last executing test programs: 5.983597025s ago: executing program 1 (id=751): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) shutdown(r5, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_VLAN={0x6}]}, 0x24}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000540)=ANY=[@ANYBLOB="10000000111401ea"], 0x10}, 0x1, 0x0, 0x0, 0x408c}, 0x40040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5218) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x12, 0x4}, 0x9c) 5.964801685s ago: executing program 0 (id=752): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) futex(0x0, 0x7, 0x1, 0x0, 0x0, 0x0) 5.188691105s ago: executing program 2 (id=755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 4.96944648s ago: executing program 0 (id=756): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D'], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 4.615387928s ago: executing program 0 (id=757): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='svcrdma_post_recv\x00', r0, 0x0, 0x9}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r2 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x1, 0x8, 0x3ff, 0x9, {{0x7, 0x4, 0x1, 0x15, 0x1c, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r1, 0x0, 0x4}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4.286302726s ago: executing program 4 (id=759): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair(0x27, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000) 4.256932153s ago: executing program 0 (id=760): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYBLOB="82"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) 3.977632694s ago: executing program 4 (id=761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x30, r1, 0x1, 0x80000, 0x1, {0x1, 0x0, 0x106}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x30}}, 0x0) 3.925485927s ago: executing program 3 (id=762): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r1, r0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x2, r1, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 3.925006884s ago: executing program 1 (id=763): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41, 0x0, 0x6}) 3.84193084s ago: executing program 3 (id=764): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f000000bb80)=0x7fff, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x9c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) fcntl$setstatus(r3, 0x4, 0x42400) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x405a51bc3e632e7c) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x2, 0x24, &(0x7f0000000080)={0x80, 0x0, 0x5, 0xffff, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x2, 0xdb, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) writev(r1, 0x0, 0x0) fsopen(&(0x7f00000043c0)='devpts\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}}, 0x0) 3.817274945s ago: executing program 4 (id=765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) (async) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x939e02dc105d5baa, 0x2}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) recvmmsg(r6, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f00000052c0)=""/232, 0xe8}, {&(0x7f0000003080)=""/4093, 0xffd}, {&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000180)=""/192, 0xc0}], 0x5}, 0x8}], 0x2000, 0x0, 0x0) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) write$UHID_INPUT(r7, &(0x7f00000013c0)={0x8, {"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", 0x1000}}, 0x1006) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) (async) open_tree(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x89901) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5437, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3.76994374s ago: executing program 1 (id=766): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x404c900}, 0x4000000) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000200)={0x0, "7fe99814c2440619f3d9d94b4e4a84a23881e89eacc1333ffe736a89fb50587c"}) syz_open_dev$video(0x0, 0x2009, 0x20000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100001f00080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) 3.450003016s ago: executing program 3 (id=767): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D'], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 3.314281152s ago: executing program 3 (id=768): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = fanotify_init(0x500, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x380000000) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) fanotify_mark(r0, 0x1, 0x4000003a, r2, 0x0) r3 = io_uring_setup(0x5be0, &(0x7f0000000000)={0x0, 0x400067c1, 0x2, 0x4000000, 0x20c}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x6) close_range(r3, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0xbe0, &(0x7f0000000640)={0x0, 0xec22, 0x400, 0x2, 0x40000337, 0x0, r2}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) set_mempolicy(0x8004, &(0x7f0000003ac0)=0x9, 0x5) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r9, 0x40044102, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r11, 0xc048aec8, &(0x7f0000000740)={0x5, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x20}, {0x0, 0x4}]}}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r12, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r13, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r12, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r14, r13, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r12, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r14, r15, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 3.015585544s ago: executing program 2 (id=769): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x1000000}) 2.884732996s ago: executing program 2 (id=770): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103001) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000000), 0x4) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000480)={{0x3, 0x3, 0x24000000, 0x3ff, '\x00', 0x6}, 0x1, [0x9, 0x11, 0xfffffffffffffff9, 0x5, 0xf, 0x1, 0x0, 0xff, 0xffffffffffffffff, 0x9, 0x1, 0x8, 0xfffffffffffffff7, 0x4, 0x3ff, 0x1, 0x36, 0x482, 0xc0010, 0x9, 0x1, 0x3ff, 0x7ff, 0x5, 0x80, 0x0, 0x4, 0x6, 0xffffffff, 0x9, 0x1, 0x71, 0xa, 0x2, 0x1ff, 0x7fffffff, 0x9, 0x4, 0x5, 0x10, 0xfffffffffffffff7, 0x16, 0x9db6, 0x7f, 0xfffffffffffffff6, 0x2, 0x5, 0x7, 0x0, 0x8, 0x3, 0x303, 0xa2, 0x8000, 0x3, 0x400, 0x9, 0x1fd, 0x3, 0x2, 0xc9a8, 0xffffffff, 0x3, 0x8, 0xffff, 0x0, 0x10000, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x9, 0xec, 0x7f, 0xffffffffffffffff, 0x100000000, 0x9f1a, 0xffffffffffffffff, 0xffffffff, 0x8, 0x0, 0x9, 0x3, 0x9, 0x1, 0x4, 0x3, 0xa, 0x8, 0x8, 0x1, 0x2, 0x4, 0xbf, 0xe70, 0xfffffffffffffff7, 0xb, 0x8000000000000000, 0x6, 0x9, 0x5, 0x639, 0x8000000000000000, 0x4, 0x400, 0x9a06, 0x9, 0xffffffff00000000, 0x3, 0xb3, 0x200080000001, 0x5, 0xd30, 0x7, 0x4, 0x256, 0x6ff, 0x3, 0x7, 0x1ff, 0x6, 0x9, 0x0, 0x1b485fe1, 0x7, 0x7, 0xfffffffffffffff7, 0x9]}) 2.868369509s ago: executing program 2 (id=771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) chmod(&(0x7f0000000140)='./file0\x00', 0x50) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x4004000, &(0x7f000005ffe4)={0xa, 0x4e27, 0x7, @mcast2}, 0x1c) shutdown(r2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0xffffffffffffff62, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a400000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff0000000008000839125b1000"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0xa9, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000008400000008"], 0x18}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x83}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$security_evm(r0, &(0x7f0000000200), &(0x7f0000000240)=@md5={0x1, "703596489885e0121dbc8fe650fcbd15"}, 0x11, 0x0) 2.356498159s ago: executing program 3 (id=772): socket$tipc(0x1e, 0x5, 0x0) pipe2$9p(0x0, 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) tkill(r1, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x34020000) (fail_nth: 1) 1.821795346s ago: executing program 3 (id=773): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x4000) lsm_set_self_attr(0x68, &(0x7f0000000800)=ANY=[@ANYBLOB="68000000000000004b000000000000002000000000110000"], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r8 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000001780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001740)={&(0x7f00000002c0)={0x14, 0x28, 0x1, 0x70bd2d, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4051}, 0x20000800) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r9 = memfd_secret(0x80000) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000080)=0x2) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0', [{0x20, '\xdfe,\'A'}, {}], 0xa, "83a642275f9813c337aa65b0e58a3c12fbbfcb012a3da11c50e6186412e1274ed0aeaa7cedc05f77a7143bc6000000000000009a0000"}, 0x48) 1.593666778s ago: executing program 4 (id=774): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) shutdown(r5, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_VLAN={0x6}]}, 0x24}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000540)=ANY=[@ANYBLOB="10000000111401ea"], 0x10}, 0x1, 0x0, 0x0, 0x408c}, 0x40040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5218) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x12, 0x4}, 0x9c) 1.526573146s ago: executing program 2 (id=775): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x2, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 1.466149081s ago: executing program 1 (id=776): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41, 0x0, 0x6}) 1.34914089s ago: executing program 1 (id=777): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2, 0x6, 0x0, 0x8, 0x3, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e23}]}, 0x18}}, 0x4004010) 1.290976069s ago: executing program 2 (id=778): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40542, 0x1) r0 = socket(0x40000000015, 0x5, 0x1284) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@multicast1, @rand_addr, 0x0}, &(0x7f00000001c0)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x5c) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r3, 0x1}, 0x20) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) mprotect(&(0x7f0000b0f000/0x1000)=nil, 0x1000, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000914bf20c80a01c3d5820102031d0902120001000000000904"], 0x0) connect$unix(r5, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf25030000001800018006000104020000000c00050020000000000000003f45c3144d338e6bf9f7c57626bb6b2d6b364cfd3a8b2c48ce1fa94a3560bdb046548b045eb5bdb00225675cde50c3c7992a12b963e1fd7b1fcd741030a774d8a42b97086eb1e8dcd84e38d94717"], 0x2c}, 0x1, 0x0, 0x0, 0x240408d0}, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000200)="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") r7 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x80000) ioctl$EVIOCGLED(r7, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x1068) 1.213086563s ago: executing program 1 (id=779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xf, &(0x7f0000000600)=@string={0xf, 0x3, "fb570469105e22356df544f44e"}}]}) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000000300)={0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="8b3300000000fcdb"], 0x28}}, 0x50) socket$inet_sctp(0x2, 0x1, 0x84) 899.319632ms ago: executing program 0 (id=780): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='afs_protocol_error\x00', 0xffffffffffffffff, 0x0, 0x5593}, 0x18) openat$audio(0xffffffffffffff9c, 0x0, 0xa0100, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000500)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, '@', 0x3a, '\\\x9e\xbd\x1d\r6\xea\x12+(\x03z', 0x3a, './file0', 0x3a, [0x50, 0x43]}, 0x36) r5 = epoll_create1(0x80000) r6 = fcntl$dupfd(r3, 0x406, r5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f00000001c0)={0x10000014}) r7 = getpid() r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r6, &(0x7f0000000100)={r5, r6}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r9, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000140)) fanotify_init(0x10, 0x40000) 73.784714ms ago: executing program 4 (id=781): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103001) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000000), 0x4) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000480)={{0x3, 0x3, 0x24000000, 0x3ff, '\x00', 0x6}, 0x1, [0x9, 0x11, 0xfffffffffffffff9, 0x5, 0xf, 0x1, 0x0, 0xff, 0xffffffffffffffff, 0x9, 0x1, 0x8, 0xfffffffffffffff7, 0x4, 0x3ff, 0x1, 0x36, 0x482, 0xc0010, 0x9, 0x1, 0x3ff, 0x7ff, 0x5, 0x80, 0x0, 0x4, 0x6, 0xffffffff, 0x9, 0x1, 0x71, 0xa, 0x2, 0x1ff, 0x7fffffff, 0x9, 0x4, 0x5, 0x10, 0xfffffffffffffff7, 0x16, 0x9db6, 0x7f, 0xfffffffffffffff6, 0x2, 0x5, 0x7, 0x0, 0x8, 0x3, 0x303, 0xa2, 0x8000, 0x3, 0x400, 0x9, 0x1fd, 0x3, 0x2, 0xc9a8, 0xffffffff, 0x3, 0x8, 0xffff, 0x0, 0x10000, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x9, 0xec, 0x7f, 0xffffffffffffffff, 0x100000000, 0x9f1a, 0xffffffffffffffff, 0xffffffff, 0x8, 0x0, 0x9, 0x3, 0x9, 0x1, 0x4, 0x3, 0xa, 0x8, 0x8, 0x1, 0x2, 0x4, 0xbf, 0xe70, 0xfffffffffffffff7, 0xb, 0x8000000000000000, 0x6, 0x9, 0x5, 0x639, 0x8000000000000000, 0x4, 0x400, 0x9a06, 0x9, 0xffffffff00000000, 0x3, 0xb3, 0x200080000001, 0x5, 0xd30, 0x7, 0x4, 0x256, 0x6ff, 0x3, 0x7, 0x1ff, 0x6, 0x9, 0x0, 0x1b485fe1, 0x7, 0x7, 0xfffffffffffffff7, 0x9]}) 24.527315ms ago: executing program 0 (id=782): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000004, 0xffffffffffffffff, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="03000000010000001800128008000100677265000c000280080006000a"], 0x38}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035000000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc) r3 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x8) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000000040)=@bcast) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000180)={0x0, &(0x7f0000000380)}) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0xb, 0x2}, 0x8) close_range(r6, 0xffffffffffffffff, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) 0s ago: executing program 4 (id=783): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a028}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) connect$inet6(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00'}, 0x18) fcntl$addseals(r2, 0x409, 0x5) socket$kcm(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000004c0)=""/94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r5, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x1000000, 0x0, 0x20000000}, 0x8000) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x9, 0x3, 0xd, 0xc9, 0x0, 0x1, 0x0, 0x80, 0x2, 0x5, 0x2, 0x8, 0x6}, 0xe) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000045) kernel console output (not intermixed with test programs): vice number 3 [ 115.185936][ T6607] tmpfs: Bad value for 'mpol' [ 115.621123][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.706613][ T6606] netlink: 'syz.3.161': attribute type 1 has an invalid length. [ 115.715540][ T6606] netlink: 140 bytes leftover after parsing attributes in process `syz.3.161'. [ 115.762181][ T6606] netlink: 96 bytes leftover after parsing attributes in process `syz.3.161'. [ 115.821143][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 115.864104][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.945155][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 115.975287][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.060375][ T9] usb 3-1: config 0 descriptor?? [ 116.330485][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 116.330500][ T30] audit: type=1400 audit(1755104024.872:391): avc: denied { setopt } for pid=6612 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.400699][ T30] audit: type=1400 audit(1755104024.912:392): avc: denied { write } for pid=6612 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.469009][ T6596] 9pnet_fd: Insufficient options for proto=fd [ 116.481730][ T30] audit: type=1400 audit(1755104025.012:393): avc: denied { mounton } for pid=6591 comm="syz.2.158" path="/33" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 116.533779][ T30] audit: type=1400 audit(1755104025.082:394): avc: denied { name_connect } for pid=6633 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 116.554598][ T30] audit: type=1400 audit(1755104025.082:395): avc: denied { listen } for pid=6633 comm="syz.0.169" lport=53584 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.922698][ T30] audit: type=1400 audit(1755104025.442:396): avc: denied { kexec_image_load } for pid=6633 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 117.401152][ T55] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 117.561128][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 117.568856][ T55] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 117.577182][ T55] usb 5-1: config 0 has no interface number 0 [ 117.583551][ T55] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.606702][ T55] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 117.645209][ T55] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.826566][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 117.837755][ T55] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 117.851052][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 117.866453][ T9] usb 3-1: USB disconnect, device number 4 [ 117.872432][ T55] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 117.891866][ T30] audit: type=1400 audit(1755104026.442:397): avc: denied { read write } for pid=6651 comm="syz.3.174" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 117.893391][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.041150][ T24] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 118.214498][ T55] usb 5-1: config 0 descriptor?? [ 118.282214][ T6660] tmpfs: Bad value for 'mpol' [ 118.792430][ T55] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 118.809486][ T30] audit: type=1400 audit(1755104026.442:398): avc: denied { open } for pid=6651 comm="syz.3.174" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 118.899748][ T6643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.922854][ T6643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.983986][ T24] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.015172][ T24] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.049226][ T30] audit: type=1400 audit(1755104026.472:399): avc: denied { ioctl } for pid=6651 comm="syz.3.174" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 119.059682][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 119.073789][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.099194][ T24] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 119.129468][ T5923] usb 5-1: USB disconnect, device number 12 [ 119.139078][ T5923] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 119.204487][ T30] audit: type=1400 audit(1755104026.472:400): avc: denied { create } for pid=6646 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 119.207603][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.267257][ T24] usb 2-1: config 0 descriptor?? [ 120.273099][ T24] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 120.283554][ T24] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 120.292947][ T24] hid-steam 0003:28DE:1102.0005: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 120.374840][ T24] hid-steam 0003:28DE:1102.0005: Steam Controller 'XXXXXXXXXX' connected [ 120.403695][ T24] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0005/input/input9 [ 120.698912][ T24] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0 [ 120.707597][ T24] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0 [ 121.061700][ T24] hid-steam 0003:28DE:1102.0006: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 121.099696][ T6680] vlan2: entered promiscuous mode [ 121.104850][ T6680] bond0: entered promiscuous mode [ 121.109882][ T6680] bond_slave_0: entered promiscuous mode [ 121.116975][ T6680] bond_slave_1: entered promiscuous mode [ 121.561457][ T24] usb 2-1: reset full-speed USB device number 8 using dummy_hcd [ 121.717046][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'. [ 121.787005][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 121.787019][ T30] audit: type=1400 audit(1755104030.332:415): avc: denied { getopt } for pid=6693 comm="syz.3.182" lport=46324 faddr=::ffff:172.30.0.4 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.851083][ T30] audit: type=1400 audit(1755104030.392:416): avc: denied { create } for pid=6696 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.870404][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.124077][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.282882][ T9] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 122.292313][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 122.313993][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 122.325012][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 122.336562][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 122.511223][ T9] usb 1-1: Product: syz [ 122.515456][ T9] usb 1-1: Manufacturer: syz [ 122.520078][ T9] usb 1-1: SerialNumber: syz [ 122.532757][ T9] usb 1-1: config 0 descriptor?? [ 122.539584][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 122.629105][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 122.697576][ T9] usb 1-1: selecting invalid altsetting 0 [ 122.881059][ T24] usb 2-1: device descriptor read/64, error -71 [ 123.041311][ T55] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.090364][ T30] audit: type=1400 audit(1755104031.512:417): avc: denied { setopt } for pid=6696 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.388884][ T55] usb 4-1: unable to get BOS descriptor or descriptor too short [ 123.400501][ T30] audit: type=1400 audit(1755104031.782:418): avc: denied { read write } for pid=6696 comm="syz.0.183" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 123.441476][ T30] audit: type=1400 audit(1755104031.782:419): avc: denied { open } for pid=6696 comm="syz.0.183" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 123.496079][ T24] usb 2-1: reset full-speed USB device number 8 using dummy_hcd [ 123.600206][ T55] usb 4-1: too many configurations: 73, using maximum allowed: 8 [ 123.623073][ T55] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 123.640056][ T55] usb 4-1: can't read configurations, error -61 [ 124.113309][ T30] audit: type=1400 audit(1755104032.272:420): avc: denied { mount } for pid=6714 comm="syz.2.188" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 124.141734][ T30] audit: type=1400 audit(1755104032.282:421): avc: denied { remount } for pid=6714 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 124.171917][ T24] usb 2-1: device descriptor read/64, error -71 [ 124.233099][ T6719] raw_sendmsg: syz.4.189 forgot to set AF_INET. Fix it! [ 124.261128][ T55] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 124.468199][ T30] audit: type=1400 audit(1755104033.012:422): avc: denied { read write } for pid=6723 comm="syz.2.191" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 124.492721][ T30] audit: type=1400 audit(1755104033.012:423): avc: denied { open } for pid=6723 comm="syz.2.191" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 124.526433][ T30] audit: type=1400 audit(1755104033.012:424): avc: denied { ioctl } for pid=6723 comm="syz.2.191" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 124.924860][ T24] usb 2-1: reset full-speed USB device number 8 using dummy_hcd [ 124.945654][ T55] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.953606][ T55] usb 4-1: too many configurations: 73, using maximum allowed: 8 [ 124.965262][ T55] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 125.001797][ T24] usb 2-1: device descriptor read/8, error -71 [ 125.007270][ T55] usb 4-1: can't read configurations, error -61 [ 125.034013][ T55] usb usb4-port1: attempt power cycle [ 125.203678][ T5923] usb 1-1: USB disconnect, device number 4 [ 125.452177][ T55] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 125.561914][ T55] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.699620][ T55] usb 4-1: too many configurations: 73, using maximum allowed: 8 [ 125.731044][ T24] usb 2-1: reset full-speed USB device number 8 using dummy_hcd [ 125.779425][ T55] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 125.819409][ T55] usb 4-1: can't read configurations, error -71 [ 125.855722][ T6731] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 125.955419][ T24] usb 2-1: device not accepting address 8, error -71 [ 125.987834][ T43] usb 2-1: USB disconnect, device number 8 [ 126.070545][ T43] hid-steam 0003:28DE:1102.0005: Steam Controller 'XXXXXXXXXX' disconnected [ 126.156100][ T6754] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -26339, delta: 1 [ 126.165584][ T6754] ref_ctr increment failed for inode: 0xd2 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801b872b00 [ 126.201314][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.371213][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 126.532041][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 126.539589][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 127.009936][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.021980][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 127.033271][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 127.062598][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 127.072366][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 127.108962][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.189579][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 127.189596][ T30] audit: type=1400 audit(1755104291.732:438): avc: denied { create } for pid=6757 comm="syz.4.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 127.216956][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 127.262588][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 127.274027][ T30] audit: type=1400 audit(1755104291.732:439): avc: denied { write } for pid=6757 comm="syz.4.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 127.387286][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 127.398695][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 127.416605][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.428621][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 127.443190][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 127.459825][ T9] usb 1-1: string descriptor 0 read error: -22 [ 127.470229][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 127.488731][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.561244][ T9] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 127.645244][ T6771] tmpfs: Bad value for 'mpol' [ 127.726669][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.083336][ T55] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.246657][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 128.257607][ T55] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.288068][ T55] usb 3-1: config 0 has no interface number 0 [ 128.420431][ T55] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 128.505863][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.524731][ T55] usb 3-1: Product: syz [ 128.544344][ T55] usb 3-1: Manufacturer: syz [ 128.549008][ T55] usb 3-1: SerialNumber: syz [ 128.656710][ T30] audit: type=1400 audit(1755104293.203:440): avc: denied { create } for pid=6779 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.688408][ T55] usb 3-1: config 0 descriptor?? [ 128.703156][ T55] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 128.712136][ T30] audit: type=1400 audit(1755104293.223:441): avc: denied { setopt } for pid=6779 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.789196][ T6783] tmpfs: Bad value for 'mpol' [ 129.660672][ T55] usb 3-1: selecting invalid altsetting 1 [ 129.667113][ T55] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 129.681116][ T55] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 129.697473][ T55] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 129.705851][ T55] usb 3-1: media controller created [ 129.805036][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.013582][ T30] audit: type=1400 audit(1755104294.563:442): avc: denied { ioctl } for pid=6790 comm="syz.4.210" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 130.213164][ T55] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 130.280998][ T43] usb 1-1: USB disconnect, device number 5 [ 130.281523][ T55] usb 3-1: USB disconnect, device number 5 [ 130.478863][ T5843] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 130.597932][ T6801] netlink: 'syz.3.215': attribute type 30 has an invalid length. [ 130.650271][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.664866][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.677395][ T5843] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 130.692442][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.708378][ T5843] usb 5-1: config 0 descriptor?? [ 130.814235][ T5852] Bluetooth: hci1: unexpected event for opcode 0xfff5 [ 131.638393][ T5843] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 131.678579][ T5843] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 131.755921][ T5843] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x4D [ 131.791096][ T6815] SELinux: Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). [ 131.793408][ T30] audit: type=1400 audit(1755104296.344:443): avc: denied { mac_admin } for pid=6814 comm="syz.3.218" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 131.834608][ T30] audit: type=1400 audit(1755104296.354:444): avc: denied { relabelto } for pid=6814 comm="syz.3.218" name="48" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 131.872450][ T30] audit: type=1400 audit(1755104296.354:445): avc: denied { associate } for pid=6814 comm="syz.3.218" name="48" dev="tmpfs" ino=264 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 132.010326][ T30] audit: type=1400 audit(1755104296.564:446): avc: denied { remove_name } for pid=5842 comm="syz-executor" name="core" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 132.025701][ T5846] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.084824][ T30] audit: type=1400 audit(1755104296.614:447): avc: denied { create } for pid=6824 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.199500][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.241508][ T5846] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 132.265990][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.288523][ T5846] usb 3-1: config 0 descriptor?? [ 132.361685][ T6797] cp2112 0003:10C4:EA90.0007: Multi-message I2C transactions not supported [ 132.452376][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.462931][ T5843] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 132.467834][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.468318][ T5843] usb 5-1: USB disconnect, device number 13 [ 133.566769][ T5846] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 133.607849][ T5846] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input10 [ 133.786138][ T5846] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 133.807372][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 133.807389][ T30] audit: type=1400 audit(1755104298.335:450): avc: denied { unlink } for pid=6838 comm="syz.4.225" name="#a" dev="tmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 133.966958][ T30] audit: type=1400 audit(1755104298.335:451): avc: denied { mount } for pid=6838 comm="syz.4.225" name="/" dev="overlay" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 134.065157][ T30] audit: type=1400 audit(1755104298.535:452): avc: denied { rmdir } for pid=5842 comm="syz-executor" name="48" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 134.184481][ T5852] Bluetooth: hci2: unexpected event for opcode 0xfff5 [ 134.287183][ T5846] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.385674][ T30] audit: type=1400 audit(1755104298.935:453): avc: denied { create } for pid=6850 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 134.527640][ T5846] usb 4-1: Using ep0 maxpacket: 8 [ 134.654479][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.701553][ T30] audit: type=1400 audit(1755104299.036:454): avc: denied { read } for pid=6852 comm="syz.1.230" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 134.796642][ T5846] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 134.805843][ T30] audit: type=1400 audit(1755104299.036:455): avc: denied { open } for pid=6852 comm="syz.1.230" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 134.829829][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.837767][ T5852] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 134.838264][ T5846] usb 4-1: Product: syz [ 134.847241][ T5852] Bluetooth: hci1: Injecting HCI hardware error event [ 134.850666][ T30] audit: type=1400 audit(1755104299.086:456): avc: denied { read } for pid=6852 comm="syz.1.230" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 134.859216][ T5852] Bluetooth: hci1: hardware error 0x00 [ 134.890574][ T5846] usb 4-1: Manufacturer: syz [ 134.895248][ T5846] usb 4-1: SerialNumber: syz [ 134.962560][ T30] audit: type=1400 audit(1755104299.086:457): avc: denied { open } for pid=6852 comm="syz.1.230" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 135.102436][ T5846] usb 4-1: config 0 descriptor?? [ 135.115666][ T5846] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 135.251804][ T30] audit: type=1400 audit(1755104299.806:458): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 135.767421][ T6844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.222'. [ 135.788481][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 136.478937][ T30] audit: type=1400 audit(1755104300.656:459): avc: denied { connect } for pid=6867 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.566436][ T5902] usb 3-1: USB disconnect, device number 6 [ 136.916453][ T5852] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 138.048235][ T55] usb 4-1: USB disconnect, device number 8 [ 138.504730][ T5852] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 138.513189][ T5852] Bluetooth: hci2: Injecting HCI hardware error event [ 138.520983][ T5852] Bluetooth: hci2: hardware error 0x00 [ 138.586587][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.238'. [ 139.144854][ T6903] tmpfs: Bad value for 'mpol' [ 139.219744][ T6909] tmpfs: Bad value for 'mpol' [ 139.763399][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 139.763415][ T30] audit: type=1400 audit(1755104304.318:468): avc: denied { bind } for pid=6913 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 139.824918][ T6912] IPv6: NLM_F_CREATE should be specified when creating new route [ 139.833399][ T30] audit: type=1400 audit(1755104304.318:469): avc: denied { setopt } for pid=6913 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 139.854242][ T30] audit: type=1400 audit(1755104304.378:470): avc: denied { create } for pid=6899 comm="syz.3.243" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 140.603798][ T5852] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 141.214112][ T9] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 141.226005][ T6925] netlink: 'syz.0.248': attribute type 1 has an invalid length. [ 141.256143][ T6925] netlink: 140 bytes leftover after parsing attributes in process `syz.0.248'. [ 141.275185][ T6925] netlink: 96 bytes leftover after parsing attributes in process `syz.0.248'. [ 141.367813][ T6935] tmpfs: Unknown parameter 'fow' [ 141.981189][ T6941] tmpfs: Bad value for 'mpol' [ 142.457066][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 142.466826][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 26232, setting to 64 [ 142.487746][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 142.550314][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.630781][ T9] usb 5-1: config 0 descriptor?? [ 143.123327][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 143.136122][ T30] audit: type=1400 audit(1755104307.690:471): avc: denied { read } for pid=6947 comm="syz.0.254" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 143.279318][ T30] audit: type=1400 audit(1755104307.690:472): avc: denied { open } for pid=6947 comm="syz.0.254" path="/49/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 143.727333][ T9] ath6kl: Failed to submit usb control message: -110 [ 143.762191][ T9] ath6kl: unable to send the bmi data to the device: -110 [ 143.799334][ T9] ath6kl: Unable to send get target info: -110 [ 144.343103][ T9] ath6kl: Failed to init ath6kl core: -110 [ 144.350722][ T9] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 144.361014][ T30] audit: type=1400 audit(1755104308.900:473): avc: denied { read } for pid=6966 comm="syz.1.260" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 144.494928][ T6967] : renamed from bridge_slave_0 (while UP) [ 144.505761][ T30] audit: type=1400 audit(1755104308.900:474): avc: denied { open } for pid=6966 comm="syz.1.260" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 144.529610][ T30] audit: type=1400 audit(1755104309.051:475): avc: denied { ioctl } for pid=6966 comm="syz.1.260" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 145.053238][ T30] audit: type=1400 audit(1755104309.051:476): avc: denied { write } for pid=6966 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.091426][ T55] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 145.101349][ T30] audit: type=1400 audit(1755104309.051:477): avc: denied { ioctl } for pid=6966 comm="syz.1.260" path="socket:[12751]" dev="sockfs" ino=12751 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 145.137886][ T5843] usb 5-1: USB disconnect, device number 14 [ 145.401400][ T55] usb 4-1: Using ep0 maxpacket: 8 [ 145.480840][ T55] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 145.489428][ T55] usb 4-1: config 179 has no interface number 0 [ 145.496083][ T55] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 145.538060][ T55] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 145.684021][ T55] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 145.753887][ T6984] tmpfs: Bad value for 'mpol' [ 146.169031][ T55] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 146.191498][ T55] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 146.267906][ T55] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 146.279821][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.325067][ T6969] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 146.582434][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 146.693406][ T6992] fuse: Unknown parameter '00000000000000000000' [ 146.994827][ T6994] tmpfs: Bad value for 'mpol' [ 147.082977][ T30] audit: type=1400 audit(1755104311.642:478): avc: denied { connect } for pid=6996 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.190408][ T55] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.420218][ T30] audit: type=1400 audit(1755104311.962:479): avc: denied { create } for pid=7000 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 147.495241][ T7004] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.269'. [ 147.507592][ T7003] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.269'. [ 147.704655][ T55] usb 1-1: config 255 has an invalid interface number: 38 but max is 0 [ 147.713404][ T30] audit: type=1400 audit(1755104311.972:480): avc: denied { connect } for pid=6996 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.743522][ T55] usb 1-1: config 255 has no interface number 0 [ 147.760940][ T55] usb 1-1: New USB device found, idVendor=10b8, idProduct=1ebc, bcdDevice= 1.7d [ 147.774463][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.782587][ T55] usb 1-1: Product: syz [ 147.786859][ T55] usb 1-1: Manufacturer: syz [ 147.790457][ T30] audit: type=1400 audit(1755104311.982:481): avc: denied { setopt } for pid=7000 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 147.795025][ T55] usb 1-1: SerialNumber: syz [ 147.813498][ T5923] usb 4-1: USB disconnect, device number 9 [ 147.815460][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 147.829811][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 148.071651][ T30] audit: type=1400 audit(1755104312.612:482): avc: denied { ioctl } for pid=7007 comm="syz.1.270" path="socket:[13360]" dev="sockfs" ino=13360 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.465825][ T30] audit: type=1400 audit(1755104312.662:483): avc: denied { create } for pid=7007 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.594571][ T30] audit: type=1400 audit(1755104312.672:484): avc: denied { connect } for pid=7007 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.816063][ T30] audit: type=1400 audit(1755104312.982:485): avc: denied { setopt } for pid=7007 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.074447][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 149.236255][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 149.299322][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 149.471124][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.494270][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 149.505002][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 149.522181][ T9] usb 4-1: Product: syz [ 149.556748][ T9] usb 4-1: Manufacturer: syz [ 149.603147][ T9] usb 4-1: SerialNumber: syz [ 149.679135][ T5846] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 149.686770][ T5843] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 149.705551][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 149.839613][ T5843] usb 3-1: Using ep0 maxpacket: 8 [ 149.848534][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 149.862041][ T5846] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 149.870706][ T5843] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 149.884584][ T5846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.905684][ T5843] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 149.924884][ T5846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.938339][ T5843] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.956455][ T5846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 149.982735][ T5843] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.993914][ T5846] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.042619][ T5843] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 150.059053][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 150.059065][ T30] audit: type=1400 audit(1755104314.623:491): avc: denied { read write } for pid=7023 comm="syz.3.275" name="lp0" dev="devtmpfs" ino=2945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 150.101484][ T5843] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 150.109937][ T5846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.133415][ T55] dvb-usb: found a 'DiBcom STK7070P reference design' in cold state, will try to load a firmware [ 150.155879][ T5843] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 150.182817][ T5846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.210648][ T30] audit: type=1400 audit(1755104314.623:492): avc: denied { open } for pid=7023 comm="syz.3.275" path="/dev/usb/lp0" dev="devtmpfs" ino=2945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 150.234414][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.244537][ T5843] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.301726][ T5846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 150.317393][ T5846] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.324435][ T5843] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 150.340770][ T55] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 150.349927][ T55] dib0700: firmware download failed at 7 with -22 [ 150.351810][ T30] audit: type=1400 audit(1755104314.903:493): avc: denied { firmware_load } for pid=55 comm="kworker/0:2" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 150.356854][ T5843] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 150.382156][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.404756][ T5846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.419435][ T55] usb 1-1: USB disconnect, device number 6 [ 150.440211][ T5846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.489589][ T5846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 150.518689][ T5846] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.539298][ T5846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.561295][ T5846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.572520][ T5843] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 150.579936][ T5843] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 150.645886][ T5843] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.657977][ T5846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 150.679275][ T5846] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.691300][ T5843] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 150.703127][ T5843] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 150.727370][ T5846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.737995][ T5846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.751091][ T5843] usb 3-1: string descriptor 0 read error: -22 [ 150.759227][ T55] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 150.768629][ T5843] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 150.779412][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.788118][ T5846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 150.801711][ T5846] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.810270][ T5846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.819915][ T5846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.834686][ T5843] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 150.843057][ T5846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 150.858242][ T5846] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.866674][ T5846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.875924][ T5846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.887098][ T5846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 150.896943][ T5846] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.904824][ T5846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.920870][ T5846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.934512][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.945952][ T55] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 150.955196][ T5846] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 150.965249][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.973439][ T5846] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.982228][ T55] usb 1-1: config 0 descriptor?? [ 150.995838][ T5846] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 151.005571][ T5846] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 151.014852][ T5846] usb 5-1: Product: syz [ 151.019307][ T5846] usb 5-1: Manufacturer: syz [ 151.023965][ T5846] usb 5-1: SerialNumber: syz [ 151.032631][ T5846] usb 5-1: config 0 descriptor?? [ 151.042428][ T5846] yurex 5-1:0.0: Could not submitting URB [ 151.048543][ T5846] yurex 5-1:0.0: probe with driver yurex failed with error -5 [ 151.090499][ T43] usb 3-1: USB disconnect, device number 7 [ 151.312728][ T5846] usb 5-1: USB disconnect, device number 15 [ 151.424524][ T55] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 151.438423][ T55] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0009/input/input11 [ 151.439820][ T3421] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 151.541280][ T55] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 151.618843][ T3421] usb 2-1: Using ep0 maxpacket: 32 [ 151.659217][ T3421] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 151.673478][ T3421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.693672][ T3421] usb 2-1: config 0 descriptor?? [ 151.710274][ T3421] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 151.778165][ T43] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 151.950436][ T43] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 151.962455][ T43] usb 5-1: config 0 has no interface number 0 [ 151.969980][ T43] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 151.981711][ T43] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 151.991880][ T43] usb 5-1: config 0 interface 200 has no altsetting 0 [ 152.194126][ T43] usb 5-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39 [ 152.212161][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.248320][ T43] usb 5-1: Product: syz [ 152.248519][ T43] usb 5-1: Manufacturer: syz [ 152.248536][ T43] usb 5-1: SerialNumber: syz [ 152.381982][ T43] usb 5-1: config 0 descriptor?? [ 152.397243][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.406651][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.410523][ T3421] gspca_nw80x: reg_r err -110 [ 152.420534][ T3421] nw80x 2-1:0.0: probe with driver nw80x failed with error -110 [ 152.602971][ T30] audit: type=1400 audit(1755104317.165:494): avc: denied { execute_no_trans } for pid=7055 comm="syz.2.286" path="/61/file0" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 152.645463][ T7057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.286'. [ 152.883312][ T43] usb 5-1: USB disconnect, device number 16 [ 153.077820][ T30] audit: type=1400 audit(1755104317.635:495): avc: denied { shutdown } for pid=7061 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 153.092286][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 153.317273][ T55] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 153.469175][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.480255][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.491856][ T55] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 153.501050][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.510884][ T55] usb 3-1: config 0 descriptor?? [ 153.910388][ T5843] usb 1-1: USB disconnect, device number 7 [ 153.931822][ T55] usb 3-1: language id specifier not provided by device, defaulting to English [ 154.064172][ T30] audit: type=1400 audit(1755104318.625:496): avc: denied { bind } for pid=7069 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.084338][ T7070] Bluetooth: MGMT ver 1.23 [ 154.090211][ T30] audit: type=1400 audit(1755104318.655:497): avc: denied { write } for pid=7069 comm="syz.4.291" path="socket:[12964]" dev="sockfs" ino=12964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.160531][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.168750][ T7070] batadv_slave_1: entered allmulticast mode [ 154.237495][ T55] usbhid 3-1:0.0: can't add hid device: -71 [ 154.255266][ T55] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 154.278424][ T3421] usb 2-1: USB disconnect, device number 9 [ 154.327934][ T55] usb 3-1: USB disconnect, device number 8 [ 154.391153][ T7078] tmpfs: Bad value for 'mpol' [ 154.866080][ T30] audit: type=1400 audit(1755104319.426:498): avc: denied { wake_alarm } for pid=7079 comm="syz.4.294" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.142088][ T30] audit: type=1400 audit(1755104319.696:499): avc: denied { listen } for pid=7079 comm="syz.4.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 155.171336][ T30] audit: type=1400 audit(1755104319.696:500): avc: denied { accept } for pid=7079 comm="syz.4.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 155.224796][ T7090] netlink: 'syz.1.296': attribute type 1 has an invalid length. [ 155.244541][ T7090] netlink: 140 bytes leftover after parsing attributes in process `syz.1.296'. [ 155.306792][ T7090] netlink: 96 bytes leftover after parsing attributes in process `syz.1.296'. [ 155.567585][ T30] audit: type=1400 audit(1755104320.076:501): avc: denied { getopt } for pid=7092 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.876255][ T30] audit: type=1400 audit(1755104321.437:502): avc: denied { write } for pid=7087 comm="syz.0.297" path="socket:[13657]" dev="sockfs" ino=13657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.883248][ T55] usb 4-1: USB disconnect, device number 10 [ 156.949350][ T30] audit: type=1400 audit(1755104321.467:503): avc: denied { read } for pid=7097 comm="syz.2.299" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 156.978544][ T30] audit: type=1400 audit(1755104321.467:504): avc: denied { open } for pid=7097 comm="syz.2.299" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 157.003705][ T55] usblp0: removed [ 157.011318][ T30] audit: type=1400 audit(1755104321.467:505): avc: denied { ioctl } for pid=7097 comm="syz.2.299" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 157.036815][ T30] audit: type=1400 audit(1755104321.497:506): avc: denied { setopt } for pid=7087 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 157.155508][ T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 157.376674][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 157.391548][ T43] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 157.400153][ T43] usb 3-1: config 0 has no interface number 0 [ 157.422688][ T43] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 157.431910][ T3421] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 157.453386][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.453435][ T30] audit: type=1400 audit(1755104322.017:507): avc: denied { open } for pid=7102 comm="syz.3.301" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 157.475420][ T43] usb 3-1: Product: syz [ 157.509727][ T43] usb 3-1: Manufacturer: syz [ 157.516999][ T43] usb 3-1: SerialNumber: syz [ 157.520178][ T43] usb 3-1: config 0 descriptor?? [ 157.578365][ T7115] netlink: 'syz.4.304': attribute type 1 has an invalid length. [ 157.578384][ T7115] netlink: 140 bytes leftover after parsing attributes in process `syz.4.304'. [ 157.578393][ T7115] netlink: 96 bytes leftover after parsing attributes in process `syz.4.304'. [ 157.596880][ T3421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.596926][ T3421] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 157.596970][ T3421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.600176][ T3421] usb 2-1: config 0 descriptor?? [ 157.737026][ T7098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.738463][ T7098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.741301][ T43] radio-si470x 3-1:0.35: this is not a si470x device. [ 157.988113][ T43] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 158.011213][ T3421] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 158.018477][ T3421] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000A/input/input12 [ 158.129135][ T3421] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 158.189354][ T43] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 158.194583][ T43] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 158.198924][ T43] usb 3-1: USB disconnect, device number 9 [ 158.200117][ T43] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 159.236198][ T30] audit: type=1400 audit(1755104323.788:508): avc: denied { read write } for pid=7134 comm="syz.4.310" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 160.036210][ T7133] bpq0: entered allmulticast mode [ 160.187522][ T55] usb 2-1: USB disconnect, device number 10 [ 160.483993][ T5923] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 160.501554][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 160.502377][ T30] audit: type=1400 audit(1755104325.069:510): avc: denied { write } for pid=7151 comm="syz.2.317" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 160.543333][ T7152] sg_write: data in/out 16774524/1 bytes for SCSI command 0x1c-- guessing data in; [ 160.543333][ T7152] program syz.2.317 not setting count and/or reply_len properly [ 160.611827][ T30] audit: type=1400 audit(1755104325.069:511): avc: denied { open } for pid=7151 comm="syz.2.317" path="/dev/sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 160.655319][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 160.664798][ T5923] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 160.683293][ T5923] usb 5-1: config 0 has no interface number 0 [ 160.690432][ T30] audit: type=1400 audit(1755104325.109:512): avc: denied { ioctl } for pid=7151 comm="syz.2.317" path="/dev/sg0" dev="devtmpfs" ino=770 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 160.718197][ T5923] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 160.729336][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.738218][ T5923] usb 5-1: Product: syz [ 160.742680][ T5923] usb 5-1: Manufacturer: syz [ 160.749999][ T5923] usb 5-1: SerialNumber: syz [ 160.773146][ T5923] usb 5-1: config 0 descriptor?? [ 160.782240][ T5923] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 160.789747][ T7159] fuse: Unknown parameter 'user_i00000000000000000000' [ 160.978991][ T7161] netlink: 'syz.1.319': attribute type 1 has an invalid length. [ 160.987328][ T7161] netlink: 140 bytes leftover after parsing attributes in process `syz.1.319'. [ 161.012664][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 161.037197][ T5923] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 161.042527][ T7161] netlink: 96 bytes leftover after parsing attributes in process `syz.1.319'. [ 161.104192][ T5923] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 161.142201][ T5923] usb 5-1: USB disconnect, device number 17 [ 161.159450][ T5923] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 161.196548][ T5923] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 161.498403][ T5923] quatech2 5-1:0.51: device disconnected [ 161.875131][ T5923] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 162.001985][ T7182] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 162.013820][ T7182] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 162.023581][ T7182] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 162.031700][ T7182] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 162.057501][ T7182] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 162.068287][ T7182] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 162.076885][ T7182] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 162.087650][ T7182] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 162.092838][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 162.099588][ T7182] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 162.103367][ T5923] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 162.116119][ T7182] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 162.123684][ T7182] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 162.130811][ T7182] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 162.139022][ T7182] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 162.147835][ T7182] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 162.157131][ T7182] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 162.165745][ T7182] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 162.174502][ T7182] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 162.182883][ T7182] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 162.190322][ T7182] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 162.197723][ T7182] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 162.205621][ T7182] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 162.226999][ T5902] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 162.459964][ T30] audit: type=1400 audit(1755104326.919:513): avc: denied { read } for pid=7183 comm="syz.2.328" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 162.575993][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.585335][ T5923] usb 5-1: Product: syz [ 162.592410][ T5923] usb 5-1: Manufacturer: syz [ 162.597474][ T30] audit: type=1400 audit(1755104326.929:514): avc: denied { open } for pid=7183 comm="syz.2.328" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 162.620655][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.635047][ T5923] usb 5-1: SerialNumber: syz [ 162.649067][ T5923] usb 5-1: config 0 descriptor?? [ 162.667586][ T30] audit: type=1400 audit(1755104326.929:515): avc: denied { ioctl } for pid=7183 comm="syz.2.328" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 162.712750][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.736855][ T7181] netlink: 60 bytes leftover after parsing attributes in process `syz.0.327'. [ 162.746095][ T5902] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 162.819241][ T30] audit: type=1400 audit(1755104326.929:516): avc: denied { name_bind } for pid=7183 comm="syz.2.328" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 162.845516][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.847681][ T30] audit: type=1400 audit(1755104326.929:517): avc: denied { node_bind } for pid=7183 comm="syz.2.328" saddr=::1 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 162.887064][ T5902] usb 2-1: config 0 descriptor?? [ 162.976256][ T5923] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 163.041855][ T30] audit: type=1400 audit(1755104327.040:518): avc: denied { getopt } for pid=7188 comm="syz.3.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.486862][ T5902] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 163.556501][ T5902] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000B/input/input13 [ 163.619012][ T7208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.745677][ T5902] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 164.269831][ T5923] gspca_sunplus: reg_w_riv err -110 [ 164.275380][ T5923] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 165.275419][ T7228] capability: warning: `syz.0.339' uses deprecated v2 capabilities in a way that may be insecure [ 165.287878][ T7228] capability: warning: `syz.0.339' uses 32-bit capabilities (legacy support in use) [ 165.380901][ T5923] usb 5-1: USB disconnect, device number 18 [ 166.361837][ T3421] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 166.464104][ T7247] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 166.493784][ T30] audit: type=1400 audit(1755104331.052:519): avc: denied { ioctl } for pid=7242 comm="syz.4.345" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 166.854885][ T5902] usb 2-1: USB disconnect, device number 11 [ 166.880636][ T3421] usb 3-1: Using ep0 maxpacket: 8 [ 166.893202][ T3421] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 167.029708][ T3421] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 167.046664][ T30] audit: type=1400 audit(1755104331.612:520): avc: denied { read } for pid=7248 comm="syz.1.347" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 167.069602][ T3421] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.152413][ T3421] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.166707][ T3421] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 167.180607][ T3421] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 167.188047][ T3421] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 167.239060][ T3421] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.283180][ T3421] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.305686][ T3421] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 167.319493][ T3421] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 167.344223][ T3421] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 167.356582][ T3421] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.371621][ T3421] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.388685][ T3421] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 167.405278][ T3421] usb 3-1: string descriptor 0 read error: -22 [ 167.415806][ T3421] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 167.425881][ T3421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.462359][ T3421] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 167.470227][ T5923] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 167.622221][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 167.637273][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1028, setting to 1024 [ 167.648853][ T5923] usb 5-1: New USB device found, idVendor=1b96, idProduct=0013, bcdDevice= 0.00 [ 167.665988][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.747982][ T5843] usb 3-1: USB disconnect, device number 10 [ 167.771950][ T5923] usb 5-1: config 0 descriptor?? [ 167.779824][ T7255] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 167.920632][ T30] audit: type=1326 audit(1755104332.372:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7257 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d938ebe9 code=0x7ffc0000 [ 167.976688][ T30] audit: type=1326 audit(1755104332.372:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7257 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d938ebe9 code=0x7ffc0000 [ 168.005155][ T30] audit: type=1326 audit(1755104332.372:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7257 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff3d938ebe9 code=0x7ffc0000 [ 168.033483][ T30] audit: type=1326 audit(1755104332.372:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7257 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d938ebe9 code=0x7ffc0000 [ 168.059485][ T30] audit: type=1326 audit(1755104332.382:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7257 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d938ebe9 code=0x7ffc0000 [ 168.240503][ T30] audit: type=1326 audit(1755104332.382:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7257 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff3d938ebe9 code=0x7ffc0000 [ 168.394585][ T5852] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 168.609604][ T30] audit: type=1326 audit(1755104332.382:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7257 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d938ebe9 code=0x7ffc0000 [ 168.860645][ T30] audit: type=1326 audit(1755104332.382:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7257 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff3d938ebe9 code=0x7ffc0000 [ 169.729347][ T7298] tmpfs: Bad value for 'mpol' [ 172.069500][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 172.069515][ T30] audit: type=1400 audit(1755104336.644:590): avc: denied { ioctl } for pid=7314 comm="syz.3.363" path="socket:[15365]" dev="sockfs" ino=15365 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.407814][ T5923] usbhid 5-1:0.0: can't add hid device: -71 [ 172.413834][ T5923] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 172.438492][ T5852] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 172.446988][ T5852] Bluetooth: hci3: Injecting HCI hardware error event [ 172.455471][ T5852] Bluetooth: hci3: hardware error 0x00 [ 172.477872][ T5923] usb 5-1: USB disconnect, device number 19 [ 173.830207][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.839102][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.006454][ T7330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.041929][ T7330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.214382][ T3567] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.232394][ T3567] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.273007][ T3567] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.290514][ T3567] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.314608][ T3567] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.323637][ T3567] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.334648][ T3567] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.343730][ T3567] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.378744][ T7355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.387902][ T7355] batadv_slave_1: entered allmulticast mode [ 174.496751][ T5852] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 174.531521][ T30] audit: type=1400 audit(1755104339.096:591): avc: denied { write } for pid=7356 comm="syz.2.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.646202][ T7358] syz.4.376 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 174.684337][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'. [ 174.737692][ T30] audit: type=1400 audit(1755104339.296:592): avc: denied { watch } for pid=7356 comm="syz.2.375" path="/81/file1" dev="tmpfs" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 174.916482][ T30] audit: type=1400 audit(1755104339.296:593): avc: denied { watch_sb watch_reads } for pid=7356 comm="syz.2.375" path="/81/file1" dev="tmpfs" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 175.073697][ T7375] trusted_key: syz.0.380 sent an empty control message without MSG_MORE. [ 175.206596][ T30] audit: type=1400 audit(1755104339.406:594): avc: denied { write } for pid=7360 comm="syz.1.378" path="socket:[14848]" dev="sockfs" ino=14848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 176.552284][ T30] audit: type=1400 audit(1755104341.127:595): avc: denied { bind } for pid=7398 comm="syz.1.387" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.719190][ T55] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 176.766151][ T30] audit: type=1400 audit(1755104341.127:596): avc: denied { name_bind } for pid=7398 comm="syz.1.387" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 176.787314][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 176.790436][ T30] audit: type=1400 audit(1755104341.127:597): avc: denied { node_bind } for pid=7398 comm="syz.1.387" saddr=fc02::7f src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 176.965543][ T24] usb 2-1: device descriptor read/64, error -71 [ 176.994124][ T55] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 177.004490][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.012537][ T55] usb 5-1: Product: syz [ 177.022619][ T55] usb 5-1: Manufacturer: syz [ 177.032945][ T55] usb 5-1: SerialNumber: syz [ 177.052033][ T55] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 177.093774][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 177.333893][ T7410] PKCS8: Unsupported PKCS#8 version [ 177.616206][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 177.805038][ T24] usb 2-1: device descriptor read/64, error -71 [ 177.873379][ T7413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.392'. [ 178.369611][ T55] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 178.382471][ T24] usb usb2-port1: attempt power cycle [ 178.536701][ T55] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 178.624118][ T55] usb 3-1: config 0 has no interface number 0 [ 178.637855][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.678398][ T10] usb 5-1: Service connection timeout for: 256 [ 178.768994][ T55] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0129, bcdDevice=72.51 [ 178.805511][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 178.838621][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.870248][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.942440][ T10] ath9k_htc: Failed to initialize the device [ 178.974704][ T55] usb 3-1: Product: syz [ 178.997577][ T5846] usb 5-1: USB disconnect, device number 20 [ 179.039065][ T55] usb 3-1: Manufacturer: syz [ 179.089003][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 179.096963][ T55] usb 3-1: SerialNumber: syz [ 179.147353][ T5846] usb 5-1: ath9k_htc: USB layer deinitialized [ 179.198964][ T55] usb 3-1: config 0 descriptor?? [ 179.786646][ T55] option 3-1:0.219: GSM modem (1-port) converter detected [ 179.885487][ T24] usb 2-1: device descriptor read/8, error -71 [ 180.653579][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 180.684881][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 180.698034][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 180.708648][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.717094][ T24] usb 2-1: Product: syz [ 180.721977][ T24] usb 2-1: Manufacturer: syz [ 180.727107][ T24] usb 2-1: SerialNumber: syz [ 180.750475][ T24] usb 2-1: config 0 descriptor?? [ 180.764441][ T24] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 181.018317][ T5923] usb 3-1: USB disconnect, device number 11 [ 181.032621][ T5923] option 3-1:0.219: device disconnected [ 181.398881][ T7447] tmpfs: Bad value for 'mpol' [ 181.933039][ T30] audit: type=1400 audit(1755104346.159:598): avc: denied { create } for pid=7426 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 182.073799][ T24] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 183.142412][ T10] usb 2-1: USB disconnect, device number 15 [ 183.154450][ T10] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 183.187118][ T10] visor 2-1:0.0: device disconnected [ 183.667623][ T7475] tmpfs: Bad value for 'mpol' [ 183.703340][ T5923] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 184.315828][ T30] audit: type=1400 audit(1755104348.880:599): avc: denied { mount } for pid=7479 comm="syz.4.412" name="/" dev="ramfs" ino=14979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 184.377890][ T5923] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 184.408301][ T5923] usb 1-1: config 0 has no interface number 0 [ 184.431936][ T30] audit: type=1400 audit(1755104348.880:600): avc: denied { mounton } for pid=7479 comm="syz.4.412" path="/" dev="ramfs" ino=14979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 184.458196][ T5923] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 128, setting to 64 [ 184.470022][ T5923] usb 1-1: config 0 interface 113 has no altsetting 0 [ 184.479406][ T5923] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 184.488960][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.511437][ T5923] usb 1-1: Product: syz [ 184.520371][ T5923] usb 1-1: Manufacturer: syz [ 184.525872][ T5923] usb 1-1: SerialNumber: syz [ 184.634624][ T5923] usb 1-1: config 0 descriptor?? [ 184.642940][ T7466] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 184.957328][ T3421] kernel read not supported for file /dsp1 (pid: 3421 comm: kworker/1:2) [ 184.966161][ C1] usb 1-1: NFC: Urb failure (status -71) [ 184.981495][ C1] usb 1-1: NFC: Urb failure (status -71) [ 185.002159][ T5923] usb 1-1: NFC: Unable to get FW version [ 185.024218][ T5923] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -71 [ 185.059543][ T5923] usb 1-1: USB disconnect, device number 8 [ 185.365762][ T55] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 185.624896][ T55] usb 2-1: Using ep0 maxpacket: 32 [ 185.753791][ T55] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 185.995359][ T55] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 186.267634][ T55] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 186.275969][ T55] usb 2-1: Product: syz [ 186.280240][ T55] usb 2-1: Manufacturer: syz [ 186.285395][ T55] usb 2-1: SerialNumber: syz [ 186.414365][ T55] usb 2-1: config 0 descriptor?? [ 186.441808][ T7492] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 186.455276][ T55] hub 2-1:0.0: bad descriptor, ignoring hub [ 186.472331][ T55] hub 2-1:0.0: probe with driver hub failed with error -5 [ 186.704452][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 187.295283][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.342358][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 187.370265][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.490274][ T30] audit: type=1400 audit(1755104351.952:601): avc: denied { write } for pid=7515 comm="syz.3.423" name="ip6_flowlabel" dev="proc" ino=4026533022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 187.493266][ T10] usb 5-1: config 0 descriptor?? [ 187.513565][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.234170][ T10] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 188.250847][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000C/input/input14 [ 188.353636][ T10] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 188.640985][ T24] raw-gadget.0 gadget.1: failed to queue suspend event [ 188.679790][ T7492] raw-gadget.0 gadget.1: failed to queue disconnect event [ 188.709418][ T5923] usb 2-1: USB disconnect, device number 16 [ 188.885672][ T30] audit: type=1400 audit(1755104353.463:602): avc: denied { write } for pid=7534 comm="syz.1.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 188.943272][ T7535] usb usb8: usbfs: process 7535 (syz.2.428) did not claim interface 0 before use [ 189.180375][ T30] audit: type=1400 audit(1755104353.523:603): avc: denied { write } for pid=7530 comm="syz.2.428" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 189.853218][ T30] audit: type=1400 audit(1755104354.433:604): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 190.631961][ T30] audit: type=1400 audit(1755104354.983:605): avc: denied { create } for pid=7550 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 190.902096][ T10] usb 5-1: USB disconnect, device number 21 [ 191.115692][ T30] audit: type=1400 audit(1755104355.003:606): avc: denied { write } for pid=7550 comm="syz.3.434" path="socket:[15079]" dev="sockfs" ino=15079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 191.960466][ T7573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.439'. [ 192.001600][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 193.571012][ T30] audit: type=1400 audit(1755104358.155:607): avc: denied { append } for pid=7594 comm="syz.4.447" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 193.636772][ T7600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.663031][ T7600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.683427][ T7600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.410285][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.416960][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.476679][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 194.573393][ T7613] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 194.582356][ T7613] ref_ctr increment failed for inode: 0x1c5 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888034f38000 [ 194.593604][ T30] audit: type=1804 audit(1755104359.156:608): pid=7613 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.452" name="/newroot/85/file0" dev="tmpfs" ino=453 res=1 errno=0 [ 194.656218][ T30] audit: type=1400 audit(1755104359.236:609): avc: denied { ioctl } for pid=7616 comm="syz.3.454" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 194.797743][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.833835][ T24] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 194.845902][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.856222][ T30] audit: type=1400 audit(1755104359.446:610): avc: denied { setattr } for pid=7622 comm="syz.2.456" name="file0" dev="tmpfs" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 194.864362][ T24] usb 1-1: config 0 descriptor?? [ 195.318615][ T30] audit: type=1400 audit(1755104359.526:611): avc: denied { mount } for pid=7618 comm="syz.1.455" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 195.618032][ T30] audit: type=1400 audit(1755104360.206:612): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 195.637937][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.860231][ T24] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 195.874824][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000D/input/input15 [ 196.007191][ T24] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 196.853161][ T3421] usb 1-1: USB disconnect, device number 9 [ 196.874803][ T7648] tmpfs: Bad value for 'mpol' [ 197.832016][ T30] audit: type=1326 audit(1755104362.417:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3138ebe9 code=0x7ffc0000 [ 197.923704][ T30] audit: type=1326 audit(1755104362.417:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3138ebe9 code=0x7ffc0000 [ 197.948310][ T30] audit: type=1326 audit(1755104362.447:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4f3138ebe9 code=0x7ffc0000 [ 197.972074][ T30] audit: type=1326 audit(1755104362.447:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7659 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3138ebe9 code=0x7ffc0000 [ 198.330763][ T7674] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 198.337657][ T7674] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 198.346730][ T7674] vhci_hcd vhci_hcd.0: Device attached [ 198.836391][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 198.836408][ T30] audit: type=1400 audit(1755104362.927:670): avc: denied { append } for pid=7681 comm="syz.3.471" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 198.922738][ T30] audit: type=1400 audit(1755104363.508:671): avc: denied { create } for pid=7661 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 199.302270][ T24] vhci_hcd: vhci_device speed not set [ 199.391756][ T30] audit: type=1400 audit(1755104363.918:672): avc: denied { name_connect } for pid=7672 comm="syz.1.469" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 199.413147][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.444376][ T24] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 199.543296][ T5852] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 199.598885][ T7680] vhci_hcd: connection reset by peer [ 199.609211][ T1212] vhci_hcd: stop threads [ 199.625809][ T1212] vhci_hcd: release socket [ 199.631575][ T1212] vhci_hcd: disconnect device [ 199.751178][ T7700] netlink: 'syz.3.474': attribute type 1 has an invalid length. [ 199.826387][ T7700] netlink: 140 bytes leftover after parsing attributes in process `syz.3.474'. [ 199.835533][ T7700] netlink: 96 bytes leftover after parsing attributes in process `syz.3.474'. [ 199.856294][ T7706] tmpfs: Bad value for 'mpol' [ 200.064360][ T10] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 200.229150][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.329900][ T10] usb 3-1: config 0 has no interface number 0 [ 200.342959][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 200.363858][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 200.375981][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.920916][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.941312][ T10] usb 3-1: config 0 descriptor?? [ 200.948180][ T7705] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.957945][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 201.793132][ T5902] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 203.123177][ T30] audit: type=1400 audit(1755104366.479:673): avc: denied { append } for pid=7725 comm="syz.1.484" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 203.146215][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.219352][ T3421] usb 3-1: USB disconnect, device number 12 [ 203.254778][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.354894][ T5902] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 203.432747][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.466157][ T5902] usb 1-1: config 0 descriptor?? [ 203.909417][ T5902] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 204.053425][ T5902] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000E/input/input16 [ 204.247974][ T5902] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 204.586501][ T7753] tmpfs: Bad value for 'mpol' [ 205.001584][ T24] vhci_hcd: vhci_device speed not set [ 206.114289][ T55] usb 1-1: USB disconnect, device number 10 [ 209.064356][ T7808] tmpfs: Bad value for 'mpol' [ 209.927769][ T7816] netlink: 148 bytes leftover after parsing attributes in process `syz.4.508'. [ 209.940396][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 210.279306][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.304356][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 210.314711][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.332906][ T24] usb 3-1: config 0 descriptor?? [ 210.742311][ T24] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 210.785999][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000F/input/input17 [ 212.062550][ T24] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 212.646581][ T7841] netlink: 'syz.0.515': attribute type 10 has an invalid length. [ 213.259562][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 213.315460][ T5902] usb 3-1: USB disconnect, device number 13 [ 213.354166][ T7841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.386135][ T7841] team0: Port device bond0 added [ 213.406668][ T7851] evm: overlay not supported [ 213.511391][ T7853] netlink: 'syz.1.518': attribute type 12 has an invalid length. [ 213.524630][ T7853] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.518'. [ 213.638069][ T7816] syz.4.508 (7816): drop_caches: 2 [ 214.426437][ T7861] fuse: Unknown parameter '' [ 214.811551][ T7844] team0 (unregistering): Port device team_slave_0 removed [ 214.875412][ T7844] team0 (unregistering): Port device team_slave_1 removed [ 214.929540][ T7844] team0 (unregistering): Port device bond0 removed [ 216.675636][ T5902] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 216.832669][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.935735][ T5902] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 216.954106][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.172871][ T5902] usb 5-1: config 0 descriptor?? [ 217.445240][ T30] audit: type=1400 audit(1755104382.037:674): avc: denied { write } for pid=7903 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 217.556096][ T30] audit: type=1400 audit(1755104382.157:675): avc: denied { map } for pid=7905 comm="syz.0.536" path="socket:[18222]" dev="sockfs" ino=18222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 217.595705][ T5902] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 217.609325][ T5902] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0010/input/input18 [ 217.768796][ T7916] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 217.801683][ T7916] netlink: 140 bytes leftover after parsing attributes in process `syz.1.538'. [ 217.825091][ T7916] netlink: 96 bytes leftover after parsing attributes in process `syz.1.538'. [ 218.227145][ T5902] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 218.251057][ T7915] netlink: 'syz.3.537': attribute type 1 has an invalid length. [ 218.259037][ T7915] netlink: 140 bytes leftover after parsing attributes in process `syz.3.537'. [ 218.270821][ T7915] netlink: 96 bytes leftover after parsing attributes in process `syz.3.537'. [ 219.660294][ T5846] usb 5-1: USB disconnect, device number 22 [ 219.873478][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.914684][ T7946] batadv_slave_1: entered allmulticast mode [ 220.616557][ T30] audit: type=1400 audit(1755104384.838:676): avc: denied { bind } for pid=7953 comm="syz.1.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 220.759659][ T30] audit: type=1400 audit(1755104384.838:677): avc: denied { write } for pid=7953 comm="syz.1.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 221.747408][ T7972] tmpfs: Bad value for 'mpol' [ 221.759507][ T7974] netlink: 'syz.1.552': attribute type 1 has an invalid length. [ 221.803154][ T7974] netlink: 140 bytes leftover after parsing attributes in process `syz.1.552'. [ 221.833032][ T7974] netlink: 96 bytes leftover after parsing attributes in process `syz.1.552'. [ 221.948508][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 222.301197][ T5846] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 222.468084][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.498317][ T5846] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 222.517420][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.534535][ T5846] usb 3-1: config 0 descriptor?? [ 222.838471][ T8000] tmpfs: Bad value for 'mpol' [ 223.239836][ T5846] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 223.254239][ T5846] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0011/input/input19 [ 223.330232][ T30] audit: type=1400 audit(1755104387.920:678): avc: denied { bind } for pid=8001 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 223.611496][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'. [ 223.621031][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'. [ 223.857433][ T30] audit: type=1400 audit(1755104387.920:679): avc: denied { listen } for pid=8001 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 224.032145][ T30] audit: type=1326 audit(1755104388.100:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6534f8ebe9 code=0x7ffc0000 [ 224.062824][ T30] audit: type=1326 audit(1755104388.100:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6534f8ebe9 code=0x7ffc0000 [ 224.074338][ T5846] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 224.088750][ T30] audit: type=1326 audit(1755104388.100:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6534f8ebe9 code=0x7ffc0000 [ 224.664317][ T30] audit: type=1326 audit(1755104388.100:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f6534f8ebe9 code=0x7ffc0000 [ 224.891504][ T30] audit: type=1326 audit(1755104388.100:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6534f8ebe9 code=0x7ffc0000 [ 225.107962][ T30] audit: type=1326 audit(1755104388.100:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6534f8ebe9 code=0x7ffc0000 [ 225.155733][ T30] audit: type=1326 audit(1755104388.100:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6534f8ebe9 code=0x7ffc0000 [ 225.285418][ T30] audit: type=1326 audit(1755104388.100:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6534f8ebe9 code=0x7ffc0000 [ 225.383103][ T8029] netlink: 'syz.3.570': attribute type 1 has an invalid length. [ 225.390871][ T8029] netlink: 140 bytes leftover after parsing attributes in process `syz.3.570'. [ 225.400673][ T8029] netlink: 96 bytes leftover after parsing attributes in process `syz.3.570'. [ 225.641878][ T55] usb 3-1: USB disconnect, device number 14 [ 225.930199][ T8032] tmpfs: Bad value for 'mpol' [ 226.000752][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 226.520797][ T55] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 226.736808][ T8048] tmpfs: Bad value for 'mpol' [ 227.170568][ T55] usb 4-1: device descriptor read/64, error -71 [ 227.450166][ T55] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 228.604614][ T55] usb 4-1: device descriptor read/64, error -71 [ 228.720158][ T55] usb usb4-port1: attempt power cycle [ 229.093756][ T55] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 229.143151][ T55] usb 4-1: device descriptor read/8, error -71 [ 229.349316][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 230.022650][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.079962][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 230.091440][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.117291][ T10] usb 3-1: config 0 descriptor?? [ 230.681077][ T10] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 231.008608][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0012/input/input20 [ 231.106037][ T8093] tipc: Started in network mode [ 231.189482][ T8093] tipc: Node identity 727e53905e4c, cluster identity 4711 [ 231.196888][ T8093] tipc: Enabled bearer , priority 0 [ 231.223577][ T8096] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.588'. [ 231.236414][ T8096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.588'. [ 231.272386][ T8098] syzkaller0: entered promiscuous mode [ 231.276364][ T10] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 231.277894][ T8098] syzkaller0: entered allmulticast mode [ 231.352378][ T8101] tmpfs: Bad value for 'mpol' [ 231.514114][ T5902] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 231.826518][ T8098] tipc: Resetting bearer [ 232.018192][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 232.026549][ T5902] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 232.037516][ T5902] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 232.049719][ T5902] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.062144][ T5902] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 232.065000][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 232.073719][ T5902] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 232.162898][ T8112] fuse: Unknown parameter '0x0000000000000004' [ 232.232254][ T5902] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 232.241577][ T5902] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 232.248080][ T10] usb 2-1: device descriptor read/64, error -71 [ 232.411887][ T8110] tmpfs: Bad value for 'mpol' [ 232.474571][ T5923] tipc: Node number set to 741495696 [ 232.488223][ T5902] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.504597][ T5902] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 232.516052][ T5902] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 232.528652][ T5902] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 232.536421][ T5902] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 232.570529][ T5902] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.589904][ T5902] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 232.602177][ T5902] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 232.604094][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 232.604106][ T30] audit: type=1400 audit(1755104397.205:710): avc: denied { ioctl } for pid=8118 comm="syz.0.596" path="socket:[20671]" dev="sockfs" ino=20671 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 232.616847][ T5902] usb 5-1: string descriptor 0 read error: -22 [ 232.664311][ T5902] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 232.673833][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.703488][ T5902] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 232.897586][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 233.107095][ T5902] usb 5-1: USB disconnect, device number 23 [ 233.117325][ T10] usb 2-1: device descriptor read/64, error -71 [ 233.245993][ T10] usb usb2-port1: attempt power cycle [ 233.619054][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 233.626376][ T5923] usb 3-1: USB disconnect, device number 15 [ 233.770318][ T10] usb 2-1: device descriptor read/8, error -71 [ 234.119401][ T8105] tipc: Resetting bearer [ 234.148285][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 234.421611][ T10] usb 2-1: device not accepting address 20, error -71 [ 234.451804][ T10] usb usb2-port1: unable to enumerate USB device [ 234.460143][ T8105] tipc: Disabling bearer [ 235.493946][ T8146] tmpfs: Bad value for 'mpol' [ 235.936437][ T30] audit: type=1400 audit(1755104400.536:711): avc: denied { name_bind } for pid=8149 comm="syz.0.604" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 236.336180][ T8158] fuse: Unknown parameter 'fd0x0000000000000004' [ 236.577005][ T8166] netlink: 'syz.2.609': attribute type 1 has an invalid length. [ 236.584692][ T8166] netlink: 140 bytes leftover after parsing attributes in process `syz.2.609'. [ 236.595926][ T8166] netlink: 96 bytes leftover after parsing attributes in process `syz.2.609'. [ 236.611762][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'. [ 236.645776][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.608'. [ 236.876950][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 236.957145][ T8174] netlink: 'syz.4.611': attribute type 1 has an invalid length. [ 236.964811][ T8174] netlink: 140 bytes leftover after parsing attributes in process `syz.4.611'. [ 236.980061][ T8174] netlink: 96 bytes leftover after parsing attributes in process `syz.4.611'. [ 237.037294][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.048467][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 237.058779][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.084767][ T10] usb 2-1: config 0 descriptor?? [ 237.534828][ T30] audit: type=1400 audit(1755104402.137:712): avc: denied { create } for pid=8185 comm="syz.2.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 237.569750][ T10] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 237.839122][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0013/input/input21 [ 238.120638][ T10] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 238.212604][ T8197] tmpfs: Bad value for 'mpol' [ 238.714606][ T5923] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 239.061623][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.071974][ T5923] usb 3-1: config 0 has no interfaces? [ 239.086211][ T5923] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 239.389361][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.419583][ T8209] tmpfs: Bad value for 'mpol' [ 239.512030][ T5923] usb 3-1: config 0 descriptor?? [ 239.576512][ T30] audit: type=1400 audit(1755104404.178:713): avc: denied { read } for pid=8210 comm="syz.4.622" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 239.599303][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.645203][ T30] audit: type=1400 audit(1755104404.178:714): avc: denied { open } for pid=8210 comm="syz.4.622" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 239.668438][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.843603][ T30] audit: type=1400 audit(1755104404.448:715): avc: denied { write } for pid=8185 comm="syz.2.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 240.392530][ T8211] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 240.398689][ T8211] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 241.043040][ T5843] usb 2-1: USB disconnect, device number 21 [ 241.723520][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 242.161112][ T8241] fuse: Unknown parameter 'fd0x0000000000000004' [ 242.384453][ T8245] tmpfs: Bad value for 'mpol' [ 242.718306][ T5852] Bluetooth: hci4: command 0x0c1a tx timeout [ 242.784732][ T5923] usb 3-1: string descriptor 0 read error: -71 [ 242.791813][ T5923] usb 3-1: USB disconnect, device number 16 [ 242.903661][ T8188] delete_channel: no stack [ 243.992029][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 244.195134][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.271004][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 244.285677][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.304509][ T10] usb 3-1: config 0 descriptor?? [ 244.482117][ T8271] netlink: 'syz.1.640': attribute type 1 has an invalid length. [ 244.490419][ T8271] netlink: 140 bytes leftover after parsing attributes in process `syz.1.640'. [ 244.499580][ T8271] netlink: 96 bytes leftover after parsing attributes in process `syz.1.640'. [ 244.714316][ T10] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 244.735202][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0014/input/input22 [ 244.759625][ T30] audit: type=1400 audit(1755104409.361:716): avc: denied { ioctl } for pid=8272 comm="syz.0.641" path="socket:[20464]" dev="sockfs" ino=20464 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 245.736012][ T8286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.751717][ T10] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 247.136812][ T10] usb 3-1: USB disconnect, device number 17 [ 248.095187][ T8323] netlink: 'syz.1.653': attribute type 1 has an invalid length. [ 248.135951][ T8323] netlink: 140 bytes leftover after parsing attributes in process `syz.1.653'. [ 248.198091][ T30] audit: type=1400 audit(1755104412.802:717): avc: denied { mounton } for pid=8325 comm="syz.2.655" path="/proc/421/net/rpc" dev="proc" ino=4026533221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 248.242566][ T8323] netlink: 96 bytes leftover after parsing attributes in process `syz.1.653'. [ 248.257914][ T30] audit: type=1400 audit(1755104412.802:718): avc: denied { mount } for pid=8325 comm="syz.2.655" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 248.369364][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.656'. [ 248.485888][ T8336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.625267][ T30] audit: type=1400 audit(1755104413.223:719): avc: denied { map } for pid=8340 comm="syz.0.660" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 248.977880][ T30] audit: type=1400 audit(1755104413.583:720): avc: denied { ioctl } for pid=8342 comm="syz.1.661" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 249.010045][ T8343] input: syz1 as /devices/virtual/input/input23 [ 249.447251][ T30] audit: type=1400 audit(1755104414.053:721): avc: denied { read } for pid=8340 comm="syz.0.660" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 249.574710][ T30] audit: type=1400 audit(1755104414.083:722): avc: denied { open } for pid=8340 comm="syz.0.660" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 249.649147][ T30] audit: type=1400 audit(1755104414.093:723): avc: denied { ioctl } for pid=8340 comm="syz.0.660" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 249.710946][ T30] audit: type=1400 audit(1755104414.323:724): avc: denied { accept } for pid=8358 comm="syz.0.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.228779][ T5902] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 250.393279][ T5902] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 250.410116][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.418240][ T5902] usb 3-1: Product: syz [ 250.423130][ T5902] usb 3-1: Manufacturer: syz [ 250.447649][ T8372] netlink: 'syz.4.669': attribute type 1 has an invalid length. [ 250.455403][ T8372] netlink: 140 bytes leftover after parsing attributes in process `syz.4.669'. [ 250.464454][ T8372] netlink: 96 bytes leftover after parsing attributes in process `syz.4.669'. [ 250.474215][ T5902] usb 3-1: SerialNumber: syz [ 250.553819][ T5902] usb 3-1: config 0 descriptor?? [ 250.575550][ T8368] netlink: 'syz.0.670': attribute type 13 has an invalid length. [ 250.588201][ T5852] Bluetooth: hci5: urb ffff888022a86e00 submission failed (2) [ 250.600874][ T8368] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 250.619462][ T8376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.635735][ T8376] FAULT_INJECTION: forcing a failure. [ 250.635735][ T8376] name failslab, interval 1, probability 0, space 0, times 0 [ 250.679100][ T8376] CPU: 0 UID: 0 PID: 8376 Comm: syz.3.671 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 250.679128][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.679139][ T8376] Call Trace: [ 250.679145][ T8376] [ 250.679152][ T8376] dump_stack_lvl+0x16c/0x1f0 [ 250.679177][ T8376] should_fail_ex+0x512/0x640 [ 250.679197][ T8376] ? fs_reclaim_acquire+0xae/0x150 [ 250.679222][ T8376] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 250.679248][ T8376] should_failslab+0xc2/0x120 [ 250.679268][ T8376] __kmalloc_noprof+0xd2/0x510 [ 250.679292][ T8376] tomoyo_realpath_from_path+0xc2/0x6e0 [ 250.679320][ T8376] ? tomoyo_profile+0x47/0x60 [ 250.679339][ T8376] tomoyo_path_number_perm+0x245/0x580 [ 250.679358][ T8376] ? tomoyo_path_number_perm+0x237/0x580 [ 250.679381][ T8376] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 250.679404][ T8376] ? find_held_lock+0x2b/0x80 [ 250.679448][ T8376] ? find_held_lock+0x2b/0x80 [ 250.679468][ T8376] ? hook_file_ioctl_common+0x145/0x410 [ 250.679491][ T8376] ? __fget_files+0x20e/0x3c0 [ 250.679515][ T8376] security_file_ioctl+0x9b/0x240 [ 250.679540][ T8376] __x64_sys_ioctl+0xb7/0x210 [ 250.679569][ T8376] do_syscall_64+0xcd/0x4c0 [ 250.679590][ T8376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.679607][ T8376] RIP: 0033:0x7f6534f8ebe9 [ 250.679620][ T8376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.679638][ T8376] RSP: 002b:00007f6535d62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.679655][ T8376] RAX: ffffffffffffffda RBX: 00007f65351b5fa0 RCX: 00007f6534f8ebe9 [ 250.679666][ T8376] RDX: 0000200000000200 RSI: 0000000000003b89 RDI: 0000000000000003 [ 250.679676][ T8376] RBP: 00007f6535d62090 R08: 0000000000000000 R09: 0000000000000000 [ 250.679686][ T8376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.679703][ T8376] R13: 00007f65351b6038 R14: 00007f65351b5fa0 R15: 00007fffc8d5bc48 [ 250.679727][ T8376] [ 250.679734][ T8376] ERROR: Out of memory at tomoyo_realpath_from_path. [ 250.826186][ T8352] netlink: 'syz.2.665': attribute type 4 has an invalid length. [ 251.025771][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'. [ 251.045815][ T8352] NCSI netlink: No device for ifindex 6906736 [ 251.074278][ T8352] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 251.145380][ T30] audit: type=1400 audit(1755104415.744:725): avc: denied { connect } for pid=8351 comm="syz.2.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 251.213479][ T24] usb 3-1: USB disconnect, device number 18 [ 251.922108][ T30] audit: type=1800 audit(1755104416.434:726): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.675" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 252.027494][ T8392] openvswitch: netlink: VXLAN extension message has 22 unknown bytes. [ 252.495212][ T30] audit: type=1400 audit(1755104417.105:727): avc: denied { setopt } for pid=8381 comm="syz.3.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 252.801235][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.677'. [ 253.332409][ T8412] tmpfs: Bad value for 'mpol' [ 253.338472][ T8412] FAULT_INJECTION: forcing a failure. [ 253.338472][ T8412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.352066][ T8412] CPU: 0 UID: 0 PID: 8412 Comm: syz.3.680 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 253.352094][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.352104][ T8412] Call Trace: [ 253.352110][ T8412] [ 253.352117][ T8412] dump_stack_lvl+0x16c/0x1f0 [ 253.352139][ T8412] should_fail_ex+0x512/0x640 [ 253.352162][ T8412] _copy_from_user+0x2e/0xd0 [ 253.352185][ T8412] kstrtouint_from_user+0xd6/0x1d0 [ 253.352201][ T8412] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 253.352216][ T8412] ? lockdep_hardirqs_on+0x7c/0x110 [ 253.352244][ T8412] proc_fail_nth_write+0x83/0x220 [ 253.352266][ T8412] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 253.352292][ T8412] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 253.352310][ T8412] vfs_write+0x29d/0x11d0 [ 253.352332][ T8412] ? __pfx___mutex_lock+0x10/0x10 [ 253.352351][ T8412] ? __pfx_vfs_write+0x10/0x10 [ 253.352389][ T8412] ? __fget_files+0x20e/0x3c0 [ 253.352416][ T8412] ksys_write+0x12a/0x250 [ 253.352432][ T8412] ? __pfx_ksys_write+0x10/0x10 [ 253.352458][ T8412] do_syscall_64+0xcd/0x4c0 [ 253.352478][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.352495][ T8412] RIP: 0033:0x7f6534f8d69f [ 253.352509][ T8412] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 253.352526][ T8412] RSP: 002b:00007f6535d62030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 253.352543][ T8412] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6534f8d69f [ 253.352554][ T8412] RDX: 0000000000000001 RSI: 00007f6535d620a0 RDI: 0000000000000003 [ 253.352565][ T8412] RBP: 00007f6535d62090 R08: 0000000000000000 R09: 0000000000000000 [ 253.352575][ T8412] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 253.352584][ T8412] R13: 00007f65351b6038 R14: 00007f65351b5fa0 R15: 00007fffc8d5bc48 [ 253.352608][ T8412] [ 254.738667][ T8430] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.766298][ T8430] input: syz0 as /devices/virtual/input/input24 [ 254.783403][ T8432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.160415][ T30] audit: type=1400 audit(1755104419.626:728): avc: denied { watch } for pid=8427 comm="syz.2.687" path="/133/bus/file1" dev="overlay" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 255.260811][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.267220][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.793500][ T8447] netlink: 240 bytes leftover after parsing attributes in process `syz.1.690'. [ 255.876715][ T30] audit: type=1400 audit(1755104420.486:729): avc: denied { getopt } for pid=8446 comm="syz.1.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 256.081783][ T8449] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 258.284759][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 258.339451][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 258.685668][ T8493] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 259.930664][ T8506] netlink: 'syz.2.709': attribute type 107 has an invalid length. [ 259.960495][ T8506] netlink: 'syz.2.709': attribute type 1 has an invalid length. [ 260.292873][ T8512] ubi1: attaching mtd0 [ 260.564247][ T8519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.606990][ T8519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.042208][ T8536] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 261.374696][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 262.674156][ T8543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.719'. [ 262.741282][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 264.561814][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 264.570652][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.724'. [ 265.302406][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.730'. [ 265.380034][ T8578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.730'. [ 265.481371][ T8578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.730'. [ 265.823654][ T30] audit: type=1400 audit(1755104430.401:730): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 267.150370][ T9] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 267.280285][ T9] usb 3-1: device descriptor read/64, error -71 [ 267.969910][ T9] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 268.117547][ T9] usb 3-1: device descriptor read/64, error -71 [ 268.166531][ T8618] tipc: New replicast peer: 10.1.1.2 [ 268.191839][ T8618] tipc: Enabled bearer , priority 10 [ 268.264066][ T9] usb usb3-port1: attempt power cycle [ 269.039492][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 269.049595][ T30] audit: type=1400 audit(1755104433.653:731): avc: denied { watch } for pid=8634 comm="syz.3.748" path="/159" dev="tmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 269.071207][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.103616][ T9] usb 3-1: device descriptor read/8, error -71 [ 269.829716][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 270.362900][ T9] usb 3-1: device not accepting address 23, error -71 [ 270.386723][ T9] usb usb3-port1: unable to enumerate USB device [ 270.683562][ T30] audit: type=1400 audit(1755104435.304:732): avc: denied { ioctl } for pid=8660 comm="syz.0.757" path="socket:[25029]" dev="sockfs" ino=25029 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 271.138426][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 271.534146][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 271.550294][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 271.586797][ T9] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 271.607366][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.617852][ T8680] syzkaller0: entered promiscuous mode [ 271.624346][ T9] usb 1-1: Product: syz [ 271.638982][ T9] usb 1-1: Manufacturer: syz [ 271.645741][ T8680] syzkaller0: entered allmulticast mode [ 271.647164][ T9] usb 1-1: SerialNumber: syz [ 271.665431][ T9] usb 1-1: config 0 descriptor?? [ 271.673922][ T8683] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 271.680387][ T9] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 271.735349][ T8683] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 271.840937][ T30] audit: type=1400 audit(1755104436.454:733): avc: denied { map } for pid=8688 comm="syz.3.768" path="socket:[25083]" dev="sockfs" ino=25083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 271.877816][ T30] audit: type=1400 audit(1755104436.454:734): avc: denied { read } for pid=8688 comm="syz.3.768" path="socket:[25083]" dev="sockfs" ino=25083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 271.924354][ T8668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.760'. [ 271.933414][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 271.945339][ T30] audit: type=1400 audit(1755104436.464:735): avc: denied { sqpoll } for pid=8688 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 272.070315][ T8691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.167805][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 272.833493][ T8702] FAULT_INJECTION: forcing a failure. [ 272.833493][ T8702] name failslab, interval 1, probability 0, space 0, times 0 [ 272.846510][ T8702] CPU: 1 UID: 0 PID: 8702 Comm: syz.3.772 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 272.846534][ T8702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.846544][ T8702] Call Trace: [ 272.846549][ T8702] [ 272.846555][ T8702] dump_stack_lvl+0x16c/0x1f0 [ 272.846582][ T8702] should_fail_ex+0x512/0x640 [ 272.846599][ T8702] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 272.846619][ T8702] should_failslab+0xc2/0x120 [ 272.846637][ T8702] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 272.846652][ T8702] ? __fget_files+0x204/0x3c0 [ 272.846669][ T8702] ? create_new_namespaces+0x30/0xa90 [ 272.846694][ T8702] create_new_namespaces+0x30/0xa90 [ 272.846720][ T8702] __do_sys_setns+0x229/0x1920 [ 272.846741][ T8702] ? fput+0x9b/0xd0 [ 272.846760][ T8702] ? __pfx___do_sys_setns+0x10/0x10 [ 272.846779][ T8702] ? ksys_write+0x1ac/0x250 [ 272.846803][ T8702] do_syscall_64+0xcd/0x4c0 [ 272.846822][ T8702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.846837][ T8702] RIP: 0033:0x7f6534f8ebe9 [ 272.846851][ T8702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.846868][ T8702] RSP: 002b:00007f6535d41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 272.846884][ T8702] RAX: ffffffffffffffda RBX: 00007f65351b6090 RCX: 00007f6534f8ebe9 [ 272.846895][ T8702] RDX: 0000000000000000 RSI: 0000000034020000 RDI: 0000000000000005 [ 272.846904][ T8702] RBP: 00007f6535d41090 R08: 0000000000000000 R09: 0000000000000000 [ 272.846913][ T8702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.846922][ T8702] R13: 00007f65351b6128 R14: 00007f65351b6090 R15: 00007fffc8d5bc48 [ 272.846944][ T8702] [ 273.360949][ T8706] ksmbd: Unknown IPC event: 3, ignore. [ 273.416106][ T8706] usb usb8: usbfs: process 8706 (syz.3.773) did not claim interface 0 before use [ 273.649453][ T24] usb 1-1: USB disconnect, device number 11 [ 273.660879][ T8714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.950504][ T30] audit: type=1400 audit(1755104438.485:736): avc: denied { name_bind } for pid=8717 comm="syz.2.778" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 273.971478][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.216873][ T55] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 274.226991][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 274.767440][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 274.773920][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.791415][ T55] usb 3-1: too many configurations: 29, using maximum allowed: 8 [ 274.808454][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 274.820016][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.835951][ T55] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 274.847006][ T9] usb 2-1: config 0 descriptor?? [ 274.852217][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.864846][ T55] usb 3-1: Product: syz [ 274.870523][ T55] usb 3-1: Manufacturer: syz [ 274.875959][ T55] usb 3-1: SerialNumber: syz [ 274.896759][ T55] usb 3-1: config 0 descriptor?? [ 274.906791][ T55] hub 3-1:0.0: Invalid hub with more than one config or interface [ 274.915649][ T55] hub 3-1:0.0: probe with driver hub failed with error -22 [ 274.925583][ T55] gspca_main: 0ac8:c301 too many config [ 275.162827][ T8719] [ 275.165185][ T8719] ===================================================== [ 275.172105][ T8719] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 275.179549][ T8719] 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 Not tainted [ 275.186647][ T8719] ----------------------------------------------------- [ 275.193565][ T8719] syz.2.778/8719 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 275.201103][ T8719] ffff888079abcb40 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 275.209829][ T8719] [ 275.209829][ T8719] and this task is already holding: [ 275.217179][ T8719] ffff88801db13028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 275.226987][ T8719] which would create a new lock dependency: [ 275.232845][ T8719] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 275.240903][ T8719] [ 275.240903][ T8719] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 275.250345][ T8719] (&client->buffer_lock){..-.}-{3:3} [ 275.250363][ T8719] [ 275.250363][ T8719] ... which became SOFTIRQ-irq-safe at: [ 275.263390][ T8719] lock_acquire+0x179/0x350 [ 275.267967][ T8719] _raw_spin_lock+0x2e/0x40 [ 275.272533][ T8719] evdev_pass_values+0x10e/0x9b0 [ 275.277537][ T8719] evdev_events+0x1bb/0x390 [ 275.282117][ T8719] input_pass_values+0x74e/0x880 [ 275.287128][ T8719] input_handle_event+0xb29/0x14d0 [ 275.292325][ T8719] input_event+0x8e/0xd0 [ 275.296650][ T8719] hidinput_hid_event+0xa10/0x2420 [ 275.301829][ T8719] hid_process_event+0x4b7/0x5e0 [ 275.306837][ T8719] hid_report_raw_event+0xa0a/0x1290 [ 275.312187][ T8719] __hid_input_report.constprop.0+0x33f/0x450 [ 275.318320][ T8719] hid_irq_in+0x35e/0x870 [ 275.322720][ T8719] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 275.328154][ T8719] usb_hcd_giveback_urb+0x39b/0x450 [ 275.333413][ T8719] dummy_timer+0x1814/0x3a30 [ 275.338059][ T8719] __hrtimer_run_queues+0x202/0xad0 [ 275.343318][ T8719] hrtimer_run_softirq+0x17d/0x350 [ 275.348485][ T8719] handle_softirqs+0x216/0x8e0 [ 275.353309][ T8719] __irq_exit_rcu+0x109/0x170 [ 275.358047][ T8719] irq_exit_rcu+0x9/0x30 [ 275.362354][ T8719] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 275.368052][ T8719] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 275.374088][ T8719] sock_has_perm+0x214/0x2f0 [ 275.378739][ T8719] security_socket_recvmsg+0x238/0x260 [ 275.384268][ T8719] sock_recvmsg+0x4a/0x250 [ 275.388761][ T8719] ____sys_recvmsg+0x218/0x6b0 [ 275.393582][ T8719] ___sys_recvmsg+0x114/0x1a0 [ 275.398312][ T8719] __sys_recvmsg+0x16a/0x220 [ 275.402957][ T8719] do_syscall_64+0xcd/0x4c0 [ 275.407528][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.413481][ T8719] [ 275.413481][ T8719] to a SOFTIRQ-irq-unsafe lock: [ 275.420463][ T8719] (tasklist_lock){.+.+}-{3:3} [ 275.420479][ T8719] [ 275.420479][ T8719] ... which became SOFTIRQ-irq-unsafe at: [ 275.433059][ T8719] ... [ 275.433063][ T8719] lock_acquire+0x179/0x350 [ 275.440176][ T8719] _raw_read_lock+0x5f/0x70 [ 275.444740][ T8719] __do_wait+0x105/0x890 [ 275.449043][ T8719] do_wait+0x21e/0x5a0 [ 275.453172][ T8719] kernel_wait+0x9f/0x160 [ 275.457559][ T8719] call_usermodehelper_exec_work+0xf1/0x170 [ 275.463509][ T8719] process_one_work+0x9cc/0x1b70 [ 275.468502][ T8719] worker_thread+0x6c8/0xf10 [ 275.473150][ T8719] kthread+0x3c5/0x780 [ 275.477289][ T8719] ret_from_fork+0x5d7/0x6f0 [ 275.481936][ T8719] ret_from_fork_asm+0x1a/0x30 [ 275.486759][ T8719] [ 275.486759][ T8719] other info that might help us debug this: [ 275.486759][ T8719] [ 275.496954][ T8719] Chain exists of: [ 275.496954][ T8719] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 275.496954][ T8719] [ 275.510047][ T8719] Possible interrupt unsafe locking scenario: [ 275.510047][ T8719] [ 275.518331][ T8719] CPU0 CPU1 [ 275.523665][ T8719] ---- ---- [ 275.529003][ T8719] lock(tasklist_lock); [ 275.533224][ T8719] local_irq_disable(); [ 275.539955][ T8719] lock(&client->buffer_lock); [ 275.547298][ T8719] lock(&new->fa_lock); [ 275.554031][ T8719] [ 275.557454][ T8719] lock(&client->buffer_lock); [ 275.562446][ T8719] [ 275.562446][ T8719] *** DEADLOCK *** [ 275.562446][ T8719] [ 275.570557][ T8719] 7 locks held by syz.2.778/8719: [ 275.575548][ T8719] #0: ffff88802b499118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 275.584651][ T8719] #1: ffff88802130c230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 275.594708][ T8719] #2: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 275.604326][ T8719] #3: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 275.613857][ T8719] #4: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 275.622977][ T8719] #5: ffff88801db13028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 275.633207][ T8719] #6: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 275.642230][ T8719] [ 275.642230][ T8719] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 275.652622][ T8719] -> (&client->buffer_lock){..-.}-{3:3} { [ 275.658328][ T8719] IN-SOFTIRQ-W at: [ 275.662279][ T8719] lock_acquire+0x179/0x350 [ 275.668412][ T8719] _raw_spin_lock+0x2e/0x40 [ 275.674539][ T8719] evdev_pass_values+0x10e/0x9b0 [ 275.681098][ T8719] evdev_events+0x1bb/0x390 [ 275.687223][ T8719] input_pass_values+0x74e/0x880 [ 275.693790][ T8719] input_handle_event+0xb29/0x14d0 [ 275.700530][ T8719] input_event+0x8e/0xd0 [ 275.706393][ T8719] hidinput_hid_event+0xa10/0x2420 [ 275.713124][ T8719] hid_process_event+0x4b7/0x5e0 [ 275.719687][ T8719] hid_report_raw_event+0xa0a/0x1290 [ 275.726597][ T8719] __hid_input_report.constprop.0+0x33f/0x450 [ 275.734290][ T8719] hid_irq_in+0x35e/0x870 [ 275.740239][ T8719] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 275.747234][ T8719] usb_hcd_giveback_urb+0x39b/0x450 [ 275.754055][ T8719] dummy_timer+0x1814/0x3a30 [ 275.760263][ T8719] __hrtimer_run_queues+0x202/0xad0 [ 275.767082][ T8719] hrtimer_run_softirq+0x17d/0x350 [ 275.773811][ T8719] handle_softirqs+0x216/0x8e0 [ 275.780196][ T8719] __irq_exit_rcu+0x109/0x170 [ 275.786498][ T8719] irq_exit_rcu+0x9/0x30 [ 275.792378][ T8719] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 275.799635][ T8719] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 275.807235][ T8719] sock_has_perm+0x214/0x2f0 [ 275.813447][ T8719] security_socket_recvmsg+0x238/0x260 [ 275.820528][ T8719] sock_recvmsg+0x4a/0x250 [ 275.826568][ T8719] ____sys_recvmsg+0x218/0x6b0 [ 275.832952][ T8719] ___sys_recvmsg+0x114/0x1a0 [ 275.839262][ T8719] __sys_recvmsg+0x16a/0x220 [ 275.845472][ T8719] do_syscall_64+0xcd/0x4c0 [ 275.851609][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.859125][ T8719] INITIAL USE at: [ 275.862989][ T8719] lock_acquire+0x179/0x350 [ 275.869032][ T8719] _raw_spin_lock+0x2e/0x40 [ 275.875073][ T8719] evdev_pass_values+0x10e/0x9b0 [ 275.881562][ T8719] evdev_events+0x1bb/0x390 [ 275.887602][ T8719] input_pass_values+0x74e/0x880 [ 275.894513][ T8719] input_handle_event+0xb29/0x14d0 [ 275.901168][ T8719] input_event+0x8e/0xd0 [ 275.906953][ T8719] hidinput_hid_event+0xa10/0x2420 [ 275.913615][ T8719] hid_process_event+0x4b7/0x5e0 [ 275.920092][ T8719] hid_report_raw_event+0xa0a/0x1290 [ 275.926916][ T8719] __hid_input_report.constprop.0+0x33f/0x450 [ 275.934533][ T8719] hid_irq_in+0x35e/0x870 [ 275.940398][ T8719] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 275.947309][ T8719] usb_hcd_giveback_urb+0x39b/0x450 [ 275.954046][ T8719] dummy_timer+0x1814/0x3a30 [ 275.960184][ T8719] __hrtimer_run_queues+0x202/0xad0 [ 275.966919][ T8719] hrtimer_run_softirq+0x17d/0x350 [ 275.973579][ T8719] handle_softirqs+0x216/0x8e0 [ 275.979881][ T8719] __irq_exit_rcu+0x109/0x170 [ 275.986093][ T8719] irq_exit_rcu+0x9/0x30 [ 275.991883][ T8719] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 275.999057][ T8719] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 276.006573][ T8719] sock_has_perm+0x214/0x2f0 [ 276.012698][ T8719] security_socket_recvmsg+0x238/0x260 [ 276.019693][ T8719] sock_recvmsg+0x4a/0x250 [ 276.025643][ T8719] ____sys_recvmsg+0x218/0x6b0 [ 276.031942][ T8719] ___sys_recvmsg+0x114/0x1a0 [ 276.038154][ T8719] __sys_recvmsg+0x16a/0x220 [ 276.044289][ T8719] do_syscall_64+0xcd/0x4c0 [ 276.050326][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.057764][ T8719] } [ 276.060233][ T8719] ... key at: [] __key.1+0x0/0x40 [ 276.067315][ T8719] [ 276.067315][ T8719] the dependencies between the lock to be acquired [ 276.067320][ T8719] and SOFTIRQ-irq-unsafe lock: [ 276.080774][ T8719] -> (tasklist_lock){.+.+}-{3:3} { [ 276.086038][ T8719] HARDIRQ-ON-R at: [ 276.090161][ T8719] lock_acquire+0x179/0x350 [ 276.096657][ T8719] _raw_read_lock+0x5f/0x70 [ 276.103136][ T8719] __do_wait+0x105/0x890 [ 276.109352][ T8719] do_wait+0x21e/0x5a0 [ 276.115403][ T8719] kernel_wait+0x9f/0x160 [ 276.121712][ T8719] call_usermodehelper_exec_work+0xf1/0x170 [ 276.129575][ T8719] process_one_work+0x9cc/0x1b70 [ 276.136492][ T8719] worker_thread+0x6c8/0xf10 [ 276.143049][ T8719] kthread+0x3c5/0x780 [ 276.149085][ T8719] ret_from_fork+0x5d7/0x6f0 [ 276.155641][ T8719] ret_from_fork_asm+0x1a/0x30 [ 276.162386][ T8719] SOFTIRQ-ON-R at: [ 276.166510][ T8719] lock_acquire+0x179/0x350 [ 276.173006][ T8719] _raw_read_lock+0x5f/0x70 [ 276.179484][ T8719] __do_wait+0x105/0x890 [ 276.185699][ T8719] do_wait+0x21e/0x5a0 [ 276.191748][ T8719] kernel_wait+0x9f/0x160 [ 276.198059][ T8719] call_usermodehelper_exec_work+0xf1/0x170 [ 276.205924][ T8719] process_one_work+0x9cc/0x1b70 [ 276.212831][ T8719] worker_thread+0x6c8/0xf10 [ 276.219401][ T8719] kthread+0x3c5/0x780 [ 276.225437][ T8719] ret_from_fork+0x5d7/0x6f0 [ 276.231994][ T8719] ret_from_fork_asm+0x1a/0x30 [ 276.238741][ T8719] INITIAL USE at: [ 276.242779][ T8719] lock_acquire+0x179/0x350 [ 276.249168][ T8719] _raw_write_lock_irq+0x36/0x50 [ 276.255994][ T8719] copy_process+0x4caf/0x7690 [ 276.262556][ T8719] kernel_clone+0xfc/0x930 [ 276.268856][ T8719] user_mode_thread+0xc7/0x110 [ 276.275504][ T8719] rest_init+0x23/0x2b0 [ 276.281545][ T8719] start_kernel+0x3ee/0x4d0 [ 276.287936][ T8719] x86_64_start_reservations+0x18/0x30 [ 276.295279][ T8719] x86_64_start_kernel+0x130/0x190 [ 276.302277][ T8719] common_startup_64+0x13e/0x148 [ 276.309098][ T8719] INITIAL READ USE at: [ 276.313585][ T8719] lock_acquire+0x179/0x350 [ 276.320430][ T8719] _raw_read_lock+0x5f/0x70 [ 276.327281][ T8719] __do_wait+0x105/0x890 [ 276.333859][ T8719] do_wait+0x21e/0x5a0 [ 276.340247][ T8719] kernel_wait+0x9f/0x160 [ 276.346892][ T8719] call_usermodehelper_exec_work+0xf1/0x170 [ 276.355117][ T8719] process_one_work+0x9cc/0x1b70 [ 276.362379][ T8719] worker_thread+0x6c8/0xf10 [ 276.369299][ T8719] kthread+0x3c5/0x780 [ 276.375683][ T8719] ret_from_fork+0x5d7/0x6f0 [ 276.382588][ T8719] ret_from_fork_asm+0x1a/0x30 [ 276.389672][ T8719] } [ 276.392333][ T8719] ... key at: [] tasklist_lock+0x18/0x40 [ 276.400215][ T8719] ... acquired at: [ 276.404170][ T8719] _raw_read_lock+0x5f/0x70 [ 276.408825][ T8719] send_sigio+0xb8/0x3e0 [ 276.413221][ T8719] kill_fasync+0x214/0x510 [ 276.417786][ T8719] lease_break_callback+0x23/0x30 [ 276.422959][ T8719] __break_lease+0x674/0x1810 [ 276.427821][ T8719] vfs_truncate+0x4d3/0x6e0 [ 276.432483][ T8719] __x64_sys_truncate+0x172/0x1e0 [ 276.437663][ T8719] do_syscall_64+0xcd/0x4c0 [ 276.442330][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.448376][ T8719] [ 276.450684][ T8719] -> (&f_owner->lock){....}-{3:3} { [ 276.455956][ T8719] INITIAL USE at: [ 276.459926][ T8719] lock_acquire+0x179/0x350 [ 276.466148][ T8719] _raw_write_lock_irq+0x36/0x50 [ 276.472803][ T8719] __f_setown+0x61/0x3c0 [ 276.478770][ T8719] generic_setlease+0xef2/0x1300 [ 276.485414][ T8719] kernel_setlease+0x106/0x140 [ 276.491894][ T8719] vfs_setlease+0x258/0x2d0 [ 276.498118][ T8719] fcntl_setlease+0x3ed/0x5a0 [ 276.504528][ T8719] do_fcntl+0x751/0x15a0 [ 276.510488][ T8719] __x64_sys_fcntl+0x163/0x200 [ 276.516966][ T8719] do_syscall_64+0xcd/0x4c0 [ 276.523179][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.530779][ T8719] INITIAL READ USE at: [ 276.535166][ T8719] lock_acquire+0x179/0x350 [ 276.541826][ T8719] _raw_read_lock_irq+0x67/0x80 [ 276.548836][ T8719] f_getown+0x57/0x300 [ 276.555049][ T8719] sock_ioctl+0x1f2/0x6b0 [ 276.561539][ T8719] __x64_sys_ioctl+0x18b/0x210 [ 276.568451][ T8719] do_syscall_64+0xcd/0x4c0 [ 276.575097][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.583143][ T8719] } [ 276.585698][ T8719] ... key at: [] __key.1+0x0/0x40 [ 276.592865][ T8719] ... acquired at: [ 276.596723][ T8719] _raw_read_lock_irqsave+0x74/0x90 [ 276.602069][ T8719] send_sigio+0x31/0x3e0 [ 276.606458][ T8719] kill_fasync+0x214/0x510 [ 276.611021][ T8719] lease_break_callback+0x23/0x30 [ 276.616197][ T8719] __break_lease+0x674/0x1810 [ 276.621016][ T8719] vfs_truncate+0x4d3/0x6e0 [ 276.625664][ T8719] __x64_sys_truncate+0x172/0x1e0 [ 276.630832][ T8719] do_syscall_64+0xcd/0x4c0 [ 276.635483][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.641524][ T8719] [ 276.643820][ T8719] -> (&new->fa_lock){....}-{3:3} { [ 276.648916][ T8719] INITIAL USE at: [ 276.652782][ T8719] lock_acquire+0x179/0x350 [ 276.658823][ T8719] _raw_write_lock_irq+0x36/0x50 [ 276.665302][ T8719] fasync_remove_entry+0xb2/0x1e0 [ 276.671875][ T8719] fasync_helper+0xaf/0xd0 [ 276.677829][ T8719] lease_modify+0x232/0x500 [ 276.683863][ T8719] locks_remove_file+0x29e/0x5c0 [ 276.690332][ T8719] __fput+0x351/0xb70 [ 276.695849][ T8719] fput_close_sync+0x118/0x210 [ 276.702148][ T8719] __x64_sys_close+0x8b/0x120 [ 276.708373][ T8719] do_syscall_64+0xcd/0x4c0 [ 276.714416][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.721847][ T8719] INITIAL READ USE at: [ 276.726146][ T8719] lock_acquire+0x179/0x350 [ 276.732622][ T8719] _raw_read_lock_irqsave+0x74/0x90 [ 276.739794][ T8719] kill_fasync+0x138/0x510 [ 276.746184][ T8719] lease_break_callback+0x23/0x30 [ 276.753267][ T8719] __break_lease+0x674/0x1810 [ 276.759911][ T8719] vfs_truncate+0x4d3/0x6e0 [ 276.766382][ T8719] __x64_sys_truncate+0x172/0x1e0 [ 276.773375][ T8719] do_syscall_64+0xcd/0x4c0 [ 276.779844][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.787706][ T8719] } [ 276.790174][ T8719] ... key at: [] __key.0+0x0/0x40 [ 276.797254][ T8719] ... acquired at: [ 276.801026][ T8719] lock_acquire+0x179/0x350 [ 276.805685][ T8719] _raw_read_lock_irqsave+0x74/0x90 [ 276.811043][ T8719] kill_fasync+0x138/0x510 [ 276.815606][ T8719] evdev_pass_values+0x619/0x9b0 [ 276.820692][ T8719] evdev_events+0x1bb/0x390 [ 276.825344][ T8719] input_pass_values+0x74e/0x880 [ 276.830439][ T8719] input_handle_event+0xf00/0x14d0 [ 276.835707][ T8719] input_inject_event+0x1e8/0x3b0 [ 276.840877][ T8719] evdev_write+0x457/0x750 [ 276.845440][ T8719] vfs_write+0x29d/0x11d0 [ 276.849911][ T8719] ksys_write+0x1f8/0x250 [ 276.854402][ T8719] do_syscall_64+0xcd/0x4c0 [ 276.859050][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.865087][ T8719] [ 276.867383][ T8719] [ 276.867383][ T8719] stack backtrace: [ 276.873241][ T8719] CPU: 0 UID: 0 PID: 8719 Comm: syz.2.778 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 276.873255][ T8719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.873261][ T8719] Call Trace: [ 276.873266][ T8719] [ 276.873270][ T8719] dump_stack_lvl+0x116/0x1f0 [ 276.873283][ T8719] check_irq_usage+0x7dc/0x920 [ 276.873299][ T8719] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 276.873317][ T8719] ? check_path.constprop.0+0x24/0x50 [ 276.873333][ T8719] ? __lock_acquire+0x12bc/0x1ce0 [ 276.873348][ T8719] __lock_acquire+0x12bc/0x1ce0 [ 276.873366][ T8719] lock_acquire+0x179/0x350 [ 276.873381][ T8719] ? kill_fasync+0x138/0x510 [ 276.873398][ T8719] _raw_read_lock_irqsave+0x74/0x90 [ 276.873415][ T8719] ? kill_fasync+0x138/0x510 [ 276.873429][ T8719] kill_fasync+0x138/0x510 [ 276.873443][ T8719] evdev_pass_values+0x619/0x9b0 [ 276.873458][ T8719] evdev_events+0x1bb/0x390 [ 276.873472][ T8719] input_pass_values+0x74e/0x880 [ 276.873487][ T8719] input_handle_event+0xf00/0x14d0 [ 276.873507][ T8719] ? _copy_from_user+0x59/0xd0 [ 276.873530][ T8719] input_inject_event+0x1e8/0x3b0 [ 276.873544][ T8719] evdev_write+0x457/0x750 [ 276.873559][ T8719] ? __pfx_evdev_write+0x10/0x10 [ 276.873574][ T8719] ? bpf_lsm_file_permission+0x9/0x10 [ 276.873588][ T8719] ? security_file_permission+0x71/0x210 [ 276.873604][ T8719] ? rw_verify_area+0xcf/0x6c0 [ 276.873619][ T8719] ? __pfx_evdev_write+0x10/0x10 [ 276.873633][ T8719] vfs_write+0x29d/0x11d0 [ 276.873644][ T8719] ? __pfx_vfs_write+0x10/0x10 [ 276.873653][ T8719] ? find_held_lock+0x2b/0x80 [ 276.873665][ T8719] ? __fget_files+0x204/0x3c0 [ 276.873677][ T8719] ? __fget_files+0x20e/0x3c0 [ 276.873689][ T8719] ksys_write+0x1f8/0x250 [ 276.873698][ T8719] ? __pfx_ksys_write+0x10/0x10 [ 276.873709][ T8719] ? fdget+0x187/0x210 [ 276.873720][ T8719] do_syscall_64+0xcd/0x4c0 [ 276.873731][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.873741][ T8719] RIP: 0033:0x7f4f3138ebe9 [ 276.873751][ T8719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.873761][ T8719] RSP: 002b:00007f4f32229038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 276.873771][ T8719] RAX: ffffffffffffffda RBX: 00007f4f315b6090 RCX: 00007f4f3138ebe9 [ 276.873778][ T8719] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 000000000000000a [ 276.873784][ T8719] RBP: 00007f4f31411e19 R08: 0000000000000000 R09: 0000000000000000 [ 276.873790][ T8719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.873796][ T8719] R13: 00007f4f315b6128 R14: 00007f4f315b6090 R15: 00007fffec5b1fb8 [ 276.873805][ T8719] [ 277.136193][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.154286][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 277.161139][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 277.170208][ T9] usb 2-1: USB disconnect, device number 22 [ 277.185619][ T30] audit: type=1400 audit(1755104441.817:737): avc: denied { create } for pid=8729 comm="syz.0.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 277.208766][ T30] audit: type=1400 audit(1755104441.837:738): avc: denied { write } for pid=8729 comm="syz.0.782" path="socket:[25202]" dev="sockfs" ino=25202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 277.460040][ T30] audit: type=1400 audit(1755104442.087:739): avc: denied { setopt } for pid=8729 comm="syz.0.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.494600][ T8735] syz.4.783 (8735) used greatest stack depth: 19472 bytes left [ 278.241868][ T55] usb 3-1: USB disconnect, device number 24