last executing test programs: 43.586484826s ago: executing program 3 (id=1367): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) recvmsg(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/242, 0xf2}], 0x1}, 0x40) 43.525309097s ago: executing program 3 (id=1368): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000080000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) 43.240062918s ago: executing program 3 (id=1372): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 43.058876776s ago: executing program 3 (id=1374): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 42.914303865s ago: executing program 3 (id=1378): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="05c164fd53fcb2e8", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 42.842524057s ago: executing program 3 (id=1379): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 42.621421831s ago: executing program 32 (id=1379): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 3.396990434s ago: executing program 5 (id=1859): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg$can_j1939(r2, &(0x7f0000004940)={0x0, 0x0, 0x0}, 0x0) 3.286592285s ago: executing program 5 (id=1861): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x5, 0xffffffff]}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 1.95310192s ago: executing program 0 (id=1891): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_setup(0x2295, &(0x7f0000001400)={0x0, 0xec25, 0x20, 0x2, 0xd1}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x114, &(0x7f0000000180)=0xfffffffd, 0x0, 0x4) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="03c8009699b0bd401bd9f00f26dc5359cd1e2c836e4d8ce04808dd1cd023f9be18a6e15cf3fc6f"], 0x9a) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) 1.931664638s ago: executing program 0 (id=1893): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) 1.892629211s ago: executing program 0 (id=1894): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/29, 0x1d) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.855610416s ago: executing program 0 (id=1895): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="e647f8c4dc935c2243790d3b957d276dc04f77fb8ea704f31a85eeb9fcc6976ff8", 0x21}], 0x1}}], 0x1, 0x40408c1) recvmmsg(r0, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/32, 0x20}, {0x0, 0x3c}], 0x2}, 0x80}], 0x1, 0x10002, 0x0) 1.825750438s ago: executing program 0 (id=1896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r2, 0xc01, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x4040) 1.793033451s ago: executing program 0 (id=1897): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x24, &(0x7f00000000c0)={0x0, 0x13, 0x6, "fc19d02303f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 1.534023039s ago: executing program 2 (id=1902): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 1.508483656s ago: executing program 2 (id=1903): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000810}], 0x1, 0x810) recvmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000008c0)=""/21, 0x15}], 0x1}}], 0x1, 0x0, 0x0) 1.481939109s ago: executing program 2 (id=1904): socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2020) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 1.408957542s ago: executing program 1 (id=1905): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x1) 1.386459028s ago: executing program 2 (id=1906): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.288573862s ago: executing program 1 (id=1907): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') close_range(r1, 0xffffffffffffffff, 0x0) 1.247663764s ago: executing program 1 (id=1909): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000100)) 1.121897519s ago: executing program 1 (id=1910): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 1.078680347s ago: executing program 5 (id=1911): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000240)=@x86={0x0, 0x2, 0x84, 0x0, 0x1, 0x5, 0x3, 0x4, 0x80, 0x10, 0x3, 0xbe, 0x0, 0x7f, 0x4, 0xf0, 0xd5, 0x8, 0x6, '\x00', 0xc, 0x21}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000e40)={0x0, 0x0, @ioapic={0x1000, 0xffffffff, 0x40, 0x4, 0x0, [{0x1, 0x85, 0x8, '\x00', 0x6}, {0xb, 0x0, 0x0, '\x00', 0xa}, {0xd, 0x8, 0x6, '\x00', 0xff}, {0xf2, 0x8, 0x10, '\x00', 0x9}, {0x9, 0x1, 0x3, '\x00', 0xb}, {0x2, 0x3, 0x9, '\x00', 0x1}, {0x5, 0x3, 0xf7, '\x00', 0xf3}, {0x0, 0xa, 0x40, '\x00', 0x3}, {0x80, 0x74, 0x3, '\x00', 0xd}, {0xe7, 0xfe, 0xfe, '\x00', 0xf}, {0xbe, 0x1, 0x4, '\x00', 0x2}, {0x8, 0x5, 0xf, '\x00', 0x7f}, {0xa6, 0x0, 0xd, '\x00', 0x1c}, {0x15, 0x8, 0x0, '\x00', 0x6}, {0x4, 0x4d, 0x9, '\x00', 0x1}, {0x9, 0xa, 0x9, '\x00', 0x2}, {0x5, 0x8, 0x81, '\x00', 0x3}, {0x7, 0x7, 0x90, '\x00', 0xfe}, {0xfd, 0x5, 0x5, '\x00', 0x7f}, {0xfd, 0x3, 0xe2, '\x00', 0x2}, {0x0, 0x2, 0x7, '\x00', 0x6}, {0x0, 0xfe, 0xfd, '\x00', 0xc2}, {0xe, 0x11, 0x2, '\x00', 0xfd}, {0xd, 0x9, 0x8e, '\x00', 0x8}]}}) 882.614134ms ago: executing program 2 (id=1913): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x1) 811.274096ms ago: executing program 5 (id=1915): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4c20, @remote}, 0x51) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)="bcead8e7f088fcbb790894658f0d2c3b321133a759b23fa83cae501c37843aa6447d9a126fb20c288a5f9ece06d7f0ff0f0391f6b30ac2b09a4a178dedaec6014dcfac0907168c26a736746d723e88af53c2a2d64c5fe023fe3418597e45c1fac1b615c87b4930eaffe0a83ae90ae2eb0637d3fd9906176133d439a5f2ff9c4d9af8414ac3db6a7c3f5f862fc404134c40e51f", 0x93}, {&(0x7f0000000480)="0b1ffa181756389587fa250ce899480c37", 0x11}, {&(0x7f00000004c0)="c4b315d83789e16eabe291c247e53135ea142b687556296470297f59048df949d0445754b885eb04dc216c39c8edec540337b83a0833677cd1d744018d17fd62a072f662f64b8d3686f223c5ecb309bde3e17eaf12aff36c016b6a9f988f6b973079b2991c752dd7e89eb150182ae11861a98c4026eaa4259948e75d04de62a6f623db0610ed161c1bfa7fc2b7f6e50fb2f1292df029bf837e6ba8f024b61287f8e7d2d218559d214056ebbce97f08", 0xaf}, {&(0x7f0000000740)="89f7bcc33b3018dd312ea098c9e17fe34a7e5a282b0697f6e406156d06481e803e3949a572770a3cc30ac413b6c741957f36e4678fc1f289f98cd23009d9a4e21d7ef750932c1a11380670373742dfc0f1efcf01032494901545b2d5744f9cb808cea16ba3c86f5322211a46c66de9466dfb5ad43006640b40f9e3501f26f4028c896760015974f001736dda1617e9f3c43e381b70219ba5642cddc1c10e3e9e22350e007817a9ada1998bf4e8abced7380690ce07d0b19eb0c64e3c", 0xbc}], 0x4}}], 0x1, 0x40000) sendmmsg$inet(r0, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="8113f7bf", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000700)="3e77f80c", 0x4}], 0x26}}], 0x2, 0x4805) 748.546922ms ago: executing program 5 (id=1916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 689.335501ms ago: executing program 2 (id=1918): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000080000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000010180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 634.891178ms ago: executing program 4 (id=1919): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/prev\x00') read$FUSE(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETLINK(r0, 0x400454cd, 0x101) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x3fc) 525.221741ms ago: executing program 4 (id=1920): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf535}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) 524.321758ms ago: executing program 5 (id=1921): r0 = socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) 372.597071ms ago: executing program 4 (id=1922): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x18100, 0x0) lseek(r2, 0x0, 0x0) 274.564534ms ago: executing program 4 (id=1923): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) shutdown(r0, 0x1) 144.779992ms ago: executing program 1 (id=1924): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x0, 0x2, 0x4, 0x1, 0x1}, 0x4) 70.474563ms ago: executing program 4 (id=1925): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x40000}, 0x18) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000340)={&(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x10000}) 6.758381ms ago: executing program 1 (id=1926): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r0) 0s ago: executing program 4 (id=1927): setreuid(0x0, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x40015) kernel console output (not intermixed with test programs): 0:408): avc: denied { relabelto } for pid=7592 comm="syz.4.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 126.634812][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'. [ 126.706179][ T7607] team_slave_0: entered promiscuous mode [ 126.712225][ T7607] team_slave_1: entered promiscuous mode [ 126.718090][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 126.752023][ T7607] macsec1: entered promiscuous mode [ 126.759430][ T7607] team0: entered promiscuous mode [ 126.765038][ T7607] macsec1: entered allmulticast mode [ 126.772203][ T7607] team0: entered allmulticast mode [ 126.777689][ T7607] team_slave_0: entered allmulticast mode [ 126.783511][ T7607] team_slave_1: entered allmulticast mode [ 126.792923][ T7607] team0: Device macsec1 is already an upper device of the team interface [ 126.793866][ T7582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.813635][ T7607] team0: left allmulticast mode [ 126.816485][ T7582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.820914][ T7607] team_slave_0: left allmulticast mode [ 126.832202][ T7607] team_slave_1: left allmulticast mode [ 126.839866][ T7607] team0: left promiscuous mode [ 126.840676][ T92] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 126.845292][ T7607] team_slave_0: left promiscuous mode [ 126.857785][ T7607] team_slave_1: left promiscuous mode [ 126.895339][ T7609] netlink: 'syz.4.700': attribute type 12 has an invalid length. [ 126.995286][ T30] audit: type=1400 audit(1754550279.210:409): avc: denied { name_connect } for pid=7612 comm="syz.4.701" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 127.018092][ T10] usb 1-1: USB disconnect, device number 13 [ 127.047915][ T92] usb 2-1: Using ep0 maxpacket: 16 [ 127.088128][ T92] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.113340][ T92] usb 2-1: config 0 has no interface number 0 [ 127.144179][ T92] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 127.200660][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.231942][ T92] usb 2-1: Product: syz [ 127.236150][ T92] usb 2-1: Manufacturer: syz [ 127.256527][ T92] usb 2-1: SerialNumber: syz [ 127.303369][ T92] usb 2-1: config 0 descriptor?? [ 127.341370][ T92] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 127.557334][ T5960] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 127.647337][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 127.720905][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.732200][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.744632][ T5960] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.766396][ T5960] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.775551][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.795832][ T5960] usb 3-1: config 0 descriptor?? [ 127.797279][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 127.809348][ T9] usb 5-1: config 0 has no interfaces? [ 127.815375][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 127.825146][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.839579][ T9] usb 5-1: config 0 descriptor?? [ 128.089097][ T9] usb 5-1: USB disconnect, device number 9 [ 128.230120][ T5960] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 128.287502][ T5953] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 128.367600][ T92] gspca_spca1528: reg_w err -71 [ 128.374002][ T92] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 128.385991][ T92] usb 2-1: USB disconnect, device number 12 [ 128.457309][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 128.463986][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.476564][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.490442][ T5960] usb 3-1: USB disconnect, device number 16 [ 128.497236][ T5953] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 128.508049][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.526291][ T5953] usb 4-1: config 0 descriptor?? [ 128.967607][ T5953] hid-multitouch 0003:1FD2:6007.0011: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 129.271130][ T5953] usb 4-1: USB disconnect, device number 15 [ 129.474426][ T7670] pim6reg1: entered promiscuous mode [ 129.486318][ T7670] pim6reg1: entered allmulticast mode [ 129.538066][ T5217] udevd[5217]: worker [5833] terminated by signal 33 (Unknown signal 33) [ 129.550329][ T5217] udevd[5217]: worker [5833] failed while handling '/devices/virtual/block/loop1' [ 129.584321][ T7674] syz_tun: entered promiscuous mode [ 129.593043][ T7674] syz_tun: left promiscuous mode [ 130.109149][ T30] audit: type=1400 audit(1754550282.330:410): avc: denied { execute } for pid=7694 comm="syz.2.735" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 130.117238][ T92] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 130.241115][ T7697] all (unregistering): Released all slaves [ 130.303234][ T9] kernel read not supported for file /dsp (pid: 9 comm: kworker/0:0) [ 130.312657][ T92] usb 4-1: Using ep0 maxpacket: 16 [ 130.323749][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.335055][ T92] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.365105][ T92] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 130.387257][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.408049][ T92] usb 4-1: config 0 descriptor?? [ 130.687255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 130.721917][ T7708] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 130.834191][ T92] HID 045e:07da: Invalid code 65791 type 1 [ 130.886168][ T92] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0012/input/input32 [ 130.922218][ T30] audit: type=1400 audit(1754550283.130:411): avc: denied { name_bind } for pid=7712 comm="syz.4.743" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 130.966961][ T5854] Bluetooth: hci5: sending frame failed (-49) [ 130.977236][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 131.050593][ T92] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 131.257574][ T5953] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 131.377848][ T30] audit: type=1400 audit(1754550283.590:412): avc: denied { write } for pid=7723 comm="syz.1.747" name="file0" dev="tmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.412070][ T30] audit: type=1400 audit(1754550283.590:413): avc: denied { open } for pid=7723 comm="syz.1.747" path="/159/file0" dev="tmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.441548][ T30] audit: type=1400 audit(1754550283.590:414): avc: denied { ioctl } for pid=7723 comm="syz.1.747" path="/159/file0" dev="tmpfs" ino=835 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.470515][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.495020][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.517334][ T5953] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 131.526575][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.548626][ T5953] usb 5-1: config 0 descriptor?? [ 131.590808][ T7730] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 131.722233][ T5960] usb 4-1: USB disconnect, device number 16 [ 131.981830][ T5953] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 132.003252][ T5953] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 132.042146][ T5953] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0013/input/input33 [ 132.088114][ T5953] cm6533_jd 0003:0D8C:0022.0013: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 132.228934][ T5960] usb 5-1: USB disconnect, device number 10 [ 132.391828][ T5953] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 132.402753][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.402841][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.591894][ T5953] usb 3-1: Using ep0 maxpacket: 8 [ 132.608699][ T5953] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 132.631255][ T5953] usb 3-1: config 0 has no interface number 0 [ 132.642228][ T5953] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 132.653887][ T5953] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 132.666248][ T5953] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.691947][ T30] audit: type=1400 audit(1754550284.910:415): avc: denied { attach_queue } for pid=7765 comm="syz.3.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 132.717235][ T5953] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 132.737858][ T5953] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 132.756335][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.817988][ T5953] usb 3-1: config 0 descriptor?? [ 132.870238][ T5953] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 132.968418][ T30] audit: type=1400 audit(1754550285.190:416): avc: denied { mount } for pid=7775 comm="syz.3.770" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 132.989810][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.137628][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 133.164573][ T30] audit: type=1400 audit(1754550285.380:417): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 133.247469][ T5953] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 133.311087][ T9] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 133.320492][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.354039][ T9] usb 1-1: config 0 descriptor?? [ 133.405177][ T5953] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 133.427228][ T5953] usb 5-1: config 0 has no interface number 0 [ 133.444320][ T5953] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 133.468369][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.493888][ T5953] usb 5-1: Product: syz [ 133.504007][ T5953] usb 5-1: Manufacturer: syz [ 133.518155][ T5953] usb 5-1: SerialNumber: syz [ 133.538430][ T5953] usb 5-1: config 0 descriptor?? [ 133.562959][ T5953] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 133.596677][ T5953] ems_usb 5-1:0.204: probe with driver ems_usb failed with error -22 [ 133.629255][ T9] kaweth 1-1:0.0: Firmware present in device. [ 133.654113][ T92] usb 3-1: USB disconnect, device number 17 [ 133.654250][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 133.679169][ T92] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 133.796099][ T9] kaweth 1-1:0.0: Statistics collection: 0 [ 133.811929][ T9] kaweth 1-1:0.0: Multicast filter limit: 0 [ 133.818742][ T9] kaweth 1-1:0.0: MTU: 0 [ 133.823002][ T9] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 133.835812][ T5911] usb 5-1: USB disconnect, device number 11 [ 134.462460][ T9] kaweth 1-1:0.0: Error setting receive filter [ 134.488739][ T9] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 134.558998][ T9] usb 1-1: USB disconnect, device number 14 [ 134.720365][ T30] audit: type=1400 audit(1754550286.940:418): avc: denied { getopt } for pid=7816 comm="syz.2.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.742391][ T7817] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 135.017268][ T30] audit: type=1400 audit(1754550287.220:419): avc: denied { accept } for pid=7822 comm="syz.2.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.123674][ T7828] netlink: 'syz.3.787': attribute type 13 has an invalid length. [ 135.152015][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 135.176531][ T7828] netlink: 'syz.3.787': attribute type 13 has an invalid length. [ 135.184661][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.193814][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.205317][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 135.214336][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.248816][ T1155] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.373235][ T5953] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 135.577281][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 135.597312][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.611810][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.796'. [ 135.627208][ T5953] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.635245][ T5953] usb 5-1: config 0 has no interface number 0 [ 135.656273][ T5953] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.697447][ T5953] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.706968][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.737293][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 135.758364][ T5953] usb 5-1: config 0 descriptor?? [ 135.790204][ T5953] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 135.833452][ T30] audit: type=1400 audit(1754550288.050:420): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 135.927956][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 135.960683][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.978660][ T9] usb 4-1: Product: syz [ 135.983096][ T5953] usb 5-1: USB disconnect, device number 12 [ 135.988142][ T9] usb 4-1: Manufacturer: syz [ 136.012157][ T9] usb 4-1: SerialNumber: syz [ 136.043354][ T9] usb 4-1: config 0 descriptor?? [ 136.266907][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 137.277486][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 137.303432][ T9] usb 4-1: USB disconnect, device number 17 [ 137.449278][ T7896] futex_wake_op: syz.0.818 tries to shift op by -1; fix this program [ 137.585274][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.595220][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.749845][ T7910] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.822'. [ 137.878203][ T7914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.824'. [ 137.971418][ T7916] Bluetooth: hci0: unsupported parameter 2048 [ 137.996871][ T7916] Bluetooth: hci0: unsupported parameter 2048 [ 138.006943][ T7918] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.052159][ T30] audit: type=1400 audit(1754550290.270:421): avc: denied { bind } for pid=7917 comm="syz.4.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.373661][ T30] audit: type=1400 audit(1754550290.590:422): avc: denied { listen } for pid=7929 comm="syz.1.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.439798][ T30] audit: type=1400 audit(1754550290.590:423): avc: denied { accept } for pid=7929 comm="syz.1.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.917259][ T5897] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 139.025199][ T30] audit: type=1400 audit(1754550291.240:424): avc: denied { listen } for pid=7955 comm="syz.4.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.107525][ T5897] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 139.126815][ T5897] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 139.158212][ T5897] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 139.179878][ T5897] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 139.195626][ T30] audit: type=1400 audit(1754550291.410:425): avc: denied { create } for pid=7960 comm="syz.1.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 139.223614][ T5897] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 139.266338][ T30] audit: type=1400 audit(1754550291.480:426): avc: denied { read open } for pid=7966 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.267561][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 139.312087][ T30] audit: type=1400 audit(1754550291.520:427): avc: denied { getattr } for pid=7966 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.337354][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.357716][ T5897] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 139.367048][ T5897] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 139.393129][ T5897] usb 3-1: Product: syz [ 139.401676][ T5897] usb 3-1: Manufacturer: syz [ 139.428771][ T5897] usb 3-1: SerialNumber: syz [ 139.461136][ T5897] usb 3-1: config 0 descriptor?? [ 139.467070][ T7940] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.480356][ T5897] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 139.563554][ T5897] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 139.752220][ T30] audit: type=1400 audit(1754550291.970:428): avc: denied { add_name } for pid=7964 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.790122][ T30] audit: type=1400 audit(1754550291.970:429): avc: denied { create } for pid=7964 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.853468][ T30] audit: type=1400 audit(1754550291.970:430): avc: denied { write } for pid=7964 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=5696 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.910583][ T5897] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 140.087456][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 140.096216][ T5897] usb 4-1: config 6 has an invalid interface number: 171 but max is 0 [ 140.109630][ T5897] usb 4-1: config 6 has no interface number 0 [ 140.126011][ T5897] usb 4-1: config 6 interface 171 altsetting 8 endpoint 0x6 has invalid maxpacket 576, setting to 64 [ 140.158809][ T5897] usb 4-1: config 6 interface 171 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 140.197302][ T5897] usb 4-1: config 6 interface 171 altsetting 8 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 140.233350][ T5897] usb 4-1: config 6 interface 171 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 140.283627][ T5897] usb 4-1: config 6 interface 171 has no altsetting 0 [ 140.295220][ T10] usb 3-1: USB disconnect, device number 18 [ 140.322931][ T10] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 140.339549][ T5897] usb 4-1: Dual-Role OTG device on HNP port [ 140.348371][ T5897] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=d1.1e [ 140.378041][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.416216][ T5897] usb 4-1: Product: syz [ 140.430734][ T5897] usb 4-1: Manufacturer: syz [ 140.456152][ T5897] usb 4-1: SerialNumber: syz [ 140.598213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 140.621457][ T8020] input: syz0 as /devices/virtual/input/input34 [ 140.789467][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 140.897635][ T5897] usb_ehset_test 4-1:6.171: probe with driver usb_ehset_test failed with error -32 [ 140.981233][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.994328][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.004992][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 141.014482][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.028042][ T24] usb 5-1: config 0 descriptor?? [ 141.057401][ T5911] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 141.118673][ T5897] usb 4-1: USB disconnect, device number 18 [ 141.219593][ T5911] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.247326][ T5911] usb 1-1: config 0 has no interface number 0 [ 141.262145][ T5911] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 141.277785][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.291508][ T5911] usb 1-1: Product: syz [ 141.295915][ T5911] usb 1-1: Manufacturer: syz [ 141.303467][ T5911] usb 1-1: SerialNumber: syz [ 141.315320][ T5911] usb 1-1: config 0 descriptor?? [ 141.446167][ T24] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 141.471659][ T24] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 141.528247][ T5911] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 141.552063][ T5911] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 141.567418][ T8058] input: syz0 as /devices/virtual/input/input35 [ 141.577739][ T5911] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 141.592431][ T5911] usb 1-1: media controller created [ 141.623205][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.644049][ T24] cp2112 0003:10C4:EA90.0014: Part Number: 0xED Device Version: 0x46 [ 141.948890][ T8067] SELinux: failed to load policy [ 142.045436][ T24] cp2112 0003:10C4:EA90.0014: error setting SMBus config [ 142.098599][ T24] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -71 [ 142.116363][ T24] usb 5-1: USB disconnect, device number 13 [ 142.237362][ T92] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 142.402750][ T92] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.422542][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 142.433869][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 142.448074][ T92] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.461228][ T8092] 9pnet: p9_errstr2errno: server reported unknown error 6踷9抐00000000000000000003 [ 142.462749][ T92] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.480098][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.489913][ T92] usb 3-1: config 0 descriptor?? [ 142.495554][ T8071] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 142.719487][ T5911] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 142.954530][ T92] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 142.988124][ T5911] usb 1-1: USB disconnect, device number 15 [ 143.350585][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.905'. [ 143.950551][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 143.950571][ T30] audit: type=1400 audit(1754550296.170:443): avc: denied { connect } for pid=8143 comm="syz.4.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.144221][ T8155] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 144.198054][ T8157] netlink: 830 bytes leftover after parsing attributes in process `syz.3.921'. [ 144.257732][ T5911] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 144.419960][ T5911] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 144.432145][ T5911] usb 1-1: config 0 has no interface number 0 [ 144.461995][ T5911] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 144.472798][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.482245][ T5911] usb 1-1: Product: syz [ 144.486979][ T5911] usb 1-1: Manufacturer: syz [ 144.492235][ T5911] usb 1-1: SerialNumber: syz [ 144.496884][ T30] audit: type=1400 audit(1754550296.710:444): avc: denied { write } for pid=8166 comm="syz.4.925" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 144.503588][ T5911] usb 1-1: config 0 descriptor?? [ 144.519701][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.533923][ T5911] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 144.546455][ T5911] ems_usb 1-1:0.204: probe with driver ems_usb failed with error -22 [ 144.739793][ T8178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.843611][ T92] usb 1-1: USB disconnect, device number 16 [ 145.078213][ T5953] usb 3-1: USB disconnect, device number 19 [ 145.789792][ T30] audit: type=1400 audit(1754550298.000:445): avc: denied { view } for pid=8217 comm="syz.2.947" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 145.888156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 146.087322][ T5897] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 146.277306][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 146.286851][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.307633][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.327900][ T5897] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 146.354123][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.403575][ T5897] usb 3-1: config 0 descriptor?? [ 146.417492][ T8228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.827104][ T5897] cherry 0003:046A:0027.0016: unknown main item tag 0x0 [ 146.847547][ T5897] cherry 0003:046A:0027.0016: item 0 1 0 8 parsing failed [ 146.855662][ T5897] cherry 0003:046A:0027.0016: probe with driver cherry failed with error -22 [ 146.957319][ T5911] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 147.086221][ T5897] usb 3-1: USB disconnect, device number 20 [ 147.131161][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 147.146675][ T5911] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 147.166961][ T8241] netlink: 'syz.1.957': attribute type 3 has an invalid length. [ 147.176680][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.188511][ T8241] netlink: 'syz.1.957': attribute type 3 has an invalid length. [ 147.194953][ T5911] usb 5-1: Product: syz [ 147.203500][ T8242] input: syz1 as /devices/virtual/input/input37 [ 147.211066][ T5911] usb 5-1: Manufacturer: syz [ 147.223759][ T5911] usb 5-1: SerialNumber: syz [ 147.260371][ T5911] usb 5-1: config 0 descriptor?? [ 147.291592][ T5911] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 147.522085][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.963'. [ 147.736050][ T30] audit: type=1400 audit(1754550299.950:446): avc: denied { read } for pid=8264 comm="syz.2.967" path="socket:[19890]" dev="sockfs" ino=19890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.068495][ T5897] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 148.168573][ T30] audit: type=1400 audit(1754550300.380:447): avc: denied { name_bind } for pid=8276 comm="syz.1.972" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 148.250189][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 148.262584][ T5897] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 148.274160][ T5897] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 148.315824][ T5897] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 148.340892][ T5897] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 148.372899][ T5897] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.391635][ T5897] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 148.409503][ T5897] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 148.440432][ T5897] usb 1-1: Product: syz [ 148.445083][ T5897] usb 1-1: Manufacturer: syz [ 148.461762][ T5897] usb 1-1: SerialNumber: syz [ 148.478775][ T5897] usb 1-1: config 0 descriptor?? [ 148.506443][ T5897] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 148.512880][ T5911] gspca_sonixj: reg_w1 err -71 [ 148.525007][ T5911] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 148.542903][ T5911] usb 5-1: USB disconnect, device number 14 [ 148.557990][ T5897] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 148.710158][ T30] audit: type=1400 audit(1754550300.920:448): avc: denied { mounton } for pid=8291 comm="syz.3.979" path="/173/file0" dev="tmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.732956][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.894396][ T5911] usb 1-1: USB disconnect, device number 17 [ 148.894482][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 148.906849][ T8268] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 148.915943][ T5911] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 149.006772][ T30] audit: type=1400 audit(1754550301.220:449): avc: denied { read } for pid=8305 comm="syz.1.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 149.575597][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.992'. [ 150.304042][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 150.324512][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'. [ 150.390559][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.392275][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 150.419064][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.444134][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'. [ 150.452189][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.507342][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.634928][ T8359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1007'. [ 150.889251][ T8369] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1010'. [ 150.917628][ T8365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1007'. [ 150.981343][ T8365] nbd: device at index 64 is going down [ 151.131272][ T6074] udevd[6074]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 151.248251][ T6051] udevd[6051]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 151.477284][ T5960] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 151.597289][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 151.636681][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.680527][ T5960] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 151.685686][ T8390] netlink: 'syz.3.1017': attribute type 1 has an invalid length. [ 151.762096][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.764661][ T8390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.875348][ T8392] bond1: (slave geneve2): making interface the new active one [ 151.885709][ T8392] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 151.926659][ T5960] usb 5-1: config 0 descriptor?? [ 151.963484][ T30] audit: type=1400 audit(1754550304.180:450): avc: denied { read } for pid=8393 comm="syz.2.1018" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 152.030304][ T30] audit: type=1400 audit(1754550304.200:451): avc: denied { open } for pid=8393 comm="syz.2.1018" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 152.120796][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1019'. [ 152.475807][ T5960] lenovo 0003:17EF:6047.0017: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 152.497224][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 152.621500][ T30] audit: type=1400 audit(1754550304.840:452): avc: denied { bind } for pid=8417 comm="syz.3.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.637352][ T5911] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 152.667234][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 152.674730][ T24] usb 1-1: config 0 has no interfaces? [ 152.677194][ T30] audit: type=1400 audit(1754550304.840:453): avc: denied { node_bind } for pid=8417 comm="syz.3.1029" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 152.687086][ T24] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 152.720759][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.765370][ T24] usb 1-1: Product: syz [ 152.777888][ T24] usb 1-1: Manufacturer: syz [ 152.786870][ T24] usb 1-1: SerialNumber: syz [ 152.809666][ T24] usb 1-1: config 0 descriptor?? [ 152.843303][ T5911] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.868979][ T5911] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 152.887734][ T5911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.897619][ T5911] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 152.926019][ T5911] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 152.959129][ T5911] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.982779][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.011328][ T5911] usb 3-1: Product: syz [ 153.015614][ T5911] usb 3-1: Manufacturer: syz [ 153.033507][ T8428] netlink: 'syz.1.1034': attribute type 12 has an invalid length. [ 153.043388][ T8428] netlink: 'syz.1.1034': attribute type 29 has an invalid length. [ 153.056792][ T8428] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1034'. [ 153.058591][ T5911] cdc_wdm 3-1:1.0: skipping garbage [ 153.067078][ T8428] netlink: 'syz.1.1034': attribute type 3 has an invalid length. [ 153.080007][ T8428] netlink: 'syz.1.1034': attribute type 2 has an invalid length. [ 153.085362][ T5911] cdc_wdm 3-1:1.0: skipping garbage [ 153.095307][ T5953] usb 1-1: USB disconnect, device number 18 [ 153.121375][ T5911] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 153.136243][ T5911] cdc_wdm 3-1:1.0: Unknown control protocol [ 153.274367][ T5960] lenovo 0003:17EF:6047.0017: Sensitivity setting failed: -71 [ 153.294680][ T5960] usb 5-1: USB disconnect, device number 15 [ 153.342648][ T5953] usb 3-1: USB disconnect, device number 21 [ 153.546131][ T1084] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 153.993319][ T30] audit: type=1400 audit(1754550306.210:454): avc: denied { setopt } for pid=8457 comm="syz.4.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.013676][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.038108][ T5897] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 154.191568][ T5897] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.210217][ T5897] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 154.231034][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 154.250322][ T5897] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 154.261770][ T5897] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 154.276110][ T5897] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.296176][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.324016][ T5897] usb 3-1: Product: syz [ 154.333988][ T5897] usb 3-1: Manufacturer: syz [ 154.373975][ T5897] cdc_wdm 3-1:1.0: skipping garbage [ 154.394494][ T5897] cdc_wdm 3-1:1.0: skipping garbage [ 154.423817][ T5897] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 154.457603][ T5897] cdc_wdm 3-1:1.0: Unknown control protocol [ 154.653962][ T30] audit: type=1400 audit(1754550306.870:455): avc: denied { module_request } for pid=8477 comm="syz.0.1052" kmod="crypto-gcm_base(ctr(aes-aesni),ghash-generic)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 154.655947][ T5960] usb 3-1: USB disconnect, device number 22 [ 154.877651][ T5897] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 155.030905][ T5897] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 155.059127][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.073459][ T5897] usb 4-1: config 0 descriptor?? [ 155.267230][ T5911] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 155.294235][ T8506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 155.321783][ T8508] input: syz0 as /devices/virtual/input/input38 [ 155.324147][ T5897] kaweth 4-1:0.0: Firmware present in device. [ 155.443739][ T5911] usb 5-1: config 0 has no interfaces? [ 155.451500][ T5911] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 155.462024][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.480174][ T5911] usb 5-1: config 0 descriptor?? [ 155.491435][ T30] audit: type=1400 audit(1754550307.700:456): avc: denied { ioctl } for pid=8512 comm="syz.2.1066" path="socket:[21045]" dev="sockfs" ino=21045 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.536259][ T5897] kaweth 4-1:0.0: Statistics collection: 0 [ 155.550696][ T8516] __nla_validate_parse: 3 callbacks suppressed [ 155.550716][ T8516] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1068'. [ 155.568095][ T5897] kaweth 4-1:0.0: Multicast filter limit: 0 [ 155.574027][ T5897] kaweth 4-1:0.0: MTU: 0 [ 155.578558][ T5897] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 155.622182][ T8520] 9pnet: p9_errstr2errno: server reported unknown error 澢p慉 [ 155.694203][ T5911] usb 5-1: USB disconnect, device number 16 [ 155.904619][ T8531] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 156.130853][ T5897] kaweth 4-1:0.0: kaweth interface created at eth1 [ 156.343630][ T5911] usb 4-1: USB disconnect, device number 19 [ 156.367259][ T5953] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 156.528876][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 156.557566][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 156.569938][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 156.584248][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 156.602930][ T5953] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 156.614469][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.623181][ T5953] usb 3-1: Product: syz [ 156.629577][ T5953] usb 3-1: Manufacturer: syz [ 156.634256][ T5953] usb 3-1: SerialNumber: syz [ 156.645556][ T5953] usb 3-1: config 0 descriptor?? [ 156.900609][ T5953] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 157.107330][ T30] audit: type=1400 audit(1754550309.310:457): avc: denied { getopt } for pid=8592 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 157.142531][ T5897] usb 3-1: USB disconnect, device number 23 [ 157.297978][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 157.427340][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 157.450108][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.461833][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 157.470941][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.480532][ T9] usb 1-1: config 0 descriptor?? [ 157.590657][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.600908][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.610949][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 157.620092][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 157.628273][ T10] usb 5-1: SerialNumber: syz [ 157.698586][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 157.716149][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 157.731521][ T9] usb 1-1: USB disconnect, device number 19 [ 157.846884][ T10] usb 5-1: 0:2 : does not exist [ 157.891113][ T10] usb 5-1: USB disconnect, device number 17 [ 157.984657][ T6051] udevd[6051]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.067233][ T30] audit: type=1400 audit(1754550310.280:458): avc: denied { nlmsg_read } for pid=8612 comm="syz.2.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.138563][ T30] audit: type=1400 audit(1754550310.280:459): avc: denied { read } for pid=8612 comm="syz.2.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.218818][ T5911] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 158.407271][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 158.408235][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1105'. [ 158.419697][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.453666][ T5911] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 158.475695][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.499883][ T5911] usb 1-1: config 0 descriptor?? [ 158.627365][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 158.791725][ T10] usb 4-1: config 0 has an invalid interface number: 204 but max is 0 [ 158.810317][ T10] usb 4-1: config 0 has no interface number 0 [ 158.832134][ T10] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 158.851177][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.872864][ T10] usb 4-1: Product: syz [ 158.886904][ T10] usb 4-1: Manufacturer: syz [ 158.906700][ T10] usb 4-1: SerialNumber: syz [ 158.917567][ T8643] netlink: 'syz.1.1111': attribute type 1 has an invalid length. [ 158.937505][ T8643] netlink: 'syz.1.1111': attribute type 4 has an invalid length. [ 158.941543][ T10] usb 4-1: config 0 descriptor?? [ 158.959740][ T5911] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 158.970031][ T10] ems_usb 4-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 158.981276][ T8643] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1111'. [ 158.982735][ T10] ems_usb 4-1:0.204: probe with driver ems_usb failed with error -22 [ 159.382134][ T5911] usb 4-1: USB disconnect, device number 20 [ 159.407063][ T24] usb 1-1: USB disconnect, device number 20 [ 159.736679][ T30] audit: type=1400 audit(1754550311.950:460): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 159.874336][ T8676] netlink: 'syz.1.1126': attribute type 10 has an invalid length. [ 159.893009][ T8676] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.900755][ T8676] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.951098][ T8676] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.958316][ T8676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.967026][ T8676] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.974258][ T8676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.064530][ T8676] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 160.574839][ T30] audit: type=1400 audit(1754550312.790:461): avc: denied { map } for pid=8703 comm="syz.2.1139" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 160.648446][ T8708] Bluetooth: hci0: unsupported parameter 64317 [ 160.670249][ T8708] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 160.938674][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 161.108743][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.120949][ T30] audit: type=1400 audit(1754550313.340:462): avc: denied { ioctl } for pid=8726 comm="syz.3.1150" path="socket:[24619]" dev="sockfs" ino=24619 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 161.134999][ T24] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 161.176104][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.194664][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 161.206331][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 161.230833][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.244238][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.275167][ T24] usb 3-1: Product: syz [ 161.282321][ T24] usb 3-1: Manufacturer: syz [ 161.330672][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 161.335917][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 161.394990][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 161.417222][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 161.487436][ T8741] mmap: syz.1.1156 (8741) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 161.582153][ T8745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.607896][ T30] audit: type=1400 audit(1754550313.820:463): avc: denied { read write } for pid=8709 comm="syz.2.1142" name="cdc-wdm0" dev="devtmpfs" ino=3379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 161.654748][ T30] audit: type=1400 audit(1754550313.820:464): avc: denied { open } for pid=8709 comm="syz.2.1142" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 161.725613][ T24] usb 3-1: USB disconnect, device number 24 [ 162.217460][ T5953] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 162.307066][ T8770] Illegal XDP return value 8 on prog (id 164) dev N/A, expect packet loss! [ 162.397419][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 162.410183][ T5953] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 162.422370][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.435012][ T5953] usb 1-1: Product: syz [ 162.440773][ T5953] usb 1-1: Manufacturer: syz [ 162.457229][ T5953] usb 1-1: SerialNumber: syz [ 162.468165][ T5953] usb 1-1: config 0 descriptor?? [ 162.486163][ T5953] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 162.762924][ T8784] overlayfs: invalid origin (0000) [ 163.026730][ T30] audit: type=1400 audit(1754550315.240:465): avc: denied { ioctl } for pid=8796 comm="syz.2.1181" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 163.078505][ T92] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 163.163320][ T30] audit: type=1400 audit(1754550315.380:466): avc: denied { search } for pid=8805 comm="syz.1.1185" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 163.221816][ T30] audit: type=1400 audit(1754550315.400:467): avc: denied { search } for pid=8805 comm="syz.1.1185" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 163.262243][ T92] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 163.287418][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 163.316239][ T92] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 163.339722][ T92] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 163.376230][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.400389][ T92] usb 5-1: config 0 descriptor?? [ 163.421585][ T8787] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 163.444001][ T92] gspca_main: spca561-2.14.0 probing abcd:cdee [ 163.570013][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 163.655758][ T92] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 163.694238][ T92] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.702696][ T5953] gspca_ov534_9: reg_w failed -71 [ 163.716231][ T92] usb 5-1: MIDIStreaming interface descriptor not found [ 163.908460][ T92] usb 5-1: USB disconnect, device number 18 [ 164.008380][ T8833] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1196'. [ 164.027706][ T5953] gspca_ov534_9: Unknown sensor 0000 [ 164.027784][ T5953] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 164.052302][ T5953] usb 1-1: USB disconnect, device number 21 [ 164.230323][ T5911] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 164.271072][ T8849] input: syz1 as /devices/virtual/input/input39 [ 164.374346][ T30] audit: type=1326 audit(1754550316.580:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.4.1205" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe885f8ebe9 code=0x0 [ 164.422272][ T5911] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 164.430883][ T5911] usb 4-1: config 0 has no interface number 0 [ 164.438347][ T30] audit: type=1400 audit(1754550316.640:469): avc: denied { read } for pid=8860 comm="syz.2.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.439957][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'. [ 164.480169][ T5911] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 164.495336][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.503732][ T5911] usb 4-1: Product: syz [ 164.511411][ T5911] usb 4-1: Manufacturer: syz [ 164.521709][ T5911] usb 4-1: SerialNumber: syz [ 164.552461][ T5911] usb 4-1: config 0 descriptor?? [ 165.605698][ T5911] usb 4-1: non-Atmel transceiver xxxxe6de [ 165.814655][ T5911] usb 4-1: Firmware version (0.0) predates our first public release. [ 165.841558][ T5911] usb 4-1: Please update to version 0.2 or newer [ 165.850294][ T5911] usb 4-1: atusb_probe: initialization failed, error = -19 [ 165.865975][ T5911] usb 4-1: USB disconnect, device number 21 [ 166.006736][ T8929] bridge: RTM_NEWNEIGH with invalid ether address [ 166.122305][ T30] audit: type=1400 audit(1754550318.340:470): avc: denied { watch } for pid=8936 comm="syz.1.1237" path="/315/file0" dev="tmpfs" ino=1648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 166.174934][ T8939] hsr0: entered allmulticast mode [ 166.180278][ T8939] hsr_slave_0: entered allmulticast mode [ 166.186000][ T8939] hsr_slave_1: entered allmulticast mode [ 166.194133][ T8939] hsr_slave_0: left promiscuous mode [ 166.201207][ T8939] hsr_slave_1: left promiscuous mode [ 166.217448][ T8939] hsr0 (unregistering): left allmulticast mode [ 166.448885][ T30] audit: type=1400 audit(1754550318.670:471): avc: denied { ioctl } for pid=8945 comm="syz.0.1240" path="socket:[23964]" dev="sockfs" ino=23964 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.504711][ T8950] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1242'. [ 166.823568][ T30] audit: type=1400 audit(1754550319.040:472): avc: denied { write } for pid=8965 comm="syz.2.1249" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 167.061299][ T8971] netlink: 'syz.1.1250': attribute type 1 has an invalid length. [ 167.098773][ T8971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.140949][ T8971] bond1: (slave geneve2): making interface the new active one [ 167.175268][ T8971] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 167.342335][ T30] audit: type=1326 audit(1754550319.560:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185bd8ebe9 code=0x7ffc0000 [ 167.375623][ T30] audit: type=1326 audit(1754550319.560:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185bd8ebe9 code=0x7ffc0000 [ 167.403342][ T30] audit: type=1326 audit(1754550319.560:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f185bd8ebe9 code=0x7ffc0000 [ 167.438090][ T30] audit: type=1326 audit(1754550319.560:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185bd8ebe9 code=0x7ffc0000 [ 167.462131][ T30] audit: type=1326 audit(1754550319.560:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185bd8ebe9 code=0x7ffc0000 [ 167.485865][ T30] audit: type=1326 audit(1754550319.560:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f185bd8ebe9 code=0x7ffc0000 [ 167.512882][ T30] audit: type=1326 audit(1754550319.560:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185bd8ebe9 code=0x7ffc0000 [ 168.270754][ T9017] netlink: 'syz.4.1268': attribute type 2 has an invalid length. [ 168.284936][ T9017] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1268'. [ 168.305745][ T9017] nbd: must specify a device to reconfigure [ 168.983051][ T9035] loop3: detected capacity change from 0 to 1 [ 169.004398][ T9035] Dev loop3: unable to read RDB block 1 [ 169.029217][ T9035] loop3: unable to read partition table [ 169.035251][ T9035] loop3: partition table beyond EOD, truncated [ 169.077209][ T9035] loop_reread_partitions: partition scan of loop3 (x鼦熝鄸 ) failed (rc=-5) [ 169.394881][ T9054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1283'. [ 169.847826][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 169.935757][ T9076] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1293'. [ 169.973200][ T9076] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 170.009694][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 170.026703][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 170.042741][ T9082] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1296'. [ 170.045410][ T10] usb 5-1: config 0 has no interface number 0 [ 170.084102][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 170.096050][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.129483][ T10] usb 5-1: Product: syz [ 170.133688][ T10] usb 5-1: Manufacturer: syz [ 170.154707][ T10] usb 5-1: SerialNumber: syz [ 170.172462][ T9090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9090 comm=syz.3.1297 [ 170.198544][ T10] usb 5-1: config 0 descriptor?? [ 170.211624][ T10] smsc95xx v2.0.0 [ 170.281378][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'. [ 170.293532][ T9092] netlink: 'syz.2.1298': attribute type 30 has an invalid length. [ 170.319918][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.329122][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'. [ 170.347868][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.367292][ T9092] netlink: 'syz.2.1298': attribute type 30 has an invalid length. [ 170.399587][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.438162][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.504839][ T9101] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1301'. [ 170.647245][ T5911] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 170.717693][ T92] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 170.754174][ T9110] 9pnet_fd: Insufficient options for proto=fd [ 170.812321][ T5911] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 170.837217][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 170.864055][ T5911] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 170.886769][ T5911] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 170.887831][ T92] usb 1-1: Using ep0 maxpacket: 32 [ 170.900093][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.908944][ T92] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 170.914308][ T5911] usb 4-1: Product: syz [ 170.918236][ T92] usb 1-1: config 0 has no interface number 0 [ 170.921877][ T5911] usb 4-1: Manufacturer: syz [ 170.930184][ T92] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 170.934760][ T5911] usb 4-1: SerialNumber: syz [ 170.941907][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.949858][ T5911] usb 4-1: config 0 descriptor?? [ 170.955422][ T92] usb 1-1: Product: syz [ 170.963802][ T92] usb 1-1: Manufacturer: syz [ 170.969367][ T92] usb 1-1: SerialNumber: syz [ 170.970295][ T9095] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 170.978262][ T92] usb 1-1: config 0 descriptor?? [ 170.985664][ T9095] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 170.995195][ T5911] usb 4-1: ucan: probing device on interface #0 [ 171.139134][ T9] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 171.192377][ T92] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 171.224171][ T92] usb 1-1: USB disconnect, device number 22 [ 171.264661][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.309773][ T9] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 171.319430][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.330480][ T9] usb 3-1: config 0 descriptor?? [ 171.433331][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 171.448553][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 171.460562][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 171.472063][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 171.491693][ T10] usb 5-1: USB disconnect, device number 19 [ 171.625389][ T5911] ucan 4-1:0.0 can0: registered device [ 171.795486][ T9129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1314'. [ 171.816820][ T5911] ucan 4-1:0.0 can0: firmware string: '" [ 172.111102][ T5911] usb 4-1: USB disconnect, device number 22 [ 172.298516][ T9151] input: syz0 as /devices/virtual/input/input40 [ 172.388756][ T9154] overlayfs: failed to clone upperpath [ 172.525234][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 172.525251][ T30] audit: type=1400 audit(1754550324.740:488): avc: denied { read } for pid=9160 comm="syz.4.1321" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 172.562468][ T9] pegasus 3-1:0.0: can't reset MAC [ 172.570758][ T9] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 172.578681][ T30] audit: type=1400 audit(1754550324.770:489): avc: denied { open } for pid=9160 comm="syz.4.1321" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 172.638141][ T9] usb 3-1: USB disconnect, device number 25 [ 172.927386][ T5897] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 173.071155][ T30] audit: type=1400 audit(1754550325.290:490): avc: denied { bind } for pid=9188 comm="syz.4.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.097411][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 173.143333][ T5897] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 173.171689][ T5897] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 173.191501][ T5897] usb 1-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 173.224650][ T5897] usb 1-1: Product: syz [ 173.254783][ T5897] usb 1-1: Manufacturer: syz [ 173.277330][ T5897] usb 1-1: SerialNumber: syz [ 173.298062][ T5897] usb 1-1: config 0 descriptor?? [ 173.315980][ T5897] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 173.714047][ T30] audit: type=1400 audit(1754550325.930:491): avc: denied { create } for pid=9211 comm="syz.2.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.768380][ T9219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1342'. [ 173.784761][ T30] audit: type=1400 audit(1754550325.930:492): avc: denied { write } for pid=9211 comm="syz.2.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.830155][ T30] audit: type=1400 audit(1754550325.930:493): avc: denied { nlmsg_write } for pid=9211 comm="syz.2.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.010990][ T30] audit: type=1400 audit(1754550326.230:494): avc: denied { ioctl } for pid=9226 comm="syz.1.1345" path="socket:[24520]" dev="sockfs" ino=24520 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.347269][ T5897] gspca_zc3xx: reg_w_i err -71 [ 174.374182][ T9244] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 174.394114][ T9244] SELinux: failed to load policy [ 174.937454][ T5897] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 174.985720][ T5897] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 175.071325][ T5897] usb 1-1: USB disconnect, device number 23 [ 175.762708][ T9286] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1368'. [ 176.059332][ T9294] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.359748][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.383213][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.447299][ T5953] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 176.536462][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.567241][ T30] audit: type=1400 audit(1754550328.780:495): avc: denied { execmem } for pid=9310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 176.586645][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.627323][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 176.634624][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.657842][ T5953] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 176.672076][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.694904][ T5953] usb 1-1: config 0 descriptor?? [ 176.738486][ T5953] hub 1-1:0.0: USB hub found [ 176.772460][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.799232][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.857479][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 176.889241][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.905781][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.943587][ T5953] hub 1-1:0.0: 1 port detected [ 176.965577][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.979978][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.992078][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.004598][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.017272][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 177.024557][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.031798][ T5911] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 177.041670][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.055218][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.055217][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 177.073500][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.081526][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.081540][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.103171][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.116777][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.137059][ T30] audit: type=1400 audit(1754550329.350:496): avc: denied { mounton } for pid=9327 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 177.166775][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.177005][ T24] usb 3-1: Product: syz [ 177.182396][ T24] usb 3-1: Manufacturer: syz [ 177.187742][ T24] usb 3-1: SerialNumber: syz [ 177.209074][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.229997][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.243775][ T12] bridge_slave_1: left allmulticast mode [ 177.249884][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.249932][ T5911] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.249953][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.252232][ T5911] usb 5-1: config 0 descriptor?? [ 177.289137][ T12] bridge_slave_1: left promiscuous mode [ 177.296603][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.314607][ T12] bridge_slave_0: left allmulticast mode [ 177.322220][ T12] bridge_slave_0: left promiscuous mode [ 177.328734][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.332007][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'. [ 177.354749][ T12] bond_slave_0: left promiscuous mode [ 177.392071][ T30] audit: type=1400 audit(1754550329.610:497): avc: denied { write } for pid=9335 comm="syz.1.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 177.408248][ T9312] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 177.537911][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 177.716544][ T5911] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 177.743620][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.754491][ T12] bond0 (unregistering): Released all slaves [ 177.776640][ T5911] usb 1-1: USB disconnect, device number 24 [ 177.784628][ T5953] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 177.890298][ T12] bond1 (unregistering): Released all slaves [ 177.974221][ T12] bond2 (unregistering): Released all slaves [ 178.042415][ T9312] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 178.255193][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 178.262500][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 178.273178][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 178.341561][ C0] plantronics 0003:047F:FFFF.0019: hid_field_extract() called with n (132) > 32! (syz.1.1395) [ 178.473147][ T24] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 178.558319][ T5960] usb 5-1: USB disconnect, device number 20 [ 178.586483][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 178.686217][ T24] usb 3-1: USB disconnect, device number 26 [ 178.716292][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 178.780807][ T12] hsr_slave_0: left promiscuous mode [ 178.794184][ T12] hsr_slave_1: left promiscuous mode [ 178.801470][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.809224][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.818066][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.825467][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.861923][ T12] veth1_macvtap: left promiscuous mode [ 178.868446][ T12] veth0_macvtap: left promiscuous mode [ 178.876003][ T12] veth1_vlan: left promiscuous mode [ 178.882291][ T12] veth0_vlan: left promiscuous mode [ 179.199643][ T5854] Bluetooth: hci4: command tx timeout [ 179.283448][ T12] team0 (unregistering): Port device team_slave_1 removed [ 179.315154][ T12] team0 (unregistering): Port device team_slave_0 removed [ 179.658931][ T9375] syz_tun: entered promiscuous mode [ 179.667054][ T9375] batadv_slave_0: entered promiscuous mode [ 179.683593][ T9375] hsr1: entered allmulticast mode [ 179.690975][ T9375] syz_tun: entered allmulticast mode [ 179.698646][ T9375] batadv_slave_0: entered allmulticast mode [ 179.730272][ T9327] chnl_net:caif_netlink_parms(): no params data found [ 180.018138][ T5960] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 180.177294][ T5960] usb 1-1: Using ep0 maxpacket: 8 [ 180.189439][ T5960] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.206018][ T5960] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 180.222066][ T5960] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 180.239921][ T9327] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.256196][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.264977][ T9327] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.286835][ T9327] bridge_slave_0: entered allmulticast mode [ 180.293196][ T5960] usb 1-1: Product: syz [ 180.315515][ T5960] usb 1-1: Manufacturer: syz [ 180.322263][ T9327] bridge_slave_0: entered promiscuous mode [ 180.326909][ T9405] input: syz1 as /devices/virtual/input/input41 [ 180.347350][ T5960] usb 1-1: SerialNumber: syz [ 180.350841][ T9327] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.362280][ T5960] usb 1-1: config 0 descriptor?? [ 180.375412][ T5960] powermate 1-1:0.0: probe with driver powermate failed with error -22 [ 180.384804][ T9327] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.415479][ T9327] bridge_slave_1: entered allmulticast mode [ 180.442638][ T9327] bridge_slave_1: entered promiscuous mode [ 180.584399][ T9327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.634631][ T9327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.010100][ T9327] team0: Port device team_slave_0 added [ 181.048163][ T9327] team0: Port device team_slave_1 added [ 181.202207][ T9327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.248588][ T9327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.304249][ T5854] Bluetooth: hci4: command tx timeout [ 181.311259][ T9327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.383902][ T9327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.397988][ T9327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.523043][ T9327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.637213][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 181.725849][ T9327] hsr_slave_0: entered promiscuous mode [ 181.740923][ T9327] hsr_slave_1: entered promiscuous mode [ 181.764089][ T9327] debugfs: 'hsr0' already exists in 'hsr' [ 181.780204][ T9327] Cannot create hsr debugfs directory [ 181.799108][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.810468][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.855255][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 181.880886][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.939356][ T9] usb 5-1: config 0 descriptor?? [ 182.189870][ T5953] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 182.317977][ T9327] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 182.356060][ T9327] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.369742][ T9] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 182.370239][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.399086][ T9] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 182.432090][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.001A/input/input42 [ 182.432324][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.451543][ T9327] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.490896][ T9327] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.503649][ T5953] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 182.530647][ T9] cm6533_jd 0003:0D8C:0022.001A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 182.545645][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.596801][ T5953] usb 3-1: config 0 descriptor?? [ 182.608566][ T9428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.627742][ T9428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.664036][ T10] usb 5-1: USB disconnect, device number 21 [ 182.703974][ T9454] fido_id[9454]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 182.838142][ T9327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.865879][ T5960] usb 1-1: USB disconnect, device number 25 [ 182.916289][ T9327] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.942678][ T30] audit: type=1400 audit(1754550335.160:498): avc: denied { write } for pid=9463 comm="syz.0.1422" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 182.973005][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.980206][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.025825][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.033027][ T4378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.064458][ T5953] lua 0003:1E7D:2C2E.001B: item fetching failed at offset 4/5 [ 183.105777][ T5953] lua 0003:1E7D:2C2E.001B: parse failed [ 183.115424][ T5953] lua 0003:1E7D:2C2E.001B: probe with driver lua failed with error -22 [ 183.140953][ T9327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.191361][ T9327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.341264][ T9484] netlink: 'syz.4.1427': attribute type 29 has an invalid length. [ 183.347223][ T30] audit: type=1326 audit(1754550335.540:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.1.1425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f185bd8ebe9 code=0x0 [ 183.354621][ T9484] netlink: 'syz.4.1427': attribute type 29 has an invalid length. [ 183.382498][ T5854] Bluetooth: hci4: command tx timeout [ 183.419807][ T9485] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1427'. [ 183.466892][ T5953] usb 3-1: USB disconnect, device number 27 [ 183.600867][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 183.762573][ T9327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.332593][ T9327] veth0_vlan: entered promiscuous mode [ 184.380692][ T9327] veth1_vlan: entered promiscuous mode [ 184.511055][ T9327] veth0_macvtap: entered promiscuous mode [ 184.546240][ T9327] veth1_macvtap: entered promiscuous mode [ 184.615205][ T9327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.660221][ T9327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.681192][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.719549][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.731313][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.746086][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.937262][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 184.978269][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.986146][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.061808][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.072924][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.128323][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 185.150889][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.168037][ T30] audit: type=1400 audit(1754550337.370:500): avc: denied { mounton } for pid=9327 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 185.191869][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.208996][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 97, changing to 10 [ 185.241700][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24929, setting to 1024 [ 185.268063][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1381'. [ 185.269488][ T10] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 185.301211][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1381'. [ 185.304140][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.327381][ T9559] netlink: 'syz.5.1381': attribute type 6 has an invalid length. [ 185.368562][ T10] usb 5-1: Product: syz [ 185.372810][ T10] usb 5-1: Manufacturer: syz [ 185.377594][ T10] usb 5-1: SerialNumber: syz [ 185.390769][ T10] usb 5-1: config 0 descriptor?? [ 185.420816][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1381'. [ 185.429983][ T1084] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.437478][ T5854] Bluetooth: hci4: command tx timeout [ 185.470357][ T1084] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.484944][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1381'. [ 185.523232][ T1084] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.523547][ T10] rc_core: IR keymap rc-streamzap not found [ 185.545991][ T9559] netlink: 'syz.5.1381': attribute type 6 has an invalid length. [ 185.564377][ T1084] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.567466][ T10] Registered IR keymap rc-empty [ 185.639280][ T10] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 185.687649][ T10] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input45 [ 185.726110][ T10] usb 5-1: USB disconnect, device number 22 [ 186.825200][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1462'. [ 187.045553][ T9614] hsr_slave_1 (unregistering): left promiscuous mode [ 187.247234][ T30] audit: type=1400 audit(1754550339.460:501): avc: denied { read } for pid=9642 comm="syz.0.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 187.548150][ T5960] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 187.563773][ T30] audit: type=1400 audit(1754550339.780:502): avc: denied { accept } for pid=9654 comm="syz.2.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.707291][ T5960] usb 6-1: Using ep0 maxpacket: 32 [ 187.713923][ T5960] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 187.738071][ T5960] usb 6-1: config 0 has no interface number 0 [ 187.762744][ T5960] usb 6-1: config 0 interface 184 has no altsetting 0 [ 187.791575][ T5960] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 187.819490][ T5960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.829134][ T5960] usb 6-1: Product: syz [ 187.833376][ T5960] usb 6-1: Manufacturer: syz [ 187.844914][ T5960] usb 6-1: SerialNumber: syz [ 187.854057][ T5960] usb 6-1: config 0 descriptor?? [ 187.872084][ T5960] smsc75xx v1.0.0 [ 187.928021][ T9673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1477'. [ 187.955493][ T9673] netlink: 'syz.2.1477': attribute type 7 has an invalid length. [ 187.986883][ T9673] netlink: 'syz.2.1477': attribute type 8 has an invalid length. [ 188.009049][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1477'. [ 188.195115][ T30] audit: type=1326 audit(1754550340.410:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.0.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ed98ebe9 code=0x7fc00000 [ 189.086807][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1488'. [ 189.098494][ T5960] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 189.110920][ T5960] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 189.132955][ T5960] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 189.153987][ T5960] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 189.165398][ T5960] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 189.177196][ T5960] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 189.189645][ T5960] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 189.217491][ T5960] usb 6-1: USB disconnect, device number 2 [ 189.253396][ T9725] netlink: 'syz.1.1492': attribute type 4 has an invalid length. [ 189.279284][ T9725] netlink: 'syz.1.1492': attribute type 4 has an invalid length. [ 189.770565][ T9750] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1501'. [ 189.785262][ T9750] gretap0: entered promiscuous mode [ 189.835186][ T9750] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1501'. [ 189.845957][ T9750] 0{X功: renamed from gretap0 [ 189.863338][ T9750] 0{X功: left promiscuous mode [ 189.877295][ T9750] 0{X功: entered allmulticast mode [ 189.887046][ T9750] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 190.394334][ T9773] overlayfs: upper fs does not support file handles, falling back to index=off. [ 190.638695][ T9778] netlink: 432 bytes leftover after parsing attributes in process `syz.4.1511'. [ 190.949916][ T9791] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.479438][ T5953] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 191.627337][ T5897] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 191.657185][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 191.664905][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 191.679502][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 191.694612][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 191.707980][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 191.723296][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 191.737374][ T5953] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 191.748639][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.767727][ T5953] usb 5-1: Product: syz [ 191.771989][ T5953] usb 5-1: Manufacturer: syz [ 191.776961][ T5953] usb 5-1: SerialNumber: syz [ 191.787318][ T5953] usb 5-1: config 0 descriptor?? [ 191.788693][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.823714][ T5897] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 191.837773][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.839102][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 191.873827][ T5897] usb 1-1: config 0 descriptor?? [ 191.891016][ T30] audit: type=1400 audit(1754550344.100:504): avc: denied { shutdown } for pid=9835 comm="syz.2.1536" laddr=fe80::b lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.028761][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.040027][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 192.059365][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 192.077256][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.099988][ T9825] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 192.118686][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 192.227687][ T5953] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 192.234142][ T5953] input input46: Device does not respond to id packet M [ 192.254158][ T5953] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 192.269447][ T5953] input input46: Device does not respond to id packet P [ 192.298141][ T5953] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 192.301810][ T5897] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 192.304193][ T5953] input input46: Device does not respond to id packet B [ 192.339565][ T5897] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001C/input/input47 [ 192.385200][ T5924] usb 6-1: USB disconnect, device number 3 [ 192.442610][ T5897] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 192.527444][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 192.564663][ T5953] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 192.574745][ T5953] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 192.576539][ T9813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.594974][ T5953] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 192.605538][ T9813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.613565][ T5953] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 192.633879][ T5953] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input46 [ 192.693088][ T5953] usb 5-1: USB disconnect, device number 23 [ 192.697383][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 192.699693][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 192.699781][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.720778][ T10] usb 3-1: config 0 descriptor?? [ 192.739206][ T30] audit: type=1400 audit(1754550344.960:505): avc: denied { write } for pid=9844 comm="syz.1.1539" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 192.750740][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 193.032845][ T5953] usb 1-1: USB disconnect, device number 26 [ 193.182866][ T10] gspca_sonixj: reg_r err -71 [ 193.207320][ T10] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 193.236498][ T10] usb 3-1: USB disconnect, device number 28 [ 193.488661][ T5960] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 193.659815][ T5960] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 193.681423][ T5960] usb 5-1: config 0 has no interface number 0 [ 193.701535][ T5960] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.748316][ T30] audit: type=1326 audit(1754550345.970:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.0.1552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06ed98ebe9 code=0x0 [ 193.777446][ T5960] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.807084][ T5960] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 193.830789][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.843553][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.843602][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.885694][ T5960] usb 5-1: config 0 descriptor?? [ 194.020273][ T30] audit: type=1400 audit(1754550346.240:507): avc: denied { lock } for pid=9888 comm="syz.2.1556" path="socket:[28408]" dev="sockfs" ino=28408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 194.330966][ T5960] prodikeys 0003:041E:2801.001D: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 194.366364][ T5960] hid_prodikeys: hid-prodikeys: failed to find output report [ 194.366364][ T5960] [ 194.533475][ T9915] loop8: detected capacity change from 0 to 79 [ 194.593744][ T5953] usb 5-1: USB disconnect, device number 24 [ 194.641250][ T9915] loop8: detected capacity change from 79 to 78 [ 194.706222][ T9923] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1569'. [ 194.751157][ T9923] gretap0: entered promiscuous mode [ 194.799295][ T9923] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1569'. [ 194.905370][ T9923] 0{X功: renamed from gretap0 [ 194.973432][ T9923] 0{X功: left promiscuous mode [ 194.998534][ T9931] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1573'. [ 195.007763][ T9923] 0{X功: entered allmulticast mode [ 195.019995][ T9923] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 195.107776][ T9933] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.439537][ T9948] netlink: 'syz.2.1577': attribute type 10 has an invalid length. [ 195.462279][ T9948] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.495195][ T9948] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.502366][ T9948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.553941][ T9948] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 197.354397][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1608'. [ 197.402497][ T30] audit: type=1400 audit(1754550349.620:508): avc: denied { ioctl } for pid=10024 comm="syz.0.1609" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 197.871828][T10040] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 198.455444][T10073] binder: 10071:10073 ioctl c0306201 2000000001c0 returned -14 [ 198.737298][ T5924] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 198.766573][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1635'. [ 198.781756][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1635'. [ 198.871374][T10102] input: syz1 as /devices/virtual/input/input48 [ 198.897586][ T5897] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 198.907241][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 198.922311][ T5924] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.955643][ T5924] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.030107][ T5924] usb 5-1: config 0 interface 0 has no altsetting 0 [ 199.057650][ T5924] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 199.079783][ T5897] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 199.080319][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 199.106191][ T5897] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 199.107392][ T5924] usb 5-1: Product: syz [ 199.141146][ T5897] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 199.159954][ T5924] usb 5-1: config 0 descriptor?? [ 199.181649][ T5897] usb 1-1: config 220 has no interface number 2 [ 199.194825][ T5897] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 199.225938][ T5897] usb 1-1: config 220 interface 0 has no altsetting 0 [ 199.241071][ T5897] usb 1-1: config 220 interface 76 has no altsetting 0 [ 199.255942][ T5897] usb 1-1: config 220 interface 1 has no altsetting 0 [ 199.274148][ T5897] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 199.304362][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.326532][ T5897] usb 1-1: Product: syz [ 199.336823][ T5897] usb 1-1: Manufacturer: syz [ 199.349365][ T5897] usb 1-1: SerialNumber: syz [ 199.586533][ T5897] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 199.623467][ T5897] usb 1-1: No valid video chain found. [ 199.638759][ T5897] usb 1-1: selecting invalid altsetting 0 [ 199.652056][ T5924] waterforce 0003:1044:7A4D.001E: unknown main item tag 0x0 [ 199.697734][ T5924] waterforce 0003:1044:7A4D.001E: unknown main item tag 0x0 [ 199.705093][ T5924] waterforce 0003:1044:7A4D.001E: item fetching failed at offset 2/5 [ 199.705860][ T5897] usb 1-1: selecting invalid altsetting 0 [ 199.731761][ T5897] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 199.744499][ T5924] waterforce 0003:1044:7A4D.001E: hid parse failed with -22 [ 199.760606][T10132] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.1645'. [ 199.783658][ T5924] waterforce 0003:1044:7A4D.001E: probe with driver waterforce failed with error -22 [ 199.789951][ T5897] usb 1-1: USB disconnect, device number 27 [ 199.850515][ T5924] usb 5-1: USB disconnect, device number 25 [ 200.008459][T10142] netlink: 'syz.5.1649': attribute type 22 has an invalid length. [ 200.016318][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1649'. [ 200.140549][T10142] netlink: 'syz.5.1649': attribute type 22 has an invalid length. [ 200.158144][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1649'. [ 200.386514][T10161] netlink: 'syz.0.1654': attribute type 10 has an invalid length. [ 200.417034][T10161] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.424649][T10161] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.455376][T10161] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.462585][T10161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.470099][T10161] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.477251][T10161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.605080][T10161] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 200.652123][T10174] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1657'. [ 200.920308][T10188] netlink: 212264 bytes leftover after parsing attributes in process `syz.4.1663'. [ 201.429458][T10221] netlink: 'syz.4.1672': attribute type 9 has an invalid length. [ 201.439614][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1672'. [ 201.468190][ T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.476670][T10221] netlink: 'syz.4.1672': attribute type 9 has an invalid length. [ 201.485240][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.499477][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1672'. [ 201.514724][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.556888][ T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.671884][ T5897] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 201.880761][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 201.918897][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 201.950130][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 201.993128][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.006785][ T5897] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.052830][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.077667][ T5897] usb 1-1: config 0 descriptor?? [ 202.529287][ T5897] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 202.573400][ T5897] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 202.613705][ T5897] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 202.636476][ T5897] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 202.701728][ T5897] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 202.724624][ T5897] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 202.947401][ T5924] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 202.951543][ T5897] usb 1-1: USB disconnect, device number 28 [ 203.111085][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 203.129003][ T5924] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 203.151204][ T5924] usb 5-1: config 179 has no interface number 0 [ 203.183176][ T5924] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 203.208160][T10279] fido_id[10279]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 203.250374][ T5924] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 203.278278][ T5924] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 203.322008][ T5924] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 203.367300][ T5924] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 203.380987][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.401354][T10275] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 203.767387][ T5924] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input49 [ 204.138679][ T5897] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 204.195942][ T10] usb 5-1: USB disconnect, device number 26 [ 204.195963][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 204.210493][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 204.219420][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.337446][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 204.356271][ T5897] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.390063][ T5897] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 204.431285][ T5897] usb 1-1: config 0 interface 0 has no altsetting 0 [ 204.447816][ T5897] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 204.468277][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.492760][ T5897] usb 1-1: config 0 descriptor?? [ 204.632543][T10317] input: syz1 as /devices/virtual/input/input50 [ 204.936053][ T5897] betop 0003:20BC:5500.0020: item fetching failed at offset 5/7 [ 204.969755][ T5897] betop 0003:20BC:5500.0020: parse failed [ 204.993065][ T5897] betop 0003:20BC:5500.0020: probe with driver betop failed with error -22 [ 205.164701][ T5953] usb 1-1: USB disconnect, device number 29 [ 205.772442][ T30] audit: type=1400 audit(1754550357.990:509): avc: denied { setopt } for pid=10379 comm="syz.2.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 205.859025][ T5897] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 205.974181][ T30] audit: type=1400 audit(1754550358.190:510): avc: denied { bind } for pid=10389 comm="syz.0.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 206.053403][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.087425][ T30] audit: type=1326 audit(1754550358.290:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10348 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185bd8ebe9 code=0x7fc00000 [ 206.110846][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.110878][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.110918][ T5897] usb 6-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 206.110944][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.122314][ T5897] usb 6-1: config 0 descriptor?? [ 206.419623][T10416] netlink: 'syz.2.1728': attribute type 12 has an invalid length. [ 206.600648][ T49] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 206.650235][ T5897] chicony 0003:04F2:1421.0021: item fetching failed at offset 1/5 [ 206.671763][ T5897] chicony 0003:04F2:1421.0021: Chicony hid parse failed: -22 [ 206.687639][ T5897] chicony 0003:04F2:1421.0021: probe with driver chicony failed with error -22 [ 206.911948][ T9] usb 6-1: USB disconnect, device number 4 [ 207.187565][ T5897] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 207.373730][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 207.394470][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.403754][ T30] audit: type=1400 audit(1754550359.620:512): avc: denied { setopt } for pid=10468 comm="syz.0.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.447251][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.477218][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 207.495714][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 207.513569][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.528422][ T5897] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 207.545412][ T5897] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 207.574189][ T5897] usb 3-1: Manufacturer: syz [ 207.587773][T10465] bond0: entered promiscuous mode [ 207.594003][ T5897] usb 3-1: config 0 descriptor?? [ 207.611522][T10465] bond_slave_0: entered promiscuous mode [ 207.620985][T10465] bond_slave_1: entered promiscuous mode [ 207.626954][T10465] bridge0: entered promiscuous mode [ 207.654498][T10465] bond0: entered allmulticast mode [ 207.677274][T10465] bond_slave_0: entered allmulticast mode [ 207.683360][T10465] bond_slave_1: entered allmulticast mode [ 207.689999][T10465] bridge0: entered allmulticast mode [ 207.820589][ T30] audit: type=1400 audit(1754550360.040:513): avc: denied { audit_write } for pid=10484 comm="syz.0.1750" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 207.900248][ T30] audit: type=1400 audit(1754550360.090:514): avc: denied { watch watch_reads } for pid=10484 comm="syz.0.1750" path="/proc/716/net" dev="proc" ino=30530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 207.927610][ T5897] rc_core: IR keymap rc-hauppauge not found [ 207.935905][ T5897] Registered IR keymap rc-empty [ 207.951464][ T5897] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.027307][ T5897] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.068442][ T5897] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 208.092353][ T5897] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input51 [ 208.115043][ T5897] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.153101][ T5897] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.193561][ T5897] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.225954][T10507] syzkaller1: entered promiscuous mode [ 208.227181][ T5953] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 208.231764][ T5897] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.247277][T10507] syzkaller1: entered allmulticast mode [ 208.273687][ T5897] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.333505][ T5897] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.381426][ T5897] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.434397][ T5897] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.445537][T10514] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1761'. [ 208.470786][ T5897] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.480510][T10514] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.489730][T10514] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.507283][ T5897] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.507898][ T5953] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 208.534318][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.569069][ T5897] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 208.585023][ T5953] usb 1-1: config 0 descriptor?? [ 208.599737][ T5897] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 208.621904][ T5953] cp210x 1-1:0.0: cp210x converter detected [ 208.652955][ T5897] usb 3-1: USB disconnect, device number 29 [ 208.713855][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1765'. [ 208.746704][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1765'. [ 208.828517][T10498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.860310][T10498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.059859][T10535] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1771'. [ 209.076529][T10535] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1771'. [ 209.098578][ T5953] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 209.122519][ T5953] usb 1-1: cp210x converter now attached to ttyUSB0 [ 209.266886][T10541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.383567][ T5953] usb 1-1: USB disconnect, device number 30 [ 209.406604][ T5953] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 209.460343][ T5953] cp210x 1-1:0.0: device disconnected [ 209.489645][T10546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.768961][ T30] audit: type=1400 audit(1754550361.980:515): avc: denied { map } for pid=10554 comm="syz.1.1780" path="socket:[31432]" dev="sockfs" ino=31432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 210.287209][ T5953] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 210.441486][ T5953] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 210.468388][ T10] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 210.474125][ T5953] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 210.518980][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 210.557193][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 210.568749][ T5953] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.587248][ T5953] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.606640][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.627802][ T5953] usb 1-1: config 0 descriptor?? [ 210.634084][T10566] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 210.667371][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 210.685879][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 210.695593][ T10] usb 5-1: config 13 has an invalid interface number: 90 but max is 0 [ 210.715568][ T10] usb 5-1: config 13 has no interface number 0 [ 210.732835][ T10] usb 5-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 210.766996][ T10] usb 5-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7 [ 210.780439][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.807528][ T10] usb 5-1: Product: syz [ 210.821886][ T10] usb 5-1: Manufacturer: syz [ 210.826572][ T10] usb 5-1: SerialNumber: syz [ 211.064255][ T5953] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd [ 211.104303][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.109439][ T5953] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 211.181468][ T10] usb 5-1: USB disconnect, device number 27 [ 211.257540][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.90/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.359400][ T5953] usb 1-1: USB disconnect, device number 31 [ 211.718242][ C0] vcan0: j1939_tp_rxtimer: 0xffff888048995800: rx timeout, send abort [ 211.747673][ T30] audit: type=1400 audit(1754550363.960:516): avc: denied { read } for pid=5199 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 211.796348][ T30] audit: type=1400 audit(1754550363.960:517): avc: denied { search } for pid=5199 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.841563][ T30] audit: type=1400 audit(1754550363.960:518): avc: denied { search } for pid=5199 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.907178][ T30] audit: type=1400 audit(1754550363.960:519): avc: denied { add_name } for pid=5199 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.953968][ T30] audit: type=1400 audit(1754550363.960:520): avc: denied { create } for pid=5199 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 212.010165][ T30] audit: type=1400 audit(1754550363.960:521): avc: denied { append open } for pid=5199 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 212.076622][ T30] audit: type=1400 audit(1754550363.970:522): avc: denied { getattr } for pid=5199 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 212.227967][ C0] vcan0: j1939_tp_rxtimer: 0xffff888048995800: abort rx timeout. Force session deactivation [ 212.323805][T10631] netlink: 'syz.2.1811': attribute type 4 has an invalid length. [ 212.372551][T10631] netlink: 'syz.2.1811': attribute type 4 has an invalid length. [ 212.529628][T10637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.534756][T10641] IPv4: Oversized IP packet from 127.202.26.0 [ 212.968769][T10659] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1826'. [ 212.986693][T10657] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1825'. [ 212.996113][ T5897] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 213.163373][ T5897] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 213.213918][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.279390][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.311840][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 213.372230][ T5897] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 213.417622][ T5897] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 213.425867][ T5897] usb 6-1: Manufacturer: syz [ 213.454653][ T5897] usb 6-1: config 0 descriptor?? [ 213.697080][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1837'. [ 213.697640][ T5953] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 213.877406][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 213.886078][ T5953] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 213.895679][ T5953] usb 5-1: config 0 has no interface number 0 [ 213.906005][ T5953] usb 5-1: config 0 interface 184 has no altsetting 0 [ 213.931103][ T5953] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 213.942129][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.958421][ T5953] usb 5-1: Product: syz [ 213.969083][ T5953] usb 5-1: Manufacturer: syz [ 213.974100][ T5953] usb 5-1: SerialNumber: syz [ 213.986231][ T5953] usb 5-1: config 0 descriptor?? [ 213.989988][ T5897] appleir 0003:05AC:8243.0023: unknown main item tag 0x0 [ 214.006411][ T5953] smsc75xx v1.0.0 [ 214.013364][ T5897] appleir 0003:05AC:8243.0023: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 214.515710][ T30] audit: type=1400 audit(1754550366.730:523): avc: denied { name_bind } for pid=10706 comm="syz.2.1844" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 214.641219][ T5953] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 214.658478][ T5953] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 214.744111][ T30] audit: type=1400 audit(1754550366.960:524): avc: denied { read write } for pid=10717 comm="syz.0.1849" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 214.789926][ T30] audit: type=1400 audit(1754550366.990:525): avc: denied { open } for pid=10717 comm="syz.0.1849" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 214.967209][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 215.086864][ T5953] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 215.100206][ T5953] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 215.111542][ T5953] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 215.121216][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 215.126507][ T5953] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 215.136705][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.150482][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 215.166758][ T5953] usb 5-1: USB disconnect, device number 28 [ 215.176547][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 215.186006][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.196089][ T24] usb 3-1: config 0 descriptor?? [ 215.662517][T10739] tipc: Started in network mode [ 215.668766][T10739] tipc: Node identity ac1414aa, cluster identity 4711 [ 215.675690][T10739] tipc: Enabling of bearer rejected, failed to enable media [ 215.971411][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 215.977756][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 215.985767][ T5924] usb 6-1: USB disconnect, device number 5 [ 216.001922][ T24] usb 3-1: USB disconnect, device number 30 [ 216.444082][T10781] program syz.0.1875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.638068][ C1] sd 0:0:1:0: [sda] tag#838 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 216.648424][ C1] sd 0:0:1:0: [sda] tag#838 CDB: Write(6) 0a 00 00 00 00 00 [ 216.762724][T10795] loop4: detected capacity change from 0 to 7 [ 216.778104][T10795] Dev loop4: unable to read RDB block 7 [ 216.783811][T10795] loop4: unable to read partition table [ 216.807464][T10795] loop4: partition table beyond EOD, truncated [ 216.813719][T10795] loop_reread_partitions: partition scan of loop4 (x鼦熝鄸 ) failed (rc=-5) [ 217.607531][ T5897] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 217.757372][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 217.773232][ T5897] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 217.783482][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.792077][ T5897] usb 1-1: Product: syz [ 217.796685][ T5897] usb 1-1: Manufacturer: syz [ 217.801236][T10850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1906'. [ 217.803288][ T5897] usb 1-1: SerialNumber: syz [ 217.835542][T10850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.839531][ T5897] usb 1-1: config 0 descriptor?? [ 217.873867][ T5897] gspca_main: sq930x-2.14.0 probing 2770:930c [ 217.921837][ T5855] Bluetooth: hci5: command 0x1003 tx timeout [ 217.929644][ T5854] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 217.950179][T10850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.990790][T10850] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 218.050968][T10850] bond1: (slave vcan1): Error -95 calling set_mac_address [ 218.255815][T10864] binder: 10862:10864 ioctl c0306201 2000000003c0 returned -14 [ 218.433520][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1916'. [ 218.997703][ T5897] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 219.025351][ T5897] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 219.075208][ T5897] usb 1-1: USB disconnect, device number 32 [ 219.331457][T10898] [ 219.333824][T10898] ===================================================== [ 219.340755][T10898] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 219.348221][T10898] 6.16.0-syzkaller-11952-g6e64f4580381 #0 Not tainted [ 219.354983][T10898] ----------------------------------------------------- [ 219.361919][T10898] syz.4.1927/10898 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 219.369650][T10898] ffffffff8e20c098 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0xed/0xc80 [ 219.378299][T10898] [ 219.378299][T10898] and this task is already holding: [ 219.385663][T10898] ffff888051a77d20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 219.394394][T10898] which would create a new lock dependency: [ 219.400289][T10898] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 219.407879][T10898] [ 219.407879][T10898] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 219.417333][T10898] (&client->buffer_lock){..-.}-{3:3} [ 219.417364][T10898] [ 219.417364][T10898] ... which became SOFTIRQ-irq-safe at: [ 219.430424][T10898] lock_acquire+0x179/0x350 [ 219.435036][T10898] _raw_spin_lock+0x2e/0x40 [ 219.439650][T10898] evdev_pass_values+0x10e/0x9b0 [ 219.444705][T10898] evdev_events+0x1bb/0x390 [ 219.449308][T10898] input_pass_values+0x74b/0x880 [ 219.454347][T10898] input_handle_event+0xb29/0x14d0 [ 219.459557][T10898] input_event+0x8e/0xd0 [ 219.463918][T10898] hidinput_hid_event+0xa10/0x2420 [ 219.469131][T10898] hid_process_event+0x4b7/0x5e0 [ 219.474176][T10898] hid_report_raw_event+0xa0a/0x1290 [ 219.479565][T10898] __hid_input_report.constprop.0+0x33f/0x450 [ 219.485738][T10898] hid_irq_in+0x35e/0x870 [ 219.490150][T10898] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 219.495594][T10898] usb_hcd_giveback_urb+0x39b/0x450 [ 219.500864][T10898] dummy_timer+0x1814/0x3a30 [ 219.505528][T10898] __hrtimer_run_queues+0x202/0xad0 [ 219.510803][T10898] hrtimer_run_softirq+0x17d/0x350 [ 219.516006][T10898] handle_softirqs+0x216/0x8e0 [ 219.520935][T10898] __irq_exit_rcu+0x109/0x170 [ 219.525706][T10898] irq_exit_rcu+0x9/0x30 [ 219.530035][T10898] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 219.535750][T10898] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 219.541801][T10898] console_flush_all+0x9a2/0xc60 [ 219.546806][T10898] console_unlock+0xd8/0x210 [ 219.551462][T10898] vprintk_emit+0x418/0x6d0 [ 219.556033][T10898] dev_printk_emit+0xfa/0x140 [ 219.560791][T10898] __dev_printk+0xf5/0x270 [ 219.565277][T10898] _dev_info+0xe4/0x120 [ 219.569505][T10898] usb_new_device+0x7d6/0x1a60 [ 219.574333][T10898] hub_event+0x2f34/0x4fe0 [ 219.578811][T10898] process_one_work+0x9cc/0x1b70 [ 219.583814][T10898] worker_thread+0x6c8/0xf10 [ 219.588468][T10898] kthread+0x3c5/0x780 [ 219.592600][T10898] ret_from_fork+0x5d4/0x6f0 [ 219.597263][T10898] ret_from_fork_asm+0x1a/0x30 [ 219.602093][T10898] [ 219.602093][T10898] to a SOFTIRQ-irq-unsafe lock: [ 219.609084][T10898] (tasklist_lock){.+.+}-{3:3} [ 219.609104][T10898] [ 219.609104][T10898] ... which became SOFTIRQ-irq-unsafe at: [ 219.621707][T10898] ... [ 219.621715][T10898] lock_acquire+0x179/0x350 [ 219.628850][T10898] _raw_read_lock+0x5f/0x70 [ 219.633428][T10898] __do_wait+0x105/0x890 [ 219.637749][T10898] do_wait+0x21e/0x5a0 [ 219.641882][T10898] kernel_wait+0x9f/0x160 [ 219.646275][T10898] call_usermodehelper_exec_work+0xf1/0x170 [ 219.652261][T10898] process_one_work+0x9cc/0x1b70 [ 219.657291][T10898] worker_thread+0x6c8/0xf10 [ 219.661957][T10898] kthread+0x3c5/0x780 [ 219.666091][T10898] ret_from_fork+0x5d4/0x6f0 [ 219.670746][T10898] ret_from_fork_asm+0x1a/0x30 [ 219.675579][T10898] [ 219.675579][T10898] other info that might help us debug this: [ 219.675579][T10898] [ 219.685782][T10898] Chain exists of: [ 219.685782][T10898] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 219.685782][T10898] [ 219.698969][T10898] Possible interrupt unsafe locking scenario: [ 219.698969][T10898] [ 219.707275][T10898] CPU0 CPU1 [ 219.712615][T10898] ---- ---- [ 219.717954][T10898] lock(tasklist_lock); [ 219.722178][T10898] local_irq_disable(); [ 219.728910][T10898] lock(&client->buffer_lock); [ 219.736272][T10898] lock(&f_owner->lock); [ 219.743094][T10898] [ 219.746522][T10898] lock(&client->buffer_lock); [ 219.751520][T10898] [ 219.751520][T10898] *** DEADLOCK *** [ 219.751520][T10898] [ 219.759634][T10898] 2 locks held by syz.4.1927/10898: [ 219.764804][T10898] #0: ffff88801fbdc240 (&u->lock){+.+.}-{3:3}, at: unix_stream_sendmsg+0xd35/0x1340 [ 219.774265][T10898] #1: ffff888051a77d20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 219.783379][T10898] [ 219.783379][T10898] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 219.793758][T10898] -> (&client->buffer_lock){..-.}-{3:3} { [ 219.799641][T10898] IN-SOFTIRQ-W at: [ 219.803769][T10898] lock_acquire+0x179/0x350 [ 219.810252][T10898] _raw_spin_lock+0x2e/0x40 [ 219.816735][T10898] evdev_pass_values+0x10e/0x9b0 [ 219.823653][T10898] evdev_events+0x1bb/0x390 [ 219.830133][T10898] input_pass_values+0x74b/0x880 [ 219.837049][T10898] input_handle_event+0xb29/0x14d0 [ 219.844138][T10898] input_event+0x8e/0xd0 [ 219.850355][T10898] hidinput_hid_event+0xa10/0x2420 [ 219.857438][T10898] hid_process_event+0x4b7/0x5e0 [ 219.864355][T10898] hid_report_raw_event+0xa0a/0x1290 [ 219.871617][T10898] __hid_input_report.constprop.0+0x33f/0x450 [ 219.879661][T10898] hid_irq_in+0x35e/0x870 [ 219.885971][T10898] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 219.893321][T10898] usb_hcd_giveback_urb+0x39b/0x450 [ 219.900495][T10898] dummy_timer+0x1814/0x3a30 [ 219.907068][T10898] __hrtimer_run_queues+0x202/0xad0 [ 219.914250][T10898] hrtimer_run_softirq+0x17d/0x350 [ 219.921341][T10898] handle_softirqs+0x216/0x8e0 [ 219.928085][T10898] __irq_exit_rcu+0x109/0x170 [ 219.934742][T10898] irq_exit_rcu+0x9/0x30 [ 219.940964][T10898] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 219.948580][T10898] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 219.956546][T10898] console_flush_all+0x9a2/0xc60 [ 219.963464][T10898] console_unlock+0xd8/0x210 [ 219.970030][T10898] vprintk_emit+0x418/0x6d0 [ 219.976509][T10898] dev_printk_emit+0xfa/0x140 [ 219.983168][T10898] __dev_printk+0xf5/0x270 [ 219.989565][T10898] _dev_info+0xe4/0x120 [ 219.995700][T10898] usb_new_device+0x7d6/0x1a60 [ 220.002438][T10898] hub_event+0x2f34/0x4fe0 [ 220.008830][T10898] process_one_work+0x9cc/0x1b70 [ 220.015759][T10898] worker_thread+0x6c8/0xf10 [ 220.022324][T10898] kthread+0x3c5/0x780 [ 220.028372][T10898] ret_from_fork+0x5d4/0x6f0 [ 220.034943][T10898] ret_from_fork_asm+0x1a/0x30 [ 220.041695][T10898] INITIAL USE at: [ 220.045738][T10898] lock_acquire+0x179/0x350 [ 220.052137][T10898] _raw_spin_lock+0x2e/0x40 [ 220.058556][T10898] evdev_pass_values+0x10e/0x9b0 [ 220.065392][T10898] evdev_events+0x104/0x390 [ 220.071785][T10898] input_pass_values+0x138/0x880 [ 220.078612][T10898] input_handle_event+0xf00/0x14d0 [ 220.085611][T10898] input_inject_event+0x1e8/0x3b0 [ 220.092611][T10898] evdev_write+0x457/0x750 [ 220.098926][T10898] vfs_write+0x2a0/0x1150 [ 220.105146][T10898] ksys_write+0x1f8/0x250 [ 220.111365][T10898] do_syscall_64+0xcd/0x4c0 [ 220.117760][T10898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.125551][T10898] } [ 220.128207][T10898] ... key at: [] __key.1+0x0/0x40 [ 220.135565][T10898] -> (&new->fa_lock){....}-{3:3} { [ 220.140752][T10898] INITIAL USE at: [ 220.144712][T10898] lock_acquire+0x179/0x350 [ 220.150945][T10898] _raw_write_lock_irq+0x36/0x50 [ 220.157604][T10898] fasync_remove_entry+0xb2/0x1e0 [ 220.164361][T10898] fasync_helper+0xaf/0xd0 [ 220.170496][T10898] lease_modify+0x232/0x500 [ 220.176711][T10898] locks_remove_file+0x29e/0x5c0 [ 220.183461][T10898] __fput+0x351/0xb70 [ 220.189163][T10898] task_work_run+0x150/0x240 [ 220.195469][T10898] exit_to_user_mode_loop+0xeb/0x110 [ 220.202469][T10898] do_syscall_64+0x3f6/0x4c0 [ 220.208774][T10898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.216391][T10898] INITIAL READ USE at: [ 220.220784][T10898] lock_acquire+0x179/0x350 [ 220.227448][T10898] _raw_read_lock_irqsave+0x74/0x90 [ 220.234825][T10898] kill_fasync+0x138/0x510 [ 220.241414][T10898] lease_break_callback+0x23/0x30 [ 220.248624][T10898] __break_lease+0x671/0x1810 [ 220.255468][T10898] vfs_truncate+0x4d3/0x6e0 [ 220.262122][T10898] __x64_sys_truncate+0x172/0x1e0 [ 220.269298][T10898] do_syscall_64+0xcd/0x4c0 [ 220.275949][T10898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.283990][T10898] } [ 220.286560][T10898] ... key at: [] __key.0+0x0/0x40 [ 220.293748][T10898] ... acquired at: [ 220.297612][T10898] _raw_read_lock_irqsave+0x74/0x90 [ 220.302967][T10898] kill_fasync+0x138/0x510 [ 220.307539][T10898] evdev_pass_values+0x619/0x9b0 [ 220.312628][T10898] evdev_events+0x1bb/0x390 [ 220.317288][T10898] input_pass_values+0x74b/0x880 [ 220.322377][T10898] input_handle_event+0xf00/0x14d0 [ 220.327645][T10898] input_inject_event+0x1e8/0x3b0 [ 220.332834][T10898] evdev_write+0x457/0x750 [ 220.337407][T10898] vfs_write+0x2a0/0x1150 [ 220.341886][T10898] ksys_write+0x1f8/0x250 [ 220.346365][T10898] do_syscall_64+0xcd/0x4c0 [ 220.351017][T10898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.357075][T10898] [ 220.359389][T10898] -> (&f_owner->lock){....}-{3:3} { [ 220.364584][T10898] INITIAL USE at: [ 220.368461][T10898] lock_acquire+0x179/0x350 [ 220.374521][T10898] _raw_write_lock_irq+0x36/0x50 [ 220.381004][T10898] __f_setown+0x61/0x3c0 [ 220.386791][T10898] generic_setlease+0xef2/0x1300 [ 220.393276][T10898] kernel_setlease+0x106/0x140 [ 220.399586][T10898] vfs_setlease+0x258/0x2d0 [ 220.405630][T10898] fcntl_setlease+0x3ed/0x5a0 [ 220.411850][T10898] do_fcntl+0x751/0x15a0 [ 220.417641][T10898] __x64_sys_fcntl+0x163/0x200 [ 220.423967][T10898] do_syscall_64+0xcd/0x4c0 [ 220.430012][T10898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.437458][T10898] INITIAL READ USE at: [ 220.441765][T10898] lock_acquire+0x179/0x350 [ 220.448253][T10898] _raw_read_lock_irqsave+0x74/0x90 [ 220.455438][T10898] send_sigio+0x31/0x3e0 [ 220.461663][T10898] kill_fasync+0x214/0x510 [ 220.468079][T10898] lease_break_callback+0x23/0x30 [ 220.475174][T10898] __break_lease+0x671/0x1810 [ 220.481863][T10898] vfs_truncate+0x4d3/0x6e0 [ 220.488367][T10898] __x64_sys_truncate+0x172/0x1e0 [ 220.495399][T10898] do_syscall_64+0xcd/0x4c0 [ 220.501910][T10898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.509795][T10898] } [ 220.512270][T10898] ... key at: [] __key.1+0x0/0x40 [ 220.519397][T10898] ... acquired at: [ 220.523175][T10898] _raw_read_lock_irqsave+0x74/0x90 [ 220.528560][T10898] send_sigio+0x31/0x3e0 [ 220.532963][T10898] kill_fasync+0x214/0x510 [ 220.537543][T10898] lease_break_callback+0x23/0x30 [ 220.542737][T10898] __break_lease+0x671/0x1810 [ 220.547565][T10898] vfs_truncate+0x4d3/0x6e0 [ 220.552307][T10898] __x64_sys_truncate+0x172/0x1e0 [ 220.557495][T10898] do_syscall_64+0xcd/0x4c0 [ 220.562161][T10898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.568219][T10898] [ 220.570546][T10898] [ 220.570546][T10898] the dependencies between the lock to be acquired [ 220.570552][T10898] and SOFTIRQ-irq-unsafe lock: [ 220.584013][T10898] -> (tasklist_lock){.+.+}-{3:3} { [ 220.589114][T10898] HARDIRQ-ON-R at: [ 220.593074][T10898] lock_acquire+0x179/0x350 [ 220.599219][T10898] _raw_read_lock+0x5f/0x70 [ 220.605356][T10898] __do_wait+0x105/0x890 [ 220.611223][T10898] do_wait+0x21e/0x5a0 [ 220.616915][T10898] kernel_wait+0x9f/0x160 [ 220.622873][T10898] call_usermodehelper_exec_work+0xf1/0x170 [ 220.630395][T10898] process_one_work+0x9cc/0x1b70 [ 220.636963][T10898] worker_thread+0x6c8/0xf10 [ 220.643196][T10898] kthread+0x3c5/0x780 [ 220.648895][T10898] ret_from_fork+0x5d4/0x6f0 [ 220.655123][T10898] ret_from_fork_asm+0x1a/0x30 [ 220.661516][T10898] SOFTIRQ-ON-R at: [ 220.665486][T10898] lock_acquire+0x179/0x350 [ 220.671624][T10898] _raw_read_lock+0x5f/0x70 [ 220.677775][T10898] __do_wait+0x105/0x890 [ 220.683672][T10898] do_wait+0x21e/0x5a0 [ 220.689386][T10898] kernel_wait+0x9f/0x160 [ 220.695355][T10898] call_usermodehelper_exec_work+0xf1/0x170 [ 220.702879][T10898] process_one_work+0x9cc/0x1b70 [ 220.709452][T10898] worker_thread+0x6c8/0xf10 [ 220.715672][T10898] kthread+0x3c5/0x780 [ 220.721369][T10898] ret_from_fork+0x5d4/0x6f0 [ 220.727587][T10898] ret_from_fork_asm+0x1a/0x30 [ 220.733986][T10898] INITIAL USE at: [ 220.737859][T10898] lock_acquire+0x179/0x350 [ 220.743916][T10898] _raw_write_lock_irq+0x36/0x50 [ 220.750400][T10898] copy_process+0x4caf/0x7690 [ 220.756623][T10898] kernel_clone+0xfc/0x930 [ 220.762585][T10898] user_mode_thread+0xc7/0x110 [ 220.768890][T10898] rest_init+0x23/0x2b0 [ 220.774588][T10898] start_kernel+0x3ee/0x4d0 [ 220.780633][T10898] x86_64_start_reservations+0x18/0x30 [ 220.787649][T10898] x86_64_start_kernel+0x130/0x190 [ 220.794312][T10898] common_startup_64+0x13e/0x148 [ 220.800790][T10898] INITIAL READ USE at: [ 220.805113][T10898] lock_acquire+0x179/0x350 [ 220.811598][T10898] _raw_read_lock+0x5f/0x70 [ 220.818094][T10898] __do_wait+0x105/0x890 [ 220.824312][T10898] do_wait+0x21e/0x5a0 [ 220.830350][T10898] kernel_wait+0x9f/0x160 [ 220.836650][T10898] call_usermodehelper_exec_work+0xf1/0x170 [ 220.844528][T10898] process_one_work+0x9cc/0x1b70 [ 220.851444][T10898] worker_thread+0x6c8/0xf10 [ 220.858010][T10898] kthread+0x3c5/0x780 [ 220.864140][T10898] ret_from_fork+0x5d4/0x6f0 [ 220.870714][T10898] ret_from_fork_asm+0x1a/0x30 [ 220.877480][T10898] } [ 220.879967][T10898] ... key at: [] tasklist_lock+0x18/0x40 [ 220.887666][T10898] ... acquired at: [ 220.891446][T10898] lock_acquire+0x179/0x350 [ 220.896116][T10898] _raw_read_lock+0x5f/0x70 [ 220.900774][T10898] send_sigurg+0xed/0xc80 [ 220.905261][T10898] sk_send_sigurg+0x76/0x360 [ 220.910034][T10898] unix_stream_sendmsg+0xfa5/0x1340 [ 220.915384][T10898] ____sys_sendmsg+0xa98/0xc70 [ 220.920299][T10898] ___sys_sendmsg+0x134/0x1d0 [ 220.925133][T10898] __sys_sendmmsg+0x200/0x420 [ 220.929965][T10898] __x64_sys_sendmmsg+0x9c/0x100 [ 220.935061][T10898] do_syscall_64+0xcd/0x4c0 [ 220.939714][T10898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.945777][T10898] [ 220.948088][T10898] [ 220.948088][T10898] stack backtrace: [ 220.953966][T10898] CPU: 0 UID: 60929 PID: 10898 Comm: syz.4.1927 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 220.953984][T10898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.953993][T10898] Call Trace: [ 220.953998][T10898] [ 220.954003][T10898] dump_stack_lvl+0x116/0x1f0 [ 220.954026][T10898] check_irq_usage+0x7dc/0x920 [ 220.954051][T10898] ? check_path.constprop.0+0x24/0x50 [ 220.954072][T10898] ? __lock_acquire+0x12bc/0x1ce0 [ 220.954091][T10898] __lock_acquire+0x12bc/0x1ce0 [ 220.954112][T10898] ? find_held_lock+0x2b/0x80 [ 220.954129][T10898] lock_acquire+0x179/0x350 [ 220.954149][T10898] ? send_sigurg+0xed/0xc80 [ 220.954171][T10898] _raw_read_lock+0x5f/0x70 [ 220.954190][T10898] ? send_sigurg+0xed/0xc80 [ 220.954207][T10898] send_sigurg+0xed/0xc80 [ 220.954224][T10898] ? find_held_lock+0x2b/0x80 [ 220.954241][T10898] sk_send_sigurg+0x76/0x360 [ 220.954260][T10898] unix_stream_sendmsg+0xfa5/0x1340 [ 220.954274][T10898] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 220.954295][T10898] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 220.954312][T10898] ____sys_sendmsg+0xa98/0xc70 [ 220.954326][T10898] ? copy_msghdr_from_user+0x10a/0x160 [ 220.954345][T10898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.954360][T10898] ? rcu_is_watching+0x12/0xc0 [ 220.954379][T10898] ___sys_sendmsg+0x134/0x1d0 [ 220.954399][T10898] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.954422][T10898] ? find_held_lock+0x2b/0x80 [ 220.954442][T10898] __sys_sendmmsg+0x200/0x420 [ 220.954462][T10898] ? __pfx___sys_sendmmsg+0x10/0x10 [ 220.954484][T10898] ? __pfx_do_futex+0x10/0x10 [ 220.954510][T10898] ? xfd_validate_state+0x61/0x180 [ 220.954525][T10898] __x64_sys_sendmmsg+0x9c/0x100 [ 220.954544][T10898] ? lockdep_hardirqs_on+0x7c/0x110 [ 220.954563][T10898] do_syscall_64+0xcd/0x4c0 [ 220.954576][T10898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.954589][T10898] RIP: 0033:0x7fe885f8ebe9 [ 220.954601][T10898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.954614][T10898] RSP: 002b:00007fe886d96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 220.954627][T10898] RAX: ffffffffffffffda RBX: 00007fe8861b5fa0 RCX: 00007fe885f8ebe9 [ 220.954635][T10898] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 220.954644][T10898] RBP: 00007fe886011e19 R08: 0000000000000000 R09: 0000000000000000 [ 220.954652][T10898] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 220.954660][T10898] R13: 00007fe8861b6038 R14: 00007fe8861b5fa0 R15: 00007ffe0f517d38 [ 220.954673][T10898]