last executing test programs: 8m8.41619263s ago: executing program 3 (id=5744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x10003}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000001c0)={'ip6gretap0\x00'}) 8m7.541911325s ago: executing program 3 (id=5750): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r2, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="c3", 0x1}]) vmsplice(r1, &(0x7f0000000cc0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0) 8m7.166476443s ago: executing program 3 (id=5755): socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0) 8m6.889233076s ago: executing program 3 (id=5756): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x9) 8m6.556186733s ago: executing program 3 (id=5757): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000200), &(0x7f0000000240)=0x4) 8m4.090479527s ago: executing program 3 (id=5793): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='module_request\x00', r0}, 0x10) socket$inet6(0xa, 0x80002, 0x9) 8m3.588209706s ago: executing program 32 (id=5793): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='module_request\x00', r0}, 0x10) socket$inet6(0xa, 0x80002, 0x9) 50.377769442s ago: executing program 5 (id=12181): setfsgid(0xee00) r0 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='pagemap\x00') 50.04919293s ago: executing program 5 (id=12184): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x2, {@in6_addr=@private2, 0x86dd}}}]}, 0x38}}, 0x20044050) 49.97552448s ago: executing program 5 (id=12185): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x3c, 0x0, 0x0) 49.871303557s ago: executing program 5 (id=12188): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x1836dd1) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 49.526833855s ago: executing program 0 (id=12190): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 49.435321204s ago: executing program 5 (id=12192): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[], 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) 49.261121419s ago: executing program 5 (id=12194): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x6, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475d68411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close_range(r0, r1, 0x0) 49.249662449s ago: executing program 0 (id=12195): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000}) 48.925546957s ago: executing program 0 (id=12199): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x600}}, 0x30) 48.758472784s ago: executing program 0 (id=12201): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1}, 0xffff}], 0x1, 0x10041, 0x0) 47.817265465s ago: executing program 0 (id=12215): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b105f, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x9) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x201) 47.76866867s ago: executing program 0 (id=12216): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 34.210282996s ago: executing program 33 (id=12194): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x6, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475d68411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close_range(r0, r1, 0x0) 32.596269372s ago: executing program 34 (id=12216): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 24.845015261s ago: executing program 2 (id=12470): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 24.807748115s ago: executing program 2 (id=12471): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000540)={0x2, [[0x7, 0x6, 0x5, 0x0, 0x4, 0x1, 0x8, 0xc501], [0x9, 0x1, 0xffffffff, 0xc9, 0x6, 0x8, 0x80000000, 0x2], [0x5, 0x43a88a9a, 0x3, 0x7, 0x7, 0x9, 0x6, 0xb]], '\x00', [{0x4, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x8000000, 0x1, 0x1, 0x1, 0x1}, {0x7, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x7fffffff, 0x0, 0x0, 0x1, 0x1}, {0xffff, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x2190, 0x1, 0x1, 0x0, 0x1}, {0x1, 0xa, 0x1}, {0x19, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x10, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x5, 0x1, 0x0, 0x1, 0x1}, {0xef7, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x4, 0x0, 0x1, 0x0, 0x1}], '\x00', 0x2}) 24.768443885s ago: executing program 2 (id=12472): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0x20000000, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd0af4adf700102c00fe800000000000000000000000000000ff0200000000000000000000000000013c"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000050) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 24.71981791s ago: executing program 2 (id=12473): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008604"]) 24.642001423s ago: executing program 2 (id=12474): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) r2 = open(&(0x7f0000000300)='.\x00', 0x10000, 0x0) renameat2(r2, &(0x7f00000004c0)='./bus\x00', r0, &(0x7f0000000500)='./file0\x00', 0x0) 24.624774989s ago: executing program 2 (id=12475): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"1322030de361dd494234901b30ca190b6505c85c0e8c361eb4b7a5331d24bb0d", r4}) 17.657073174s ago: executing program 4 (id=12508): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/10, 0xa}], 0x1}, 0x180) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003a40)=@newchain={0x24, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40881) 17.55226918s ago: executing program 4 (id=12509): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x5, 0x14, 0x0, &(0x7f0000000000)='%', 0x0, 0x7fffffff, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x24048062) 16.554573896s ago: executing program 4 (id=12512): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) 16.326108522s ago: executing program 4 (id=12514): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000140)='mounts\x00') 15.895034362s ago: executing program 1 (id=12518): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001480)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x6000, @fd=r0, 0x49c1, 0x5, 0x80000401, 0x28, 0x1, {0x2}}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 15.724983913s ago: executing program 1 (id=12519): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1}, 0x0) 15.653051944s ago: executing program 1 (id=12520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) 15.438069466s ago: executing program 4 (id=12521): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.314417971s ago: executing program 1 (id=12522): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 15.221275318s ago: executing program 1 (id=12523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000010000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r1, r0, 0x7}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) dup3(r2, r0, 0x0) close(r1) 15.200981349s ago: executing program 4 (id=12524): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="62040101fd2367"], 0x7) 15.086186835s ago: executing program 1 (id=12525): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100259d7000fcdbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32], 0x4) 9.538526424s ago: executing program 35 (id=12475): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"1322030de361dd494234901b30ca190b6505c85c0e8c361eb4b7a5331d24bb0d", r4}) 34.450955ms ago: executing program 36 (id=12525): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100259d7000fcdbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32], 0x4) 0s ago: executing program 37 (id=12524): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="62040101fd2367"], 0x7) kernel console output (not intermixed with test programs): [ 749.285997][ T9] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 749.287147][ T5935] mcp2221 0003:04D8:00DD.00B5: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 749.426957][ T10] usb 1-1: USB disconnect, device number 5 [ 749.456736][ T9] usb 6-1: config 0 has an invalid interface number: 93 but max is 0 [ 749.466660][ T9] usb 6-1: config 0 has no interface number 0 [ 749.477662][ T9] usb 6-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 749.489533][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.498630][ T9] usb 6-1: Product: syz [ 749.504236][ T9] usb 6-1: Manufacturer: syz [ 749.508849][ T9] usb 6-1: SerialNumber: syz [ 749.516974][ T9] usb 6-1: config 0 descriptor?? [ 749.519406][ T5935] usb 2-1: USB disconnect, device number 113 [ 749.727400][ T9] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 749.738984][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 749.748792][ T9] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 749.758109][ T9] usb 6-1: media controller created [ 749.766256][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 749.812655][ T9] DVB: Unable to find symbol dib7000p_attach() [ 749.818895][ T9] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 749.836272][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 749.847065][ T9] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 749.867256][ T9] usb 6-1: media controller created [ 749.876074][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 749.891935][ T9] dib0700: the master dib7090 has to be initialized first [ 749.900173][ T9] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 749.984546][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 749.997375][ T9] Registered IR keymap rc-empty [ 750.005279][ T9] dvb-usb: could not initialize remote control. [ 750.011539][ T9] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 750.034996][ T9] usb 6-1: USB disconnect, device number 72 [ 750.045132][T30526] vlan2: entered allmulticast mode [ 750.068759][ T9] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 750.069346][T30526] bond0: entered allmulticast mode [ 750.086980][T30526] bond_slave_0: entered allmulticast mode [ 750.093212][T30526] bond_slave_1: entered allmulticast mode [ 750.147411][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 750.147428][ T30] audit: type=1400 audit(2000001123.429:3115): avc: denied { bind } for pid=30531 comm="syz.1.10866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 750.373622][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 750.535350][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 750.551305][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 750.569142][ T10] usb 1-1: config 5 has an invalid interface number: 114 but max is 0 [ 750.599097][ T10] usb 1-1: config 5 has no interface number 0 [ 750.606554][ T10] usb 1-1: config 5 interface 114 has no altsetting 0 [ 750.617288][ T10] usb 1-1: New USB device found, idVendor=1b3d, idProduct=9316, bcdDevice=28.00 [ 750.629580][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.638742][ T10] usb 1-1: Product: syz [ 750.644209][ T10] usb 1-1: Manufacturer: syz [ 750.983487][ T10] usb 1-1: SerialNumber: syz [ 751.197515][ T10] ftdi_sio 1-1:5.114: FTDI USB Serial Device converter detected [ 751.226391][ T10] usb 1-1: Detected FT2233HP [ 751.231408][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 751.244179][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 751.254747][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 751.276399][ T10] usb 1-1: USB disconnect, device number 6 [ 751.286062][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 751.301364][ T10] ftdi_sio 1-1:5.114: device disconnected [ 751.324651][T30582] ptrace attach of "./syz-executor exec"[22265] was attempted by ""[30582] [ 751.577651][T30601] netlink: 176 bytes leftover after parsing attributes in process `syz.2.10894'. [ 751.633671][ T118] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 751.818337][ T118] usb 2-1: Using ep0 maxpacket: 16 [ 751.826296][ T118] usb 2-1: config 0 has no interfaces? [ 751.831956][ T118] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 751.847760][ T118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.861262][ T118] usb 2-1: config 0 descriptor?? [ 752.114185][ T118] usb 2-1: USB disconnect, device number 114 [ 752.269942][T30621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.520199][T30621] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.536478][T30621] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.550387][T30621] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.560571][T30621] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.599581][T30621] gtp1: left promiscuous mode [ 752.606706][T30624] netlink: 'syz.5.10905': attribute type 3 has an invalid length. [ 752.616009][T30624] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10905'. [ 753.440400][T30666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10923'. [ 753.456230][T30666] netlink: 'syz.4.10923': attribute type 1 has an invalid length. [ 753.465894][T30666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10923'. [ 754.332680][T22267] Bluetooth: hci5: command 0x1003 tx timeout [ 754.333580][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 754.375509][T30698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10937'. [ 754.695072][ T30] audit: type=1400 audit(2000001127.969:3116): avc: denied { watch } for pid=30708 comm="syz.0.10942" path="/proc/4622" dev="proc" ino=109537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 754.889116][ T30] audit: type=1326 audit(2000001128.169:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.2.10944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 754.944923][ T30] audit: type=1326 audit(2000001128.169:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.2.10944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16a992ab19 code=0x7ffc0000 [ 754.970993][ T30] audit: type=1326 audit(2000001128.169:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.2.10944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 755.000247][ T30] audit: type=1326 audit(2000001128.199:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.2.10944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 755.029329][ T30] audit: type=1326 audit(2000001128.199:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.2.10944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16a992ab19 code=0x7ffc0000 [ 755.065473][ T30] audit: type=1326 audit(2000001128.199:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.2.10944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 755.101491][ T30] audit: type=1326 audit(2000001128.199:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.2.10944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 755.133934][ T30] audit: type=1326 audit(2000001128.199:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.2.10944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 755.161070][ T30] audit: type=1326 audit(2000001128.199:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.2.10944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 755.191418][ T30] audit: type=1326 audit(2000001128.199:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.2.10944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16a992ab19 code=0x7ffc0000 [ 755.220266][ T30] audit: type=1326 audit(2000001128.199:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.2.10944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 755.252889][ T30] audit: type=1326 audit(2000001128.199:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.2.10944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16a992ab19 code=0x7ffc0000 [ 755.279273][ T30] audit: type=1326 audit(2000001128.199:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.2.10944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16a992ab19 code=0x7ffc0000 [ 755.308521][ T30] audit: type=1326 audit(2000001128.199:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.2.10944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 755.334502][ T30] audit: type=1326 audit(2000001128.199:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.2.10944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16a992ab19 code=0x7ffc0000 [ 755.363558][ T30] audit: type=1326 audit(2000001128.199:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.2.10944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 755.392379][ T30] audit: type=1326 audit(2000001128.199:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.2.10944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 755.449072][ T30] audit: type=1326 audit(2000001128.199:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.2.10944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 755.861096][T30748] overlayfs: failed to clone upperpath [ 755.970528][T30754] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.10961'. [ 756.414803][T30771] @: renamed from vlan0 (while UP) [ 756.495246][T30777] input: syz1 as /devices/virtual/input/input136 [ 757.384044][T30793] netlink: 'syz.0.10978': attribute type 39 has an invalid length. [ 757.565787][T23235] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 757.583947][T30798] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 757.968245][T30819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10987'. [ 757.991952][T30819] netlink: 'syz.1.10987': attribute type 7 has an invalid length. [ 758.007977][T30819] netlink: 'syz.1.10987': attribute type 8 has an invalid length. [ 758.020065][T30819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10987'. [ 758.430388][T30845] netlink: 'syz.5.10995': attribute type 4 has an invalid length. [ 758.449084][T30845] netlink: 'syz.5.10995': attribute type 4 has an invalid length. [ 758.945396][T30869] input: syz1 as /devices/virtual/input/input137 [ 759.058076][T30873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.434304][T30882] syzkaller1: entered promiscuous mode [ 759.449708][T30882] syzkaller1: entered allmulticast mode [ 759.558389][T30890] siw: device registration error -23 [ 759.574497][T30890] smc: removing ib device syz2 [ 759.827018][T30897] netlink: 'syz.1.11016': attribute type 1 has an invalid length. [ 759.835153][T30897] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11016'. [ 760.661038][T30915] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2157778563 (4315557126 ns) > initial count (1704523522 ns). Using initial count to start timer. [ 761.222566][ T5864] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 761.382990][ T5864] usb 6-1: Using ep0 maxpacket: 32 [ 761.389732][ T5864] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 761.403785][ T5864] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 761.422493][ T48] psmouse serio9: Failed to reset mouse on : -5 [ 761.428954][ T5864] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 761.444257][ T5864] usb 6-1: config 1 has no interface number 0 [ 761.460712][ T5864] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 761.482045][ T5864] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 761.522491][ T5864] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 761.541803][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.565291][ T5864] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 761.570491][T30934] overlayfs: invalid origin (00000079007a6b616c6c6572310000000000000180c2000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 761.702711][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 761.751762][T30938] IPVS: Scheduler module ip_vs_sip not found [ 761.769677][ T5864] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 762.228556][ T5819] usb 6-1: USB disconnect, device number 73 [ 762.238413][ T5819] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 762.464373][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 762.464389][ T30] audit: type=1400 audit(2000001135.749:3201): avc: denied { connect } for pid=30965 comm="syz.1.11049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 762.636110][ T30] audit: type=1400 audit(2000001135.919:3202): avc: denied { write } for pid=30971 comm="syz.2.11052" path="socket:[110346]" dev="sockfs" ino=110346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 763.182822][ T5819] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 763.357874][ T5819] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 763.384526][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.416711][ T5819] usb 2-1: config 0 descriptor?? [ 763.425031][ T5819] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 763.502560][ T5864] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 763.580223][T31005] ipvlan2: entered promiscuous mode [ 763.647298][ T5819] gp8psk: usb in 128 operation failed. [ 763.693256][ T5864] usb 6-1: Using ep0 maxpacket: 8 [ 763.699838][ T5864] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 763.716199][ T5864] usb 6-1: config 179 has no interface number 0 [ 763.723009][ T5864] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 763.734367][ T5864] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 763.745641][ T5864] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 763.756808][ T5864] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 763.773647][ T5864] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 763.788613][ T5864] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 763.802926][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.813924][T30993] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 763.864574][ T5819] gp8psk: usb in 146 operation failed. [ 763.870079][ T5819] gp8psk: failed to get FW version [ 763.880557][ T5819] gp8psk: usb in 149 operation failed. [ 763.887339][ T5819] gp8psk: failed to get FPGA version [ 764.036962][ T5864] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input139 [ 764.097846][ T5819] gp8psk: usb out operation failed. [ 764.104176][ T5819] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 764.115776][ T5819] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 764.129709][ T5819] usb 2-1: USB disconnect, device number 115 [ 764.166946][T31021] netlink: 'syz.2.11075': attribute type 2 has an invalid length. [ 764.241818][ T118] usb 6-1: USB disconnect, device number 74 [ 764.241819][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 764.241862][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 764.264299][ T118] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 765.272950][ T48] misc userio: Buffer overflowed, userio client isn't keeping up [ 765.352696][T31048] overlayfs: failed to clone upperpath [ 765.832546][ T55] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 765.994409][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.012737][ T55] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 766.032285][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.054967][ T55] usb 2-1: config 0 descriptor?? [ 766.158741][T31065] sp0: Synchronizing with TNC [ 766.356948][ T48] input: PS/2 Generic Mouse as /devices/serio9/input/input138 [ 766.400419][ T30] audit: type=1800 audit(2000001139.679:3203): pid=31078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.11100" name="file1" dev="tmpfs" ino=5257 res=0 errno=0 [ 766.471537][T31082] input: syz0 as /devices/virtual/input/input140 [ 766.509682][ T55] keytouch 0003:0926:3333.00B6: fixing up Keytouch IEC report descriptor [ 766.530867][ T55] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00B6/input/input141 [ 766.608663][ T48] psmouse serio9: Failed to enable mouse on [ 766.670732][ T55] keytouch 0003:0926:3333.00B6: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 766.705404][T31055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.715413][T31055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.214060][T31147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11129'. [ 768.303533][ T10] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 768.465587][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 768.485819][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 768.529066][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 768.546822][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.632153][ T10] usb 6-1: Product: syz [ 768.647561][ T10] usb 6-1: Manufacturer: syz [ 768.660191][ T118] usb 2-1: USB disconnect, device number 116 [ 768.678974][ T10] usb 6-1: SerialNumber: syz [ 768.698507][T31145] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 768.911679][T31172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11140'. [ 769.121679][T31184] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 769.720400][ T10] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 769.733481][ T10] cdc_ncm 6-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 769.740912][ T10] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 769.920931][ T10] cdc_ncm 6-1:1.0: setting tx_max = 36 [ 769.939315][ T10] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 769.962219][ T10] usb 6-1: USB disconnect, device number 75 [ 769.971163][ T10] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 770.012681][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 770.103158][ T55] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 770.227260][T31223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11163'. [ 770.266083][ T55] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 770.283793][T31222] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 770.285688][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.324131][ T55] usb 1-1: config 0 descriptor?? [ 770.331486][ T55] cp210x 1-1:0.0: cp210x converter detected [ 770.580381][T31240] ip6gre1: entered allmulticast mode [ 770.654004][ T48] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 770.750521][T31207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.772885][T31207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.784157][ T55] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 770.806678][ T55] usb 1-1: cp210x converter now attached to ttyUSB0 [ 770.846822][ T48] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 770.867369][ T48] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 770.885963][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.931968][ T48] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 770.999408][ T55] usb 1-1: USB disconnect, device number 7 [ 771.030116][ T55] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 771.060659][ T55] cp210x 1-1:0.0: device disconnected [ 771.709563][T31281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11186'. [ 771.719401][T31281] netlink: 'syz.2.11186': attribute type 7 has an invalid length. [ 771.722796][ T5864] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 771.728374][T31281] netlink: 'syz.2.11186': attribute type 8 has an invalid length. [ 771.744795][T31281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11186'. [ 771.902684][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 771.912827][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.926912][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.938798][ T5864] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 771.953992][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.964376][ T5864] usb 6-1: config 0 descriptor?? [ 772.013895][ T48] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 772.022785][ T48] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 772.029875][ T48] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 772.281059][ T10] usb 2-1: USB disconnect, device number 117 [ 772.388254][ T5864] zydacron 0003:13EC:0006.00B7: unknown main item tag 0x4 [ 772.396444][ T5864] zydacron 0003:13EC:0006.00B7: unexpected long global item [ 772.404770][ T5864] zydacron 0003:13EC:0006.00B7: parse failed [ 772.410842][ T5864] zydacron 0003:13EC:0006.00B7: probe with driver zydacron failed with error -22 [ 772.447887][ T30] audit: type=1326 audit(2000001145.729:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.2.11198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 772.472322][ T30] audit: type=1326 audit(2000001145.729:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.2.11198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 772.499130][ T30] audit: type=1326 audit(2000001145.749:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.2.11198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 772.525003][ T30] audit: type=1326 audit(2000001145.759:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.2.11198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 772.548758][ T30] audit: type=1326 audit(2000001145.759:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.2.11198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 772.610081][ T5819] usb 6-1: USB disconnect, device number 76 [ 772.641946][ T30] audit: type=1326 audit(2000001145.779:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.2.11198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 772.679112][ T30] audit: type=1326 audit(2000001145.779:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.2.11198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 772.782378][ T30] audit: type=1326 audit(2000001145.779:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.2.11198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 772.895947][ T30] audit: type=1326 audit(2000001145.779:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.2.11198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 772.967564][T31320] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 772.982594][ T30] audit: type=1326 audit(2000001145.779:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.2.11198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 773.009527][T31317] kvm: MWAIT instruction emulated as NOP! [ 773.020764][T31320] overlayfs: failed to set xattr on upper [ 773.033493][T31320] overlayfs: ...falling back to redirect_dir=nofollow. [ 773.048527][T31320] overlayfs: ...falling back to index=off. [ 773.058709][T31320] overlayfs: ...falling back to uuid=null. [ 773.065346][T31320] overlayfs: ...falling back to xino=off. [ 773.072038][T31320] overlayfs: conflicting lowerdir path [ 773.597426][ T5819] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 773.807135][ T5819] usb 1-1: Using ep0 maxpacket: 16 [ 773.827591][ T5819] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.855911][ T5819] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 773.875907][ T5819] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 773.886182][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.895372][ T118] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 773.918880][ T5819] usb 1-1: Product: syz [ 773.924137][ T5819] usb 1-1: Manufacturer: syz [ 773.928841][ T5819] usb 1-1: SerialNumber: syz [ 773.936798][ T5819] usb 1-1: config 0 descriptor?? [ 774.065029][ T118] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.083498][ T118] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 774.106464][ T118] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.118913][ T118] usb 6-1: config 0 descriptor?? [ 774.539280][ T118] keytouch 0003:0926:3333.00B8: fixing up Keytouch IEC report descriptor [ 774.560847][ T118] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.00B8/input/input142 [ 774.661188][ T118] keytouch 0003:0926:3333.00B8: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 775.175066][ T5864] usb 6-1: USB disconnect, device number 77 [ 775.251477][T31410] trusted_key: syz.4.11240 sent an empty control message without MSG_MORE. [ 775.342516][ T48] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 775.502733][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 775.513859][ T48] usb 2-1: config 0 has no interfaces? [ 775.521182][ T48] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 775.530457][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.538855][ T48] usb 2-1: Product: syz [ 775.543221][ T48] usb 2-1: Manufacturer: syz [ 775.547828][ T48] usb 2-1: SerialNumber: syz [ 775.554363][ T48] usb 2-1: config 0 descriptor?? [ 775.774427][ T118] usb 2-1: USB disconnect, device number 118 [ 776.344295][T31446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11248'. [ 776.436023][ T10] usb 1-1: USB disconnect, device number 8 [ 776.559613][T31453] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 776.802656][ T5864] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 776.994244][ T5864] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 777.002685][ T5864] usb 6-1: config 0 has no interface number 0 [ 777.009187][ T5864] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 777.018799][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.029948][ T5864] usb 6-1: config 0 descriptor?? [ 777.037139][ T5864] cp210x 6-1:0.1: cp210x converter detected [ 777.376901][T31490] 9pnet_fd: Insufficient options for proto=fd [ 777.438312][ T5864] cp210x 6-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 777.598659][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 777.598675][ T30] audit: type=1400 audit(2000001406.874:3215): avc: denied { listen } for pid=31501 comm="syz.4.11279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 777.648725][ T30] audit: type=1400 audit(2000001406.874:3216): avc: denied { accept } for pid=31501 comm="syz.4.11279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 777.698575][ T5864] usb 6-1: cp210x converter now attached to ttyUSB0 [ 777.884528][ T5864] usb 6-1: USB disconnect, device number 78 [ 777.903279][ T5864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 777.970461][ T5864] cp210x 6-1:0.1: device disconnected [ 778.181886][ T30] audit: type=1400 audit(2000001407.454:3217): avc: denied { map } for pid=31529 comm="syz.2.11292" path="socket:[113035]" dev="sockfs" ino=113035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 778.342932][ T5935] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 778.507871][ T5935] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 778.519083][ T5935] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 778.531602][ T5935] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 778.555863][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.576748][T31524] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 778.589083][ T5935] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 778.793202][ T5935] usb 1-1: USB disconnect, device number 9 [ 779.045343][T31577] loop4: detected capacity change from 0 to 7 [ 779.072603][T31577] Dev loop4: unable to read RDB block 7 [ 779.078570][T31577] loop4: unable to read partition table [ 779.084451][T31577] loop4: partition table beyond EOD, truncated [ 779.090621][T31577] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 779.114556][T31578] Dev loop4: unable to read RDB block 7 [ 779.120189][T31578] loop4: unable to read partition table [ 779.130021][T31578] loop4: partition table beyond EOD, truncated [ 779.227194][T31585] sch_fq: defrate 4294967295 ignored. [ 779.663406][ T10] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 779.833553][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 779.844971][ T10] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 779.854343][ T10] usb 6-1: config 0 has no interface number 0 [ 779.871217][ T10] usb 6-1: New USB device found, idVendor=1164, idProduct=1e8c, bcdDevice=c9.10 [ 779.881508][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.890540][ T10] usb 6-1: Product: syz [ 779.903480][ T10] usb 6-1: Manufacturer: syz [ 779.908147][ T10] usb 6-1: SerialNumber: syz [ 779.916971][ T10] usb 6-1: config 0 descriptor?? [ 780.032623][ T5935] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 780.214307][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 780.223577][ T5935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 780.235210][ T5935] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 780.254819][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.270193][ T5935] usb 1-1: Product: syz [ 780.282596][ T5935] usb 1-1: Manufacturer: syz [ 780.287253][ T5935] usb 1-1: SerialNumber: syz [ 780.294246][ T5935] usb 1-1: config 0 descriptor?? [ 780.328753][ T10] dvb-usb: found a 'YUAN High-Tech DiBcom STK7700D' in cold state, will try to load a firmware [ 780.340722][ T5819] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 780.399443][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 780.408812][ T10] dib0700: firmware download failed at 7 with -22 [ 780.427269][ T10] usb 6-1: USB disconnect, device number 79 [ 780.466409][T31626] 9pnet_fd: Insufficient options for proto=fd [ 780.506389][ T5819] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 780.520881][ T5819] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 780.543036][ T5819] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 780.560963][ T5819] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 780.572116][ T5819] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 780.588488][ T5819] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 780.598796][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 780.608067][ T5819] usb 2-1: Product: syz [ 780.612389][ T5819] usb 2-1: Manufacturer: syz [ 780.622175][ T5819] cdc_wdm 2-1:1.0: skipping garbage [ 780.629229][ T5819] cdc_wdm 2-1:1.0: skipping garbage [ 780.636760][ T5819] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 780.643869][ T5819] cdc_wdm 2-1:1.0: Unknown control protocol [ 780.726568][ T5935] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 781.061042][ T10] usb 2-1: USB disconnect, device number 119 [ 781.153497][ T5819] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 781.314133][ T5819] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 781.325482][ T5819] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 781.348247][ T5819] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 781.358822][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.375040][T31631] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 781.388619][ T5819] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 781.538278][T31646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11340'. [ 781.547992][T31646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11340'. [ 781.560313][ T5819] usb 1-1: USB disconnect, device number 10 [ 781.628166][ T10] usb 6-1: USB disconnect, device number 80 [ 783.340480][T31707] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 783.391217][ T30] audit: type=1800 audit(2000001412.654:3218): pid=31709 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.11367" name="bus" dev="tmpfs" ino=5679 res=0 errno=0 [ 783.412946][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.661618][ T30] audit: type=1400 audit(2000001412.934:3219): avc: denied { listen } for pid=31714 comm="syz.2.11371" path=2F313130322FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 783.686760][T31719] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 783.796869][T31721] overlayfs: failed to clone lowerpath [ 783.815767][T31721] overlayfs: failed to clone upperpath [ 784.035644][T31731] netlink: 348 bytes leftover after parsing attributes in process `syz.5.11377'. [ 784.117663][T31737] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.11380'. [ 784.239293][T31744] 9pnet_fd: Insufficient options for proto=fd [ 784.369830][T31752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11387'. [ 784.639372][T31767] SELinux: failed to load policy [ 784.688278][T31768] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 784.799045][T31780] veth0: entered promiscuous mode [ 784.809161][T31780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11399'. [ 785.024623][T31789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11403'. [ 785.080612][T31793] input: syz1 as /devices/virtual/input/input143 [ 786.012696][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 786.545132][T31848] binder: 31847:31848 ioctl c0306201 2000000003c0 returned -14 [ 786.597933][ T5864] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 786.704928][ T30] audit: type=1400 audit(2000001415.984:3220): avc: denied { create } for pid=31855 comm="syz.1.11434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 786.727175][T31857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11434'. [ 786.739082][T31857] netlink: 'syz.1.11434': attribute type 7 has an invalid length. [ 786.748136][T31857] netlink: 'syz.1.11434': attribute type 8 has an invalid length. [ 786.758247][T31857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11434'. [ 786.782747][ T5864] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 786.787846][T31857] erspan0: entered promiscuous mode [ 786.793886][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.793918][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.793942][ T5864] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 786.794877][ T5864] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 786.843296][ T5864] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 786.854583][ T5864] usb 6-1: Manufacturer: syz [ 786.856400][T31857] batadv_slave_1: entered promiscuous mode [ 786.874640][ T5864] usb 6-1: config 0 descriptor?? [ 786.914301][T31857] erspan0: left promiscuous mode [ 786.940823][T31857] batadv_slave_1: left promiscuous mode [ 787.320230][ T5864] appleir 0003:05AC:8243.00B9: unknown main item tag 0x0 [ 787.341945][ T5864] appleir 0003:05AC:8243.00B9: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 787.750866][T31903] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 787.756143][ T30] audit: type=1400 audit(2000001417.034:3221): avc: denied { create } for pid=31902 comm="syz.4.11453" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 787.847484][ C1] vkms_vblank_simulate: vblank timer overrun [ 787.939089][ C1] vkms_vblank_simulate: vblank timer overrun [ 787.954361][ T30] audit: type=1400 audit(2000001417.034:3222): avc: denied { associate } for pid=31902 comm="syz.4.11453" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 787.954780][ T30] audit: type=1400 audit(2000001417.034:3223): avc: denied { mounton } for pid=31902 comm="syz.4.11453" path="/1936/bus" dev="tmpfs" ino=9832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 788.047104][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.047179][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 788.138757][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.162945][ T30] audit: type=1400 audit(2000001417.034:3224): avc: denied { add_name } for pid=31902 comm="syz.4.11453" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 788.163409][ T30] audit: type=1400 audit(2000001417.044:3225): avc: denied { setattr } for pid=31902 comm="syz.4.11453" name="work" dev="tmpfs" ino=9833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 788.254753][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.346069][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.359250][ T5864] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 788.381734][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 788.386124][ T30] audit: type=1400 audit(2000001417.044:3226): avc: denied { write open } for pid=31902 comm="syz.4.11453" path=2F202864656C6574656429 dev="tmpfs" ino=9834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 788.392804][ T30] audit: type=1400 audit(2000001417.044:3227): avc: denied { create } for pid=31902 comm="syz.4.11453" name="#17" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 788.398013][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 788.484217][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.581107][ T30] audit: type=1400 audit(2000001417.044:3228): avc: denied { remove_name } for pid=31902 comm="syz.4.11453" name="#17" dev="tmpfs" ino=9835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 788.593712][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 788.598727][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 788.684711][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.691534][T31912] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.11458'. [ 788.706832][ T30] audit: type=1400 audit(2000001417.044:3229): avc: denied { rename } for pid=31902 comm="syz.4.11453" name="#17" dev="tmpfs" ino=9835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 788.720189][ T5864] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 788.811203][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.836759][ T30] audit: type=1400 audit(2000001417.044:3230): avc: denied { unlink } for pid=31902 comm="syz.4.11453" name="#17" dev="tmpfs" ino=9836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 788.837181][ T30] audit: type=1400 audit(2000001417.044:3231): avc: denied { unlink } for pid=31902 comm="syz.4.11453" name="#18" dev="tmpfs" ino=9835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 788.842302][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.928505][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.029999][ T5864] usb 2-1: config 0 has no interface number 0 [ 789.030050][ T5864] usb 2-1: config 0 interface 184 has no altsetting 0 [ 789.031247][ T30] audit: type=1400 audit(2000001417.434:3232): avc: denied { rmdir } for pid=5821 comm="syz-executor" name="index" dev="tmpfs" ino=9837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 789.053438][ T30] audit: type=1326 audit(2000001418.114:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31908 comm="syz.4.11456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37858e929 code=0x7fc00000 [ 789.144422][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.181154][ T5864] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 789.192384][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.200783][ T5864] usb 2-1: Product: syz [ 789.201478][T31896] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 789.205101][ T5864] usb 2-1: Manufacturer: syz [ 789.216996][ T5864] usb 2-1: SerialNumber: syz [ 789.223156][ T30] audit: type=1326 audit(2000001418.114:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31908 comm="syz.4.11456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37858e929 code=0x7fc00000 [ 789.227395][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 789.246684][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.247527][ T5864] usb 2-1: config 0 descriptor?? [ 789.247774][ T30] audit: type=1326 audit(2000001418.114:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31908 comm="syz.4.11456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37858e929 code=0x7fc00000 [ 789.247818][ T30] audit: type=1326 audit(2000001418.114:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31908 comm="syz.4.11456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37858e929 code=0x7fc00000 [ 789.319570][ T5864] smsc75xx v1.0.0 [ 789.368484][ T5876] usb 6-1: USB disconnect, device number 81 [ 789.515026][ T10] usb 1-1: USB disconnect, device number 11 [ 790.548201][ T5864] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 790.602454][ T5864] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 790.652598][ T5864] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 790.663639][ T5864] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 790.673384][ T5864] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 790.683672][ T5864] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 790.693394][ T5864] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 790.705743][ T5864] usb 2-1: USB disconnect, device number 120 [ 790.713543][ T10] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 791.053678][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.123743][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 791.134608][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.145990][ T10] usb 6-1: config 0 descriptor?? [ 791.559641][ T10] keytouch 0003:0926:3333.00BA: fixing up Keytouch IEC report descriptor [ 791.577882][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.00BA/input/input144 [ 791.696498][ T10] keytouch 0003:0926:3333.00BA: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 792.212805][ T5864] usb 6-1: USB disconnect, device number 82 [ 792.334240][ T10] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 792.498817][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 792.509089][ T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 792.518764][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 792.529614][ T10] usb 2-1: config 220 has no interface number 2 [ 792.536200][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 792.549463][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 792.556353][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 792.564328][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 792.574405][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 792.584072][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.592054][ T10] usb 2-1: Product: syz [ 792.596763][ T10] usb 2-1: Manufacturer: syz [ 792.601360][ T10] usb 2-1: SerialNumber: syz [ 792.795811][T32023] syzkaller1: entered promiscuous mode [ 792.802692][T32023] syzkaller1: entered allmulticast mode [ 792.817558][ T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 792.826133][ T10] usb 2-1: No valid video chain found. [ 792.843238][ T10] usb 2-1: selecting invalid altsetting 0 [ 792.866115][ T10] usb 2-1: selecting invalid altsetting 0 [ 792.871927][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 792.885657][ T10] usb 2-1: USB disconnect, device number 121 [ 792.900143][T32027] netlink: 'syz.2.11509': attribute type 2 has an invalid length. [ 792.909465][T32027] netlink: 'syz.2.11509': attribute type 8 has an invalid length. [ 792.918964][T32027] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11509'. [ 793.043022][ T118] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 793.213550][ T118] usb 1-1: Using ep0 maxpacket: 16 [ 793.227672][ T118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.239982][ T118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 793.254136][ T118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 793.265103][ T118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.276551][ T118] usb 1-1: config 0 descriptor?? [ 793.552900][ T10] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 793.695423][ T118] HID 045e:07da: Invalid code 65791 type 1 [ 793.707431][ T118] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.00BB/input/input145 [ 793.719514][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 793.735097][ T10] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 793.753545][ T10] usb 6-1: config 0 has no interface number 0 [ 793.760309][ T10] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 793.775650][ T118] microsoft 0003:045E:07DA.00BB: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 793.789710][ T10] usb 6-1: config 0 interface 85 has no altsetting 0 [ 793.807266][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 793.817612][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.825698][ T10] usb 6-1: Product: syz [ 793.830051][ T10] usb 6-1: Manufacturer: syz [ 793.834765][ T10] usb 6-1: SerialNumber: syz [ 793.849704][ T10] usb 6-1: config 0 descriptor?? [ 794.160071][T32064] Process accounting resumed [ 794.462102][ T10] appletouch 6-1:0.85: Geyser mode initialized. [ 794.475255][ T10] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input146 [ 794.672036][ T5935] usb 6-1: USB disconnect, device number 83 [ 794.706596][ T5935] appletouch 6-1:0.85: input: appletouch disconnected [ 795.169579][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880267fcc00: rx timeout, send abort [ 795.235433][T32114] batman_adv: batadv0: Adding interface: macsec2 [ 795.241794][T32114] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.267315][T32114] batman_adv: batadv0: Interface activated: macsec2 [ 795.677803][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880267fcc00: abort rx timeout. Force session deactivation [ 795.843914][ T5864] usb 1-1: USB disconnect, device number 12 [ 795.979680][T32138] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 796.011031][T32138] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 796.021603][T32138] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 796.035770][T32138] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 796.046531][T32138] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 796.055267][T32138] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 796.064034][T32138] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 796.090429][T32138] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 796.106721][T32138] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 796.115426][T32138] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 796.847514][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 796.847531][ T30] audit: type=1326 audit(2000001426.124:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32143 comm="syz.5.11560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1f98e929 code=0x7fc00000 [ 796.914371][ T30] audit: type=1326 audit(2000001426.124:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32143 comm="syz.5.11560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d1f98e929 code=0x7fc00000 [ 796.941574][ T30] audit: type=1326 audit(2000001426.124:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32143 comm="syz.5.11560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1f98e929 code=0x7fc00000 [ 796.994356][ T30] audit: type=1326 audit(2000001426.124:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32143 comm="syz.5.11560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1f98e929 code=0x7fc00000 [ 797.018537][ T30] audit: type=1326 audit(2000001426.124:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32143 comm="syz.5.11560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1f98e929 code=0x7fc00000 [ 797.040825][T32151] syz.1.11563 (32151): drop_caches: 2 [ 797.104006][ T10] hid-generic 00A0:0006:0003.00BC: unknown main item tag 0x0 [ 797.114501][ T10] hid-generic 00A0:0006:0003.00BC: unknown main item tag 0x0 [ 797.141468][ T10] hid-generic 00A0:0006:0003.00BC: unknown main item tag 0x0 [ 797.174230][ T10] hid-generic 00A0:0006:0003.00BC: unknown main item tag 0x2 [ 797.185551][ T10] hid-generic 00A0:0006:0003.00BC: unknown main item tag 0x0 [ 797.207624][ T10] hid-generic 00A0:0006:0003.00BC: unknown main item tag 0x0 [ 797.233456][ T10] hid-generic 00A0:0006:0003.00BC: unknown main item tag 0x0 [ 797.270589][ T10] hid-generic 00A0:0006:0003.00BC: unknown main item tag 0x0 [ 797.280587][ T10] hid-generic 00A0:0006:0003.00BC: unknown main item tag 0x0 [ 797.295881][ T10] hid-generic 00A0:0006:0003.00BC: unknown main item tag 0x0 [ 797.330243][ T10] hid-generic 00A0:0006:0003.00BC: unknown main item tag 0x0 [ 797.353519][ T10] hid-generic 00A0:0006:0003.00BC: unknown main item tag 0x0 [ 797.370502][T32196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 797.373693][ T10] hid-generic 00A0:0006:0003.00BC: hidraw0: HID v0.05 Device [syz1] on syz0 [ 797.622350][ T118] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 797.804967][ T118] usb 6-1: config 0 has no interfaces? [ 797.810487][ T118] usb 6-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 797.833316][ T118] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.858962][ T118] usb 6-1: config 0 descriptor?? [ 798.073551][ T5864] usb 6-1: USB disconnect, device number 84 [ 798.880121][T32245] input: syz1 as /devices/virtual/input/input147 [ 799.666166][T32260] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.11607'. [ 800.062527][ T30] audit: type=1400 audit(2000001429.334:3303): avc: denied { create } for pid=32276 comm="syz.5.11615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 800.117703][T32280] kvm: emulating exchange as write [ 800.127176][ T30] audit: type=1400 audit(2000001429.334:3304): avc: denied { sys_admin } for pid=32276 comm="syz.5.11615" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 800.603827][ T5876] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 800.822659][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 800.856265][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.876348][ T5876] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 800.889156][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.924733][ T5876] usb 1-1: config 0 descriptor?? [ 801.337449][ T5876] corsair 0003:1B1C:1B3E.00BD: unknown main item tag 0x0 [ 801.347788][ T5876] corsair 0003:1B1C:1B3E.00BD: unknown main item tag 0x0 [ 801.354894][ T5876] corsair 0003:1B1C:1B3E.00BD: unknown main item tag 0x0 [ 801.361998][ T5876] corsair 0003:1B1C:1B3E.00BD: unknown main item tag 0x0 [ 801.369106][ T5876] corsair 0003:1B1C:1B3E.00BD: unknown main item tag 0x0 [ 801.382083][ T5876] corsair 0003:1B1C:1B3E.00BD: hidraw0: USB HID v0.85 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 801.549034][ T5876] usb 1-1: USB disconnect, device number 13 [ 801.882907][ T5935] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 802.062592][ T5935] usb 6-1: Using ep0 maxpacket: 8 [ 802.069627][ T5935] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 802.078120][ T5935] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 802.086503][ T5935] usb 6-1: config 0 has no interface number 0 [ 802.094729][ T5935] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 802.116441][ T5935] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x1 has an invalid bInterval 66, changing to 10 [ 802.134969][ T5935] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x1 has invalid maxpacket 1745, setting to 1024 [ 802.148272][ T5935] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 802.157586][ T5935] usb 6-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 802.165726][ T5935] usb 6-1: Product: syz [ 802.170030][ T5935] usb 6-1: Manufacturer: syz [ 802.177806][ T5935] usb 6-1: config 0 descriptor?? [ 802.483040][ T118] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 802.498323][T32374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11655'. [ 802.644936][ T118] usb 2-1: config 0 has an invalid interface number: 7 but max is 0 [ 802.654292][ T118] usb 2-1: config 0 has no interface number 0 [ 802.660383][ T118] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 802.671214][ T118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.683509][ T118] usb 2-1: config 0 descriptor?? [ 802.690499][ T118] cp210x 2-1:0.7: cp210x converter detected [ 802.812717][ T5935] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 802.982471][ T5935] usb 1-1: Using ep0 maxpacket: 8 [ 802.990628][ T5935] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 802.999892][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.007919][ T5935] usb 1-1: Product: syz [ 803.012132][ T5935] usb 1-1: Manufacturer: syz [ 803.016843][ T5935] usb 1-1: SerialNumber: syz [ 803.026796][ T5935] usb 1-1: config 0 descriptor?? [ 803.034416][ T5935] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 803.091577][ T118] cp210x 2-1:0.7: failed to get vendor val 0x000e size 3: -32 [ 803.300387][ T118] cp210x 2-1:0.7: GPIO initialisation failed: -19 [ 803.309335][ T118] usb 2-1: cp210x converter now attached to ttyUSB0 [ 803.504805][ T118] usb 2-1: USB disconnect, device number 122 [ 803.515282][ T118] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 803.524270][ T118] cp210x 2-1:0.7: device disconnected [ 804.258041][ T5935] gspca_sonixj: reg_w1 err -71 [ 804.344960][ T5935] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 804.368449][ T5935] usb 1-1: USB disconnect, device number 14 [ 804.659834][ T10] usb 6-1: USB disconnect, device number 85 [ 804.835783][ T30] audit: type=1400 audit(2000001434.104:3305): avc: denied { create } for pid=32422 comm="syz.5.11676" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 804.923044][ T30] audit: type=1400 audit(2000001434.204:3306): avc: denied { watch watch_reads } for pid=32426 comm="syz.5.11678" path="/syzcgroup/net/syz5/syz0" dev="cgroup" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 804.941988][T32429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 805.154382][T32440] delete_channel: no stack [ 805.327842][T32448] Invalid ELF header len 8 [ 805.332365][ T30] audit: type=1400 audit(2000001434.604:3307): avc: denied { module_load } for pid=32447 comm="syz.4.11688" path="/1972/bus" dev="tmpfs" ino=10023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 805.762826][ T5935] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 805.942482][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 805.953663][ T5935] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 805.961863][ T5935] usb 2-1: config 0 has no interface number 0 [ 805.973742][ T5935] usb 2-1: config 0 interface 184 has no altsetting 0 [ 805.997417][ T5935] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 806.006509][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.014785][ T5935] usb 2-1: Product: syz [ 806.018948][ T5935] usb 2-1: Manufacturer: syz [ 806.030635][ T5935] usb 2-1: SerialNumber: syz [ 806.041655][ T5935] usb 2-1: config 0 descriptor?? [ 806.046721][ T48] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 806.060020][ T5935] smsc75xx v1.0.0 [ 806.206264][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 806.232567][ T48] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 806.246083][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 806.268968][ T48] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 806.284018][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.296134][ T48] usb 6-1: Product: syz [ 806.300702][ T48] usb 6-1: Manufacturer: syz [ 806.308163][ T48] usb 6-1: SerialNumber: syz [ 806.317026][ T48] usb 6-1: config 0 descriptor?? [ 806.322905][T32475] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 806.330271][T32475] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 806.343820][ T48] usb 6-1: ucan: probing device on interface #0 [ 806.548687][ T48] usb 6-1: ucan: device protocol version 1936090482 is not supported [ 806.556955][ T48] usb 6-1: ucan: probe failed; try to update the device firmware [ 806.639194][T32503] SELinux: ebitmap: truncated map [ 806.658440][T32503] SELinux: failed to load policy [ 806.706537][T32505] macsec0: entered allmulticast mode [ 806.714896][T32505] veth1_macvtap: entered promiscuous mode [ 806.720652][T32505] veth1_macvtap: entered allmulticast mode [ 806.728427][T32505] macsec0: left allmulticast mode [ 806.734307][T32505] veth1_macvtap: left allmulticast mode [ 806.785900][ T48] usb 6-1: USB disconnect, device number 86 [ 806.851224][T32509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11714'. [ 806.901507][T32511] Context (ID=0x0) not attached to queue pair (handle=0x4d3:0x0) [ 807.030115][T32516] netlink: 9896 bytes leftover after parsing attributes in process `syz.2.11717'. [ 807.100279][ T5935] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 807.138188][T32521] overlayfs: failed to clone lowerpath [ 807.311232][ T5935] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 807.332893][ T5935] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 807.357237][ T5935] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 807.389776][ T5935] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 807.412765][ T5935] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 807.435104][ T5935] usb 2-1: USB disconnect, device number 123 [ 807.819580][T32544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11730'. [ 808.071282][T32559] bridge0: entered promiscuous mode [ 808.148494][T32563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11739'. [ 808.159817][ T10] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 808.204646][T32565] input: syz1 as /devices/virtual/input/input148 [ 808.319711][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 808.327806][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 808.338138][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.356794][ T10] usb 2-1: config 0 descriptor?? [ 808.366160][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 808.591567][T32587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11748'. [ 809.381900][ T10] gspca_sq930x: ucbus_write failed -71 [ 809.389525][ T10] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 809.400185][ T10] usb 2-1: USB disconnect, device number 124 [ 809.613037][ T48] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 809.807225][ T48] usb 6-1: Using ep0 maxpacket: 16 [ 809.825067][ T48] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 809.863967][ T48] usb 6-1: config 0 has no interface number 0 [ 809.930650][ T48] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 37, changing to 9 [ 810.000561][ T48] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 10008, setting to 1024 [ 810.114458][ T48] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 810.155099][ T48] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 810.232649][ T48] usb 6-1: Product: syz [ 810.238624][ T48] usb 6-1: SerialNumber: syz [ 810.290206][ T48] usb 6-1: config 0 descriptor?? [ 810.343421][T32617] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 810.408385][ T48] cm109 6-1:0.8: invalid payload size 1024, expected 4 [ 810.508491][ T48] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input149 [ 810.565001][ C1] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 810.781942][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.789097][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.796336][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.803546][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.810685][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.817818][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.824968][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.832090][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.839173][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.846343][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 810.863535][ T118] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 810.864424][ T48] usb 6-1: USB disconnect, device number 87 [ 810.871210][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 810.891417][ T48] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 811.013521][ T118] usb 2-1: Using ep0 maxpacket: 8 [ 811.020713][ T118] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.045661][ T118] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 811.077839][ T118] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 811.097473][ T118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.127341][ T118] usb 2-1: Product: syz [ 811.131527][ T118] usb 2-1: Manufacturer: syz [ 811.163434][ T118] usb 2-1: SerialNumber: syz [ 811.186000][ T118] usb 2-1: config 0 descriptor?? [ 811.204511][ T118] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 811.250860][T32650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11776'. [ 812.299495][T32664] loop3: detected capacity change from 0 to 1 [ 812.310058][T32664] Dev loop3: unable to read RDB block 1 [ 812.317096][T32664] loop3: unable to read partition table [ 812.323990][T32664] loop3: partition table beyond EOD, truncated [ 812.330386][T32664] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 812.763779][ T5819] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 812.923574][ T5819] usb 1-1: Using ep0 maxpacket: 32 [ 812.955797][ T5819] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 812.966314][ T5819] usb 1-1: config 0 has no interface number 0 [ 812.976204][ T5819] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 812.986751][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.996052][ T5819] usb 1-1: Product: syz [ 813.000417][ T5819] usb 1-1: Manufacturer: syz [ 813.005705][ T5819] usb 1-1: SerialNumber: syz [ 813.014029][ T5819] usb 1-1: config 0 descriptor?? [ 813.022124][ T5819] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 813.036346][ T5819] usb 1-1: selecting invalid altsetting 1 [ 813.042236][ T5819] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 813.054056][ T5819] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 813.065740][ T5819] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 813.075109][ T5819] usb 1-1: media controller created [ 813.096949][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 813.234754][ T5819] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 813.241796][ T5819] zl10353_read_register: readreg error (reg=127, ret==-71) [ 813.251295][ T5819] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 813.291882][ T5819] usb 1-1: USB disconnect, device number 15 [ 813.668846][ T30] audit: type=1400 audit(2000001442.944:3308): avc: denied { associate } for pid=32683 comm="syz.4.11789" name="time_for_children" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 813.697777][ T48] usb 2-1: USB disconnect, device number 125 [ 813.768676][T32686] netlink: 'syz.1.11790': attribute type 1 has an invalid length. [ 813.909604][T32690] 8021q: adding VLAN 0 to HW filter on device bond3 [ 813.918461][T32690] bond2: (slave bond3): making interface the new active one [ 813.926498][T32690] bond2: (slave bond3): Enslaving as an active interface with an up link [ 814.051105][ T30] audit: type=1400 audit(2000001443.324:3309): avc: denied { create } for pid=32692 comm="syz.0.11792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 814.087003][ T30] audit: type=1400 audit(2000001443.364:3310): avc: denied { listen } for pid=32701 comm="syz.4.11795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 814.284660][T32713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11801'. [ 814.470341][T32723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11805'. [ 815.733962][ T30] audit: type=1326 audit(2000001445.014:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32753 comm="syz.2.11818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x0 [ 816.033538][T32762] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 816.092675][ C1] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 816.092695][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 816.332808][ T48] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 816.484283][ T48] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 816.512824][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 816.538212][ T48] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 816.555374][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.567633][ T48] usb 6-1: config 0 descriptor?? [ 816.575903][T32764] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 816.585175][ T48] hub 6-1:0.0: USB hub found [ 816.676836][ T302] input: syz0 as /devices/virtual/input/input150 [ 816.678249][ T300] overlayfs: failed to clone lowerpath [ 816.786554][ T48] hub 6-1:0.0: 2 ports detected [ 816.996913][ T48] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 817.006897][ T48] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 817.027908][ T48] usbhid 6-1:0.0: can't add hid device: -71 [ 817.045506][ T48] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 817.090070][ T48] usb 6-1: USB disconnect, device number 88 [ 817.729168][ T348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 819.310159][ T398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 820.054147][ T435] netlink: 'syz.1.11875': attribute type 12 has an invalid length. [ 820.062076][ T435] netlink: 'syz.1.11875': attribute type 29 has an invalid length. [ 820.111931][ T435] netlink: 148 bytes leftover after parsing attributes in process `syz.1.11875'. [ 820.122180][ T435] netlink: 'syz.1.11875': attribute type 1 has an invalid length. [ 820.131020][ T435] netlink: 'syz.1.11875': attribute type 2 has an invalid length. [ 820.175336][ T435] netlink: 39 bytes leftover after parsing attributes in process `syz.1.11875'. [ 820.553764][ T5819] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 820.726349][ T5819] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 820.758295][ T5819] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 820.776156][ T5819] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 820.788199][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 820.788625][ T461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11886'. [ 820.801334][ T5819] usb 6-1: SerialNumber: syz [ 820.822456][ T461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11886'. [ 821.027594][ T5819] usb 6-1: 0:2 : does not exist [ 821.049088][ T5819] usb 6-1: USB disconnect, device number 89 [ 821.671700][ T480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11890'. [ 821.833168][ T5819] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 821.994795][ T5819] usb 6-1: Using ep0 maxpacket: 8 [ 822.009281][ T5819] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 822.019751][ T5819] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.037817][ T5819] usb 6-1: config 0 has no interface number 0 [ 822.049954][ T5819] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 822.072172][ T5819] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 822.104553][ T5819] usb 6-1: config 0 interface 52 has no altsetting 0 [ 822.118302][ T5819] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 822.128970][ T5819] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 822.141099][ T5819] usb 6-1: Manufacturer: syz [ 822.160904][ T5819] usb 6-1: config 0 descriptor?? [ 822.286503][ T509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11905'. [ 822.395929][ T5819] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input151 [ 822.624307][ T118] usb 6-1: USB disconnect, device number 90 [ 822.630283][ C0] synaptics_usb 6-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 822.909275][ T536] syz.1.11918: attempt to access beyond end of device [ 822.909275][ T536] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 823.301569][ T30] audit: type=1400 audit(2000001452.574:3312): avc: denied { setopt } for pid=553 comm="syz.1.11925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 823.563497][ T118] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 823.723505][ T118] usb 6-1: Using ep0 maxpacket: 8 [ 823.731939][ T118] usb 6-1: config 51 has an invalid interface number: 123 but max is 0 [ 823.750680][ T118] usb 6-1: config 51 has no interface number 0 [ 823.766547][ T118] usb 6-1: config 51 interface 123 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 823.779413][ T118] usb 6-1: config 51 interface 123 has no altsetting 0 [ 823.791178][ T118] usb 6-1: string descriptor 0 read error: -22 [ 823.798595][ T118] usb 6-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=64.81 [ 823.808895][ T118] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.847316][ T118] usb 6-1: unsupported MDLM descriptors [ 824.076300][ T118] usb 6-1: USB disconnect, device number 91 [ 824.354105][ T575] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 824.373261][ T575] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 824.872542][ T118] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 825.023208][ T118] usb 2-1: Using ep0 maxpacket: 8 [ 825.032086][ T118] usb 2-1: config 162 has an invalid interface number: 251 but max is 1 [ 825.041593][ T118] usb 2-1: config 162 has an invalid interface number: 209 but max is 1 [ 825.051097][ T118] usb 2-1: config 162 has no interface number 0 [ 825.061427][ T118] usb 2-1: config 162 has no interface number 1 [ 825.069681][ T118] usb 2-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 825.088613][ T118] usb 2-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 825.101095][ T118] usb 2-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 825.116778][ T118] usb 2-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 825.128892][ T118] usb 2-1: config 162 interface 209 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 825.142437][ T118] usb 2-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 825.156401][ T118] usb 2-1: config 162 interface 251 has no altsetting 0 [ 825.164024][ T118] usb 2-1: config 162 interface 209 has no altsetting 0 [ 825.174685][ T118] usb 2-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88 [ 825.184891][ T118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.193778][ T118] usb 2-1: Product: syz [ 825.197946][ T118] usb 2-1: Manufacturer: syz [ 825.202632][ T118] usb 2-1: SerialNumber: syz [ 825.287935][ T604] : entered promiscuous mode [ 825.419394][ T118] io_edgeport 2-1:162.251: required endpoints missing [ 825.703724][ T118] io_edgeport 2-1:162.209: Edgeport 2 port adapter converter detected [ 825.707860][ T609] netdevsim netdevsim4: Direct firmware load for ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ failed with error -2 [ 825.731308][ T609] netdevsim netdevsim4: Falling back to sysfs fallback for: ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ [ 825.735166][ T30] audit: type=1400 audit(2000001455.004:3313): avc: denied { firmware_load } for pid=607 comm="syz.4.11950" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 825.881427][ T615] netlink: 'syz.5.11953': attribute type 29 has an invalid length. [ 825.895662][ T615] netlink: 'syz.5.11953': attribute type 29 has an invalid length. [ 825.916011][ T615] netlink: 500 bytes leftover after parsing attributes in process `syz.5.11953'. [ 826.055278][ T118] usb 2-1: у detected [ 826.128038][ T623] xt_hashlimit: size too large, truncated to 1048576 [ 826.260762][ T118] usb 2-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 826.365052][ T118] usb 2-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 826.491304][ T118] usb 2-1: USB disconnect, device number 126 [ 826.497928][ C0] usb 2-1: edge_interrupt_callback - Error -19 submitting control urb [ 826.632301][ T118] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 826.721408][ T118] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 826.791341][ T118] io_edgeport 2-1:162.209: device disconnected [ 827.098895][ T633] netlink: 96 bytes leftover after parsing attributes in process `syz.5.11961'. [ 827.385799][ T643] 9pnet: p9_errstr2errno: server reported unknown error 6Ûz9’f00000000000000000003 [ 828.196329][ T666] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11976'. [ 829.315653][ T695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11988'. [ 829.324965][ T694] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.11985'. [ 830.083493][ T5819] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 830.243932][ T5819] usb 6-1: Using ep0 maxpacket: 16 [ 830.253866][ T5819] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 830.281720][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.309367][ T5819] usb 6-1: config 0 descriptor?? [ 830.325334][ T5819] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 831.535198][ T5819] gspca_sonixj: reg_w1 err -71 [ 831.553552][ T5819] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 831.564096][ T5819] usb 6-1: USB disconnect, device number 92 [ 831.592613][ T5935] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 831.742595][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 831.751506][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.765104][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.775248][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 831.789786][ T5935] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 831.798957][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.809217][ T5935] usb 2-1: config 0 descriptor?? [ 831.870543][ T773] Process accounting resumed [ 832.159487][ T30] audit: type=1326 audit(2000001461.434:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=780 comm="syz.0.12023" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c0cb8e929 code=0x0 [ 832.282832][ T5935] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.00BE/input/input152 [ 832.308039][ T5935] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.00BE/input/input153 [ 832.328432][ T5935] kye 0003:0458:5011.00BE: input,hiddev0,hidraw0: USB HID v9.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 832.657322][ T5935] usb 2-1: USB disconnect, device number 127 [ 832.733524][ T9] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 832.919975][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.946514][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.962444][ T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 832.977402][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.991179][ T9] usb 6-1: config 0 descriptor?? [ 833.218186][ T30] audit: type=1326 audit(2000001462.504:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=812 comm="syz.2.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 833.262802][ T30] audit: type=1326 audit(2000001462.524:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=812 comm="syz.2.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 833.293553][ T30] audit: type=1326 audit(2000001462.524:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=812 comm="syz.2.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 833.324406][ T30] audit: type=1326 audit(2000001462.524:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=812 comm="syz.2.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 833.349081][ T118] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 833.363067][ T30] audit: type=1326 audit(2000001462.524:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=812 comm="syz.2.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 833.384839][ T815] netlink: 'syz.1.12038': attribute type 39 has an invalid length. [ 833.395133][ T30] audit: type=1326 audit(2000001462.524:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=812 comm="syz.2.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 833.429992][ T30] audit: type=1326 audit(2000001462.524:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=812 comm="syz.2.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x7ffc0000 [ 833.454971][ T30] audit: type=1326 audit(2000001462.524:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=812 comm="syz.2.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16a99858e7 code=0x7ffc0000 [ 833.484940][ T30] audit: type=1326 audit(2000001462.524:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=812 comm="syz.2.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16a992ab19 code=0x7ffc0000 [ 833.517007][ T819] 9pnet_fd: Insufficient options for proto=fd [ 833.569616][ T118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.583083][ T118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.598338][ T118] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 833.610389][ T118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.621400][ T9] usb 6-1: string descriptor 0 read error: -22 [ 833.632285][ T118] usb 1-1: config 0 descriptor?? [ 833.829368][ T9] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.00BF/input/input154 [ 833.860081][ T9] uclogic 0003:256C:006D.00BF: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 834.068875][ T48] usb 6-1: USB disconnect, device number 93 [ 834.307101][ T118] usb 1-1: string descriptor 0 read error: -22 [ 834.450525][ T841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12049'. [ 834.719680][ T118] uclogic 0003:256C:006D.00C0: failed retrieving string descriptor #100: -71 [ 834.747860][ T118] uclogic 0003:256C:006D.00C0: failed retrieving pen parameters: -71 [ 834.760726][ T118] uclogic 0003:256C:006D.00C0: failed probing pen v1 parameters: -71 [ 834.771312][ T118] uclogic 0003:256C:006D.00C0: failed probing parameters: -71 [ 834.783662][ T118] uclogic 0003:256C:006D.00C0: probe with driver uclogic failed with error -71 [ 834.816373][ T118] usb 1-1: USB disconnect, device number 16 [ 835.337143][T32480] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 835.492846][T32480] usb 6-1: Using ep0 maxpacket: 16 [ 835.500811][T32480] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.512587][T32480] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 835.525282][T32480] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 835.534777][T32480] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.542929][T32480] usb 6-1: Product: syz [ 835.547250][T32480] usb 6-1: Manufacturer: syz [ 835.551877][T32480] usb 6-1: SerialNumber: syz [ 835.622042][ T841] pim6reg: entered allmulticast mode [ 835.645639][ T842] pim6reg: left allmulticast mode [ 835.771155][ T852] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 836.202715][ T885] binder: 882:885 ioctl c0306201 2000000001c0 returned -22 [ 836.386442][ T852] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 836.602289][T32480] cdc_ncm 6-1:1.0: failed to get mac address [ 836.632531][ T5819] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 836.797735][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.811012][T32480] cdc_ncm 6-1:1.0: bind() failure [ 836.818482][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.834469][ T5819] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 836.836466][T32480] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 836.847940][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.878673][T32480] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 836.882973][ T5819] usb 1-1: config 0 descriptor?? [ 836.898273][T32480] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 836.921056][T32480] usb 6-1: USB disconnect, device number 94 [ 837.198233][ T932] loop8: detected capacity change from 0 to 16384 [ 837.337524][ T5819] hid_mf 0003:0079:1846.00C1: item fetching failed at offset 10/11 [ 837.364043][ T5819] hid_mf 0003:0079:1846.00C1: HID parse failed. [ 837.383813][ T5819] hid_mf 0003:0079:1846.00C1: probe with driver hid_mf failed with error -22 [ 837.464530][ T943] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.12088'. [ 837.477262][ T934] loop8: detected capacity change from 16384 to 0 [ 837.477596][ C0] blk_print_req_error: 3 callbacks suppressed [ 837.477612][ C0] I/O error, dev loop8, sector 11008 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 837.585133][T32480] usb 1-1: USB disconnect, device number 17 [ 839.204088][ T1005] SELinux: failed to load policy [ 839.552565][T32480] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 839.726401][T32480] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 839.762451][T32480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.920898][T32480] usb 1-1: config 0 descriptor?? [ 839.935892][T32480] cp210x 1-1:0.0: cp210x converter detected [ 840.103432][ T5819] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 840.325233][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 840.339109][T32480] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 840.345860][ T5819] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 840.361761][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.377543][ T5819] usb 2-1: config 0 descriptor?? [ 840.385820][T32480] usb 1-1: cp210x converter now attached to ttyUSB0 [ 840.386492][ T1038] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 840.560723][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 840.560739][ T30] audit: type=1400 audit(2000001469.834:3346): avc: denied { read } for pid=1063 comm="syz.5.12133" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 840.595177][T32480] usb 1-1: USB disconnect, device number 18 [ 840.603675][T32480] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 840.617732][T32480] cp210x 1-1:0.0: device disconnected [ 840.856444][ T5819] elan 0003:04F3:0755.00C2: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 841.047803][ T5819] usb 2-1: USB disconnect, device number 2 [ 841.963487][ T118] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 842.139782][ T118] usb 6-1: Using ep0 maxpacket: 32 [ 842.150591][ T118] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 842.165747][ T118] usb 6-1: config 0 has no interface number 0 [ 842.172003][ T118] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 842.191196][ T118] usb 6-1: config 0 interface 1 has no altsetting 0 [ 842.217210][ T118] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 842.247877][ T118] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.282105][ T118] usb 6-1: Product: syz [ 842.318934][ T118] usb 6-1: Manufacturer: syz [ 842.349673][ T118] usb 6-1: SerialNumber: syz [ 842.397641][ T118] usb 6-1: config 0 descriptor?? [ 842.658755][ T118] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 842.679717][ T118] cx231xx 6-1:0.1: Failed to read PCB config [ 842.687056][ T118] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 842.718101][ T118] usb 6-1: USB disconnect, device number 95 [ 842.732956][ T1143] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 843.173583][ T118] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 843.334358][ T118] usb 6-1: Using ep0 maxpacket: 32 [ 843.341236][ T118] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 843.350609][ T118] usb 6-1: config 0 has no interface number 0 [ 843.370715][ T118] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 843.400133][ T118] usb 6-1: config 0 interface 1 has no altsetting 0 [ 843.475609][ T118] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 843.488776][ T118] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.525066][ T118] usb 6-1: Product: syz [ 843.529326][ T118] usb 6-1: Manufacturer: syz [ 843.558739][ T118] usb 6-1: SerialNumber: syz [ 843.582023][ T118] usb 6-1: config 0 descriptor?? [ 843.809454][ T118] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 843.855444][ T118] cx231xx 6-1:0.1: Failed to read PCB config [ 843.861511][ T118] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 843.884000][ T118] usb 6-1: USB disconnect, device number 96 [ 844.236949][ T30] audit: type=1400 audit(2000001473.514:3347): avc: denied { listen } for pid=1170 comm="syz.0.12180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 844.681571][ T1180] SELinux: failed to load policy [ 844.920972][ T30] audit: type=1400 audit(2000001474.184:3348): avc: denied { setattr } for pid=1161 comm="syz.2.12176" name="NETLINK" dev="sockfs" ino=123113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 846.246009][ T30] audit: type=1400 audit(2000001475.524:3349): avc: denied { mounton } for pid=1227 comm="syz.1.12202" path="/2344/file0" dev="tmpfs" ino=11945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 846.496931][ T30] audit: type=1400 audit(2000001475.774:3350): avc: denied { remount } for pid=1232 comm="syz.2.12204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 846.873658][ T118] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 847.036060][ T118] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.071595][ T118] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 847.095852][ T118] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 847.113447][ T118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.131781][ T118] usb 2-1: Product: syz [ 847.139637][ T118] usb 2-1: Manufacturer: syz [ 847.153453][ T118] usb 2-1: SerialNumber: syz [ 847.349548][ T1269] syzkaller1: entered promiscuous mode [ 847.357637][ T1269] syzkaller1: entered allmulticast mode [ 847.371366][ T1239] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 847.736902][ T1285] binder: 1284:1285 ioctl 40046205 0 returned -22 [ 847.917952][ T30] audit: type=1326 audit(2000001477.194:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.4.12227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37858e929 code=0x7ffc0000 [ 847.941472][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.950069][ T30] audit: type=1326 audit(2000001477.194:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.4.12227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37858e929 code=0x7ffc0000 [ 847.973535][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.981090][ T30] audit: type=1326 audit(2000001477.224:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.4.12227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe37858e929 code=0x7ffc0000 [ 848.013740][ T1239] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 848.021636][ T30] audit: type=1326 audit(2000001477.224:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.4.12227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37858e929 code=0x7ffc0000 [ 848.045076][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.052363][ T30] audit: type=1326 audit(2000001477.224:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.4.12227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37858e929 code=0x7ffc0000 [ 848.076921][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.098967][ T30] audit: type=1326 audit(2000001477.224:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.4.12227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe37858e929 code=0x7ffc0000 [ 848.122455][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.130032][ T30] audit: type=1326 audit(2000001477.224:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.4.12227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37858e929 code=0x7ffc0000 [ 848.169581][ T30] audit: type=1326 audit(2000001477.224:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.4.12227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37858e929 code=0x7ffc0000 [ 848.193054][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.222269][ T118] cdc_mbim 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 848.229448][ T118] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 848.244181][ T118] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 848.433801][ T118] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 848.444937][ T118] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 848.471533][ T118] wwan wwan0: port wwan0mbim0 attached [ 848.500992][ T118] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 42:42:42:42:42:42 [ 848.536879][ T118] usb 2-1: USB disconnect, device number 3 [ 848.545274][ T118] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 848.588118][ T118] wwan wwan0: port wwan0mbim0 disconnected [ 849.385418][ T1330] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12245'. [ 849.508400][ T1338] ALSA: seq fatal error: cannot create timer (-16) [ 849.547402][ T1341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 849.777240][ T1349] netlink: 'syz.4.12254': attribute type 1 has an invalid length. [ 849.795395][ T1349] netlink: 'syz.4.12254': attribute type 2 has an invalid length. [ 849.811430][ T1349] netlink: 'syz.4.12254': attribute type 1 has an invalid length. [ 849.820675][ T1349] netlink: 'syz.4.12254': attribute type 2 has an invalid length. [ 849.863538][ T5819] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 850.026705][ T5819] usb 2-1: Using ep0 maxpacket: 32 [ 850.038891][ T5819] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 850.048212][ T5819] usb 2-1: config 0 has no interface number 0 [ 850.058832][ T5819] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 850.068578][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.077911][ T5819] usb 2-1: Product: syz [ 850.093603][ T5819] usb 2-1: Manufacturer: syz [ 850.098208][ T5819] usb 2-1: SerialNumber: syz [ 850.104698][ T5819] usb 2-1: config 0 descriptor?? [ 850.114209][ T5819] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 850.323737][ T5819] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 850.342357][ T5819] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 850.519684][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 850.720776][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 850.729830][ T5819] usb 2-1: USB disconnect, device number 4 [ 850.748708][ T5819] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 850.776828][ T5819] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 850.789520][ T5819] quatech2 2-1:0.51: device disconnected [ 850.802106][ T1377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12266'. [ 851.688796][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 851.688813][ T30] audit: type=1400 audit(2000001480.964:3369): avc: denied { ioctl } for pid=1402 comm="syz.2.12277" path="socket:[123518]" dev="sockfs" ino=123518 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 852.738569][ T1426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=1426 comm=syz.2.12287 [ 856.073791][ T30] audit: type=1400 audit(2000001485.354:3370): avc: denied { bind } for pid=1543 comm="syz.4.12341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 856.454213][ T1557] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 856.921736][ T1578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12356'. [ 858.583481][ T5935] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 858.745712][ T5935] usb 2-1: config 8 has an invalid interface number: 22 but max is 0 [ 858.755396][ T5935] usb 2-1: config 8 has no interface number 0 [ 858.761463][ T5935] usb 2-1: config 8 interface 22 has no altsetting 0 [ 858.769688][ T5935] usb 2-1: New USB device found, idVendor=057c, idProduct=8403, bcdDevice=42.7d [ 858.779003][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.787075][ T5935] usb 2-1: Product: syz [ 858.791226][ T5935] usb 2-1: Manufacturer: syz [ 858.795813][ T5935] usb 2-1: SerialNumber: syz [ 859.010169][ T5935] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 859.023525][ T5935] usb 2-1: USB disconnect, device number 5 [ 861.835663][ T30] audit: type=1326 audit(2000001491.114:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1655 comm="syz.1.12380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6658e929 code=0x7fc00000 [ 862.290270][ T30] audit: type=1400 audit(2000001491.564:3372): avc: denied { read } for pid=1681 comm="syz.1.12391" path="socket:[124951]" dev="sockfs" ino=124951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 862.752609][ T5935] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 862.903925][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.914936][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.927619][ T5935] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 862.936841][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.947289][ T5935] usb 2-1: config 0 descriptor?? [ 863.558801][ T5935] usb 2-1: language id specifier not provided by device, defaulting to English [ 863.968004][ T5935] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C3/input/input155 [ 863.989332][ T5935] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C3/input/input156 [ 864.008758][ T5935] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C3/input/input157 [ 864.028817][ T5935] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C3/input/input158 [ 864.046127][ T5935] uclogic 0003:256C:006D.00C3: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 864.098971][ T30] audit: type=1400 audit(2000001493.374:3373): avc: denied { accept } for pid=1704 comm="syz.2.12400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 864.168550][ T118] usb 2-1: USB disconnect, device number 6 [ 865.464840][ T1749] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12417'. [ 865.484272][ T1749] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12417'. [ 865.525375][ T1751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 865.912328][ T30] audit: type=1326 audit(2000001495.184:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1766 comm="syz.2.12424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16a998e929 code=0x0 [ 865.935361][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.178829][ T30] audit: type=1400 audit(2000001495.454:3375): avc: denied { search } for pid=1781 comm="syz.1.12430" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 866.200411][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.223647][ T30] audit: type=1400 audit(2000001495.494:3376): avc: denied { unmount } for pid=1781 comm="syz.1.12430" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 866.642577][ T5935] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 866.795763][ T5935] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 866.807214][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.817853][ T5935] usb 2-1: config 0 descriptor?? [ 866.826097][ T5935] cp210x 2-1:0.0: cp210x converter detected [ 867.231807][ T5935] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 867.247599][ T5935] usb 2-1: cp210x converter now attached to ttyUSB0 [ 867.311954][ T1800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12438'. [ 867.354719][ T30] audit: type=1400 audit(2000001496.634:3377): avc: denied { name_bind } for pid=1801 comm="syz.2.12439" path="socket:[125119]" dev="sockfs" ino=125119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 867.454707][ T118] usb 2-1: USB disconnect, device number 7 [ 867.462163][ T118] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 867.471383][ T118] cp210x 2-1:0.0: device disconnected [ 868.139364][ T1819] overlayfs: failed to clone upperpath [ 868.623084][ T118] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 868.782988][ T118] usb 2-1: Using ep0 maxpacket: 32 [ 868.789484][ T118] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 868.798273][ T118] usb 2-1: config 0 has no interface number 0 [ 868.805424][ T118] usb 2-1: config 0 interface 184 has no altsetting 0 [ 868.815815][ T118] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 868.825495][ T118] usb 2-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 868.834454][ T118] usb 2-1: Product: syz [ 868.838605][ T118] usb 2-1: Manufacturer: syz [ 868.844370][ T118] usb 2-1: SerialNumber: syz [ 868.850693][ T118] usb 2-1: config 0 descriptor?? [ 868.857654][ T118] smsc75xx v1.0.0 [ 869.491885][ T30] audit: type=1400 audit(2000001498.764:3378): avc: granted { setsecparam } for pid=1849 comm="syz.4.12462" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 869.644520][ T1856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 869.869680][ T118] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 870.007871][ T1871] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.12472'. [ 870.081338][ T118] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 870.093871][ T118] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 870.105044][ T118] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 870.116492][ T118] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 870.127515][ T118] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 870.141165][ T118] usb 2-1: USB disconnect, device number 8 [ 872.212797][ T5935] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 872.375986][ T5935] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 872.385256][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.394437][ T5935] usb 2-1: Product: syz [ 872.398611][ T5935] usb 2-1: Manufacturer: syz [ 872.403278][ T5935] usb 2-1: SerialNumber: syz [ 872.410079][ T5935] usb 2-1: config 0 descriptor?? [ 872.418527][ T5935] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 873.637450][ T5935] gspca_sunplus: reg_w_riv err -71 [ 873.645244][ T5935] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 873.658207][ T5935] usb 2-1: USB disconnect, device number 9 [ 874.612496][ T48] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 874.785781][ T48] usb 2-1: config 8 has an invalid interface number: 22 but max is 0 [ 874.806043][ T48] usb 2-1: config 8 has no interface number 0 [ 874.812150][ T48] usb 2-1: config 8 interface 22 has no altsetting 0 [ 874.837458][ T48] usb 2-1: New USB device found, idVendor=057c, idProduct=8403, bcdDevice=42.7d [ 874.862435][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.870636][ T48] usb 2-1: Product: syz [ 874.882408][ T48] usb 2-1: Manufacturer: syz [ 874.887031][ T48] usb 2-1: SerialNumber: syz [ 875.134089][ T48] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 875.155099][ T48] usb 2-1: USB disconnect, device number 10 [ 875.477936][ T30] audit: type=1804 audit(2000001504.754:3379): pid=1919 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.12494" name="/newroot/2114/file0" dev="tmpfs" ino=10773 res=1 errno=0 [ 875.878619][ T30] audit: type=1400 audit(2000001505.154:3380): avc: denied { name_bind } for pid=1922 comm="syz.4.12496" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 875.963606][ T118] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 876.115181][ T118] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 876.127144][ T118] usb 2-1: config 0 has no interface number 0 [ 876.140121][ T118] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.156567][ T118] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.168685][ T118] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 876.184872][ T118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.198052][ T118] usb 2-1: config 0 descriptor?? [ 876.447801][ T30] audit: type=1400 audit(2000001505.724:3381): avc: denied { accept } for pid=1934 comm="syz.4.12502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 876.625149][ T118] uclogic 0003:256C:006D.00C4: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input1 [ 876.815481][ T118] usb 2-1: USB disconnect, device number 11 [ 878.227913][ T1957] netlink: 'syz.1.12511': attribute type 2 has an invalid length. [ 878.239636][ T1957] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12511'. [ 878.255218][ T1957] nbd: must specify a device to reconfigure [ 878.354254][ T1958] block nbd4: shutting down sockets [ 879.187932][ T1980] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 879.219433][ T1980] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4230725332 (8461450664 ns) > initial count (7339279930 ns). Using initial count to start timer. [ 879.335496][ T1982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12521'. [ 879.345899][ T1982] netlink: 'syz.4.12521': attribute type 30 has an invalid length. [ 879.361022][ T1982] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.371290][ T1982] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.381743][ T1982] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.391976][ T1982] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.406244][ T1982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12521'. [ 879.416313][ T1982] netlink: 'syz.4.12521': attribute type 30 has an invalid length. [ 880.092564][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1008.733503][ T31] INFO: task kworker/1:4:5876 blocked for more than 143 seconds. [ 1008.741272][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 1008.749456][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1008.758794][ T31] task:kworker/1:4 state:D stack:21464 pid:5876 tgid:5876 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1008.771340][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1008.778556][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1008.781814][ T31] [ 1008.785741][ T31] __schedule+0x116a/0x5de0 [ 1008.790237][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 1008.796223][ T30] audit: type=1400 audit(2000001638.064:3382): avc: denied { write } for pid=5804 comm="syz-executor" path="pipe:[4343]" dev="pipefs" ino=4343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1008.820961][ T31] ? __pfx___schedule+0x10/0x10 [ 1008.826977][ T31] ? find_held_lock+0x2b/0x80 [ 1008.831676][ T31] ? schedule+0x2d7/0x3a0 [ 1008.841689][ T31] schedule+0xe7/0x3a0 [ 1008.846834][ T31] schedule_preempt_disabled+0x13/0x30 [ 1008.852315][ T31] __mutex_lock+0x6c7/0xb90 [ 1008.857892][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 1008.865427][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1008.870685][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1008.878435][ T31] ? finish_task_switch.isra.0+0x221/0xc10 [ 1008.916870][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 1008.930944][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 1008.941342][ T31] process_one_work+0x9cf/0x1b70 [ 1008.951201][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1008.956773][ T31] ? assign_work+0x1a0/0x250 [ 1008.961383][ T31] worker_thread+0x6c8/0xf10 [ 1008.966694][ T31] ? __kthread_parkme+0x19e/0x250 [ 1008.971737][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1008.977547][ T31] kthread+0x3c2/0x780 [ 1008.981603][ T31] ? __pfx_kthread+0x10/0x10 [ 1008.986992][ T31] ? rcu_is_watching+0x12/0xc0 [ 1008.991744][ T31] ? __pfx_kthread+0x10/0x10 [ 1008.996933][ T31] ret_from_fork+0x5d4/0x6f0 [ 1009.001534][ T31] ? __pfx_kthread+0x10/0x10 [ 1009.006651][ T31] ret_from_fork_asm+0x1a/0x30 [ 1009.011407][ T31] [ 1009.014998][ T31] INFO: task kworker/1:0:32480 blocked for more than 143 seconds. [ 1009.023854][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 1009.031473][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1009.040671][ T31] task:kworker/1:0 state:D stack:23752 pid:32480 tgid:32480 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1009.053396][ T31] Workqueue: events rfkill_sync_work [ 1009.058706][ T31] Call Trace: [ 1009.061963][ T31] [ 1009.065934][ T31] __schedule+0x116a/0x5de0 [ 1009.070447][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 1009.075923][ T31] ? __pfx___schedule+0x10/0x10 [ 1009.080762][ T31] ? find_held_lock+0x2b/0x80 [ 1009.086650][ T31] ? schedule+0x2d7/0x3a0 [ 1009.090988][ T31] schedule+0xe7/0x3a0 [ 1009.095643][ T31] schedule_preempt_disabled+0x13/0x30 [ 1009.101087][ T31] __mutex_lock+0x6c7/0xb90 [ 1009.106120][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1009.111130][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 1009.116267][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1009.121282][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1009.126839][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 1009.131415][ T31] ? mark_held_locks+0x49/0x80 [ 1009.136981][ T31] nfc_dev_down+0x2d/0x2e0 [ 1009.141391][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 1009.146960][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1009.153720][ T31] rfkill_set_block+0x1fe/0x550 [ 1009.158579][ T31] rfkill_sync+0x10a/0x1c0 [ 1009.163565][ T31] rfkill_sync_work+0x27/0x40 [ 1009.168226][ T31] process_one_work+0x9cf/0x1b70 [ 1009.174197][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1009.179576][ T31] ? assign_work+0x1a0/0x250 [ 1009.185219][ T31] worker_thread+0x6c8/0xf10 [ 1009.189811][ T31] ? __kthread_parkme+0x19e/0x250 [ 1009.195234][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1009.200326][ T31] kthread+0x3c2/0x780 [ 1009.204410][ T31] ? __pfx_kthread+0x10/0x10 [ 1009.208978][ T31] ? rcu_is_watching+0x12/0xc0 [ 1009.214084][ T31] ? __pfx_kthread+0x10/0x10 [ 1009.218681][ T31] ret_from_fork+0x5d4/0x6f0 [ 1009.224269][ T31] ? __pfx_kthread+0x10/0x10 [ 1009.228866][ T31] ret_from_fork_asm+0x1a/0x30 [ 1009.234196][ T31] [ 1009.237209][ T31] INFO: task syz.0.12178:1167 blocked for more than 143 seconds. [ 1009.245930][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 1009.254100][ T31] Blocked by coredump. [ 1009.258661][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1009.267850][ T31] task:syz.0.12178 state:D stack:27672 pid:1167 tgid:1167 ppid:5827 task_flags:0x40044c flags:0x00004006 [ 1009.280370][ T31] Call Trace: [ 1009.284284][ T31] [ 1009.287212][ T31] __schedule+0x116a/0x5de0 [ 1009.291719][ T31] ? __lock_acquire+0x622/0x1c90 [ 1009.297866][ T31] ? __pfx___schedule+0x10/0x10 [ 1009.303903][ T31] ? find_held_lock+0x2b/0x80 [ 1009.308588][ T31] ? schedule+0x2d7/0x3a0 [ 1009.313957][ T31] schedule+0xe7/0x3a0 [ 1009.318034][ T31] schedule_preempt_disabled+0x13/0x30 [ 1009.324031][ T31] __mutex_lock+0x6c7/0xb90 [ 1009.328524][ T31] ? rfkill_unregister+0xec/0x2c0 [ 1009.334552][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1009.339601][ T31] ? device_del+0x6b6/0x9f0 [ 1009.345151][ T31] ? __pfx_device_del+0x10/0x10 [ 1009.350005][ T31] ? _raw_read_unlock+0x28/0x50 [ 1009.355430][ T31] ? rfkill_unregister+0xec/0x2c0 [ 1009.360448][ T31] rfkill_unregister+0xec/0x2c0 [ 1009.365824][ T31] hci_unregister_dev+0x337/0x640 [ 1009.370833][ T31] ? __pfx_vhci_release+0x10/0x10 [ 1009.376386][ T31] vhci_release+0x79/0xf0 [ 1009.380707][ T31] __fput+0x402/0xb70 [ 1009.385283][ T31] task_work_run+0x150/0x240 [ 1009.389868][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1009.395741][ T31] do_exit+0x86c/0x2bd0 [ 1009.399898][ T31] ? __pfx_do_exit+0x10/0x10 [ 1009.405031][ T31] ? cgroup_update_frozen_flag+0x107/0x210 [ 1009.410822][ T31] ? find_held_lock+0x2b/0x80 [ 1009.416168][ T31] do_group_exit+0xd3/0x2a0 [ 1009.420665][ T31] get_signal+0x2673/0x26d0 [ 1009.425718][ T31] ? hrtimer_nanosleep+0x187/0x380 [ 1009.430817][ T31] ? __pfx_get_signal+0x10/0x10 [ 1009.436194][ T31] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1009.441376][ T31] arch_do_signal_or_restart+0x8f/0x7d0 [ 1009.447234][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1009.453457][ T31] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 1009.459618][ T31] exit_to_user_mode_loop+0x84/0x110 [ 1009.464970][ T31] do_syscall_64+0x3f6/0x4c0 [ 1009.469671][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.475939][ T31] RIP: 0033:0x7f0c0cbc11e5 [ 1009.480353][ T31] RSP: 002b:00007f0c0a9f5f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1009.488816][ T31] RAX: fffffffffffffdfc RBX: 00007f0c0cdb5fa0 RCX: 00007f0c0cbc11e5 [ 1009.496868][ T31] RDX: 00007f0c0a9f5fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1009.505418][ T31] RBP: 00007f0c0cc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1009.514058][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1009.522029][ T31] R13: 0000000000000000 R14: 00007f0c0cdb5fa0 R15: 00007ffdd99e7dc8 [ 1009.530637][ T31] [ 1009.534617][ T31] INFO: task syz.5.12194:1205 blocked for more than 144 seconds. [ 1009.545908][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 1009.553709][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1009.562495][ T31] task:syz.5.12194 state:D stack:27128 pid:1205 tgid:1204 ppid:18833 task_flags:0x400140 flags:0x00004004 [ 1009.574628][ T31] Call Trace: [ 1009.577906][ T31] [ 1009.580818][ T31] __schedule+0x116a/0x5de0 [ 1009.585433][ T31] ? __lock_acquire+0x622/0x1c90 [ 1009.590394][ T31] ? __pfx___schedule+0x10/0x10 [ 1009.595344][ T31] ? find_held_lock+0x2b/0x80 [ 1009.600022][ T31] ? schedule+0x2d7/0x3a0 [ 1009.604390][ T31] schedule+0xe7/0x3a0 [ 1009.608459][ T31] schedule_timeout+0x257/0x290 [ 1009.613623][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1009.619010][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1009.624327][ T31] __wait_for_common+0x2ff/0x4e0 [ 1009.629273][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1009.634752][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1009.640220][ T31] ? find_held_lock+0x2b/0x80 [ 1009.644956][ T31] ? __flush_work+0x938/0xcc0 [ 1009.649642][ T31] ? __flush_work+0x4d0/0xcc0 [ 1009.654390][ T31] __flush_work+0x7d7/0xcc0 [ 1009.658888][ T31] ? __pfx___flush_work+0x10/0x10 [ 1009.664020][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 1009.669318][ T31] ? __pfx___might_resched+0x10/0x10 [ 1009.674661][ T31] __cancel_work_sync+0x10c/0x130 [ 1009.679681][ T31] rfkill_unregister+0x95/0x2c0 [ 1009.684615][ T31] nfc_unregister_device+0x94/0x330 [ 1009.689823][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1009.695562][ T31] virtual_ncidev_close+0x4b/0xa0 [ 1009.700567][ T31] __fput+0x402/0xb70 [ 1009.704637][ T31] task_work_run+0x150/0x240 [ 1009.709228][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1009.714355][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 1009.720079][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 1009.725421][ T31] do_syscall_64+0x3f6/0x4c0 [ 1009.730037][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.736002][ T31] RIP: 0033:0x7f9d1f98e929 [ 1009.740415][ T31] RSP: 002b:00007f9d2089d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1009.748903][ T31] RAX: 0000000000000000 RBX: 00007f9d1fbb5fa0 RCX: 00007f9d1f98e929 [ 1009.757529][ T31] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1009.766213][ T31] RBP: 00007f9d1fa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1009.774864][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1009.783727][ T31] R13: 0000000000000000 R14: 00007f9d1fbb5fa0 R15: 00007ffd7f044278 [ 1009.791709][ T31] [ 1009.795429][ T31] INFO: task syz-executor:1657 blocked for more than 144 seconds. [ 1009.803845][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 1009.811452][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1009.820667][ T31] task:syz-executor state:D stack:28440 pid:1657 tgid:1657 ppid:1 task_flags:0x400040 flags:0x00004000 [ 1009.833279][ T31] Call Trace: [ 1009.836557][ T31] [ 1009.839499][ T31] __schedule+0x116a/0x5de0 [ 1009.845078][ T31] ? __lock_acquire+0x622/0x1c90 [ 1009.850040][ T31] ? __pfx___schedule+0x10/0x10 [ 1009.857844][ T31] ? find_held_lock+0x2b/0x80 [ 1009.862803][ T31] ? schedule+0x2d7/0x3a0 [ 1009.867145][ T31] schedule+0xe7/0x3a0 [ 1009.871196][ T31] schedule_preempt_disabled+0x13/0x30 [ 1009.876812][ T31] __mutex_lock+0x6c7/0xb90 [ 1009.881351][ T31] ? rfkill_register+0x3a/0xb40 [ 1009.886227][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1009.891252][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 1009.896680][ T31] ? __init_waitqueue_head+0xca/0x150 [ 1009.902045][ T31] ? rfkill_register+0x3a/0xb40 [ 1009.907158][ T31] ? rfkill_alloc+0x25b/0x330 [ 1009.911834][ T31] rfkill_register+0x3a/0xb40 [ 1009.916585][ T31] hci_register_dev+0x3cc/0xc60 [ 1009.921448][ T31] __vhci_create_device+0x357/0x7f0 [ 1009.926657][ T31] vhci_write+0x2c0/0x480 [ 1009.930979][ T31] vfs_write+0x6c4/0x1150 [ 1009.935459][ T31] ? __pfx_vhci_write+0x10/0x10 [ 1009.940331][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1009.945195][ T31] ? find_held_lock+0x2b/0x80 [ 1009.949882][ T31] ? find_held_lock+0x2b/0x80 [ 1009.954638][ T31] ksys_write+0x12a/0x250 [ 1009.958962][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1009.963918][ T31] do_syscall_64+0xcd/0x4c0 [ 1009.968442][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.975138][ T31] RIP: 0033:0x7f43b958d3a0 [ 1009.979564][ T31] RSP: 002b:00007fff1d779af8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1009.988066][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f43b958d3a0 [ 1009.996080][ T31] RDX: 0000000000000002 RSI: 00007fff1d779b0a RDI: 00000000000000ca [ 1010.004094][ T31] RBP: 00007f43b97b6738 R08: 0000000000000000 R09: 00007f43ba2ed6c0 [ 1010.012070][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1010.020221][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1010.028255][ T31] [ 1010.031274][ T31] INFO: task syz-executor:1685 blocked for more than 144 seconds. [ 1010.039092][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 1010.046714][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1010.055416][ T31] task:syz-executor state:D stack:28712 pid:1685 tgid:1685 ppid:1 task_flags:0x400040 flags:0x00004000 [ 1010.067403][ T31] Call Trace: [ 1010.070668][ T31] [ 1010.073625][ T31] __schedule+0x116a/0x5de0 [ 1010.078132][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1010.083610][ T31] ? stack_depot_save_flags+0x28/0xa40 [ 1010.089077][ T31] ? kasan_save_track+0x14/0x30 [ 1010.093984][ T31] ? __lock_acquire+0x622/0x1c90 [ 1010.098943][ T31] ? __pfx___schedule+0x10/0x10 [ 1010.103835][ T31] ? find_held_lock+0x2b/0x80 [ 1010.108522][ T31] ? schedule+0x2d7/0x3a0 [ 1010.112917][ T31] schedule+0xe7/0x3a0 [ 1010.116986][ T31] schedule_preempt_disabled+0x13/0x30 [ 1010.122454][ T31] __mutex_lock+0x6c7/0xb90 [ 1010.126962][ T31] ? rfkill_register+0x3a/0xb40 [ 1010.131793][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1010.136838][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 1010.142198][ T31] ? __init_waitqueue_head+0xca/0x150 [ 1010.147590][ T31] ? rfkill_register+0x3a/0xb40 [ 1010.152470][ T31] ? rfkill_alloc+0x25b/0x330 [ 1010.157142][ T31] rfkill_register+0x3a/0xb40 [ 1010.161806][ T31] hci_register_dev+0x3cc/0xc60 [ 1010.166669][ T31] __vhci_create_device+0x357/0x7f0 [ 1010.171850][ T31] vhci_write+0x2c0/0x480 [ 1010.176319][ T31] vfs_write+0x6c4/0x1150 [ 1010.180652][ T31] ? __pfx_vhci_write+0x10/0x10 [ 1010.185539][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1010.190318][ T31] ? find_held_lock+0x2b/0x80 [ 1010.195042][ T31] ? find_held_lock+0x2b/0x80 [ 1010.199722][ T31] ksys_write+0x12a/0x250 [ 1010.204090][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1010.208946][ T31] do_syscall_64+0xcd/0x4c0 [ 1010.213450][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.219320][ T31] RIP: 0033:0x7f4da1f8d3a0 [ 1010.223786][ T31] RSP: 002b:00007ffd70f04998 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1010.232200][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4da1f8d3a0 [ 1010.240188][ T31] RDX: 0000000000000002 RSI: 00007ffd70f049aa RDI: 00000000000000ca [ 1010.248182][ T31] RBP: 00007f4da21b6738 R08: 0000000000000000 R09: 00007f4da2ced6c0 [ 1010.256420][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1010.264462][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1010.272503][ T31] [ 1010.275542][ T31] [ 1010.275542][ T31] Showing all locks held in the system: [ 1010.283294][ T31] 1 lock held by khungtaskd/31: [ 1010.288131][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1010.298007][ T31] 2 locks held by getty/5576: [ 1010.302693][ T31] #0: ffff8880328d50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1010.312509][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1010.322695][ T31] 3 locks held by kworker/1:4/5876: [ 1010.327887][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1010.338376][ T31] #1: ffffc90003dafd10 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1010.351272][ T31] #2: ffffffff907edd28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 1010.362734][ T31] 8 locks held by kworker/u8:10/23230: [ 1010.368200][ T31] 1 lock held by syz.2.8195/24407: [ 1010.373340][ T31] #0: ffffffff907edd28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 1010.383475][ T31] 4 locks held by kworker/1:0/32480: [ 1010.388757][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1010.399245][ T31] #1: ffffc90005647d10 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1010.410995][ T31] #2: ffffffff907edd28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x1b/0x40 [ 1010.421145][ T31] #3: ffff88807e482100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 1010.430357][ T31] 1 lock held by syz.0.12178/1167: [ 1010.435472][ T31] #0: ffffffff907edd28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 1010.445577][ T31] 1 lock held by syz.5.12194/1205: [ 1010.450675][ T31] #0: ffff88807e482100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 1010.460438][ T31] 2 locks held by syz-executor/1657: [ 1010.465724][ T31] #0: ffff888056a5b118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 1010.475120][ T31] #1: ffffffff907edd28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 1010.485063][ T31] 2 locks held by syz-executor/1685: [ 1010.490334][ T31] #0: ffff88802ccfa918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 1010.500627][ T31] #1: ffffffff907edd28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 1010.510781][ T31] 3 locks held by syz.4.12524/1988: [ 1010.516007][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1010.524471][ T31] #1: ffff888032ff7100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9a/0x3c0 [ 1010.534094][ T31] #2: ffffffff907edd28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 1010.544043][ T31] 1 lock held by syz.1.12525/1994: [ 1010.549143][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1010.557592][ T31] 1 lock held by syz-executor/1997: [ 1010.562800][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1010.571258][ T31] 1 lock held by syz-executor/2000: [ 1010.576505][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1010.584959][ T31] 1 lock held by syz-executor/2001: [ 1010.590142][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1010.598583][ T31] 1 lock held by syz-executor/2003: [ 1010.603808][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1010.612276][ T31] 1 lock held by syz-executor/2005: [ 1010.617510][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1010.626012][ T31] 1 lock held by syz-executor/2007: [ 1010.631197][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1010.639659][ T31] 1 lock held by syz-executor/2010: [ 1010.644848][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1010.653564][ T31] 1 lock held by syz-executor/2011: [ 1010.658801][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1010.667294][ T31] 1 lock held by syz-executor/2013: [ 1010.672504][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1010.680964][ T31] 1 lock held by syz-executor/2015: [ 1010.686156][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1010.694632][ T31] 1 lock held by syz-executor/2017: [ 1010.699817][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1010.708270][ T31] [ 1010.710572][ T31] ============================================= [ 1010.710572][ T31] [ 1010.718987][ T31] NMI backtrace for cpu 1 [ 1010.718999][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1010.719012][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1010.719020][ T31] Call Trace: [ 1010.719024][ T31] [ 1010.719029][ T31] dump_stack_lvl+0x116/0x1f0 [ 1010.719049][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1010.719062][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1010.719079][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1010.719095][ T31] watchdog+0xf70/0x12c0 [ 1010.719111][ T31] ? __pfx_watchdog+0x10/0x10 [ 1010.719122][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1010.719139][ T31] ? __kthread_parkme+0x19e/0x250 [ 1010.719155][ T31] ? __pfx_watchdog+0x10/0x10 [ 1010.719167][ T31] kthread+0x3c2/0x780 [ 1010.719177][ T31] ? __pfx_kthread+0x10/0x10 [ 1010.719188][ T31] ? rcu_is_watching+0x12/0xc0 [ 1010.719203][ T31] ? __pfx_kthread+0x10/0x10 [ 1010.719213][ T31] ret_from_fork+0x5d4/0x6f0 [ 1010.719229][ T31] ? __pfx_kthread+0x10/0x10 [ 1010.719239][ T31] ret_from_fork_asm+0x1a/0x30 [ 1010.719258][ T31] [ 1010.719262][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1010.837137][ C0] NMI backtrace for cpu 0 [ 1010.837151][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1010.837176][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1010.837188][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1010.837219][ C0] Code: ab 71 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 30 29 00 fb f4 0c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1010.837238][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c6 [ 1010.837254][ C0] RAX: 000000000050e44d RBX: 0000000000000000 RCX: ffffffff8b80dc69 [ 1010.837267][ C0] RDX: 0000000000000000 RSI: ffffffff8de1a0ee RDI: ffffffff8c157ca0 [ 1010.837280][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 1010.837293][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 1010.837305][ C0] R13: ffffffff8e297780 R14: ffffffff90a80d50 R15: 0000000000000000 [ 1010.837318][ C0] FS: 0000000000000000(0000) GS:ffff888124752000(0000) knlGS:0000000000000000 [ 1010.837336][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1010.837349][ C0] CR2: 0000555feb95db48 CR3: 000000000e382000 CR4: 00000000003526f0 [ 1010.837361][ C0] Call Trace: [ 1010.837367][ C0] [ 1010.837374][ C0] default_idle+0x13/0x20 [ 1010.837391][ C0] default_idle_call+0x6d/0xb0 [ 1010.837408][ C0] do_idle+0x391/0x510 [ 1010.837432][ C0] ? __pfx_do_idle+0x10/0x10 [ 1010.837455][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 1010.837484][ C0] cpu_startup_entry+0x4f/0x60 [ 1010.837507][ C0] rest_init+0x16b/0x2b0 [ 1010.837529][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1010.837551][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1010.837578][ C0] start_kernel+0x3ee/0x4d0 [ 1010.837602][ C0] x86_64_start_reservations+0x18/0x30 [ 1010.837626][ C0] x86_64_start_kernel+0x130/0x190 [ 1010.837654][ C0] common_startup_64+0x13e/0x148 [ 1010.837684][ C0] [ 1010.838302][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1011.036901][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1011.048691][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1011.058736][ T31] Call Trace: [ 1011.062002][ T31] [ 1011.064922][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1011.069514][ T31] panic+0x71c/0x800 [ 1011.073411][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1011.079331][ T31] ? __pfx_panic+0x10/0x10 [ 1011.083740][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1011.089107][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1011.095080][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1011.100452][ T31] ? watchdog+0xdda/0x12c0 [ 1011.104859][ T31] ? watchdog+0xdcd/0x12c0 [ 1011.109268][ T31] watchdog+0xdeb/0x12c0 [ 1011.113504][ T31] ? __pfx_watchdog+0x10/0x10 [ 1011.118167][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1011.123363][ T31] ? __kthread_parkme+0x19e/0x250 [ 1011.128387][ T31] ? __pfx_watchdog+0x10/0x10 [ 1011.133065][ T31] kthread+0x3c2/0x780 [ 1011.137129][ T31] ? __pfx_kthread+0x10/0x10 [ 1011.141707][ T31] ? rcu_is_watching+0x12/0xc0 [ 1011.146461][ T31] ? __pfx_kthread+0x10/0x10 [ 1011.151036][ T31] ret_from_fork+0x5d4/0x6f0 [ 1011.155619][ T31] ? __pfx_kthread+0x10/0x10 [ 1011.160199][ T31] ret_from_fork_asm+0x1a/0x30 [ 1011.164972][ T31] [ 1011.168176][ T31] Kernel Offset: disabled [ 1011.172479][ T31] Rebooting in 86400 seconds..