last executing test programs: 58.783887074s ago: executing program 3 (id=721): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="07f1054b05028181d3e5b34205"], 0xc) 57.787532019s ago: executing program 3 (id=737): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 57.451167566s ago: executing program 3 (id=742): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) 57.366740005s ago: executing program 3 (id=744): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chroot(&(0x7f0000000d00)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') 57.365906258s ago: executing program 3 (id=745): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x81ff) 56.815116446s ago: executing program 3 (id=751): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x8, [{@multicast2, 0x8}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x3f7, 0x4) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 56.577406019s ago: executing program 32 (id=751): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x8, [{@multicast2, 0x8}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x3f7, 0x4) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 5.305321177s ago: executing program 2 (id=1329): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0xfffffffb}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00002db000/0x2000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2200}], 0x0, 0xa}, 0x20) 5.129776095s ago: executing program 2 (id=1331): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x386}], 0x2, 0x10000, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 4.956474814s ago: executing program 2 (id=1332): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x3, 0x200, 0x5, 0xf, 0x2, 0xfffff1c8}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=0x4000) 3.662457114s ago: executing program 4 (id=1354): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000440)={0x6, 0xfffffffc, 0x10}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 3.459800417s ago: executing program 4 (id=1359): socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0xb145, 0x800, 0x2, 0x800001b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r0, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 3.330095835s ago: executing program 4 (id=1362): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8) r1 = syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xbbcf, 0x10100, 0x0, 0x242, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f0000000480)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x4, 0x5, {0x77359400}, {0x0, 0x8, 0x5, 0x0, 0xe, 0x2, "6ecbfe93"}, 0x7, 0x1, {0x0}, 0xff5, 0x0, r0}) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(r1, 0x353, 0x0, 0x0, 0x0, 0x0) signalfd(r0, &(0x7f0000002340), 0x8) 3.228301753s ago: executing program 4 (id=1364): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 3.082755481s ago: executing program 4 (id=1366): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f00000009c0)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) 2.302764165s ago: executing program 0 (id=1379): timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) 2.16999216s ago: executing program 0 (id=1381): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_madvise(r1, 0x0, 0x0, 0xe, 0x0) 2.160261003s ago: executing program 2 (id=1382): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2c}}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x20878, 0x1a201}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 1.976798407s ago: executing program 2 (id=1383): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x3ff}]}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x9, 0x0) 1.464422876s ago: executing program 0 (id=1386): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec8500000007000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 1.290560334s ago: executing program 0 (id=1387): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="c16a22213bc73b5c37696b90ad5bca70304193fc04574d3ca94f8bd1cfecb4c0bbc0c62d3e3b7d4578bd360ea718afacbfd6c7559a0363ec0d12576131d3c2de8be8d600ab0c76798f2675cf5d68d137fe86e1d0", 0x54}, {&(0x7f0000000100)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3dade5d7a11f014f2bbdec62e2df3daf9875c79c6763fdcb8830f378346bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9dd46c823bc89a7cc268e91fff716052173384c4e76c9921c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7b3d749bbc7f90a6a79dd2d20ff1637187bf9b58377bd5ae5", 0xe2}, {&(0x7f00000012c0)="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", 0x54b}], 0x3, 0x0, 0x0, 0x80}], 0x1, 0x50) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) 1.259846081s ago: executing program 0 (id=1388): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f0000005b574e69622bf8"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000001600)) 1.022791139s ago: executing program 2 (id=1393): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000d80)={0x0, 0x6, 0x1b, "5ad67a3f09e269f49bd372307fd411c57d4935fbd3367689bb53d4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0}, &(0x7f00000004c0)={0x44, &(0x7f00000002c0)={0x20, 0x13, 0x2, '\'\"'}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x32}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}}) 948.976878ms ago: executing program 1 (id=1395): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0xffffffef}}, 0x10) close(r1) 837.429312ms ago: executing program 1 (id=1396): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}]}}}]}, 0x3c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 749.527562ms ago: executing program 5 (id=1398): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000000000002"]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x0, 0x9}) 622.640545ms ago: executing program 0 (id=1399): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 606.401393ms ago: executing program 1 (id=1400): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x8a, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x4e, 0x200087ed, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)='\'1', 0x2}], 0x1}, 0x40) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0x1c}], 0x1, 0x10102, 0x0) 583.084912ms ago: executing program 5 (id=1401): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3ff, 0x8006}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 467.100136ms ago: executing program 1 (id=1402): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 391.975448ms ago: executing program 5 (id=1403): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x7e0}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001680)=""/4084, 0xff4}, {&(0x7f0000000cc0)=""/146, 0x92}], 0x2}, 0x12041) 326.542516ms ago: executing program 1 (id=1404): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40100, 0x0) fcntl$dupfd(r0, 0x406, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000005c00)={0x28, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1}) 290.555808ms ago: executing program 5 (id=1405): r0 = syz_io_uring_setup(0x76f3, &(0x7f0000000480)={0x0, 0xe5a5, 0x1000, 0x0, 0x2a5}, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 167.642241ms ago: executing program 5 (id=1406): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0xffffffff, 0x2, 0x1, 0x0, 0x2}) r1 = dup(r0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0xb, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) 146.572787ms ago: executing program 1 (id=1407): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000000)={0x18, 0x1, 0x0, 0x0, r1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1004000}) 14.699924ms ago: executing program 4 (id=1408): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 0s ago: executing program 5 (id=1409): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x1000003, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5319, 0x0) kernel console output (not intermixed with test programs): ] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 112.530589][ T5956] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 112.541800][ T5956] prodikeys 0003:041E:2801.000F: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 112.557207][ T5956] hid_prodikeys: hid-prodikeys: failed to find output report [ 112.557207][ T5956] [ 112.579574][ T5956] usb 4-1: USB disconnect, device number 15 [ 112.680536][ T30] audit: type=1400 audit(1754565687.822:383): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 112.683182][ T7346] fido_id[7346]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 112.720369][ T7326] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.752613][ T30] audit: type=1326 audit(1754565687.892:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda74d8ebe9 code=0x7ffc0000 [ 112.758052][ T7326] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.782943][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.808150][ T30] audit: type=1326 audit(1754565687.902:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda74d8ebe9 code=0x7ffc0000 [ 112.831425][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.840068][ T30] audit: type=1326 audit(1754565687.942:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fda74d8ebe9 code=0x7ffc0000 [ 112.864257][ T5929] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.867255][ T30] audit: type=1326 audit(1754565687.942:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda74d8ebe9 code=0x7ffc0000 [ 112.991141][ T30] audit: type=1326 audit(1754565687.942:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda74d8ebe9 code=0x7ffc0000 [ 113.014413][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.107932][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.134145][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.167304][ T5929] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 113.183511][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.195665][ T7361] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.226123][ T5929] usb 3-1: config 0 descriptor?? [ 113.664752][ T92] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 113.701744][ T92] usb 5-1: USB disconnect, device number 14 [ 113.859734][ T5929] hid-led 0003:1D34:0004.0010: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.2-1/input0 [ 113.927227][ T5929] hid-led 0003:1D34:0004.0010: Dream Cheeky Webmail Notifier initialized [ 114.102673][ T92] usb 3-1: USB disconnect, device number 7 [ 114.271858][ T7396] input: syz0 as /devices/virtual/input/input18 [ 114.356027][ T6128] udevd[6128]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 114.424963][ T7406] vivid-003: disconnect [ 114.442863][ T7405] vivid-003: reconnect [ 114.581041][ T7414] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.507'. [ 115.199518][ T5899] kernel write not supported for file /sg0 (pid: 5899 comm: kworker/1:3) [ 115.522537][ T5913] IPVS: starting estimator thread 0... [ 115.590798][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 115.590816][ T30] audit: type=1400 audit(1754565690.732:410): avc: denied { create } for pid=7473 comm="syz.1.530" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.641968][ T30] audit: type=1400 audit(1754565690.772:411): avc: denied { write } for pid=7473 comm="syz.1.530" name="file0" dev="tmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.664184][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.670493][ T7469] IPVS: using max 37 ests per chain, 88800 per kthread [ 115.682322][ T7474] kvm: user requested TSC rate below hardware speed [ 115.691683][ T30] audit: type=1400 audit(1754565690.772:412): avc: denied { open } for pid=7473 comm="syz.1.530" path="/97/file0" dev="tmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.714145][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.737738][ T30] audit: type=1400 audit(1754565690.772:413): avc: denied { ioctl } for pid=7473 comm="syz.1.530" path="/97/file0" dev="tmpfs" ino=521 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.762664][ T30] audit: type=1400 audit(1754565690.832:414): avc: denied { unlink } for pid=5845 comm="syz-executor" name="file0" dev="tmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.785155][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.823979][ T92] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.835560][ T30] audit: type=1400 audit(1754565690.952:415): avc: denied { read } for pid=7482 comm="syz.1.532" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 115.951512][ T30] audit: type=1400 audit(1754565690.952:416): avc: denied { open } for pid=7482 comm="syz.1.532" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 116.004377][ T92] usb 1-1: Using ep0 maxpacket: 32 [ 116.010855][ T92] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 116.033752][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.054008][ T30] audit: type=1400 audit(1754565691.092:417): avc: denied { relabelfrom } for pid=7485 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 116.084967][ T92] usb 1-1: config 0 descriptor?? [ 116.101077][ T30] audit: type=1400 audit(1754565691.092:418): avc: denied { relabelto } for pid=7485 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 116.274728][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 116.296815][ T30] audit: type=1400 audit(1754565691.432:419): avc: denied { write } for pid=5899 comm="kworker/1:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15997 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 116.303624][ T92] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 116.376536][ T92] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.394754][ T92] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 116.405652][ T92] usb 1-1: media controller created [ 116.442337][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.468911][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.489075][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.524570][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 116.552598][ T92] az6027: usb out operation failed. (-71) [ 116.565659][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.578334][ T92] az6027: usb out operation failed. (-71) [ 116.588906][ T92] stb0899_attach: Driver disabled by Kconfig [ 116.605635][ T9] usb 2-1: config 0 descriptor?? [ 116.612402][ T92] az6027: no front-end attached [ 116.612402][ T92] [ 116.631809][ T92] az6027: usb out operation failed. (-71) [ 116.647686][ T92] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 116.683669][ T92] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 116.719674][ T92] dvb-usb: schedule remote query interval to 400 msecs. [ 116.729170][ T92] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 116.741986][ T92] usb 1-1: USB disconnect, device number 6 [ 116.897760][ T92] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 117.101711][ T9] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 117.432024][ T7534] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 117.687922][ T9] pyra 0003:1E7D:2CF6.0011: couldn't init struct pyra_device [ 117.695478][ T9] pyra 0003:1E7D:2CF6.0011: couldn't install mouse [ 117.729223][ T9] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -71 [ 117.780009][ T9] usb 2-1: USB disconnect, device number 13 [ 117.964321][ T7557] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 118.148550][ T7564] netlink: 'syz.0.556': attribute type 10 has an invalid length. [ 118.169066][ T7564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.197851][ T7564] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 118.242558][ T7564] bond0: entered promiscuous mode [ 118.268931][ T7564] bond_slave_0: entered promiscuous mode [ 118.293011][ T7564] bond_slave_1: entered promiscuous mode [ 118.304077][ T5929] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 118.314195][ T7564] batadv0: entered promiscuous mode [ 118.475505][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 118.486286][ T5929] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 118.515652][ T5929] usb 5-1: config 0 has no interface number 0 [ 118.535541][ T5929] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 118.558961][ T5929] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 118.572607][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.621208][ T5929] usb 5-1: Product: syz [ 118.628944][ T5929] usb 5-1: Manufacturer: syz [ 118.637968][ T5929] usb 5-1: SerialNumber: syz [ 118.655019][ T5929] usb 5-1: config 0 descriptor?? [ 118.694137][ T5929] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 118.728178][ T5929] em28xx 5-1:0.132: Video interface 132 found: [ 118.844340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.985733][ T5956] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 119.077649][ T5929] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 119.108638][ T7584] Bluetooth: MGMT ver 1.23 [ 119.153995][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 119.236829][ T7588] netlink: 36 bytes leftover after parsing attributes in process `syz.3.565'. [ 119.393982][ T976] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 119.506986][ T5929] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 119.525771][ T5929] em28xx 5-1:0.132: board has no eeprom [ 119.554530][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 119.562469][ T976] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 119.587405][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.598641][ T5929] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 119.616162][ T5929] em28xx 5-1:0.132: analog set to bulk mode. [ 119.631394][ T976] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 119.641716][ T5922] em28xx 5-1:0.132: Registering V4L2 extension [ 119.655700][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.666492][ T5929] usb 5-1: USB disconnect, device number 15 [ 119.673638][ T5929] em28xx 5-1:0.132: Disconnecting em28xx [ 119.679875][ T976] usb 1-1: Product: syz [ 119.684852][ T976] usb 1-1: Manufacturer: syz [ 119.690611][ T976] usb 1-1: SerialNumber: syz [ 119.708475][ T976] usb 1-1: config 0 descriptor?? [ 119.723341][ T976] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 119.742241][ T976] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 119.832186][ T7608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.575'. [ 119.839459][ T7611] netlink: 44 bytes leftover after parsing attributes in process `syz.2.574'. [ 119.851660][ T7611] netlink: 43 bytes leftover after parsing attributes in process `syz.2.574'. [ 119.863037][ T7611] netlink: 'syz.2.574': attribute type 6 has an invalid length. [ 119.872046][ T7611] netlink: 'syz.2.574': attribute type 5 has an invalid length. [ 119.884776][ T7611] netlink: 43 bytes leftover after parsing attributes in process `syz.2.574'. [ 119.932885][ T5922] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 119.945273][ T5922] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 119.962652][ T5922] em28xx 5-1:0.132: No AC97 audio processor [ 119.973413][ T5922] usb 5-1: Decoder not found [ 119.978325][ T5922] em28xx 5-1:0.132: failed to create media graph [ 119.985008][ T5922] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 119.996103][ T5922] em28xx 5-1:0.132: Remote control support is not available for this card. [ 119.997972][ T5861] block nbd64: NBD_DISCONNECT [ 120.004878][ T5929] em28xx 5-1:0.132: Closing input extension [ 120.028640][ T5929] em28xx 5-1:0.132: Freeing device [ 120.158044][ T7617] netlink: 'syz.2.576': attribute type 1 has an invalid length. [ 120.206003][ T7617] netlink: 'syz.2.576': attribute type 2 has an invalid length. [ 120.348799][ T5855] udevd[5855]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 120.381216][ T976] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 120.407086][ T976] em28xx 1-1:0.0: Config register raw data: 0x41 [ 120.574121][ T7627] kvm: user requested TSC rate below hardware speed [ 120.630571][ T9] usb 1-1: USB disconnect, device number 7 [ 120.638097][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 120.651997][ T9] em28xx 1-1:0.0: Freeing device [ 120.755617][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 120.755633][ T30] audit: type=1400 audit(1754565695.902:422): avc: denied { map } for pid=7631 comm="syz.4.581" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 120.909719][ T30] audit: type=1400 audit(1754565696.052:423): avc: denied { ioctl } for pid=7635 comm="syz.2.583" path="socket:[17469]" dev="sockfs" ino=17469 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.033972][ T5899] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 121.218333][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 121.225701][ T5899] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 121.233818][ T5899] usb 4-1: config 0 has no interface number 0 [ 121.241236][ T5899] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.252555][ T5899] usb 4-1: config 0 interface 85 has no altsetting 0 [ 121.264915][ T5899] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 121.274482][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.283967][ T5899] usb 4-1: Product: syz [ 121.288502][ T5899] usb 4-1: Manufacturer: syz [ 121.293119][ T5899] usb 4-1: SerialNumber: syz [ 121.327908][ T5899] usb 4-1: config 0 descriptor?? [ 121.404010][ T976] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 121.554426][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 121.573285][ T976] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 121.601796][ T976] usb 5-1: config 0 has no interface number 0 [ 121.612300][ T976] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.634133][ T976] usb 5-1: config 0 interface 85 has no altsetting 0 [ 121.643331][ T976] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 121.660048][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.680410][ T976] usb 5-1: Product: syz [ 121.714210][ T976] usb 5-1: Manufacturer: syz [ 121.718868][ T976] usb 5-1: SerialNumber: syz [ 121.737563][ T976] usb 5-1: config 0 descriptor?? [ 121.943695][ T5899] appletouch 4-1:0.85: Geyser mode initialized. [ 121.956629][ T5899] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input20 [ 122.165376][ T5914] usb 4-1: USB disconnect, device number 16 [ 122.191851][ T5914] appletouch 4-1:0.85: input: appletouch disconnected [ 122.239417][ T5956] usb 2-1: unable to get BOS descriptor or descriptor too short [ 122.258040][ T5956] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 122.275061][ T5956] usb 2-1: can't read configurations, error -71 [ 122.356378][ T976] appletouch 5-1:0.85: Geyser mode initialized. [ 122.373216][ T976] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input21 [ 122.417630][ T7673] syzkaller1: entered promiscuous mode [ 122.423261][ T7673] syzkaller1: entered allmulticast mode [ 122.549759][ T7675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.572549][ T5914] usb 5-1: USB disconnect, device number 16 [ 122.594425][ T5914] appletouch 5-1:0.85: input: appletouch disconnected [ 122.788877][ T30] audit: type=1400 audit(1754565697.932:424): avc: denied { connect } for pid=7684 comm="syz.1.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.812824][ T30] audit: type=1400 audit(1754565697.952:425): avc: denied { read } for pid=7684 comm="syz.1.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.900033][ T7692] Bluetooth: MGMT ver 1.23 [ 123.004021][ T976] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 123.154695][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 123.165424][ T976] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.177360][ T976] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.188106][ T976] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.198348][ T976] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.213720][ T976] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.230734][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.344157][ T5956] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 123.354811][ T30] audit: type=1400 audit(1754565698.502:426): avc: denied { remount } for pid=7701 comm="syz.4.614" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 123.447809][ T976] usb 3-1: GET_CAPABILITIES returned 0 [ 123.453338][ T976] usbtmc 3-1:16.0: can't read capabilities [ 123.505043][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 123.517726][ T5956] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.550217][ T5956] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 123.552182][ T30] audit: type=1400 audit(1754565698.692:427): avc: denied { create } for pid=7712 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.560237][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.591437][ T5956] usb 2-1: Product: syz [ 123.601238][ T5956] usb 2-1: Manufacturer: syz [ 123.627954][ T5956] usb 2-1: SerialNumber: syz [ 123.629895][ T30] audit: type=1400 audit(1754565698.722:428): avc: denied { setopt } for pid=7712 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.634470][ T5956] usb 2-1: config 0 descriptor?? [ 123.703688][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 123.713110][ T30] audit: type=1400 audit(1754565698.722:429): avc: denied { bind } for pid=7712 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.720599][ T5922] usb 3-1: USB disconnect, device number 8 [ 123.791656][ T30] audit: type=1400 audit(1754565698.722:430): avc: denied { name_bind } for pid=7712 comm="syz.4.618" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 123.846442][ T30] audit: type=1400 audit(1754565698.722:431): avc: denied { node_bind } for pid=7712 comm="syz.4.618" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 123.910655][ T7720] syzkaller1: entered promiscuous mode [ 123.917602][ T7720] syzkaller1: entered allmulticast mode [ 124.169885][ T5956] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 124.344541][ T7740] netlink: 32 bytes leftover after parsing attributes in process `syz.2.628'. [ 124.356167][ T7740] netlink: 32 bytes leftover after parsing attributes in process `syz.2.628'. [ 124.434131][ T5899] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 124.444439][ T5922] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 124.515684][ T7748] kernel read not supported for file /eth0 (pid: 7748 comm: syz.2.632) [ 124.594425][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 124.603954][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 124.615077][ T5899] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 124.627633][ T5899] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 124.627748][ T5922] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 124.653948][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.663086][ T976] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 124.680213][ T5899] hub 5-1:32.0: bad descriptor, ignoring hub [ 124.697489][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.705711][ T5899] hub 5-1:32.0: probe with driver hub failed with error -5 [ 124.726494][ T5922] usb 1-1: config 0 descriptor?? [ 124.756375][ T5922] gspca_main: sunplus-2.14.0 probing 041e:400b [ 124.856304][ T976] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 124.873909][ T976] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.893619][ T5914] usb 2-1: USB disconnect, device number 15 [ 124.901917][ T976] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 124.924141][ T976] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 124.932359][ T976] usb 4-1: Product: syz [ 124.945012][ T976] usb 4-1: Manufacturer: syz [ 124.950329][ T976] usb 4-1: SerialNumber: syz [ 124.964434][ T976] usb 4-1: config 0 descriptor?? [ 124.978001][ T976] usb 4-1: selecting invalid altsetting 0 [ 125.209975][ T5929] usb 4-1: USB disconnect, device number 17 [ 125.229599][ T5956] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 125.294011][ T976] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 125.449293][ T976] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.489761][ T976] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.503052][ T976] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 125.512470][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.522780][ T976] usb 3-1: SerialNumber: syz [ 125.537203][ T976] usb 3-1: 0:2 : does not exist [ 125.704156][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 125.765213][ T5922] gspca_sunplus: reg_w_riv err -71 [ 125.770933][ T5922] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 125.784789][ T5922] usb 1-1: USB disconnect, device number 8 [ 125.853982][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 125.860447][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.872717][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 125.881863][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.892054][ T9] usb 2-1: config 0 descriptor?? [ 125.959034][ T5922] usb 3-1: USB disconnect, device number 9 [ 126.274166][ T5922] usb 5-1: USB disconnect, device number 17 [ 126.313705][ T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 126.319665][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 126.319681][ T30] audit: type=1400 audit(1754565701.462:434): avc: denied { getopt } for pid=7793 comm="syz.4.640" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.544354][ T9] usb 2-1: USB disconnect, device number 16 [ 126.672412][ T7803] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.680064][ T7803] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.700918][ T7803] bond0: left promiscuous mode [ 126.705802][ T7803] bond_slave_0: left promiscuous mode [ 126.711397][ T7803] bond_slave_1: left promiscuous mode [ 126.717942][ T7803] batadv0: left promiscuous mode [ 126.836875][ T7803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.856556][ T7803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.019438][ T6212] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.030807][ T7821] netlink: 'syz.4.649': attribute type 1 has an invalid length. [ 127.041147][ T7821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.649'. [ 127.104346][ T6212] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.122772][ T7823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.137887][ T6212] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.160724][ T6212] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.551003][ T30] audit: type=1400 audit(1754565702.692:435): avc: denied { mounton } for pid=7842 comm="syz.2.659" path="/35/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 127.581301][ T30] audit: type=1400 audit(1754565702.722:436): avc: denied { unmount } for pid=7034 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 127.693958][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 127.855443][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.866698][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.876520][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.893687][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.904451][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.918258][ T9] usb 1-1: config 0 descriptor?? [ 128.073774][ T30] audit: type=1400 audit(1754565703.212:437): avc: denied { mount } for pid=7852 comm="syz.4.663" name="/" dev="pstore" ino=2882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 128.095987][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.142352][ T30] audit: type=1400 audit(1754565703.282:438): avc: denied { read } for pid=7856 comm="syz.1.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.209276][ T30] audit: type=1400 audit(1754565703.352:439): avc: denied { append } for pid=7860 comm="syz.1.667" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.361810][ T9] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 128.408896][ T7868] mmap: syz.3.670 (7868) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.524429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 128.572013][ T30] audit: type=1400 audit(1754565703.712:440): avc: denied { block_suspend } for pid=7874 comm="syz.2.672" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.675086][ T30] audit: type=1400 audit(1754565703.812:441): avc: denied { set_context_mgr } for pid=7878 comm="syz.1.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 128.745453][ T30] audit: type=1400 audit(1754565703.892:442): avc: denied { connect } for pid=7881 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.838302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 128.847401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 128.874441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 128.956520][ C1] plantronics 0003:047F:FFFF.0012: hid_field_extract() called with n (132) > 32! (syz.0.657) [ 129.090521][ T30] audit: type=1400 audit(1754565704.232:443): avc: denied { bind } for pid=7896 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.169951][ T5914] usb 1-1: USB disconnect, device number 9 [ 129.210340][ T7905] netlink: 'syz.1.685': attribute type 1 has an invalid length. [ 129.219732][ T7905] netlink: 128 bytes leftover after parsing attributes in process `syz.1.685'. [ 129.243091][ T7905] netlink: 'syz.1.685': attribute type 2 has an invalid length. [ 129.251633][ T7905] netlink: 'syz.1.685': attribute type 1 has an invalid length. [ 129.514095][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 129.689604][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.702680][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.727288][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.737246][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.881602][ T5914] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 129.905344][ T5914] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.958062][ T9] usb 3-1: usb_control_msg returned -32 [ 129.970670][ T9] usbtmc 3-1:16.0: can't read capabilities [ 130.013965][ T92] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 130.184177][ T92] usb 2-1: Using ep0 maxpacket: 32 [ 130.192011][ T92] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 130.207619][ T92] usb 2-1: config 0 has no interface number 0 [ 130.239850][ T92] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 130.251235][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.261055][ T92] usb 2-1: Product: syz [ 130.269515][ T92] usb 2-1: Manufacturer: syz [ 130.278551][ T92] usb 2-1: SerialNumber: syz [ 130.287471][ T92] usb 2-1: config 0 descriptor?? [ 130.301544][ T92] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 130.510498][ T92] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 130.520060][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 130.530364][ T92] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 130.695645][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.707666][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 130.719426][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 130.731032][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.744018][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.753068][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.763384][ T9] usb 4-1: config 0 descriptor?? [ 130.769155][ T7944] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 130.906405][ T976] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 130.931657][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 130.931971][ T5922] usb 2-1: USB disconnect, device number 17 [ 130.958014][ T5922] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 130.978704][ T5922] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 130.997836][ T5922] quatech2 2-1:0.51: device disconnected [ 131.074573][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 131.081032][ T976] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 131.090509][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.102090][ T976] usb 1-1: config 0 descriptor?? [ 131.111250][ T976] gspca_main: sq930x-2.14.0 probing 041e:403c [ 131.201642][ T9] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd [ 131.219227][ T9] plantronics 0003:047F:FFFF.0014: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 131.418024][ T9] usb 4-1: USB disconnect, device number 18 [ 131.754181][ T5922] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 131.905804][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.916520][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 131.928216][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 131.938438][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 131.938453][ T30] audit: type=1326 audit(1754565707.072:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f273178ebe9 code=0x7fc00000 [ 131.939385][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 131.969460][ T30] audit: type=1326 audit(1754565707.072:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273178ebe9 code=0x7fc00000 [ 131.981436][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 132.017781][ T30] audit: type=1326 audit(1754565707.072:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273178ebe9 code=0x7fc00000 [ 132.041457][ T30] audit: type=1326 audit(1754565707.072:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273178ebe9 code=0x7fc00000 [ 132.087552][ T5922] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 132.087647][ T30] audit: type=1326 audit(1754565707.072:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273178ebe9 code=0x7fc00000 [ 132.098671][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 132.126575][ T30] audit: type=1326 audit(1754565707.072:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273178ebe9 code=0x7fc00000 [ 132.170457][ T5922] usb 2-1: Product: syz [ 132.179205][ T5922] usb 2-1: Manufacturer: syz [ 132.182569][ T30] audit: type=1326 audit(1754565707.072:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273178ebe9 code=0x7fc00000 [ 132.189226][ T5922] usb 2-1: SerialNumber: syz [ 132.215489][ T30] audit: type=1326 audit(1754565707.072:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273178ebe9 code=0x7fc00000 [ 132.244133][ T30] audit: type=1326 audit(1754565707.072:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273178ebe9 code=0x7fc00000 [ 132.308641][ T9] usb 3-1: USB disconnect, device number 10 [ 132.314937][ T5922] usb 2-1: config 0 descriptor?? [ 132.328718][ T30] audit: type=1326 audit(1754565707.072:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273178ebe9 code=0x7fc00000 [ 132.393981][ T976] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 132.399921][ T976] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 132.431059][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.437960][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.453798][ T976] usb 1-1: USB disconnect, device number 10 [ 132.528146][ T5922] radio-si470x 2-1:0.0: DeviceID=0xf403 ChipID=0x3300 [ 132.728895][ T5922] radio-si470x 2-1:0.0: software version 244, hardware version 3 [ 132.953761][ T5922] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 132.969766][ T5922] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 132.999527][ T5922] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 133.143080][ T5922] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 133.184139][ T5922] usb 2-1: USB disconnect, device number 18 [ 133.277249][ T8019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.727706][ T8035] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘A [ 134.015109][ T8044] netlink: 'syz.3.737': attribute type 9 has an invalid length. [ 134.022817][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 134.078236][ T8047] netlink: 'syz.1.738': attribute type 1 has an invalid length. [ 134.122746][ T8044] netlink: 'syz.3.737': attribute type 9 has an invalid length. [ 134.132002][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 134.142450][ T8049] 9pnet: p9_errstr2errno: server reported unknown error 6Ûz9’f00000000000000000003 [ 134.176871][ T8047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.184388][ T6212] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.193735][ T6212] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.202601][ T6212] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.276492][ T8055] bond1: (slave geneve2): making interface the new active one [ 134.342254][ T8055] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 134.357153][ T6212] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.444893][ T8062] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 134.456915][ T8062] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 134.793974][ T5929] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 134.909472][ T6212] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.921930][ T6212] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.950482][ T8074] : entered promiscuous mode [ 134.958932][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.972313][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.004027][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 135.014171][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.027160][ T5929] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.036320][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.047746][ T5929] usb 3-1: config 0 descriptor?? [ 135.078083][ T6212] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.112999][ T6212] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.181353][ T8080] netlink: 'syz.0.753': attribute type 1 has an invalid length. [ 135.189696][ T8080] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.753'. [ 135.270149][ T6212] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.313672][ T6212] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.395294][ T6212] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.435598][ T6212] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.480658][ T5929] plantronics 0003:047F:FFFF.0015: ignoring exceeding usage max [ 135.540048][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.550968][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.560528][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.573998][ T976] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 135.588410][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.598940][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 135.611824][ T5929] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 135.634552][ T6212] bridge_slave_1: left allmulticast mode [ 135.663851][ T6212] bridge_slave_1: left promiscuous mode [ 135.689892][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.740614][ T6212] bridge_slave_0: left allmulticast mode [ 135.758413][ T976] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.786235][ T6212] bridge_slave_0: left promiscuous mode [ 135.794335][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 135.813100][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.844232][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 135.870468][ T976] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.899983][ T976] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.911902][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.925297][ T976] usb 1-1: config 0 descriptor?? [ 135.935544][ T8084] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 136.044708][ T6212] ip6gretap0 (unregistering): left allmulticast mode [ 136.148877][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 136.319715][ T9] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 136.338167][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.349536][ T9] usb 5-1: config 0 descriptor?? [ 136.399945][ T976] plantronics 0003:047F:FFFF.0016: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 136.545350][ T6212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.556746][ T6212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.567063][ T6212] bond0 (unregistering): Released all slaves [ 136.573693][ T9] kaweth 5-1:0.0: Firmware present in device. [ 136.711725][ T8114] netlink: 44 bytes leftover after parsing attributes in process `syz.1.765'. [ 136.729051][ T8114] netlink: 44 bytes leftover after parsing attributes in process `syz.1.765'. [ 136.775409][ T9] kaweth 5-1:0.0: Statistics collection: 0 [ 136.788759][ T9] kaweth 5-1:0.0: Multicast filter limit: 0 [ 136.814482][ T92] usb 1-1: USB disconnect, device number 11 [ 136.837010][ T9] kaweth 5-1:0.0: MTU: 0 [ 136.848048][ T9] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 137.073164][ T6212] hsr_slave_0: left promiscuous mode [ 137.085613][ T6212] hsr_slave_1: left promiscuous mode [ 137.091583][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.123970][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.142576][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.158152][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.179742][ T9] kaweth 5-1:0.0: Error setting SOFS wait [ 137.193273][ T6212] veth1_macvtap: left promiscuous mode [ 137.199461][ T9] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 137.207767][ T6212] veth0_macvtap: left promiscuous mode [ 137.212592][ T9] usb 5-1: USB disconnect, device number 18 [ 137.226088][ T6212] veth1_vlan: left promiscuous mode [ 137.231437][ T6212] veth0_vlan: left promiscuous mode [ 137.625680][ T5857] Bluetooth: hci4: command tx timeout [ 137.639445][ T5914] usb 3-1: USB disconnect, device number 11 [ 137.895313][ T6212] team0 (unregistering): Port device team_slave_1 removed [ 137.944535][ T6212] team0 (unregistering): Port device team_slave_0 removed [ 138.270933][ T8171] input: syz0 as /devices/virtual/input/input24 [ 138.345840][ T5956] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 138.433853][ T8160] syzkaller1: entered promiscuous mode [ 138.446171][ T5914] kernel write not supported for file /369/attr/exec (pid: 5914 comm: kworker/0:6) [ 138.453038][ T8160] syzkaller1: entered allmulticast mode [ 138.473545][ T8092] chnl_net:caif_netlink_parms(): no params data found [ 138.504114][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 138.517273][ T5956] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 138.531963][ T5956] usb 2-1: config 0 has no interface number 0 [ 138.538351][ T5956] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 138.558963][ T5956] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 138.570521][ T5956] usb 2-1: config 0 interface 41 has no altsetting 0 [ 138.587647][ T5956] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 138.605550][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.660158][ T5956] usb 2-1: Product: syz [ 138.684074][ T5956] usb 2-1: Manufacturer: syz [ 138.688706][ T5956] usb 2-1: SerialNumber: syz [ 138.744842][ T5956] usb 2-1: config 0 descriptor?? [ 138.751383][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 138.751404][ T30] audit: type=1400 audit(1754565713.892:509): avc: denied { module_load } for pid=8181 comm="syz.4.784" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 138.751682][ T8165] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.818380][ T8165] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 139.007714][ T8092] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.028515][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.048835][ T8092] bridge_slave_0: entered allmulticast mode [ 139.088952][ T8092] bridge_slave_0: entered promiscuous mode [ 139.103390][ T8165] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 139.113680][ T8092] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.121076][ T8165] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 139.128456][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.137781][ T8092] bridge_slave_1: entered allmulticast mode [ 139.152135][ T8092] bridge_slave_1: entered promiscuous mode [ 139.199863][ T6212] IPVS: stop unused estimator thread 0... [ 139.247817][ T8092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.279806][ T8092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.323111][ T8092] team0: Port device team_slave_0 added [ 139.367398][ T8092] team0: Port device team_slave_1 added [ 139.579856][ T8092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.616302][ T8092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.642262][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.672910][ T8092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.704171][ T5857] Bluetooth: hci4: command tx timeout [ 139.712971][ T30] audit: type=1400 audit(1754565714.842:510): avc: denied { read } for pid=8217 comm="syz.2.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 139.737019][ T8092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.740371][ T5956] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 139.744318][ T8092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.744346][ T8092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.864029][ T5922] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 139.868469][ T8092] hsr_slave_0: entered promiscuous mode [ 139.895139][ T8092] hsr_slave_1: entered promiscuous mode [ 139.939780][ T8223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.036629][ T5922] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 140.052124][ T5956] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 140.075112][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.083513][ T5956] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 140.108148][ T5922] usb 1-1: config 0 descriptor?? [ 140.113515][ T5956] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 140.113656][ T30] audit: type=1400 audit(1754565715.252:511): avc: denied { ioctl } for pid=8226 comm="syz.4.796" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 140.152429][ T5956] usb 2-1: USB disconnect, device number 19 [ 140.183304][ T5922] cp210x 1-1:0.0: cp210x converter detected [ 140.234155][ T5929] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 140.328911][ T8092] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.339909][ T8092] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 140.357619][ T8092] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 140.377061][ T8092] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.390180][ T5929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.402977][ T8216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.432963][ T5929] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.442299][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.456041][ T8216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.473673][ T5929] usb 3-1: Product: syz [ 140.482063][ T5929] usb 3-1: Manufacturer: syz [ 140.487003][ T5929] usb 3-1: SerialNumber: syz [ 140.561020][ T8092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.616666][ T8092] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.660214][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.667397][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.693264][ T5922] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 140.695298][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.707894][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.749215][ T5922] usb 1-1: cp210x converter now attached to ttyUSB0 [ 140.808016][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 140.953756][ T5922] usb 1-1: USB disconnect, device number 12 [ 140.980665][ T5922] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 141.032429][ T5922] cp210x 1-1:0.0: device disconnected [ 141.190569][ T8092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.524679][ T5929] cdc_ncm 3-1:1.0: failed to get mac address [ 141.727344][ T5929] cdc_ncm 3-1:1.0: bind() failure [ 141.762291][ T5929] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 141.782853][ T8092] veth0_vlan: entered promiscuous mode [ 141.784367][ T5929] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 141.789116][ T5857] Bluetooth: hci4: command tx timeout [ 141.817659][ T8092] veth1_vlan: entered promiscuous mode [ 141.850929][ T5929] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 141.860132][ T5956] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 141.911103][ T8092] veth0_macvtap: entered promiscuous mode [ 141.928858][ T8092] veth1_macvtap: entered promiscuous mode [ 141.938801][ T5929] usb 3-1: USB disconnect, device number 12 [ 141.987981][ T8092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.020110][ T8092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.036024][ T5956] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.061158][ T66] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.074537][ T5956] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 142.097999][ T66] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.123143][ T66] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.132917][ T66] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.144768][ T5956] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.153813][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.176087][ T5956] usb 1-1: Product: syz [ 142.180322][ T5956] usb 1-1: Manufacturer: syz [ 142.205513][ T5956] usb 1-1: SerialNumber: syz [ 142.351327][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.374168][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.402120][ T30] audit: type=1400 audit(1754565717.532:512): avc: denied { create } for pid=8305 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 142.435075][ T8295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.475308][ T30] audit: type=1400 audit(1754565717.542:513): avc: denied { read write } for pid=8305 comm="syz.4.811" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 142.495013][ T4206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.516504][ T8295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.553463][ T4206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.562848][ T30] audit: type=1400 audit(1754565717.542:514): avc: denied { open } for pid=8305 comm="syz.4.811" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 142.587134][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.596527][ T5956] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 142.641573][ T5956] usb 1-1: USB disconnect, device number 13 [ 143.113052][ T5956] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 143.323964][ T5956] usb 1-1: Using ep0 maxpacket: 8 [ 143.330791][ T5956] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 143.341420][ T5956] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 143.361872][ T5956] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.392604][ T5956] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.423982][ T5956] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 143.450884][ T5956] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 143.491753][ T5956] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33552, setting to 1024 [ 143.549872][ T5956] usb 1-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.577768][ T5956] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.590410][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.595705][ T8347] syzkaller1: entered promiscuous mode [ 143.630326][ T8347] syzkaller1: entered allmulticast mode [ 143.826377][ T5956] usb 1-1: usb_control_msg returned -32 [ 143.843240][ T5956] usbtmc 1-1:16.0: can't read capabilities [ 143.854822][ C1] usbtmc 1-1:16.0: overflow with length 1024, actual length is 1024 [ 143.864170][ T5857] Bluetooth: hci4: command tx timeout [ 144.104592][ T5956] usb 1-1: USB disconnect, device number 14 [ 144.546286][ T5929] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 144.708465][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 144.730547][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.751451][ T5929] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 144.796457][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.827063][ T5929] usb 3-1: config 0 descriptor?? [ 144.860983][ T5929] hub 3-1:0.0: USB hub found [ 144.906446][ T8399] binder: 8398:8399 ioctl c0306201 2000000003c0 returned -14 [ 145.065379][ T5929] hub 3-1:0.0: 1 port detected [ 145.173959][ T30] audit: type=1326 audit(1754565720.312:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.4.837" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f273178ebe9 code=0x0 [ 145.444288][ T976] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 145.499200][ T8425] netlink: 'syz.5.840': attribute type 1 has an invalid length. [ 145.512291][ T8425] netlink: 'syz.5.840': attribute type 2 has an invalid length. [ 145.625756][ T8429] tls_set_device_offload: netdev not found [ 145.633493][ T976] usb 1-1: config 0 has no interfaces? [ 145.639221][ T976] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 145.664044][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.711735][ T976] usb 1-1: config 0 descriptor?? [ 145.911453][ T976] usb 3-1: USB disconnect, device number 13 [ 145.919185][ T5922] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 145.933342][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.836'. [ 145.959988][ T5846] usb 1-1: USB disconnect, device number 15 [ 146.595931][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.848'. [ 146.656142][ T8465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.689000][ T8465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.704383][ T8465] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 146.715895][ T8465] bond1: (slave vcan1): Error -95 calling set_mac_address [ 146.825237][ T5846] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 147.000374][ T5846] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 147.019214][ T5846] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 147.039328][ T5846] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 147.070941][ T5846] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 147.103679][ T5846] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 147.121738][ T5846] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.133461][ T5846] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 147.168312][ T5846] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 147.183997][ T5914] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 147.191655][ T5846] usb 5-1: Product: syz [ 147.204721][ T5846] usb 5-1: Manufacturer: syz [ 147.211826][ T5846] usb 5-1: SerialNumber: syz [ 147.228985][ T5846] usb 5-1: config 0 descriptor?? [ 147.249543][ T8469] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.260754][ T5846] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 147.284287][ T5846] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 147.332556][ T8494] netlink: 'syz.2.858': attribute type 1 has an invalid length. [ 147.344363][ T8494] netlink: 56 bytes leftover after parsing attributes in process `syz.2.858'. [ 147.355493][ T5914] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.369290][ T5914] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.424147][ T5914] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.433217][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.609587][ T30] audit: type=1400 audit(1754565722.752:516): avc: denied { mounton } for pid=8503 comm="syz.1.862" path="/155/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 147.684614][ T30] audit: type=1400 audit(1754565722.782:517): avc: denied { write } for pid=8503 comm="syz.1.862" path="socket:[22192]" dev="sockfs" ino=22192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.726451][ T5914] usb 1-1: usb_control_msg returned -32 [ 147.748265][ T5914] usbtmc 1-1:16.0: can't read capabilities [ 147.789115][ T5906] usb 2-1: [UEAGLE-ATM] firmware is not available [ 147.878190][ T8516] netlink: 68 bytes leftover after parsing attributes in process `syz.2.867'. [ 147.899048][ T30] audit: type=1400 audit(1754565723.042:518): avc: denied { read } for pid=8515 comm="syz.2.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.212031][ T8525] binder: 8524:8525 ioctl c0306201 200000000c40 returned -22 [ 148.349130][ T976] usb 5-1: USB disconnect, device number 19 [ 148.375203][ T976] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 148.941023][ T30] audit: type=1400 audit(1754565724.082:519): avc: denied { unmount } for pid=8549 comm="syz.2.881" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 148.946881][ T5922] Process accounting resumed [ 149.095572][ T5906] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 149.243029][ T30] audit: type=1400 audit(1754565724.382:520): avc: denied { read } for pid=8560 comm="syz.1.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.262699][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 149.299837][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.324216][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 97, changing to 10 [ 149.341145][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24929, setting to 1024 [ 149.387640][ T5906] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 149.423963][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.431986][ T5906] usb 6-1: Product: syz [ 149.455852][ T5906] usb 6-1: Manufacturer: syz [ 149.475440][ T5906] usb 6-1: SerialNumber: syz [ 149.489617][ T5906] usb 6-1: config 0 descriptor?? [ 149.573944][ T5906] rc_core: IR keymap rc-streamzap not found [ 149.579844][ T5906] Registered IR keymap rc-empty [ 149.600111][ T5906] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 149.612536][ T5906] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input26 [ 149.732636][ T976] usb 6-1: USB disconnect, device number 2 [ 149.766073][ T5922] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 149.925833][ T5922] usb 5-1: unable to get BOS descriptor or descriptor too short [ 149.934548][ T5922] usb 5-1: not running at top speed; connect to a high speed hub [ 149.943092][ T5922] usb 5-1: config 7 has an invalid interface number: 72 but max is 0 [ 149.953056][ T5922] usb 5-1: config 7 has no interface number 0 [ 149.962870][ T5922] usb 5-1: config 7 interface 72 has no altsetting 0 [ 149.966012][ T5906] usb 1-1: USB disconnect, device number 16 [ 149.975182][ T5922] usb 5-1: New USB device found, idVendor=6ee6, idProduct=108b, bcdDevice=49.61 [ 149.993944][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.001941][ T5922] usb 5-1: Product: syz [ 150.012381][ T5922] usb 5-1: Manufacturer: syz [ 150.024673][ T5922] usb 5-1: SerialNumber: syz [ 150.283107][ T5922] cdc_ether 5-1:7.72: skipping garbage [ 150.305819][ T5922] usb 5-1: bad CDC descriptors [ 150.343702][ T5922] usb 5-1: USB disconnect, device number 20 [ 150.457977][ T30] audit: type=1400 audit(1754565725.602:521): avc: denied { ioctl } for pid=8590 comm="syz.5.897" path="socket:[22855]" dev="sockfs" ino=22855 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 150.460303][ T8591] netlink: 'syz.5.897': attribute type 10 has an invalid length. [ 150.517321][ T8591] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.524906][ T8591] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.563944][ T976] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 150.601192][ T8591] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.608376][ T8591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.616648][ T8591] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.623763][ T8591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.652631][ T8591] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 150.666483][ T30] audit: type=1400 audit(1754565725.802:522): avc: denied { ioctl } for pid=8599 comm="syz.2.900" path="socket:[22877]" dev="sockfs" ino=22877 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 150.699189][ T30] audit: type=1400 audit(1754565725.832:523): avc: denied { module_request } for pid=8595 comm="syz.1.898" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 150.752973][ T976] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 150.755061][ T8604] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.901'. [ 150.773845][ T8601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.898'. [ 150.793969][ T976] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.823167][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 150.857469][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 150.873359][ T976] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.890626][ T976] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.901796][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.913460][ T30] audit: type=1400 audit(1754565726.052:524): avc: denied { create } for pid=8607 comm="syz.5.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 150.943096][ T976] usb 1-1: config 0 descriptor?? [ 150.970102][ T8588] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 150.996907][ T30] audit: type=1400 audit(1754565726.132:525): avc: denied { write } for pid=8607 comm="syz.5.903" path="socket:[22891]" dev="sockfs" ino=22891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 151.395509][ T976] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xd [ 151.469173][ T976] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 151.653945][ T5929] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 151.826645][ T5956] usb 1-1: USB disconnect, device number 17 [ 151.854536][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 151.871482][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.928475][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.950906][ T5929] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 151.965349][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.986831][ T5929] usb 2-1: config 0 descriptor?? [ 152.008027][ T5929] hub 2-1:0.0: USB hub found [ 152.213934][ T5929] hub 2-1:0.0: 1 port detected [ 152.421947][ T30] audit: type=1400 audit(1754565727.562:526): avc: denied { mount } for pid=8657 comm="syz.0.920" name="/" dev="configfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 152.444384][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.452998][ T30] audit: type=1400 audit(1754565727.562:527): avc: denied { search } for pid=8657 comm="syz.0.920" name="/" dev="configfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.474902][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.485167][ T30] audit: type=1400 audit(1754565727.562:528): avc: denied { read open } for pid=8657 comm="syz.0.920" path="/" dev="configfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.507309][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.575352][ T976] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 152.744169][ T976] usb 3-1: Using ep0 maxpacket: 16 [ 152.751006][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.762132][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.771947][ T976] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 152.785400][ T976] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 152.794471][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.804532][ T976] usb 3-1: config 0 descriptor?? [ 152.839292][ T5929] hub 2-1:0.0: activate --> -90 [ 152.850070][ T8675] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 152.893342][ T8677] loop7: detected capacity change from 0 to 16384 [ 152.914056][ T5956] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 153.040332][ T5929] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 153.087114][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 153.097994][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 153.108461][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 153.109887][ C0] I/O error, dev loop7, sector 15880 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 0 [ 153.119510][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 153.129923][ T8678] loop7: detected capacity change from 16384 to 0 [ 153.140861][ T5956] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 153.146242][ C0] I/O error, dev loop7, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 153.167985][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.176080][ T5956] usb 6-1: Product: syz [ 153.180254][ T5956] usb 6-1: Manufacturer: syz [ 153.190514][ T5956] usb 6-1: SerialNumber: syz [ 153.206763][ T5956] usb 6-1: config 0 descriptor?? [ 153.219106][ T976] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 153.231986][ T976] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 153.240765][ T976] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 153.251029][ T976] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 153.259935][ T976] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 153.325335][ T976] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 153.338834][ T976] microsoft 0003:045E:07DA.0018: no inputs found [ 153.348401][ T976] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 153.354416][ T5914] usb 2-1: USB disconnect, device number 20 [ 153.423184][ T92] usb 3-1: USB disconnect, device number 14 [ 153.438046][ T5956] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 153.698366][ T92] usb 6-1: USB disconnect, device number 3 [ 153.716889][ T8696] bridge: RTM_NEWNEIGH with invalid ether address [ 154.125248][ T8708] program syz.0.939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.281661][ T8715] loop6: detected capacity change from 0 to 524287999 [ 154.304383][ C1] sd 0:0:1:0: [sda] tag#6870 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 154.314846][ C1] sd 0:0:1:0: [sda] tag#6870 CDB: Write(6) 0a 00 00 00 00 00 [ 154.393098][ T8719] netlink: 104 bytes leftover after parsing attributes in process `syz.0.944'. [ 154.403204][ T30] audit: type=1400 audit(1754565729.532:529): avc: denied { nlmsg_read } for pid=8718 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.429259][ T92] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 154.612080][ T92] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.638984][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.660448][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.698382][ T92] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 154.722276][ T92] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 154.731709][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.764571][ T976] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 154.778469][ T92] usb 3-1: config 0 descriptor?? [ 154.878382][ T8737] input: syz0 as /devices/virtual/input/input28 [ 154.919167][ T976] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 154.939769][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.972647][ T976] usb 6-1: config 0 descriptor?? [ 155.046629][ T8743] syzkaller1: entered promiscuous mode [ 155.053388][ T8743] syzkaller1: entered allmulticast mode [ 155.202449][ T92] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 155.208830][ T976] kaweth 6-1:0.0: Firmware present in device. [ 155.230343][ T92] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0019/input/input29 [ 155.350305][ T92] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 155.399702][ T976] kaweth 6-1:0.0: Statistics collection: 0 [ 155.419726][ T976] kaweth 6-1:0.0: Multicast filter limit: 0 [ 155.429827][ T976] kaweth 6-1:0.0: MTU: 0 [ 155.436100][ T976] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 155.452715][ T8712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.489113][ T8712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.531540][ T92] usb 3-1: USB disconnect, device number 15 [ 155.875875][ T8755] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.958'. [ 155.959483][ T30] audit: type=1400 audit(1754565731.102:530): avc: denied { ioctl } for pid=8756 comm="syz.1.959" path="socket:[24606]" dev="sockfs" ino=24606 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.029229][ T976] kaweth 6-1:0.0: kaweth interface created at eth5 [ 156.116141][ T8762] netlink: 'syz.0.961': attribute type 4 has an invalid length. [ 156.262520][ T976] usb 6-1: USB disconnect, device number 4 [ 156.385963][ T30] audit: type=1400 audit(1754565731.532:531): avc: denied { listen } for pid=8772 comm="syz.4.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.399197][ T6212] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 156.430481][ T30] audit: type=1400 audit(1754565731.532:532): avc: denied { accept } for pid=8772 comm="syz.4.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.444339][ T8776] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 157.456538][ T8817] bond0: entered promiscuous mode [ 157.462174][ T8817] bond_slave_0: entered promiscuous mode [ 157.494349][ T8817] bond_slave_1: entered promiscuous mode [ 157.500225][ T8817] bond0: entered allmulticast mode [ 157.506106][ T8817] bond_slave_0: entered allmulticast mode [ 157.512754][ T8817] bond_slave_1: entered allmulticast mode [ 157.629599][ T1108] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 157.947572][ T30] audit: type=1400 audit(1754565733.092:533): avc: denied { ioctl } for pid=8853 comm="syz.5.985" path="socket:[23988]" dev="sockfs" ino=23988 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 158.244026][ T5914] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 158.435522][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.488276][ T5914] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 158.521337][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.556587][ T5914] usb 5-1: config 0 descriptor?? [ 158.612822][ T30] audit: type=1400 audit(1754565733.752:534): avc: denied { load_policy } for pid=8875 comm="syz.2.993" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 158.635548][ T8876] SELinux: ebitmap: truncated map [ 158.665621][ T8876] SELinux: failed to load policy [ 158.704052][ T5929] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 158.868555][ T5929] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 158.881260][ T5929] usb 1-1: config 0 has no interface number 0 [ 158.900381][ T5929] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 158.922553][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.935843][ T8895] evm: overlay not supported [ 158.946041][ T5929] usb 1-1: Product: syz [ 158.958101][ T5929] usb 1-1: Manufacturer: syz [ 158.970396][ T5929] usb 1-1: SerialNumber: syz [ 158.980951][ T5929] usb 1-1: config 0 descriptor?? [ 158.993648][ T5914] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 159.022767][ T5914] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001A/input/input30 [ 159.210700][ T5914] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 159.401022][ T5929] usb 1-1: Firmware: major: 230, minor: 61, hardware type: UNKNOWN (237) [ 159.611599][ T5929] usb 1-1: Read permanent extended address 00:00:00:00:00:00:00:02 from device [ 159.630814][ T5929] usb 1-1: atusb_probe: initialization failed, error = -524 [ 159.648894][ T5929] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 159.734062][ T5976] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 159.806894][ T8926] syzkaller1: entered promiscuous mode [ 159.812919][ T8926] syzkaller1: entered allmulticast mode [ 159.821646][ T5929] usb 1-1: USB disconnect, device number 18 [ 159.904377][ T5976] usb 6-1: Using ep0 maxpacket: 16 [ 159.913264][ T5976] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 159.930860][ T5976] usb 6-1: config 0 has no interface number 0 [ 159.940678][ T5976] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 159.960245][ T5976] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 159.972104][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.983000][ T8934] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1007'. [ 159.996080][ T5976] usb 6-1: Product: syz [ 160.002689][ T5976] usb 6-1: Manufacturer: syz [ 160.011840][ T5976] usb 6-1: SerialNumber: syz [ 160.050152][ T5976] usb 6-1: config 0 descriptor?? [ 160.277875][ T5976] usbtouchscreen 6-1:0.214: Failed to read FW rev: -32 [ 160.321936][ T5976] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 160.362761][ T5976] usb 6-1: USB disconnect, device number 5 [ 160.447484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 160.504057][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 160.978999][ T30] audit: type=1400 audit(1754565736.122:535): avc: denied { mounton } for pid=8964 comm="syz.5.1014" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 161.043408][ T30] audit: type=1400 audit(1754565736.182:536): avc: denied { unmount } for pid=8092 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 161.081529][ T5914] usb 5-1: USB disconnect, device number 21 [ 161.252415][ T30] audit: type=1400 audit(1754565736.392:537): avc: denied { getopt } for pid=8974 comm="syz.5.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.254043][ T8975] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 161.631864][ T8989] No control pipe specified [ 161.648653][ T8989] overlayfs: missing 'lowerdir' [ 161.651161][ T8990] netlink: 'syz.0.1021': attribute type 13 has an invalid length. [ 161.849809][ T8998] SELinux: failed to load policy [ 162.040205][ T30] audit: type=1326 audit(1754565737.182:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774e18ebe9 code=0x7ffc0000 [ 162.105936][ T30] audit: type=1326 audit(1754565737.212:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f774e18ebe9 code=0x7ffc0000 [ 162.130385][ T30] audit: type=1326 audit(1754565737.212:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774e18ebe9 code=0x7ffc0000 [ 162.200484][ T30] audit: type=1326 audit(1754565737.212:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774e18ebe9 code=0x7ffc0000 [ 162.286183][ T5850] Bluetooth: hci5: command 0xfc11 tx timeout [ 162.293753][ T5857] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 162.898477][ T30] audit: type=1400 audit(1754565738.032:542): avc: denied { watch watch_reads } for pid=9040 comm="syz.5.1037" path="/49/file0" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.928969][ T5914] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 162.981162][ T9045] netlink: 'syz.1.1039': attribute type 12 has an invalid length. [ 163.017242][ T9045] netlink: 'syz.1.1039': attribute type 29 has an invalid length. [ 163.069548][ T9045] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1039'. [ 163.108428][ T30] audit: type=1400 audit(1754565738.242:543): avc: denied { ioctl } for pid=9043 comm="syz.4.1038" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.114077][ T9045] netlink: 'syz.1.1039': attribute type 2 has an invalid length. [ 163.133016][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.167830][ T9045] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1039'. [ 163.190532][ T5914] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.205471][ T5914] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.215496][ T5914] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.224883][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.236809][ T9031] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.296833][ T5914] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.324070][ T9050] netlink: 'syz.1.1039': attribute type 12 has an invalid length. [ 163.351456][ T9050] netlink: 'syz.1.1039': attribute type 29 has an invalid length. [ 163.391822][ T9050] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1039'. [ 163.431422][ T9050] netlink: 'syz.1.1039': attribute type 2 has an invalid length. [ 163.445764][ T9058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1043'. [ 163.453415][ T9050] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1039'. [ 163.607085][ T5976] usb 1-1: USB disconnect, device number 19 [ 163.701213][ T9065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 164.012000][ T30] audit: type=1400 audit(1754565739.142:544): avc: denied { mount } for pid=9079 comm="syz.5.1051" name="/" dev="hugetlbfs" ino=24350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 164.334167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 164.527656][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1058'. [ 164.914172][ T5914] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 164.977724][ T9120] input: syz1 as /devices/virtual/input/input32 [ 165.102997][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 165.136052][ T5914] usb 2-1: config 0 has an invalid interface number: 225 but max is 0 [ 165.220390][ T5914] usb 2-1: config 0 has no interface number 0 [ 165.268790][ T5914] usb 2-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 165.298581][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.320108][ T5914] usb 2-1: Product: syz [ 165.333489][ T5914] usb 2-1: Manufacturer: syz [ 165.349619][ T5914] usb 2-1: SerialNumber: syz [ 165.402622][ T9142] netlink: 'syz.0.1069': attribute type 2 has an invalid length. [ 165.402928][ T5914] usb 2-1: config 0 descriptor?? [ 165.592445][ T92] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 165.727377][ T9152] input: syz1 as /devices/virtual/input/input33 [ 165.766043][ T92] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 165.787427][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.830466][ T92] usb 3-1: config 0 descriptor?? [ 165.850691][ T92] cp210x 3-1:0.0: cp210x converter detected [ 165.865075][ T5976] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 166.059869][ T5976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.060706][ T5914] mos7840 2-1:0.225: required endpoints missing [ 166.124276][ T5976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.160270][ T5976] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 166.164232][ T5914] usb 2-1: USB disconnect, device number 21 [ 166.177558][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.228538][ T5976] usb 1-1: config 0 descriptor?? [ 166.261113][ T92] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 166.291629][ T9175] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1078'. [ 166.482329][ T92] usb 3-1: cp210x converter now attached to ttyUSB0 [ 166.684261][ T976] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 166.696085][ T92] usb 3-1: USB disconnect, device number 16 [ 166.721527][ T92] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 166.776739][ T92] cp210x 3-1:0.0: device disconnected [ 166.859642][ T976] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.899190][ T976] usb 5-1: config 0 has no interfaces? [ 166.917828][ T976] usb 5-1: New USB device found, idVendor=0411, idProduct=000a, bcdDevice=6d.d9 [ 166.948809][ T976] usb 5-1: New USB device strings: Mfr=246, Product=0, SerialNumber=0 [ 166.971553][ T976] usb 5-1: Manufacturer: syz [ 166.988063][ T976] usb 5-1: config 0 descriptor?? [ 167.266456][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1087'. [ 167.314396][ T976] usb 5-1: USB disconnect, device number 22 [ 167.448370][ T9216] veth0: entered promiscuous mode [ 167.464554][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'. [ 167.487775][ T5976] uclogic 0003:256C:006D.001B: failed retrieving string descriptor #100: -71 [ 167.502363][ T5976] uclogic 0003:256C:006D.001B: failed retrieving pen parameters: -71 [ 167.522089][ T5976] uclogic 0003:256C:006D.001B: failed probing pen v1 parameters: -71 [ 167.533734][ T5976] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 167.543045][ T5976] uclogic 0003:256C:006D.001B: probe with driver uclogic failed with error -71 [ 167.582279][ T5976] usb 1-1: USB disconnect, device number 20 [ 168.009894][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 168.009911][ T30] audit: type=1400 audit(1754565743.152:549): avc: denied { mount } for pid=9235 comm="syz.1.1098" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 168.039427][ T30] audit: type=1400 audit(1754565743.152:550): avc: denied { search } for pid=9235 comm="syz.1.1098" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 168.064660][ T30] audit: type=1400 audit(1754565743.152:551): avc: denied { search } for pid=9235 comm="syz.1.1098" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 168.089571][ T30] audit: type=1400 audit(1754565743.152:552): avc: denied { read open } for pid=9235 comm="syz.1.1098" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 168.561323][ T9268] input: syz1 as /devices/virtual/input/input34 [ 168.904107][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 169.112217][ T9287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9287 comm=syz.5.1116 [ 169.153780][ T9288] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1115'. [ 169.507605][ T9273] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 169.517699][ T9273] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 169.545335][ T5976] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 169.724985][ T5976] usb 1-1: Using ep0 maxpacket: 32 [ 169.732005][ T5976] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.743669][ T5976] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.756511][ T5976] usb 1-1: config 0 interface 0 has no altsetting 0 [ 169.764678][ T5976] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 169.776507][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 169.790545][ T5976] usb 1-1: Product: syz [ 169.802632][ T5976] usb 1-1: config 0 descriptor?? [ 170.218219][ T5976] waterforce 0003:1044:7A4D.001C: unknown main item tag 0x0 [ 170.226209][ T5976] waterforce 0003:1044:7A4D.001C: unknown main item tag 0x0 [ 170.233548][ T5976] waterforce 0003:1044:7A4D.001C: item fetching failed at offset 2/5 [ 170.242249][ T5976] waterforce 0003:1044:7A4D.001C: hid parse failed with -22 [ 170.249779][ T5976] waterforce 0003:1044:7A4D.001C: probe with driver waterforce failed with error -22 [ 170.451577][ T5976] usb 1-1: USB disconnect, device number 21 [ 170.554095][ T5914] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 170.713983][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 170.723592][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.739102][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.749647][ T5914] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 170.761845][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.772735][ T5914] usb 6-1: config 0 descriptor?? [ 171.121434][ T30] audit: type=1326 audit(1754565746.262:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9343 comm="syz.2.1141" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f774e18ebe9 code=0x0 [ 171.188722][ T9351] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 171.213415][ T5914] ft260 0003:0403:6030.001D: unknown main item tag 0x7 [ 171.410367][ T5914] ft260 0003:0403:6030.001D: chip code: 6424 8183 [ 171.621829][ T5914] ft260 0003:0403:6030.001D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 171.624083][ T30] audit: type=1400 audit(1754565746.762:554): avc: denied { ioctl } for pid=9361 comm="syz.1.1150" path="socket:[25984]" dev="sockfs" ino=25984 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.667186][ T9364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.917939][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1155'. [ 172.024849][ T5914] ft260 0003:0403:6030.001D: failed to retrieve status: -71 [ 172.039634][ T5914] ft260 0003:0403:6030.001D: failed to reset I2C controller: -71 [ 172.077863][ T5914] usb 6-1: USB disconnect, device number 6 [ 172.330047][ T30] audit: type=1400 audit(1754565747.472:555): avc: denied { map } for pid=9382 comm="syz.2.1159" path="socket:[26014]" dev="sockfs" ino=26014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.353324][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.838994][ T30] audit: type=1400 audit(1754565747.962:556): avc: denied { getopt } for pid=9405 comm="syz.5.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.057092][ T30] audit: type=1400 audit(1754565748.202:557): avc: denied { name_bind 0x1000000 } for pid=9414 comm="syz.0.1171" path="socket:[27018]" dev="sockfs" ino=27018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 173.082421][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.285293][ T5976] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 174.468422][ T5976] usb 3-1: Using ep0 maxpacket: 8 [ 174.486829][ T5976] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 174.516537][ T5976] usb 3-1: config 179 has no interface number 0 [ 174.522875][ T5976] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 174.573963][ T5976] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 174.599392][ T5976] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 174.631486][ T5976] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 174.653244][ T5976] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 174.696654][ T5976] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 174.735437][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.744281][ T5914] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 174.766053][ T9452] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 174.814596][ T9480] syz.0.1198 (9480) used obsolete PPPIOCDETACH ioctl [ 174.904219][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 174.912335][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 174.927576][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 174.938687][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 174.951988][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 174.966841][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 175.021005][ T5914] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 175.048357][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.083067][ T5914] usb 5-1: Product: syz [ 175.088686][ T5914] usb 5-1: Manufacturer: syz [ 175.093317][ T5914] usb 5-1: SerialNumber: syz [ 175.127548][ T5914] usb 5-1: config 0 descriptor?? [ 175.147316][ T976] usb 3-1: USB disconnect, device number 17 [ 175.153378][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 175.153431][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 175.488349][ T9498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 175.540661][ T5914] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 175.566521][ T5914] input input35: Device does not respond to id packet M [ 175.581743][ T5914] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 175.660062][ T5914] input input35: Device does not respond to id packet P [ 175.695882][ T5914] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 175.758750][ T5914] input input35: Device does not respond to id packet B [ 175.964919][ T9507] netlink: 'syz.0.1207': attribute type 4 has an invalid length. [ 175.974907][ T9507] netlink: 'syz.0.1207': attribute type 4 has an invalid length. [ 176.159911][ T5914] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 176.177605][ T5914] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 176.204115][ T5976] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 176.212706][ T5914] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 176.249733][ T5914] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 176.285337][ T5914] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input35 [ 176.347299][ T5914] usb 5-1: USB disconnect, device number 23 [ 176.374049][ T976] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 176.398239][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.424751][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.444841][ T5976] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.479319][ T5976] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.490163][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.528224][ T5976] usb 6-1: config 0 descriptor?? [ 176.570648][ T976] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.591320][ T976] usb 3-1: config 0 interface 0 has no altsetting 0 [ 176.598842][ T976] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 176.609765][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.643281][ T976] usb 3-1: config 0 descriptor?? [ 176.967294][ T5976] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 176.978438][ T5976] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 176.986445][ T5976] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 176.994383][ T5906] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 176.997204][ T5976] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 177.011155][ T5976] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 177.018825][ T5976] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 177.036509][ T5976] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 177.086379][ T976] magicmouse 0003:05AC:0269.001F: unknown main item tag 0x0 [ 177.096712][ T976] magicmouse 0003:05AC:0269.001F: unknown main item tag 0x0 [ 177.104306][ T976] magicmouse 0003:05AC:0269.001F: unknown main item tag 0x0 [ 177.111818][ T976] magicmouse 0003:05AC:0269.001F: unknown main item tag 0x0 [ 177.126500][ T976] magicmouse 0003:05AC:0269.001F: hidraw1: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.2-1/input0 [ 177.134134][ T5914] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 177.166217][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 177.175549][ T5906] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 177.194265][ T5906] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 177.203680][ T5906] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 177.216828][ T5906] usb 2-1: config 1 has no interface number 0 [ 177.222971][ T5906] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.237121][ T5906] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 177.250072][ T5906] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 177.259492][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.276048][ T5906] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 177.295667][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 177.308090][ T976] usb 3-1: USB disconnect, device number 18 [ 177.311118][ T5914] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 177.324272][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.341850][ T5914] usb 1-1: config 0 descriptor?? [ 177.349590][ T9532] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 177.478992][ T5906] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 177.780111][ T5914] elan 0003:04F3:0755.0020: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 177.921105][ T976] usb 2-1: USB disconnect, device number 22 [ 177.948115][ T976] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 178.730179][ T30] audit: type=1400 audit(1754565753.872:558): avc: denied { watch_mount } for pid=9565 comm="syz.1.1231" path="/226" dev="tmpfs" ino=1187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 179.101471][ T5914] usb 6-1: USB disconnect, device number 7 [ 179.286507][ T9593] overlayfs: upper fs does not support file handles, falling back to index=off. [ 179.314080][ T5846] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 179.389380][ T30] audit: type=1326 audit(1754565754.522:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9555 comm="syz.2.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774e18ebe9 code=0x7fc00000 [ 179.506879][ T5846] usb 2-1: Using ep0 maxpacket: 32 [ 179.715338][ T9607] overlayfs: failed lookup in lower (newroot/242, name='file1', err=-40): overlapping layers [ 179.740145][ T92] usb 1-1: USB disconnect, device number 22 [ 179.806786][ T5846] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.829209][ T5846] usb 2-1: no configurations [ 179.844416][ T5846] usb 2-1: can't read configurations, error -22 [ 179.923623][ T30] audit: type=1400 audit(1754565755.062:560): avc: denied { read write } for pid=9614 comm="syz.5.1253" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.994113][ T30] audit: type=1400 audit(1754565755.062:561): avc: denied { open } for pid=9614 comm="syz.5.1253" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 180.060420][ T30] audit: type=1400 audit(1754565755.102:562): avc: denied { map } for pid=9614 comm="syz.5.1253" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 180.066403][ T9618] netlink: 'syz.4.1254': attribute type 7 has an invalid length. [ 180.092682][ T30] audit: type=1400 audit(1754565755.102:563): avc: denied { execute } for pid=9614 comm="syz.5.1253" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 180.133351][ T9618] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1254'. [ 180.254830][ T92] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 180.395152][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 180.441894][ T92] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 180.461661][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.486229][ T92] usb 1-1: config 0 descriptor?? [ 180.566157][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.587952][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.599742][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 180.616852][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.629141][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.637775][ T9] usb 3-1: Product: syz [ 180.642104][ T9] usb 3-1: Manufacturer: syz [ 180.654859][ T9] usb 3-1: SerialNumber: syz [ 180.886190][ T9622] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 181.098800][ T9634] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1260'. [ 181.212189][ T9640] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1262'. [ 181.526726][ T92] usb 1-1: Cannot set autoneg [ 181.544535][ T92] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 181.703331][ T9622] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 181.789188][ T5846] usb 1-1: USB disconnect, device number 23 [ 181.827068][ T30] audit: type=1400 audit(1754565756.962:564): avc: denied { write } for pid=9655 comm="syz.5.1269" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 181.922546][ T9] cdc_ncm 3-1:1.0: bind() failure [ 181.959130][ T9] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 181.981527][ T9] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 181.999333][ T9661] netlink: 'syz.5.1271': attribute type 1 has an invalid length. [ 182.012495][ T9] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 182.037805][ T9661] netlink: 'syz.5.1271': attribute type 4 has an invalid length. [ 182.046577][ T9664] netlink: 'syz.1.1272': attribute type 2 has an invalid length. [ 182.049718][ T9] usb 3-1: USB disconnect, device number 19 [ 182.103416][ T9661] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1271'. [ 182.115713][ T9664] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1272'. [ 182.138034][ T9664] nbd: must specify a device to reconfigure [ 182.777545][ T9692] syz.1.1282: attempt to access beyond end of device [ 182.777545][ T9692] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 183.553492][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'. [ 183.630479][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.639425][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'. [ 183.664316][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.690182][ T6212] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.727449][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.245633][ T976] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 184.264555][ T5976] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 184.424055][ T976] usb 5-1: Using ep0 maxpacket: 8 [ 184.429256][ T5976] usb 6-1: Using ep0 maxpacket: 16 [ 184.448747][ T976] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.477348][ T976] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.491282][ T5976] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 184.515460][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.523559][ T5976] usb 6-1: Product: syz [ 184.527889][ T976] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.544020][ T976] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.559792][ T5976] usb 6-1: Manufacturer: syz [ 184.569936][ T5976] usb 6-1: SerialNumber: syz [ 184.588685][ T976] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 184.604245][ T5976] r8152-cfgselector 6-1: Unknown version 0x0000 [ 184.613092][ T5976] r8152-cfgselector 6-1: config 0 descriptor?? [ 184.620443][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.815760][ T5929] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 184.859474][ T976] usb 5-1: GET_CAPABILITIES returned 0 [ 184.874937][ T976] usbtmc 5-1:16.0: can't read capabilities [ 184.904222][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 184.975573][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.988831][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.999432][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.014460][ T5929] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.023609][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.036283][ T5929] usb 3-1: config 0 descriptor?? [ 185.083026][ T92] r8152-cfgselector 6-1: USB disconnect, device number 8 [ 185.083625][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.099596][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.108732][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.117854][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.126970][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.136110][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.155308][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.164470][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.179766][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.188922][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.198032][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.207159][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.222372][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.231518][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.240629][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.249798][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.266481][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.267804][ T5976] usb 5-1: USB disconnect, device number 24 [ 185.463789][ T5929] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 185.776449][ T5929] usb 3-1: USB disconnect, device number 20 [ 185.793758][ T9782] kvm: kvm [9781]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x200000000500 [ 185.914998][ T92] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 186.081639][ T92] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.090007][ T92] usb 2-1: config 0 has no interface number 0 [ 186.107738][ T92] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 186.121507][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.139934][ T92] usb 2-1: Product: syz [ 186.150448][ T92] usb 2-1: Manufacturer: syz [ 186.155607][ T92] usb 2-1: SerialNumber: syz [ 186.179892][ T92] usb 2-1: config 0 descriptor?? [ 186.410827][ T92] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 186.437807][ T92] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 186.456416][ T92] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 186.473663][ T92] usb 2-1: media controller created [ 186.508104][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.521088][ T9802] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1330'. [ 186.607521][ T30] audit: type=1400 audit(1754565761.752:565): avc: denied { read } for pid=9804 comm="syz.2.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 186.666141][ T30] audit: type=1400 audit(1754565761.802:566): avc: denied { write } for pid=9804 comm="syz.2.1331" path="socket:[29131]" dev="sockfs" ino=29131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 186.689710][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.034195][ T5976] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 187.124147][ T30] audit: type=1400 audit(1754565762.272:567): avc: denied { bind } for pid=9813 comm="syz.4.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 187.163997][ T30] audit: type=1400 audit(1754565762.292:568): avc: denied { accept } for pid=9813 comm="syz.4.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 187.221119][ T5976] usb 3-1: Using ep0 maxpacket: 16 [ 187.230160][ T5976] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 187.240702][ T5976] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.252224][ T5976] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.262746][ T5976] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 187.280320][ T5976] usb 3-1: config 7 interface 0 has no altsetting 0 [ 187.287514][ T5976] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 187.311786][ T30] audit: type=1400 audit(1754565762.452:569): avc: denied { listen } for pid=9826 comm="syz.5.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 187.331320][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.361702][ T30] audit: type=1400 audit(1754565762.452:570): avc: denied { accept } for pid=9826 comm="syz.5.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 187.523683][ T9836] hsr0: entered allmulticast mode [ 187.544071][ T9836] hsr_slave_0: entered allmulticast mode [ 187.549809][ T9836] hsr_slave_1: entered allmulticast mode [ 187.604365][ T9839] hsr_slave_0: left promiscuous mode [ 187.624521][ T92] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 187.650760][ T9839] hsr_slave_1: left promiscuous mode [ 187.686256][ T92] usb 2-1: USB disconnect, device number 25 [ 187.721446][ T9839] hsr0 (unregistering): left allmulticast mode [ 187.853643][ T5976] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.0022/input/input37 [ 187.970730][ T5976] kye 0003:0458:5010.0022: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 188.247841][ T30] audit: type=1400 audit(1754565763.392:571): avc: denied { read } for pid=9865 comm="syz.0.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 188.681048][ T9889] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 188.697491][ T9889] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 188.833978][ T92] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 188.966117][ C1] kye 0003:0458:5010.0022: usb_submit_urb(ctrl) failed: -1 [ 188.985730][ T92] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.014840][ T92] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 189.036338][ T92] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 189.051685][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.078937][ T92] usb 5-1: config 0 descriptor?? [ 189.093578][ T9905] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1373'. [ 189.292865][ T92] Bluetooth: Can't get state to change to load ram patch err [ 189.306153][ T5976] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 189.315668][ T92] Bluetooth: Loading patch file failed [ 189.321212][ T92] ath3k 5-1:0.0: probe with driver ath3k failed with error -121 [ 189.401122][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1377'. [ 189.469917][ T5976] usb 2-1: Using ep0 maxpacket: 32 [ 189.496514][ T5976] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 189.508685][ T5976] usb 2-1: config 0 has no interface number 0 [ 189.526456][ T5976] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 189.536571][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.559365][ T5976] usb 2-1: Product: syz [ 189.573796][ T5976] usb 2-1: Manufacturer: syz [ 189.580294][ T5976] usb 2-1: SerialNumber: syz [ 189.596888][ T5976] usb 2-1: config 0 descriptor?? [ 189.608934][ T5976] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 189.623435][ T5976] dvb-usb: bulk message failed: -22 (2/0) [ 189.646905][ T5976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.665121][ T5976] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 189.682195][ T5976] usb 2-1: media controller created [ 189.740999][ T5976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.747287][ T9] usb 3-1: USB disconnect, device number 21 [ 189.791441][ T5976] cxusb: set interface failed [ 189.808070][ T9903] cxusb: i2c rd: len=133 is too big! [ 189.808070][ T9903] [ 189.808514][ T5976] dvb-usb: bulk message failed: -22 (1/0) [ 189.857273][ T30] audit: type=1326 audit(1754565765.002:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9930 comm="syz.2.1383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f774e18ebe9 code=0x0 [ 189.959311][ T5976] DVB: Unable to find symbol lgdt330x_attach() [ 189.967953][ T5976] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 190.073983][ T5976] rc_core: IR keymap rc-dvico-portable not found [ 190.080496][ T5976] Registered IR keymap rc-empty [ 190.094951][ T5976] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 190.118505][ T5976] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input38 [ 190.133639][ T5976] dvb-usb: schedule remote query interval to 100 msecs. [ 190.141090][ T5976] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 190.161172][ T5976] usb 2-1: USB disconnect, device number 26 [ 190.273571][ T5976] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 190.913468][ T9964] netlink: 'syz.1.1396': attribute type 10 has an invalid length. [ 190.922158][ T9964] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.929923][ T9964] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.946744][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 190.959985][ T9964] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.967208][ T9964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.974790][ T9964] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.981942][ T9964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.992829][ T9964] bridge0: entered promiscuous mode [ 191.000461][ T9964] bridge0: entered allmulticast mode [ 191.006494][ T9964] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 191.115526][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 191.122641][ T9971] netlink: 'syz.0.1399': attribute type 4 has an invalid length. [ 191.133642][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 191.149745][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 191.163654][ T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 191.174515][ T9976] netlink: 'syz.0.1399': attribute type 4 has an invalid length. [ 191.180673][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.188410][ T9975] IPv4: Oversized IP packet from 127.202.26.0 [ 191.197287][ T9] usb 3-1: Product: syz [ 191.204513][ T9] usb 3-1: Manufacturer: syz [ 191.210307][ T9] usb 3-1: SerialNumber: syz [ 191.240687][ T9] usb 3-1: config 0 descriptor?? [ 191.251112][ T9958] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 191.262799][ T9958] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 191.277721][ T9] usb 3-1: ucan: probing device on interface #0 [ 191.617654][ T5846] usb 5-1: USB disconnect, device number 25 [ 191.619949][ T9990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.695625][ T9993] [ 191.698022][ T9993] ===================================================== [ 191.704961][ T9993] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 191.712434][ T9993] 6.16.0-syzkaller-11952-g6e64f4580381 #0 Not tainted [ 191.719207][ T9993] ----------------------------------------------------- [ 191.726135][ T9993] syz.4.1408/9993 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 191.733753][ T9993] ffff88805fa09210 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 191.742467][ T9993] [ 191.742467][ T9993] and this task is already holding: [ 191.749843][ T9993] ffff88807d9d7028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 191.759703][ T9993] which would create a new lock dependency: [ 191.765591][ T9993] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 191.773695][ T9993] [ 191.773695][ T9993] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 191.783129][ T9993] (&client->buffer_lock){..-.}-{3:3} [ 191.783155][ T9993] [ 191.783155][ T9993] ... which became SOFTIRQ-irq-safe at: [ 191.796210][ T9993] lock_acquire+0x179/0x350 [ 191.800805][ T9993] _raw_spin_lock+0x2e/0x40 [ 191.805383][ T9993] evdev_pass_values+0x10e/0x9b0 [ 191.810404][ T9993] evdev_events+0x1bb/0x390 [ 191.815000][ T9993] input_pass_values+0x74b/0x880 [ 191.820042][ T9993] input_handle_event+0xb29/0x14d0 [ 191.825228][ T9993] input_event+0x8e/0xd0 [ 191.829589][ T9993] hidinput_hid_event+0xa10/0x2420 [ 191.834777][ T9993] hid_process_event+0x4b7/0x5e0 [ 191.839796][ T9993] hid_report_raw_event+0xa0a/0x1290 [ 191.845206][ T9993] __hid_input_report.constprop.0+0x33f/0x450 [ 191.851358][ T9993] hid_irq_in+0x35e/0x870 [ 191.855768][ T9993] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 191.861253][ T9993] usb_hcd_giveback_urb+0x39b/0x450 [ 191.866569][ T9993] dummy_timer+0x1814/0x3a30 [ 191.871245][ T9993] __hrtimer_run_queues+0x202/0xad0 [ 191.876522][ T9993] hrtimer_run_softirq+0x17d/0x350 [ 191.881711][ T9993] handle_softirqs+0x216/0x8e0 [ 191.886552][ T9993] __irq_exit_rcu+0x109/0x170 [ 191.891314][ T9993] irq_exit_rcu+0x9/0x30 [ 191.895645][ T9993] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 191.901367][ T9993] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 191.907427][ T9993] __sanitizer_cov_trace_pc+0x3b/0x70 [ 191.913230][ T9993] unmap_page_range+0x13ad/0x42c0 [ 191.918367][ T9993] unmap_single_vma.constprop.0+0x153/0x240 [ 191.924342][ T9993] unmap_vmas+0x218/0x470 [ 191.928762][ T9993] exit_mmap+0x1b9/0xb90 [ 191.933077][ T9993] __mmput+0x12a/0x410 [ 191.937221][ T9993] mmput+0x62/0x70 [ 191.941025][ T9993] do_exit+0x7c7/0x2bf0 [ 191.945276][ T9993] do_group_exit+0xd3/0x2a0 [ 191.949856][ T9993] get_signal+0x2673/0x26d0 [ 191.954443][ T9993] arch_do_signal_or_restart+0x8f/0x7d0 [ 191.960071][ T9993] exit_to_user_mode_loop+0x84/0x110 [ 191.965445][ T9993] do_syscall_64+0x3f6/0x4c0 [ 191.970118][ T9993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.976093][ T9993] [ 191.976093][ T9993] to a SOFTIRQ-irq-unsafe lock: [ 191.983091][ T9993] (tasklist_lock){.+.+}-{3:3} [ 191.983114][ T9993] [ 191.983114][ T9993] ... which became SOFTIRQ-irq-unsafe at: [ 191.995709][ T9993] ... [ 191.995718][ T9993] lock_acquire+0x179/0x350 [ 192.002873][ T9993] _raw_read_lock+0x5f/0x70 [ 192.007454][ T9993] __do_wait+0x105/0x890 [ 192.011769][ T9993] do_wait+0x21e/0x5a0 [ 192.015901][ T9993] kernel_wait+0x9f/0x160 [ 192.020302][ T9993] call_usermodehelper_exec_work+0xf1/0x170 [ 192.026288][ T9993] process_one_work+0x9cc/0x1b70 [ 192.031300][ T9993] worker_thread+0x6c8/0xf10 [ 192.036006][ T9993] kthread+0x3c5/0x780 [ 192.040175][ T9993] ret_from_fork+0x5d4/0x6f0 [ 192.044880][ T9993] ret_from_fork_asm+0x1a/0x30 [ 192.049721][ T9993] [ 192.049721][ T9993] other info that might help us debug this: [ 192.049721][ T9993] [ 192.059943][ T9993] Chain exists of: [ 192.059943][ T9993] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 192.059943][ T9993] [ 192.073061][ T9993] Possible interrupt unsafe locking scenario: [ 192.073061][ T9993] [ 192.081371][ T9993] CPU0 CPU1 [ 192.086718][ T9993] ---- ---- [ 192.092067][ T9993] lock(tasklist_lock); [ 192.096293][ T9993] local_irq_disable(); [ 192.103052][ T9993] lock(&client->buffer_lock); [ 192.110416][ T9993] lock(&new->fa_lock); [ 192.117182][ T9993] [ 192.120621][ T9993] lock(&client->buffer_lock); [ 192.125628][ T9993] [ 192.125628][ T9993] *** DEADLOCK *** [ 192.125628][ T9993] [ 192.133757][ T9993] 7 locks held by syz.4.1408/9993: [ 192.138859][ T9993] #0: ffff888146bf5118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 192.147991][ T9993] #1: ffff888140b48230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 192.158083][ T9993] #2: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 192.167741][ T9993] #3: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 192.177392][ T9993] #4: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 192.186547][ T9993] #5: ffff88807d9d7028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 192.196815][ T9993] #6: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 192.205860][ T9993] [ 192.205860][ T9993] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 192.216257][ T9993] -> (&client->buffer_lock){..-.}-{3:3} { [ 192.221980][ T9993] IN-SOFTIRQ-W at: [ 192.225969][ T9993] lock_acquire+0x179/0x350 [ 192.232118][ T9993] _raw_spin_lock+0x2e/0x40 [ 192.238263][ T9993] evdev_pass_values+0x10e/0x9b0 [ 192.244843][ T9993] evdev_events+0x1bb/0x390 [ 192.250992][ T9993] input_pass_values+0x74b/0x880 [ 192.257571][ T9993] input_handle_event+0xb29/0x14d0 [ 192.264324][ T9993] input_event+0x8e/0xd0 [ 192.270206][ T9993] hidinput_hid_event+0xa10/0x2420 [ 192.276954][ T9993] hid_process_event+0x4b7/0x5e0 [ 192.283550][ T9993] hid_report_raw_event+0xa0a/0x1290 [ 192.290476][ T9993] __hid_input_report.constprop.0+0x33f/0x450 [ 192.298185][ T9993] hid_irq_in+0x35e/0x870 [ 192.304169][ T9993] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 192.311183][ T9993] usb_hcd_giveback_urb+0x39b/0x450 [ 192.318024][ T9993] dummy_timer+0x1814/0x3a30 [ 192.324269][ T9993] __hrtimer_run_queues+0x202/0xad0 [ 192.331123][ T9993] hrtimer_run_softirq+0x17d/0x350 [ 192.337875][ T9993] handle_softirqs+0x216/0x8e0 [ 192.344282][ T9993] __irq_exit_rcu+0x109/0x170 [ 192.350876][ T9993] irq_exit_rcu+0x9/0x30 [ 192.356760][ T9993] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 192.364043][ T9993] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 192.371662][ T9993] __sanitizer_cov_trace_pc+0x3b/0x70 [ 192.378677][ T9993] unmap_page_range+0x13ad/0x42c0 [ 192.385346][ T9993] unmap_single_vma.constprop.0+0x153/0x240 [ 192.392882][ T9993] unmap_vmas+0x218/0x470 [ 192.398859][ T9993] exit_mmap+0x1b9/0xb90 [ 192.404742][ T9993] __mmput+0x12a/0x410 [ 192.410455][ T9993] mmput+0x62/0x70 [ 192.415813][ T9993] do_exit+0x7c7/0x2bf0 [ 192.421629][ T9993] do_group_exit+0xd3/0x2a0 [ 192.427780][ T9993] get_signal+0x2673/0x26d0 [ 192.433928][ T9993] arch_do_signal_or_restart+0x8f/0x7d0 [ 192.441124][ T9993] exit_to_user_mode_loop+0x84/0x110 [ 192.448057][ T9993] do_syscall_64+0x3f6/0x4c0 [ 192.454299][ T9993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.461853][ T9993] INITIAL USE at: [ 192.465767][ T9993] lock_acquire+0x179/0x350 [ 192.471827][ T9993] _raw_spin_lock+0x2e/0x40 [ 192.478605][ T9993] evdev_pass_values+0x10e/0x9b0 [ 192.485091][ T9993] evdev_events+0x1bb/0x390 [ 192.491154][ T9993] input_pass_values+0x74b/0x880 [ 192.497644][ T9993] input_handle_event+0xf00/0x14d0 [ 192.504308][ T9993] input_event+0x8e/0xd0 [ 192.510115][ T9993] uinput_write+0xc63/0x12b0 [ 192.516308][ T9993] vfs_write+0x2a0/0x1150 [ 192.522202][ T9993] ksys_write+0x1f8/0x250 [ 192.528079][ T9993] do_syscall_64+0xcd/0x4c0 [ 192.534158][ T9993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.541603][ T9993] } [ 192.544090][ T9993] ... key at: [] __key.1+0x0/0x40 [ 192.551214][ T9993] [ 192.551214][ T9993] the dependencies between the lock to be acquired [ 192.551227][ T9993] and SOFTIRQ-irq-unsafe lock: [ 192.564786][ T9993] -> (tasklist_lock){.+.+}-{3:3} { [ 192.570084][ T9993] HARDIRQ-ON-R at: [ 192.574241][ T9993] lock_acquire+0x179/0x350 [ 192.580762][ T9993] _raw_read_lock+0x5f/0x70 [ 192.587256][ T9993] __do_wait+0x105/0x890 [ 192.593484][ T9993] do_wait+0x21e/0x5a0 [ 192.599533][ T9993] kernel_wait+0x9f/0x160 [ 192.605864][ T9993] call_usermodehelper_exec_work+0xf1/0x170 [ 192.613777][ T9993] process_one_work+0x9cc/0x1b70 [ 192.620708][ T9993] worker_thread+0x6c8/0xf10 [ 192.627277][ T9993] kthread+0x3c5/0x780 [ 192.633326][ T9993] ret_from_fork+0x5d4/0x6f0 [ 192.639900][ T9993] ret_from_fork_asm+0x1a/0x30 [ 192.646650][ T9993] SOFTIRQ-ON-R at: [ 192.650787][ T9993] lock_acquire+0x179/0x350 [ 192.657281][ T9993] _raw_read_lock+0x5f/0x70 [ 192.663781][ T9993] __do_wait+0x105/0x890 [ 192.670005][ T9993] do_wait+0x21e/0x5a0 [ 192.676062][ T9993] kernel_wait+0x9f/0x160 [ 192.682401][ T9993] call_usermodehelper_exec_work+0xf1/0x170 [ 192.690284][ T9993] process_one_work+0x9cc/0x1b70 [ 192.697210][ T9993] worker_thread+0x6c8/0xf10 [ 192.703786][ T9993] kthread+0x3c5/0x780 [ 192.709836][ T9993] ret_from_fork+0x5d4/0x6f0 [ 192.716413][ T9993] ret_from_fork_asm+0x1a/0x30 [ 192.723169][ T9993] INITIAL USE at: [ 192.727227][ T9993] lock_acquire+0x179/0x350 [ 192.733631][ T9993] _raw_write_lock_irq+0x36/0x50 [ 192.740481][ T9993] copy_process+0x4caf/0x7690 [ 192.747058][ T9993] kernel_clone+0xfc/0x930 [ 192.753384][ T9993] user_mode_thread+0xc7/0x110 [ 192.760050][ T9993] rest_init+0x23/0x2b0 [ 192.766134][ T9993] start_kernel+0x3ee/0x4d0 [ 192.772627][ T9993] x86_64_start_reservations+0x18/0x30 [ 192.780010][ T9993] x86_64_start_kernel+0x130/0x190 [ 192.787023][ T9993] common_startup_64+0x13e/0x148 [ 192.793867][ T9993] INITIAL READ USE at: [ 192.798364][ T9993] lock_acquire+0x179/0x350 [ 192.805216][ T9993] _raw_read_lock+0x5f/0x70 [ 192.812058][ T9993] __do_wait+0x105/0x890 [ 192.818639][ T9993] do_wait+0x21e/0x5a0 [ 192.825039][ T9993] kernel_wait+0x9f/0x160 [ 192.831714][ T9993] call_usermodehelper_exec_work+0xf1/0x170 [ 192.839969][ T9993] process_one_work+0x9cc/0x1b70 [ 192.847239][ T9993] worker_thread+0x6c8/0xf10 [ 192.854169][ T9993] kthread+0x3c5/0x780 [ 192.860577][ T9993] ret_from_fork+0x5d4/0x6f0 [ 192.867579][ T9993] ret_from_fork_asm+0x1a/0x30 [ 192.874682][ T9993] } [ 192.877343][ T9993] ... key at: [] tasklist_lock+0x18/0x40 [ 192.885223][ T9993] ... acquired at: [ 192.889180][ T9993] _raw_read_lock+0x5f/0x70 [ 192.893852][ T9993] send_sigurg+0xed/0xc80 [ 192.898353][ T9993] sk_send_sigurg+0x76/0x360 [ 192.903107][ T9993] unix_stream_sendmsg+0xfa5/0x1340 [ 192.908468][ T9993] ____sys_sendmsg+0xa98/0xc70 [ 192.913414][ T9993] ___sys_sendmsg+0x134/0x1d0 [ 192.918285][ T9993] __sys_sendmmsg+0x200/0x420 [ 192.923140][ T9993] __x64_sys_sendmmsg+0x9c/0x100 [ 192.928239][ T9993] do_syscall_64+0xcd/0x4c0 [ 192.932913][ T9993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.938969][ T9993] [ 192.941276][ T9993] -> (&f_owner->lock){....}-{3:3} { [ 192.946564][ T9993] INITIAL USE at: [ 192.950528][ T9993] lock_acquire+0x179/0x350 [ 192.956766][ T9993] _raw_write_lock_irq+0x36/0x50 [ 192.963437][ T9993] __f_setown+0x61/0x3c0 [ 192.969411][ T9993] generic_setlease+0xef2/0x1300 [ 192.976074][ T9993] kernel_setlease+0x106/0x140 [ 192.982567][ T9993] vfs_setlease+0x258/0x2d0 [ 192.988794][ T9993] fcntl_setlease+0x3ed/0x5a0 [ 192.995205][ T9993] do_fcntl+0x751/0x15a0 [ 193.001188][ T9993] __x64_sys_fcntl+0x163/0x200 [ 193.007714][ T9993] do_syscall_64+0xcd/0x4c0 [ 193.013957][ T9993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.021592][ T9993] INITIAL READ USE at: [ 193.026017][ T9993] lock_acquire+0x179/0x350 [ 193.032718][ T9993] _raw_read_lock_irqsave+0x74/0x90 [ 193.040100][ T9993] send_sigio+0x31/0x3e0 [ 193.046503][ T9993] kill_fasync+0x214/0x510 [ 193.053094][ T9993] lease_break_callback+0x23/0x30 [ 193.060307][ T9993] __break_lease+0x671/0x1810 [ 193.067162][ T9993] do_dentry_open+0x91f/0x1530 [ 193.074103][ T9993] vfs_open+0x82/0x3f0 [ 193.080336][ T9993] path_openat+0x1de4/0x2cb0 [ 193.087085][ T9993] do_filp_open+0x20b/0x470 [ 193.093748][ T9993] do_sys_openat2+0x11b/0x1d0 [ 193.100589][ T9993] __x64_sys_open+0x153/0x1e0 [ 193.107446][ T9993] do_syscall_64+0xcd/0x4c0 [ 193.114105][ T9993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.122183][ T9993] } [ 193.124752][ T9993] ... key at: [] __key.1+0x0/0x40 [ 193.131955][ T9993] ... acquired at: [ 193.135828][ T9993] _raw_read_lock_irqsave+0x74/0x90 [ 193.141199][ T9993] send_sigio+0x31/0x3e0 [ 193.145619][ T9993] kill_fasync+0x214/0x510 [ 193.150201][ T9993] lease_break_callback+0x23/0x30 [ 193.155396][ T9993] __break_lease+0x671/0x1810 [ 193.160240][ T9993] do_dentry_open+0x91f/0x1530 [ 193.165170][ T9993] vfs_open+0x82/0x3f0 [ 193.169427][ T9993] path_openat+0x1de4/0x2cb0 [ 193.174199][ T9993] do_filp_open+0x20b/0x470 [ 193.178865][ T9993] do_sys_openat2+0x11b/0x1d0 [ 193.183730][ T9993] __x64_sys_open+0x153/0x1e0 [ 193.188608][ T9993] do_syscall_64+0xcd/0x4c0 [ 193.193274][ T9993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.199326][ T9993] [ 193.201636][ T9993] -> (&new->fa_lock){....}-{3:3} { [ 193.206774][ T9993] INITIAL USE at: [ 193.210669][ T9993] lock_acquire+0x179/0x350 [ 193.216739][ T9993] _raw_write_lock_irq+0x36/0x50 [ 193.223261][ T9993] fasync_remove_entry+0xb2/0x1e0 [ 193.229850][ T9993] fasync_helper+0xaf/0xd0 [ 193.235853][ T9993] lease_modify+0x232/0x500 [ 193.242018][ T9993] locks_remove_file+0x29e/0x5c0 [ 193.248517][ T9993] __fput+0x351/0xb70 [ 193.254092][ T9993] task_work_run+0x150/0x240 [ 193.260248][ T9993] exit_to_user_mode_loop+0xeb/0x110 [ 193.267099][ T9993] do_syscall_64+0x3f6/0x4c0 [ 193.273260][ T9993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.280708][ T9993] INITIAL READ USE at: [ 193.285019][ T9993] lock_acquire+0x179/0x350 [ 193.291512][ T9993] _raw_read_lock_irqsave+0x74/0x90 [ 193.298707][ T9993] kill_fasync+0x138/0x510 [ 193.305112][ T9993] lease_break_callback+0x23/0x30 [ 193.312135][ T9993] __break_lease+0x671/0x1810 [ 193.318807][ T9993] do_dentry_open+0x91f/0x1530 [ 193.325579][ T9993] vfs_open+0x82/0x3f0 [ 193.331654][ T9993] path_openat+0x1de4/0x2cb0 [ 193.338246][ T9993] do_filp_open+0x20b/0x470 [ 193.344735][ T9993] do_sys_openat2+0x11b/0x1d0 [ 193.351422][ T9993] __x64_sys_open+0x153/0x1e0 [ 193.358091][ T9993] do_syscall_64+0xcd/0x4c0 [ 193.364579][ T9993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.372479][ T9993] } [ 193.374960][ T9993] ... key at: [] __key.0+0x0/0x40 [ 193.382062][ T9993] ... acquired at: [ 193.385852][ T9993] lock_acquire+0x179/0x350 [ 193.390532][ T9993] _raw_read_lock_irqsave+0x74/0x90 [ 193.395902][ T9993] kill_fasync+0x138/0x510 [ 193.400492][ T9993] evdev_pass_values+0x619/0x9b0 [ 193.405600][ T9993] evdev_events+0x1bb/0x390 [ 193.410265][ T9993] input_pass_values+0x74b/0x880 [ 193.415361][ T9993] input_handle_event+0xf00/0x14d0 [ 193.420639][ T9993] input_inject_event+0x1e8/0x3b0 [ 193.425826][ T9993] evdev_write+0x457/0x750 [ 193.430401][ T9993] vfs_write+0x2a0/0x1150 [ 193.434894][ T9993] ksys_write+0x1f8/0x250 [ 193.439384][ T9993] do_syscall_64+0xcd/0x4c0 [ 193.444061][ T9993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.450112][ T9993] [ 193.452423][ T9993] [ 193.452423][ T9993] stack backtrace: [ 193.458312][ T9993] CPU: 1 UID: 0 PID: 9993 Comm: syz.4.1408 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 193.458333][ T9993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.458342][ T9993] Call Trace: [ 193.458346][ T9993] [ 193.458353][ T9993] dump_stack_lvl+0x116/0x1f0 [ 193.458378][ T9993] check_irq_usage+0x7dc/0x920 [ 193.458399][ T9993] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 193.458421][ T9993] ? check_path.constprop.0+0x24/0x50 [ 193.458445][ T9993] ? __lock_acquire+0x12bc/0x1ce0 [ 193.458465][ T9993] __lock_acquire+0x12bc/0x1ce0 [ 193.458489][ T9993] lock_acquire+0x179/0x350 [ 193.458510][ T9993] ? kill_fasync+0x138/0x510 [ 193.458533][ T9993] _raw_read_lock_irqsave+0x74/0x90 [ 193.458554][ T9993] ? kill_fasync+0x138/0x510 [ 193.458574][ T9993] kill_fasync+0x138/0x510 [ 193.458598][ T9993] evdev_pass_values+0x619/0x9b0 [ 193.458618][ T9993] evdev_events+0x1bb/0x390 [ 193.458634][ T9993] input_pass_values+0x74b/0x880 [ 193.458652][ T9993] input_handle_event+0xf00/0x14d0 [ 193.458668][ T9993] ? _copy_from_user+0x59/0xd0 [ 193.458685][ T9993] input_inject_event+0x1e8/0x3b0 [ 193.458705][ T9993] evdev_write+0x457/0x750 [ 193.458721][ T9993] ? __pfx_evdev_write+0x10/0x10 [ 193.458738][ T9993] ? bpf_lsm_file_permission+0x9/0x10 [ 193.458759][ T9993] ? security_file_permission+0x71/0x210 [ 193.458779][ T9993] ? rw_verify_area+0xcf/0x6c0 [ 193.458800][ T9993] ? __pfx_evdev_write+0x10/0x10 [ 193.458816][ T9993] vfs_write+0x2a0/0x1150 [ 193.458834][ T9993] ? __pfx_vfs_write+0x10/0x10 [ 193.458847][ T9993] ? find_held_lock+0x2b/0x80 [ 193.458863][ T9993] ? __fget_files+0x204/0x3c0 [ 193.458880][ T9993] ? __fget_files+0x20e/0x3c0 [ 193.458896][ T9993] ksys_write+0x1f8/0x250 [ 193.458909][ T9993] ? __pfx_ksys_write+0x10/0x10 [ 193.458925][ T9993] do_syscall_64+0xcd/0x4c0 [ 193.458938][ T9993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.458953][ T9993] RIP: 0033:0x7f273178ebe9 [ 193.458967][ T9993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.458982][ T9993] RSP: 002b:00007f2732628038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.458997][ T9993] RAX: ffffffffffffffda RBX: 00007f27319b5fa0 RCX: 00007f273178ebe9 [ 193.459006][ T9993] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 193.459014][ T9993] RBP: 00007f2731811e19 R08: 0000000000000000 R09: 0000000000000000 [ 193.459023][ T9993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.459031][ T9993] R13: 00007f27319b6038 R14: 00007f27319b5fa0 R15: 00007ffd18921798 [ 193.459044][ T9993] [ 193.723447][ T9] ucan 3-1:0.0 can0: registered device [ 193.811053][ T9] ucan 3-1:0.0 can0: firmware string: '" [ 193.873108][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.880518][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.069504][ T9] usb 3-1: USB disconnect, device number 22