last executing test programs: 46.719422665s ago: executing program 4 (id=1762): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 46.596621306s ago: executing program 4 (id=1766): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 46.557667444s ago: executing program 4 (id=1768): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x80a0000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]}) 46.436938078s ago: executing program 4 (id=1770): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) 46.375318547s ago: executing program 4 (id=1771): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000ffed000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x18) faccessat2(0xffffffffffffffff, 0x0, 0x9c, 0x200) 46.057950588s ago: executing program 4 (id=1776): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 45.893638328s ago: executing program 32 (id=1776): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 3.563261472s ago: executing program 5 (id=2423): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x40}]}, 0x2c}}, 0x20044000) 3.450478684s ago: executing program 5 (id=2425): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xfffffffe) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 2.37243852s ago: executing program 3 (id=2445): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000380)="fc") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 2.337016221s ago: executing program 3 (id=2447): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) fcntl$setstatus(r0, 0x4, 0x2200) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.118465595s ago: executing program 3 (id=2450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 2.043703776s ago: executing program 3 (id=2452): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.813214888s ago: executing program 3 (id=2457): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.714380993s ago: executing program 3 (id=2459): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 688.923635ms ago: executing program 2 (id=2482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 644.259638ms ago: executing program 1 (id=2483): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2100) 643.286025ms ago: executing program 0 (id=2484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2340, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x1}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'netpci0\x00', 0x400}) 590.57118ms ago: executing program 1 (id=2485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f88f7", 0x12}], 0x1) 589.298427ms ago: executing program 2 (id=2486): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x16, 0x4, 0x3}, 0x10) 515.996183ms ago: executing program 0 (id=2487): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x200, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xfff2, 0xffff}, {0xe}}}, 0x24}}, 0x0) 512.075695ms ago: executing program 2 (id=2488): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) fchmodat(0xffffffffffffffff, 0x0, 0x50) 465.8364ms ago: executing program 2 (id=2489): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xffffffffffffffff) 451.330787ms ago: executing program 1 (id=2490): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 392.118447ms ago: executing program 1 (id=2491): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x143040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x2, 0x5, 0x0, 'Y\x00'}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x540c, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 357.480601ms ago: executing program 0 (id=2492): pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 355.829254ms ago: executing program 5 (id=2493): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'}) 351.103836ms ago: executing program 2 (id=2494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r0, 0x2) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 307.362086ms ago: executing program 1 (id=2495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 280.099682ms ago: executing program 2 (id=2496): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000402505a1a440000102030109025c000201000000090400000102090000052406000105240000000d240f0100000000000000000006241a000000090581030002"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_usb_connect$uac1(0x3, 0x10d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfb, 0x3, 0x1, 0x2, 0x0, 0xe, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x88, 0x4}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x205, 0x4, 0x0, 0xd, 0x9, 0xf9}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x305, 0xc, 0x1, 0x41}, @feature_unit={0xb, 0x24, 0x6, 0x1, 0x2, 0x2, [0xa, 0x7], 0x65}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x2, 0x0, 'h'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2f, 0x3, 0x3, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x8b, 0x4, "5cf6b6", '6'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0x40, 0x9, "1d9d"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0xa9, 0x4, "4c6aef9a39"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x6, 0x8, {0x7, 0x25, 0x1, 0x2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x40, 0x2, 0x4e, 0x9, "fcb12b"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x1, 0xc, 0x37, "d17912a1b70823"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x2, 0xcb, "53517a45dc56"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x4, 0xc8, 0x3b, "5ed12bb2cc768a0a95"}, @as_header={0x7, 0x24, 0x1, 0xef, 0x9a, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x5, 0x7, {0x7, 0x25, 0x1, 0x1, 0x7, 0x9}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x5, 0x6, 0x8, 0x8, 0xff}, 0x95, &(0x7f0000000180)={0x5, 0xf, 0x95, 0x2, [@generic={0x85, 0x10, 0x2, "d73b70938a56361e96521ac01925cbb62b65afdf4ab19e6b5c1d87011f68b97fdd01e72049b24d17259f190f4c1f5f53591c7af054cca28a8f8051156b8c848e26ce9e7f1bb8d9391f58409f4d21e396da5b0d56331a032260bf8330309ed853c6b15d7729667daab21ba300906803760068abb23e85f2fbf8485ea0d6bdc01833cf"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x5, 0xf3, 0x40, 0x81}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x96, &(0x7f0000000300)=@string={0x96, 0x3, "e7ae3bf5f20e44f59bfb348b571a13124e737565d7403350c1caa6cf702d157e25faa4786d2df5931fa3e6ff50972c60a0307963ac89abfa2914296b04acabfc53afefb82851e4e294e1732255925bb38d940ae002cb6721ac25cb343e9e57e3303c331160f1493b5cb930e450a328f21ffe13d05e33f95806e9cc9b21c9de66afac1bd56e057031e7031d1224dba34f0d9414f2"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc04}}, {0xf3, &(0x7f0000000400)=@string={0xf3, 0x3, "7432bf42acbeb1d6312c801172c8c754b3ed6a2a9660eee653e4f9b6de63dfd737f32dad0ec8dc2215bf3a338de81cbf9a5d7f647ccd8cfa8c43522f8041db866998aa1968016f0e1bfdd0d8852885650b1cb7c67e52e0707c66cc6d1951b96af3cf529afffa66e111206abb8b23701b206f5fb514f777863b31376187dcd160ef680c7fe58360afd8457352cc6f3683691abe30bb21be5e40e8424d59acc4f18a32cbe245da369441221a82816c882ad4878468f231278796aa0a0403fce3dd37686422d2cdb6dec0dbae438b69be502384ee1502cecb749b07993f602b47907b1ceff60c78d132e320e570f095b3981e"}}]}) 251.571533ms ago: executing program 5 (id=2497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="20000000ffffff935c360337dbd1ca93080045000014000000000032"], 0x2e) 204.270228ms ago: executing program 0 (id=2498): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000004c0)={0x11, @multicast2, 0x0, 0x0, 'ovf\x00', 0x30, 0x3, 0x4c}, 0x2c) 117.132924ms ago: executing program 1 (id=2499): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_usb_connect(0x2, 0x24, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x0, 0xa, 0x5f, 0x92, 0x40}}]}}]}}, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x48240, 0x0) 30.426289ms ago: executing program 0 (id=2500): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0xfffffffffffffffd}) 29.985191ms ago: executing program 5 (id=2501): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) 22.140107ms ago: executing program 0 (id=2502): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000540)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) fcntl$setstatus(r1, 0x4, 0x2400) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 5 (id=2503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg(r0, &(0x7f0000006680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[{0x10, 0x108}, {0x10, 0x10d, 0xf6}], 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=[{0x10, 0x1, 0xe}], 0x10}}], 0x2, 0x8000) kernel console output (not intermixed with test programs): o power cycle the pvrusb2 device in order to recover. [ 161.031167][ T5948] usb 1-1: USB disconnect, device number 23 [ 161.041789][ T972] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 161.211482][ T972] usb 5-1: Using ep0 maxpacket: 8 [ 161.228135][ T972] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 161.250032][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.266648][ T972] usb 5-1: Product: syz [ 161.273392][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 161.273658][ T972] usb 5-1: Manufacturer: syz [ 161.297571][ T972] usb 5-1: SerialNumber: syz [ 161.314577][ T972] usb 5-1: config 0 descriptor?? [ 161.339606][ T972] usb 5-1: selecting invalid altsetting 3 [ 161.348494][ T972] comedi comedi0: could not set alternate setting 3 in high speed [ 161.356608][ T972] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 161.366181][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 161.366195][ T30] audit: type=1400 audit(1751019697.251:787): avc: denied { watch } for pid=9108 comm="syz.1.1322" path="/239/file0" dev="tmpfs" ino=1226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 161.398989][ T972] usbdux 5-1:0.0: probe with driver usbdux failed with error -22 [ 161.409105][ T30] audit: type=1400 audit(1751019697.251:786): avc: denied { mount } for pid=9110 comm="syz.3.1323" name="/" dev="configfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 161.431725][ T30] audit: type=1400 audit(1751019697.251:788): avc: denied { read } for pid=9110 comm="syz.3.1323" name="/" dev="configfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.471618][ T30] audit: type=1400 audit(1751019697.251:789): avc: denied { open } for pid=9110 comm="syz.3.1323" path="/295/file0" dev="configfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.494795][ T9113] netlink: 'syz.3.1324': attribute type 21 has an invalid length. [ 161.498503][ T30] audit: type=1400 audit(1751019697.271:790): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 161.502811][ T9113] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1324'. [ 161.532630][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 161.545834][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'. [ 161.578351][ T5948] usb 5-1: USB disconnect, device number 17 [ 161.596102][ T9] gspca_ov534_9: reg_w failed -71 [ 161.632861][ T9113] netlink: 'syz.3.1324': attribute type 21 has an invalid length. [ 161.640755][ T9113] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1324'. [ 161.684020][ T30] audit: type=1400 audit(1751019697.571:791): avc: denied { setopt } for pid=9118 comm="syz.0.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.763812][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'. [ 161.782562][ T9129] tipc: Started in network mode [ 161.787652][ T9129] tipc: Node identity ff, cluster identity 4711 [ 161.796328][ T9129] tipc: Enabling of bearer rejected, failed to enable media [ 161.863351][ T30] audit: type=1400 audit(1751019697.751:792): avc: denied { read } for pid=9131 comm="syz.0.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.888314][ T30] audit: type=1400 audit(1751019697.751:793): avc: denied { view } for pid=9130 comm="syz.1.1334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 161.961384][ T9] gspca_ov534_9: Unknown sensor 0000 [ 161.961455][ T9] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 161.989990][ T9] usb 3-1: USB disconnect, device number 18 [ 162.020500][ T30] audit: type=1400 audit(1751019697.891:794): avc: denied { read write } for pid=9143 comm="syz.1.1338" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 162.059811][ T30] audit: type=1400 audit(1751019697.891:795): avc: denied { open } for pid=9143 comm="syz.1.1338" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 162.360189][ T9167] blkio.reset_stats is deprecated [ 162.365496][ T9169] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1351'. [ 162.531089][ T972] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 162.563476][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1358'. [ 162.692573][ T972] usb 4-1: config 9 has an invalid interface number: 77 but max is 0 [ 162.700860][ T972] usb 4-1: config 9 has no interface number 0 [ 162.707386][ T972] usb 4-1: config 9 interface 77 has no altsetting 0 [ 162.716543][ T972] usb 4-1: New USB device found, idVendor=2040, idProduct=8400, bcdDevice=83.b1 [ 162.725725][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.731113][ T5851] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 162.734704][ T972] usb 4-1: Product: syz [ 162.749515][ T972] usb 4-1: Manufacturer: syz [ 162.754235][ T972] usb 4-1: SerialNumber: syz [ 162.897059][ T5851] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 162.912476][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.920470][ T5851] usb 1-1: Product: syz [ 162.925205][ T5851] usb 1-1: Manufacturer: syz [ 162.929921][ T5851] usb 1-1: SerialNumber: syz [ 162.938667][ T5851] usb 1-1: config 0 descriptor?? [ 163.154693][ T5851] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 163.183169][ T972] dvb-usb: found a 'Hauppauge Nova-TD-500 (84xxx)' in cold state, will try to load a firmware [ 163.216797][ T972] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 163.224906][ T972] dib0700: firmware download failed at 7 with -22 [ 163.245674][ T972] usb 4-1: USB disconnect, device number 18 [ 163.382414][ T9181] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 163.391430][ T9181] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 163.408164][ T9181] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 163.425050][ T9181] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 163.433501][ T9181] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 163.444336][ T9181] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 163.466062][ T9181] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 163.473611][ T9181] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 163.473873][ T9199] xt_CT: No such helper "snmp_trap" [ 163.487846][ T9181] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 163.497938][ T9181] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 163.505232][ T9181] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 163.514461][ T9181] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 163.571265][ T5851] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 163.826280][ T9] usb 1-1: USB disconnect, device number 24 [ 164.051713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 164.081008][ T972] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 164.251091][ T972] usb 2-1: Using ep0 maxpacket: 16 [ 164.257891][ T972] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 164.281115][ T972] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 164.290893][ T972] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 164.309389][ T972] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.321080][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 164.330216][ T972] usb 2-1: SerialNumber: syz [ 164.356381][ T9205] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.601090][ T5851] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 164.605102][ T972] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 164.626725][ T972] usb 2-1: USB disconnect, device number 25 [ 164.651118][ T5819] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.701020][ T5948] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 164.761055][ T5851] usb 3-1: Using ep0 maxpacket: 16 [ 164.774352][ T5851] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.785565][ T5851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 164.794200][ T5851] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 164.805830][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.815579][ T5851] usb 3-1: config 0 descriptor?? [ 164.851004][ T5948] usb 1-1: Using ep0 maxpacket: 32 [ 164.857823][ T5948] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.870990][ T5948] usb 1-1: config 0 interface 0 has no altsetting 0 [ 164.877619][ T5948] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 164.881296][ T5922] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 164.890773][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.905791][ T5948] usb 1-1: config 0 descriptor?? [ 165.051230][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 165.058330][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.071021][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.080810][ T5922] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 165.091268][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.101929][ T5922] usb 5-1: config 0 descriptor?? [ 165.110223][ T5922] hub 5-1:0.0: USB hub found [ 165.236412][ T5851] playstation 0003:054C:0BA0.0016: hidraw0: USB HID v7d.d9 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 165.320001][ T5922] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 165.334767][ T5948] corsair-cpro 0003:1B1C:0C10.0017: hidraw1: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 165.408696][ T5948] corsair-cpro 0003:1B1C:0C10.0017: probe with driver corsair-cpro failed with error -38 [ 165.430026][ T5851] playstation 0003:054C:0BA0.0016: Invalid byte count transferred, expected 16 got 0 [ 165.439651][ T5851] playstation 0003:054C:0BA0.0016: Failed to retrieve DualShock4 pairing info: -22 [ 165.450279][ T5851] playstation 0003:054C:0BA0.0016: Failed to get MAC address from DualShock4 [ 165.459189][ T5819] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.480184][ T5851] playstation 0003:054C:0BA0.0016: Failed to create dualshock4. [ 165.490742][ T5851] playstation 0003:054C:0BA0.0016: probe with driver playstation failed with error -22 [ 165.531297][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.537367][ T5819] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.543457][ T972] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 165.546883][ T5851] usb 1-1: USB disconnect, device number 25 [ 165.555943][ T9298] __nla_validate_parse: 1 callbacks suppressed [ 165.555956][ T9298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1410'. [ 165.653633][ T9] usb 3-1: USB disconnect, device number 19 [ 165.696668][ T9300] SELinux: failed to load policy [ 165.713275][ T972] usb 4-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 165.722342][ T972] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 165.727419][ T5922] hid-generic 0003:046D:C31C.0018: unbalanced collection at end of report description [ 165.731430][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 165.733379][ T972] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 165.754961][ T5922] hid-generic 0003:046D:C31C.0018: probe with driver hid-generic failed with error -22 [ 165.779696][ T972] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 165.788071][ T972] usb 4-1: Product: syz [ 165.792416][ T972] usb 4-1: Manufacturer: syz [ 165.797044][ T972] usb 4-1: SerialNumber: syz [ 165.804711][ T972] usb 4-1: config 0 descriptor?? [ 165.813225][ T972] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 166.028032][ T972] usb 4-1: USB disconnect, device number 19 [ 166.051218][ T9] usb 5-1: USB disconnect, device number 18 [ 166.731017][ T5819] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.760233][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 166.760249][ T30] audit: type=1400 audit(1751020215.644:811): avc: denied { setopt } for pid=9334 comm="syz.0.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.900789][ T30] audit: type=1400 audit(1751020215.784:812): avc: denied { nlmsg_read } for pid=9340 comm="syz.0.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.971099][ T30] audit: type=1400 audit(1751020215.784:813): avc: denied { bind } for pid=9345 comm="syz.3.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 167.062091][ T9355] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1435'. [ 167.071154][ T9355] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1435'. [ 167.182003][ T5922] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 167.347187][ T5922] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 167.360748][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.361575][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1445'. [ 167.390150][ T5922] usb 2-1: Product: syz [ 167.405042][ T5922] usb 2-1: Manufacturer: syz [ 167.409682][ T5922] usb 2-1: SerialNumber: syz [ 167.424557][ T30] audit: type=1400 audit(1751020216.304:814): avc: denied { write } for pid=9378 comm="syz.4.1447" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 167.447856][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.464371][ T5922] usb 2-1: config 0 descriptor?? [ 167.473897][ T5922] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 167.531352][ T5819] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.572349][ T9387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.584569][ T9387] bond0: (slave bond1): Enslaving as an active interface with an up link [ 167.611022][ T5819] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.611029][ T5815] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.710497][ T5819] Bluetooth: hci0: Invalid handle: 0x21e5 > 0x0eff [ 167.720801][ T5851] usb 2-1: USB disconnect, device number 26 [ 167.749335][ T30] audit: type=1400 audit(1751020216.634:815): avc: denied { create } for pid=9400 comm="syz.4.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 167.756718][ T9401] dummy0: entered promiscuous mode [ 167.769040][ T30] audit: type=1400 audit(1751020216.634:816): avc: denied { ioctl } for pid=9400 comm="syz.4.1455" path="socket:[24467]" dev="sockfs" ino=24467 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 167.798591][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.849832][ T30] audit: type=1400 audit(1751020216.734:817): avc: denied { search } for pid=9402 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.876584][ T30] audit: type=1400 audit(1751020216.764:818): avc: denied { search } for pid=9402 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.907888][ T30] audit: type=1400 audit(1751020216.764:819): avc: denied { search } for pid=9402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.961023][ T43] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 167.978890][ T30] audit: type=1400 audit(1751020216.764:820): avc: denied { search } for pid=9402 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.016192][ T9411] program syz.0.1459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.122299][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 168.142068][ T43] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 168.152135][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.160268][ T43] usb 3-1: Product: syz [ 168.164835][ T43] usb 3-1: Manufacturer: syz [ 168.169430][ T43] usb 3-1: SerialNumber: syz [ 168.178756][ T43] usb 3-1: config 0 descriptor?? [ 168.192745][ T43] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 168.399483][ T43] gspca_sn9c2028: read1 error -32 [ 168.408320][ T43] gspca_sn9c2028: read1 error -32 [ 168.662713][ T43] usb 3-1: USB disconnect, device number 20 [ 168.812384][ T5819] Bluetooth: hci0: command 0x0c1a tx timeout [ 168.931099][ T972] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 169.110997][ T972] usb 4-1: Using ep0 maxpacket: 16 [ 169.124251][ T972] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 169.143893][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 169.184673][ T972] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 169.200977][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.219205][ T972] usb 4-1: Product: syz [ 169.235942][ T972] usb 4-1: Manufacturer: syz [ 169.256425][ T9485] @: renamed from vlan0 (while UP) [ 169.262195][ T972] usb 4-1: SerialNumber: syz [ 169.274346][ T972] usb 4-1: config 0 descriptor?? [ 169.292660][ T972] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 169.321159][ T972] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 169.611062][ T5819] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.649864][ T9515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1492'. [ 169.671305][ T5948] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 169.691240][ T5819] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.691249][ T5815] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.723164][ T43] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 169.832870][ T5948] usb 1-1: config 9 has an invalid interface number: 77 but max is 0 [ 169.841528][ T5948] usb 1-1: config 9 has no interface number 0 [ 169.847646][ T5948] usb 1-1: config 9 interface 77 has no altsetting 0 [ 169.856237][ T5948] usb 1-1: New USB device found, idVendor=2040, idProduct=8400, bcdDevice=83.b1 [ 169.866632][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.874698][ T5948] usb 1-1: Product: syz [ 169.878858][ T5948] usb 1-1: Manufacturer: syz [ 169.883467][ T5948] usb 1-1: SerialNumber: syz [ 169.890283][ T972] em28xx 4-1:0.0: chip ID is em2765 [ 169.891122][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 169.901062][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 169.904444][ T43] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 169.919592][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.936458][ T43] usb 3-1: config 0 descriptor?? [ 169.944121][ T43] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 170.061015][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 170.068625][ T9] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 170.076905][ T9] usb 2-1: config 0 has no interface number 0 [ 170.084787][ T9] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 170.094683][ T972] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 170.107377][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.116033][ T972] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 170.123161][ T9] usb 2-1: Product: syz [ 170.127363][ T9] usb 2-1: Manufacturer: syz [ 170.133690][ T972] em28xx 4-1:0.0: No AC97 audio processor [ 170.140172][ T9] usb 2-1: SerialNumber: syz [ 170.147530][ T972] usb 4-1: USB disconnect, device number 20 [ 170.155811][ T972] em28xx 4-1:0.0: Disconnecting em28xx [ 170.162776][ T9] usb 2-1: config 0 descriptor?? [ 170.171787][ T972] em28xx 4-1:0.0: Freeing device [ 170.179011][ T9] ftdi_sio 2-1:0.217: FTDI USB Serial Device converter detected [ 170.189118][ T9] usb 2-1: Detected SIO [ 170.195595][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 170.334488][ T5948] dvb-usb: found a 'Hauppauge Nova-TD-500 (84xxx)' in cold state, will try to load a firmware [ 170.345178][ T5948] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 170.353819][ T5948] dib0700: firmware download failed at 7 with -22 [ 170.362932][ T5948] usb 1-1: USB disconnect, device number 26 [ 170.391028][ T972] usb 2-1: USB disconnect, device number 27 [ 170.399643][ T972] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 170.409278][ T972] ftdi_sio 2-1:0.217: device disconnected [ 170.764166][ T43] gspca_nw80x: reg_r err -71 [ 170.768890][ T43] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 170.782539][ T43] usb 3-1: USB disconnect, device number 21 [ 170.967674][ T9535] sp0: Synchronizing with TNC [ 171.211116][ T972] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 171.367824][ T9566] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1514'. [ 171.379640][ T972] usb 4-1: Using ep0 maxpacket: 32 [ 171.388128][ T972] usb 4-1: config 0 has no interfaces? [ 171.401109][ T972] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 171.410274][ T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.421015][ T5948] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 171.431304][ T972] usb 4-1: config 0 descriptor?? [ 171.586158][ T5948] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 171.595578][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.605021][ T5948] usb 5-1: Product: syz [ 171.609298][ T5948] usb 5-1: Manufacturer: syz [ 171.613965][ T5948] usb 5-1: SerialNumber: syz [ 171.622539][ T5948] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 171.650021][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 171.654811][ T9539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.669178][ T9539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.684600][ T43] usb 4-1: USB disconnect, device number 21 [ 172.038242][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 172.038257][ T30] audit: type=1400 audit(1751020220.924:863): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 172.071548][ T5851] usb 5-1: USB disconnect, device number 19 [ 172.131836][ T43] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 172.292498][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1521'. [ 172.306012][ T43] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 172.315301][ T43] usb 4-1: config 0 has no interface number 0 [ 172.321682][ T43] usb 4-1: config 0 interface 184 has no altsetting 0 [ 172.340179][ T43] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=69.ee [ 172.350054][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.369630][ T43] usb 4-1: Product: syz [ 172.379742][ T43] usb 4-1: Manufacturer: syz [ 172.389751][ T43] usb 4-1: SerialNumber: syz [ 172.411591][ T43] usb 4-1: config 0 descriptor?? [ 172.419501][ T43] ttusbir 4-1:0.184: cannot find expected altsetting [ 172.601766][ T30] audit: type=1400 audit(1751020221.484:864): avc: denied { write } for pid=9597 comm="syz.0.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.647814][ T30] audit: type=1400 audit(1751020221.484:865): avc: denied { connect } for pid=9597 comm="syz.0.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.666974][ T5948] usb 4-1: USB disconnect, device number 22 [ 172.696451][ T30] audit: type=1400 audit(1751020221.484:866): avc: denied { name_connect } for pid=9597 comm="syz.0.1529" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 172.725394][ T30] audit: type=1400 audit(1751020221.504:867): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.750409][ T30] audit: type=1400 audit(1751020221.504:868): avc: denied { open } for pid=5813 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.776869][ T9603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.784216][ T30] audit: type=1400 audit(1751020221.504:869): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.810227][ T30] audit: type=1400 audit(1751020221.544:870): avc: denied { listen } for pid=9597 comm="syz.0.1529" lport=43501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.821521][ T9605] SELinux: failed to load policy [ 172.861018][ T30] audit: type=1400 audit(1751020221.544:871): avc: denied { accept } for pid=9597 comm="syz.0.1529" lport=43501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.885512][ T30] audit: type=1400 audit(1751020221.554:872): avc: denied { recv } for pid=8622 comm="kworker/u8:9" saddr=10.128.0.169 src=30006 daddr=10.128.1.101 dest=39448 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 172.893209][ T9] usb 5-1: Service connection timeout for: 256 [ 172.947437][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 172.956617][ T9] ath9k_htc: Failed to initialize the device [ 172.967980][ T5851] usb 5-1: ath9k_htc: USB layer deinitialized [ 173.448099][ T9617] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 173.471422][ T9617] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.483666][ T9617] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.502245][ T9617] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 173.938528][ T9654] netlink: 'syz.1.1555': attribute type 12 has an invalid length. [ 173.967170][ T9654] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1555'. [ 174.724557][ T9702] batadv_slave_1: entered promiscuous mode [ 174.762251][ T9701] batadv_slave_1: left promiscuous mode [ 174.848282][ T9705] loop2: detected capacity change from 0 to 7 [ 174.873444][ T9705] Dev loop2: unable to read RDB block 7 [ 174.888175][ T9705] loop2: AHDI p1 p2 p3 [ 174.900201][ T9705] loop2: partition table partially beyond EOD, truncated [ 174.929198][ T9705] loop2: p1 start 1601398130 is beyond EOD, truncated [ 174.951039][ T9705] loop2: p2 start 1702059890 is beyond EOD, truncated [ 175.206296][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'. [ 175.426757][ T9739] netlink: 'syz.0.1595': attribute type 1 has an invalid length. [ 175.451045][ T5819] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.531078][ T5819] Bluetooth: hci3: command 0x0c1a tx timeout [ 175.531191][ T5815] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.537152][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.769443][ T9760] can0: slcan on ptm0. [ 175.779763][ T9762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1606'. [ 175.853279][ T9759] can0 (unregistered): slcan off ptm0. [ 176.283361][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1621'. [ 176.547930][ T9811] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.841021][ T5948] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 176.912559][ T43] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 176.991539][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 177.012202][ T5948] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 177.021515][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.035717][ T5948] usb 4-1: config 0 descriptor?? [ 177.045293][ T5948] as10x_usb: device has been detected [ 177.051165][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 177.071691][ T5948] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 177.081018][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 177.092320][ T5948] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 177.102621][ T43] usb 2-1: config 8 has an invalid interface number: 197 but max is 0 [ 177.110848][ T43] usb 2-1: config 8 has no interface number 0 [ 177.120257][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 177.120276][ T30] audit: type=1400 audit(1751020226.004:981): avc: denied { firmware_load } for pid=5948 comm="kworker/0:6" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 177.152816][ T43] usb 2-1: config 8 interface 197 has no altsetting 0 [ 177.168937][ T43] usb 2-1: New USB device found, idVendor=1b3d, idProduct=9303, bcdDevice=3e.5a [ 177.174734][ T5948] as10x_usb: error during firmware upload part1 [ 177.178512][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.191687][ T5948] Registered device nBox DVB-T Dongle [ 177.196689][ T43] usb 2-1: Product: syz [ 177.206685][ T43] usb 2-1: Manufacturer: syz [ 177.218680][ T43] usb 2-1: SerialNumber: syz [ 177.254964][ T5948] usb 4-1: USB disconnect, device number 23 [ 177.265849][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 177.277893][ T5948] Unregistered device nBox DVB-T Dongle [ 177.281261][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 177.295177][ T5948] as10x_usb: device has been disconnected [ 177.301034][ T9] usb 5-1: config 0 has no interface number 0 [ 177.315352][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 177.324611][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.339637][ T9] usb 5-1: Product: syz [ 177.352525][ T9] usb 5-1: Manufacturer: syz [ 177.357388][ T9] usb 5-1: SerialNumber: syz [ 177.373368][ T9] usb 5-1: config 0 descriptor?? [ 177.380577][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 177.452408][ T43] ftdi_sio 2-1:8.197: FTDI USB Serial Device converter detected [ 177.510325][ T43] ftdi_sio ttyUSB0: unknown device type: 0x3e5a [ 177.594102][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 177.645124][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 177.894262][ T43] usb 2-1: USB disconnect, device number 28 [ 177.908953][ T43] ftdi_sio 2-1:8.197: device disconnected [ 177.922681][ T30] audit: type=1400 audit(1751020226.814:982): avc: denied { getopt } for pid=9852 comm="syz.2.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.075772][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 178.087632][ T972] usb 5-1: USB disconnect, device number 20 [ 178.096533][ T972] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 178.120023][ T972] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 178.133901][ T30] audit: type=1400 audit(1751020227.004:983): avc: denied { read } for pid=9860 comm="syz.2.1651" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 178.175006][ T972] quatech2 5-1:0.51: device disconnected [ 178.194201][ T30] audit: type=1400 audit(1751020227.004:984): avc: denied { open } for pid=9860 comm="syz.2.1651" path="/dev/input/event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 178.228666][ T30] audit: type=1400 audit(1751020227.064:985): avc: denied { create } for pid=9862 comm="syz.3.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.273888][ T30] audit: type=1400 audit(1751020227.064:986): avc: denied { write } for pid=9862 comm="syz.3.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.310999][ T30] audit: type=1400 audit(1751020227.064:987): avc: denied { nlmsg_write } for pid=9862 comm="syz.3.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.357712][ T30] audit: type=1400 audit(1751020227.064:988): avc: denied { module_request } for pid=9862 comm="syz.3.1654" kmod="crypto-seqiv(rfc4106(gcm(aes)))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 178.451336][ T43] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 178.616390][ T43] usb 2-1: config 9 has an invalid interface number: 77 but max is 0 [ 178.631146][ T43] usb 2-1: config 9 has no interface number 0 [ 178.638012][ T43] usb 2-1: config 9 interface 77 has no altsetting 0 [ 178.659560][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=8400, bcdDevice=83.b1 [ 178.684549][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.693850][ T9882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.703976][ T43] usb 2-1: Product: syz [ 178.711064][ T43] usb 2-1: Manufacturer: syz [ 178.715677][ T43] usb 2-1: SerialNumber: syz [ 178.842069][ T30] audit: type=1400 audit(1751020227.734:989): avc: denied { read } for pid=9888 comm="syz.0.1663" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 178.907799][ T30] audit: type=1400 audit(1751020227.734:990): avc: denied { open } for pid=9888 comm="syz.0.1663" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 179.167767][ T43] dvb-usb: found a 'Hauppauge Nova-TD-500 (84xxx)' in cold state, will try to load a firmware [ 179.188859][ T43] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 179.209101][ T43] dib0700: firmware download failed at 7 with -22 [ 179.223501][ T43] usb 2-1: USB disconnect, device number 29 [ 179.312022][ T972] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 179.341053][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 179.471004][ T972] usb 3-1: Using ep0 maxpacket: 16 [ 179.480533][ T972] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 179.496021][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 179.506393][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1676'. [ 179.506749][ T972] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 179.524931][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 179.535264][ T972] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 179.547906][ T972] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 179.568486][ T972] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 179.577879][ T9] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 179.588189][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.596333][ T972] usb 3-1: config 0 has no interface number 0 [ 179.603132][ T9] usb 5-1: Product: syz [ 179.603245][ T9918] dlm: no local IP address has been set [ 179.607412][ T972] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 179.616351][ T9918] dlm: cannot start dlm midcomms -107 [ 179.624536][ T9] usb 5-1: Manufacturer: syz [ 179.634561][ T9] usb 5-1: SerialNumber: syz [ 179.641348][ T9] usb 5-1: config 0 descriptor?? [ 179.646365][ T972] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 179.656522][ T972] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 179.666790][ T9903] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 179.675135][ T9903] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 179.682352][ T972] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.697022][ T972] usb 3-1: config 0 interface 125 has no altsetting 0 [ 179.705082][ T972] usb 3-1: config 0 interface 125 has no altsetting 2 [ 179.714315][ T972] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 179.723626][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.731683][ T972] usb 3-1: Product: syz [ 179.756537][ T972] usb 3-1: Manufacturer: syz [ 179.765534][ T972] usb 3-1: SerialNumber: syz [ 179.776116][ T972] usb 3-1: config 0 descriptor?? [ 179.786098][ T972] usb 3-1: selecting invalid altsetting 2 [ 179.906761][ T9903] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 179.916684][ T9903] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 180.109689][ T9938] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 180.116251][ T9938] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 180.129076][ T9938] vhci_hcd vhci_hcd.0: Device attached [ 180.201057][ C0] usb 3-1: async_complete: urb error -71 [ 180.206778][ C0] usb 3-1: async_complete: urb error -71 [ 180.212468][ C0] usb 3-1: async_complete: urb error -71 [ 180.219137][ T972] get_1284_register: usb error -71 [ 180.231583][ T972] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 180.244452][ T972] usb 3-1: USB disconnect, device number 22 [ 180.361164][ T5948] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 180.381255][ T5958] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 180.391060][ T5880] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 180.528203][ T9] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 180.540420][ T9] usb 5-1: USB disconnect, device number 21 [ 180.548000][ T5958] usb 2-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 180.561037][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 180.569059][ T5958] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 180.578647][ T5958] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 180.588377][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 180.601679][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.612606][ T5880] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 180.623882][ T5958] usb 2-1: config 0 descriptor?? [ 180.628936][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.640819][ T5880] usb 1-1: config 0 descriptor?? [ 180.650445][ T5880] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input23 [ 180.859070][ T5880] bcm5974 1-1:0.0: could not read from device [ 180.867707][ T972] usb 2-1: USB disconnect, device number 30 [ 180.874141][ T9939] usb 35-1: recv xbuf, 0 [ 180.884407][ T5171] bcm5974 1-1:0.0: could not read from device [ 180.896435][ T8638] vhci_hcd: stop threads [ 180.900719][ T8638] vhci_hcd: release socket [ 180.910262][ T5880] input: failed to attach handler mousedev to device input23, error: -5 [ 180.910563][ T8638] vhci_hcd: disconnect device [ 180.924683][ T9959] bridge0: port 3(vlan2) entered blocking state [ 180.932539][ T9959] bridge0: port 3(vlan2) entered disabled state [ 180.934521][ T5171] bcm5974 1-1:0.0: could not read from device [ 180.938951][ T9959] vlan2: entered allmulticast mode [ 180.947391][ T5880] usb 1-1: USB disconnect, device number 27 [ 180.952838][ T9959] bridge0: entered allmulticast mode [ 180.956565][ T5948] vhci_hcd: vhci_device speed not set [ 180.970216][ T9959] vlan2: left allmulticast mode [ 180.980291][ T9959] bridge0: left allmulticast mode [ 180.991457][ T9] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 181.162728][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 181.178793][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 181.202188][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c29b, bcdDevice= 0.00 [ 181.211476][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.227568][ T9] usb 4-1: config 0 descriptor?? [ 181.233435][ T9953] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 181.512557][ T9979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.517629][ T9981] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 112 [ 181.668026][ T9] logitech 0003:046D:C29B.0019: unknown main item tag 0x0 [ 181.691766][ T9] logitech 0003:046D:C29B.0019: unknown main item tag 0x0 [ 181.719239][ T9] logitech 0003:046D:C29B.0019: unknown main item tag 0x0 [ 181.732446][ T9] logitech 0003:046D:C29B.0019: unknown main item tag 0x0 [ 181.750685][ T9] logitech 0003:046D:C29B.0019: unknown main item tag 0x0 [ 181.768958][ T9] logitech 0003:046D:C29B.0019: unknown main item tag 0x0 [ 181.801003][ T9] logitech 0003:046D:C29B.0019: unknown main item tag 0x0 [ 181.823394][ T9] logitech 0003:046D:C29B.0019: hidraw0: USB HID vff.fa Device [HID 046d:c29b] on usb-dummy_hcd.3-1/input0 [ 181.849182][ T9] logitech 0003:046D:C29B.0019: no inputs found [ 181.926103][ T9] usb 4-1: USB disconnect, device number 24 [ 182.435664][T10019] batadv_slave_0: entered promiscuous mode [ 182.443426][T10019] batadv_slave_0: left promiscuous mode [ 182.488815][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 182.488831][ T30] audit: type=1400 audit(1751020231.374:1006): avc: denied { ioctl } for pid=10014 comm="syz.1.1722" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 182.582096][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 182.746340][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 182.769651][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.776515][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 182.791012][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.814041][ T9] usb 3-1: config 0 descriptor?? [ 182.819647][T10034] netlink: 'syz.3.1730': attribute type 9 has an invalid length. [ 182.853542][T10034] netlink: 212160 bytes leftover after parsing attributes in process `syz.3.1730'. [ 183.062522][ T30] audit: type=1400 audit(1751020231.924:1007): avc: denied { create } for pid=10045 comm="syz.3.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.113692][ T30] audit: type=1400 audit(1751020231.954:1008): avc: denied { bind } for pid=10045 comm="syz.3.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.160092][ T30] audit: type=1400 audit(1751020231.954:1009): avc: denied { listen } for pid=10045 comm="syz.3.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.192070][ T30] audit: type=1400 audit(1751020231.954:1010): avc: denied { accept } for pid=10045 comm="syz.3.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.225971][T10053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.264608][T10053] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 183.451259][ T9] usb 3-1: USB disconnect, device number 23 [ 183.980348][T10072] mmap: syz.0.1748 (10072) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 184.066886][ T30] audit: type=1400 audit(1751020232.954:1011): avc: denied { mount } for pid=10074 comm="syz.0.1751" name="/" dev="ramfs" ino=27993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 184.089228][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.158796][ T30] audit: type=1400 audit(1751020233.034:1012): avc: denied { unmount } for pid=6962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 184.211046][T10079] netlink: 'syz.3.1750': attribute type 1 has an invalid length. [ 184.218809][T10079] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1750'. [ 184.260994][ T30] audit: type=1400 audit(1751020233.044:1013): avc: denied { name_bind } for pid=10078 comm="syz.4.1752" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 184.409557][ T30] audit: type=1400 audit(1751020233.294:1014): avc: denied { setopt } for pid=10091 comm="syz.1.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.508948][ T30] audit: type=1400 audit(1751020233.394:1015): avc: denied { write } for pid=10095 comm="syz.1.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 184.718497][T10106] input: syz0 as /devices/virtual/input/input24 [ 185.297587][ T8648] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.372276][ T8648] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.431155][ T5880] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 185.451957][ T8648] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.566906][ T8648] bond0: (slave netdevsim0): Releasing backup interface [ 185.591317][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 185.608497][ T5880] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 185.624017][ T8648] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.636259][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.647253][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.652097][ T5880] usb 1-1: config 0 descriptor?? [ 185.660365][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.670311][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.678178][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.685865][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.894446][ T8648] bridge_slave_1: left allmulticast mode [ 185.900127][ T8648] bridge_slave_1: left promiscuous mode [ 185.905971][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.916375][ T8648] bridge_slave_0: left allmulticast mode [ 185.923552][ T8648] bridge_slave_0: left promiscuous mode [ 185.923830][ T5880] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 185.931218][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.950716][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.963544][ T5880] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 185.970804][ T5880] usb 1-1: media controller created [ 185.994987][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.446272][ T8648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.458429][ T8648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.475578][ T8648] bond0 (unregistering): (slave team0): Releasing backup interface [ 186.485646][ T8648] bond0 (unregistering): Released all slaves [ 186.532050][ T5880] az6027: usb out operation failed. (-71) [ 186.548654][T10167] netlink: 'syz.1.1793': attribute type 4 has an invalid length. [ 186.550948][ T5880] stb0899_attach: Driver disabled by Kconfig [ 186.576941][ T5880] az6027: no front-end attached [ 186.576941][ T5880] [ 186.581565][ T8648] tipc: Left network mode [ 186.594037][ T5880] az6027: usb out operation failed. (-71) [ 186.610021][ T5880] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 186.620044][ T5880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 186.682410][ T5880] dvb-usb: schedule remote query interval to 400 msecs. [ 186.689442][ T5880] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 186.717981][ T5880] usb 1-1: USB disconnect, device number 28 [ 186.814535][ T5880] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 186.985171][T10134] chnl_net:caif_netlink_parms(): no params data found [ 187.031320][ T43] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 187.191034][ T8648] hsr_slave_0: left promiscuous mode [ 187.203051][ T43] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 187.220998][ T8648] 0·: left promiscuous mode [ 187.228733][ T8648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.236483][ T43] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 187.251863][ T43] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 187.261099][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.263713][ T8648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.278829][T10170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 187.288907][ T43] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 187.316361][ T8648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.327315][ T8648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.356081][ T8648] veth1_macvtap: left promiscuous mode [ 187.373560][ T8648] veth0_macvtap: left promiscuous mode [ 187.383673][ T8648] veth1_vlan: left promiscuous mode [ 187.389386][ T8648] veth0_vlan: left promiscuous mode [ 187.497816][ T43] usb 4-1: USB disconnect, device number 25 [ 187.764191][ T5851] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 187.771958][ T5818] Bluetooth: hci1: command tx timeout [ 187.792221][ T8648] team0 (unregistering): Port device team_slave_1 removed [ 187.821458][ T5948] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 187.831196][ T8648] team0 (unregistering): Port device team_slave_0 removed [ 187.840548][ T8622] smc: removing ib device syz2 [ 187.938995][ T5851] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 187.954608][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.971015][ T5851] usb 3-1: Product: syz [ 187.975213][ T5851] usb 3-1: Manufacturer: syz [ 187.987588][ T5851] usb 3-1: SerialNumber: syz [ 187.993840][ T5851] usb 3-1: config 0 descriptor?? [ 188.004560][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 188.019113][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 188.030866][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 25647, setting to 64 [ 188.042174][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.057119][ T5948] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 188.070498][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.078567][ T5948] usb 2-1: Product: syz [ 188.087218][ T5948] usb 2-1: Manufacturer: syz [ 188.092707][ T5948] usb 2-1: SerialNumber: syz [ 188.099461][ T5948] usb 2-1: config 0 descriptor?? [ 188.105873][T10192] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 188.116620][ T5948] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input26 [ 188.147240][ C0] kbtab 2-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 188.205379][ T5851] usb 3-1: f81604_read: reg: 105 failed: -EPIPE [ 188.211929][ T5851] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 188.219362][ T5851] f81604 3-1:0.0: probe with driver f81604 failed with error -32 [ 188.274645][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 188.274661][ T30] audit: type=1400 audit(1751020237.164:1037): avc: denied { watch } for pid=10194 comm="syz.3.1804" path="/379/blkio.throttle.io_serviced" dev="tmpfs" ino=1934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 188.329934][ T30] audit: type=1400 audit(1751020237.164:1038): avc: denied { watch_sb watch_reads } for pid=10194 comm="syz.3.1804" path="/379/blkio.throttle.io_serviced" dev="tmpfs" ino=1934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 188.373742][ T30] audit: type=1400 audit(1751020237.264:1039): avc: denied { append } for pid=10191 comm="syz.1.1803" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 188.425249][T10134] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.436399][ T5851] usb 2-1: USB disconnect, device number 31 [ 188.443316][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1805'. [ 188.448712][T10134] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.473939][T10200] binder: 10199:10200 ioctl c018620c 200000000100 returned -1 [ 188.476240][ T30] audit: type=1400 audit(1751020237.354:1040): avc: denied { read } for pid=10199 comm="syz.0.1806" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 188.509421][T10134] bridge_slave_0: entered allmulticast mode [ 188.543759][T10134] bridge_slave_0: entered promiscuous mode [ 188.564989][T10134] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.572338][ T30] audit: type=1400 audit(1751020237.354:1041): avc: denied { open } for pid=10199 comm="syz.0.1806" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 188.605633][T10134] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.631247][T10134] bridge_slave_1: entered allmulticast mode [ 188.663720][T10134] bridge_slave_1: entered promiscuous mode [ 188.664444][ T30] audit: type=1400 audit(1751020237.354:1042): avc: denied { ioctl } for pid=10199 comm="syz.0.1806" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 188.724525][ T30] audit: type=1400 audit(1751020237.354:1043): avc: denied { set_context_mgr } for pid=10199 comm="syz.0.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 188.773820][ T30] audit: type=1400 audit(1751020237.354:1044): avc: denied { write } for pid=10199 comm="syz.0.1806" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 188.798617][ T30] audit: type=1400 audit(1751020237.464:1045): avc: denied { write } for pid=10202 comm="syz.0.1807" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 188.825526][ T30] audit: type=1400 audit(1751020237.544:1046): avc: denied { egress } for pid=43 comm="kworker/1:1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 188.885255][T10134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.905646][T10209] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1810'. [ 188.922770][T10134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.923955][T10209] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 188.949372][T10209] openvswitch: netlink: Duplicate key (type 0). [ 189.139552][T10134] team0: Port device team_slave_0 added [ 189.174456][T10134] team0: Port device team_slave_1 added [ 189.288388][T10134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.311042][T10134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.381086][T10134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.433890][T10134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.440873][T10134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.531001][T10134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.716723][T10134] hsr_slave_0: entered promiscuous mode [ 189.746284][T10134] hsr_slave_1: entered promiscuous mode [ 189.772006][T10134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.792165][T10134] Cannot create hsr debugfs directory [ 189.852961][ T5818] Bluetooth: hci1: command tx timeout [ 190.099853][T10237] SELinux: ebitmap: truncated map [ 190.159655][T10237] SELinux: failed to load policy [ 190.463842][T10134] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 190.483147][T10134] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 190.503544][T10134] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 190.517045][T10255] max out of range [ 190.530501][T10134] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 190.551041][ T5948] usb 3-1: USB disconnect, device number 24 [ 190.703823][T10134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.730557][T10134] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.748982][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.756150][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.774865][ T8654] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.782040][ T8654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.892152][ T5880] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 190.991868][T10134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.018755][T10283] syz.1.1839 (10283) used greatest stack depth: 20376 bytes left [ 191.055939][ T5880] usb 1-1: unable to get BOS descriptor or descriptor too short [ 191.066439][ T5880] usb 1-1: no configurations [ 191.075759][ T5880] usb 1-1: can't read configurations, error -22 [ 191.081349][ T5851] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 191.236890][T10134] veth0_vlan: entered promiscuous mode [ 191.250704][ T5851] usb 4-1: Using ep0 maxpacket: 16 [ 191.272911][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.281712][T10134] veth1_vlan: entered promiscuous mode [ 191.285362][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.300015][ T5851] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 191.313230][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.324182][ T5851] usb 4-1: config 0 descriptor?? [ 191.342539][T10134] veth0_macvtap: entered promiscuous mode [ 191.365389][T10134] veth1_macvtap: entered promiscuous mode [ 191.393527][T10134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.416672][T10134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.434783][T10134] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.456054][T10134] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.490827][T10134] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.500934][T10134] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.682420][ T8687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.704495][ T8687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.759643][T10306] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1846'. [ 191.761520][ T5851] playstation 0003:054C:05C4.001B: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 191.799476][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.818611][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.931309][ T5818] Bluetooth: hci1: command tx timeout [ 191.950594][ T5851] playstation 0003:054C:05C4.001B: Failed to retrieve feature with reportID 18: -71 [ 191.963921][ T5851] playstation 0003:054C:05C4.001B: Failed to retrieve DualShock4 pairing info: -71 [ 191.973469][ T5851] playstation 0003:054C:05C4.001B: Failed to get MAC address from DualShock4 [ 191.982718][ T5851] playstation 0003:054C:05C4.001B: Failed to create dualshock4. [ 191.992344][ T5851] playstation 0003:054C:05C4.001B: probe with driver playstation failed with error -71 [ 191.994063][ T972] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 192.005063][ T5851] usb 4-1: USB disconnect, device number 26 [ 192.152583][ T972] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 192.162001][ T972] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 192.174545][ T972] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 192.186960][ T5948] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 192.194769][ T972] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 192.207299][ T972] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 192.220743][ T972] usb 3-1: config 0 interface 0 has no altsetting 0 [ 192.265238][ T972] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 192.278017][ T972] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 192.290855][ T972] usb 3-1: Product: syz [ 192.296241][ T972] usb 3-1: Manufacturer: syz [ 192.301078][ T972] usb 3-1: SerialNumber: syz [ 192.308450][ T972] usb 3-1: config 0 descriptor?? [ 192.314684][T10309] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 192.324253][ T972] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 192.340729][ T972] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 192.357544][ T5948] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 192.367394][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.393086][ T5948] usb 6-1: config 0 descriptor?? [ 192.400709][ T5948] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 192.516851][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1856'. [ 192.602611][T10332] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10332 comm=syz.0.1857 [ 192.622998][ T5948] gp8psk: usb in 128 operation failed. [ 192.747095][ T5922] usb 3-1: USB disconnect, device number 25 [ 192.764514][ T5922] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 192.843405][ T5948] gp8psk: usb in 146 operation failed. [ 192.849078][ T5948] gp8psk: failed to get FW version [ 192.861577][ T5948] gp8psk: usb in 149 operation failed. [ 192.867080][ T5948] gp8psk: failed to get FPGA version [ 192.877270][ T5948] gp8psk: usb in 138 operation failed. [ 192.884767][ T5948] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 192.896166][ T5948] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 192.914948][ T5948] usb 6-1: USB disconnect, device number 2 [ 193.287253][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 193.287270][ T30] audit: type=1800 audit(1751020242.174:1142): pid=10359 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1869" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 193.389504][ T30] audit: type=1400 audit(1751020242.214:1143): avc: denied { ioctl } for pid=10366 comm="syz.2.1871" path="/dev/sg0" dev="devtmpfs" ino=749 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 193.414977][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.489599][T10370] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10370 comm=syz.2.1873 [ 193.510607][ T30] audit: type=1400 audit(1751020242.334:1144): avc: denied { read write } for pid=10368 comm="syz.0.1872" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 193.586778][ T30] audit: type=1400 audit(1751020242.344:1145): avc: denied { open } for pid=10368 comm="syz.0.1872" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 193.610246][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.644681][T10377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10377 comm=syz.1.1876 [ 193.666160][ T30] audit: type=1400 audit(1751020242.344:1146): avc: denied { create } for pid=10371 comm="syz.5.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 193.735909][ T30] audit: type=1400 audit(1751020242.354:1147): avc: denied { setopt } for pid=10371 comm="syz.5.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 193.781743][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.804104][ T30] audit: type=1400 audit(1751020242.374:1148): avc: denied { ioctl } for pid=10368 comm="syz.0.1872" path="/dev/video1" dev="devtmpfs" ino=931 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 193.833986][ T30] audit: type=1400 audit(1751020242.454:1149): avc: denied { setopt } for pid=10374 comm="syz.5.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 193.881851][ T30] audit: type=1400 audit(1751020242.614:1150): avc: denied { block_suspend } for pid=10378 comm="syz.5.1877" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 193.914820][ T30] audit: type=1400 audit(1751020242.694:1151): avc: denied { getopt } for pid=10382 comm="syz.3.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 193.935959][T10389] GUP no longer grows the stack in syz.3.1882 (10389): 200000003000-20000000a000 (200000002000) [ 193.944557][T10391] Attempt to restore checkpoint with obsolete wellknown handles [ 193.960393][T10389] CPU: 0 UID: 0 PID: 10389 Comm: syz.3.1882 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 193.960424][T10389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.960435][T10389] Call Trace: [ 193.960441][T10389] [ 193.960449][T10389] dump_stack_lvl+0x16c/0x1f0 [ 193.960480][T10389] gup_vma_lookup+0x1d2/0x220 [ 193.960509][T10389] __get_user_pages+0x271/0x3b80 [ 193.960533][T10389] ? __lock_acquire+0xb8a/0x1c90 [ 193.960569][T10389] ? __pfx___get_user_pages+0x10/0x10 [ 193.960587][T10389] ? find_held_lock+0x2b/0x80 [ 193.960617][T10389] __gup_longterm_locked+0x20d/0x1840 [ 193.960636][T10389] ? __lock_acquire+0xb8a/0x1c90 [ 193.960667][T10389] ? __pfx___gup_longterm_locked+0x10/0x10 [ 193.960695][T10389] pin_user_pages_remote+0xed/0x140 [ 193.960713][T10389] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 193.960733][T10389] ? copy_page_from_iter+0x141/0x180 [ 193.960760][T10389] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 193.960794][T10389] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 193.960822][T10389] ? iovec_from_user+0xbb/0x140 [ 193.960859][T10389] ? iovec_from_user+0xbb/0x140 [ 193.960887][T10389] process_vm_rw+0x2ff/0x360 [ 193.960916][T10389] ? __pfx_process_vm_rw+0x10/0x10 [ 193.960970][T10389] ? xfd_validate_state+0x61/0x180 [ 193.960999][T10389] __x64_sys_process_vm_writev+0xe2/0x1c0 [ 193.961025][T10389] ? do_syscall_64+0x91/0x4c0 [ 193.961049][T10389] ? lockdep_hardirqs_on+0x7c/0x110 [ 193.961072][T10389] do_syscall_64+0xcd/0x4c0 [ 193.961099][T10389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.961117][T10389] RIP: 0033:0x7f7c16f8e929 [ 193.961131][T10389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.961148][T10389] RSP: 002b:00007f7c17e68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 193.961167][T10389] RAX: ffffffffffffffda RBX: 00007f7c171b5fa0 RCX: 00007f7c16f8e929 [ 193.961178][T10389] RDX: 0000000000000002 RSI: 0000200000001a00 RDI: 000000000000035a [ 193.961190][T10389] RBP: 00007f7c17010b39 R08: 0000000000000002 R09: 0000000000000000 [ 193.961200][T10389] R10: 0000200000001dc0 R11: 0000000000000246 R12: 0000000000000000 [ 193.961211][T10389] R13: 0000000000000000 R14: 00007f7c171b5fa0 R15: 00007ffffb719fa8 [ 193.961252][T10389] [ 193.971137][ T5851] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 194.084698][ T5818] Bluetooth: hci1: command tx timeout [ 194.110347][T10395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1886'. [ 194.371167][ T43] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 194.447767][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.468500][ T5851] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 194.495690][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.635922][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 194.645455][ T43] usb 2-1: no configurations [ 194.650070][ T43] usb 2-1: can't read configurations, error -22 [ 194.657667][ T5851] usb 3-1: config 0 descriptor?? [ 194.855405][T10417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.071366][ T5851] lg-g15 0003:046D:C222.001C: unbalanced collection at end of report description [ 195.102818][ T5851] lg-g15 0003:046D:C222.001C: probe with driver lg-g15 failed with error -22 [ 195.148235][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1898'. [ 195.276667][ T3755] usb 3-1: USB disconnect, device number 26 [ 195.451297][ T5851] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 195.613911][ T5851] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 195.632922][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.653531][ T5851] usb 6-1: config 0 descriptor?? [ 195.771466][ T3755] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 195.876984][ T5851] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 195.937145][ T3755] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 195.945870][ T3755] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 195.960843][ T3755] usb 4-1: config 0 has no interface number 0 [ 195.970484][ T3755] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 195.989557][ T3755] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.000733][ T3755] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 196.009960][ T3755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.020860][ T3755] usb 4-1: config 0 descriptor?? [ 196.492531][ T5851] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 196.519947][ T5851] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 196.574211][ T5851] asix 6-1:0.0: probe with driver asix failed with error -71 [ 196.585872][ T5851] usb 6-1: USB disconnect, device number 3 [ 196.664476][ T3755] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input27 [ 196.704595][ T3755] input: failed to attach handler kbd to device input27, error: -5 [ 196.899687][ T5851] usb 4-1: USB disconnect, device number 27 [ 196.951230][ T5948] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 197.111295][ T5948] usb 1-1: Using ep0 maxpacket: 32 [ 197.122050][ T5948] usb 1-1: unable to get BOS descriptor or descriptor too short [ 197.131991][ T5948] usb 1-1: config 1 has an invalid descriptor of length 208, skipping remainder of the config [ 197.144964][ T5948] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 197.163092][ T5948] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.187358][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.203169][ T5948] usb 1-1: Product: syz [ 197.212871][ T5948] usb 1-1: Manufacturer: syz [ 197.222275][ T5948] usb 1-1: SerialNumber: syz [ 197.529452][T10505] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1932'. [ 197.717516][ T972] usb 1-1: USB disconnect, device number 31 [ 198.274011][ T3755] kernel write not supported for file /input/event2 (pid: 3755 comm: kworker/1:2) [ 198.467407][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 198.467424][ T30] audit: type=1400 audit(1751020247.354:1197): avc: denied { create } for pid=10548 comm="syz.0.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.497116][ T30] audit: type=1400 audit(1751020247.354:1198): avc: denied { bind } for pid=10548 comm="syz.0.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.517151][ T30] audit: type=1400 audit(1751020247.354:1199): avc: denied { read } for pid=10548 comm="syz.0.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.537945][ T30] audit: type=1400 audit(1751020247.364:1200): avc: denied { unlink } for pid=10552 comm="syz.3.1955" name="#1" dev="tmpfs" ino=2123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 198.591042][ T30] audit: type=1400 audit(1751020247.364:1201): avc: denied { mount } for pid=10552 comm="syz.3.1955" name="/" dev="overlay" ino=2119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 198.633203][ T30] audit: type=1400 audit(1751020247.384:1202): avc: denied { bind } for pid=10546 comm="syz.1.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 198.653357][ T30] audit: type=1400 audit(1751020247.424:1203): avc: denied { write } for pid=10548 comm="syz.0.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.771178][ T5880] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 198.779073][ T30] audit: type=1400 audit(1751020247.664:1204): avc: denied { write } for pid=10570 comm="syz.3.1962" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 198.872499][ T43] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 198.876419][T10575] overlayfs: failed to clone lowerpath [ 198.941286][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 198.960128][ T5880] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 198.974255][ T5880] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 198.986470][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.995518][ T5880] usb 3-1: Product: syz [ 198.999859][ T5880] usb 3-1: Manufacturer: syz [ 199.010485][ T5880] usb 3-1: SerialNumber: syz [ 199.017639][ T5880] usb 3-1: config 0 descriptor?? [ 199.026279][T10555] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.032760][ T43] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 199.051244][ T43] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 199.056701][ T5880] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input28 [ 199.069479][ T43] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 199.069506][ T43] usb 1-1: config 220 has no interface number 2 [ 199.069555][ T43] usb 1-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 199.069577][ T43] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 199.069602][ T43] usb 1-1: config 220 interface 0 has no altsetting 0 [ 199.069619][ T43] usb 1-1: config 220 interface 76 has no altsetting 0 [ 199.069636][ T43] usb 1-1: config 220 interface 1 has no altsetting 0 [ 199.128625][ T43] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 199.180806][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.203667][ T43] usb 1-1: Product: syz [ 199.207904][ T43] usb 1-1: Manufacturer: syz [ 199.217939][ T43] usb 1-1: SerialNumber: syz [ 199.258509][ T30] audit: type=1400 audit(1751020248.144:1205): avc: denied { listen } for pid=10583 comm="syz.5.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.294825][ T30] audit: type=1400 audit(1751020248.144:1206): avc: denied { accept } for pid=10583 comm="syz.5.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.411330][ T5922] usb 3-1: USB disconnect, device number 27 [ 199.411429][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 199.462736][ T43] uvcvideo 1-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 199.476337][ T43] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 199.484193][ T43] usb 1-1: No valid video chain found. [ 199.489720][ T43] usb 1-1: selecting invalid altsetting 0 [ 199.512323][ T43] usb 1-1: selecting invalid altsetting 0 [ 199.518197][ T43] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 199.528508][ T43] usb 1-1: USB disconnect, device number 32 [ 199.561053][ T3755] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 199.641004][ T5880] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 199.721027][ T3755] usb 2-1: Using ep0 maxpacket: 32 [ 199.729823][ T3755] usb 2-1: config 0 has no interfaces? [ 199.735683][ T3755] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 199.747105][ T3755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.758349][ T3755] usb 2-1: config 0 descriptor?? [ 199.818309][ T5880] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 199.841013][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.849036][ T5880] usb 4-1: Product: syz [ 199.853392][ T5880] usb 4-1: Manufacturer: syz [ 199.858005][ T5880] usb 4-1: SerialNumber: syz [ 199.872314][ T5880] usb 4-1: config 0 descriptor?? [ 199.996944][T10587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.017030][T10587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.038991][ T43] usb 2-1: USB disconnect, device number 34 [ 200.431128][ T3755] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 200.504336][ T43] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 200.594777][ T3755] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 200.615809][ T3755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.631269][ T3755] usb 1-1: config 0 descriptor?? [ 200.638524][ T3755] cp210x 1-1:0.0: cp210x converter detected [ 200.664168][ T43] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 200.677083][ T43] usb 2-1: config 0 has no interface number 0 [ 200.683658][ T5880] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 200.691799][ T43] usb 2-1: config 0 interface 184 has no altsetting 0 [ 200.701858][ T5880] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 200.713994][ T5880] asix 4-1:0.0: probe with driver asix failed with error -71 [ 200.723072][ T43] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=69.ee [ 200.728099][ T5880] usb 4-1: USB disconnect, device number 28 [ 200.732673][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.753103][ T43] usb 2-1: Product: syz [ 200.767580][ T43] usb 2-1: Manufacturer: syz [ 200.772291][ T43] usb 2-1: SerialNumber: syz [ 200.789587][ T43] usb 2-1: config 0 descriptor?? [ 200.803049][ T43] ttusbir 2-1:0.184: cannot find expected altsetting [ 201.039115][ T5922] usb 2-1: USB disconnect, device number 35 [ 201.046701][ T3755] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 201.071170][ T3755] usb 1-1: cp210x converter now attached to ttyUSB0 [ 201.189395][T10634] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 201.288230][ T5880] usb 1-1: USB disconnect, device number 33 [ 201.307390][ T5880] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 201.333755][ T5880] cp210x 1-1:0.0: device disconnected [ 201.604321][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1998'. [ 202.321025][ T3755] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 202.503251][ T3755] usb 2-1: Using ep0 maxpacket: 8 [ 202.517946][ T3755] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 202.539797][ T3755] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 202.566800][ T3755] usb 2-1: Product: syz [ 202.576000][ T3755] usb 2-1: Manufacturer: syz [ 202.580630][ T3755] usb 2-1: SerialNumber: syz [ 202.585897][T10698] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 202.605931][ T3755] usb 2-1: config 0 descriptor?? [ 202.608177][T10700] deleting an unspecified loop device is not supported. [ 202.982023][T10724] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 203.280519][T10737] netlink: 71 bytes leftover after parsing attributes in process `syz.5.2040'. [ 203.299345][T10738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2042'. [ 203.497304][ T5880] usb 2-1: USB disconnect, device number 36 [ 203.555920][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.576183][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 203.576199][ T30] audit: type=1400 audit(1751020252.464:1238): avc: denied { ioctl } for pid=10749 comm="syz.5.2047" path="/dev/binderfs/binder1" dev="binder" ino=17 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 203.768963][ T30] audit: type=1400 audit(1751020252.654:1239): avc: denied { setopt } for pid=10758 comm="syz.5.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.818349][ T30] audit: type=1400 audit(1751020252.704:1240): avc: denied { map } for pid=10758 comm="syz.5.2050" path="socket:[31643]" dev="sockfs" ino=31643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.870192][ T30] audit: type=1400 audit(1751020252.704:1241): avc: denied { read } for pid=10758 comm="syz.5.2050" path="socket:[31643]" dev="sockfs" ino=31643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 204.009530][ T3755] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 204.161369][ T30] audit: type=1400 audit(1751020253.044:1242): avc: denied { module_load } for pid=10774 comm="syz.5.2057" path="/dmabuf:" dev="dmabuf" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=system permissive=1 [ 204.209845][ T3755] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 204.220976][ T3755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.235642][ T3755] usb 3-1: Product: syz [ 204.242989][ T30] audit: type=1400 audit(1751020253.124:1243): avc: denied { write } for pid=10778 comm="syz.3.2058" path="socket:[32402]" dev="sockfs" ino=32402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.256330][T10783] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 204.271112][ T3755] usb 3-1: Manufacturer: syz [ 204.305188][ T3755] usb 3-1: SerialNumber: syz [ 204.325167][ T3755] usb 3-1: config 0 descriptor?? [ 204.333463][ T3755] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 204.737786][ T3755] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30 [ 204.966128][ T43] usb 3-1: USB disconnect, device number 28 [ 204.988804][ T30] audit: type=1400 audit(1751020253.874:1244): avc: denied { read } for pid=10801 comm="syz.1.2069" path="socket:[32782]" dev="sockfs" ino=32782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.032194][T10804] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2070'. [ 205.108766][T10806] Bluetooth: hci5: Frame reassembly failed (-84) [ 205.134448][ T8648] Bluetooth: hci5: Frame reassembly failed (-84) [ 205.427689][ T30] audit: type=1400 audit(1751020254.314:1245): avc: denied { set_context_mgr } for pid=10819 comm="syz.5.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 205.717429][T10830] Process accounting resumed [ 205.734802][ T30] audit: type=1400 audit(1751020254.624:1246): avc: denied { write } for pid=10837 comm="syz.2.2086" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 205.757572][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.778140][T10840] netlink: 'syz.5.2087': attribute type 5 has an invalid length. [ 205.852656][ T30] audit: type=1400 audit(1751020254.744:1247): avc: denied { connect } for pid=10841 comm="syz.1.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.872210][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.131393][T10858] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2095'. [ 206.217893][T10863] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2099'. [ 206.905195][T10902] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2117'. [ 207.011722][T10907] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2118'. [ 207.131018][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 207.143225][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 207.463354][T10922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.231395][T10949] bpf: Bad value for 'gid' [ 208.419619][T10890] syz.1.2111 (10890): drop_caches: 2 [ 209.181291][ T972] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 209.344475][ T972] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 209.354233][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 209.354248][ T30] audit: type=1400 audit(1751020258.244:1268): avc: denied { ioctl } for pid=10993 comm="syz.0.2156" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 209.360981][ T972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.427051][ T972] usb 6-1: config 0 descriptor?? [ 209.646152][ T972] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 209.761103][ T3755] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 209.872695][ T972] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 209.882840][ T972] [drm] Initialized udl on minor 2 [ 209.888611][ T30] audit: type=1400 audit(1751020258.774:1269): avc: denied { create } for pid=11006 comm="syz.3.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 209.915605][ T30] audit: type=1400 audit(1751020258.804:1270): avc: denied { ioctl } for pid=11006 comm="syz.3.2160" path="socket:[33154]" dev="sockfs" ino=33154 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 209.940657][ T3755] usb 1-1: Using ep0 maxpacket: 16 [ 209.960758][ T3755] usb 1-1: config 0 has no interfaces? [ 209.972240][ T3755] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 209.990971][ T3755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.999317][ T30] audit: type=1400 audit(1751020258.824:1271): avc: denied { bind } for pid=11006 comm="syz.3.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 210.020964][ T3755] usb 1-1: Product: syz [ 210.025146][ T3755] usb 1-1: Manufacturer: syz [ 210.035656][ T30] audit: type=1800 audit(1751020258.864:1272): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2161" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 210.045751][ T3755] usb 1-1: SerialNumber: syz [ 210.076794][ T3755] usb 1-1: config 0 descriptor?? [ 210.179117][ T30] audit: type=1326 audit(1751020259.044:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10990 comm="syz.1.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe625d8e929 code=0x7fc00000 [ 210.237658][ T30] audit: type=1400 audit(1751020259.124:1274): avc: denied { ioctl } for pid=11016 comm="syz.2.2165" path="socket:[34029]" dev="sockfs" ino=34029 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 210.272327][ T972] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 210.284176][ T972] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 210.293524][ T5948] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 210.306617][ T5948] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 210.315874][ T972] usb 6-1: USB disconnect, device number 4 [ 210.424958][ T5948] usb 1-1: USB disconnect, device number 34 [ 210.835837][ T30] audit: type=1400 audit(1751020259.724:1275): avc: denied { create } for pid=11034 comm="syz.2.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.876098][ T30] audit: type=1400 audit(1751020259.724:1276): avc: denied { connect } for pid=11034 comm="syz.2.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 211.105487][ T30] audit: type=1400 audit(1751020259.994:1277): avc: denied { create } for pid=11044 comm="syz.2.2178" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 211.281045][ T5948] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 211.442347][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.454777][ T5948] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 211.465250][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.477690][ T5948] usb 6-1: config 0 descriptor?? [ 211.576384][T11068] pim6reg: entered allmulticast mode [ 211.591034][ T972] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 211.621108][ T5880] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 211.746948][ T972] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 211.755295][ T972] usb 3-1: config 0 has no interface number 0 [ 211.769296][ T972] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 211.779194][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.792849][ T972] usb 3-1: Product: syz [ 211.797097][ T972] usb 3-1: Manufacturer: syz [ 211.803470][ T972] usb 3-1: SerialNumber: syz [ 211.808658][ T5880] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 211.820857][ T5880] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 211.832057][ T972] usb 3-1: config 0 descriptor?? [ 211.844577][ T5880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 211.857022][ T5880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 211.868891][ T5880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 211.885069][ T5880] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 211.894844][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 211.904820][ T5948] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 211.913326][ T5880] usb 4-1: Product: syz [ 211.917515][ T5880] usb 4-1: Manufacturer: syz [ 211.926205][ T5948] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001D/input/input32 [ 211.942617][ T5880] cdc_wdm 4-1:1.0: skipping garbage [ 211.949646][ T5880] cdc_wdm 4-1:1.0: skipping garbage [ 211.956423][ T5880] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 211.962577][ T5880] cdc_wdm 4-1:1.0: Unknown control protocol [ 212.020759][ T5948] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 212.044514][ T972] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 212.055308][ T972] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 212.064838][ T972] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 212.074717][ T972] usb 3-1: media controller created [ 212.086215][ T972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.152119][ T972] DVB: Unable to find symbol dib7000p_attach() [ 212.158339][ T972] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 212.168306][ T972] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 212.183658][ T972] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 212.209880][ T972] usb 3-1: media controller created [ 212.220414][ T972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.235167][ T5880] usb 4-1: USB disconnect, device number 29 [ 212.259615][ T972] dib0700: the master dib7090 has to be initialized first [ 212.266822][ T972] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 212.322373][ T972] rc_core: IR keymap rc-dib0700-rc5 not found [ 212.328601][ T972] Registered IR keymap rc-empty [ 212.329557][ T5922] usb 6-1: USB disconnect, device number 5 [ 212.334097][ T972] dvb-usb: could not initialize remote control. [ 212.343196][T11021] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 212.345770][ T972] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 212.366908][ T972] usb 3-1: USB disconnect, device number 29 [ 212.388159][ T972] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 212.500997][ T43] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 212.661114][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 212.668890][ T43] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.676948][ T43] usb 1-1: config 0 has no interface number 0 [ 212.683131][ T43] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.694183][ T43] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.704050][ T43] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 212.713113][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.722308][ T43] usb 1-1: config 0 descriptor?? [ 213.088090][ T5948] kernel read not supported for file /video37 (pid: 5948 comm: kworker/0:6) [ 213.357703][ T43] input: HID 28bd:0094 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.001E/input/input34 [ 213.456600][ T43] uclogic 0003:28BD:0094.001E: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 213.614618][ T43] usb 1-1: USB disconnect, device number 35 [ 214.181005][ T972] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 214.341115][ T972] usb 6-1: Using ep0 maxpacket: 8 [ 214.356404][ T972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.366604][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 214.366618][ T30] audit: type=1326 audit(1751020263.254:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.1.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe625d8e929 code=0x7ffc0000 [ 214.396158][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.420980][ T972] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 214.430540][ T972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.482958][ T972] usb 6-1: config 0 descriptor?? [ 214.495424][ T30] audit: type=1326 audit(1751020263.254:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.1.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe625d8e929 code=0x7ffc0000 [ 214.566530][ T30] audit: type=1326 audit(1751020263.254:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.1.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe625d8e929 code=0x7ffc0000 [ 214.593938][ T30] audit: type=1326 audit(1751020263.254:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.1.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe625d8e929 code=0x7ffc0000 [ 214.619110][ T30] audit: type=1326 audit(1751020263.254:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.1.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe625d8e929 code=0x7ffc0000 [ 214.670627][ T30] audit: type=1326 audit(1751020263.254:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.1.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe625d8e929 code=0x7ffc0000 [ 214.697084][ T30] audit: type=1326 audit(1751020263.254:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.1.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe625d8e929 code=0x7ffc0000 [ 214.740999][ T30] audit: type=1326 audit(1751020263.254:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.1.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe625d8e929 code=0x7ffc0000 [ 214.782085][ T30] audit: type=1326 audit(1751020263.254:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.1.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fe625d8e929 code=0x7ffc0000 [ 214.846002][ T30] audit: type=1326 audit(1751020263.254:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.1.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 214.938262][ T972] holtek 0003:1241:5015.001F: item fetching failed at offset 0/5 [ 214.949019][ T972] holtek 0003:1241:5015.001F: parse failed [ 214.962693][ T972] holtek 0003:1241:5015.001F: probe with driver holtek failed with error -22 [ 215.157010][ T5958] usb 6-1: USB disconnect, device number 6 [ 215.311117][ T972] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 215.321007][ T43] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 215.473340][ T43] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 215.474287][ T972] usb 4-1: Using ep0 maxpacket: 16 [ 215.489641][ T43] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 215.493661][ T972] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 215.503869][ T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.514639][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.525618][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.539039][ T972] usb 4-1: Product: syz [ 215.543573][ T972] usb 4-1: Manufacturer: syz [ 215.545779][T11188] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 215.548283][ T972] usb 4-1: SerialNumber: syz [ 215.565513][ T972] r8152-cfgselector 4-1: Unknown version 0x0000 [ 215.566857][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.572027][ T972] r8152-cfgselector 4-1: config 0 descriptor?? [ 215.858335][ T43] usb 1-1: USB disconnect, device number 36 [ 216.038219][ T5948] r8152-cfgselector 4-1: USB disconnect, device number 30 [ 216.071118][ T972] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 216.241049][ T972] usb 6-1: Using ep0 maxpacket: 32 [ 216.250556][ T972] usb 6-1: config 0 interface 0 has no altsetting 0 [ 216.265555][ T972] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 216.290992][ T972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.312585][ T972] usb 6-1: Product: syz [ 216.322780][ T972] usb 6-1: Manufacturer: syz [ 216.327423][ T972] usb 6-1: SerialNumber: syz [ 216.348228][ T972] usb 6-1: config 0 descriptor?? [ 216.645949][ T5948] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 216.681330][ T5958] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 216.698779][T11262] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2281'. [ 216.708324][T11262] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2281'. [ 216.718698][T11262] netlink: 'syz.3.2281': attribute type 6 has an invalid length. [ 216.726945][T11262] netlink: 'syz.3.2281': attribute type 5 has an invalid length. [ 216.735174][T11262] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2281'. [ 216.764820][ T972] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 216.771881][T11264] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2282'. [ 216.825923][ T5948] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 216.838800][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.849805][ T5958] usb 1-1: Using ep0 maxpacket: 16 [ 216.860525][ T5958] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.875811][ T5948] usb 3-1: config 0 descriptor?? [ 216.880991][ T5958] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.888584][T11268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2284'. [ 216.892915][ T5948] cp210x 3-1:0.0: cp210x converter detected [ 216.911186][ T5958] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.920591][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.934139][ T5958] usb 1-1: Product: syz [ 216.938357][ T5958] usb 1-1: Manufacturer: syz [ 216.946637][ T5958] usb 1-1: SerialNumber: syz [ 217.052966][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.060578][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.070353][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.078457][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.089840][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.100786][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.141116][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.148537][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.156106][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.164545][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.174492][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.182027][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.201195][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.208640][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.230995][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.238429][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.248479][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.255920][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.266377][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.274511][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.282183][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.289572][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.297036][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.306078][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.313723][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.321359][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.324055][ T5948] usb 3-1: cp210x converter now attached to ttyUSB0 [ 217.328774][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.342919][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.350299][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.357820][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.365266][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.373315][ T5926] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 217.388449][ T5926] hid-generic 0001:0000:0000.0020: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 217.389446][ T972] usb 6-1: USB disconnect, device number 7 [ 217.405818][ T5958] usb 1-1: 0:2 : does not exist [ 217.539732][ T5948] usb 3-1: USB disconnect, device number 30 [ 217.541044][ T3755] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 217.554364][ T5948] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 217.564073][ T5948] cp210x 3-1:0.0: device disconnected [ 217.720993][ T3755] usb 2-1: Using ep0 maxpacket: 8 [ 217.727379][ T3755] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 217.738283][ T3755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.754544][ T3755] pvrusb2: Hardware description: Terratec Grabster AV400 [ 217.761644][ T3755] pvrusb2: ********** [ 217.765620][ T3755] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 217.776225][ T3755] pvrusb2: Important functionality might not be entirely working. [ 217.784468][ T3755] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 217.795987][ T3755] pvrusb2: ********** [ 217.810333][ T5958] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 217.827880][ T5958] usb 1-1: USB disconnect, device number 37 [ 217.963490][ T2334] pvrusb2: Invalid write control endpoint [ 218.010744][ T2334] pvrusb2: Invalid write control endpoint [ 218.018045][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 218.029134][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 218.038310][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 218.061015][ T2334] pvrusb2: Device being rendered inoperable [ 218.067090][ T2334] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 218.074395][ T2334] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 218.084679][ T2334] pvrusb2: Attached sub-driver cx25840 [ 218.091462][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 218.102634][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 218.186396][T11280] pvrusb2: Attempted to execute control transfer when device not ok [ 218.200131][ T3755] usb 2-1: USB disconnect, device number 37 [ 218.453682][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'. [ 218.466215][T11312] nbd: socks must be embedded in a SOCK_ITEM attr [ 218.475614][T11312] block nbd0: shutting down sockets [ 218.497701][T11314] syzkaller1: entered promiscuous mode [ 218.513688][T11314] syzkaller1: entered allmulticast mode [ 218.801117][ T5958] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 218.986995][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.010071][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.052093][ T5958] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 219.081252][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.093029][ T5958] usb 1-1: config 0 descriptor?? [ 219.356708][T11357] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 219.426656][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 219.426671][ T30] audit: type=1400 audit(1751020268.314:1336): avc: denied { name_bind } for pid=11360 comm="syz.2.2322" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 219.460677][ T30] audit: type=1400 audit(1751020268.344:1337): avc: denied { node_bind } for pid=11360 comm="syz.2.2322" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 219.508385][ T5958] playstation 0003:054C:0DF2.0021: unknown main item tag 0x0 [ 219.515902][ T5958] playstation 0003:054C:0DF2.0021: unknown main item tag 0x0 [ 219.525085][ T5958] playstation 0003:054C:0DF2.0021: unknown main item tag 0x0 [ 219.534687][ T5958] playstation 0003:054C:0DF2.0021: unknown main item tag 0x0 [ 219.545623][ T5958] playstation 0003:054C:0DF2.0021: unknown main item tag 0x0 [ 219.555081][ T5958] playstation 0003:054C:0DF2.0021: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 219.831037][ T43] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 219.923560][ T5958] playstation 0003:054C:0DF2.0021: Failed to retrieve feature with reportID 32: -71 [ 219.934551][ T5958] playstation 0003:054C:0DF2.0021: Failed to retrieve DualSense firmware info: -71 [ 219.943946][ T5958] playstation 0003:054C:0DF2.0021: Failed to get firmware info from DualSense [ 219.952896][ T5958] playstation 0003:054C:0DF2.0021: Failed to create dualsense. [ 219.962604][ T5958] playstation 0003:054C:0DF2.0021: probe with driver playstation failed with error -71 [ 219.975139][ T5958] usb 1-1: USB disconnect, device number 38 [ 219.991145][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 220.002355][ T43] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 220.010377][ T43] usb 4-1: config 0 has no interface number 0 [ 220.021181][ T43] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.035778][ T43] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.046544][ T43] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 220.058058][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.068993][ T43] usb 4-1: config 0 descriptor?? [ 220.305866][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2330'. [ 220.419661][T11377] team0 (unregistering): Port device team_slave_0 removed [ 220.435651][T11377] team0 (unregistering): Port device team_slave_1 removed [ 220.549917][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2333'. [ 220.562327][T11384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2333'. [ 220.571646][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2333'. [ 220.643716][ T30] audit: type=1400 audit(1751020269.534:1338): avc: denied { bind } for pid=11391 comm="syz.2.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 220.713917][ T5958] usb 4-1: USB disconnect, device number 31 [ 220.780167][T11398] pim6reg1: entered promiscuous mode [ 220.787628][T11398] pim6reg1: entered allmulticast mode [ 220.794433][ T43] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 220.924211][T11406] tipc: Started in network mode [ 220.931019][T11406] tipc: Node identity 5, cluster identity 4711 [ 220.937200][T11406] tipc: Node number set to 5 [ 220.953076][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 220.965407][ T43] usb 1-1: not running at top speed; connect to a high speed hub [ 220.981063][ T43] usb 1-1: config 7 has an invalid interface number: 213 but max is 0 [ 220.990161][ T43] usb 1-1: config 7 has no interface number 0 [ 220.996369][ T43] usb 1-1: config 7 interface 213 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 221.010679][ T43] usb 1-1: config 7 interface 213 has no altsetting 0 [ 221.021946][ T43] usb 1-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=22.3e [ 221.040687][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.074790][ T43] usb 1-1: Product: syz [ 221.078981][ T43] usb 1-1: Manufacturer: syz [ 221.084751][ T30] audit: type=1326 audit(1751020269.964:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11409 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe625d8e929 code=0x7ffc0000 [ 221.088595][ T43] usb 1-1: SerialNumber: syz [ 221.108254][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.160869][ T30] audit: type=1326 audit(1751020269.964:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11409 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe625d8e929 code=0x7ffc0000 [ 221.186287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 221.278541][ T30] audit: type=1326 audit(1751020270.004:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11409 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe625d8e929 code=0x7ffc0000 [ 221.339627][ T30] audit: type=1326 audit(1751020270.004:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11409 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe625d8e929 code=0x7ffc0000 [ 221.412412][ T30] audit: type=1326 audit(1751020270.004:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11409 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe625d8e929 code=0x7ffc0000 [ 221.445416][T11419] audit: audit_backlog=65 > audit_backlog_limit=64 [ 221.487295][T11419] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 222.191119][ T43] cxacru 1-1:7.213: cxacru_bind: interface has incorrect endpoints [ 222.199230][ T43] cxacru 1-1:7.213: usbatm_usb_probe: bind failed: -19! [ 222.206389][ T5922] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 222.237365][ T43] usb 1-1: USB disconnect, device number 39 [ 222.381210][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 222.394339][ T5922] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 222.421074][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.441635][ T5922] usb 2-1: config 0 descriptor?? [ 222.461830][ T5922] gspca_main: sunplus-2.14.0 probing 041e:400b [ 222.971140][T11481] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 222.977690][T11481] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.024816][T11481] vhci_hcd vhci_hcd.0: Device attached [ 223.271006][ T5958] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 223.281025][ T3755] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 223.431110][ T5958] usb 1-1: Using ep0 maxpacket: 16 [ 223.440742][ T5958] usb 1-1: config 0 has no interfaces? [ 223.449381][ T5958] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 223.461332][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.469445][ T5958] usb 1-1: Product: syz [ 223.479559][ T5958] usb 1-1: Manufacturer: syz [ 223.489673][ T5958] usb 1-1: SerialNumber: syz [ 223.492020][ T5922] gspca_sunplus: reg_w_riv err -71 [ 223.505997][ T5922] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 223.510444][ T5958] usb 1-1: config 0 descriptor?? [ 223.539976][ T5922] usb 2-1: USB disconnect, device number 38 [ 223.744261][T11516] dummy0: entered promiscuous mode [ 223.773710][T11516] bond0: entered promiscuous mode [ 223.781642][T11482] usb 33-1: recv xbuf, 0 [ 223.786661][ T5958] usb 1-1: USB disconnect, device number 40 [ 223.801122][T11516] bond_slave_0: entered promiscuous mode [ 223.808109][ T8622] vhci_hcd: stop threads [ 223.809568][T11516] bond_slave_1: entered promiscuous mode [ 223.818564][ T8622] vhci_hcd: release socket [ 223.830100][T11516] hsr1: entered allmulticast mode [ 223.835133][ T8622] vhci_hcd: disconnect device [ 223.841254][T11516] dummy0: entered allmulticast mode [ 223.846474][T11516] bond0: entered allmulticast mode [ 223.883372][ T3755] vhci_hcd: vhci_device speed not set [ 223.897818][T11516] bond_slave_0: entered allmulticast mode [ 223.933441][T11516] bond_slave_1: entered allmulticast mode [ 224.156571][T11536] fuse: Invalid gid '00000000000037777777777' [ 224.369593][T11547] 9p: Unknown uid 00000000004294967295 [ 226.854201][T11625] input: syz1 as /devices/virtual/input/input35 [ 226.996240][ T30] kauditd_printk_skb: 330 callbacks suppressed [ 226.996257][ T30] audit: type=1400 audit(1751020531.880:1673): avc: denied { write } for pid=11633 comm="syz.5.2407" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 227.081022][ T30] audit: type=1400 audit(1751020531.940:1674): avc: denied { write } for pid=11626 comm="syz.3.2404" name="ptype" dev="proc" ino=4026533014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 227.161055][ T5926] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 227.168696][ T30] audit: type=1400 audit(1751020532.050:1675): avc: denied { bind } for pid=11639 comm="syz.5.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 227.192307][ T30] audit: type=1400 audit(1751020532.050:1676): avc: denied { name_bind } for pid=11639 comm="syz.5.2411" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 227.223901][ T30] audit: type=1400 audit(1751020532.050:1677): avc: denied { node_bind } for pid=11639 comm="syz.5.2411" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 227.285441][ T30] audit: type=1400 audit(1751020532.170:1678): avc: denied { accept } for pid=11645 comm="syz.2.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.356284][ T5926] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 227.356326][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.356349][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.356370][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 227.357217][ T5926] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 227.357241][ T5926] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 227.357260][ T5926] usb 1-1: Manufacturer: syz [ 227.359287][ T5926] usb 1-1: config 0 descriptor?? [ 227.391160][ T43] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 227.576611][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.590962][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.618501][ T43] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 227.630985][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 227.649170][ T43] usb 2-1: SerialNumber: syz [ 227.789535][ T5926] appleir 0003:05AC:8243.0023: unknown main item tag 0x0 [ 227.821298][ T5926] appleir 0003:05AC:8243.0023: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 227.875839][ T43] usb 2-1: 0:2 : does not exist [ 227.880776][ T43] usb 2-1: usbmixer: too many channels (61) in unit 5 [ 227.908417][ T43] usb 2-1: USB disconnect, device number 39 [ 228.064277][ T972] usb 1-1: USB disconnect, device number 41 [ 228.469377][ T30] audit: type=1400 audit(1751020533.350:1679): avc: denied { bind } for pid=11694 comm="syz.1.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 228.650385][ T30] audit: type=1400 audit(1751020533.530:1680): avc: denied { setopt } for pid=11703 comm="syz.1.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 228.672570][ T30] audit: type=1400 audit(1751020533.560:1681): avc: denied { connect } for pid=11703 comm="syz.1.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 228.734755][ T972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=972 comm=kworker/0:2 [ 228.763399][T11706] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 229.087701][T11728] syzkaller1: entered promiscuous mode [ 229.100988][T11728] syzkaller1: entered allmulticast mode [ 229.528678][T11752] binder: 11751:11752 ioctl c0306201 200000000080 returned -14 [ 229.624213][ T30] audit: type=1400 audit(1751020534.510:1682): avc: denied { create } for pid=11758 comm="syz.0.2460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 229.811005][ T5922] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 229.963391][ T5922] usb 4-1: config 0 interface 0 has no altsetting 0 [ 229.978119][ T5922] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 229.992635][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.008317][ T5922] usb 4-1: config 0 descriptor?? [ 230.219164][T11780] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 230.240100][T11782] __nla_validate_parse: 2 callbacks suppressed [ 230.240117][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2471'. [ 230.241819][T11780] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 231.051854][ T5922] video4linux radio48: keene_cmd_set failed (-71) [ 231.063720][ T5922] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 231.078632][ T5922] usb 4-1: USB disconnect, device number 32 [ 231.194424][T11839] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 231.316677][T11848] [ 231.319025][T11848] ===================================================== [ 231.321125][ T972] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 231.325939][T11848] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 231.325952][T11848] 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 Not tainted [ 231.325962][T11848] ----------------------------------------------------- [ 231.325969][T11848] syz.0.2502/11848 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 231.362655][T11848] ffff88803248a360 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 231.371366][T11848] [ 231.371366][T11848] and this task is already holding: [ 231.378738][T11848] ffff888074617028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 231.388585][T11848] which would create a new lock dependency: [ 231.394468][T11848] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 231.402555][T11848] [ 231.402555][T11848] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 231.412000][T11848] (&client->buffer_lock){..-.}-{3:3} [ 231.412026][T11848] [ 231.412026][T11848] ... which became SOFTIRQ-irq-safe at: [ 231.425068][T11848] lock_acquire+0x179/0x350 [ 231.429666][T11848] _raw_spin_lock+0x2e/0x40 [ 231.434245][T11848] evdev_pass_values+0x10e/0x9b0 [ 231.439254][T11848] evdev_events+0x1bb/0x390 [ 231.443828][T11848] input_pass_values+0x6c4/0x890 [ 231.448841][T11848] input_handle_event+0xb29/0x14d0 [ 231.454029][T11848] input_event+0x83/0xb0 [ 231.458341][T11848] hidinput_hid_event+0xa10/0x2420 [ 231.463526][T11848] hid_process_event+0x4b7/0x5e0 [ 231.468534][T11848] hid_report_raw_event+0xa0a/0x1290 [ 231.474406][T11848] __hid_input_report.constprop.0+0x33f/0x450 [ 231.480542][T11848] hid_irq_in+0x35e/0x870 [ 231.484947][T11848] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 231.490390][T11848] usb_hcd_giveback_urb+0x39b/0x450 [ 231.495660][T11848] dummy_timer+0x180e/0x3a20 [ 231.500328][T11848] __hrtimer_run_queues+0x202/0xad0 [ 231.505607][T11848] hrtimer_run_softirq+0x17d/0x350 [ 231.510788][T11848] handle_softirqs+0x216/0x8e0 [ 231.515620][T11848] __irq_exit_rcu+0x109/0x170 [ 231.520365][T11848] irq_exit_rcu+0x9/0x30 [ 231.524675][T11848] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 231.530380][T11848] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 231.536930][T11848] mt_validate+0x1609/0x4210 [ 231.541597][T11848] validate_mm+0xb0/0x570 [ 231.545996][T11848] __split_vma+0xadd/0x1070 [ 231.550578][T11848] vms_gather_munmap_vmas+0x1c2/0x1310 [ 231.556107][T11848] __mmap_region+0x3c7/0x25e0 [ 231.560853][T11848] mmap_region+0x1ab/0x3f0 [ 231.565348][T11848] do_mmap+0xa3e/0x1210 [ 231.569568][T11848] vm_mmap_pgoff+0x281/0x450 [ 231.574233][T11848] ksys_mmap_pgoff+0x32c/0x5c0 [ 231.579069][T11848] __x64_sys_mmap+0x125/0x190 [ 231.583821][T11848] do_syscall_64+0xcd/0x4c0 [ 231.588400][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.594359][T11848] [ 231.594359][T11848] to a SOFTIRQ-irq-unsafe lock: [ 231.601352][T11848] (tasklist_lock){.+.+}-{3:3} [ 231.601373][T11848] [ 231.601373][T11848] ... which became SOFTIRQ-irq-unsafe at: [ 231.613965][T11848] ... [ 231.613971][T11848] lock_acquire+0x179/0x350 [ 231.621109][T11848] _raw_read_lock+0x5f/0x70 [ 231.625687][T11848] __do_wait+0x105/0x890 [ 231.630073][T11848] do_wait+0x21e/0x5a0 [ 231.634214][T11848] kernel_wait+0x9f/0x160 [ 231.638616][T11848] call_usermodehelper_exec_work+0xf1/0x170 [ 231.644580][T11848] process_one_work+0x9cc/0x1b70 [ 231.649585][T11848] worker_thread+0x6c8/0xf10 [ 231.654240][T11848] kthread+0x3c2/0x780 [ 231.658374][T11848] ret_from_fork+0x5d4/0x6f0 [ 231.663039][T11848] ret_from_fork_asm+0x1a/0x30 [ 231.667879][T11848] [ 231.667879][T11848] other info that might help us debug this: [ 231.667879][T11848] [ 231.678086][T11848] Chain exists of: [ 231.678086][T11848] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 231.678086][T11848] [ 231.691188][T11848] Possible interrupt unsafe locking scenario: [ 231.691188][T11848] [ 231.699482][T11848] CPU0 CPU1 [ 231.704831][T11848] ---- ---- [ 231.710175][T11848] lock(tasklist_lock); [ 231.714397][T11848] local_irq_disable(); [ 231.721128][T11848] lock(&client->buffer_lock); [ 231.728564][T11848] lock(&new->fa_lock); [ 231.735306][T11848] [ 231.738737][T11848] lock(&client->buffer_lock); [ 231.743740][T11848] [ 231.743740][T11848] *** DEADLOCK *** [ 231.743740][T11848] [ 231.751863][T11848] 7 locks held by syz.0.2502/11848: [ 231.757035][T11848] #0: ffff88802b9fa118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 231.766155][T11848] #1: ffff88802b559230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x390 [ 231.776233][T11848] #2: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x390 [ 231.785876][T11848] #3: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x890 [ 231.795428][T11848] #4: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 231.804546][T11848] #5: ffff888074617028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 231.814792][T11848] #6: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 231.823818][T11848] [ 231.823818][T11848] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 231.834198][T11848] -> (&client->buffer_lock){..-.}-{3:3} { [ 231.839910][T11848] IN-SOFTIRQ-W at: [ 231.843870][T11848] lock_acquire+0x179/0x350 [ 231.850011][T11848] _raw_spin_lock+0x2e/0x40 [ 231.856147][T11848] evdev_pass_values+0x10e/0x9b0 [ 231.862717][T11848] evdev_events+0x1bb/0x390 [ 231.868852][T11848] input_pass_values+0x6c4/0x890 [ 231.875426][T11848] input_handle_event+0xb29/0x14d0 [ 231.882170][T11848] input_event+0x83/0xb0 [ 231.888044][T11848] hidinput_hid_event+0xa10/0x2420 [ 231.894790][T11848] hid_process_event+0x4b7/0x5e0 [ 231.901358][T11848] hid_report_raw_event+0xa0a/0x1290 [ 231.908272][T11848] __hid_input_report.constprop.0+0x33f/0x450 [ 231.915972][T11848] hid_irq_in+0x35e/0x870 [ 231.921945][T11848] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 231.928952][T11848] usb_hcd_giveback_urb+0x39b/0x450 [ 231.935784][T11848] dummy_timer+0x180e/0x3a20 [ 231.942012][T11848] __hrtimer_run_queues+0x202/0xad0 [ 231.948841][T11848] hrtimer_run_softirq+0x17d/0x350 [ 231.955586][T11848] handle_softirqs+0x216/0x8e0 [ 231.961982][T11848] __irq_exit_rcu+0x109/0x170 [ 231.968290][T11848] irq_exit_rcu+0x9/0x30 [ 231.974163][T11848] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 231.981429][T11848] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 231.989040][T11848] mt_validate+0x1609/0x4210 [ 231.995268][T11848] validate_mm+0xb0/0x570 [ 232.001231][T11848] __split_vma+0xadd/0x1070 [ 232.007451][T11848] vms_gather_munmap_vmas+0x1c2/0x1310 [ 232.014542][T11848] __mmap_region+0x3c7/0x25e0 [ 232.020850][T11848] mmap_region+0x1ab/0x3f0 [ 232.026904][T11848] do_mmap+0xa3e/0x1210 [ 232.032690][T11848] vm_mmap_pgoff+0x281/0x450 [ 232.038936][T11848] ksys_mmap_pgoff+0x32c/0x5c0 [ 232.045339][T11848] __x64_sys_mmap+0x125/0x190 [ 232.051656][T11848] do_syscall_64+0xcd/0x4c0 [ 232.057796][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.065323][T11848] INITIAL USE at: [ 232.069194][T11848] lock_acquire+0x179/0x350 [ 232.075247][T11848] _raw_spin_lock_irqsave+0x3a/0x60 [ 232.081995][T11848] evdev_do_ioctl+0x347/0x1b30 [ 232.088319][T11848] evdev_ioctl+0x16f/0x1a0 [ 232.094292][T11848] __x64_sys_ioctl+0x18b/0x210 [ 232.100600][T11848] do_syscall_64+0xcd/0x4c0 [ 232.106653][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.114088][T11848] } [ 232.116565][T11848] ... key at: [] __key.1+0x0/0x40 [ 232.123660][T11848] [ 232.123660][T11848] the dependencies between the lock to be acquired [ 232.123668][T11848] and SOFTIRQ-irq-unsafe lock: [ 232.137138][T11848] -> (tasklist_lock){.+.+}-{3:3} { [ 232.142432][T11848] HARDIRQ-ON-R at: [ 232.146566][T11848] lock_acquire+0x179/0x350 [ 232.153054][T11848] _raw_read_lock+0x5f/0x70 [ 232.159540][T11848] __do_wait+0x105/0x890 [ 232.165765][T11848] do_wait+0x21e/0x5a0 [ 232.171818][T11848] kernel_wait+0x9f/0x160 [ 232.178192][T11848] call_usermodehelper_exec_work+0xf1/0x170 [ 232.186076][T11848] process_one_work+0x9cc/0x1b70 [ 232.192999][T11848] worker_thread+0x6c8/0xf10 [ 232.199661][T11848] kthread+0x3c2/0x780 [ 232.205711][T11848] ret_from_fork+0x5d4/0x6f0 [ 232.212289][T11848] ret_from_fork_asm+0x1a/0x30 [ 232.219031][T11848] SOFTIRQ-ON-R at: [ 232.223165][T11848] lock_acquire+0x179/0x350 [ 232.229652][T11848] _raw_read_lock+0x5f/0x70 [ 232.236226][T11848] __do_wait+0x105/0x890 [ 232.242452][T11848] do_wait+0x21e/0x5a0 [ 232.248501][T11848] kernel_wait+0x9f/0x160 [ 232.254817][T11848] call_usermodehelper_exec_work+0xf1/0x170 [ 232.262691][T11848] process_one_work+0x9cc/0x1b70 [ 232.269605][T11848] worker_thread+0x6c8/0xf10 [ 232.276171][T11848] kthread+0x3c2/0x780 [ 232.282216][T11848] ret_from_fork+0x5d4/0x6f0 [ 232.288790][T11848] ret_from_fork_asm+0x1a/0x30 [ 232.295530][T11848] INITIAL USE at: [ 232.299578][T11848] lock_acquire+0x179/0x350 [ 232.305981][T11848] _raw_write_lock_irq+0x36/0x50 [ 232.312814][T11848] copy_process+0x4caf/0x76a0 [ 232.319385][T11848] kernel_clone+0xfc/0x960 [ 232.325707][T11848] user_mode_thread+0xc7/0x110 [ 232.332366][T11848] rest_init+0x23/0x2b0 [ 232.338412][T11848] start_kernel+0x3ee/0x4d0 [ 232.344813][T11848] x86_64_start_reservations+0x18/0x30 [ 232.352168][T11848] x86_64_start_kernel+0x130/0x190 [ 232.359171][T11848] common_startup_64+0x13e/0x148 [ 232.366015][T11848] INITIAL READ USE at: [ 232.370506][T11848] lock_acquire+0x179/0x350 [ 232.377353][T11848] _raw_read_lock+0x5f/0x70 [ 232.384192][T11848] __do_wait+0x105/0x890 [ 232.390769][T11848] do_wait+0x21e/0x5a0 [ 232.397174][T11848] kernel_wait+0x9f/0x160 [ 232.403838][T11848] call_usermodehelper_exec_work+0xf1/0x170 [ 232.412059][T11848] process_one_work+0x9cc/0x1b70 [ 232.419324][T11848] worker_thread+0x6c8/0xf10 [ 232.426240][T11848] kthread+0x3c2/0x780 [ 232.432729][T11848] ret_from_fork+0x5d4/0x6f0 [ 232.439663][T11848] ret_from_fork_asm+0x1a/0x30 [ 232.446760][T11848] } [ 232.449418][T11848] ... key at: [] tasklist_lock+0x18/0x40 [ 232.457298][T11848] ... acquired at: [ 232.461255][T11848] _raw_read_lock+0x5f/0x70 [ 232.465920][T11848] send_sigio+0xb8/0x3e0 [ 232.470314][T11848] dnotify_handle_event+0x15e/0x2b0 [ 232.475672][T11848] fsnotify_handle_inode_event.isra.0+0x1df/0x3f0 [ 232.482243][T11848] fsnotify+0x13d6/0x1dc0 [ 232.486731][T11848] vfs_mkdir+0x71d/0x8c0 [ 232.491130][T11848] do_mkdirat+0x304/0x3e0 [ 232.495617][T11848] __x64_sys_mkdirat+0x83/0xb0 [ 232.500538][T11848] do_syscall_64+0xcd/0x4c0 [ 232.505204][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.511252][T11848] [ 232.513553][T11848] -> (&f_owner->lock){....}-{3:3} { [ 232.518833][T11848] INITIAL USE at: [ 232.522793][T11848] lock_acquire+0x179/0x350 [ 232.529020][T11848] _raw_write_lock_irq+0x36/0x50 [ 232.535678][T11848] __f_setown+0x61/0x3c0 [ 232.541648][T11848] generic_setlease+0xeef/0x1300 [ 232.548304][T11848] kernel_setlease+0x106/0x140 [ 232.554798][T11848] vfs_setlease+0x258/0x2d0 [ 232.561024][T11848] fcntl_setlease+0x3ed/0x5a0 [ 232.567421][T11848] do_fcntl+0x751/0x15a0 [ 232.573379][T11848] __x64_sys_fcntl+0x163/0x200 [ 232.579860][T11848] do_syscall_64+0xcd/0x4c0 [ 232.586091][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.593702][T11848] INITIAL READ USE at: [ 232.598095][T11848] lock_acquire+0x179/0x350 [ 232.604758][T11848] _raw_read_lock_irqsave+0x74/0x90 [ 232.612114][T11848] send_sigio+0x31/0x3e0 [ 232.618505][T11848] dnotify_handle_event+0x15e/0x2b0 [ 232.625891][T11848] fsnotify_handle_inode_event.isra.0+0x1df/0x3f0 [ 232.634464][T11848] fsnotify+0x13d6/0x1dc0 [ 232.640946][T11848] vfs_mkdir+0x71d/0x8c0 [ 232.647339][T11848] do_mkdirat+0x304/0x3e0 [ 232.653827][T11848] __x64_sys_mkdirat+0x83/0xb0 [ 232.660745][T11848] do_syscall_64+0xcd/0x4c0 [ 232.667406][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.676001][T11848] } [ 232.678563][T11848] ... key at: [] __key.1+0x0/0x40 [ 232.685746][T11848] ... acquired at: [ 232.689611][T11848] _raw_read_lock_irqsave+0x74/0x90 [ 232.694968][T11848] send_sigio+0x31/0x3e0 [ 232.699360][T11848] kill_fasync+0x214/0x510 [ 232.703932][T11848] sock_wake_async+0x132/0x160 [ 232.708863][T11848] unix_release_sock+0xc0d/0x14f0 [ 232.714055][T11848] unix_release+0x91/0xf0 [ 232.718541][T11848] __sock_release+0xb0/0x270 [ 232.723306][T11848] sock_close+0x1c/0x30 [ 232.727620][T11848] __fput+0x3ff/0xb70 [ 232.731752][T11848] task_work_run+0x150/0x240 [ 232.736511][T11848] exit_to_user_mode_loop+0xeb/0x110 [ 232.741955][T11848] do_syscall_64+0x3f6/0x4c0 [ 232.746705][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.752753][T11848] [ 232.755059][T11848] -> (&new->fa_lock){....}-{3:3} { [ 232.760179][T11848] INITIAL USE at: [ 232.764055][T11848] lock_acquire+0x179/0x350 [ 232.770632][T11848] _raw_write_lock_irq+0x36/0x50 [ 232.777132][T11848] fasync_remove_entry+0xb2/0x1e0 [ 232.783701][T11848] fasync_helper+0xaf/0xd0 [ 232.789659][T11848] lease_modify+0x232/0x500 [ 232.795707][T11848] locks_remove_file+0x29e/0x5c0 [ 232.802191][T11848] __fput+0x351/0xb70 [ 232.807713][T11848] task_work_run+0x150/0x240 [ 232.813867][T11848] exit_to_user_mode_loop+0xeb/0x110 [ 232.820706][T11848] do_syscall_64+0x3f6/0x4c0 [ 232.826847][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.834284][T11848] INITIAL READ USE at: [ 232.838593][T11848] lock_acquire+0x179/0x350 [ 232.845081][T11848] _raw_read_lock_irqsave+0x74/0x90 [ 232.852262][T11848] kill_fasync+0x138/0x510 [ 232.858656][T11848] sock_wake_async+0x132/0x160 [ 232.865425][T11848] unix_release_sock+0xc0d/0x14f0 [ 232.872433][T11848] unix_release+0x91/0xf0 [ 232.878743][T11848] __sock_release+0xb0/0x270 [ 232.885317][T11848] sock_close+0x1c/0x30 [ 232.891456][T11848] __fput+0x3ff/0xb70 [ 232.897412][T11848] fput_close_sync+0x118/0x260 [ 232.904170][T11848] __x64_sys_close+0x8b/0x120 [ 232.910836][T11848] do_syscall_64+0xcd/0x4c0 [ 232.917326][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.925197][T11848] } [ 232.927674][T11848] ... key at: [] __key.0+0x0/0x40 [ 232.934769][T11848] ... acquired at: [ 232.938552][T11848] lock_acquire+0x179/0x350 [ 232.943217][T11848] _raw_read_lock_irqsave+0x74/0x90 [ 232.948575][T11848] kill_fasync+0x138/0x510 [ 232.953149][T11848] evdev_pass_values+0x619/0x9b0 [ 232.958244][T11848] evdev_events+0x1bb/0x390 [ 232.962908][T11848] input_pass_values+0x6c4/0x890 [ 232.968003][T11848] input_handle_event+0xf00/0x14d0 [ 232.973284][T11848] input_inject_event+0x1cd/0x390 [ 232.978467][T11848] evdev_write+0x457/0x750 [ 232.983043][T11848] vfs_write+0x2a0/0x1150 [ 232.987534][T11848] ksys_write+0x1f8/0x250 [ 232.992021][T11848] do_syscall_64+0xcd/0x4c0 [ 232.996688][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.002739][T11848] [ 233.005043][T11848] [ 233.005043][T11848] stack backtrace: [ 233.010927][T11848] CPU: 1 UID: 0 PID: 11848 Comm: syz.0.2502 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 233.010948][T11848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.010957][T11848] Call Trace: [ 233.010963][T11848] [ 233.010969][T11848] dump_stack_lvl+0x116/0x1f0 [ 233.010990][T11848] check_irq_usage+0x7dc/0x920 [ 233.011011][T11848] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 233.011032][T11848] ? check_path.constprop.0+0x24/0x50 [ 233.011054][T11848] ? __lock_acquire+0x1285/0x1c90 [ 233.011074][T11848] __lock_acquire+0x1285/0x1c90 [ 233.011099][T11848] lock_acquire+0x179/0x350 [ 233.011120][T11848] ? kill_fasync+0x138/0x510 [ 233.011135][T11848] _raw_read_lock_irqsave+0x74/0x90 [ 233.011154][T11848] ? kill_fasync+0x138/0x510 [ 233.011166][T11848] kill_fasync+0x138/0x510 [ 233.011179][T11848] evdev_pass_values+0x619/0x9b0 [ 233.011198][T11848] evdev_events+0x1bb/0x390 [ 233.011215][T11848] input_pass_values+0x6c4/0x890 [ 233.011233][T11848] input_handle_event+0xf00/0x14d0 [ 233.011250][T11848] ? _copy_from_user+0x59/0xd0 [ 233.011272][T11848] input_inject_event+0x1cd/0x390 [ 233.011291][T11848] evdev_write+0x457/0x750 [ 233.011309][T11848] ? __pfx_evdev_write+0x10/0x10 [ 233.011327][T11848] ? bpf_lsm_file_permission+0x9/0x10 [ 233.011350][T11848] ? security_file_permission+0x71/0x210 [ 233.011372][T11848] ? rw_verify_area+0xcf/0x680 [ 233.011387][T11848] ? __pfx_evdev_write+0x10/0x10 [ 233.011404][T11848] vfs_write+0x2a0/0x1150 [ 233.011423][T11848] ? __pfx_vfs_write+0x10/0x10 [ 233.011439][T11848] ? find_held_lock+0x2b/0x80 [ 233.011456][T11848] ? __fget_files+0x204/0x3c0 [ 233.011476][T11848] ? __fget_files+0x20e/0x3c0 [ 233.011496][T11848] ksys_write+0x1f8/0x250 [ 233.011513][T11848] ? __pfx_ksys_write+0x10/0x10 [ 233.011533][T11848] do_syscall_64+0xcd/0x4c0 [ 233.011554][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.011568][T11848] RIP: 0033:0x7f07a898e929 [ 233.011581][T11848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.011596][T11848] RSP: 002b:00007f07a9865038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 233.011610][T11848] RAX: ffffffffffffffda RBX: 00007f07a8bb5fa0 RCX: 00007f07a898e929 [ 233.011619][T11848] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 233.011628][T11848] RBP: 00007f07a8a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 233.011637][T11848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.011645][T11848] R13: 0000000000000000 R14: 00007f07a8bb5fa0 R15: 00007ffea48d0868 [ 233.011659][T11848] [ 233.270712][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.305942][ T972] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.316581][ T972] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 233.326902][ T972] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.343317][ T972] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.353901][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.362118][ T972] usb 3-1: Product: syz [ 233.366274][ T972] usb 3-1: Manufacturer: syz [ 233.370834][ T972] usb 3-1: SerialNumber: syz [ 233.377172][ T972] hub 3-1:1.0: bad descriptor, ignoring hub [ 233.383168][ T972] hub 3-1:1.0: probe with driver hub failed with error -5 [ 233.392816][ T972] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 233.398705][ T972] cdc_wdm 3-1:1.0: Unknown control protocol [ 233.420991][ T5926] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 233.586632][T11834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.595267][T11834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.602065][ T5926] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 233.612285][ T5926] usb 2-1: config 8 has no interface number 0 [ 233.618444][ T5926] usb 2-1: config 8 interface 177 has no altsetting 0 [ 233.625319][ T5926] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 233.634349][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.711170][ T972] usb 3-1: USB disconnect, device number 31 [ 233.848111][ T5926] usb 2-1: string descriptor 0 read error: -71 [ 233.854925][ T5926] ir_toy 2-1:8.177: required endpoints not found [ 233.862504][ T5926] usb 2-1: USB disconnect, device number 40