last executing test programs: 4m10.057586738s ago: executing program 2 (id=1011): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xac}}, 0x48004) 4m9.988910317s ago: executing program 2 (id=1012): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001600), 0x2a040, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001640)=0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4m9.838402738s ago: executing program 2 (id=1014): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xc, 0x9, 0xfff}, 0x10) 4m9.837607842s ago: executing program 2 (id=1015): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 4m9.779727076s ago: executing program 2 (id=1016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "848c91b3e111a6dcf5671ca5df24a527628e54fe9bda827a"}]]}, 0x38}}, 0x0) 4m9.66469574s ago: executing program 2 (id=1017): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008000) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a010703010902240002000000000904"], 0x0) 4m9.564875383s ago: executing program 32 (id=1017): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008000) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a010703010902240002000000000904"], 0x0) 3m32.602872912s ago: executing program 0 (id=1675): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x3, @loopback, 0x7ff}], 0x2c) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x40ea716c, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) 3m31.643553568s ago: executing program 0 (id=1694): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffb}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 3m31.581245189s ago: executing program 0 (id=1696): openat$nullb(0xffffffffffffff9c, 0x0, 0x63682, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x24}}, 0x4000) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 3m31.435009223s ago: executing program 0 (id=1702): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3m31.290893062s ago: executing program 0 (id=1706): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) open(&(0x7f0000000080)='./bus\x00', 0x169242, 0x10) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') 3m31.186196357s ago: executing program 0 (id=1709): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x3}}, 0x18) splice(r1, 0x0, r0, 0x0, 0x18, 0x7) 3m16.142446955s ago: executing program 33 (id=1709): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x3}}, 0x18) splice(r1, 0x0, r0, 0x0, 0x18, 0x7) 14.605769495s ago: executing program 5 (id=5311): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x41486a66, 0x4) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 14.579849577s ago: executing program 5 (id=5312): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x6c05}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14.541139662s ago: executing program 5 (id=5314): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$kcm(0xa, 0x2, 0x73) 14.49289713s ago: executing program 5 (id=5315): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x49, @loopback, 0x1}}}, 0x3a) 14.141067131s ago: executing program 5 (id=5321): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xe82) accept4(r0, 0x0, 0x0, 0x0) 7.640610765s ago: executing program 5 (id=5321): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xe82) accept4(r0, 0x0, 0x0, 0x0) 3.024315536s ago: executing program 6 (id=5438): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x2be, &(0x7f0000000140)={0x0, 0x100b420, 0x0, 0x2, 0x111}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 2.735686171s ago: executing program 6 (id=5442): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 2.629422977s ago: executing program 6 (id=5444): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000']) mkdirat(0xffffffffffffffff, 0x0, 0x48) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.585909402s ago: executing program 4 (id=5445): socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0xa00, 0x0) r0 = syz_io_uring_setup(0x416d, &(0x7f00000010c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x59) 2.502772752s ago: executing program 4 (id=5446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a80184f"], 0x4c}}, 0x0) 2.045066733s ago: executing program 3 (id=5447): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 1.95472368s ago: executing program 4 (id=5448): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x20000080) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 1.935734914s ago: executing program 3 (id=5450): socket$packet(0x11, 0x3, 0x300) eventfd(0x6) r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x2040400) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 1.770674856s ago: executing program 3 (id=5452): syz_open_dev$MSR(&(0x7f0000000100), 0x200, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x95}}) 1.500444094s ago: executing program 3 (id=5454): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0x4a, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 'veth0_to_team\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 1.460930269s ago: executing program 1 (id=5455): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc70000000000", @ANYRESDEC=r0], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e00000003000000000000040500060000000000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1.338776833s ago: executing program 3 (id=5456): r0 = socket$inet6(0xa, 0x2, 0x3a) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 1.312935519s ago: executing program 1 (id=5457): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f00001d3000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00009ad000/0x2000)=nil) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.248951997s ago: executing program 3 (id=5458): socket$kcm(0x2, 0x3, 0x2) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x901}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.096574391s ago: executing program 4 (id=5459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x38, 0xd, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4810) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="06001200000000000600b50085010200040013000a00060008021100000000000c0043"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) 1.009323683s ago: executing program 4 (id=5460): creat(&(0x7f00000001c0)='./file0\x00', 0x16c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa83031, 0x0) 726.146079ms ago: executing program 6 (id=5461): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x6c, r3, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_a, @initial, {0x4, 0x9}, @value=@ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, @val, @void, @void, @val={0x2d, 0x1a, {0x800, 0x1, 0x4, 0x0, {0x7ff, 0x7f, 0x0, 0x4, 0x0, 0x1, 0x1, 0x2}, 0x1, 0x9, 0xd1}}, @val={0x72, 0x6}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x7, 0x3]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x24008080) 674.303203ms ago: executing program 6 (id=5462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x800004, 0xffffffffffffffff, 0x1}) 568.927099ms ago: executing program 6 (id=5463): socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000800)="7deb", 0x5dc}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x24048801) 474.996593ms ago: executing program 1 (id=5464): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000a, 0x8012, r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) 307.798158ms ago: executing program 1 (id=5465): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='.'], 0x20) 65.093022ms ago: executing program 1 (id=5466): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x1df706, 0x29134}) 64.729504ms ago: executing program 4 (id=5467): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fcntl$setstatus(r1, 0x4, 0x2400) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x57, 0xffff, 0x0, {0x7, 0x1}, {0x50, 0x2}, @period={0x59, 0x7, 0xc1f, 0x6773, 0x8000, {0x9, 0x9, 0x1, 0x1}, 0x0, 0x0}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 1 (id=5468): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8050}, 0x20040054) kernel console output (not intermixed with test programs): veth0_macvtap: entered allmulticast mode [ 311.958749][ T30] audit: type=1326 audit(1748806033.809:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.1.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463618e969 code=0x7ffc0000 [ 312.148823][ T9] em28xx 5-1:0.0: chip ID is em28174 [ 312.278274][T15058] tun0: tun_chr_ioctl cmd 1074025678 [ 312.293165][T15058] tun0: group set to 0 [ 312.364105][ T5920] usb 5-1: USB disconnect, device number 39 [ 312.371256][ T5920] em28xx 5-1:0.0: Disconnecting em28xx [ 312.380346][ T5920] em28xx 5-1:0.0: Freeing device [ 312.451683][ T5822] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 312.570289][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 312.620050][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 312.627991][ T5822] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 312.637035][ T5822] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 312.648150][ T5822] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 312.657227][ T5822] usb 2-1: config 1 has no interface number 0 [ 312.663876][ T5822] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.675434][ T5822] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58431, setting to 1024 [ 312.688025][ T5822] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 312.702981][ T5822] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 312.712115][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.722895][T15053] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 312.730287][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 312.737048][ T9] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 312.738043][ T5822] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 312.748641][ T9] usb 6-1: config 0 has no interface number 0 [ 312.758236][ T9] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.769438][ T9] usb 6-1: config 0 interface 85 has no altsetting 0 [ 312.778195][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 312.789034][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.797224][ T9] usb 6-1: Product: syz [ 312.801525][ T9] usb 6-1: Manufacturer: syz [ 312.806147][ T9] usb 6-1: SerialNumber: syz [ 312.813157][ T9] usb 6-1: config 0 descriptor?? [ 312.934220][T15053] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 312.945515][ T5822] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 313.084984][T15084] input: syz0 as /devices/virtual/input/input77 [ 313.169594][ T5873] usb 2-1: USB disconnect, device number 47 [ 313.183103][ T5873] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 313.186070][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4126'. [ 313.436353][ T9] appletouch 6-1:0.85: Geyser mode initialized. [ 313.443614][ T9] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input76 [ 313.571814][ T5901] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 313.653637][ T5822] usb 6-1: USB disconnect, device number 38 [ 313.666339][ T5822] appletouch 6-1:0.85: input: appletouch disconnected [ 313.759400][ T5901] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 313.780515][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.810733][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 313.812259][ T5901] usb 4-1: config 0 descriptor?? [ 313.970239][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 313.970862][T15125] SELinux: ebitmap: truncated map [ 313.982741][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 313.993173][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 314.004299][T15125] SELinux: failed to load policy [ 314.004887][ T9] usb 5-1: can't read configurations, error -71 [ 314.064977][ T5901] kaweth 4-1:0.0: Firmware present in device. [ 314.255139][ T5901] kaweth 4-1:0.0: Statistics collection: 0 [ 314.262405][ T5901] kaweth 4-1:0.0: Multicast filter limit: 0 [ 314.269956][ T5901] kaweth 4-1:0.0: MTU: 0 [ 314.280010][ T5901] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 314.672197][ T5901] kaweth 4-1:0.0: Error setting SOFS wait [ 314.683793][ T5901] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 314.717913][ T5901] usb 4-1: USB disconnect, device number 48 [ 315.085368][T15179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4162'. [ 316.155292][T15218] netlink: 'syz.4.4180': attribute type 1 has an invalid length. [ 316.163277][ T5920] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 316.174805][T15218] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4180'. [ 316.213767][T15222] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4182'. [ 316.296510][T15226] netlink: 'syz.3.4184': attribute type 21 has an invalid length. [ 316.307009][T15226] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4184'. [ 316.323285][T15226] netlink: 'syz.3.4184': attribute type 21 has an invalid length. [ 316.336196][T15226] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4184'. [ 316.351675][ T5920] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 316.365736][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.389127][ T5920] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.410144][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 316.443866][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.453704][ T5920] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.471782][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 316.481351][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.510218][ T5920] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.523468][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 316.534041][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4189'. [ 316.545100][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.563520][ T5920] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.581965][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 316.601384][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.610905][ T5920] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.626958][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 316.647164][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.690190][ T5920] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.707281][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 316.736621][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.760233][ T5920] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.773857][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 316.783542][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.826331][ T5920] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.853576][T15255] netlink: 'syz.6.4198': attribute type 4 has an invalid length. [ 316.860024][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 316.869980][T15255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4198'. [ 316.886948][ T5920] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 316.897269][T15255] NCSI netlink: No device for ifindex 6906736 [ 316.899886][ T5920] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 316.935226][ T5920] usb 6-1: Product: syz [ 316.939413][ T5920] usb 6-1: Manufacturer: syz [ 316.953101][ T5920] usb 6-1: SerialNumber: syz [ 316.967855][ T5920] usb 6-1: config 0 descriptor?? [ 316.991593][ T5920] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 317.025876][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4201'. [ 317.066380][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 317.066394][ T30] audit: type=1400 audit(1748806039.359:965): avc: denied { map } for pid=15262 comm="syz.4.4202" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 317.294068][ T5822] usb 6-1: USB disconnect, device number 39 [ 317.312262][ T5822] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 317.517356][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4208'. [ 317.827993][T15293] sp0: Synchronizing with TNC [ 317.836998][T15293] sp0: Found TNC [ 317.903033][ T30] audit: type=1400 audit(1748806040.189:966): avc: denied { ioctl } for pid=15296 comm="syz.1.4216" path="socket:[56380]" dev="sockfs" ino=56380 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 318.220100][ T5920] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 318.403472][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 318.419944][ T5920] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 318.429108][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.453980][ T5920] usb 2-1: config 0 descriptor?? [ 318.510142][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4235'. [ 318.601380][ T5873] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 318.667835][ T5920] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 318.682675][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 318.709547][ T5920] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 318.730691][ T5920] usb 2-1: media controller created [ 318.759944][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.763955][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.789942][ T5901] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 318.807617][ T5873] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 318.823387][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.837735][ T5873] usb 5-1: config 0 descriptor?? [ 318.848162][T15353] sp0: Synchronizing with TNC [ 318.869703][ T5920] az6027: usb out operation failed. (-71) [ 318.877315][ T5920] az6027: usb out operation failed. (-71) [ 318.884115][ T5920] stb0899_attach: Driver disabled by Kconfig [ 318.891267][ T5920] az6027: no front-end attached [ 318.891267][ T5920] [ 318.902048][ T5920] az6027: usb out operation failed. (-71) [ 318.907801][ T5920] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 318.931805][ T5920] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input78 [ 318.947163][ T5920] dvb-usb: schedule remote query interval to 400 msecs. [ 318.957721][ T5920] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 318.965867][ T5901] usb 7-1: Using ep0 maxpacket: 32 [ 318.972667][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.987013][ T5920] usb 2-1: USB disconnect, device number 48 [ 318.993142][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.004089][T15359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.013536][ T5901] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 319.049920][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.067888][ T5920] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 319.091035][ T5901] usb 7-1: config 0 descriptor?? [ 319.257084][T15370] loop6: detected capacity change from 0 to 32767 [ 319.380532][ T5822] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 319.453991][ T5873] usbhid 5-1:0.0: can't add hid device: -71 [ 319.462595][ T5873] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 319.474886][ T5873] usb 5-1: USB disconnect, device number 42 [ 319.525195][T15380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.527052][ T5901] ft260 0003:0403:6030.0046: unknown main item tag 0x0 [ 319.545082][ T30] audit: type=1400 audit(1748806041.839:967): avc: denied { open } for pid=15381 comm="syz.5.4256" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 319.570721][ T5822] usb 4-1: Using ep0 maxpacket: 32 [ 319.581443][ T5822] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 319.594549][ T30] audit: type=1400 audit(1748806041.889:968): avc: denied { ioctl } for pid=15381 comm="syz.5.4256" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 319.609892][ T5822] usb 4-1: config 0 has no interface number 0 [ 319.641636][ T5822] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 319.660946][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.670218][ T5822] usb 4-1: Product: syz [ 319.674430][ T5822] usb 4-1: Manufacturer: syz [ 319.679106][ T5822] usb 4-1: SerialNumber: syz [ 319.696011][ T5822] usb 4-1: config 0 descriptor?? [ 319.703435][ T5822] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 319.722193][ T5901] ft260 0003:0403:6030.0046: chip code: 952a ef62 [ 319.901024][T15392] Falling back ldisc for ttyS3. [ 319.916683][ T5822] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 319.930748][ T5901] ft260 0003:0403:6030.0046: failed to retrieve system status [ 319.950587][ T5822] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 319.961588][ T5901] ft260 0003:0403:6030.0046: probe with driver ft260 failed with error -71 [ 319.976817][ T5901] usb 7-1: USB disconnect, device number 25 [ 319.996904][T15398] input: syz1 as /devices/virtual/input/input79 [ 320.094569][ T30] audit: type=1326 audit(1748806042.389:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15400 comm="syz.1.4266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f4636185927 code=0x0 [ 320.327302][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 320.335902][ T5901] usb 4-1: USB disconnect, device number 49 [ 320.349398][ T5901] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 320.364599][ T5901] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 320.377629][ T5901] quatech2 4-1:0.51: device disconnected [ 320.508484][T15417] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.12) [ 320.520026][ T5915] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 320.680776][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 320.692407][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.716796][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.743519][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 320.780482][ T5915] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 320.789528][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.815020][ T5915] usb 5-1: config 0 descriptor?? [ 320.988397][ T30] audit: type=1400 audit(1748806043.279:970): avc: denied { setopt } for pid=15426 comm="syz.1.4276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 321.078677][T15431] netlink: 'syz.1.4278': attribute type 14 has an invalid length. [ 321.240987][ T5915] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0047/input/input80 [ 321.313968][ T5915] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0047/input/input81 [ 321.333088][ T5915] kye 0003:0458:5011.0047: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 321.430738][ T5901] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 321.616835][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 321.633798][ T5901] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 321.655020][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 321.673053][ T5901] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 321.682916][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.696105][ T5920] usb 5-1: USB disconnect, device number 43 [ 321.736794][ T5901] usb 6-1: Product: syz [ 321.745448][ T5901] usb 6-1: Manufacturer: syz [ 321.792471][ T5901] usb 6-1: SerialNumber: syz [ 321.813273][ T5901] usb 6-1: config 0 descriptor?? [ 321.833253][T15439] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 321.851352][T15439] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 321.874733][ T5901] usb 6-1: ucan: probing device on interface #0 [ 322.047455][ T30] audit: type=1326 audit(1748806044.339:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15469 comm="syz.3.4296" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79a178e969 code=0x0 [ 322.184575][T15475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4298'. [ 322.244611][ T30] audit: type=1400 audit(1748806044.539:972): avc: denied { search } for pid=15476 comm="syz.1.4299" name="/" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 322.272493][ T30] audit: type=1400 audit(1748806044.539:973): avc: denied { search } for pid=15476 comm="syz.1.4299" name="/" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 322.503460][ T5901] ucan 6-1:0.0 can0: registered device [ 322.561986][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4306'. [ 322.607494][T15496] dummy0: entered promiscuous mode [ 322.613536][T15496] macsec1: entered allmulticast mode [ 322.618831][T15496] dummy0: entered allmulticast mode [ 322.629453][T15496] dummy0: left allmulticast mode [ 322.634766][T15496] dummy0: left promiscuous mode [ 322.670054][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 322.710731][ T5901] ucan 6-1:0.0 can0: firmware string: unknown [ 322.719222][ T5901] usb 6-1: USB disconnect, device number 40 [ 322.760607][ T5920] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 322.816461][ T30] audit: type=1400 audit(1748806045.109:974): avc: denied { override_creds } for pid=15500 comm="syz.6.4309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 322.836920][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 322.848421][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 322.862459][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 322.872629][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.895331][ T9] usb 2-1: config 0 descriptor?? [ 322.941901][ T5920] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 322.973551][ T5920] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.994730][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 323.009041][ T5920] usb 5-1: SerialNumber: syz [ 323.027155][ T30] audit: type=1400 audit(1748806045.319:975): avc: denied { mounton } for pid=15508 comm="syz.3.4313" path="/837/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 323.110890][ T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 323.264616][T15521] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4319'. [ 323.519377][ T30] audit: type=1400 audit(1748806045.809:976): avc: denied { bind } for pid=15531 comm="syz.3.4324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 323.546192][ T9] usb 2-1: USB disconnect, device number 49 [ 323.846261][ T5920] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 323.850052][ T5872] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 323.856999][ T5920] usb 5-1: USB disconnect, device number 44 [ 323.940008][ T5901] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 324.020071][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 324.026346][ T5872] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.037053][ T5872] usb 4-1: config 0 interface 0 has no altsetting 0 [ 324.043797][ T5872] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 324.053082][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.071919][ T5872] usb 4-1: config 0 descriptor?? [ 324.104387][ T5901] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 324.114900][ T5901] usb 7-1: config 0 has no interface number 0 [ 324.123665][ T5901] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 324.136754][ T5901] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 324.163348][ T5901] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 324.175815][ T5901] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 324.185107][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 324.194051][ T5901] usb 7-1: Product: syz [ 324.210624][ T5901] usb 7-1: SerialNumber: syz [ 324.219973][ T5901] usb 7-1: config 0 descriptor?? [ 324.228172][ T5901] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 324.236705][ T5901] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input82 [ 324.470042][ T5920] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 324.478764][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 324.479139][ T9] usb 7-1: USB disconnect, device number 26 [ 324.485704][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 324.532065][ T5872] cougar 0003:060B:500A.0048: unexpected long global item [ 324.541210][ T5872] cougar 0003:060B:500A.0048: parse failed [ 324.549513][ T9] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 324.563300][ T30] audit: type=1400 audit(1748806046.839:977): avc: denied { watch } for pid=15558 comm="syz.4.4337" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 324.587002][ T5872] cougar 0003:060B:500A.0048: probe with driver cougar failed with error -22 [ 324.602992][ T30] audit: type=1400 audit(1748806046.839:978): avc: denied { watch_sb watch_reads } for pid=15558 comm="syz.4.4337" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 324.611594][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4338'. [ 324.628318][ T30] audit: type=1400 audit(1748806046.899:979): avc: denied { create } for pid=15560 comm="syz.4.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 324.667979][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.680248][ T30] audit: type=1400 audit(1748806046.899:980): avc: denied { write } for pid=15560 comm="syz.4.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 324.681118][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 324.721074][ T5901] usb 4-1: USB disconnect, device number 50 [ 324.728786][ T5920] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 324.741817][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.752442][ T5920] usb 2-1: config 0 descriptor?? [ 324.758975][ T5920] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 324.767313][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 324.776785][ T5920] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 324.785995][ T5920] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 324.793926][ T5920] usb 2-1: media controller created [ 324.800385][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 324.811657][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 324.817399][ T5920] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 324.826420][ T5920] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input83 [ 324.839078][ T5920] dvb-usb: schedule remote query interval to 150 msecs. [ 324.846068][ T5920] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 324.959939][ T5872] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 324.987370][ T5920] usb 2-1: USB disconnect, device number 50 [ 324.999791][ T5920] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 325.073699][T15565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4340'. [ 325.112616][ T5872] usb 5-1: config 0 has an invalid interface number: 45 but max is 0 [ 325.121030][ T5872] usb 5-1: config 0 has no interface number 0 [ 325.127176][ T5872] usb 5-1: too many endpoints for config 0 interface 45 altsetting 49: 52, using maximum allowed: 30 [ 325.138849][ T5872] usb 5-1: config 0 interface 45 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 325.155928][ T5872] usb 5-1: config 0 interface 45 has no altsetting 0 [ 325.163240][ T5872] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 325.173447][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.183967][ T5872] usb 5-1: config 0 descriptor?? [ 325.426949][ T5872] kaweth 5-1:0.45: Firmware present in device. [ 325.598701][ T5872] kaweth 5-1:0.45: Error reading configuration (-71), no net device created [ 325.609949][ T30] audit: type=1400 audit(1748806047.899:981): avc: denied { connect } for pid=15586 comm="syz.1.4350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 325.642602][ T5872] kaweth 5-1:0.45: probe with driver kaweth failed with error -5 [ 325.655203][ T5872] usb 5-1: USB disconnect, device number 45 [ 325.780508][T15593] block nbd1: server does not support multiple connections per device. [ 325.791159][T15593] block nbd1: shutting down sockets [ 325.925602][T15606] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4359'. [ 325.935015][T15606] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4359'. [ 326.340044][ T5915] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 326.379686][T15636] bpf: Bad value for 'gid' [ 326.510303][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 326.516889][ T5915] usb 4-1: config 32 has an invalid interface number: 162 but max is 0 [ 326.561643][ T5915] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 326.589831][ T5915] usb 4-1: config 32 has no interface number 0 [ 326.596553][ T5915] usb 4-1: config 32 interface 162 has no altsetting 0 [ 326.605486][ T5915] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 326.614868][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.627639][ T5915] hub 4-1:32.162: bad descriptor, ignoring hub [ 326.649900][ T5915] hub 4-1:32.162: probe with driver hub failed with error -5 [ 326.692298][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4384'. [ 326.950481][ T5915] usb 4-1: USB disconnect, device number 51 [ 327.040084][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 327.091269][ T5920] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 327.209937][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 327.221109][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 327.231367][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.242154][ T5920] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 327.243752][ T9] usb 2-1: config 0 descriptor?? [ 327.256642][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.264040][ T5920] usb 7-1: config 0 descriptor?? [ 327.483922][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 327.500547][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 327.529576][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 327.537117][ T9] usb 2-1: media controller created [ 327.582050][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 327.683691][ T5920] ath6kl: Failed to submit usb control message: -71 [ 327.685295][ T9] az6027: usb out operation failed. (-71) [ 327.700658][ T9] az6027: usb out operation failed. (-71) [ 327.704057][ T5920] ath6kl: unable to send the bmi data to the device: -71 [ 327.706397][ T9] stb0899_attach: Driver disabled by Kconfig [ 327.706408][ T9] az6027: no front-end attached [ 327.706408][ T9] [ 327.724981][ T9] az6027: usb out operation failed. (-71) [ 327.737154][ T5920] ath6kl: Unable to send get target info: -71 [ 327.746843][ T5920] ath6kl: Failed to init ath6kl core: -71 [ 327.755230][ T5920] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 327.760450][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 327.770107][ T5920] usb 7-1: USB disconnect, device number 27 [ 327.809385][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input84 [ 327.862981][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 327.885919][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 327.911227][ T9] usb 2-1: USB disconnect, device number 51 [ 327.987416][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 328.043449][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 328.043465][ T30] audit: type=1400 audit(1748806050.339:984): avc: denied { write } for pid=15711 comm="syz.4.4409" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 328.169281][T15718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4412'. [ 328.443819][ T30] audit: type=1400 audit(1748806050.739:985): avc: denied { remount } for pid=15733 comm="syz.6.4419" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 328.675865][T15744] lo speed is unknown, defaulting to 1000 [ 329.049949][ T5873] kernel read not supported for file /dsp1 (pid: 5873 comm: kworker/0:4) [ 329.421392][T15774] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 329.920384][ T5920] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 330.010978][ T5870] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 330.032720][ T5901] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 330.073529][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 330.081107][ T5920] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 330.099929][ T5920] usb 2-1: config 0 has no interface number 0 [ 330.106056][ T5920] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 330.130198][ T5920] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 330.146923][ T5920] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 330.159931][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.168288][ T5920] usb 2-1: Product: syz [ 330.173129][ T5920] usb 2-1: Manufacturer: syz [ 330.177746][ T5920] usb 2-1: SerialNumber: syz [ 330.203194][ T5920] usb 2-1: config 0 descriptor?? [ 330.209172][T15790] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 330.218518][ T5901] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 330.230012][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.230458][T15790] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 330.241189][ T5901] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 330.259821][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.269798][ T5870] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 330.279463][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 25647, setting to 64 [ 330.291871][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.301214][ T5901] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.317595][ T5870] usb 5-1: config 0 descriptor?? [ 330.325968][ T5901] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 330.335799][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.344750][ T5901] usb 6-1: Product: syz [ 330.351844][ T5901] usb 6-1: Manufacturer: syz [ 330.356542][ T5901] usb 6-1: SerialNumber: syz [ 330.364242][ T5901] usb 6-1: config 0 descriptor?? [ 330.370282][T15800] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 330.385369][ T5901] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input85 [ 330.505749][T15790] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 330.513644][T15790] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 330.520837][ T9] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 330.589302][ T30] audit: type=1400 audit(1748806052.879:986): avc: denied { append } for pid=15799 comm="syz.5.4450" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 330.618308][ T5901] usb 6-1: USB disconnect, device number 41 [ 330.653778][ T30] audit: type=1400 audit(1748806052.949:987): avc: denied { bind } for pid=15834 comm="syz.6.4466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 330.691546][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 330.703032][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 330.722376][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 330.738374][ T9] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 330.747497][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.754849][ T5870] elo 0003:04E7:0030.0049: item fetching failed at offset 5/7 [ 330.764939][ T9] usb 4-1: Product: syz [ 330.769375][ T9] usb 4-1: Manufacturer: syz [ 330.775270][ T9] usb 4-1: SerialNumber: syz [ 330.776801][ T5870] elo 0003:04E7:0030.0049: parse failed [ 330.782317][ T9] usb 4-1: config 0 descriptor?? [ 330.787809][ T5870] elo 0003:04E7:0030.0049: probe with driver elo failed with error -22 [ 330.798087][T15821] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 330.808715][ T9] usb 4-1: ucan: probing device on interface #0 [ 330.817863][ T9] usb 4-1: ucan: invalid in_ep MaxPacketSize [ 330.826651][ T9] usb 4-1: ucan: probe failed; try to update the device firmware [ 330.895915][T15844] ubi31: detaching mtd0 [ 330.908158][T15844] ubi31: mtd0 is detached [ 330.931792][ T5920] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 330.945700][ T5920] asix 2-1:0.251: probe with driver asix failed with error -524 [ 330.964321][ T5920] usb 5-1: USB disconnect, device number 46 [ 331.017815][ T9] usb 4-1: USB disconnect, device number 52 [ 331.149993][ T5870] usb 2-1: USB disconnect, device number 52 [ 331.658131][T15879] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4484'. [ 333.160018][ T5920] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 333.319989][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 333.330289][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.343210][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.353264][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 333.360271][ T5915] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 333.366560][ T5920] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 333.382841][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.393346][ T5920] usb 4-1: config 0 descriptor?? [ 333.580164][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 333.591223][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 333.614076][ T5915] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 333.623190][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.650799][ T5915] usb 5-1: Product: syz [ 333.654984][ T5915] usb 5-1: Manufacturer: syz [ 333.659576][ T5915] usb 5-1: SerialNumber: syz [ 333.673150][ T5915] usb 5-1: config 0 descriptor?? [ 333.758942][ T30] audit: type=1400 audit(1748806056.049:988): avc: denied { getopt } for pid=15984 comm="syz.1.4532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 333.780287][ T5870] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 333.821094][ T5920] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0 [ 333.832426][ T5920] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0 [ 333.841601][ T5920] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0 [ 333.849785][ T5920] microsoft 0003:045E:07DA.004A: No inputs registered, leaving [ 333.860065][ T5920] microsoft 0003:045E:07DA.004A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 333.872235][ T5920] microsoft 0003:045E:07DA.004A: no inputs found [ 333.905978][ T5920] microsoft 0003:045E:07DA.004A: could not initialize ff, continuing anyway [ 333.971417][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.981538][ T5870] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 333.996305][ T5870] usb 7-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 334.011213][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.028162][ T5920] usb 4-1: USB disconnect, device number 53 [ 334.043278][ T5870] usb 7-1: config 0 descriptor?? [ 334.098152][ T5915] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 334.144442][ T30] audit: type=1400 audit(1748806056.439:989): avc: denied { ioctl } for pid=15994 comm="syz.5.4537" path="socket:[59126]" dev="sockfs" ino=59126 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 334.236338][ T30] audit: type=1400 audit(1748806056.529:990): avc: denied { bind } for pid=15998 comm="syz.5.4539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 334.256327][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.426549][T16007] CIFS: VFS: Malformed UNC in devname [ 334.502839][ T5870] logitech 0003:046D:C286.004B: hidraw0: USB HID vff.fe Device [HID 046d:c286] on usb-dummy_hcd.6-1/input0 [ 334.504346][ T5915] usb 5-1: USB disconnect, device number 47 [ 334.531532][ T5870] logitech 0003:046D:C286.004B: no inputs found [ 334.623232][T16014] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 334.732249][ T9] usb 7-1: USB disconnect, device number 28 [ 334.914323][T16031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4554'. [ 334.969553][ T30] audit: type=1400 audit(1748806057.259:991): avc: denied { setopt } for pid=16032 comm="syz.3.4555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 334.989051][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.007245][ T30] audit: type=1400 audit(1748806057.299:992): avc: denied { bind } for pid=16032 comm="syz.3.4555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 335.031352][ T30] audit: type=1400 audit(1748806057.299:993): avc: denied { read } for pid=16032 comm="syz.3.4555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 335.636667][T16052] SELinux: failed to load policy [ 335.867225][ T30] audit: type=1400 audit(1748806058.159:994): avc: denied { map } for pid=16065 comm="syz.4.4569" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 335.890568][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.917086][T16066] lo speed is unknown, defaulting to 1000 [ 335.993219][T16074] qrtr: Invalid version 0 [ 336.104377][T16081] openvswitch: netlink: IP tunnel TTL not specified. [ 336.410207][ T30] audit: type=1400 audit(1748806058.699:995): avc: denied { getopt } for pid=16098 comm="syz.3.4583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 336.430442][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 336.629911][ T5819] Bluetooth: hci0: command tx timeout [ 336.684170][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 336.720689][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 336.754606][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.776404][ T9] usb 2-1: Product: syz [ 336.789437][ T9] usb 2-1: Manufacturer: syz [ 336.800049][ T9] usb 2-1: SerialNumber: syz [ 336.808469][ T9] usb 2-1: config 0 descriptor?? [ 336.873127][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4590'. [ 337.006200][ T30] audit: type=1400 audit(1748806059.299:996): avc: denied { mount } for pid=16130 comm="syz.6.4593" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 337.105065][ T30] audit: type=1400 audit(1748806059.299:997): avc: denied { unmount } for pid=10138 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 337.251420][ T9] usb 2-1: USB disconnect, device number 53 [ 337.397110][T16155] netlink: 212296 bytes leftover after parsing attributes in process `syz.3.4603'. [ 337.580157][ T5870] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 337.750075][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 337.756859][ T5870] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 337.798608][ T5870] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.807848][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.819945][ T5870] usb 5-1: Product: syz [ 337.831634][ T5870] usb 5-1: Manufacturer: syz [ 337.836239][ T5870] usb 5-1: SerialNumber: syz [ 338.061783][ T5870] cdc_ncm 5-1:1.0: bind() failure [ 338.066178][T16195] binder: 16192:16195 ioctl c018620c 200000000000 returned -22 [ 338.072973][ T5870] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 338.078829][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4622'. [ 338.108172][ T5870] cdc_ncm 5-1:1.1: bind() failure [ 338.122882][ T5870] usb 5-1: USB disconnect, device number 48 [ 338.265274][T16205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.574330][T16214] syz.1.4630 (16214): drop_caches: 2 [ 338.580728][T16214] syz.1.4630 (16214): drop_caches: 2 [ 340.317125][T16266] blkio.reset_stats is deprecated [ 340.414909][T16273] netlink: 'syz.5.4655': attribute type 14 has an invalid length. [ 340.979027][T16296] binder: 16295:16296 ioctl c0306201 200000000100 returned -14 [ 341.024336][T16299] netlink: 'syz.5.4666': attribute type 10 has an invalid length. [ 341.043738][T16300] veth0: entered promiscuous mode [ 341.076567][T16300] veth0: left promiscuous mode [ 341.166606][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 341.166621][ T30] audit: type=1400 audit(1748806063.459:1000): avc: denied { read } for pid=16306 comm="syz.1.4669" name="file0" dev="tmpfs" ino=4956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 341.208957][T16309] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4670'. [ 341.264949][ T30] audit: type=1400 audit(1748806063.499:1001): avc: denied { open } for pid=16306 comm="syz.1.4669" path="/973/file0" dev="tmpfs" ino=4956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 341.338732][ T30] audit: type=1400 audit(1748806063.519:1002): avc: denied { ioctl } for pid=16306 comm="syz.1.4669" path="/973/file0" dev="tmpfs" ino=4956 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 341.385776][ T30] audit: type=1400 audit(1748806063.679:1003): avc: denied { connect } for pid=16316 comm="syz.6.4674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 341.444629][T16323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4677'. [ 341.480881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 341.490270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 341.653967][ T30] audit: type=1400 audit(1748806063.949:1004): avc: denied { read } for pid=16326 comm="syz.6.4680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 342.070139][ T5915] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 342.212770][T16355] netlink: 'syz.3.4692': attribute type 4 has an invalid length. [ 342.240214][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 342.249736][ T5915] usb 2-1: config 0 has no interfaces? [ 342.256632][ T5915] usb 2-1: config 0 has no interfaces? [ 342.271374][ T5915] usb 2-1: config 0 has no interfaces? [ 342.284510][ T5915] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 342.293748][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.302034][ T5915] usb 2-1: Product: syz [ 342.306298][ T5915] usb 2-1: Manufacturer: syz [ 342.321509][ T5915] usb 2-1: SerialNumber: syz [ 342.327425][ T5915] usb 2-1: config 0 descriptor?? [ 342.545236][ T5915] usb 2-1: USB disconnect, device number 54 [ 342.567979][ T30] audit: type=1400 audit(1748806064.859:1005): avc: denied { accept } for pid=16374 comm="syz.5.4701" path=00001F4E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 342.614755][ T30] audit: type=1400 audit(1748806064.859:1006): avc: denied { getopt } for pid=16373 comm="syz.3.4700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 343.131441][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 343.270178][T16421] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.279723][T16421] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.288879][T16421] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.293171][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 343.298063][T16421] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.311304][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 343.329578][T16421] vxlan0: entered promiscuous mode [ 343.329806][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 343.336532][T16421] vxlan0: entered allmulticast mode [ 343.348664][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.353779][T16423] sp0: Synchronizing with TNC [ 343.375590][T16394] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 343.386660][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.460226][ T909] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 343.481642][ T5870] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 343.603551][ T9] usb 5-1: USB disconnect, device number 49 [ 343.633863][ T909] usb 7-1: Using ep0 maxpacket: 16 [ 343.640989][ T909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.654173][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 343.659764][ T909] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 343.670311][ T909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.679814][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.693668][ T909] usb 7-1: config 0 descriptor?? [ 343.698808][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.708860][ T5870] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 343.719400][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.728720][ T5870] usb 6-1: config 0 descriptor?? [ 343.830177][ T5920] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 343.879936][ T5872] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 343.979981][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 343.986392][ T5920] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 343.995659][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.005213][ T5920] usb 2-1: config 0 descriptor?? [ 344.042266][ T5872] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 344.054185][ T5872] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 344.065788][ T5872] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 344.077062][ T5872] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 344.086401][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.096776][T16439] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 344.126000][ T909] hid-udraw 0003:20D6:CB17.004C: global environment stack underflow [ 344.134140][ T909] hid-udraw 0003:20D6:CB17.004C: item 0 0 1 11 parsing failed [ 344.143099][ T909] hid-udraw 0003:20D6:CB17.004C: parse failed [ 344.151020][ T909] hid-udraw 0003:20D6:CB17.004C: probe with driver hid-udraw failed with error -22 [ 344.163955][ T5870] corsair 0003:1B1C:1B02.004D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 344.214845][ T5920] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 344.223635][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 344.235578][ T5920] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 344.242774][ T5920] usb 2-1: media controller created [ 344.260333][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 344.348512][ T909] usb 7-1: USB disconnect, device number 29 [ 344.358023][ T5870] corsair 0003:1B1C:1B02.004D: Read invalid backlight brightness: a7. [ 344.422821][ T5920] az6027: usb out operation failed. (-71) [ 344.428896][ T5920] az6027: usb out operation failed. (-71) [ 344.434756][ T5920] stb0899_attach: Driver disabled by Kconfig [ 344.442449][ T5920] az6027: no front-end attached [ 344.442449][ T5920] [ 344.460177][ T5920] az6027: usb out operation failed. (-71) [ 344.466357][ T5920] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 344.477986][ T5920] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input88 [ 344.494117][ T5920] dvb-usb: schedule remote query interval to 400 msecs. [ 344.503486][ T5920] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 344.516304][ T5920] usb 2-1: USB disconnect, device number 55 [ 344.555178][ T5920] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 344.588874][ T9] usb 6-1: USB disconnect, device number 42 [ 344.922967][ T5872] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 344.941912][ T5872] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input87 [ 344.994714][ T5872] usb 4-1: USB disconnect, device number 54 [ 345.001163][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 345.047766][T16460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.063056][T16456] block nbd6: NBD_DISCONNECT [ 345.082764][T16456] block nbd6: Send disconnect failed -22 [ 345.111305][T16455] block nbd6: Disconnected due to user request. [ 345.117856][T16455] block nbd6: shutting down sockets [ 345.187398][ T30] audit: type=1400 audit(1748806067.479:1007): avc: denied { listen } for pid=16464 comm="syz.1.4742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 345.231500][ T30] audit: type=1400 audit(1748806067.479:1008): avc: denied { accept } for pid=16464 comm="syz.1.4742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 345.484021][ T30] audit: type=1400 audit(1748806067.779:1009): avc: denied { append } for pid=16485 comm="syz.4.4751" name="file2" dev="tmpfs" ino=5251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 346.150042][ T909] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 346.314560][ T909] usb 7-1: Using ep0 maxpacket: 8 [ 346.343662][ T909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.364401][T16527] kernel read not supported for file /eth0 (pid: 16527 comm: syz.3.4771) [ 346.375742][ T909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.388666][ T909] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 346.414103][ T30] audit: type=1800 audit(1748806068.709:1010): pid=16527 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.4771" name="eth0" dev="mqueue" ino=61294 res=0 errno=0 [ 346.440350][ T909] usb 7-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 346.449399][ T909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.504991][ T909] usb 7-1: config 0 descriptor?? [ 346.571074][ T30] audit: type=1400 audit(1748806068.869:1011): avc: denied { read } for pid=16538 comm="syz.4.4776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 346.946221][ T909] logitech 0003:046D:C293.004E: unknown main item tag 0x0 [ 346.960216][ T909] logitech 0003:046D:C293.004E: unknown main item tag 0x0 [ 346.978110][ T909] logitech 0003:046D:C293.004E: unknown main item tag 0x0 [ 346.987265][ T909] logitech 0003:046D:C293.004E: unknown main item tag 0x0 [ 346.998738][ T909] logitech 0003:046D:C293.004E: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.6-1/input0 [ 347.010885][ T30] audit: type=1400 audit(1748806069.309:1012): avc: denied { connect } for pid=16559 comm="syz.4.4786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 347.031701][ T909] logitech 0003:046D:C293.004E: no inputs found [ 347.141538][ T5872] usb 7-1: USB disconnect, device number 30 [ 347.221420][ T5870] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 347.283198][T16582] input: syz0 as /devices/virtual/input/input89 [ 347.382825][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 347.399374][ T5870] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.419418][ T5870] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 347.439553][ T5870] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 347.455067][ T5870] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.473855][ T5870] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 347.499955][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.582389][T16592] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 347.698135][T16603] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 347.720395][ T5870] usb 2-1: GET_CAPABILITIES returned 0 [ 347.726055][ T5870] usbtmc 2-1:16.0: can't read capabilities [ 347.924719][ T5920] usb 2-1: USB disconnect, device number 56 [ 347.929980][ T30] audit: type=1400 audit(1748806070.219:1013): avc: denied { ioctl } for pid=16623 comm="syz.4.4815" path="socket:[61882]" dev="sockfs" ino=61882 ioctlcmd=0x89f9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 348.350377][ T5870] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 348.502191][T16664] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 348.519952][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 348.540250][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 102, changing to 7 [ 348.568338][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 10030, setting to 1024 [ 348.593939][ T5870] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 348.607257][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.615539][ T5870] usb 4-1: Product: syz [ 348.630038][ T5870] usb 4-1: Manufacturer: syz [ 348.640319][ T5870] usb 4-1: SerialNumber: syz [ 348.649658][ T5870] usb 4-1: config 0 descriptor?? [ 348.666527][ T5870] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 348.685871][ T5870] em28xx 4-1:0.0: DVB interface 0 found: isoc [ 348.739718][ T30] audit: type=1400 audit(1748806071.029:1014): avc: denied { append } for pid=16678 comm="syz.6.4835" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 348.808853][ T30] audit: type=1400 audit(1748806071.099:1015): avc: denied { read } for pid=5170 comm="acpid" name="mouse6" dev="devtmpfs" ino=3694 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 348.835758][ T30] audit: type=1400 audit(1748806071.099:1016): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/mouse6" dev="devtmpfs" ino=3694 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 348.865784][ T30] audit: type=1400 audit(1748806071.099:1017): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/mouse6" dev="devtmpfs" ino=3694 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 348.899536][T16686] netlink: 'syz.5.4839': attribute type 1 has an invalid length. [ 348.907638][T16686] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4839'. [ 348.924060][ T5870] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 348.994464][ T5870] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 349.006770][T16692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4841'. [ 349.016644][ T5870] em28xx 4-1:0.0: board has no eeprom [ 349.040173][ T5872] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 349.090487][ T5870] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 349.098308][ T5870] em28xx 4-1:0.0: dvb set to isoc mode. [ 349.109719][ T909] em28xx 4-1:0.0: Binding DVB extension [ 349.131233][ T5870] usb 4-1: USB disconnect, device number 55 [ 349.142732][ T5870] em28xx 4-1:0.0: Disconnecting em28xx [ 349.149616][ T30] audit: type=1400 audit(1748806071.439:1018): avc: denied { mount } for pid=16696 comm="syz.5.4843" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 349.172218][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.181526][ T909] em28xx 4-1:0.0: Registering input extension [ 349.187714][ T5870] em28xx 4-1:0.0: Closing input extension [ 349.204929][ T5872] usb 2-1: config 0 has an invalid interface number: 125 but max is 0 [ 349.215427][ T5870] em28xx 4-1:0.0: Freeing device [ 349.215889][ T5872] usb 2-1: config 0 has no interface number 0 [ 349.229316][ T5872] usb 2-1: New USB device found, idVendor=0421, idProduct=007b, bcdDevice=ed.44 [ 349.239015][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.247987][ T5872] usb 2-1: Product: syz [ 349.253517][ T5872] usb 2-1: Manufacturer: syz [ 349.258129][ T5872] usb 2-1: SerialNumber: syz [ 349.265380][ T5872] usb 2-1: config 0 descriptor?? [ 349.280700][ T5872] rndis_host 2-1:0.125: invalid descriptor buffer length [ 349.287817][ T5872] usb 2-1: bad CDC descriptors [ 349.295232][ T5872] cdc_acm 2-1:0.125: invalid descriptor buffer length [ 349.520499][ T5872] usb 2-1: USB disconnect, device number 57 [ 350.002587][T16734] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4859'. [ 350.072646][ T30] audit: type=1400 audit(1748806072.359:1019): avc: denied { write } for pid=16735 comm="syz.5.4860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 350.286485][T16754] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4868'. [ 350.302967][T16756] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4870'. [ 350.302992][T16756] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4870'. [ 350.433192][T16761] lo speed is unknown, defaulting to 1000 [ 350.550021][ T5819] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 350.700333][ T5920] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 350.862743][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 350.873141][ T5920] usb 4-1: config 5 has an invalid interface number: 35 but max is 0 [ 350.891331][ T5920] usb 4-1: config 5 has no interface number 0 [ 350.907370][ T5920] usb 4-1: config 5 interface 35 has no altsetting 0 [ 350.920017][ T909] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 350.934353][ T5920] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d4.1b [ 350.956000][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.967506][ T5920] usb 4-1: Product: syz [ 350.976596][ T5920] usb 4-1: Manufacturer: syz [ 350.985834][ T5920] usb 4-1: SerialNumber: syz [ 351.080109][ T909] usb 2-1: Using ep0 maxpacket: 16 [ 351.087270][ T909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.114649][ T909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 351.129002][ T909] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 351.141563][ T909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.161706][ T909] usb 2-1: config 0 descriptor?? [ 351.260819][ T5920] ttusbir 4-1:5.35: cannot find expected altsetting [ 351.271150][ T5920] usb 4-1: USB disconnect, device number 56 [ 351.506540][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4892'. [ 351.517396][T16813] netlink: 'syz.4.4892': attribute type 20 has an invalid length. [ 351.527445][T16813] netlink: 'syz.4.4892': attribute type 21 has an invalid length. [ 351.587468][ T909] hid_map_usage: 11766 callbacks suppressed [ 351.587484][ T909] HID 045e:07da: Invalid code 65791 type 1 [ 351.627084][ T909] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.004F/input/input92 [ 351.646086][ T909] microsoft 0003:045E:07DA.004F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 351.813986][T16821] syz.5.4895 (16821): drop_caches: 2 [ 351.819773][T16821] syz.5.4895 (16821): drop_caches: 2 [ 351.987732][ T9] usb 2-1: USB disconnect, device number 58 [ 352.154518][ T5920] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 352.180908][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4900'. [ 352.349949][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 352.356854][ T5920] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 352.365308][ T5920] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 352.374003][ T5920] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 352.383016][ T5920] usb 5-1: config 1 has no interface number 0 [ 352.389123][ T5920] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.400146][ T5920] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 352.413957][ T5920] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 352.423073][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.436692][ T5920] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 352.460169][ T9] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 352.639502][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.654390][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.655642][ T5920] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 352.678692][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 352.694483][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.707395][ T9] usb 6-1: config 0 descriptor?? [ 352.850516][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4911'. [ 352.866172][T16857] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 352.987460][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 352.987474][ T30] audit: type=1326 audit(1748806075.279:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16860 comm="syz.6.4913" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a5d78e969 code=0x0 [ 353.109018][ T5872] usb 5-1: USB disconnect, device number 50 [ 353.118256][ T5872] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 353.133237][ T9] cm6533_jd 0003:0D8C:0022.0050: unknown main item tag 0x0 [ 353.144641][ T9] cm6533_jd 0003:0D8C:0022.0050: item fetching failed at offset 4/5 [ 353.155615][ T9] cm6533_jd 0003:0D8C:0022.0050: parse failed [ 353.164548][ T9] cm6533_jd 0003:0D8C:0022.0050: probe with driver cm6533_jd failed with error -22 [ 353.343212][ T9] usb 6-1: USB disconnect, device number 43 [ 353.539926][ T5920] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 353.710496][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 353.718906][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.733092][ T5920] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 353.743083][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.755871][ T5920] usb 4-1: config 0 descriptor?? [ 353.785538][T16883] tipc: Enabling of bearer rejected, failed to enable media [ 354.185810][ T5920] mcp2221 0003:04D8:00DD.0051: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 354.243317][ T30] audit: type=1400 audit(1748806076.539:1028): avc: denied { ioctl } for pid=16902 comm="syz.5.4932" path="socket:[63338]" dev="sockfs" ino=63338 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 354.478151][T16914] vcan0: tx address claim with dest, not broadcast [ 354.577439][ T30] audit: type=1400 audit(1748806076.859:1029): avc: denied { append } for pid=16918 comm="syz.6.4941" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 354.625577][ T5920] usb 4-1: USB disconnect, device number 57 [ 354.671198][T16924] bond0: entered promiscuous mode [ 354.682817][T16924] bond_slave_0: entered promiscuous mode [ 354.691167][T16924] bond_slave_1: entered promiscuous mode [ 354.698479][T16924] batadv0: entered promiscuous mode [ 354.704898][T16924] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 354.713289][T16924] bond0: left promiscuous mode [ 354.718130][T16924] bond_slave_0: left promiscuous mode [ 354.723907][T16924] bond_slave_1: left promiscuous mode [ 354.729888][T16924] batadv0: left promiscuous mode [ 354.791637][ T5815] Bluetooth: hci5: command 0x1003 tx timeout [ 354.792853][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 355.383368][T16972] lo speed is unknown, defaulting to 1000 [ 355.620028][ T5920] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 355.804776][ T5920] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.841392][ T5920] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 355.882005][ T5920] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 355.940098][ T5920] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 355.985015][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.047107][T16973] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 356.193280][T16997] 9pnet_virtio: no channels available for device syz [ 356.291730][T17006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.697106][T17022] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4987'. [ 356.977572][ T30] audit: type=1400 audit(1748806079.269:1030): avc: denied { write } for pid=17031 comm="syz.6.4992" name="file0" dev="tmpfs" ino=3119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 357.092074][ T5920] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 357.106842][ T5920] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input93 [ 357.147517][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 357.160999][ T5920] usb 4-1: USB disconnect, device number 58 [ 357.387460][T17047] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 357.465910][T17053] netlink: 'syz.4.4999': attribute type 1 has an invalid length. [ 357.489758][T17053] netlink: 'syz.4.4999': attribute type 2 has an invalid length. [ 357.501266][T17053] netlink: 'syz.4.4999': attribute type 1 has an invalid length. [ 357.516767][T17053] netlink: 1156 bytes leftover after parsing attributes in process `syz.4.4999'. [ 358.137698][T17101] vivid-007: ================= START STATUS ================= [ 358.145945][T17101] vivid-007: Enable Output Cropping: true grabbed [ 358.162199][T17101] vivid-007: Enable Output Composing: true grabbed [ 358.176624][T17101] vivid-007: Enable Output Scaler: true grabbed [ 358.194951][T17101] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 358.214823][T17101] vivid-007: Transmit Mode: HDMI grabbed [ 358.239979][T17101] vivid-007: Hotplug Present: 0x00000000 [ 358.246880][T17101] vivid-007: RxSense Present: 0x00000000 [ 358.270693][T17101] vivid-007: EDID Present: 0x00000000 [ 358.276101][T17101] vivid-007: ================== END STATUS ================== [ 358.313701][ T909] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 358.407079][ T30] audit: type=1400 audit(1748806080.699:1031): avc: denied { listen } for pid=17115 comm="syz.4.5029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 358.477929][ T909] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.509088][ T909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 358.532209][ T909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 358.542934][T17123] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[17123] [ 358.558647][ T909] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.590378][ T909] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 358.609589][ T909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.641744][ T909] usb 6-1: config 0 descriptor?? [ 358.662839][ T909] gspca_main: spca561-2.14.0 probing abcd:cdee [ 358.686043][ T30] audit: type=1400 audit(1748806080.979:1032): avc: denied { read } for pid=17131 comm="syz.1.5037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 358.736768][ T30] audit: type=1400 audit(1748806081.009:1033): avc: denied { shutdown } for pid=17130 comm="syz.4.5036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 358.799954][ T30] audit: type=1400 audit(1748806081.069:1034): avc: denied { setcurrent } for pid=17134 comm="syz.6.5038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 358.883590][ T909] spca561 6-1:0.0: probe with driver spca561 failed with error -22 [ 358.921435][ T909] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 358.928439][ T909] usb 6-1: MIDIStreaming interface descriptor not found [ 358.982151][ T909] usb 6-1: USB disconnect, device number 44 [ 359.837117][ T30] audit: type=1400 audit(1748806082.129:1035): avc: denied { read } for pid=17184 comm="syz.1.5060" path="socket:[64018]" dev="sockfs" ino=64018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 360.190217][ T5872] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 360.340407][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 360.354452][ T5872] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 360.365771][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.381805][ T5872] usb 4-1: config 0 descriptor?? [ 360.533987][T17203] lo: entered promiscuous mode [ 360.545921][T17203] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5067'. [ 360.563733][T17203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.599481][ T5872] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 361.085795][ T30] audit: type=1400 audit(1748806083.379:1036): avc: denied { write } for pid=17218 comm="syz.1.5076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 361.329813][T17226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.384648][T17228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.410022][ T5872] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 361.424392][ T5872] asix 4-1:0.0: probe with driver asix failed with error -71 [ 361.435722][ T5872] usb 4-1: USB disconnect, device number 59 [ 361.654306][ T909] kernel write not supported for file /1669/projid_map (pid: 909 comm: kworker/1:2) [ 361.661395][T17234] block nbd1: server does not support multiple connections per device. [ 361.674680][T17234] block nbd1: shutting down sockets [ 361.836692][ T30] audit: type=1326 audit(1748806084.129:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17248 comm="syz.5.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26cf8e969 code=0x7ffc0000 [ 361.865552][ T30] audit: type=1326 audit(1748806084.129:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17248 comm="syz.5.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26cf8e969 code=0x7ffc0000 [ 361.891012][ T30] audit: type=1326 audit(1748806084.159:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17248 comm="syz.5.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff26cf8e969 code=0x7ffc0000 [ 361.914942][ T30] audit: type=1326 audit(1748806084.159:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17248 comm="syz.5.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26cf8e969 code=0x7ffc0000 [ 362.010392][ T909] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 362.190985][ T909] usb 7-1: Using ep0 maxpacket: 8 [ 362.202093][ T909] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 362.216660][ T909] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 362.237742][ T909] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 362.254828][ T909] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.275057][ T909] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 362.284356][ T909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.419937][ T5872] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 362.539594][ T909] usb 7-1: GET_CAPABILITIES returned 0 [ 362.543816][T17285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5108'. [ 362.557947][ T909] usbtmc 7-1:16.0: can't read capabilities [ 362.569909][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 362.581633][ T5872] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 362.602608][T17289] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 362.607762][ T5872] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 362.623367][ T5872] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 362.649537][ T5872] usb 6-1: config 1 has no interface number 0 [ 362.670073][ T5872] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 362.688090][T17295] input input96: cannot allocate more than FF_MAX_EFFECTS effects [ 362.692081][ T5873] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 362.713199][ T5872] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 362.744903][ T5872] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 362.754152][ T5873] hid-generic 0000:0000:0000.0052: hidraw0: HID v0.00 Device [syz1] on syz0 [ 362.767898][ T909] usb 7-1: USB disconnect, device number 31 [ 362.782527][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.806441][ T5872] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 362.821373][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5113'. [ 363.020059][ T5872] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 363.474932][ T909] usb 6-1: USB disconnect, device number 45 [ 363.488414][ T909] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 364.015077][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 364.015093][ T30] audit: type=1400 audit(1748806086.309:1053): avc: denied { map } for pid=17354 comm="syz.3.5139" path="socket:[65614]" dev="sockfs" ino=65614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 364.134276][T17360] Bluetooth: hci5: Frame reassembly failed (-84) [ 364.157830][ T3500] Bluetooth: hci5: Frame reassembly failed (-84) [ 364.167842][ T30] audit: type=1400 audit(1748806086.309:1054): avc: denied { read accept } for pid=17354 comm="syz.3.5139" path="socket:[65614]" dev="sockfs" ino=65614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 364.191672][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.703397][T17389] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5155'. [ 365.468431][ T30] audit: type=1400 audit(1748806087.749:1055): avc: denied { accept } for pid=17411 comm="syz.1.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 365.488452][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.939892][ T5870] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 366.047275][T17440] binder: 17439:17440 ioctl 4018620d 0 returned -22 [ 366.101286][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 366.115094][ T5870] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 366.125304][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.135612][ T5870] usb 4-1: config 0 descriptor?? [ 366.141323][T17422] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 366.150046][ T5815] Bluetooth: hci5: command 0x1003 tx timeout [ 366.150629][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 366.257710][ T30] audit: type=1400 audit(1748806088.549:1056): avc: denied { setopt } for pid=17448 comm="syz.6.5184" lport=52049 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 366.293363][ T909] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 366.376838][T17454] lo speed is unknown, defaulting to 1000 [ 366.471048][ T909] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 366.479891][ T909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.499891][ T909] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.514574][ T909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 366.531258][ T909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.540542][ T909] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.551455][ T5872] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 366.580156][ T5870] elan 0003:04F3:0755.0053: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 366.603984][ T909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 366.630800][ T909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.649893][ T909] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.661042][ T909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 366.671470][ T909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.680498][ T909] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.701228][ T909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 366.701855][ T5872] usb 7-1: Using ep0 maxpacket: 32 [ 366.714204][ T909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.723595][ T909] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.737425][ T5872] usb 7-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 366.740043][ T909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 366.760917][ T5872] usb 7-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.775273][ T909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.793184][ T909] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.793309][ T5872] usb 7-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 366.806970][ T5870] usb 4-1: USB disconnect, device number 60 [ 366.829924][ T909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 366.846629][ T909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.852733][ T5872] usb 7-1: config 0 interface 0 has no altsetting 0 [ 366.862047][ T909] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.862075][ T909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 366.863172][ T909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.906526][ T5872] usb 7-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 366.919324][ T909] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.937438][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.939909][ T909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 366.959946][ T909] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 366.969437][ T909] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 366.972810][ T5872] usb 7-1: config 0 descriptor?? [ 366.978747][ T909] usb 2-1: Product: syz [ 366.978762][ T909] usb 2-1: Manufacturer: syz [ 366.978776][ T909] usb 2-1: SerialNumber: syz [ 366.981020][ T909] usb 2-1: config 0 descriptor?? [ 367.062808][ T909] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 367.304796][ T909] usb 2-1: USB disconnect, device number 59 [ 367.312664][ T909] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 367.325963][ T30] audit: type=1400 audit(1748806089.619:1057): avc: denied { read write } for pid=17463 comm="syz.5.5189" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 367.442732][ T5872] zeroplus 0003:0C12:0030.0054: hidraw0: USB HID v0.03 Device [HID 0c12:0030] on usb-dummy_hcd.6-1/input0 [ 367.454312][ T30] audit: type=1400 audit(1748806089.619:1058): avc: denied { open } for pid=17463 comm="syz.5.5189" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 367.509181][ T5872] zeroplus 0003:0C12:0030.0054: no inputs found [ 367.682960][ T5872] usb 7-1: USB disconnect, device number 32 [ 368.282974][T17498] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 368.292906][T17498] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 368.301997][T17498] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 368.311098][T17498] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 368.320178][T17498] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 368.329210][T17498] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 368.338270][T17498] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 368.347315][T17498] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 368.356366][T17498] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 368.365424][T17498] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 368.588664][T17509] netlink: 'syz.5.5211': attribute type 4 has an invalid length. [ 368.627584][T17509] netlink: 'syz.5.5211': attribute type 4 has an invalid length. [ 368.645745][T17512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5212'. [ 368.686502][T17512] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5212'. [ 368.743764][T17514] syzkaller1: entered promiscuous mode [ 368.760372][T17514] syzkaller1: entered allmulticast mode [ 369.074137][ T30] audit: type=1400 audit(1748806091.369:1059): avc: denied { write } for pid=17535 comm="syz.6.5223" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 369.562825][ T30] audit: type=1400 audit(1748806091.849:1060): avc: denied { read } for pid=17567 comm="syz.4.5237" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 369.627046][ T30] audit: type=1400 audit(1748806091.849:1061): avc: denied { open } for pid=17567 comm="syz.4.5237" path="/1150/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 369.877470][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5244'. [ 370.296295][ T30] audit: type=1326 audit(1748806092.589:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17603 comm="syz.4.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35cc18e969 code=0x7ffc0000 [ 370.350194][ T5920] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 370.364762][ T30] audit: type=1326 audit(1748806092.589:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17603 comm="syz.4.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35cc18e969 code=0x7ffc0000 [ 370.453390][ T30] audit: type=1326 audit(1748806092.619:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17603 comm="syz.4.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35cc18d2d0 code=0x7ffc0000 [ 370.519579][ T30] audit: type=1326 audit(1748806092.619:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17603 comm="syz.4.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35cc18d2d0 code=0x7ffc0000 [ 370.553389][ T5920] usb 7-1: Using ep0 maxpacket: 32 [ 370.571256][ T30] audit: type=1326 audit(1748806092.619:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17603 comm="syz.4.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35cc18e969 code=0x7ffc0000 [ 370.595445][ T5920] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 370.609861][ T5920] usb 7-1: config 0 has no interface number 0 [ 370.628932][ T30] audit: type=1326 audit(1748806092.619:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17603 comm="syz.4.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35cc18e969 code=0x7ffc0000 [ 370.660560][ T5920] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 370.686815][ T30] audit: type=1326 audit(1748806092.619:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17603 comm="syz.4.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f35cc18e969 code=0x7ffc0000 [ 370.687851][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.741437][ T5920] usb 7-1: Product: syz [ 370.745629][ T5920] usb 7-1: Manufacturer: syz [ 370.750560][ T5920] usb 7-1: SerialNumber: syz [ 370.757138][ T5920] usb 7-1: config 0 descriptor?? [ 370.764324][ T5920] smsc95xx v2.0.0 [ 371.575815][ T5920] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 371.775008][ T5920] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 371.775203][ T5920] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 371.790115][ T5920] usb 7-1: USB disconnect, device number 33 [ 372.404656][ T5872] kernel write not supported for file /2234/attr/exec (pid: 5872 comm: kworker/0:3) [ 372.671679][ T5870] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 372.830037][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 372.836759][ T5870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.853232][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 372.865081][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 372.875005][ T5870] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 372.885539][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.900409][ T5870] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 372.909722][ T5870] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 372.918523][ T5870] usb 6-1: Manufacturer: syz [ 372.925424][ T5870] usb 6-1: config 0 descriptor?? [ 373.050773][ T909] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 373.121401][ T5873] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 373.181746][ T5870] rc_core: IR keymap rc-hauppauge not found [ 373.187672][ T5870] Registered IR keymap rc-empty [ 373.193824][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 373.220048][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 373.228493][ T909] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 373.237978][ T909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.247603][ T5870] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 373.268276][ T909] usb 7-1: config 0 descriptor?? [ 373.275664][ T909] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 373.281303][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 373.283468][ T5870] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input97 [ 373.307507][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 373.313237][ T5873] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 373.326579][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.339725][ T5873] usb 2-1: config 0 descriptor?? [ 373.345023][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 373.347859][T17690] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 373.379226][T17708] input: syz1 as /devices/virtual/input/input98 [ 373.386109][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 373.409958][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 373.430058][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 373.450178][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 373.470070][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 373.501055][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 373.529976][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 373.550809][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 373.602397][ T5870] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 373.612795][ T5870] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 373.625018][ T5870] usb 6-1: USB disconnect, device number 46 [ 373.689237][ T909] cpia1 7-1:0.0: unexpected state after lo power cmd: 00 [ 373.784910][ T5873] elan 0003:04F3:0755.0055: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 373.998979][ T5870] usb 2-1: USB disconnect, device number 60 [ 374.098666][ T909] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 374.225143][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 374.325755][ T909] usb 7-1: USB disconnect, device number 34 [ 374.398408][T17735] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 374.946947][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.016146][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.087616][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.208158][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.289091][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.303363][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.311471][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.320562][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.328462][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.340510][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.347747][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.357107][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.365185][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.376521][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.395685][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 375.395698][ T30] audit: type=1400 audit(1748806097.689:1080): avc: denied { mounton } for pid=17760 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 375.661201][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.672107][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.682587][ T13] bond0 (unregistering): Released all slaves [ 375.734454][T17760] lo speed is unknown, defaulting to 1000 [ 376.004031][T17779] lo speed is unknown, defaulting to 1000 [ 376.159664][T17760] chnl_net:caif_netlink_parms(): no params data found [ 376.229972][ T5815] Bluetooth: hci5: command 0xfc11 tx timeout [ 376.230416][ T5819] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 376.417616][T17760] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.424961][T17760] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.435355][T17760] bridge_slave_0: entered allmulticast mode [ 376.471419][T17760] bridge_slave_0: entered promiscuous mode [ 376.511918][T17760] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.519036][T17760] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.550184][T17760] bridge_slave_1: entered allmulticast mode [ 376.601192][T17760] bridge_slave_1: entered promiscuous mode [ 376.644544][ T13] hsr_slave_0: left promiscuous mode [ 376.654655][ T13] hsr_slave_1: left promiscuous mode [ 376.673634][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.684577][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.696545][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.704242][ T30] audit: type=1400 audit(1748806098.989:1081): avc: denied { write } for pid=17796 comm="syz.1.5334" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 376.732050][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.757144][ T13] team_slave_0: left promiscuous mode [ 376.763277][ T13] team_slave_1: left promiscuous mode [ 376.776686][ T13] veth0_macvtap: left allmulticast mode [ 376.782445][ T13] veth0_macvtap: left promiscuous mode [ 376.787933][ T13] veth1_macvtap: left promiscuous mode [ 377.010022][ T5870] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 377.108028][ T13] team0 (unregistering): Port device team_slave_1 removed [ 377.141250][ T13] team0 (unregistering): Port device team_slave_0 removed [ 377.180088][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 377.193186][ T5870] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 377.207618][ T5870] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 377.224023][ T5870] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 377.237980][ T5870] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.251281][ T5870] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 377.266719][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.432015][ T5819] Bluetooth: hci3: command tx timeout [ 377.518988][ T5870] usb 2-1: GET_CAPABILITIES returned 0 [ 377.534715][ T5870] usbtmc 2-1:16.0: can't read capabilities [ 377.556697][T17795] lo speed is unknown, defaulting to 1000 [ 377.562299][T17760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.587462][T17760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.665730][T17760] team0: Port device team_slave_0 added [ 377.677541][T17760] team0: Port device team_slave_1 added [ 377.736017][ T5873] usb 2-1: USB disconnect, device number 61 [ 377.822776][T17760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.830497][T17760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.856360][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.864170][T17760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.891694][T17760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.899001][T17760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.924885][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.931438][T17760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.993680][T17760] hsr_slave_0: entered promiscuous mode [ 377.999694][T17760] hsr_slave_1: entered promiscuous mode [ 378.008975][T17760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.018996][T17760] Cannot create hsr debugfs directory [ 378.611609][T17760] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 378.646342][T17760] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 378.668176][T17760] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 378.693696][T17760] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 378.843892][T17760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.855737][ T5870] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 378.977229][T17760] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.993283][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.000457][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.013484][ T5870] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 379.025236][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.032002][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.032375][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.048209][ T5870] usb 4-1: Product: syz [ 379.059994][ T5870] usb 4-1: Manufacturer: syz [ 379.066495][ T5870] usb 4-1: SerialNumber: syz [ 379.080540][ T5870] usb 4-1: config 0 descriptor?? [ 379.100154][ T5872] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 379.103686][T17760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.180235][ T5873] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 379.272280][ T5872] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.284018][T17760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.290845][ T5872] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 379.303971][ T5872] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 379.313357][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.321766][ T5872] usb 2-1: Product: syz [ 379.325927][ T5872] usb 2-1: Manufacturer: syz [ 379.330847][ T5872] usb 2-1: SerialNumber: syz [ 379.339465][ T5872] cdc_mbim 2-1:1.0: skipping garbage [ 379.345037][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 379.353943][ T5873] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 379.363386][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.371607][ T5873] usb 5-1: Product: syz [ 379.375788][ T5873] usb 5-1: Manufacturer: syz [ 379.381021][ T5873] usb 5-1: SerialNumber: syz [ 379.389001][ T5873] usb 5-1: config 0 descriptor?? [ 379.499411][ T5870] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 379.509959][ T5819] Bluetooth: hci3: command tx timeout [ 379.516333][ T5870] asix 4-1:0.0: probe with driver asix failed with error -71 [ 379.532720][ T5870] usb 4-1: USB disconnect, device number 61 [ 379.547743][T17836] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 379.585840][T17760] veth0_vlan: entered promiscuous mode [ 379.598814][T17760] veth1_vlan: entered promiscuous mode [ 379.625772][T17760] veth0_macvtap: entered promiscuous mode [ 379.642079][T17760] veth1_macvtap: entered promiscuous mode [ 379.659703][T17760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.676633][T17760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.687506][T17760] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.696907][T17760] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.705668][T17760] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.715388][T17760] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.779585][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.788581][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.808711][ T5873] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 379.816500][ T4470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.826622][ T4470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.834911][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 379.849297][ T5873] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 379.857675][ T30] audit: type=1400 audit(1748806102.149:1082): avc: denied { mounton } for pid=17760 comm="syz-executor" path="/root/syzkaller.SdqKzA/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 379.882360][ T5873] usb 5-1: media controller created [ 379.907828][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 379.919362][ T30] audit: type=1400 audit(1748806102.149:1083): avc: denied { mount } for pid=17760 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 379.943282][ T30] audit: type=1400 audit(1748806102.149:1084): avc: denied { mounton } for pid=17760 comm="syz-executor" path="/root/syzkaller.SdqKzA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 379.986246][ T30] audit: type=1400 audit(1748806102.149:1085): avc: denied { mounton } for pid=17760 comm="syz-executor" path="/root/syzkaller.SdqKzA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=69031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 380.027697][ T30] audit: type=1400 audit(1748806102.179:1086): avc: denied { mounton } for pid=17760 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 380.117683][T17860] batadv_slave_1: entered promiscuous mode [ 380.126882][T17859] batadv_slave_1: left promiscuous mode [ 380.217380][T17836] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 380.234463][ T5872] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 380.245616][ T5872] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 380.271443][ T5872] wwan wwan0: port wwan0mbim0 attached [ 380.290910][ T5872] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, ca:1d:0f:c1:fb:1f [ 380.445697][ T30] audit: type=1400 audit(1748806102.739:1087): avc: denied { connect } for pid=17871 comm="syz.6.5363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 380.489206][ T5872] usb 2-1: USB disconnect, device number 62 [ 380.496587][ T5872] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 380.525097][T17874] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5364'. [ 380.560139][ T5873] zl10353_read_register: readreg error (reg=127, ret==0) [ 380.567289][ T5873] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 380.569921][T17840] dtv5100: wlen = 0, aborting. [ 380.579221][ T5873] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 380.590166][ T5870] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 380.599761][ T5872] wwan wwan0: port wwan0mbim0 disconnected [ 380.632914][ T30] audit: type=1400 audit(1748806102.929:1088): avc: denied { watch } for pid=17875 comm="syz.6.5365" path="/666/file0" dev="rpc_pipefs" ino=68297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 380.656283][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.660250][ T5873] usb 5-1: USB disconnect, device number 51 [ 380.688909][ T5873] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 380.740050][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 380.746320][ T5870] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 380.755503][ T5870] usb 4-1: config 0 has no interface number 0 [ 380.763891][ T5870] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 380.773139][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.781368][ T5870] usb 4-1: Product: syz [ 380.785595][ T5870] usb 4-1: Manufacturer: syz [ 380.790724][ T5870] usb 4-1: SerialNumber: syz [ 380.797703][ T5870] usb 4-1: config 0 descriptor?? [ 380.804824][ T5870] smsc95xx v2.0.0 [ 381.222672][ T5870] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 381.242804][ T5870] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 381.373878][T17904] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5378'. [ 381.383935][ T5873] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 381.518757][ T1104] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.563085][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 381.569601][ T5873] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 381.582731][ T5873] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 381.592354][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.610782][ T5873] usb 2-1: config 0 descriptor?? [ 381.623447][ T5873] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input99 [ 381.666156][ T5870] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 381.700495][ T5870] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 381.725003][ T5870] usb 4-1: USB disconnect, device number 62 [ 381.839949][ T5873] bcm5974 2-1:0.0: could not read from device [ 381.864471][ T5170] bcm5974 2-1:0.0: could not read from device [ 381.890387][ T5873] input: failed to attach handler mousedev to device input99, error: -5 [ 381.917624][ T5873] usb 2-1: USB disconnect, device number 63 [ 382.005965][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.015297][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.026504][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.039464][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.048918][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.111402][T17918] lo speed is unknown, defaulting to 1000 [ 382.408748][T17928] syzkaller1: entered promiscuous mode [ 382.415595][T17928] syzkaller1: entered allmulticast mode [ 382.601478][T17918] chnl_net:caif_netlink_parms(): no params data found [ 382.774719][T17944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.820898][T17918] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.836335][T17918] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.850022][T17918] bridge_slave_0: entered allmulticast mode [ 382.867246][T17918] bridge_slave_0: entered promiscuous mode [ 382.891330][T17918] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.913972][T17918] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.950039][T17918] bridge_slave_1: entered allmulticast mode [ 382.957415][T17918] bridge_slave_1: entered promiscuous mode [ 383.086000][T17918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.128513][ T1104] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.156946][T17918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.293351][ T1104] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.300464][ T5872] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 383.412010][T17918] team0: Port device team_slave_0 added [ 383.471543][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 383.485551][ T5872] usb 4-1: config 1 has an invalid interface number: 242 but max is 0 [ 383.498756][ T5872] usb 4-1: config 1 has no interface number 0 [ 383.511011][ T1104] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.516251][ T5872] usb 4-1: config 1 interface 242 has no altsetting 0 [ 383.554217][ T5872] usb 4-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 383.573222][T17918] team0: Port device team_slave_1 added [ 383.576155][T17973] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 383.597116][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.609919][ T5872] usb 4-1: Product: syz [ 383.618915][ T5872] usb 4-1: Manufacturer: syz [ 383.625920][T17973] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 383.640081][ T5872] usb 4-1: SerialNumber: syz [ 383.652175][T17918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.671212][T17918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.732555][T17918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.761942][T17918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.781055][T17918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.807481][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.873441][T17918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.074739][T17918] hsr_slave_0: entered promiscuous mode [ 384.082086][T17918] hsr_slave_1: entered promiscuous mode [ 384.088304][T17918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.095930][T17918] Cannot create hsr debugfs directory [ 384.153693][ T5819] Bluetooth: hci3: command tx timeout [ 384.236632][ T1104] bridge_slave_1: left allmulticast mode [ 384.246758][ T1104] bridge_slave_1: left promiscuous mode [ 384.254120][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.264759][ T1104] bridge_slave_0: left allmulticast mode [ 384.273997][ T1104] bridge_slave_0: left promiscuous mode [ 384.279794][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.296753][ T9] kernel read not supported for file /vga_arbiter (pid: 9 comm: kworker/0:0) [ 384.688125][ T5872] aqc111 4-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 384.718765][ T5872] aqc111 4-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 384.751922][ T5872] aqc111 4-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 384.800913][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.837155][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.848189][ T1104] bond0 (unregistering): Released all slaves [ 384.901700][ T5872] aqc111 4-1:1.242 eth13: register 'aqc111' at usb-dummy_hcd.3-1, Aquantia AQtion USB to 5GbE Controller, d6:5c:89:c8:8f:1e [ 384.937289][ T5872] usb 4-1: USB disconnect, device number 63 [ 384.951758][ T5872] aqc111 4-1:1.242 eth13: unregister 'aqc111' usb-dummy_hcd.3-1, Aquantia AQtion USB to 5GbE Controller [ 385.085380][ T5872] aqc111 4-1:1.242 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 385.112059][ T5872] aqc111 4-1:1.242 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 385.131667][ T5872] aqc111 4-1:1.242 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 385.699509][ T1104] hsr_slave_0: left promiscuous mode [ 385.714065][ T1104] hsr_slave_1: left promiscuous mode [ 385.720644][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.728032][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.738761][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.746276][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.783598][ T1104] veth1_macvtap: left promiscuous mode [ 385.789127][ T1104] veth0_macvtap: left promiscuous mode [ 385.833490][ T1104] veth1_vlan: left promiscuous mode [ 385.849557][ T1104] veth0_vlan: left promiscuous mode [ 385.990185][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 385.997095][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 386.092897][ T5920] IPVS: starting estimator thread 0... [ 386.185442][T18043] IPVS: using max 42 ests per chain, 100800 per kthread [ 386.229954][ T5815] Bluetooth: hci3: command tx timeout [ 386.630153][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 386.665315][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 386.673218][ T30] audit: type=1400 audit(1748806108.969:1089): avc: denied { ioctl } for pid=18062 comm="syz.4.5446" path="socket:[70956]" dev="sockfs" ino=70956 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 386.769995][ T5920] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 386.966018][T18041] tipc: Started in network mode [ 386.972027][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 386.982043][T18041] tipc: Node identity ac1414aa, cluster identity 4711 [ 386.986826][ T5920] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 386.992415][T18041] tipc: Enabled bearer , priority 10 [ 387.005605][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 387.020004][ T5920] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 387.062225][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.089985][ T5920] usb 7-1: Product: syz [ 387.098915][ T5920] usb 7-1: Manufacturer: syz [ 387.128012][ T5920] usb 7-1: SerialNumber: syz [ 387.141347][ T5920] usb 7-1: config 0 descriptor?? [ 387.146887][T18059] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 387.159556][T18059] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 387.174955][ T5920] usb 7-1: ucan: probing device on interface #0 [ 387.215938][T18072] netlink: 'syz.4.5448': attribute type 1 has an invalid length. [ 387.232035][T18071] sit0: entered promiscuous mode [ 387.240907][T18071] netlink: 'syz.3.5450': attribute type 1 has an invalid length. [ 387.261468][T18071] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5450'. [ 387.290805][T17918] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 387.309010][T17918] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 387.329007][T17918] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 387.348452][T17918] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 387.470498][T17918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.511831][T17918] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.532832][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.539967][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.553006][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.560156][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.729796][ T30] audit: type=1400 audit(1748806110.019:1090): avc: denied { name_bind } for pid=18088 comm="syz.3.5456" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 387.791734][ T5920] ucan 7-1:0.0: probe with driver ucan failed with error -71 [ 387.819599][ T5920] usb 7-1: USB disconnect, device number 35 [ 387.867742][T17918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.905595][T18095] lo speed is unknown, defaulting to 1000 [ 388.112862][ T5873] tipc: Node number set to 2886997162 [ 388.169900][ T909] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 388.317205][T17918] veth0_vlan: entered promiscuous mode [ 388.323720][ T5815] Bluetooth: hci3: command tx timeout [ 388.340887][ T909] usb 4-1: Using ep0 maxpacket: 16 [ 388.347549][ T909] usb 4-1: config 0 has no interfaces? [ 388.366039][T17918] veth1_vlan: entered promiscuous mode [ 388.375540][ T909] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 388.402793][ T909] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 388.434511][ T909] usb 4-1: Manufacturer: syz [ 388.447061][T17918] veth0_macvtap: entered promiscuous mode [ 388.472140][ T909] usb 4-1: config 0 descriptor?? [ 388.481383][T17918] veth1_macvtap: entered promiscuous mode [ 388.512437][T17918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.524137][T17918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.549424][T17918] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.563437][T17918] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.589900][T17918] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.601851][T17918] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.695594][T18095] lo: entered promiscuous mode [ 388.706263][T18095] tunl0: entered promiscuous mode [ 388.716788][T18095] gre0: entered promiscuous mode [ 388.724402][T18095] gretap0: entered promiscuous mode [ 388.729703][T18095] net_ratelimit: 3319 callbacks suppressed [ 388.729717][T18095] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 388.759061][ T5873] usb 4-1: USB disconnect, device number 64 [ 388.822985][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.844482][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.874531][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.888529][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.038978][T18125] [ 389.041338][T18125] ===================================================== [ 389.048266][T18125] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 389.055715][T18125] 6.15.0-syzkaller-10815-gbb1556ec9464 #0 Not tainted [ 389.062469][T18125] ----------------------------------------------------- [ 389.069394][T18125] syz.4.5467/18125 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 389.077109][T18125] ffff8880744754b0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 389.085783][T18125] [ 389.085783][T18125] and this task is already holding: [ 389.093118][T18125] ffff8880770b0028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 389.102916][T18125] which would create a new lock dependency: [ 389.108772][T18125] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 389.116836][T18125] [ 389.116836][T18125] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 389.126264][T18125] (&dev->event_lock#2){..-.}-{3:3} [ 389.126289][T18125] [ 389.126289][T18125] ... which became SOFTIRQ-irq-safe at: [ 389.139138][T18125] lock_acquire+0x179/0x350 [ 389.143727][T18125] _raw_spin_lock_irqsave+0x3a/0x60 [ 389.148994][T18125] input_event+0x70/0xb0 [ 389.153307][T18125] atp_complete_geyser_3_4+0xa2c/0x16f0 [ 389.158924][T18125] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 389.164368][T18125] usb_hcd_giveback_urb+0x39b/0x450 [ 389.169639][T18125] dummy_timer+0x180e/0x3a20 [ 389.174303][T18125] __hrtimer_run_queues+0x1ff/0xad0 [ 389.179577][T18125] hrtimer_run_softirq+0x17d/0x350 [ 389.184761][T18125] handle_softirqs+0x219/0x8e0 [ 389.189598][T18125] __irq_exit_rcu+0x109/0x170 [ 389.194342][T18125] irq_exit_rcu+0x9/0x30 [ 389.198652][T18125] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 389.204359][T18125] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 389.210413][T18125] write_comp_data+0x11/0x90 [ 389.215074][T18125] avc_audit_pre_callback+0x1e5/0x2b0 [ 389.220522][T18125] common_lsm_audit+0xd9/0x300 [ 389.225360][T18125] slow_avc_audit+0x186/0x210 [ 389.230102][T18125] avc_has_extended_perms+0xa40/0x1090 [ 389.235629][T18125] ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 389.242033][T18125] selinux_file_ioctl+0x180/0x270 [ 389.247128][T18125] security_file_ioctl+0xc6/0x240 [ 389.252224][T18125] __x64_sys_ioctl+0xb7/0x210 [ 389.256974][T18125] do_syscall_64+0xcd/0x4c0 [ 389.261547][T18125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.267505][T18125] [ 389.267505][T18125] to a SOFTIRQ-irq-unsafe lock: [ 389.274501][T18125] (tasklist_lock){.+.+}-{3:3} [ 389.274522][T18125] [ 389.274522][T18125] ... which became SOFTIRQ-irq-unsafe at: [ 389.287111][T18125] ... [ 389.287116][T18125] lock_acquire+0x179/0x350 [ 389.294945][T18125] _raw_read_lock+0x5f/0x70 [ 389.299514][T18125] __do_wait+0x105/0x890 [ 389.303828][T18125] do_wait+0x21e/0x5a0 [ 389.307964][T18125] kernel_wait+0x9f/0x160 [ 389.312367][T18125] call_usermodehelper_exec_work+0xf1/0x170 [ 389.318336][T18125] process_one_work+0x9cf/0x1b70 [ 389.323347][T18125] worker_thread+0x6c8/0xf10 [ 389.328008][T18125] kthread+0x3c5/0x780 [ 389.332145][T18125] ret_from_fork+0x5d7/0x6f0 [ 389.336803][T18125] ret_from_fork_asm+0x1a/0x30 [ 389.341636][T18125] [ 389.341636][T18125] other info that might help us debug this: [ 389.341636][T18125] [ 389.351840][T18125] Chain exists of: [ 389.351840][T18125] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 389.351840][T18125] [ 389.365380][T18125] Possible interrupt unsafe locking scenario: [ 389.365380][T18125] [ 389.373677][T18125] CPU0 CPU1 [ 389.379032][T18125] ---- ---- [ 389.384391][T18125] lock(tasklist_lock); [ 389.388624][T18125] local_irq_disable(); [ 389.395368][T18125] lock(&dev->event_lock#2); [ 389.402558][T18125] lock(&client->buffer_lock); [ 389.409914][T18125] [ 389.413353][T18125] lock(&dev->event_lock#2); [ 389.418194][T18125] [ 389.418194][T18125] *** DEADLOCK *** [ 389.418194][T18125] [ 389.426314][T18125] 7 locks held by syz.4.5467/18125: [ 389.431496][T18125] #0: ffff88802b6d9118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 389.440620][T18125] #1: ffff888145fa5230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x390 [ 389.450715][T18125] #2: ffffffff8e5c4d80 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x390 [ 389.460359][T18125] #3: ffffffff8e5c4d80 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x890 [ 389.469911][T18125] #4: ffffffff8e5c4d80 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 389.479026][T18125] #5: ffff8880770b0028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 389.489273][T18125] #6: ffffffff8e5c4d80 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 389.498309][T18125] [ 389.498309][T18125] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 389.508690][T18125] -> (&dev->event_lock#2){..-.}-{3:3} { [ 389.514322][T18125] IN-SOFTIRQ-W at: [ 389.518373][T18125] lock_acquire+0x179/0x350 [ 389.524690][T18125] _raw_spin_lock_irqsave+0x3a/0x60 [ 389.531694][T18125] input_event+0x70/0xb0 [ 389.537918][T18125] atp_complete_geyser_3_4+0xa2c/0x16f0 [ 389.545287][T18125] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 389.552472][T18125] usb_hcd_giveback_urb+0x39b/0x450 [ 389.559478][T18125] dummy_timer+0x180e/0x3a20 [ 389.565880][T18125] __hrtimer_run_queues+0x1ff/0xad0 [ 389.572891][T18125] hrtimer_run_softirq+0x17d/0x350 [ 389.579817][T18125] handle_softirqs+0x219/0x8e0 [ 389.586403][T18125] __irq_exit_rcu+0x109/0x170 [ 389.592882][T18125] irq_exit_rcu+0x9/0x30 [ 389.598939][T18125] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 389.606378][T18125] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 389.614164][T18125] write_comp_data+0x11/0x90 [ 389.620573][T18125] avc_audit_pre_callback+0x1e5/0x2b0 [ 389.627756][T18125] common_lsm_audit+0xd9/0x300 [ 389.634330][T18125] slow_avc_audit+0x186/0x210 [ 389.640816][T18125] avc_has_extended_perms+0xa40/0x1090 [ 389.648079][T18125] ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 389.656218][T18125] selinux_file_ioctl+0x180/0x270 [ 389.663057][T18125] security_file_ioctl+0xc6/0x240 [ 389.669896][T18125] __x64_sys_ioctl+0xb7/0x210 [ 389.676388][T18125] do_syscall_64+0xcd/0x4c0 [ 389.682699][T18125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.690398][T18125] INITIAL USE at: [ 389.694360][T18125] lock_acquire+0x179/0x350 [ 389.700583][T18125] _raw_spin_lock_irqsave+0x3a/0x60 [ 389.707501][T18125] input_inject_event+0x9f/0x390 [ 389.714233][T18125] led_set_brightness+0x214/0x290 [ 389.720991][T18125] kbd_led_trigger_activate+0xcb/0x110 [ 389.728189][T18125] led_trigger_set+0x597/0xc50 [ 389.734683][T18125] led_trigger_set_default+0x1bd/0x2a0 [ 389.741873][T18125] led_classdev_register_ext+0x7b8/0xa10 [ 389.749238][T18125] input_leds_connect+0x552/0x8e0 [ 389.755985][T18125] input_attach_handler.isra.0+0x184/0x260 [ 389.763512][T18125] input_register_device+0xa84/0x1130 [ 389.770606][T18125] atkbd_connect+0x5da/0xa20 [ 389.776918][T18125] serio_driver_probe+0x77/0xb0 [ 389.783490][T18125] really_probe+0x23e/0xa90 [ 389.789718][T18125] __driver_probe_device+0x1de/0x440 [ 389.797262][T18125] driver_probe_device+0x4c/0x1b0 [ 389.804012][T18125] __driver_attach+0x283/0x580 [ 389.810506][T18125] bus_for_each_dev+0x13b/0x1d0 [ 389.817086][T18125] serio_handle_event+0x247/0xa50 [ 389.823840][T18125] process_one_work+0x9cf/0x1b70 [ 389.830506][T18125] worker_thread+0x6c8/0xf10 [ 389.836821][T18125] kthread+0x3c5/0x780 [ 389.842616][T18125] ret_from_fork+0x5d7/0x6f0 [ 389.848929][T18125] ret_from_fork_asm+0x1a/0x30 [ 389.855412][T18125] } [ 389.857977][T18125] ... key at: [] __key.7+0x0/0x40 [ 389.865161][T18125] -> (&client->buffer_lock){....}-{3:3} { [ 389.870877][T18125] INITIAL USE at: [ 389.874753][T18125] lock_acquire+0x179/0x350 [ 389.880803][T18125] _raw_spin_lock_irqsave+0x3a/0x60 [ 389.887561][T18125] evdev_do_ioctl+0x347/0x1b30 [ 389.893873][T18125] evdev_ioctl+0x16f/0x1a0 [ 389.899852][T18125] __x64_sys_ioctl+0x18b/0x210 [ 389.906166][T18125] do_syscall_64+0xcd/0x4c0 [ 389.912219][T18125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.919661][T18125] } [ 389.922138][T18125] ... key at: [] __key.1+0x0/0x40 [ 389.929237][T18125] ... acquired at: [ 389.933020][T18125] _raw_spin_lock+0x2e/0x40 [ 389.937678][T18125] evdev_pass_values+0x10e/0x9b0 [ 389.942770][T18125] evdev_events+0x1bb/0x390 [ 389.947428][T18125] input_pass_values+0x6c7/0x890 [ 389.952522][T18125] input_handle_event+0xf00/0x14d0 [ 389.957792][T18125] input_inject_event+0x1cd/0x390 [ 389.962974][T18125] evdev_write+0x457/0x750 [ 389.967549][T18125] vfs_write+0x29d/0x1150 [ 389.972034][T18125] ksys_write+0x1f8/0x250 [ 389.976530][T18125] do_syscall_64+0xcd/0x4c0 [ 389.981210][T18125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.987266][T18125] [ 389.989578][T18125] [ 389.989578][T18125] the dependencies between the lock to be acquired [ 389.989590][T18125] and SOFTIRQ-irq-unsafe lock: [ 390.003075][T18125] -> (tasklist_lock){.+.+}-{3:3} { [ 390.008376][T18125] HARDIRQ-ON-R at: [ 390.012511][T18125] lock_acquire+0x179/0x350 [ 390.019013][T18125] _raw_read_lock+0x5f/0x70 [ 390.025497][T18125] __do_wait+0x105/0x890 [ 390.031809][T18125] do_wait+0x21e/0x5a0 [ 390.037859][T18125] kernel_wait+0x9f/0x160 [ 390.044170][T18125] call_usermodehelper_exec_work+0xf1/0x170 [ 390.052056][T18125] process_one_work+0x9cf/0x1b70 [ 390.059015][T18125] worker_thread+0x6c8/0xf10 [ 390.065604][T18125] kthread+0x3c5/0x780 [ 390.071666][T18125] ret_from_fork+0x5d7/0x6f0 [ 390.078237][T18125] ret_from_fork_asm+0x1a/0x30 [ 390.084984][T18125] SOFTIRQ-ON-R at: [ 390.089119][T18125] lock_acquire+0x179/0x350 [ 390.096045][T18125] _raw_read_lock+0x5f/0x70 [ 390.102531][T18125] __do_wait+0x105/0x890 [ 390.108756][T18125] do_wait+0x21e/0x5a0 [ 390.114810][T18125] kernel_wait+0x9f/0x160 [ 390.121126][T18125] call_usermodehelper_exec_work+0xf1/0x170 [ 390.129007][T18125] process_one_work+0x9cf/0x1b70 [ 390.135944][T18125] worker_thread+0x6c8/0xf10 [ 390.142522][T18125] kthread+0x3c5/0x780 [ 390.148578][T18125] ret_from_fork+0x5d7/0x6f0 [ 390.155153][T18125] ret_from_fork_asm+0x1a/0x30 [ 390.161899][T18125] INITIAL USE at: [ 390.165950][T18125] lock_acquire+0x179/0x350 [ 390.172352][T18125] _raw_write_lock_irq+0x36/0x50 [ 390.179183][T18125] copy_process+0x4caf/0x76a0 [ 390.185751][T18125] kernel_clone+0xfc/0x960 [ 390.192064][T18125] user_mode_thread+0xc7/0x110 [ 390.198719][T18125] rest_init+0x23/0x2b0 [ 390.204775][T18125] start_kernel+0x3ee/0x4d0 [ 390.211277][T18125] x86_64_start_reservations+0x18/0x30 [ 390.218647][T18125] x86_64_start_kernel+0x130/0x190 [ 390.225668][T18125] common_startup_64+0x13e/0x148 [ 390.232509][T18125] INITIAL READ USE at: [ 390.236992][T18125] lock_acquire+0x179/0x350 [ 390.243825][T18125] _raw_read_lock+0x5f/0x70 [ 390.250654][T18125] __do_wait+0x105/0x890 [ 390.257237][T18125] do_wait+0x21e/0x5a0 [ 390.263632][T18125] kernel_wait+0x9f/0x160 [ 390.270289][T18125] call_usermodehelper_exec_work+0xf1/0x170 [ 390.278516][T18125] process_one_work+0x9cf/0x1b70 [ 390.285784][T18125] worker_thread+0x6c8/0xf10 [ 390.292704][T18125] kthread+0x3c5/0x780 [ 390.299100][T18125] ret_from_fork+0x5d7/0x6f0 [ 390.306017][T18125] ret_from_fork_asm+0x1a/0x30 [ 390.313110][T18125] } [ 390.315761][T18125] ... key at: [] tasklist_lock+0x18/0x40 [ 390.323646][T18125] ... acquired at: [ 390.327606][T18125] _raw_read_lock+0x5f/0x70 [ 390.332267][T18125] send_sigurg+0xed/0xc80 [ 390.336757][T18125] sk_send_sigurg+0x76/0x360 [ 390.341503][T18125] unix_stream_sendmsg+0xeb3/0x11d0 [ 390.346860][T18125] ____sys_sendmsg+0xa98/0xc70 [ 390.351784][T18125] ___sys_sendmsg+0x134/0x1d0 [ 390.356638][T18125] __sys_sendmsg+0x16d/0x220 [ 390.361401][T18125] do_syscall_64+0xcd/0x4c0 [ 390.366070][T18125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.372125][T18125] [ 390.374431][T18125] -> (&f_owner->lock){....}-{3:3} { [ 390.379717][T18125] INITIAL USE at: [ 390.383682][T18125] lock_acquire+0x179/0x350 [ 390.389910][T18125] _raw_write_lock_irq+0x36/0x50 [ 390.396576][T18125] __f_setown+0x61/0x3c0 [ 390.402548][T18125] generic_setlease+0xeef/0x1300 [ 390.409208][T18125] kernel_setlease+0x106/0x140 [ 390.415692][T18125] vfs_setlease+0x258/0x2d0 [ 390.421915][T18125] fcntl_setlease+0x3ed/0x5a0 [ 390.428315][T18125] do_fcntl+0x751/0x15a0 [ 390.434283][T18125] __x64_sys_fcntl+0x163/0x200 [ 390.440776][T18125] do_syscall_64+0xcd/0x4c0 [ 390.447010][T18125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.454624][T18125] INITIAL READ USE at: [ 390.459021][T18125] lock_acquire+0x179/0x350 [ 390.465685][T18125] _raw_read_lock_irqsave+0x74/0x90 [ 390.473039][T18125] send_sigio+0x31/0x3e0 [ 390.479437][T18125] kill_fasync+0x214/0x510 [ 390.486010][T18125] lease_break_callback+0x23/0x30 [ 390.493193][T18125] __break_lease+0x671/0x1810 [ 390.500023][T18125] do_dentry_open+0x6e1/0x1c10 [ 390.506939][T18125] vfs_open+0x82/0x3f0 [ 390.513164][T18125] path_openat+0x1de4/0x2cb0 [ 390.519908][T18125] do_filp_open+0x20b/0x470 [ 390.526563][T18125] do_sys_openat2+0x11b/0x1d0 [ 390.533402][T18125] __x64_sys_openat+0x174/0x210 [ 390.540412][T18125] do_syscall_64+0xcd/0x4c0 [ 390.547073][T18125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.555118][T18125] } [ 390.557683][T18125] ... key at: [] __key.1+0x0/0x40 [ 390.564868][T18125] ... acquired at: [ 390.568735][T18125] _raw_read_lock_irqsave+0x74/0x90 [ 390.574089][T18125] send_sigio+0x31/0x3e0 [ 390.578491][T18125] kill_fasync+0x214/0x510 [ 390.583080][T18125] lease_break_callback+0x23/0x30 [ 390.588265][T18125] __break_lease+0x671/0x1810 [ 390.593097][T18125] do_dentry_open+0x6e1/0x1c10 [ 390.598016][T18125] vfs_open+0x82/0x3f0 [ 390.602253][T18125] path_openat+0x1de4/0x2cb0 [ 390.607006][T18125] do_filp_open+0x20b/0x470 [ 390.611664][T18125] do_sys_openat2+0x11b/0x1d0 [ 390.616502][T18125] __x64_sys_openat+0x174/0x210 [ 390.621512][T18125] do_syscall_64+0xcd/0x4c0 [ 390.626176][T18125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.632227][T18125] [ 390.634538][T18125] -> (&new->fa_lock){....}-{3:3} { [ 390.639652][T18125] INITIAL USE at: [ 390.643525][T18125] lock_acquire+0x179/0x350 [ 390.649582][T18125] _raw_write_lock_irq+0x36/0x50 [ 390.656064][T18125] fasync_insert_entry+0x1ca/0x2a0 [ 390.662727][T18125] fasync_helper+0x60/0xd0 [ 390.668695][T18125] sock_fasync+0x92/0x140 [ 390.674575][T18125] do_vfs_ioctl+0x12ac/0x1a60 [ 390.680807][T18125] __x64_sys_ioctl+0x114/0x210 [ 390.687131][T18125] do_syscall_64+0xcd/0x4c0 [ 390.693181][T18125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.700618][T18125] INITIAL READ USE at: [ 390.704941][T18125] lock_acquire+0x179/0x350 [ 390.711428][T18125] _raw_read_lock_irqsave+0x74/0x90 [ 390.718604][T18125] kill_fasync+0x138/0x510 [ 390.725003][T18125] anon_pipe_read+0xb3c/0x1210 [ 390.731746][T18125] vfs_read+0xa95/0xc60 [ 390.737879][T18125] ksys_read+0x1f8/0x250 [ 390.744099][T18125] do_syscall_64+0xcd/0x4c0 [ 390.750590][T18125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.758461][T18125] } [ 390.760939][T18125] ... key at: [] __key.0+0x0/0x40 [ 390.768038][T18125] ... acquired at: [ 390.771821][T18125] lock_acquire+0x179/0x350 [ 390.776490][T18125] _raw_read_lock_irqsave+0x74/0x90 [ 390.781845][T18125] kill_fasync+0x138/0x510 [ 390.786423][T18125] evdev_pass_values+0x619/0x9b0 [ 390.791527][T18125] evdev_events+0x1bb/0x390 [ 390.796198][T18125] input_pass_values+0x6c7/0x890 [ 390.801303][T18125] input_handle_event+0xf00/0x14d0 [ 390.806748][T18125] input_inject_event+0x1cd/0x390 [ 390.811928][T18125] evdev_write+0x457/0x750 [ 390.816499][T18125] vfs_write+0x29d/0x1150 [ 390.820984][T18125] ksys_write+0x1f8/0x250 [ 390.825474][T18125] do_syscall_64+0xcd/0x4c0 [ 390.830135][T18125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.836182][T18125] [ 390.838485][T18125] [ 390.838485][T18125] stack backtrace: [ 390.844355][T18125] CPU: 1 UID: 0 PID: 18125 Comm: syz.4.5467 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(full) [ 390.844374][T18125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 390.844383][T18125] Call Trace: [ 390.844388][T18125] [ 390.844396][T18125] dump_stack_lvl+0x116/0x1f0 [ 390.844414][T18125] check_irq_usage+0x7dc/0x920 [ 390.844436][T18125] ? check_path.constprop.0+0x24/0x50 [ 390.844454][T18125] ? __lock_acquire+0x1285/0x1c90 [ 390.844470][T18125] __lock_acquire+0x1285/0x1c90 [ 390.844491][T18125] lock_acquire+0x179/0x350 [ 390.844507][T18125] ? kill_fasync+0x138/0x510 [ 390.844530][T18125] _raw_read_lock_irqsave+0x74/0x90 [ 390.844545][T18125] ? kill_fasync+0x138/0x510 [ 390.844564][T18125] kill_fasync+0x138/0x510 [ 390.844588][T18125] evdev_pass_values+0x619/0x9b0 [ 390.844606][T18125] evdev_events+0x1bb/0x390 [ 390.844623][T18125] input_pass_values+0x6c7/0x890 [ 390.844640][T18125] input_handle_event+0xf00/0x14d0 [ 390.844656][T18125] ? _copy_from_user+0x59/0xd0 [ 390.844680][T18125] input_inject_event+0x1cd/0x390 [ 390.844698][T18125] evdev_write+0x457/0x750 [ 390.844715][T18125] ? __pfx_evdev_write+0x10/0x10 [ 390.844732][T18125] ? bpf_lsm_file_permission+0x9/0x10 [ 390.844752][T18125] ? security_file_permission+0x71/0x210 [ 390.844774][T18125] ? rw_verify_area+0xcf/0x680 [ 390.844795][T18125] ? __pfx_evdev_write+0x10/0x10 [ 390.844811][T18125] vfs_write+0x29d/0x1150 [ 390.844827][T18125] ? __pfx_vfs_write+0x10/0x10 [ 390.844840][T18125] ? find_held_lock+0x2b/0x80 [ 390.844852][T18125] ? __fget_files+0x204/0x3c0 [ 390.844870][T18125] ? __fget_files+0x20e/0x3c0 [ 390.844887][T18125] ksys_write+0x1f8/0x250 [ 390.844901][T18125] ? __pfx_ksys_write+0x10/0x10 [ 390.844918][T18125] do_syscall_64+0xcd/0x4c0 [ 390.844936][T18125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.844950][T18125] RIP: 0033:0x7f35cc18e969 [ 390.844962][T18125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.844976][T18125] RSP: 002b:00007f35cd0d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 390.844990][T18125] RAX: ffffffffffffffda RBX: 00007f35cc3b5fa0 RCX: 00007f35cc18e969 [ 390.844999][T18125] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 390.845008][T18125] RBP: 00007f35cc210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 390.845016][T18125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.845025][T18125] R13: 0000000000000000 R14: 00007f35cc3b5fa0 R15: 00007ffc6cbacbf8 [ 390.845038][T18125] [ 391.097007][ C1] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 391.148144][ T30] audit: type=1400 audit(1748806113.399:1091): avc: denied { write } for pid=5798 comm="syz-executor" path="pipe:[4293]" dev="pipefs" ino=4293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 391.823233][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.833609][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.891900][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.902352][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.952667][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.963105][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.023050][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.033691][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.082371][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.132671][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.193049][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.246118][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.493558][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.503579][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.513181][ T13] bond0 (unregistering): (slave bond1): Releasing backup interface [ 392.521364][ T13] bond0 (unregistering): Released all slaves [ 392.592627][ T13] bond1 (unregistering): Released all slaves [ 392.649505][ T13] tipc: Disabling bearer [ 392.655158][ T13] tipc: Left network mode [ 392.680996][ T13] IPVS: stopping backup sync thread 10517 ... [ 393.055561][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.063160][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.071165][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.078523][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.088673][ T13] hsr_slave_0: left promiscuous mode [ 393.094440][ T13] hsr_slave_1: left promiscuous mode [ 393.099933][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.107319][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.114835][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.122228][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.133326][ T13] veth1_macvtap: left promiscuous mode [ 393.138792][ T13] veth0_macvtap: left allmulticast mode [ 393.144616][ T13] veth0_macvtap: left promiscuous mode [ 393.150679][ T13] veth1_vlan: left promiscuous mode [ 393.155886][ T13] veth0_vlan: left promiscuous mode [ 393.161776][ T13] veth1_to_batadv: left promiscuous mode [ 393.167407][ T13] veth1_macvtap: left promiscuous mode [ 393.173513][ T13] veth0_macvtap: left promiscuous mode [ 393.178993][ T13] veth1_vlan: left promiscuous mode [ 393.184385][ T13] veth0_vlan: left promiscuous mode [ 393.446065][ T13] team0 (unregistering): Port device team_slave_1 removed [ 393.455663][ T13] team0 (unregistering): Port device team_slave_0 removed [ 393.505946][ T1162] smc: removing ib device syz2 [ 393.965399][ T13] IPVS: stop unused estimator thread 0... [ 393.971651][ T13] IPVS: stop unused estimator thread 0... [ 394.093480][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.132563][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.183870][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.252743][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.301471][ T13] bridge_slave_1: left allmulticast mode [ 394.307111][ T13] bridge_slave_1: left promiscuous mode [ 394.312939][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.320893][ T13] bridge_slave_0: left allmulticast mode [ 394.326508][ T13] bridge_slave_0: left promiscuous mode [ 394.332253][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.387151][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.397015][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.406241][ T13] bond0 (unregistering): Released all slaves [ 394.592952][ T13] hsr_slave_0: left promiscuous mode [ 394.598457][ T13] hsr_slave_1: left promiscuous mode [ 394.604097][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.611593][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.618943][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.626562][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.635603][ T13] veth1_macvtap: left promiscuous mode [ 394.641139][ T13] veth0_macvtap: left promiscuous mode [ 394.646632][ T13] veth1_vlan: left promiscuous mode [ 394.651932][ T13] veth0_vlan: left promiscuous mode [ 394.746869][ T13] team0 (unregistering): Port device team_slave_1 removed [ 394.763658][ T13] team0 (unregistering): Port device team_slave_0 removed