last executing test programs: 2m36.004481505s ago: executing program 0 (id=3781): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000240)=0x14) read(r0, &(0x7f0000001380)=""/4138, 0x102a) 2m35.585945249s ago: executing program 0 (id=3785): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x11011) 2m35.218034246s ago: executing program 0 (id=3793): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x7}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2m34.980487219s ago: executing program 0 (id=3800): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x4) 2m34.858377224s ago: executing program 0 (id=3803): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000010, 0x0, 0x512cf3fb}]}) 2m34.450975632s ago: executing program 0 (id=3812): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) 2m34.148631091s ago: executing program 32 (id=3812): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) 3.194405105s ago: executing program 3 (id=6080): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 2.955934541s ago: executing program 3 (id=6085): openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 2.718531451s ago: executing program 3 (id=6091): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000280)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 2.565960883s ago: executing program 3 (id=6094): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)="467c451e", 0x4}, 0x1, 0x0, 0x0, 0x40800}, 0x4) 2.542462581s ago: executing program 5 (id=6095): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 2.457823439s ago: executing program 3 (id=6099): r0 = socket(0x11, 0x800000003, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 2.295161139s ago: executing program 3 (id=6102): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.236638687s ago: executing program 5 (id=6103): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) close_range(r0, 0xffffffffffffffff, 0x0) 2.115589954s ago: executing program 5 (id=6104): r0 = io_uring_setup(0x4822, &(0x7f0000000080)={0x0, 0xc8bf, 0x1, 0x2, 0x1000002}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.018975667s ago: executing program 5 (id=6110): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d000100040000000100040000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.851789099s ago: executing program 5 (id=6113): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) read$FUSE(r0, 0x0, 0x0) 1.784800362s ago: executing program 2 (id=6115): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 1.71597632s ago: executing program 1 (id=6116): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000380)=0x639f, 0x4) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@can={{}, 0x0, 0x3, 0x0, 0x0, "00000010000300"}, 0x10}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) 1.61505043s ago: executing program 1 (id=6117): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xfff) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000180), &(0x7f0000000280)=0x8) 1.3783715s ago: executing program 4 (id=6119): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r1, 0x80000000, 0x4, 0xffff}, 0x10) 1.286993247s ago: executing program 4 (id=6120): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900068004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.119414073s ago: executing program 4 (id=6121): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\a'], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 1.068940626s ago: executing program 4 (id=6122): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 855.924294ms ago: executing program 2 (id=6123): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) socket$alg(0x26, 0x5, 0x0) unshare(0x22020400) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) 820.024359ms ago: executing program 4 (id=6124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380102000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000050}, 0x40) 741.502009ms ago: executing program 1 (id=6125): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x4, 0xc000, 0x2, 0x20002f7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d400000040000000500"/20, @ANYRES32, @ANYBLOB="0200"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 648.953943ms ago: executing program 2 (id=6126): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0xb, "34ad9987ffed3bbabd18cf501922de974a27000000000000000000f6ffffff00"}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) 648.352543ms ago: executing program 4 (id=6127): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000001500)=[{}]) 579.386744ms ago: executing program 2 (id=6128): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 578.457717ms ago: executing program 1 (id=6129): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x6}, 0x8) 462.94739ms ago: executing program 5 (id=6130): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0xf07e000) madvise(&(0x7f0000201000/0x2000)=nil, 0x2000, 0x9) 395.897508ms ago: executing program 1 (id=6131): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x1c2) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/47) 289.850974ms ago: executing program 1 (id=6132): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c009900fb"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) r0 = socket$l2tp(0x2, 0x2, 0x73) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 247.816441ms ago: executing program 2 (id=6133): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r1, &(0x7f0000000500)=""/4096, 0x1000) splice(r0, 0x0, r2, 0x0, 0x400000008000f28, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) 0s ago: executing program 2 (id=6134): unshare(0x60000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x1ce4, 0xc, 0xe67, 0x1000b2a6, 0x8], 0x7, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) kernel console output (not intermixed with test programs): e [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 389.121780][ T799] microsoft 0003:045E:07DA.0041: no inputs found [ 389.128291][ T799] microsoft 0003:045E:07DA.0041: could not initialize ff, continuing anyway [ 389.148478][ T5940] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 389.163434][ T5940] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input47 [ 389.200744][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.263172][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.321090][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.347414][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.386504][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.399526][ T799] kernel read not supported for file /259/net/sockstat (pid: 799 comm: kworker/0:2) [ 389.399532][ T5249] usb 3-1: USB disconnect, device number 48 [ 389.444156][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.480635][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.518739][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.547821][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.579488][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.608596][ T5940] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 389.626535][ T5940] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 389.666767][T16616] netlink: 'syz.1.4646': attribute type 21 has an invalid length. [ 389.668054][ T5940] usb 5-1: USB disconnect, device number 44 [ 389.708853][T16616] IPv6: NLM_F_CREATE should be specified when creating new route [ 390.072482][T16633] 9p: Bad value for 'rfdno' [ 390.147690][ T5901] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 390.159736][T16637] input: syz0 as /devices/virtual/input/input48 [ 390.331301][ T5901] usb 6-1: Using ep0 maxpacket: 8 [ 390.340448][ T5901] usb 6-1: config 0 has no interfaces? [ 390.350154][ T5901] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 390.363265][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.382274][ T5901] usb 6-1: Product: syz [ 390.394707][ T5901] usb 6-1: Manufacturer: syz [ 390.405732][ T5901] usb 6-1: SerialNumber: syz [ 390.428548][ T5901] usb 6-1: config 0 descriptor?? [ 390.663860][ T799] usb 6-1: USB disconnect, device number 9 [ 390.814912][ T5901] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 390.863570][T16673] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4672'. [ 390.975696][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 391.006963][ T5815] Bluetooth: hci0: Unknown advertising packet type: 0x3c [ 391.006992][ T5815] Bluetooth: hci0: adv larger than maximum supported [ 391.017342][ T5815] Bluetooth: hci0: Malformed LE Event: 0x0d [ 391.035803][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 391.054388][ T5901] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 391.070924][ T5901] usb 3-1: can't read configurations, error -71 [ 391.133398][T16687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4678'. [ 391.329839][ T29] audit: type=1400 audit(1776547159.739:974): avc: denied { read } for pid=16693 comm="syz.4.4682" name="mouse0" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 391.614129][ T5880] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 391.720545][T16714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.769015][ T5880] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 391.785256][ T5880] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.798995][ T5880] usb 6-1: config 0 has no interface number 0 [ 391.805738][ T5880] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 391.826549][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.844636][ T5880] usb 6-1: config 0 descriptor?? [ 392.009523][T16729] ALSA: mixer_oss: invalid OSS volume 'SYNT:' [ 392.087816][ T5940] usb 6-1: USB disconnect, device number 10 [ 392.626289][ T5940] kernel write not supported for file /uhid (pid: 5940 comm: kworker/0:6) [ 392.844889][ T29] audit: type=1400 audit(1776547161.324:975): avc: denied { bind } for pid=16765 comm="syz.5.4716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 392.914120][ T29] audit: type=1400 audit(1776547161.387:976): avc: denied { append } for pid=16776 comm="syz.5.4723" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 392.963443][T16783] netlink: 'syz.4.4721': attribute type 3 has an invalid length. [ 392.972275][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4721'. [ 393.316989][T16798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.633326][ T799] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 393.738337][ T5940] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 393.785478][ T799] usb 6-1: Using ep0 maxpacket: 32 [ 393.793169][ T799] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 393.803096][ T799] usb 6-1: config 0 has no interface number 0 [ 393.816480][ T799] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 393.834571][ T799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.852429][ T799] usb 6-1: Product: syz [ 393.861960][ T799] usb 6-1: Manufacturer: syz [ 393.871059][ T799] usb 6-1: SerialNumber: syz [ 393.880698][ T799] usb 6-1: config 0 descriptor?? [ 393.890637][ T5940] usb 2-1: Using ep0 maxpacket: 8 [ 393.897093][ T799] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 393.908005][ T5940] usb 2-1: unable to get BOS descriptor or descriptor too short [ 393.921082][ T5940] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 393.937117][ T5940] usb 2-1: config 0 has no interface number 0 [ 393.957319][ T5940] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 393.968673][ T5940] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 393.979194][ T5940] usb 2-1: config 0 interface 88 has no altsetting 0 [ 393.990878][ T5940] usb 2-1: string descriptor 0 read error: -22 [ 393.998353][ T5940] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 394.008425][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 394.030049][ T5940] usb 2-1: config 0 descriptor?? [ 394.059703][ T5940] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input49 [ 394.100862][ T799] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 394.146035][ T799] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 394.168034][ T5940] input: failed to attach handler mousedev to device input49, error: -5 [ 394.345894][ T5880] usb 2-1: USB disconnect, device number 52 [ 394.352460][T16833] ptrace attach of "./syz-executor exec"[5824] was attempted by "./syz-executor exec"[16833] [ 394.488527][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 394.510075][ T5940] usb 6-1: USB disconnect, device number 11 [ 394.534914][ T5940] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 394.573939][ T5940] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 394.590317][ T5940] quatech2 6-1:0.51: device disconnected [ 394.621523][T10114] udevd[10114]: Error opening device "/dev/input/event4": Input/output error [ 394.633464][T10114] udevd[10114]: Unable to EVIOCGABS device "/dev/input/event4" [ 394.644632][T10114] udevd[10114]: Unable to EVIOCGABS device "/dev/input/event4" [ 394.942672][T16849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4756'. [ 395.161799][T16861] netlink: 'syz.2.4762': attribute type 1 has an invalid length. [ 395.170166][T16861] netlink: 'syz.2.4762': attribute type 6 has an invalid length. [ 395.178334][T16861] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4762'. [ 395.196329][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 395.328858][ T5940] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 395.347576][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 395.355117][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 395.367146][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 395.380863][ T10] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 395.391177][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.399756][ T10] usb 5-1: Product: syz [ 395.404147][ T10] usb 5-1: Manufacturer: syz [ 395.410372][ T10] usb 5-1: SerialNumber: syz [ 395.490749][ T5940] usb 6-1: Using ep0 maxpacket: 8 [ 395.497827][ T5940] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 395.508083][ T5940] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 395.518369][ T5940] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 395.529074][ T5940] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.542368][ T5940] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 395.551611][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.625932][ T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 395.634280][ T10] usb 5-1: unit 255 not found! [ 395.683531][ T10] usb 5-1: disable ehci-hcd to run US-144 [ 395.696878][ T10] usb 5-1: disable ehci-hcd to run US-144 [ 395.710555][ T10] usb 5-1: USB disconnect, device number 45 [ 395.752391][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.770807][ T5940] usb 6-1: GET_CAPABILITIES returned 0 [ 395.777556][ T5940] usbtmc 6-1:16.0: can't read capabilities [ 395.972922][ T10] usb 6-1: USB disconnect, device number 12 [ 396.438264][T16917] netlink: 13 bytes leftover after parsing attributes in process `syz.3.4785'. [ 396.538192][T16920] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 396.551404][T16920] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 396.635811][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 396.816015][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 396.829748][T16938] loop1: detected capacity change from 0 to 7 [ 396.845507][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 396.866015][ C1] blk_print_req_error: 131 callbacks suppressed [ 396.866036][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.874821][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 396.881700][ C1] buffer_io_error: 130 callbacks suppressed [ 396.881717][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 396.904525][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.915241][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 396.925963][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.926991][ T10] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 396.936147][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 396.937389][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.949146][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.953492][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 396.963296][ T10] usb 5-1: Product: syz [ 396.975694][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.987956][ T10] usb 5-1: Manufacturer: syz [ 396.992221][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 396.998129][ T10] usb 5-1: SerialNumber: syz [ 397.019055][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.021287][ T10] usb 5-1: config 0 descriptor?? [ 397.028299][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 397.055233][T16913] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 397.063056][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.072247][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 397.074577][T16913] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 397.089177][T16938] ldm_validate_partition_table(): Disk read failed. [ 397.112136][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.121397][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 397.131233][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.140474][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 397.155351][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.164608][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 397.175042][T16938] Dev loop1: unable to read RDB block 0 [ 397.181947][ T10] usb 5-1: ucan: probing device on interface #0 [ 397.190256][T16938] loop1: unable to read partition table [ 397.197420][T16938] loop1: partition table beyond EOD, truncated [ 397.203866][T16938] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 397.252240][T16945] Invalid logical block size (516) [ 397.652308][ T5901] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 397.782119][ T10] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 397.800025][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.818885][ T10] usb 5-1: USB disconnect, device number 46 [ 397.820847][ T5901] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 397.839795][ T5901] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.849143][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.857752][ T5901] usb 3-1: Product: syz [ 397.862679][ T5901] usb 3-1: Manufacturer: syz [ 397.868525][ T5901] usb 3-1: SerialNumber: syz [ 397.874458][T16967] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4806'. [ 398.582901][T16975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.871484][ T5901] cdc_ncm 3-1:1.0: bind() failure [ 398.904097][ T5901] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 398.922492][ T5901] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 398.943093][ T5901] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 398.973793][ T5901] usb 3-1: USB disconnect, device number 51 [ 399.058791][T16998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4819'. [ 399.150593][ T29] audit: type=1400 audit(1776547167.949:977): avc: denied { read } for pid=17001 comm="syz.5.4820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 399.216813][T17004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4821'. [ 399.710603][ T5901] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 399.795274][ T5880] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 399.871431][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 399.888073][ T5901] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 399.907278][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.926014][ T5901] usb 2-1: Product: syz [ 399.933027][ T5901] usb 2-1: Manufacturer: syz [ 399.939076][ T5901] usb 2-1: SerialNumber: syz [ 399.951015][ T5901] usb 2-1: config 0 descriptor?? [ 399.957272][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 399.972417][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.988043][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.004767][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 400.019176][ T5880] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 400.029596][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.051215][ T5880] usb 5-1: config 0 descriptor?? [ 400.101095][T17045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4839'. [ 400.171137][ T5901] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 053 [ 400.427248][T17021] i2c i2c-1: failure reading data [ 400.458698][ T10] usb 2-1: USB disconnect, device number 53 [ 400.476570][ T5880] hid_parser_main: 10 callbacks suppressed [ 400.476592][ T5880] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 400.491867][ T5880] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 400.499203][ T5880] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 400.508345][ T5880] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 400.522294][ T5880] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 400.531141][ T5880] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 400.539140][ T5880] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 400.546547][ T5880] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 400.555261][ T5880] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 400.582251][ T5880] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 400.609283][ T5880] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0042/input/input50 [ 400.727379][T17055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4843'. [ 400.748589][T17055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4843'. [ 400.780533][ T5880] microsoft 0003:045E:07DA.0042: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 400.781038][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.815130][ T5901] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 400.833717][ T5880] usb 5-1: USB disconnect, device number 47 [ 400.839842][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.861389][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.887492][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.967039][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 400.974643][ T5901] usb 3-1: config 0 has no interfaces? [ 400.995446][T17056] fido_id[17056]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 401.013335][ T5901] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 401.035185][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.059506][ T5901] usb 3-1: config 0 descriptor?? [ 401.135398][T17064] trusted_key: syz.3.4847 sent an empty control message without MSG_MORE. [ 401.380745][ T5880] usb 3-1: USB disconnect, device number 52 [ 401.641216][T17089] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4857'. [ 402.081107][ T5901] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 402.244565][ T5901] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 402.255489][ T5901] usb 2-1: config 1 has no interface number 0 [ 402.265476][ T5901] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 402.284131][ T5901] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 402.311472][ T5901] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.334095][ T5901] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 402.352195][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.380007][ T5901] usb 2-1: Product: syz [ 402.387538][ T5901] usb 2-1: Manufacturer: syz [ 402.399937][ T5901] usb 2-1: SerialNumber: syz [ 402.416736][T17098] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 402.596779][T17117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4869'. [ 402.653360][T17098] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 403.218625][T17100] macvlan0: left promiscuous mode [ 403.540797][ T5901] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 403.541047][ T12] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.597726][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.620964][ T12] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.637648][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.703777][ T12] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.715579][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.728311][ T12] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.746962][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.813560][ T5901] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 403.843396][ T5901] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 403.868844][ T5901] usb 2-1: USB disconnect, device number 54 [ 403.887674][ T5901] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 403.988035][ T5901] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 404.581255][T17165] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 404.824886][ T5940] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 404.846157][T17165] bond0 (unregistering): Released all slaves [ 404.997176][ T5940] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 405.012018][ T5940] usb 3-1: config 0 has no interface number 0 [ 405.024549][ T5940] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 405.049896][ T5940] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 405.073262][ T5940] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 405.095864][ T5940] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 405.111045][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 405.127793][ T5940] usb 3-1: Product: syz [ 405.137469][ T5940] usb 3-1: SerialNumber: syz [ 405.175565][ T5940] usb 3-1: config 0 descriptor?? [ 405.212722][ T5940] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 405.299888][ T5940] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input51 [ 405.781133][ T29] audit: type=1400 audit(1776547174.910:978): avc: denied { listen } for pid=17196 comm="syz.3.4904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 405.925274][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 405.925370][ T5901] usb 3-1: USB disconnect, device number 53 [ 405.932274][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 405.963961][ T5901] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 406.112574][T17213] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 407.320375][T17259] netlink: 'syz.4.4927': attribute type 1 has an invalid length. [ 407.342227][T17259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.644243][ T5901] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 407.786502][ T5940] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 407.795991][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 407.802886][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.814360][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.824721][ T5901] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 407.833884][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.848712][ T5901] usb 5-1: config 0 descriptor?? [ 407.941521][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 407.949238][ T5940] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.972185][ T5940] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.986836][ T799] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 408.004749][ T5940] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 408.017076][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.141077][T17281] kvm: apic: phys broadcast and lowest prio [ 408.178941][ T799] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.191687][ T799] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 408.200916][ T799] usb 6-1: config 1 has no interface number 0 [ 408.207695][ T799] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 408.219322][ T799] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 408.231068][ T799] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 408.257127][ T799] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 408.267216][ T5901] hid_parser_main: 6 callbacks suppressed [ 408.267237][ T5901] konepure 0003:1E7D:2DB4.0043: unknown main item tag 0x0 [ 408.271956][ T799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.294997][ T5901] konepure 0003:1E7D:2DB4.0043: unknown main item tag 0x0 [ 408.298186][ T799] usb 6-1: Product: syz [ 408.321642][ T799] usb 6-1: Manufacturer: syz [ 408.331737][ T5901] konepure 0003:1E7D:2DB4.0043: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.4-1/input0 [ 408.333029][ T799] usb 6-1: SerialNumber: syz [ 408.386658][T17271] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 408.452489][ T5940] mcp2221 0003:04D8:00DD.0044: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 408.488314][ T5901] usb 5-1: USB disconnect, device number 48 [ 408.616278][ T5930] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 408.659821][ T5880] usb 3-1: USB disconnect, device number 54 [ 408.791636][T17271] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 408.941113][ T5930] usb 2-1: config 0 interface 0 has no altsetting 0 [ 408.955705][ T5930] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 408.971921][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.984725][ T5930] usb 2-1: config 0 descriptor?? [ 409.189858][ T799] cdc_ncm 6-1:1.1: bind() failure [ 409.210349][T17295] sctp: [Deprecated]: syz.3.4943 (pid 17295) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.210349][T17295] Use struct sctp_sack_info instead [ 409.505172][ T5901] usb 6-1: USB disconnect, device number 13 [ 410.006628][ T5930] video4linux radio48: keene_cmd_set failed (-71) [ 410.040348][ T5930] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 410.091059][ T5930] usb 2-1: USB disconnect, device number 55 [ 410.390004][ T29] audit: type=1326 audit(1776547179.740:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17323 comm="syz.5.4952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc819b9c819 code=0x0 [ 410.790070][T17334] tipc: Started in network mode [ 410.807063][T17334] tipc: Node identity 84e, cluster identity 4711 [ 410.832833][T17334] tipc: Node number set to 2126 [ 410.933707][ T29] audit: type=1400 audit(1776547180.318:980): avc: denied { mount } for pid=17338 comm="syz.4.4956" name="/" dev="autofs" ino=57833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 411.041521][ T29] audit: type=1400 audit(1776547180.423:981): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 411.068002][T17348] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 411.078924][T17348] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 411.088099][T17348] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 411.097231][T17348] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 411.106452][T17348] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 411.115493][T17348] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 411.124527][T17348] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 411.133552][T17348] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 411.142570][T17348] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 411.254391][ T799] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 411.426807][ T799] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 411.516213][ T799] usb 2-1: config 0 has no interface number 0 [ 411.555138][ T799] usb 2-1: config 0 interface 41 has no altsetting 0 [ 411.588036][ T799] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 411.610286][ T799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.640327][ T799] usb 2-1: Product: syz [ 411.671591][ T799] usb 2-1: Manufacturer: syz [ 411.681810][ T799] usb 2-1: SerialNumber: syz [ 411.705887][ T799] usb 2-1: config 0 descriptor?? [ 412.115519][T17384] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4968'. [ 412.151384][T17384] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4968'. [ 412.724543][ T799] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 412.790935][ T799] usb 2-1: USB disconnect, device number 56 [ 413.237664][T17430] KVM: debugfs: duplicate directory 17430-4 [ 414.029949][T17458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4994'. [ 414.131203][T17458] team_slave_0: entered promiscuous mode [ 414.138452][T17458] team_slave_1: entered promiscuous mode [ 414.166529][T17458] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 414.187876][T17458] team0: Device macsec2 is already an upper device of the team interface [ 414.225047][T17458] team_slave_0: left promiscuous mode [ 414.230539][T17458] team_slave_1: left promiscuous mode [ 414.334858][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4998'. [ 414.367450][T17470] chnl_net:caif_netlink_parms(): no params data found [ 414.443622][ T29] audit: type=1400 audit(1776547183.992:982): avc: denied { mount } for pid=17473 comm="syz.3.5002" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 414.468767][T17476] overlayfs: failed to clone lowerpath [ 414.604607][T17482] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5003'. [ 414.646145][ T29] audit: type=1400 audit(1776547184.202:983): avc: denied { create } for pid=17486 comm="syz.3.5007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 414.704464][ T29] audit: type=1400 audit(1776547184.265:984): avc: denied { write } for pid=17486 comm="syz.3.5007" path="socket:[58176]" dev="sockfs" ino=58176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 414.769313][T17493] netlink: 340 bytes leftover after parsing attributes in process `syz.5.5008'. [ 414.791603][ T29] audit: type=1400 audit(1776547184.370:985): avc: denied { nlmsg_read } for pid=17491 comm="syz.5.5008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 414.791637][T17493] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5008'. [ 414.812944][ T5930] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 414.979504][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.002415][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.032634][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 415.054437][ T5930] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 415.063851][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.075972][ T5930] usb 5-1: config 0 descriptor?? [ 415.171453][T17508] netlink: 'syz.5.5017': attribute type 4 has an invalid length. [ 415.186828][T17508] netlink: 4168 bytes leftover after parsing attributes in process `syz.5.5017'. [ 415.279411][T17515] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5019'. [ 415.495985][ T5930] plantronics 0003:047F:FFFF.0045: reserved main item tag 0xd [ 415.541033][ T5930] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 415.884941][ T10] usb 5-1: USB disconnect, device number 49 [ 416.464474][ T5815] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 416.634798][ T5930] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 416.798792][ T5930] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 416.816829][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.847673][ T5930] usb 6-1: config 0 descriptor?? [ 416.860436][ T5930] cp210x 6-1:0.0: cp210x converter detected [ 417.252742][ T5930] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 417.460754][ T29] audit: type=1326 audit(1776547187.163:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17591 comm="syz.2.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d579c819 code=0x7ffc0000 [ 417.502589][ T29] audit: type=1326 audit(1776547187.163:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17591 comm="syz.2.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d579c819 code=0x7ffc0000 [ 417.527699][ T5930] usb 6-1: cp210x converter now attached to ttyUSB0 [ 417.543150][ T29] audit: type=1326 audit(1776547187.195:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17591 comm="syz.2.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d579c819 code=0x7ffc0000 [ 417.597202][ T29] audit: type=1326 audit(1776547187.195:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17591 comm="syz.2.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32d579c819 code=0x7ffc0000 [ 417.682864][ T29] audit: type=1326 audit(1776547187.195:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17591 comm="syz.2.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d579c819 code=0x7ffc0000 [ 417.711794][ T29] audit: type=1326 audit(1776547187.195:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17591 comm="syz.2.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d579c819 code=0x7ffc0000 [ 417.746625][ T46] usb 6-1: USB disconnect, device number 14 [ 417.771647][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 417.794758][ T29] audit: type=1326 audit(1776547187.195:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17591 comm="syz.2.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d579c819 code=0x7ffc0000 [ 417.827648][ T46] cp210x 6-1:0.0: device disconnected [ 417.862137][ T29] audit: type=1326 audit(1776547187.195:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17591 comm="syz.2.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d579c819 code=0x7ffc0000 [ 417.938275][ T29] audit: type=1326 audit(1776547187.195:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17591 comm="syz.2.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d579c819 code=0x7ffc0000 [ 418.015855][ T29] audit: type=1326 audit(1776547187.195:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17591 comm="syz.2.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f32d579c819 code=0x7ffc0000 [ 419.619581][T17618] dummy0: left allmulticast mode [ 419.659126][T17618] macvlan2: left promiscuous mode [ 419.678093][T17618] macvlan2: left allmulticast mode [ 419.702893][T14906] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.716666][T14906] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.795813][T17653] program syz.5.5076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.820797][T14906] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.835863][T14906] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.851631][T17654] program syz.5.5076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.245848][ T5901] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 420.258198][T17660] PID 17660 killed due to inadequate hugepage pool [ 420.305413][ T5815] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 420.315314][T17679] bridge_slave_0: entered promiscuous mode [ 420.327159][ T5815] Bluetooth: hci4: Injecting HCI hardware error event [ 420.338025][ T5823] Bluetooth: hci4: hardware error 0x00 [ 420.408578][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 420.418837][ T5901] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.443793][ T5901] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.464843][ T5901] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.502249][ T5901] usb 3-1: config 0 interface 0 has no altsetting 0 [ 420.529736][ T5901] usb 3-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 420.559196][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.595392][ T5901] usb 3-1: config 0 descriptor?? [ 421.094082][ T5901] lg-g15 0003:046D:C22D.0046: unknown main item tag 0x0 [ 421.124190][ T5901] lg-g15 0003:046D:C22D.0046: unknown main item tag 0x0 [ 421.156162][ T5901] lg-g15 0003:046D:C22D.0046: item fetching failed at offset 2/40 [ 421.187887][ T5901] lg-g15 0003:046D:C22D.0046: probe with driver lg-g15 failed with error -22 [ 421.319973][ T5940] usb 3-1: USB disconnect, device number 55 [ 421.635368][ T5930] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 421.808637][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 421.830693][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.861748][ T5930] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 421.891355][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.917804][ T5930] usb 5-1: config 0 descriptor?? [ 421.939713][ T5940] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 422.113618][ T5940] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 422.132267][ T5940] usb 6-1: config 0 has no interface number 0 [ 422.138722][ T5940] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 422.157980][ T5940] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 422.172770][ T5940] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 422.190308][ T5940] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 422.207270][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 422.228279][ T5940] usb 6-1: Product: syz [ 422.237073][ T5940] usb 6-1: SerialNumber: syz [ 422.252431][ T5940] usb 6-1: config 0 descriptor?? [ 422.275452][ T5940] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 422.285607][ T5823] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 422.297063][ T5940] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input53 [ 422.352961][ T5930] elan 0003:04F3:0755.0047: unknown main item tag 0x0 [ 422.368496][ T5930] elan 0003:04F3:0755.0047: unknown main item tag 0x0 [ 422.378708][ T5930] elan 0003:04F3:0755.0047: unknown main item tag 0x0 [ 422.385655][ T5930] elan 0003:04F3:0755.0047: unknown main item tag 0x0 [ 422.393645][ T5930] elan 0003:04F3:0755.0047: unknown main item tag 0x0 [ 422.404772][ T5930] elan 0003:04F3:0755.0047: failed to start in urb: -90 [ 422.425235][ T5930] elan 0003:04F3:0755.0047: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 422.634102][ T5930] usb 5-1: USB disconnect, device number 50 [ 422.791414][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 422.791782][ T5901] usb 6-1: USB disconnect, device number 15 [ 422.798395][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 422.829238][ T5901] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 422.915490][T17755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5120'. [ 423.203550][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 423.203567][ T29] audit: type=1400 audit(1776547193.200:1010): avc: denied { getopt } for pid=17766 comm="syz.2.5126" lport=36102 faddr=255.255.255.254 fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 423.682872][ T5901] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 423.718717][T17790] net_ratelimit: 55 callbacks suppressed [ 423.718729][T17790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.827334][ T5901] usb 5-1: unable to get BOS descriptor or descriptor too short [ 423.836086][ T5901] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.846371][ T5901] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 423.855749][ T5901] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 423.867045][ T5901] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 423.880370][ T5901] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 423.891688][ T5901] usb 5-1: config 1 interface 1 has no altsetting 0 [ 423.901082][ T5901] usb 5-1: string descriptor 0 read error: -22 [ 423.907941][ T5901] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 423.917433][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.058632][T17799] IPVS: rr: FWM 3 0x00000003 - no destination available [ 424.222517][ T29] audit: type=1400 audit(1776547194.271:1011): avc: denied { execute_no_trans } for pid=17805 comm="syz.2.5143" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=59300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 424.339173][ T5901] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 424.371495][ T5901] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 424.403485][ T5901] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 424.651056][T17828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5149'. [ 424.813724][T17838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5151'. [ 424.846203][ T5901] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 424.923598][ T5901] usb 5-1: USB disconnect, device number 51 [ 425.203870][T17852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5157'. [ 425.267760][T17852] hsr_slave_1 (unregistering): left promiscuous mode [ 425.310144][T17856] dvmrp0: entered allmulticast mode [ 425.412764][ T29] audit: type=1400 audit(1776547195.520:1012): avc: denied { setopt } for pid=17861 comm="syz.3.5162" lport=56567 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 425.437312][T17862] sctp: [Deprecated]: syz.3.5162 (pid 17862) Use of int in maxseg socket option. [ 425.437312][T17862] Use struct sctp_assoc_value instead [ 425.584286][T17867] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 425.698314][ T29] audit: type=1400 audit(1776547195.814:1013): avc: denied { unmount } for pid=14603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 425.848767][ T29] audit: type=1400 audit(1776547195.982:1014): avc: denied { ioctl } for pid=17884 comm="syz.5.5170" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 426.053000][T17900] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.5175'. [ 426.062978][T17900] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 426.134708][T17898] SELinux: failed to load policy [ 426.171549][ T29] audit: type=1400 audit(1776547196.318:1015): avc: denied { read } for pid=17901 comm="syz.2.5176" lport=42671 faddr=::ffff:100.1.1.2 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 426.809787][T17918] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5183'. [ 426.935289][T17920] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5184'. [ 426.973427][T17920] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5184'. [ 427.177716][T17932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5191'. [ 427.238719][ T5823] Bluetooth: hci1: link tx timeout [ 427.250504][ T5823] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 427.829001][T17960] netlink: 'syz.2.5202': attribute type 1 has an invalid length. [ 427.842274][T17960] netlink: 212 bytes leftover after parsing attributes in process `syz.2.5202'. [ 427.862813][ T29] audit: type=1400 audit(1776547198.082:1016): avc: denied { ioctl } for pid=17961 comm="syz.5.5203" path="socket:[61447]" dev="sockfs" ino=61447 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 428.578884][ T29] audit: type=1400 audit(1776547198.849:1017): avc: denied { ioctl } for pid=17994 comm="syz.5.5219" path="pid:[4026532796]" dev="nsfs" ino=4026532796 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 428.630749][ T29] audit: type=1400 audit(1776547198.901:1018): avc: denied { create } for pid=17978 comm="syz.1.5211" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 428.806730][T18006] sctp: [Deprecated]: syz.2.5223 (pid 18006) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.806730][T18006] Use struct sctp_sack_info instead [ 429.218774][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 429.406408][T18025] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.414185][T18025] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.524298][T18025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.542796][T18025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.729752][T18029] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.742267][T18029] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.798751][ T13] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.810592][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.820357][ T13] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.831357][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.844103][ T13] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.858626][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.859418][T18072] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.5251'. [ 430.956191][T18074] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 430.971637][T18074] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 430.989728][T18074] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 431.025048][T18074] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 431.026227][T18078] input: syz1 as /devices/virtual/input/input54 [ 431.145434][ T35] smbdirect: ib_dev[syz2] removed [ 431.914045][ T29] audit: type=1326 audit(1776547202.345:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18094 comm="syz.2.5261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32d579c819 code=0x0 [ 432.633848][T18081] kexec: Could not allocate control_code_buffer [ 433.375329][T18140] netlink: 7 bytes leftover after parsing attributes in process `syz.5.5284'. [ 433.698318][T18158] geneve2: entered promiscuous mode [ 434.000968][T18168] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.5293'. [ 434.335721][T18183] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5301'. [ 434.854968][ T5823] Bluetooth: hci5: command 0x1003 tx timeout [ 434.863849][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 435.805796][T18222] netlink: 262 bytes leftover after parsing attributes in process `syz.3.5318'. [ 435.815036][T18222] netlink: 508 bytes leftover after parsing attributes in process `syz.3.5318'. [ 436.349396][ T29] audit: type=1400 audit(1776547206.996:1020): avc: denied { ioctl } for pid=18242 comm="syz.3.5327" path="socket:[62048]" dev="sockfs" ino=62048 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 436.378952][T18181] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 436.844209][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 436.851082][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 436.946426][ T29] audit: type=1400 audit(1776547207.626:1021): avc: denied { ioctl } for pid=18261 comm="syz.4.5335" path="socket:[62097]" dev="sockfs" ino=62097 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 437.156179][T18181] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 437.162601][T18181] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 437.168919][T18181] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 437.175555][T18181] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 437.572585][T18286] geneve2: entered promiscuous mode [ 438.043651][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5355'. [ 438.141148][ T5901] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 438.158297][T18311] fuse: Bad value for 'fd' [ 438.293589][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 438.309935][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.349774][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.362032][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 438.374231][T18318] geneve2: entered promiscuous mode [ 438.385795][ T5901] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 438.406500][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5362'. [ 438.408422][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.439405][ T5901] usb 2-1: config 0 descriptor?? [ 438.446826][ T5901] hub 2-1:0.0: USB hub found [ 438.620837][T18328] loop5: detected capacity change from 0 to 7 [ 438.660205][ T5901] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 438.899992][T18328] Dev loop5: unable to read RDB block 7 [ 438.913743][T18328] loop5: unable to read partition table [ 438.916802][ C1] blk_print_req_error: 10 callbacks suppressed [ 438.916821][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 438.935383][ C1] buffer_io_error: 10 callbacks suppressed [ 438.935402][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 438.938473][T18328] loop5: partition table beyond EOD, truncated [ 438.973005][T18328] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 439.111225][ T5901] hid-generic 0003:046D:C31C.0048: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 439.133711][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 439.135999][ T5815] Bluetooth: hci2: command 0x0c1a tx timeout [ 439.178341][T18358] netlink: 'syz.5.5375': attribute type 29 has an invalid length. [ 439.209210][T18358] netlink: 'syz.5.5375': attribute type 29 has an invalid length. [ 439.229350][T18358] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5375'. [ 439.389252][T18365] geneve2: entered promiscuous mode [ 439.522511][ T5901] usb 2-1: USB disconnect, device number 57 [ 439.889012][ T29] audit: type=1400 audit(1776547210.713:1022): avc: denied { watch watch_reads } for pid=18380 comm="syz.4.5388" path="/1012/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 440.722491][ T5901] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 440.884200][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 440.901688][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.935742][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.964786][ T5901] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 440.974278][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.989434][ T5901] usb 2-1: config 0 descriptor?? [ 441.016023][T18430] tipc: Enabling of bearer rejected, failed to enable media [ 441.075034][ T799] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 441.104915][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 441.123360][ T46] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 441.228589][ T799] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 441.245858][ T799] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 441.274818][ T799] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.277339][ T46] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 441.295716][ T799] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 441.295752][ T799] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 441.308906][ T799] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 441.319709][ T46] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 441.336399][ T46] usb 6-1: Product: syz [ 441.337514][ T799] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 441.345363][ T46] usb 6-1: config 0 descriptor?? [ 441.356690][ T799] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.370151][ T799] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 441.372370][ T46] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 441.382426][ T799] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 441.402597][ T46] usb 6-1: Detected FT232H [ 441.492448][ T799] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 441.508611][ T799] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 441.521048][ T799] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.533525][ T799] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 441.544721][ T799] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 441.563017][ T799] usb 3-1: string descriptor 0 read error: -22 [ 441.563945][ T46] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 441.572774][ T799] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 441.587097][ T799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.619320][ T5901] usb 2-1: language id specifier not provided by device, defaulting to English [ 441.630884][ T799] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 441.706469][T18441] overlayfs: failed to clone lowerpath [ 441.810637][ T5901] letsketch 0003:6161:4D15.0049: Device info: 쀱 [ 441.974687][ T46] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 441.991473][ T799] usb 3-1: USB disconnect, device number 56 [ 442.034982][ T5901] usb 2-1: Max retries (5) exceeded reading string descriptor 201 [ 442.055195][ T5901] letsketch 0003:6161:4D15.0049: probe with driver letsketch failed with error -71 [ 442.089687][ T5901] usb 2-1: USB disconnect, device number 58 [ 442.174603][ T1558] usb 6-1: USB disconnect, device number 16 [ 442.195398][ T1558] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 442.211895][ T1558] ftdi_sio 6-1:0.0: device disconnected [ 442.613406][ T1558] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 442.779855][ T1558] usb 5-1: Using ep0 maxpacket: 16 [ 442.790921][ T1558] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.809864][ T1558] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.828390][ T1558] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 442.844554][ T1558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 442.853067][ T1558] usb 5-1: SerialNumber: syz [ 442.876123][ T1558] usb 5-1: 0:2 : does not exist [ 443.077310][ T1558] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 443.105376][ T1558] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 443.162351][ T1558] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 443.222521][ T1558] usb 5-1: USB disconnect, device number 52 [ 443.266569][T17066] udevd[17066]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.705985][T18499] misc userio: Begin command sent, but we're already running [ 444.087748][T18520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5448'. [ 444.097473][T18523] netlink: 264 bytes leftover after parsing attributes in process `syz.3.5449'. [ 444.111592][T18523] netlink: 264 bytes leftover after parsing attributes in process `syz.3.5449'. [ 444.122821][T18524] xt_hashlimit: size too large, truncated to 1048576 [ 444.132070][T18520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5448'. [ 444.221152][ T29] audit: type=1400 audit(1776547215.269:1023): avc: denied { read } for pid=18529 comm="syz.3.5452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 444.332270][ T799] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 444.488175][ T799] usb 3-1: Using ep0 maxpacket: 16 [ 444.508738][ T799] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 444.518232][ T799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.533893][ T799] usb 3-1: Product: syz [ 444.538972][ T799] usb 3-1: Manufacturer: syz [ 444.544137][ T799] usb 3-1: SerialNumber: syz [ 444.550516][ T799] usb 3-1: config 0 descriptor?? [ 444.558066][ T799] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 444.884600][ T46] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 445.046238][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 445.055830][ T46] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 445.064705][T18549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5460'. [ 445.073709][ T46] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 445.095192][ T46] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 445.104168][ T46] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 445.130460][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 445.143991][ T46] usb 2-1: config 0 has no interface number 0 [ 445.160887][ T46] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 445.172171][ T46] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 445.182294][ T46] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 445.192457][ T46] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 445.205553][ T46] usb 2-1: config 0 interface 125 has no altsetting 0 [ 445.212630][ T46] usb 2-1: config 0 interface 125 has no altsetting 2 [ 445.237136][ T46] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 445.255741][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.275130][ T46] usb 2-1: Product: syz [ 445.279544][ T46] usb 2-1: Manufacturer: syz [ 445.284158][ T46] usb 2-1: SerialNumber: syz [ 445.303388][ T46] usb 2-1: config 0 descriptor?? [ 445.322131][ T46] usb 2-1: selecting invalid altsetting 2 [ 445.518727][ T799] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 445.550070][ T799] usb 3-1: USB disconnect, device number 57 [ 445.796461][T18564] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 445.828971][T18564] CPU: 1 UID: 0 PID: 18564 Comm: syz.5.5465 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.829014][T18564] Tainted: [L]=SOFTLOCKUP [ 445.829022][T18564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 445.829045][T18564] Call Trace: [ 445.829054][T18564] [ 445.829062][T18564] dump_stack_lvl+0x100/0x190 [ 445.829094][T18564] sysfs_warn_dup.cold+0x1c/0x28 [ 445.829127][T18564] sysfs_do_create_link_sd+0x113/0x140 [ 445.829152][T18564] sysfs_create_link+0x61/0xc0 [ 445.829175][T18564] device_add+0x675/0x1920 [ 445.829206][T18564] ? __pfx_device_add+0x10/0x10 [ 445.829233][T18564] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 445.829261][T18564] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 445.829303][T18564] wiphy_register+0x1edd/0x2d90 [ 445.829326][T18564] ? __rtnl_unlock+0xb9/0xf0 [ 445.829358][T18564] ? __pfx_wiphy_register+0x10/0x10 [ 445.829386][T18564] ? __asan_memset+0x23/0x50 [ 445.829419][T18564] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 445.829468][T18564] ieee80211_register_hw+0x3055/0x4570 [ 445.829519][T18564] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 445.829552][T18564] ? __pfx___debug_object_init+0x10/0x10 [ 445.829595][T18564] ? find_held_lock+0x2b/0x80 [ 445.829632][T18564] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 445.829661][T18564] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 445.829697][T18564] ? __hrtimer_setup+0x208/0x330 [ 445.829731][T18564] mac80211_hwsim_new_radio+0x2a01/0x5ae0 [ 445.829780][T18564] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 445.829808][T18564] ? __asan_memcpy+0x3c/0x60 [ 445.829835][T18564] hwsim_new_radio_nl+0xc5f/0x1370 [ 445.829859][T18564] ? rcu_is_watching+0x12/0xc0 [ 445.829890][T18564] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 445.829923][T18564] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 445.829950][T18564] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 445.829998][T18564] genl_family_rcv_msg_doit+0x214/0x300 [ 445.830035][T18564] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 445.830078][T18564] ? bpf_lsm_capable+0x9/0x10 [ 445.830099][T18564] ? security_capable+0x80/0x260 [ 445.830130][T18564] ? ns_capable+0xd2/0xf0 [ 445.830163][T18564] genl_rcv_msg+0x560/0x800 [ 445.830197][T18564] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.830228][T18564] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 445.830259][T18564] ? __lock_acquire+0x4a5/0x2630 [ 445.830293][T18564] netlink_rcv_skb+0x159/0x420 [ 445.830320][T18564] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.830352][T18564] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 445.830392][T18564] ? netlink_deliver_tap+0x1ae/0xcc0 [ 445.830423][T18564] genl_rcv+0x28/0x40 [ 445.830449][T18564] netlink_unicast+0x585/0x850 [ 445.830478][T18564] ? __pfx_netlink_unicast+0x10/0x10 [ 445.830515][T18564] netlink_sendmsg+0x8b0/0xda0 [ 445.830548][T18564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.830573][T18564] ? __might_fault+0xc0/0x140 [ 445.830615][T18564] ____sys_sendmsg+0x9e1/0xb70 [ 445.830641][T18564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.830671][T18564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.830705][T18564] ? __pfx_futex_wake_mark+0x10/0x10 [ 445.830748][T18564] ___sys_sendmsg+0x190/0x1e0 [ 445.830779][T18564] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.830848][T18564] __sys_sendmsg+0x170/0x220 [ 445.830884][T18564] ? __pfx___sys_sendmsg+0x10/0x10 [ 445.830918][T18564] ? __x64_sys_futex+0x34f/0x4d0 [ 445.830963][T18564] ? rcu_is_watching+0x12/0xc0 [ 445.831007][T18564] do_syscall_64+0x10b/0xf80 [ 445.831039][T18564] ? clear_bhb_loop+0x40/0x90 [ 445.831069][T18564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.831093][T18564] RIP: 0033:0x7fc819b9c819 [ 445.831115][T18564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.831138][T18564] RSP: 002b:00007fc81aabd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.831168][T18564] RAX: ffffffffffffffda RBX: 00007fc819e16090 RCX: 00007fc819b9c819 [ 445.831184][T18564] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 445.831200][T18564] RBP: 00007fc819c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 445.831214][T18564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.831229][T18564] R13: 00007fc819e16128 R14: 00007fc819e16090 R15: 00007ffd84c33038 [ 445.831262][T18564] [ 446.369215][ T46] get_1284_register timeout [ 446.373994][ C1] usb 2-1: async_complete: urb error -104 [ 447.644446][ T5940] usb 2-1: USB disconnect, device number 59 [ 448.062655][ T29] audit: type=1400 audit(1776547219.301:1024): avc: denied { remount } for pid=18629 comm="syz.1.5491" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 448.417807][ T46] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 448.551156][ T5940] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 448.571849][ T46] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 448.582799][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.596853][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.606739][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 448.621824][ T46] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 448.631168][ T46] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 448.639459][ T46] usb 2-1: Manufacturer: syz [ 448.663947][ T46] usb 2-1: config 0 descriptor?? [ 448.698545][ T5940] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 448.725638][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.739906][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.751373][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 448.777330][ T5940] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 448.787058][ T5940] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 448.796502][ T5940] usb 5-1: Manufacturer: syz [ 448.820102][ T5940] usb 5-1: config 0 descriptor?? [ 449.064216][ T46] appleir 0003:05AC:8243.004A: unknown main item tag 0x0 [ 449.081060][ T46] appleir 0003:05AC:8243.004A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 449.235732][ T5940] appleir 0003:05AC:8243.004B: unknown main item tag 0x0 [ 449.298659][ T799] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 449.324670][ T5940] appleir 0003:05AC:8243.004B: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 449.475702][ T799] usb 6-1: Using ep0 maxpacket: 32 [ 449.482497][ T799] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 449.492454][ T799] usb 6-1: config 0 has no interface number 0 [ 449.506448][ T799] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 449.529081][ T799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.542779][ T799] usb 6-1: Product: syz [ 449.551922][ T799] usb 6-1: Manufacturer: syz [ 449.564157][ T799] usb 6-1: SerialNumber: syz [ 449.580006][ T799] usb 6-1: config 0 descriptor?? [ 449.774755][T18701] overlayfs: failed to clone lowerpath [ 450.317962][ T5930] usb 5-1: USB disconnect, device number 53 [ 450.567565][ T799] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 450.579626][ T799] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 450.591133][ T799] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 450.603526][ T799] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 450.618547][ T799] usb 6-1: USB disconnect, device number 17 [ 451.100906][ T5940] usb 2-1: USB disconnect, device number 60 [ 451.680835][T18751] bond1: invalid ARP target 0.0.0.0 specified for addition [ 451.707704][T18751] bond1: option arp_ip_target: invalid value (0) [ 451.731902][T18751] bond1 (unregistering): Released all slaves [ 451.828310][T18761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5547'. [ 451.863646][T18761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5547'. [ 451.930923][T18765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5548'. [ 451.988792][T18767] overlayfs: failed to resolve './file2': -2 [ 452.022739][T18765] bridge0: entered promiscuous mode [ 452.033986][T18765] bridge0: entered allmulticast mode [ 452.835771][ T29] audit: type=1400 audit(1776547224.309:1025): avc: denied { setopt } for pid=18799 comm="syz.1.5562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 452.894795][T18802] veth0_to_bond: Caught tx_queue_len zero misconfig [ 453.323388][ T5940] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 453.342252][ T1558] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 453.420888][ T35] Bluetooth: hci5: Frame reassembly failed (-84) [ 453.485075][ T5940] usb 6-1: Using ep0 maxpacket: 16 [ 453.496741][ T5940] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 453.507481][ T5940] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.507730][ T1558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.519612][ T5940] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.519645][ T5940] usb 6-1: config 0 interface 0 has no altsetting 0 [ 453.519677][ T5940] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 453.555088][ T1558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.568226][ T1558] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 453.577684][ T1558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.592041][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.612709][ T1558] usb 5-1: config 0 descriptor?? [ 453.614312][ T5940] usb 6-1: config 0 descriptor?? [ 454.030872][ T1558] cp2112 0003:10C4:EA90.004C: unknown main item tag 0x0 [ 454.050506][ T5940] pantherlord 0003:0810:0001.004D: unknown main item tag 0x0 [ 454.066414][ T1558] cp2112 0003:10C4:EA90.004C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 454.072525][ T5940] pantherlord 0003:0810:0001.004D: unknown main item tag 0x0 [ 454.099318][ T5940] pantherlord 0003:0810:0001.004D: unknown main item tag 0x0 [ 454.117635][ T5940] pantherlord 0003:0810:0001.004D: unknown main item tag 0x0 [ 454.138498][ T5940] pantherlord 0003:0810:0001.004D: unknown main item tag 0x0 [ 454.169914][ T5940] pantherlord 0003:0810:0001.004D: unknown main item tag 0x0 [ 454.179540][ T5940] pantherlord 0003:0810:0001.004D: unknown main item tag 0x0 [ 454.190316][ T5940] pantherlord 0003:0810:0001.004D: unknown main item tag 0x0 [ 454.197763][ T5940] pantherlord 0003:0810:0001.004D: unknown main item tag 0x0 [ 454.208494][ T5940] pantherlord 0003:0810:0001.004D: hidraw1: USB HID v0.04 Device [HID 0810:0001] on usb-dummy_hcd.5-1/input0 [ 454.225360][ T5940] pantherlord 0003:0810:0001.004D: no output reports found [ 454.228815][ T1558] cp2112 0003:10C4:EA90.004C: error requesting version [ 454.275817][ T5940] usb 6-1: USB disconnect, device number 18 [ 454.307843][ T1558] cp2112 0003:10C4:EA90.004C: probe with driver cp2112 failed with error -71 [ 454.352539][T18844] fido_id[18844]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 454.377949][ T1558] usb 5-1: USB disconnect, device number 54 [ 454.410512][T18847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5583'. [ 454.569312][T18854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5586'. [ 454.579933][T18854] netlink: 'syz.3.5586': attribute type 7 has an invalid length. [ 454.587792][T18854] netlink: 'syz.3.5586': attribute type 8 has an invalid length. [ 454.597106][T18854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5586'. [ 454.983159][ T29] audit: type=1800 audit(1776547226.567:1026): pid=18878 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5595" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 455.037009][T18881] veth0_macvtap: left promiscuous mode [ 455.043055][T18881] veth0_macvtap: entered allmulticast mode [ 455.050554][T18881] bridge0: port 3(veth0_macvtap) entered blocking state [ 455.074253][T18881] bridge0: port 3(veth0_macvtap) entered disabled state [ 455.202707][T18886] Invalid source name [ 455.203711][ T29] audit: type=1400 audit(1776547226.798:1027): avc: denied { mounton } for pid=18885 comm="syz.5.5600" path="/286/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 455.213659][T18886] UBIFS error (pid: 18886): cannot open "./file0", error -22 [ 455.351968][ T5815] Bluetooth: hci5: command 0x1003 tx timeout [ 455.354940][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 455.957485][T18916] netpci0: tun_chr_ioctl cmd 1074025678 [ 455.967356][T18916] netpci0: group set to 0 [ 456.148019][ T29] audit: type=1400 audit(1776547227.785:1028): avc: denied { read } for pid=18919 comm="syz.5.5617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 456.469969][T18926] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.601115][ T29] audit: type=1400 audit(1776547228.268:1029): avc: denied { watch_sb } for pid=18933 comm="syz.2.5622" path="/1142" dev="tmpfs" ino=5815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 456.660794][T18926] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.764084][T18926] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.855365][T18926] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.091621][T14906] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.118646][T14906] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.169616][ T35] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.193441][ T35] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.230774][ T29] audit: type=1400 audit(1776547228.929:1030): avc: denied { map } for pid=18950 comm="syz.2.5631" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 457.609012][ T1558] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 457.726242][T18969] bridge0: left promiscuous mode [ 457.745436][T18969] bridge0: left allmulticast mode [ 457.762008][ T1558] usb 2-1: Using ep0 maxpacket: 16 [ 457.769145][ T1558] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 457.778975][ T1558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.802076][ T1558] usb 2-1: config 0 descriptor?? [ 457.821149][ T1558] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 457.970956][ T5249] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 458.132821][ T5249] usb 5-1: Using ep0 maxpacket: 8 [ 458.144652][ T5249] usb 5-1: unable to get BOS descriptor or descriptor too short [ 458.161552][ T5249] usb 5-1: config 140 has an invalid interface number: 182 but max is 1 [ 458.173367][ T5249] usb 5-1: config 140 has no interface number 1 [ 458.187244][ T5249] usb 5-1: config 140 interface 182 has no altsetting 0 [ 458.202178][ T5249] usb 5-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 458.218612][ T5249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.236693][ T5249] usb 5-1: Product: syz [ 458.241311][ T5249] usb 5-1: Manufacturer: syz [ 458.246046][ T5249] usb 5-1: SerialNumber: syz [ 458.473406][ T5249] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 458.813917][ T1558] usb 2-1: USB disconnect, device number 61 [ 458.871905][T18991] sctp: [Deprecated]: syz.3.5648 (pid 18991) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.871905][T18991] Use struct sctp_sack_info instead [ 458.939751][T18993] xt_hashlimit: size too large, truncated to 1048576 [ 459.128238][ T5249] usb 5-1: reset high-speed USB device number 55 using dummy_hcd [ 459.329465][ T5249] usb 5-1: unable to get BOS descriptor or descriptor too short [ 459.366600][ T5249] usb 5-1: device firmware changed [ 459.396229][ T5249] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 459.405198][ T5249] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 459.414120][ T5901] usb 5-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 459.438789][ T5901] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 459.439982][ T5930] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 459.446963][ T29] audit: type=1400 audit(1776547231.239:1031): avc: denied { firmware_load } for pid=5901 comm="kworker/1:8" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 459.486198][ T5249] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 459.494205][ T799] kernel read not supported for file [fscontext] (pid: 799 comm: kworker/0:2) [ 459.520346][ T5249] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 459.538344][ T5249] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 459.555129][ T5249] usb 5-1: USB disconnect, device number 55 [ 459.585887][ T5249] usb 5-1: [ueagle-atm] ADSL device removed [ 459.638013][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 459.650476][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 459.683397][ T5930] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 459.701890][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.713743][ T5930] usb 3-1: config 0 descriptor?? [ 459.926949][ T5930] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 460.125750][ T5930] usb 3-1: USB disconnect, device number 58 [ 460.645701][T19049] overlayfs: missing 'workdir' [ 461.256734][T19070] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 461.375030][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 461.869686][ T46] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 462.034036][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 462.071936][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 462.106680][ T46] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 462.120244][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.131515][ T46] usb 2-1: Product: syz [ 462.138805][ T46] usb 2-1: Manufacturer: syz [ 462.143669][ T46] usb 2-1: SerialNumber: syz [ 462.155613][ T46] usb 2-1: config 0 descriptor?? [ 462.167061][T19090] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 462.180842][T19090] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 462.402925][T19090] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 462.410488][T19090] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 462.466537][ T5249] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 462.628510][ T5880] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 462.636426][ T5249] usb 5-1: Using ep0 maxpacket: 16 [ 462.643828][ T5249] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.655477][ T5249] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.665591][ T5249] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 462.680088][ T5249] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 462.689579][ T5249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.702047][ T5249] usb 5-1: config 0 descriptor?? [ 462.804612][ T46] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 462.812684][ T5880] usb 6-1: Using ep0 maxpacket: 8 [ 462.820406][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 462.831925][ T5880] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 462.841647][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.854099][ T5880] usb 6-1: config 0 descriptor?? [ 463.060706][ T5880] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 463.141740][ T5249] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.004E/input/input56 [ 463.197065][ T46] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 463.232020][ T46] usb 2-1: USB disconnect, device number 62 [ 463.270331][ T5249] microsoft 0003:045E:07DA.004E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 463.319463][ T5880] usb 6-1: USB disconnect, device number 19 [ 463.382857][ T5249] usb 5-1: USB disconnect, device number 56 [ 463.470527][T19134] all (unregistering): Released all slaves [ 464.524017][ T5249] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 464.706503][ T5249] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 464.753475][ T5249] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.806120][ T5249] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 464.836144][ T5249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.900604][T19185] bridge_slave_1: Caught tx_queue_len zero misconfig [ 465.077147][ T5249] usb 3-1: usb_control_msg returned -32 [ 465.111262][ T5249] usbtmc 3-1:16.0: can't read capabilities [ 465.222572][T19195] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.677599][ T5880] usb 3-1: USB disconnect, device number 59 [ 466.677082][T19237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.693191][T19237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.787810][T19237] macsec1: left promiscuous mode [ 466.799681][ T35] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.817655][ T35] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.860495][T19238] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.893959][ T35] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.954440][T19255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5755'. [ 466.980830][T19258] 9p: Bad value for 'rfdno' [ 467.052663][T19260] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 467.364299][T19279] debugfs: '1^!' already exists in 'ieee80211' [ 467.429289][T19285] veth1_to_team: Caught tx_queue_len zero misconfig [ 467.477880][T19283] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 467.510150][T19283] CPU: 1 UID: 0 PID: 19283 Comm: syz.2.5767 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.510199][T19283] Tainted: [L]=SOFTLOCKUP [ 467.510207][T19283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 467.510221][T19283] Call Trace: [ 467.510229][T19283] [ 467.510238][T19283] dump_stack_lvl+0x100/0x190 [ 467.510273][T19283] sysfs_warn_dup.cold+0x1c/0x28 [ 467.510307][T19283] sysfs_do_create_link_sd+0x113/0x140 [ 467.510334][T19283] sysfs_create_link+0x61/0xc0 [ 467.510361][T19283] device_add+0x675/0x1920 [ 467.510395][T19283] ? __pfx_device_add+0x10/0x10 [ 467.510423][T19283] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 467.510451][T19283] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 467.510494][T19283] wiphy_register+0x1edd/0x2d90 [ 467.510521][T19283] ? __rtnl_unlock+0xb9/0xf0 [ 467.510555][T19283] ? __pfx_wiphy_register+0x10/0x10 [ 467.510584][T19283] ? __asan_memset+0x23/0x50 [ 467.510615][T19283] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 467.510662][T19283] ieee80211_register_hw+0x3055/0x4570 [ 467.510711][T19283] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 467.510744][T19283] ? __pfx___debug_object_init+0x10/0x10 [ 467.510784][T19283] ? find_held_lock+0x2b/0x80 [ 467.510825][T19283] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 467.510853][T19283] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 467.510890][T19283] ? __hrtimer_setup+0x208/0x330 [ 467.510924][T19283] mac80211_hwsim_new_radio+0x2a01/0x5ae0 [ 467.510975][T19283] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 467.511008][T19283] ? __asan_memcpy+0x3c/0x60 [ 467.511042][T19283] hwsim_new_radio_nl+0xc5f/0x1370 [ 467.511070][T19283] ? rcu_is_watching+0x12/0xc0 [ 467.511105][T19283] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 467.511143][T19283] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 467.511183][T19283] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 467.511224][T19283] genl_family_rcv_msg_doit+0x214/0x300 [ 467.511257][T19283] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 467.511295][T19283] ? bpf_lsm_capable+0x9/0x10 [ 467.511318][T19283] ? security_capable+0x80/0x260 [ 467.511350][T19283] ? ns_capable+0xd2/0xf0 [ 467.511384][T19283] genl_rcv_msg+0x560/0x800 [ 467.511419][T19283] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.511450][T19283] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 467.511483][T19283] ? __lock_acquire+0x4a5/0x2630 [ 467.511517][T19283] netlink_rcv_skb+0x159/0x420 [ 467.511544][T19283] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.511577][T19283] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.511618][T19283] ? netlink_deliver_tap+0x1ae/0xcc0 [ 467.511650][T19283] genl_rcv+0x28/0x40 [ 467.511677][T19283] netlink_unicast+0x585/0x850 [ 467.511709][T19283] ? __pfx_netlink_unicast+0x10/0x10 [ 467.511746][T19283] netlink_sendmsg+0x8b0/0xda0 [ 467.511779][T19283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.511805][T19283] ? __might_fault+0xc0/0x140 [ 467.511849][T19283] ____sys_sendmsg+0x9e1/0xb70 [ 467.511875][T19283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.511905][T19283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.511940][T19283] ? __pfx_futex_wake_mark+0x10/0x10 [ 467.511984][T19283] ___sys_sendmsg+0x190/0x1e0 [ 467.512015][T19283] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.512086][T19283] __sys_sendmsg+0x170/0x220 [ 467.512121][T19283] ? __pfx___sys_sendmsg+0x10/0x10 [ 467.512152][T19283] ? __x64_sys_futex+0x34f/0x4d0 [ 467.512201][T19283] ? rcu_is_watching+0x12/0xc0 [ 467.512239][T19283] do_syscall_64+0x10b/0xf80 [ 467.512270][T19283] ? clear_bhb_loop+0x40/0x90 [ 467.512300][T19283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.512325][T19283] RIP: 0033:0x7f32d579c819 [ 467.512345][T19283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.512368][T19283] RSP: 002b:00007f32d39cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.512391][T19283] RAX: ffffffffffffffda RBX: 00007f32d5a16090 RCX: 00007f32d579c819 [ 467.512408][T19283] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 467.512421][T19283] RBP: 00007f32d5832c91 R08: 0000000000000000 R09: 0000000000000000 [ 467.512435][T19283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.512449][T19283] R13: 00007f32d5a16128 R14: 00007f32d5a16090 R15: 00007ffc307a23e8 [ 467.512483][T19283] [ 468.326916][ T29] audit: type=1400 audit(1776547240.573:1032): avc: denied { add_name } for pid=19309 comm="syz.2.5780" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 468.367852][ T29] audit: type=1400 audit(1776547240.573:1033): avc: denied { create } for pid=19309 comm="syz.2.5780" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 468.388837][T19310] o2cb: This node has not been configured. [ 468.396391][T19310] o2cb: Cluster check failed. Fix errors before retrying. [ 468.404622][T19310] (syz.2.5780,19310,1):user_dlm_register:674 ERROR: status = -22 [ 468.412879][ T29] audit: type=1400 audit(1776547240.636:1034): avc: denied { associate } for pid=19309 comm="syz.2.5780" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 468.435392][T19310] (syz.2.5780,19310,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 468.483914][T19316] sctp: [Deprecated]: syz.4.5781 (pid 19316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.483914][T19316] Use struct sctp_sack_info instead [ 469.114688][ T5249] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 469.259229][ T5249] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 469.270868][ T5249] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 469.302592][ T5249] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 469.331895][T19361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5802'. [ 469.337368][ T5249] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 469.362084][T19361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5802'. [ 469.371141][ T5249] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 469.402585][ T5249] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 469.412707][ T5249] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 469.421015][ T5249] usb 3-1: Product: syz [ 469.425386][ T5249] usb 3-1: Manufacturer: syz [ 469.446775][ T5249] cdc_wdm 3-1:1.0: skipping garbage [ 469.456450][ T5249] cdc_wdm 3-1:1.0: skipping garbage [ 469.472948][ T5249] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 469.486356][ T5249] cdc_wdm 3-1:1.0: Unknown control protocol [ 470.154818][T19397] netlink: 'syz.3.5813': attribute type 10 has an invalid length. [ 470.192867][T19397] syz_tun: entered promiscuous mode [ 470.383791][ T5940] usb 3-1: USB disconnect, device number 60 [ 470.613442][ T29] audit: type=1400 audit(1776547242.977:1035): avc: denied { ioctl } for pid=19425 comm="syz.3.5826" path="socket:[67939]" dev="sockfs" ino=67939 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 470.720863][T19432] 9p: Bad value for 'rfdno' [ 470.790975][ T5930] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 470.931999][T19442] netlink: 'syz.1.5833': attribute type 13 has an invalid length. [ 470.936776][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.952246][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.975111][ T5930] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 470.984399][ T5930] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 470.992486][ T5930] usb 5-1: Manufacturer: syz [ 470.998896][ T5930] usb 5-1: config 0 descriptor?? [ 471.153743][ T5880] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 471.305284][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 471.313472][ T5880] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 471.322933][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.324316][ T5940] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 471.331042][ T5880] usb 3-1: Product: syz [ 471.342831][ T5880] usb 3-1: Manufacturer: syz [ 471.347503][ T5880] usb 3-1: SerialNumber: syz [ 471.355581][ T5880] usb 3-1: config 0 descriptor?? [ 471.363488][ T5880] usb 3-1: selecting invalid altsetting 1 [ 471.369217][ T5880] technisat-usb2: could not set alternate setting to 0 [ 471.497799][ T5940] usb 2-1: unable to get BOS descriptor or descriptor too short [ 471.506744][ T5940] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 471.520615][ T5940] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 471.530044][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.538154][ T5940] usb 2-1: Product: syz [ 471.542350][ T5940] usb 2-1: Manufacturer: syz [ 471.547405][ T5940] usb 2-1: SerialNumber: syz [ 471.560747][ T5880] technisat-usb2: firmware version: 0.0 [ 471.567282][ T5880] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 471.782470][ T5940] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 471.792147][ T5930] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.004F/input/input57 [ 471.862234][ T5930] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.004F/input/input58 [ 471.879833][ T5930] input: syz Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.004F/input/input59 [ 471.898119][ T5930] input: syz Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.004F/input/input60 [ 471.934604][ T5930] uclogic 0003:256C:006D.004F: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0 [ 471.951614][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 471.963231][ T5880] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 471.983458][ T5940] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 471.987245][ T5880] usb 3-1: media controller created [ 471.996734][ T5930] usb 5-1: USB disconnect, device number 57 [ 472.003822][ T5940] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 472.011942][ T5880] technisat-usb2: i2c-error: out failed 53 = -22 [ 472.044884][ T5880] dvb-usb: MAC address reading failed. [ 472.120324][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 472.245047][T19455] fido_id[19455]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 472.287562][ T5880] DVB: Unable to find symbol stv090x_attach() [ 472.295177][ T5880] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 472.352990][ T5880] rc_core: IR keymap rc-technisat-usb2 not found [ 472.359575][ T5880] Registered IR keymap rc-empty [ 472.367785][ T5940] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 472.368944][ T5880] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 472.377466][ T5940] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 472.389253][ T5880] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input61 [ 472.417881][ T5880] dvb-usb: schedule remote query interval to 100 msecs. [ 472.498600][ T5880] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 472.530461][ T46] dvb-usb: error -71 while querying for an remote control event. [ 472.546797][ T5880] usb 3-1: USB disconnect, device number 61 [ 472.587417][ T5940] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 472.716003][ T5940] usb 2-1: USB disconnect, device number 63 [ 472.876272][ T5880] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 472.893695][T19468] binder: 19467:19468 ioctl 4018620d 0 returned -22 [ 472.941584][T17066] udevd[17066]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.435481][ T5880] hid_parser_main: 21 callbacks suppressed [ 473.435503][ T5880] hid-generic 0004:0004:FFFF0001.0050: unknown main item tag 0x0 [ 473.465656][ T5880] hid-generic 0004:0004:FFFF0001.0050: unknown main item tag 0x0 [ 473.483050][ T5880] hid-generic 0004:0004:FFFF0001.0050: unknown main item tag 0x0 [ 473.512958][ T5880] hid-generic 0004:0004:FFFF0001.0050: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 474.696557][ T5940] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 474.791406][ T799] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 474.849006][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 474.857531][ T5940] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.870061][ T5940] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 11 [ 474.880389][ T5940] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 474.890439][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.946599][ T799] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.971541][ T799] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 474.990649][ T799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.999512][ T799] usb 3-1: Product: syz [ 475.004366][ T799] usb 3-1: Manufacturer: syz [ 475.009159][ T799] usb 3-1: SerialNumber: syz [ 475.027899][ T799] usb 3-1: selecting invalid altsetting 1 [ 475.135167][T19550] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 475.168671][T19574] loop2: detected capacity change from 0 to 7 [ 475.170479][ T5940] usb 5-1: USB disconnect, device number 58 [ 475.204514][T19574] Dev loop2: unable to read RDB block 7 [ 475.222338][T19574] loop2: AHDI p1 p3 p4 [ 475.231928][T19574] loop2: partition table partially beyond EOD, truncated [ 475.243464][T19574] loop2: p1 start 1818582900 is beyond EOD, truncated [ 475.256846][T19574] loop2: p3 size 4261412863 extends beyond EOD, truncated [ 475.395942][T17066] udevd[17066]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 475.411353][T19582] netlink: 'syz.1.5893': attribute type 5 has an invalid length. [ 475.431724][ T799] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 475.449560][ T799] cdc_ncm 3-1:1.0: bind() failure [ 475.485744][ T799] usb 3-1: USB disconnect, device number 62 [ 475.990336][ T35] Bluetooth: hci5: Frame reassembly failed (-84) [ 476.048883][ T46] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 476.067637][ T5880] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 476.203404][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.224261][ T46] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 476.234789][ T5880] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 476.243187][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.258988][ T5880] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 476.270572][ T46] usb 2-1: config 0 descriptor?? [ 476.278456][ T5880] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 476.293164][ T46] pwc: Askey VC010 type 2 USB webcam detected. [ 476.300462][ T5880] usb 6-1: config 0 interface 0 has no altsetting 0 [ 476.308730][ T5880] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 476.318175][ T5880] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 476.329963][ T5880] usb 6-1: config 0 interface 0 has no altsetting 0 [ 476.338217][ T5880] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 476.347487][ T5880] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 476.358620][ T5880] usb 6-1: config 0 interface 0 has no altsetting 0 [ 476.366292][ T5880] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 476.375368][ T5880] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 476.386562][ T5880] usb 6-1: config 0 interface 0 has no altsetting 0 [ 476.394322][ T5880] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 476.403318][ T5880] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 476.414343][ T5880] usb 6-1: config 0 interface 0 has no altsetting 0 [ 476.422088][ T5880] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 476.431070][ T5880] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 476.442121][ T5880] usb 6-1: config 0 interface 0 has no altsetting 0 [ 476.449764][ T5880] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 476.458794][ T5880] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 476.469817][ T5880] usb 6-1: config 0 interface 0 has no altsetting 0 [ 476.477449][ T5880] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 476.486544][ T5880] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 476.497587][ T5880] usb 6-1: config 0 interface 0 has no altsetting 0 [ 476.506178][ T5880] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 476.515262][ T5880] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 476.523620][ T5880] usb 6-1: Product: syz [ 476.527857][ T5880] usb 6-1: Manufacturer: syz [ 476.532476][ T5880] usb 6-1: SerialNumber: syz [ 476.539000][ T5880] usb 6-1: config 0 descriptor?? [ 476.543945][ T5940] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 476.555282][ T5880] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 476.687131][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 476.700439][ T5940] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 476.709748][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.717885][ T5940] usb 3-1: Product: syz [ 476.722248][ T5940] usb 3-1: Manufacturer: syz [ 476.727926][ T5940] usb 3-1: SerialNumber: syz [ 476.735834][ T5940] usb 3-1: config 0 descriptor?? [ 476.766687][T19622] fuse: fd is not a fuse device [ 476.857026][ C1] usb 6-1: yurex_control_callback - control failed: -71 [ 476.858508][ T799] usb 6-1: USB disconnect, device number 20 [ 476.881476][ T799] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 476.890858][ T29] audit: type=1400 audit(1776547249.570:1036): avc: denied { create } for pid=19596 comm="syz.1.5900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 476.913918][ T46] pwc: recv_control_msg error -71 req 02 val 2700 [ 476.932911][ T46] pwc: recv_control_msg error -71 req 02 val 2c00 [ 476.941153][ T46] pwc: recv_control_msg error -71 req 04 val 1000 [ 476.952815][ T46] pwc: recv_control_msg error -71 req 04 val 1300 [ 476.960270][ T46] pwc: recv_control_msg error -71 req 04 val 1400 [ 476.970360][ T46] pwc: recv_control_msg error -71 req 02 val 2000 [ 476.977381][ T46] pwc: recv_control_msg error -71 req 02 val 2100 [ 476.984409][ T46] pwc: recv_control_msg error -71 req 04 val 1500 [ 476.991429][ T46] pwc: recv_control_msg error -71 req 02 val 2500 [ 476.998380][ T46] pwc: recv_control_msg error -71 req 02 val 2400 [ 477.006111][ T46] pwc: recv_control_msg error -71 req 02 val 2600 [ 477.013070][ T46] pwc: recv_control_msg error -71 req 02 val 2900 [ 477.020539][ T46] pwc: recv_control_msg error -71 req 02 val 2800 [ 477.027487][ T46] pwc: recv_control_msg error -71 req 04 val 1100 [ 477.035486][ T46] pwc: recv_control_msg error -71 req 04 val 1200 [ 477.077816][ T46] pwc: Registered as video103. [ 477.086117][ T46] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input62 [ 477.115386][ T46] usb 2-1: USB disconnect, device number 64 [ 477.140016][ T5940] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 477.169649][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 477.181095][ T5940] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 477.200987][ T5940] usb 3-1: media controller created [ 477.217337][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 477.782601][ T5940] zl10353_read_register: readreg error (reg=127, ret==0) [ 477.792313][T19618] dtv5100: wlen = 0, aborting. [ 477.806255][ T5940] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 477.833253][ T5940] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 477.861968][ T5940] usb 3-1: USB disconnect, device number 63 [ 477.886394][T19654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5924'. [ 477.910555][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 477.917141][ T5815] Bluetooth: hci5: command 0x1003 tx timeout [ 477.962046][ T5940] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 478.254574][T19666] input: syz1 as /devices/virtual/input/input64 [ 478.685204][T19686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5939'. [ 478.724293][T19686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5939'. [ 479.067309][T19698] netlink: 'syz.4.5944': attribute type 2 has an invalid length. [ 479.093574][T19698] netlink: 'syz.4.5944': attribute type 2 has an invalid length. [ 479.302854][T19711] 9p: Bad value for 'rfdno' [ 479.484758][T19721] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19721 comm=syz.5.5954 [ 479.525914][T19721] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19721 comm=syz.5.5954 [ 479.784929][T19733] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5961'. [ 479.834166][T19737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5963'. [ 479.868615][T19737] block nbd0: Unsupported socket: should be TCP or UNIX. [ 480.168043][T19759] Invalid argument reading file caps for ./file0 [ 480.496869][ T5249] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 480.669860][ T5249] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 480.685014][ T5249] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 480.696107][ T5249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 480.704818][ T5249] usb 2-1: SerialNumber: syz [ 481.050729][ T46] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 481.081920][T19785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.250955][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 481.265350][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 481.296491][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 481.312446][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 481.323200][T19799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5989'. [ 481.326793][ T5249] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 481.338614][T19799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5989'. [ 481.343041][ T46] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 481.365092][ T5249] usb 2-1: USB disconnect, device number 65 [ 481.374769][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.424372][ T46] usb 5-1: config 0 descriptor?? [ 481.481728][T19801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5990'. [ 481.492761][T19801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5990'. [ 481.509446][T19801] geneve2: entered promiscuous mode [ 481.515546][T19801] geneve2: entered allmulticast mode [ 481.829099][ T46] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 481.841917][ T46] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 481.850169][ T46] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 481.857649][ T46] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 481.873491][ T46] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 481.882926][ T46] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 481.891076][ T46] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 481.898822][ T46] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 481.907193][ T46] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 481.914849][ T46] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 481.966643][ T46] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 482.081770][ T46] usb 5-1: USB disconnect, device number 59 [ 482.734665][ T46] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 482.913153][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 482.913162][ T46] usb 6-1: Using ep0 maxpacket: 8 [ 482.917905][ T46] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 482.933985][T19839] Bluetooth: hci5: Frame reassembly failed (-84) [ 482.941244][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.949680][ T46] usb 6-1: Product: syz [ 482.954194][ T46] usb 6-1: Manufacturer: syz [ 482.958811][ T46] usb 6-1: SerialNumber: syz [ 482.967910][ T46] usb 6-1: config 0 descriptor?? [ 482.979755][ T46] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 483.849689][T19865] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 483.851036][T19866] overlayfs: failed to clone lowerpath [ 483.873792][ T29] audit: type=1400 audit(1776547256.899:1037): avc: denied { read } for pid=19863 comm="syz.2.6015" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 483.948051][ T29] audit: type=1400 audit(1776547256.899:1038): avc: denied { read } for pid=19863 comm="syz.2.6015" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 483.984945][ T46] gspca_sonixj: reg_w1 err -71 [ 484.013411][ T29] audit: type=1400 audit(1776547256.899:1039): avc: denied { open } for pid=19863 comm="syz.2.6015" path="/1210/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 484.078272][ T29] audit: type=1400 audit(1776547256.899:1040): avc: denied { read } for pid=19863 comm="syz.2.6015" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 484.087270][ T46] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 484.114077][T19870] netlink: 'syz.3.6016': attribute type 2 has an invalid length. [ 484.129167][ T29] audit: type=1400 audit(1776547256.930:1041): avc: denied { read } for pid=19863 comm="syz.2.6015" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 484.152024][T19870] netlink: 'syz.3.6016': attribute type 2 has an invalid length. [ 484.160840][ T46] usb 6-1: USB disconnect, device number 21 [ 484.171258][ T29] audit: type=1400 audit(1776547256.972:1042): avc: denied { getattr } for pid=19863 comm="syz.2.6015" name="saved_tgids" dev="tracefs" ino=3747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 484.320341][T19873] geneve3: entered promiscuous mode [ 484.325779][T19873] geneve3: entered allmulticast mode [ 484.497672][T19879] netlink: 'syz.4.6019': attribute type 10 has an invalid length. [ 484.505705][T19879] hsr0: entered promiscuous mode [ 484.511620][T19879] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 484.530195][T19879] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 484.559439][T19879] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 484.839681][ T5815] Bluetooth: hci5: command 0xfc11 tx timeout [ 484.846406][ T5823] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 485.155118][T19895] loop5: detected capacity change from 0 to 7 [ 485.177940][T19895] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 485.195497][T19895] loop5: partition table partially beyond EOD, truncated [ 485.217571][T19895] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 485.242409][T19895] loop5: p2 start 832840281 is beyond EOD, truncated [ 485.387281][T17066] udevd[17066]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 485.559688][T19910] lo: Caught tx_queue_len zero misconfig [ 486.013370][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.027176][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.097048][ T5940] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 486.262809][ T5940] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 486.295688][ T5940] usb 6-1: config 0 interface 0 has no altsetting 0 [ 486.330551][ T5940] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 486.350883][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 486.368785][ T5940] usb 6-1: Product: syz [ 486.384370][ T5940] usb 6-1: Manufacturer: syz [ 486.390815][ T5940] usb 6-1: SerialNumber: syz [ 486.419260][ T5940] usb 6-1: config 0 descriptor?? [ 486.445847][ T5940] usb 6-1: selecting invalid altsetting 0 [ 486.684828][ T5940] usb 6-1: USB disconnect, device number 22 [ 487.970844][T20008] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6077'. [ 487.988261][T20008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6077'. [ 488.000708][T20008] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6077'. [ 488.014080][T20008] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6077'. [ 488.024034][T20008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6077'. [ 488.034314][T20008] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6077'. [ 488.481011][T20041] loop2: detected capacity change from 0 to 1 [ 488.490173][T20037] pim6reg1: entered promiscuous mode [ 488.496266][T20037] pim6reg1: entered allmulticast mode [ 488.501923][T20041] Dev loop2: unable to read RDB block 1 [ 488.516489][T20041] loop2: unable to read partition table [ 488.524570][T20041] loop2: partition table beyond EOD, truncated [ 488.531046][T20041] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 488.856871][T20053] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.914809][T20063] syzkaller1: entered promiscuous mode [ 488.941646][T20063] syzkaller1: entered allmulticast mode [ 489.286953][T20083] delete_channel: no stack [ 489.304002][ T29] audit: type=1400 audit(1776547262.600:1043): avc: denied { setopt } for pid=20081 comm="syz.1.6108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 489.453992][T20093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6114'. [ 489.474551][T20093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6114'. [ 489.668696][ T46] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 489.824225][ T46] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 489.840245][ T46] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 489.862048][ T46] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 489.887628][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.912943][T20091] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 489.933720][ T46] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 489.995980][T20108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.196842][ T5940] usb 6-1: USB disconnect, device number 23 [ 490.488645][T20114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6124'. [ 490.525868][T20114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6124'. [ 490.697980][ T29] audit: type=1326 audit(1776547264.070:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20121 comm="syz.4.6127" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00aef9c819 code=0x0 [ 490.703599][T20127] sctp: [Deprecated]: syz.1.6129 (pid 20127) Use of struct sctp_assoc_value in delayed_ack socket option. [ 490.703599][T20127] Use struct sctp_sack_info instead [ 490.794486][ T29] audit: type=1400 audit(1776547264.164:1045): avc: denied { ioctl } for pid=20129 comm="syz.5.6130" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 490.884169][T20133] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x23b pfn:0x9c874 [ 490.894560][T20133] memcg:ffff88801caff000 [ 490.899683][T20133] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 490.908006][T20133] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 490.916988][T20133] raw: 000000000000023b 0000000000000000 00000001ffffffff ffff88801caff000 [ 490.937948][T20133] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 490.968028][T20133] page_owner tracks the page as allocated [ 490.979313][ T29] audit: type=1400 audit(1776547264.364:1046): avc: denied { read } for pid=5164 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 491.012488][T20133] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 20133, tgid 20129 (syz.5.6130), ts 490883439743, free_ts 490836384466 [ 491.036129][ T29] audit: type=1400 audit(1776547264.364:1047): avc: denied { search } for pid=5164 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.060303][T20133] post_alloc_hook+0x153/0x170 [ 491.068132][T20133] get_page_from_freelist+0x11a6/0x33b0 [ 491.074978][ T29] audit: type=1400 audit(1776547264.364:1048): avc: denied { search } for pid=5164 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.098688][T20133] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 491.104834][T20133] alloc_pages_mpol+0x1fb/0x540 [ 491.110517][T20133] folio_alloc_noprof+0x22/0x250 [ 491.115720][ T29] audit: type=1400 audit(1776547264.364:1049): avc: denied { add_name } for pid=5164 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.137677][T20133] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 491.144306][T20133] filemap_alloc_folio_noprof+0x5e/0x80 [ 491.150492][T20133] page_cache_ra_order+0x54b/0xf10 [ 491.156023][T20133] filemap_fault+0x1900/0x2e90 [ 491.160994][ T29] audit: type=1400 audit(1776547264.364:1050): avc: denied { create } for pid=5164 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 491.183431][T20133] __do_fault+0x10b/0x440 [ 491.188160][T20133] do_fault+0xa99/0x1750 [ 491.193040][T20133] __handle_mm_fault+0x187d/0x2a00 [ 491.209788][T20133] handle_mm_fault+0x36d/0xa20 [ 491.215461][ T29] audit: type=1400 audit(1776547264.364:1051): avc: denied { append open } for pid=5164 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 491.239435][T20133] __get_user_pages+0x1178/0x32a0 [ 491.249181][T20133] populate_vma_page_range+0x267/0x3f0 [ 491.255603][T20133] __mm_populate+0x107/0x3a0 [ 491.261066][T20133] page last free pid 20130 tgid 20129 stack trace: [ 491.267770][ T29] audit: type=1400 audit(1776547264.364:1052): avc: denied { getattr } for pid=5164 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 491.292488][T20133] free_unref_folios+0xa0d/0x16f0 [ 491.297788][T20133] folios_put_refs+0x53c/0x840 [ 491.303091][T20133] truncate_inode_pages_range+0x30c/0x1050 [ 491.312559][T20133] set_blocksize+0x2d1/0x460 [ 491.318150][T20133] blkdev_bszset+0x19b/0x240 [ 491.322905][T20133] blkdev_ioctl+0x513/0x6f0 [ 491.328461][T20133] __x64_sys_ioctl+0x18e/0x210 [ 491.333326][T20133] do_syscall_64+0x10b/0xf80 [ 491.338372][T20133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.344599][T20133] ------------[ cut here ]------------ [ 491.350966][T20133] kernel BUG at mm/filemap.c:858! [ 491.356614][T20133] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 491.363052][T20133] CPU: 0 UID: 0 PID: 20133 Comm: syz.5.6130 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.374085][T20133] Tainted: [L]=SOFTLOCKUP [ 491.378460][T20133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 491.388521][T20133] RIP: 0010:__filemap_add_folio+0xf81/0x1350 [ 491.394528][T20133] Code: e5 a6 c3 ff 48 8d 3d 1e 31 9a 0e 67 48 0f b9 3a e9 07 fd ff ff e8 cf a6 c3 ff 48 c7 c6 e0 55 bd 8b 4c 89 ef e8 d0 25 12 00 90 <0f> 0b 4c 8b 6c 24 60 e8 b3 a6 c3 ff 48 c7 84 24 a0 00 00 00 03 00 [ 491.414147][T20133] RSP: 0018:ffffc9000343f3f8 EFLAGS: 00010283 [ 491.420258][T20133] RAX: 000000000007de5e RBX: 0000000000000000 RCX: ffffc90012a3c000 [ 491.428238][T20133] RDX: 0000000000080000 RSI: ffffffff8257e8f8 RDI: ffff8880380fcec4 [ 491.436220][T20133] RBP: 0000000000112c00 R08: 0000000000000001 R09: 0000000000000000 [ 491.444207][T20133] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 491.452190][T20133] R13: ffffea0002721d00 R14: 0000000000000000 R15: 1ffff92000687eaa [ 491.460166][T20133] FS: 00007fc81aabd6c0(0000) GS:ffff8881242ef000(0000) knlGS:0000000000000000 [ 491.469097][T20133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.475673][T20133] CR2: 00007f32d39cdd58 CR3: 0000000036e0e000 CR4: 00000000003526f0 [ 491.483644][T20133] Call Trace: [ 491.486914][T20133] [ 491.489831][T20133] ? __pfx___filemap_add_folio+0x10/0x10 [ 491.495467][T20133] filemap_add_folio+0x1d8/0x690 [ 491.500401][T20133] ? __lock_acquire+0x4a5/0x2630 [ 491.505330][T20133] ? __pfx_filemap_add_folio+0x10/0x10 [ 491.510779][T20133] ? css_rstat_updated+0x1ce/0x5a0 [ 491.515880][T20133] page_cache_ra_order+0x614/0xf10 [ 491.520988][T20133] filemap_fault+0x1900/0x2e90 [ 491.525744][T20133] ? __pfx_filemap_fault+0x10/0x10 [ 491.530849][T20133] ? find_held_lock+0x2b/0x80 [ 491.535521][T20133] __do_fault+0x10b/0x440 [ 491.539843][T20133] do_fault+0xa99/0x1750 [ 491.544069][T20133] __handle_mm_fault+0x187d/0x2a00 [ 491.549172][T20133] ? mt_find+0x45e/0x8e0 [ 491.553407][T20133] ? __pfx___handle_mm_fault+0x10/0x10 [ 491.559292][T20133] ? __pfx_mt_find+0x10/0x10 [ 491.563884][T20133] handle_mm_fault+0x36d/0xa20 [ 491.568636][T20133] __get_user_pages+0x1178/0x32a0 [ 491.573647][T20133] ? __pfx___get_user_pages+0x10/0x10 [ 491.579006][T20133] populate_vma_page_range+0x267/0x3f0 [ 491.584551][T20133] ? __pfx_populate_vma_page_range+0x10/0x10 [ 491.590516][T20133] ? __pfx_find_vma_intersection+0x10/0x10 [ 491.596306][T20133] ? do_mmap+0x93f/0x12f0 [ 491.600638][T20133] __mm_populate+0x107/0x3a0 [ 491.605225][T20133] ? __pfx___mm_populate+0x10/0x10 [ 491.610423][T20133] ? up_write+0x28c/0x4f0 [ 491.614751][T20133] vm_mmap_pgoff+0x37f/0x470 [ 491.619325][T20133] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 491.624419][T20133] ? __fget_files+0x215/0x3d0 [ 491.629082][T20133] ? __fget_files+0x21f/0x3d0 [ 491.633756][T20133] ksys_mmap_pgoff+0x3cb/0x610 [ 491.638522][T20133] ? kcov_ioctl+0x16a/0x720 [ 491.643007][T20133] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 491.648271][T20133] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 491.654070][T20133] __x64_sys_mmap+0x125/0x190 [ 491.658744][T20133] do_syscall_64+0x10b/0xf80 [ 491.663323][T20133] ? clear_bhb_loop+0x40/0x90 [ 491.667984][T20133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.673872][T20133] RIP: 0033:0x7fc819b9c819 [ 491.678271][T20133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.697861][T20133] RSP: 002b:00007fc81aabd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 491.706257][T20133] RAX: ffffffffffffffda RBX: 00007fc819e16090 RCX: 00007fc819b9c819 [ 491.714209][T20133] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 491.722158][T20133] RBP: 00007fc819c32c91 R08: 0000000000000004 R09: 000000000f07e000 [ 491.730111][T20133] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 491.738060][T20133] R13: 00007fc819e16128 R14: 00007fc819e16090 R15: 00007ffd84c33038 [ 491.746020][T20133] [ 491.749029][T20133] Modules linked in: [ 491.753954][T20133] ---[ end trace 0000000000000000 ]--- [ 491.811744][T20133] RIP: 0010:__filemap_add_folio+0xf81/0x1350 [ 491.817862][T20133] Code: e5 a6 c3 ff 48 8d 3d 1e 31 9a 0e 67 48 0f b9 3a e9 07 fd ff ff e8 cf a6 c3 ff 48 c7 c6 e0 55 bd 8b 4c 89 ef e8 d0 25 12 00 90 <0f> 0b 4c 8b 6c 24 60 e8 b3 a6 c3 ff 48 c7 84 24 a0 00 00 00 03 00 [ 491.849693][T20133] RSP: 0018:ffffc9000343f3f8 EFLAGS: 00010283 [ 491.856483][T20133] RAX: 000000000007de5e RBX: 0000000000000000 RCX: ffffc90012a3c000 [ 491.865415][T20133] RDX: 0000000000080000 RSI: ffffffff8257e8f8 RDI: ffff8880380fcec4 [ 491.873774][T20133] RBP: 0000000000112c00 R08: 0000000000000001 R09: 0000000000000000 [ 491.882098][T20133] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 491.890881][T20133] R13: ffffea0002721d00 R14: 0000000000000000 R15: 1ffff92000687eaa [ 491.901129][T20133] FS: 00007fc81aabd6c0(0000) GS:ffff8881242ef000(0000) knlGS:0000000000000000 [ 491.910329][T20133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.917664][T20133] CR2: 00007fd38c3e92f8 CR3: 0000000036e0e000 CR4: 00000000003526f0 [ 491.926570][T20133] Kernel panic - not syncing: Fatal exception [ 491.932943][T20133] Kernel Offset: disabled [ 491.937249][T20133] Rebooting in 86400 seconds..