992] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 249.703227][ T5849] cm6533_jd 0003:0D8C:0022.0031: invalid report_count 16959 [ 249.720962][ T5849] cm6533_jd 0003:0D8C:0022.0031: item 0 2 1 9 parsing failed [ 249.728703][ T5849] cm6533_jd 0003:0D8C:0022.0031: parse failed [ 249.740995][ T5849] cm6533_jd 0003:0D8C:0022.0031: probe with driver cm6533_jd failed with error -22 [ 249.742831][ T5992] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 249.766425][ T5992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.790187][ T5992] usb 4-1: config 0 descriptor?? [ 249.798316][ T5992] cp210x 4-1:0.0: cp210x converter detected [ 249.907157][T13062] usb 3-1: USB disconnect, device number 47 [ 249.965775][T14015] netlink: 'syz.0.3442': attribute type 21 has an invalid length. [ 249.974930][T14015] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3442'. [ 249.985636][T14015] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3442'. [ 250.003817][T14015] netlink: 'syz.0.3442': attribute type 21 has an invalid length. [ 250.018033][T14015] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3442'. [ 250.027501][T14015] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3442'. [ 250.096716][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.204998][ T5992] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 250.235475][ T5992] usb 4-1: cp210x converter now attached to ttyUSB0 [ 250.419378][T14038] sctp: [Deprecated]: syz.0.3451 (pid 14038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.419378][T14038] Use struct sctp_sack_info instead [ 250.456041][ T5934] cdc_mbim 2-1:1.0: bind() failure [ 250.480605][T13056] usb 4-1: USB disconnect, device number 40 [ 250.485252][ T5934] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 250.515162][T13056] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 250.519394][ T5934] cdc_ncm 2-1:1.1: bind() failure [ 250.552796][T13056] cp210x 4-1:0.0: device disconnected [ 250.569768][ T5934] usb 2-1: USB disconnect, device number 38 [ 251.088795][T14063] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 251.119608][T14067] dummy0: entered promiscuous mode [ 251.127745][T14067] dummy0: left promiscuous mode [ 251.309637][ T30] audit: type=1800 audit(1775691989.764:648): pid=14072 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3464" name="nullb0" dev="tmpfs" ino=1824 res=0 errno=0 [ 251.420624][ T30] audit: type=1400 audit(1775691989.814:649): avc: denied { ioctl } for pid=14073 comm="syz.5.3465" path="socket:[41803]" dev="sockfs" ino=41803 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 251.753176][ T5849] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 251.942213][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.956020][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.986450][ T5849] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.020262][ T5849] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.031014][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.061495][ T5849] usb 4-1: config 0 descriptor?? [ 252.121133][ T30] audit: type=1400 audit(1775691990.574:650): avc: denied { create } for pid=14090 comm="syz.5.3472" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 252.417798][T14111] sock: sock_set_timeout: `syz.0.3480' (pid 14111) tries to set negative timeout [ 252.532159][ T5849] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 252.724472][ T5992] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 252.803350][ T5849] usb 4-1: USB disconnect, device number 41 [ 252.903969][ T5992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.915547][ T5992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.925741][ T5992] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 252.934964][ T5992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.945605][ T5992] usb 2-1: config 0 descriptor?? [ 253.339281][T14146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.357447][ T5992] hid_parser_main: 442 callbacks suppressed [ 253.357467][ T5992] cm6533_jd 0003:0D8C:0022.0033: unknown main item tag 0x0 [ 253.381400][ T5992] cm6533_jd 0003:0D8C:0022.0033: unknown main item tag 0x0 [ 253.396294][ T5992] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0033/input/input41 [ 253.417166][ T5992] cm6533_jd 0003:0D8C:0022.0033: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 253.587249][ T5992] usb 2-1: USB disconnect, device number 39 [ 253.768276][ T30] audit: type=1400 audit(1775691992.224:651): avc: denied { create } for pid=14162 comm="syz.5.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 253.788476][ T30] audit: type=1400 audit(1775691992.224:652): avc: denied { write } for pid=14162 comm="syz.5.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 254.130970][ T5934] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 254.201910][ T5849] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 254.311128][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 254.329522][ T5934] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 254.339037][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.347700][ T5934] usb 4-1: Product: syz [ 254.354882][ T5934] usb 4-1: Manufacturer: syz [ 254.359489][ T5934] usb 4-1: SerialNumber: syz [ 254.372033][ T5934] usb 4-1: config 0 descriptor?? [ 254.372368][ T5849] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.379898][ T5934] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 254.406981][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 254.419398][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 254.431405][ T5849] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.440808][ T30] audit: type=1400 audit(1775691992.894:653): avc: denied { read } for pid=14201 comm="syz.1.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 254.444747][ T5849] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.473589][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.484218][ T5849] usb 6-1: config 0 descriptor?? [ 254.896186][ T5849] plantronics 0003:047F:FFFF.0034: ignoring exceeding usage max [ 254.908121][ T5849] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 254.980965][T13062] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 255.134415][T13062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.145490][T13062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.155452][T13062] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 255.168737][T13062] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 255.177963][T13062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.188574][T13062] usb 2-1: config 0 descriptor?? [ 255.237254][T14214] bridge0: port 3(vlan3) entered blocking state [ 255.244164][T14214] bridge0: port 3(vlan3) entered disabled state [ 255.250605][T14214] vlan3: entered allmulticast mode [ 255.255884][T14214] dummy0: entered allmulticast mode [ 255.262688][T14214] vlan3: entered promiscuous mode [ 255.267756][T14214] dummy0: entered promiscuous mode [ 255.394359][ T5934] gspca_sonixj: reg_w1 err -71 [ 255.471205][ T5934] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 255.483983][ T5934] usb 4-1: USB disconnect, device number 42 [ 255.623875][T13062] plantronics 0003:047F:FFFF.0035: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 255.971421][ T30] audit: type=1400 audit(1775691994.434:654): avc: denied { ioctl } for pid=14223 comm="syz.0.3528" path="socket:[42427]" dev="sockfs" ino=42427 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 256.269644][T13056] usb 2-1: USB disconnect, device number 40 [ 256.446876][ T30] audit: type=1400 audit(1775691994.904:655): avc: denied { getopt } for pid=14247 comm="syz.3.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 256.830937][ T5934] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 256.944835][ C1] blk_print_req_error: 30 callbacks suppressed [ 256.944853][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 256.963073][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.972696][ C1] buffer_io_error: 30 callbacks suppressed [ 256.972710][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 256.986432][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.996028][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 257.002139][ T5934] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 257.003911][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.021826][ T5934] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 257.024327][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 257.042030][ C1] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.051007][ T5934] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 257.051626][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 257.068479][ C1] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.078074][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 257.085229][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.085943][ C1] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.103400][ C1] Buffer I/O error on dev loop6, logical block 5, async page read [ 257.111288][ C1] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.120858][ C1] Buffer I/O error on dev loop6, logical block 6, async page read [ 257.135291][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.144915][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.146965][ T5849] usb 6-1: USB disconnect, device number 4 [ 257.154952][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.168110][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 257.175995][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 257.231302][T14258] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 257.276734][ T5934] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 257.508531][T14287] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 257.608493][ T5849] usb 4-1: USB disconnect, device number 43 [ 258.023955][ T30] audit: type=1400 audit(1775691996.484:656): avc: denied { getopt } for pid=14315 comm="syz.5.3568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.114544][T13062] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 258.133084][T14320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14320 comm=syz.0.3570 [ 258.221614][ T139] Bluetooth: hci5: Frame reassembly failed (-84) [ 258.228087][ T139] Bluetooth: hci5: Frame reassembly failed (-84) [ 258.302134][T13062] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 258.310787][T13062] usb 2-1: config 0 has no interface number 0 [ 258.317035][T13062] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.332485][T13062] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 258.341635][T13062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.349613][T13062] usb 2-1: Product: syz [ 258.353906][T13062] usb 2-1: Manufacturer: syz [ 258.358490][T13062] usb 2-1: SerialNumber: syz [ 258.365391][T13062] usb 2-1: config 0 descriptor?? [ 258.374491][T13062] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 258.850988][ T5849] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 259.010934][ T5849] usb 3-1: Using ep0 maxpacket: 32 [ 259.017597][ T5849] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 259.027354][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.037113][ T5849] usb 3-1: config 0 descriptor?? [ 259.249098][ T5849] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 259.259724][ T5849] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 259.274045][ T5849] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 259.281569][ T5849] usb 3-1: media controller created [ 259.296674][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.457545][ T5849] az6027: usb out operation failed. (-71) [ 259.464455][ T5849] az6027: usb out operation failed. (-71) [ 259.470238][ T5849] stb0899_attach: Driver disabled by Kconfig [ 259.476694][ T5849] az6027: no front-end attached [ 259.476694][ T5849] [ 259.484042][ T5849] az6027: usb out operation failed. (-71) [ 259.489794][ T5849] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 259.498469][ T5849] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input42 [ 259.511921][ T5849] dvb-usb: schedule remote query interval to 400 msecs. [ 259.519015][ T5849] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 259.529863][ T5849] usb 3-1: USB disconnect, device number 48 [ 259.558110][ T5849] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 259.571033][T13062] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 259.732381][T13062] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.743082][T13062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.754292][T13062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.764173][T13062] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 259.773365][T13062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.783592][T13062] usb 4-1: config 0 descriptor?? [ 260.215951][T13062] hid-rmi 0003:0461:4E72.0036: unknown main item tag 0x2 [ 260.241792][T13062] hid-rmi 0003:0461:4E72.0036: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.3-1/input0 [ 260.261426][ T5822] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 260.268384][ T5812] Bluetooth: hci5: command 0x1003 tx timeout [ 260.431152][ T5934] usb 4-1: USB disconnect, device number 44 [ 260.892078][ T5934] usb 2-1: USB disconnect, device number 41 [ 260.912975][ T5934] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 261.014847][T14403] input: syz1 as /devices/virtual/input/input43 [ 261.183797][ T30] audit: type=1400 audit(1775691999.644:657): avc: denied { append } for pid=14412 comm="syz.3.3612" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 261.234914][ T5179] ldm_validate_partition_table(): Disk read failed. [ 261.255227][ T5179] Dev loop6: unable to read RDB block 0 [ 261.262545][ T5179] loop6: unable to read partition table [ 261.268342][ T5179] loop6: partition table beyond EOD, truncated [ 261.273079][ T5934] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 261.331911][T13062] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 261.441604][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 261.447861][ T5934] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 261.459284][ T5934] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 261.469566][T14428] 9pnet: p9_errstr2errno: server reported unknown error [ 261.476672][ T5934] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.487364][ T5934] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.500392][ T5992] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 261.508116][T13062] usb 6-1: Using ep0 maxpacket: 16 [ 261.513498][ T5934] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.523621][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.532306][T13062] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.544393][T13062] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.555056][T13062] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 261.571231][T13062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.580772][T13062] usb 6-1: config 0 descriptor?? [ 261.673141][ T5992] usb 4-1: unable to get BOS descriptor or descriptor too short [ 261.685157][ T5992] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 261.694645][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.702729][ T5992] usb 4-1: Product: syz [ 261.707106][ T5992] usb 4-1: Manufacturer: syz [ 261.711825][ T5992] usb 4-1: SerialNumber: syz [ 261.777414][ T5934] usb 2-1: GET_CAPABILITIES returned 0 [ 261.791054][ T5934] usbtmc 2-1:16.0: can't read capabilities [ 261.998174][ T5934] usb 2-1: USB disconnect, device number 42 [ 262.013379][T13062] kye 0003:0458:5016.0037: control desc unexpectedly large [ 262.027193][T13062] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0037/input/input44 [ 262.104020][T13062] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0037/input/input45 [ 262.191527][T13062] kye 0003:0458:5016.0037: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 262.334571][ T5992] usb 4-1: unit 5 not found! [ 262.339621][ T5992] usb 4-1: unit 3 not found! [ 262.742638][ T5992] snd-usb-us122l 4-1:1.1: usb_set_interface error [ 262.749329][ T5992] snd-usb-us122l 4-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 262.786769][ T5992] usb 4-1: USB disconnect, device number 45 [ 262.821833][T13056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.015988][ T30] audit: type=1400 audit(1775692001.474:658): avc: denied { nlmsg_read } for pid=14469 comm="syz.2.3637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.016008][T14470] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3637'. [ 263.132678][ C1] kye 0003:0458:5016.0037: usb_submit_urb(ctrl) failed: -1 [ 263.220938][T13062] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 263.384622][T13062] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 263.394306][T13062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.404717][T13062] usb 2-1: Product: syz [ 263.408889][T13062] usb 2-1: Manufacturer: syz [ 263.413582][T13056] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 263.427874][T13062] usb 2-1: SerialNumber: syz [ 263.445586][T13062] usb 2-1: config 0 descriptor?? [ 263.494761][T14491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.520956][ T30] audit: type=1326 audit(1775692001.974:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14488 comm="syz.3.3646" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f938d19c819 code=0x0 [ 263.572377][T13056] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.583180][T13056] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.593514][T13056] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 263.604972][T13056] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 263.613800][T13056] usb 3-1: SerialNumber: syz [ 263.839726][T13056] usb 3-1: 0:2 : does not exist [ 263.851114][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.861017][T13062] usb 2-1: Firmware version (0.0) predates our first public release. [ 263.879604][T13062] usb 2-1: Please update to version 0.2 or newer [ 263.889941][T13062] usb 2-1: Firmware: build [ 263.900247][T13056] usb 3-1: USB disconnect, device number 49 [ 263.903241][ T5934] usb 6-1: USB disconnect, device number 5 [ 263.974138][ T6026] udevd[6026]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.103318][T13062] usb 2-1: USB disconnect, device number 43 [ 264.334620][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.354695][ T30] audit: type=1800 audit(1775692002.814:660): pid=14519 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.3658" name="/newroot/994/pids.events" dev="tmpfs" ino=5083 res=0 errno=0 [ 264.440309][ T5849] IPVS: starting estimator thread 0... [ 264.440734][T14526] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 264.546155][T14530] IPVS: using max 45 ests per chain, 108000 per kthread [ 264.561018][T13056] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 264.721219][T13056] usb 6-1: Using ep0 maxpacket: 32 [ 264.743338][T13056] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 264.759788][T13056] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.779004][T14552] macsec0: entered promiscuous mode [ 264.779275][T13056] usb 6-1: config 0 descriptor?? [ 264.789601][T14552] macsec0: left promiscuous mode [ 264.800366][T13056] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 264.863227][T14554] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 264.884000][T14558] dvmrp1: entered allmulticast mode [ 264.901898][ T5849] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 264.906867][T14558] dvmrp1: left allmulticast mode [ 264.912006][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.074187][ T5849] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.105558][ T5849] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.134442][ T5849] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 265.151711][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 265.165315][ T5849] usb 3-1: SerialNumber: syz [ 265.307396][ T5822] Bluetooth: hci2: unexpected event for opcode 0x080d [ 265.342249][T14574] block nbd3: shutting down sockets [ 265.393046][ T5849] usb 3-1: 0:2 : does not exist [ 265.491396][ T5849] usb 3-1: USB disconnect, device number 50 [ 265.535607][ T8821] udevd[8821]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.655353][T14596] overlayfs: failed to clone upperpath [ 265.662037][T14598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3694'. [ 265.673470][T14597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.674131][T14596] overlayfs: failed to clone upperpath [ 265.809694][T13056] gspca_vc032x: reg_w err -71 [ 265.810938][ T5934] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 265.820540][T13056] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.827652][T13056] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.836560][T13056] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.841922][T13056] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.847255][T13056] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.853401][T13056] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.858683][T13056] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.864047][T13056] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.869319][T13056] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.874628][T13056] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.879893][T13056] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.886060][T13056] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.893126][T13056] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.898414][T13056] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.903857][T13056] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.909131][T13056] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.914440][T13056] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.919711][T13056] gspca_vc032x: I2c Bus Busy Wait 00 [ 265.925010][T13056] gspca_vc032x: Unknown sensor... [ 265.930075][T13056] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 265.938452][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.949484][T13056] usb 6-1: USB disconnect, device number 6 [ 265.970990][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 265.977970][ T5934] usb 2-1: unable to get BOS descriptor or descriptor too short [ 265.988332][ T5934] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 266.005033][ T5934] usb 2-1: config 0 has no interface number 0 [ 266.023399][ T5934] usb 2-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 266.048370][ T5934] usb 2-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 266.069977][ T5934] usb 2-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 266.081924][ T5934] usb 2-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 266.095616][ T5934] usb 2-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 266.105919][ T5934] usb 2-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 266.116229][ T5934] usb 2-1: config 0 interface 122 has no altsetting 0 [ 266.125511][ T5934] usb 2-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 266.135632][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.135770][T14613] [ 266.143860][ T5934] usb 2-1: Product: syz [ 266.145928][T14613] ====================================================== [ 266.150061][ T5934] usb 2-1: Manufacturer: syz [ 266.157049][T14613] WARNING: possible circular locking dependency detected [ 266.157060][T14613] syzkaller #0 Tainted: G L [ 266.157070][T14613] ------------------------------------------------------ [ 266.157076][T14613] syz.2.3700/14613 is trying to acquire lock: [ 266.157086][T14613] ffffffff8e9ab8a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 266.157137][T14613] [ 266.157137][T14613] but task is already holding lock: [ 266.157142][T14613] ffffffff8e84a690 (cgroup_threadgroup_rwsem){++++}-{0:0} [ 266.162368][ T5934] usb 2-1: SerialNumber: syz [ 266.168703][T14613] , at: copy_process+0x4632/0x7a40 [ 266.176039][ T5934] usb 2-1: config 0 descriptor?? [ 266.181644][T14613] [ 266.181644][T14613] which lock already depends on the new lock. [ 266.181644][T14613] [ 266.181651][T14613] [ 266.181651][T14613] the existing dependency chain (in reverse order) is: [ 266.181656][T14613] [ 266.181656][T14613] -> #8 (cgroup_threadgroup_rwsem){++++}-{0:0}: [ 266.181681][T14613] percpu_down_write+0x53/0x3e0 [ 266.181702][T14613] cgroup_procs_write_start+0x568/0x890 [ 266.181720][T14613] __cgroup_procs_write+0xd7/0x730 [ 266.189449][T14590] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 266.197437][T14613] cgroup_procs_write+0x26/0x60 [ 266.205424][T14590] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 266.211855][T14613] cgroup_file_write+0x1e9/0x790 [ 266.296004][T14613] kernfs_fop_write_iter+0x3e0/0x5f0 [ 266.301802][T14613] vfs_write+0x6ac/0x1070 [ 266.306639][T14613] ksys_write+0x12a/0x250 [ 266.311481][T14613] do_syscall_64+0x106/0xf80 [ 266.316585][T14613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.322989][T14613] [ 266.322989][T14613] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 266.330701][T14613] cpus_read_lock+0x42/0x170 [ 266.335802][T14613] static_key_disable+0x12/0x20 [ 266.341161][T14613] __inet_hash_connect+0x1378/0x1e40 [ 266.346953][T14613] tcp_v4_connect+0xeb0/0x1b40 [ 266.352223][T14613] __inet_stream_connect+0x208/0xfa0 [ 266.358012][T14613] inet_stream_connect+0x57/0xa0 [ 266.363452][T14613] __sys_connect_file+0x141/0x1a0 [ 266.368980][T14613] __sys_connect+0x141/0x170 [ 266.374083][T14613] __x64_sys_connect+0x72/0xb0 [ 266.379372][T14613] do_syscall_64+0x106/0xf80 [ 266.384464][T14613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.390865][T14613] [ 266.390865][T14613] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 266.398489][T14613] lock_sock_nested+0x41/0xf0 [ 266.403676][T14613] inet_shutdown+0x67/0x410 [ 266.408678][T14613] nbd_mark_nsock_dead+0xae/0x5c0 [ 266.414210][T14613] sock_shutdown+0x16b/0x200 [ 266.419305][T14613] nbd_ioctl+0x25e/0xd30 [ 266.424044][T14613] blkdev_ioctl+0x5ad/0x6f0 [ 266.429053][T14613] __x64_sys_ioctl+0x18e/0x210 [ 266.434321][T14613] do_syscall_64+0x106/0xf80 [ 266.439410][T14613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.445803][T14613] [ 266.445803][T14613] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 266.453425][T14613] __mutex_lock+0x1a2/0x1b90 [ 266.458512][T14613] nbd_queue_rq+0x428/0x1080 [ 266.463606][T14613] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 266.469653][T14613] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 266.476484][T14613] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 266.482970][T14613] blk_mq_run_hw_queue+0x23c/0x670 [ 266.488582][T14613] blk_mq_dispatch_list+0x51d/0x1360 [ 266.494373][T14613] blk_mq_flush_plug_list+0x130/0x600 [ 266.500252][T14613] __blk_flush_plug+0x2c4/0x4b0 [ 266.505604][T14613] __submit_bio+0x584/0x6c0 [ 266.510608][T14613] submit_bio_noacct_nocheck+0x562/0xc10 [ 266.516744][T14613] submit_bio_noacct+0xd17/0x2010 [ 266.522268][T14613] submit_bh_wbc+0x59c/0x770 [ 266.527364][T14613] block_read_full_folio+0x264/0x8e0 [ 266.533155][T14613] filemap_read_folio+0xfc/0x3b0 [ 266.538598][T14613] do_read_cache_folio+0x2d7/0x6b0 [ 266.544212][T14613] read_part_sector+0xd1/0x370 [ 266.549478][T14613] adfspart_check_ICS+0x93/0x910 [ 266.554914][T14613] bdev_disk_changed+0x7f8/0xc80 [ 266.560356][T14613] blkdev_get_whole+0x187/0x290 [ 266.565708][T14613] bdev_open+0x2c7/0xe40 [ 266.570451][T14613] blkdev_open+0x34e/0x4f0 [ 266.575369][T14613] do_dentry_open+0x6d8/0x1660 [ 266.580632][T14613] vfs_open+0x82/0x3f0 [ 266.585204][T14613] path_openat+0x208c/0x31a0 [ 266.590297][T14613] do_file_open+0x20e/0x430 [ 266.595301][T14613] do_sys_openat2+0x10d/0x1e0 [ 266.600481][T14613] __x64_sys_openat+0x12d/0x210 [ 266.605840][T14613] do_syscall_64+0x106/0xf80 [ 266.610941][T14613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.617347][T14613] [ 266.617347][T14613] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 266.624535][T14613] __mutex_lock+0x1a2/0x1b90 [ 266.629628][T14613] nbd_queue_rq+0xba/0x1080 [ 266.634628][T14613] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 266.640679][T14613] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 266.647509][T14613] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 266.653998][T14613] blk_mq_run_hw_queue+0x23c/0x670 [ 266.659611][T14613] blk_mq_dispatch_list+0x51d/0x1360 [ 266.665399][T14613] blk_mq_flush_plug_list+0x130/0x600 [ 266.671280][T14613] __blk_flush_plug+0x2c4/0x4b0 [ 266.676633][T14613] __submit_bio+0x584/0x6c0 [ 266.681636][T14613] submit_bio_noacct_nocheck+0x562/0xc10 [ 266.687771][T14613] submit_bio_noacct+0xd17/0x2010 [ 266.693300][T14613] submit_bh_wbc+0x59c/0x770 [ 266.698393][T14613] block_read_full_folio+0x264/0x8e0 [ 266.704183][T14613] filemap_read_folio+0xfc/0x3b0 [ 266.709625][T14613] do_read_cache_folio+0x2d7/0x6b0 [ 266.715242][T14613] read_part_sector+0xd1/0x370 [ 266.720508][T14613] adfspart_check_ICS+0x93/0x910 [ 266.725950][T14613] bdev_disk_changed+0x7f8/0xc80 [ 266.731388][T14613] blkdev_get_whole+0x187/0x290 [ 266.736739][T14613] bdev_open+0x2c7/0xe40 [ 266.741481][T14613] blkdev_open+0x34e/0x4f0 [ 266.746403][T14613] do_dentry_open+0x6d8/0x1660 [ 266.751666][T14613] vfs_open+0x82/0x3f0 [ 266.756239][T14613] path_openat+0x208c/0x31a0 [ 266.761328][T14613] do_file_open+0x20e/0x430 [ 266.766332][T14613] do_sys_openat2+0x10d/0x1e0 [ 266.771510][T14613] __x64_sys_openat+0x12d/0x210 [ 266.776865][T14613] do_syscall_64+0x106/0xf80 [ 266.781953][T14613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.788347][T14613] [ 266.788347][T14613] -> #3 (set->srcu){.+.+}-{0:0}: [ 266.795446][T14613] __synchronize_srcu+0xa2/0x300 [ 266.800884][T14613] blk_mq_quiesce_queue+0x149/0x1c0 [ 266.806582][T14613] elevator_switch+0x17b/0x7e0 [ 266.811845][T14613] elevator_change+0x352/0x530 [ 266.817110][T14613] elevator_set_default+0x29e/0x360 [ 266.822810][T14613] blk_register_queue+0x412/0x590 [ 266.828335][T14613] __add_disk+0x73f/0xe40 [ 266.833170][T14613] add_disk_fwnode+0x118/0x5c0 [ 266.838441][T14613] nbd_dev_add+0x77a/0xb10 [ 266.843357][T14613] nbd_init+0x291/0x2b0 [ 266.848015][T14613] do_one_initcall+0x11d/0x760 [ 266.853282][T14613] kernel_init_freeable+0x6e5/0x7a0 [ 266.858987][T14613] kernel_init+0x1f/0x1e0 [ 266.863819][T14613] ret_from_fork+0x754/0xd80 [ 266.868911][T14613] ret_from_fork_asm+0x1a/0x30 [ 266.874177][T14613] [ 266.874177][T14613] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 266.881971][T14613] __mutex_lock+0x1a2/0x1b90 [ 266.887057][T14613] elevator_change+0x1bc/0x530 [ 266.892319][T14613] elevator_set_none+0x92/0xf0 [ 266.897586][T14613] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 266.903898][T14613] nbd_start_device+0x1a6/0xbd0 [ 266.909246][T14613] nbd_genl_connect+0xff2/0x1a40 [ 266.914686][T14613] genl_family_rcv_msg_doit+0x214/0x300 [ 266.920731][T14613] genl_rcv_msg+0x560/0x800 [ 266.925731][T14613] netlink_rcv_skb+0x159/0x420 [ 266.930993][T14613] genl_rcv+0x28/0x40 [ 266.935476][T14613] netlink_unicast+0x5aa/0x870 [ 266.940736][T14613] netlink_sendmsg+0x8b0/0xda0 [ 266.945997][T14613] ____sys_sendmsg+0x9e1/0xb70 [ 266.951260][T14613] ___sys_sendmsg+0x190/0x1e0 [ 266.956435][T14613] __sys_sendmsg+0x170/0x220 [ 266.961532][T14613] do_syscall_64+0x106/0xf80 [ 266.966621][T14613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.973015][T14613] [ 266.973015][T14613] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 266.981595][T14613] blk_alloc_queue+0x610/0x790 [ 266.986861][T14613] blk_mq_alloc_queue+0x174/0x290 [ 266.992392][T14613] __blk_mq_alloc_disk+0x29/0x120 [ 266.997922][T14613] nbd_dev_add+0x492/0xb10 [ 267.002837][T14613] nbd_init+0x291/0x2b0 [ 267.007497][T14613] do_one_initcall+0x11d/0x760 [ 267.012767][T14613] kernel_init_freeable+0x6e5/0x7a0 [ 267.018470][T14613] kernel_init+0x1f/0x1e0 [ 267.023298][T14613] ret_from_fork+0x754/0xd80 [ 267.028385][T14613] ret_from_fork_asm+0x1a/0x30 [ 267.033653][T14613] [ 267.033653][T14613] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 267.040843][T14613] __lock_acquire+0x14b8/0x2630 [ 267.046209][T14613] lock_acquire+0x1cf/0x380 [ 267.051217][T14613] fs_reclaim_acquire+0xc4/0x100 [ 267.056663][T14613] kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 267.062893][T14613] alloc_inode+0x183/0x250 [ 267.067816][T14613] iget_locked+0x1d9/0x6d0 [ 267.072737][T14613] kernfs_get_inode+0x46/0x470 [ 267.077999][T14613] cgroup_may_write+0x89/0x120 [ 267.083264][T14613] cgroup_can_fork+0xb89/0x1390 [ 267.088623][T14613] copy_process+0x4632/0x7a40 [ 267.093802][T14613] kernel_clone+0xfc/0x9a0 [ 267.098725][T14613] __do_sys_clone3+0x214/0x290 [ 267.103992][T14613] do_syscall_64+0x106/0xf80 [ 267.109081][T14613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.115473][T14613] [ 267.115473][T14613] other info that might help us debug this: [ 267.115473][T14613] [ 267.125678][T14613] Chain exists of: [ 267.125678][T14613] fs_reclaim --> cpu_hotplug_lock --> cgroup_threadgroup_rwsem [ 267.125678][T14613] [ 267.139122][T14613] Possible unsafe locking scenario: [ 267.139122][T14613] [ 267.146546][T14613] CPU0 CPU1 [ 267.151891][T14613] ---- ---- [ 267.157230][T14613] rlock(cgroup_threadgroup_rwsem); [ 267.162491][T14613] lock(cpu_hotplug_lock); [ 267.169488][T14613] lock(cgroup_threadgroup_rwsem); [ 267.177181][T14613] lock(fs_reclaim); [ 267.181140][T14613] [ 267.181140][T14613] *** DEADLOCK *** [ 267.181140][T14613] [ 267.189255][T14613] 2 locks held by syz.2.3700/14613: [ 267.194425][T14613] #0: ffffffff8e84a988 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_can_fork+0x88f/0x1390 [ 267.203896][T14613] #1: ffffffff8e84a690 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x4632/0x7a40 [ 267.214230][T14613] [ 267.214230][T14613] stack backtrace: [ 267.220099][T14613] CPU: 1 UID: 0 PID: 14613 Comm: syz.2.3700 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.220119][T14613] Tainted: [L]=SOFTLOCKUP [ 267.220124][T14613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 267.220132][T14613] Call Trace: [ 267.220137][T14613] [ 267.220142][T14613] dump_stack_lvl+0x100/0x190 [ 267.220165][T14613] print_circular_bug.cold+0x178/0x1c7 [ 267.220187][T14613] check_noncircular+0x146/0x160 [ 267.220211][T14613] __lock_acquire+0x14b8/0x2630 [ 267.220228][T14613] lock_acquire+0x1cf/0x380 [ 267.220240][T14613] ? kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 267.220263][T14613] fs_reclaim_acquire+0xc4/0x100 [ 267.220278][T14613] ? kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 267.220298][T14613] kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 267.220318][T14613] ? alloc_inode+0x183/0x250 [ 267.220338][T14613] ? find_inode_fast+0x1fa/0x910 [ 267.220359][T14613] alloc_inode+0x183/0x250 [ 267.220378][T14613] iget_locked+0x1d9/0x6d0 [ 267.220397][T14613] ? __pfx_iget_locked+0x10/0x10 [ 267.220417][T14613] ? find_held_lock+0x2b/0x80 [ 267.220434][T14613] ? css_tryget_online_from_dir+0x22a/0x7c0 [ 267.220454][T14613] ? css_tryget_online_from_dir+0x22a/0x7c0 [ 267.220476][T14613] kernfs_get_inode+0x46/0x470 [ 267.220490][T14613] cgroup_may_write+0x89/0x120 [ 267.220506][T14613] cgroup_can_fork+0xb89/0x1390 [ 267.220528][T14613] copy_process+0x4632/0x7a40 [ 267.220545][T14613] ? futex_unqueue+0x133/0x2c0 [ 267.220562][T14613] ? __pfx_copy_process+0x10/0x10 [ 267.220583][T14613] ? _copy_from_user+0x59/0xd0 [ 267.220599][T14613] kernel_clone+0xfc/0x9a0 [ 267.220621][T14613] ? __pfx_kernel_clone+0x10/0x10 [ 267.220641][T14613] ? __pfx_futex_wait+0x10/0x10 [ 267.220660][T14613] __do_sys_clone3+0x214/0x290 [ 267.220679][T14613] ? __pfx___do_sys_clone3+0x10/0x10 [ 267.220708][T14613] do_syscall_64+0x106/0xf80 [ 267.220721][T14613] ? clear_bhb_loop+0x40/0x90 [ 267.220737][T14613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.220751][T14613] RIP: 0033:0x7fbb3bb9c819 [ 267.220763][T14613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.220777][T14613] RSP: 002b:00007fbb3caadef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 267.220790][T14613] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fbb3bb9c819 [ 267.220799][T14613] RDX: 00007fbb3caadf10 RSI: 0000000000000058 RDI: 00007fbb3caadf10 [ 267.220807][T14613] RBP: 00007fbb3bc32c91 R08: 0000000000000000 R09: 0000000000000058 [ 267.220816][T14613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.220824][T14613] R13: 00007fbb3be16038 R14: 00007fbb3be15fa0 R15: 00007fffe8dae6c8 [ 267.220841][T14613] [ 267.487050][T13062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.495569][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.532459][ T5934] pl2303 2-1:0.122: pl2303 converter detected [ 267.562818][ T5934] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 267.581492][ T5934] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 267.589935][ T5934] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 267.605470][ T5934] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 267.613852][ T5934] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 267.622342][ T5934] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 267.632381][ T5934] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 267.640743][ T5934] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 267.649531][ T5934] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 267.658105][ T5934] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 267.666774][ T5934] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 267.676858][ T5934] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 267.699843][ T5934] usb 2-1: USB disconnect, device number 44 [ 267.718896][ T5934] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 267.760919][T13061] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 267.775577][ T5934] pl2303 2-1:0.122: device disconnected [ 267.912072][T13061] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 267.923381][T13061] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 267.933671][T13061] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 267.942804][T13061] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.953053][T14616] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 267.961823][T13061] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 268.178175][T13061] usb 4-1: USB disconnect, device number 46 [ 268.582467][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.612249][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.492174][T13061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.572060][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.661845][T13056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.702451][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.742300][T13056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.531016][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.772663][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.812397][T13056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.852469][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog