last executing test programs: 3m56.275523596s ago: executing program 4 (id=1558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0x1, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0xff, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0x2, 0x6, '\x00', 0x2}, {0xf, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x5, '\x00', 0x6}, {0x8, 0x9, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xff}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3, '\x00', 0x8}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x7f}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x40, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m55.924008354s ago: executing program 4 (id=1563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000ae0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_migrate_pages\x00', r1, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3m55.782240591s ago: executing program 4 (id=1566): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000) 3m54.13962008s ago: executing program 4 (id=1581): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 3m54.138406094s ago: executing program 4 (id=1582): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2543, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 3m53.89319427s ago: executing program 4 (id=1583): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) 3m53.673437109s ago: executing program 32 (id=1583): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) 1m14.709644539s ago: executing program 1 (id=3983): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m14.504109858s ago: executing program 1 (id=3986): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r1 = syz_io_uring_setup(0x495, &(0x7f0000000200)={0x0, 0x10079ac, 0x1000, 0x3, 0x1d5}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) openat$nci(0xffffffffffffff9c, &(0x7f00000027c0), 0x2, 0x0) 1m14.084688721s ago: executing program 1 (id=3993): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa000000a}) finit_module(r2, 0x0, 0x3) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1m13.737539723s ago: executing program 1 (id=3997): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chroot(&(0x7f0000000d00)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') 1m13.468354622s ago: executing program 1 (id=4001): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) 1m12.984737682s ago: executing program 1 (id=4005): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141e42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000073, 0x0, 0x5}]}) 1m12.46332758s ago: executing program 33 (id=4005): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141e42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000073, 0x0, 0x5}]}) 26.009757598s ago: executing program 6 (id=4627): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 25.110351566s ago: executing program 6 (id=4635): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) 24.204436043s ago: executing program 6 (id=4644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) 24.059837427s ago: executing program 6 (id=4647): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x103) 23.972628976s ago: executing program 6 (id=4648): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r1, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) 23.679931585s ago: executing program 6 (id=4655): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) 23.393651653s ago: executing program 34 (id=4655): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) 5.388786038s ago: executing program 2 (id=4898): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0xfffffffffffffea8, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000040)='a0') 4.168634628s ago: executing program 5 (id=4921): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000480)='a') 3.804656672s ago: executing program 0 (id=4924): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001340)=ANY=[@ANYBLOB="7f050805020380117f012b0204a90298f4"], 0x11) 2.884722106s ago: executing program 0 (id=4937): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022d00010000000009040000050300020009210000330122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0xe, 0x5, {0x5, 0xf, "60d411"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f000904620000d1d8a3ff72699780f01ae70d3676cd8af1eb2b7cc1e3e31da5f7ad"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/88) 2.518589039s ago: executing program 2 (id=4946): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg$can_j1939(r2, &(0x7f0000004940)={0x0, 0x0, 0x0}, 0x0) 2.404463802s ago: executing program 2 (id=4949): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000002740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095", 0x4a}, {&(0x7f0000000a80)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db394005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a10501f9466188b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63fb046ef4511cee26d5d8ff21847bf9e343ef4674c45e2", 0xc6}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.230857364s ago: executing program 2 (id=4951): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x99, 0x15, 0x5, 0xfc, 0x5, 0xfb, 0xe2, 0x5d, 0x1, 0x5, 0x84, 0x8, 0x5}, 0xe) sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) shutdown(r0, 0x1) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1) 2.144342887s ago: executing program 2 (id=4953): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) waitid(0x1, r0, 0x0, 0x1000008, 0x0) 1.918675461s ago: executing program 2 (id=4954): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "9ee763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)={0x40, 0xc, 0x4, "ecfe0e18"}, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x6}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x40, 0x7, 0x4, "dbc9fb21"}, 0x0, 0x0}) 1.413525883s ago: executing program 5 (id=4961): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.309379036s ago: executing program 5 (id=4962): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x7) 1.3082396s ago: executing program 3 (id=4963): fanotify_init(0xf02, 0x800) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x181882, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 1.307842612s ago: executing program 5 (id=4964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x7f, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) shutdown(r0, 0x1) 1.25846614s ago: executing program 5 (id=4965): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1.200390843s ago: executing program 3 (id=4966): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r1) 1.145701338s ago: executing program 3 (id=4967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) close(0x3) 1.020597966s ago: executing program 0 (id=4969): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) cachestat(r0, &(0x7f0000000080)={0xeaa6, 0x7}, &(0x7f00000000c0), 0x0) 1.020320539s ago: executing program 3 (id=4970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/63, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 1.01885738s ago: executing program 7 (id=4971): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) close(0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x800, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 949.013315ms ago: executing program 0 (id=4972): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c80)="f50cb6", 0x3}], 0x1}}], 0x1, 0x8011) recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x10120, 0x0) shutdown(r0, 0x1) 902.780713ms ago: executing program 0 (id=4973): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x600100a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x4040) 902.465031ms ago: executing program 7 (id=4974): mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x103) setresgid(0xee00, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r1, 0x0) 800.654077ms ago: executing program 7 (id=4975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x10, 0x8}, {0x8, 0x9}, {0x1, 0xf}}}, 0x24}}, 0x20040054) 678.824115ms ago: executing program 7 (id=4976): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) 628.500535ms ago: executing program 7 (id=4977): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x3) 396.90946ms ago: executing program 3 (id=4978): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 298.647843ms ago: executing program 5 (id=4979): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) munlock(&(0x7f0000fed000/0x11000)=nil, 0x11000) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x2}, "1f7f"}}, 0x5) 296.814188ms ago: executing program 7 (id=4980): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xbc, 0xb7, 0xf6, 0x20, 0xfe9, 0xd501, 0x2350, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x42, 0x0, 0x0, 0x7b, 0xe3, 0x79}}]}}]}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/133, 0x85}], 0x1) 19.597304ms ago: executing program 3 (id=4981): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 0s ago: executing program 0 (id=4982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffff}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="02000000020001000003be8c5ee1768810003c08030300ecff3f000000030000980000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff0601150039", 0x79) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000040)) kernel console output (not intermixed with test programs): reen 6-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 333.938662][ T5976] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 333.957419][ T9] usb 6-1: USB disconnect, device number 31 [ 333.958163][ T30] audit: type=1400 audit(1754894402.762:1221): avc: denied { firmware_load } for pid=55 comm="kworker/1:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 334.009145][ T55] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 334.030920][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 334.038128][ T43] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 334.046730][ T43] usb 1-1: config 0 has no interface number 0 [ 334.055498][ T43] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 334.065218][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.083344][ T43] usb 1-1: Product: syz [ 334.092209][ T43] usb 1-1: Manufacturer: syz [ 334.096875][ T43] usb 1-1: SerialNumber: syz [ 334.108116][T15215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3927'. [ 334.120037][ T43] usb 1-1: config 0 descriptor?? [ 334.340596][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 334.393690][ T43] usb 1-1: USB disconnect, device number 61 [ 334.552906][T15224] input: syz0 as /devices/virtual/input/input77 [ 334.559427][T15224] input: failed to attach handler leds to device input77, error: -6 [ 334.617573][T15226] syzkaller1: entered promiscuous mode [ 334.643776][T15226] syzkaller1: entered allmulticast mode [ 334.681228][ T43] usb 2-1: USB disconnect, device number 68 [ 334.864782][ T30] audit: type=1400 audit(1754894403.652:1222): avc: denied { read write } for pid=15235 comm="syz.3.3936" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 334.939248][ T30] audit: type=1400 audit(1754894403.692:1223): avc: denied { open } for pid=15235 comm="syz.3.3936" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 334.998501][ T30] audit: type=1400 audit(1754894403.702:1224): avc: denied { ioctl } for pid=15235 comm="syz.3.3936" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 335.023476][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.105858][ T55] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 335.118174][ T55] ath9k_htc: Failed to initialize the device [ 335.142513][ T43] usb 2-1: ath9k_htc: USB layer deinitialized [ 335.153464][ T30] audit: type=1400 audit(1754894403.962:1225): avc: denied { mount } for pid=15245 comm="syz.0.3940" name="/" dev="autofs" ino=60071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 335.206744][ T30] audit: type=1400 audit(1754894404.002:1226): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 335.330843][ T5976] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 335.491217][ T5976] usb 3-1: Using ep0 maxpacket: 32 [ 335.500145][ T5976] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 335.514511][ T5976] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 335.525688][ T5976] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 335.536933][ T5976] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 335.550112][ T5976] usb 3-1: config 0 interface 0 has no altsetting 0 [ 335.574186][ T5976] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 335.584199][ T5976] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 335.594358][ T5976] usb 3-1: Product: syz [ 335.601976][ T5976] usb 3-1: Manufacturer: syz [ 335.610816][ T5976] usb 3-1: SerialNumber: syz [ 335.634344][ T5976] usb 3-1: config 0 descriptor?? [ 335.645527][ T5976] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 335.672641][ T5976] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 335.761777][ T5930] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 335.885444][ T5976] usb 3-1: USB disconnect, device number 63 [ 335.896331][ T5976] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 335.934045][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 335.951746][ T5930] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 335.961220][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.971915][ T5930] usb 4-1: config 0 descriptor?? [ 336.148891][T15278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.591005][ T6005] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 336.762751][ T6005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.774580][ T6005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.784597][ T6005] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 336.794478][ T6005] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.804765][ T6005] usb 1-1: config 0 descriptor?? [ 336.850170][ T30] audit: type=1400 audit(1754894405.642:1227): avc: denied { create } for pid=15309 comm="syz.1.3967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 336.870276][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.911110][ T5976] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 336.937617][ T8439] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 336.943074][T15314] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 337.072093][ T5976] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 337.087429][ T5976] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 337.111784][ T5976] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 337.126179][ T5976] usb 3-1: config 220 has no interface number 2 [ 337.133676][ T5976] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 337.147352][ T5976] usb 3-1: config 220 interface 0 has no altsetting 0 [ 337.154295][ T5976] usb 3-1: config 220 interface 76 has no altsetting 0 [ 337.162985][ T5976] usb 3-1: config 220 interface 1 has no altsetting 0 [ 337.171873][ T5976] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 337.185637][ T5915] usb 2-1: [UEAGLE-ATM] firmware is not available [ 337.193787][ T5855] usb 6-1: [UEAGLE-ATM] firmware is not available [ 337.201353][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.204891][ T5930] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 337.209349][ T5976] usb 3-1: Product: syz [ 337.209369][ T5976] usb 3-1: Manufacturer: syz [ 337.228166][ T5976] usb 3-1: SerialNumber: syz [ 337.247177][ T6005] hid_mf 0003:0079:1846.0057: item fetching failed at offset 10/11 [ 337.256521][ T5930] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 337.268329][ T6005] hid_mf 0003:0079:1846.0057: HID parse failed. [ 337.277465][ T5930] asix 4-1:0.0: probe with driver asix failed with error -71 [ 337.285103][ T6005] hid_mf 0003:0079:1846.0057: probe with driver hid_mf failed with error -22 [ 337.300634][ T5930] usb 4-1: USB disconnect, device number 62 [ 337.459377][ T5976] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 337.474990][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 337.475007][ T30] audit: type=1400 audit(1754894406.272:1231): avc: denied { create } for pid=15286 comm="syz.0.3956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 337.510955][ T5976] usb 3-1: No valid video chain found. [ 337.516486][ T5976] usb 3-1: selecting invalid altsetting 0 [ 337.516731][ T5930] usb 1-1: USB disconnect, device number 62 [ 337.545529][ T5976] usb 3-1: selecting invalid altsetting 0 [ 337.555047][ T5976] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 337.567890][ T5976] usb 3-1: USB disconnect, device number 64 [ 337.805522][ T30] audit: type=1400 audit(1754894406.602:1232): avc: denied { bind } for pid=15349 comm="syz.3.3984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 338.474341][ T30] audit: type=1400 audit(1754894407.272:1233): avc: denied { module_load } for pid=15372 comm="syz.1.3993" path="/sys/power/wakeup_count" dev="sysfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 338.521973][ T5930] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 338.580385][ T30] audit: type=1400 audit(1754894407.332:1234): avc: denied { mounton } for pid=15383 comm="syz.2.3994" path="/proc/1788/task" dev="proc" ino=60674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 338.603197][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.655752][ T30] audit: type=1400 audit(1754894407.332:1235): avc: denied { mount } for pid=15383 comm="syz.2.3994" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 338.723395][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 338.741053][ T5930] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 338.759573][ T5930] usb 4-1: config 179 has no interface number 0 [ 338.769280][ T30] audit: type=1400 audit(1754894407.562:1236): avc: denied { mount } for pid=15386 comm="syz.0.3998" name="/" dev="pstore" ino=2941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 338.814655][ T5930] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 338.870367][ T5930] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 338.931079][ T30] audit: type=1400 audit(1754894407.642:1237): avc: denied { map } for pid=15388 comm="syz.2.3999" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.954296][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.979689][ T5930] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 339.030203][ T5930] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 339.082031][ T30] audit: type=1400 audit(1754894407.642:1238): avc: denied { execute } for pid=15388 comm="syz.2.3999" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.105592][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.144136][ T5930] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 339.170974][ T5842] syz_tun (unregistering): left promiscuous mode [ 339.177855][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.245334][T15371] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 339.256229][ T30] audit: type=1400 audit(1754894407.662:1239): avc: denied { mount } for pid=15385 comm="syz.1.3997" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 339.310113][ T30] audit: type=1400 audit(1754894407.662:1240): avc: denied { mounton } for pid=15385 comm="syz.1.3997" path="/791/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 339.480368][ T8397] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.553021][ T8397] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.610229][ T6005] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input78 [ 339.614308][T15398] syz.0.4004 (15398): drop_caches: 2 [ 339.682169][ T8397] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.699164][ T8397] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.801322][ T8397] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.840839][ T8397] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.854565][ T5976] usb 4-1: USB disconnect, device number 63 [ 339.854634][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 339.869834][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 339.946716][ T8397] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.980251][ T8397] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.205556][ T8397] bridge_slave_1: left allmulticast mode [ 340.220999][ T8397] bridge_slave_1: left promiscuous mode [ 340.231316][ T8397] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.248239][ T8397] bridge_slave_0: left allmulticast mode [ 340.260936][ T8397] bridge_slave_0: left promiscuous mode [ 340.270979][ T8397] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.306143][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.319939][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.328634][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.347328][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.360254][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.379755][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.391939][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.399233][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.407677][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.415318][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.700920][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 340.719374][ T8397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.728797][ T8397] bond_slave_0: left allmulticast mode [ 340.736165][ T8397] bond0 (unregistering): Released all slaves [ 340.977558][T15415] chnl_net:caif_netlink_parms(): no params data found [ 341.150889][ T6005] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 341.253614][ T8397] batadv_slave_1: left promiscuous mode [ 341.281882][ T8397] hsr_slave_0: left promiscuous mode [ 341.293049][ T8397] hsr_slave_1: left promiscuous mode [ 341.298928][ T8397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.310995][ T5976] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 341.314809][ T8397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.336041][ T6005] usb 4-1: Using ep0 maxpacket: 16 [ 341.348069][ T8397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.362218][ T8397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.373176][ T8397] veth1_macvtap: left promiscuous mode [ 341.374390][ T6005] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 341.380192][ T8397] veth0_macvtap: left promiscuous mode [ 341.393400][ T6005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.422176][ T8397] veth1_vlan: left promiscuous mode [ 341.430421][ T6005] usb 4-1: config 0 descriptor?? [ 341.447592][ T6005] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 341.452435][ T8397] veth0_vlan: left promiscuous mode [ 341.496276][ T5976] usb 3-1: Using ep0 maxpacket: 16 [ 341.512511][ T5976] usb 3-1: config 0 has no interfaces? [ 341.518019][ T5976] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 341.546657][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.574937][ T5976] usb 3-1: config 0 descriptor?? [ 341.760840][ T5930] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 341.807065][ T43] usb 3-1: USB disconnect, device number 65 [ 341.823020][T15447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4022'. [ 341.871044][ T6005] gspca_sonixj: reg_r err -71 [ 341.877090][ T6005] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 341.890003][ T6005] usb 4-1: USB disconnect, device number 64 [ 341.972833][ T5930] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 341.992396][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.000576][ T5930] usb 1-1: Product: syz [ 342.009298][ T5930] usb 1-1: Manufacturer: syz [ 342.016545][ T5930] usb 1-1: SerialNumber: syz [ 342.024072][ T5930] usb 1-1: config 0 descriptor?? [ 342.124521][ T8397] team0 (unregistering): Port device team_slave_1 removed [ 342.157633][ T8397] team0 (unregistering): Port device team_slave_0 removed [ 342.243605][ T5930] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 342.473520][ T5861] Bluetooth: hci2: command tx timeout [ 342.599766][T15447] hsr_slave_1 (unregistering): left promiscuous mode [ 342.631128][ T6005] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 342.645335][T15415] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.653504][T15415] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.661069][T15415] bridge_slave_0: entered allmulticast mode [ 342.668292][T15415] bridge_slave_0: entered promiscuous mode [ 342.680547][T15415] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.688280][T15415] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.695653][T15415] bridge_slave_1: entered allmulticast mode [ 342.701672][ T5976] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 342.712525][T15415] bridge_slave_1: entered promiscuous mode [ 342.736090][T15454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4025'. [ 342.776377][T15415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.796727][T15415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.827282][ T6005] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.839497][ T6005] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 342.850318][ T6005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.867405][T15415] team0: Port device team_slave_0 added [ 342.874796][ T5976] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 342.874864][ T6005] usb 3-1: config 0 descriptor?? [ 342.886209][T15415] team0: Port device team_slave_1 added [ 342.900279][ T5976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.910189][ T8397] IPVS: stop unused estimator thread 0... [ 342.919770][ T5976] usb 4-1: config 0 descriptor?? [ 342.962069][T15415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.969747][T15415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.002172][T15415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.015030][T15415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.023164][T15415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.049331][T15415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.098871][T15415] hsr_slave_0: entered promiscuous mode [ 343.105654][T15415] hsr_slave_1: entered promiscuous mode [ 343.114489][ T6005] usbhid 3-1:0.0: can't add hid device: -71 [ 343.115837][T15415] debugfs: 'hsr0' already exists in 'hsr' [ 343.126321][T15415] Cannot create hsr debugfs directory [ 343.130917][ T6005] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 343.156206][ T6005] usb 3-1: USB disconnect, device number 66 [ 343.272385][ T5930] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 343.293998][ T5930] usb 1-1: USB disconnect, device number 63 [ 343.369934][T15415] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 343.392058][T15415] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 343.405604][T15415] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 343.418448][T15415] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 343.466049][T15415] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.473214][T15415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.480604][T15415] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.487756][T15415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.567291][T15415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.581979][ T8387] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.590069][ T8387] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.608994][T15415] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.610953][ T5855] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 343.630386][ T8397] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.637475][ T8397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.647930][ T8397] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.655007][ T8397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.791092][ T5855] usb 3-1: Using ep0 maxpacket: 16 [ 343.804530][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.817707][ T5855] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 343.827709][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.838102][ T5855] usb 3-1: config 0 descriptor?? [ 343.876664][T15415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.996065][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 343.996082][ T30] audit: type=1400 audit(1754894412.792:1249): avc: denied { set_context_mgr } for pid=15477 comm="syz.0.4030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 344.019931][T15478] binder: 15477:15478 ioctl c0306201 200000000c40 returned -22 [ 344.125397][ T30] audit: type=1400 audit(1754894412.922:1250): avc: denied { create } for pid=15483 comm="syz.0.4033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 344.165815][ T5976] pegasus 4-1:0.0: can't reset MAC [ 344.176219][ T5976] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 344.188075][ T30] audit: type=1400 audit(1754894412.922:1251): avc: denied { setopt } for pid=15483 comm="syz.0.4033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 344.217768][ T5976] usb 4-1: USB disconnect, device number 65 [ 344.261919][T15415] veth0_vlan: entered promiscuous mode [ 344.276183][ T5855] mcp2221 0003:04D8:00DD.0058: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 344.297480][T15415] veth1_vlan: entered promiscuous mode [ 344.346619][T15415] veth0_macvtap: entered promiscuous mode [ 344.360885][T15415] veth1_macvtap: entered promiscuous mode [ 344.385325][T15415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.408204][T15415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.425883][ T8422] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.435927][ T8422] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.448179][ T8422] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.460459][ T8422] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.542419][ T5861] Bluetooth: hci2: command tx timeout [ 344.556452][ T8455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.568919][ T8455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.580912][ T55] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 344.612358][ T8455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.621522][ T8455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.634556][ T30] audit: type=1400 audit(1754894413.432:1252): avc: denied { mounton } for pid=15415 comm="syz-executor" path="/root/syzkaller.EsZYwx/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 344.659581][ T30] audit: type=1400 audit(1754894413.432:1253): avc: denied { mount } for pid=15415 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 344.688385][ T5855] usb 3-1: USB disconnect, device number 67 [ 344.696196][ T30] audit: type=1400 audit(1754894413.432:1254): avc: denied { mounton } for pid=15415 comm="syz-executor" path="/root/syzkaller.EsZYwx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 344.761718][ T55] usb 1-1: Using ep0 maxpacket: 16 [ 344.774892][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.788228][ T30] audit: type=1400 audit(1754894413.432:1255): avc: denied { mounton } for pid=15415 comm="syz-executor" path="/root/syzkaller.EsZYwx/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=61250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 344.817439][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.827679][ T55] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 344.837037][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.845224][ T30] audit: type=1400 audit(1754894413.462:1256): avc: denied { mounton } for pid=15415 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 344.872311][ T55] usb 1-1: config 0 descriptor?? [ 344.877440][ T30] audit: type=1400 audit(1754894413.462:1257): avc: denied { mount } for pid=15415 comm="syz-executor" name="/" dev="gadgetfs" ino=7000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 344.904383][ T30] audit: type=1400 audit(1754894413.462:1258): avc: denied { mount } for pid=15415 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 345.220998][ T5855] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 345.246841][T15516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4046'. [ 345.310366][ T55] hid-multitouch 0003:1FD2:6007.0059: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 345.370821][ T5855] usb 6-1: Using ep0 maxpacket: 32 [ 345.377168][ T5855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.388251][ T5855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.398123][ T5855] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 345.407251][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.416420][ T5855] usb 6-1: config 0 descriptor?? [ 345.530833][ T6005] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 345.585075][ T55] usb 1-1: USB disconnect, device number 64 [ 345.692360][ T6005] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 345.700634][ T6005] usb 3-1: config 0 has no interface number 0 [ 345.707099][ T6005] usb 3-1: New USB device found, idVendor=0733, idProduct=0401, bcdDevice=ad.7d [ 345.716349][ T6005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.725959][ T6005] usb 3-1: config 0 descriptor?? [ 345.734609][ T6005] gspca_main: spca501-2.14.0 probing 0733:0401 [ 345.844630][ T5855] kone 0003:1E7D:2CED.005A: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 345.870923][ T5930] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 346.021001][ T5930] usb 7-1: Using ep0 maxpacket: 32 [ 346.027732][ T5930] usb 7-1: config 0 has no interfaces? [ 346.032370][ T5855] kone 0003:1E7D:2CED.005A: couldn't init struct kone_device [ 346.033345][ T5930] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 346.044661][ T5855] kone 0003:1E7D:2CED.005A: couldn't install mouse [ 346.050438][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.059720][ T5855] kone 0003:1E7D:2CED.005A: probe with driver kone failed with error -5 [ 346.075986][ T5930] usb 7-1: config 0 descriptor?? [ 346.078096][ T5855] usb 6-1: USB disconnect, device number 32 [ 346.134259][T15529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4051'. [ 346.169798][T15529] pim6reg: entered allmulticast mode [ 346.186562][T15529] pim6reg: left allmulticast mode [ 346.340626][ T5855] usb 7-1: USB disconnect, device number 2 [ 346.431768][ T5930] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 346.580964][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 346.604490][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.615707][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.621536][ T5861] Bluetooth: hci2: command tx timeout [ 346.626048][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.644926][ T5930] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.654543][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.667607][ T5930] usb 4-1: config 0 descriptor?? [ 346.743673][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.758494][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.768429][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 346.777641][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.791763][ T9] usb 1-1: config 0 descriptor?? [ 346.959184][ T6005] gspca_spca501: reg write: error -71 [ 346.966068][ T6005] spca501 3-1:0.255: Reg write failed for 0x00,0x00,0x05 [ 346.973370][ T6005] spca501 3-1:0.255: probe with driver spca501 failed with error -22 [ 346.983610][ T6005] usb 3-1: USB disconnect, device number 68 [ 347.093759][ T5930] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 347.101384][ T5930] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 347.108808][ T5930] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 347.116238][ T5930] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 347.124194][ T5930] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 347.130855][ T5976] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 347.131932][ T5930] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 347.148820][ T5930] plantronics 0003:047F:FFFF.005B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 347.260928][ T5923] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 347.282419][ T5976] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 347.294071][ T5976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 347.305250][ T5976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 347.316465][ T5976] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.329500][ T5976] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.338575][ T5976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.348387][ T5976] usb 7-1: config 0 descriptor?? [ 347.354010][T15550] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 347.410814][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 347.417630][ T5923] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 347.429656][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 97, changing to 10 [ 347.440947][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24929, setting to 1024 [ 347.454058][ T5923] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 347.463188][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.471615][ T5923] usb 6-1: Product: syz [ 347.475793][ T5923] usb 6-1: Manufacturer: syz [ 347.480396][ T5923] usb 6-1: SerialNumber: syz [ 347.487568][ T5923] usb 6-1: config 0 descriptor?? [ 347.555373][ T5923] rc_core: IR keymap rc-streamzap not found [ 347.562405][ T5923] Registered IR keymap rc-empty [ 347.568260][ T5923] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 347.583922][ T5923] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input79 [ 347.726753][ T5855] usb 6-1: USB disconnect, device number 33 [ 347.787758][ T5976] plantronics 0003:047F:FFFF.005D: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 348.010286][ T9] uclogic 0003:256C:006D.005C: failed retrieving string descriptor #100: -71 [ 348.019345][ T9] uclogic 0003:256C:006D.005C: failed retrieving pen parameters: -71 [ 348.027609][ T9] uclogic 0003:256C:006D.005C: failed probing pen v1 parameters: -71 [ 348.035824][ T9] uclogic 0003:256C:006D.005C: failed probing parameters: -71 [ 348.043343][ T9] uclogic 0003:256C:006D.005C: probe with driver uclogic failed with error -71 [ 348.054075][ T9] usb 1-1: USB disconnect, device number 65 [ 348.453872][ T5930] usb 7-1: USB disconnect, device number 3 [ 348.576629][T15585] loop3: detected capacity change from 0 to 1 [ 348.598216][T15585] Dev loop3: unable to read RDB block 1 [ 348.607635][T15585] loop3: unable to read partition table [ 348.625804][T15585] loop3: partition table beyond EOD, truncated [ 348.635986][T15585] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 348.700880][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 348.711294][ T5861] Bluetooth: hci2: command tx timeout [ 348.788164][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4084'. [ 348.799993][T15601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4084'. [ 348.816102][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4084'. [ 348.825316][T15601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4084'. [ 348.916839][T15606] input: syz0 as /devices/virtual/input/input81 [ 348.924704][ T5930] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 349.005401][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 349.005420][ T30] audit: type=1400 audit(1754894417.792:1270): avc: denied { read } for pid=15609 comm="syz.3.4089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 349.045094][ T30] audit: type=1400 audit(1754894417.842:1271): avc: denied { shutdown } for pid=15611 comm="syz.3.4091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 349.096629][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.127144][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.142618][ T5930] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 349.167215][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.170954][ T30] audit: type=1400 audit(1754894417.952:1272): avc: denied { mounton } for pid=15620 comm="syz.6.4094" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 349.186925][ T5930] usb 1-1: config 0 descriptor?? [ 349.250937][ T30] audit: type=1400 audit(1754894417.972:1273): avc: denied { unmount } for pid=15415 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 349.251131][ T6005] usb 4-1: USB disconnect, device number 66 [ 349.270862][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.306240][ T30] audit: type=1400 audit(1754894418.042:1274): avc: denied { setopt } for pid=15625 comm="syz.5.4097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 349.333712][ T30] audit: type=1400 audit(1754894418.092:1275): avc: denied { accept } for pid=15624 comm="syz.2.4096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 349.355560][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.426473][T15633] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4095'. [ 349.626124][ T5930] cp2112 0003:10C4:EA90.005E: unknown main item tag 0x0 [ 349.638352][ T5930] cp2112 0003:10C4:EA90.005E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 349.677496][T15641] netlink: 'syz.5.4102': attribute type 1 has an invalid length. [ 349.685531][T15641] netlink: 'syz.5.4102': attribute type 4 has an invalid length. [ 349.693358][T15641] netlink: 15334 bytes leftover after parsing attributes in process `syz.5.4102'. [ 349.825950][ T5930] cp2112 0003:10C4:EA90.005E: Part Number: 0xED Device Version: 0x46 [ 350.235195][ T5930] cp2112 0003:10C4:EA90.005E: error setting SMBus config [ 350.244843][ T5930] cp2112 0003:10C4:EA90.005E: probe with driver cp2112 failed with error -71 [ 350.256129][ T5930] usb 1-1: USB disconnect, device number 66 [ 350.365315][T15658] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 350.680594][T15654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4106'. [ 350.787333][ T30] audit: type=1400 audit(1754894419.582:1276): avc: denied { write } for pid=15673 comm="syz.2.4114" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 350.814597][ T30] audit: type=1400 audit(1754894419.582:1277): avc: denied { listen } for pid=15671 comm="syz.6.4113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 350.838830][ T30] audit: type=1400 audit(1754894419.582:1278): avc: denied { ioctl } for pid=15671 comm="syz.6.4113" path="socket:[62705]" dev="sockfs" ino=62705 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 350.874678][ T5976] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 351.043042][ T5976] usb 4-1: unable to get BOS descriptor or descriptor too short [ 351.060924][ T5976] usb 4-1: not running at top speed; connect to a high speed hub [ 351.076166][ T5976] usb 4-1: config 13 has an invalid interface number: 90 but max is 0 [ 351.093053][ T5976] usb 4-1: config 13 has no interface number 0 [ 351.114296][ T5976] usb 4-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 351.153023][ T5976] usb 4-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7 [ 351.170829][ T5976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.180059][ T5976] usb 4-1: Product: syz [ 351.184398][ T5976] usb 4-1: Manufacturer: syz [ 351.189002][ T5976] usb 4-1: SerialNumber: syz [ 351.426349][ T5976] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.465845][ T5976] usb 4-1: USB disconnect, device number 67 [ 352.154999][T15705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.205323][T15709] input: syz1 as /devices/virtual/input/input82 [ 352.351698][T15715] SELinux: ebitmap: truncated map [ 352.387610][T15715] SELinux: failed to load policy [ 352.563294][ T30] audit: type=1400 audit(1754894421.352:1279): avc: denied { mount } for pid=15728 comm="syz.6.4140" name="/" dev="ramfs" ino=63946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 352.585695][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.718462][T15733] kvm: MWAIT instruction emulated as NOP! [ 352.757525][T15743] overlayfs: failed to set uuid (845/file0, err=-1); falling back to uuid=null. [ 352.768999][T15743] overlayfs: failed to verify upper root origin [ 352.844904][T15746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.080325][T15788] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4163'. [ 354.572232][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 354.572248][ T30] audit: type=1400 audit(1754894423.372:1282): avc: denied { remount } for pid=15809 comm="syz.5.4174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 354.601170][ T5855] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 354.664466][ T30] audit: type=1400 audit(1754894423.462:1283): avc: denied { accept } for pid=15814 comm="syz.6.4177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 354.760884][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 354.772476][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.784279][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.796718][ T5855] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 354.821145][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.832256][ T5855] usb 4-1: config 0 descriptor?? [ 355.193120][ T5930] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 355.261620][ T5855] ft260 0003:0403:6030.005F: unknown main item tag 0x7 [ 355.288687][T15852] veth1_to_bridge: entered allmulticast mode [ 355.296672][T15852] veth1_to_bridge: left allmulticast mode [ 355.351098][ T5930] usb 7-1: Using ep0 maxpacket: 8 [ 355.358028][ T5930] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 355.369014][ T5930] usb 7-1: config 179 has no interface number 0 [ 355.375607][ T5930] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 355.395515][ T5930] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 355.431638][ T5930] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 355.450433][ T5930] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 355.467699][ T5930] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 355.481019][ T5855] ft260 0003:0403:6030.005F: chip code: 6424 8183 [ 355.502375][ T5930] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 355.531579][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.543187][ T30] audit: type=1400 audit(1754894424.342:1284): avc: denied { create } for pid=15861 comm="syz.2.4193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 355.584702][T15836] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 355.598929][ T30] audit: type=1400 audit(1754894424.342:1285): avc: denied { bind } for pid=15861 comm="syz.2.4193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 355.633107][ T30] audit: type=1400 audit(1754894424.342:1286): avc: denied { connect } for pid=15861 comm="syz.2.4193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 355.652742][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.686668][ T30] audit: type=1400 audit(1754894424.482:1287): avc: denied { setopt } for pid=15863 comm="syz.2.4194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 355.707503][ T5855] ft260 0003:0403:6030.005F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 355.897356][ T5930] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input83 [ 356.003279][ T30] audit: type=1400 audit(1754894424.802:1288): avc: denied { unmount } for pid=9885 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 356.111131][T15836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.120150][T15836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.127162][ T5855] ft260 0003:0403:6030.005F: failed to retrieve status: -71 [ 356.138414][ T5855] ft260 0003:0403:6030.005F: failed to reset I2C controller: -71 [ 356.156381][ T5855] usb 4-1: USB disconnect, device number 68 [ 356.205906][ T30] audit: type=1400 audit(1754894425.002:1289): avc: denied { read write } for pid=15881 comm="syz.5.4201" name="mouse0" dev="devtmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 356.234504][ T30] audit: type=1400 audit(1754894425.002:1290): avc: denied { open } for pid=15881 comm="syz.5.4201" path="/dev/input/mouse0" dev="devtmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 356.349913][ T9] usb 7-1: USB disconnect, device number 4 [ 356.355887][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 356.355933][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 356.966018][T15900] binder: 15899:15900 ioctl c0306201 2000000003c0 returned -14 [ 357.004080][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4209'. [ 357.188744][ T30] audit: type=1326 audit(1754894425.982:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15911 comm="syz.5.4213" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f130d18ebe9 code=0x0 [ 357.584506][T15927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4217'. [ 358.593991][T15968] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 358.615648][T15968] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 358.807437][T15980] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 358.853683][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 358.999189][T15991] Bluetooth: hci0: too big key_count value 47413 [ 359.031301][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 359.041640][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.067357][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.105438][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 359.123813][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.149529][ T9] usb 1-1: config 0 descriptor?? [ 359.166106][ T9] hub 1-1:0.0: USB hub found [ 359.370897][ T9] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 359.372418][T16015] block nbd6: shutting down sockets [ 359.439289][T16017] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input84 [ 359.737440][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 359.737457][ T30] audit: type=1400 audit(1754894428.532:1295): avc: denied { connect } for pid=16031 comm="syz.5.4262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 359.776533][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 359.805215][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 359.819912][T16035] input: syz1 as /devices/virtual/input/input85 [ 359.853831][ T9] usb 1-1: USB disconnect, device number 67 [ 359.875902][T16039] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4265'. [ 359.887628][T16039] gretap0: entered promiscuous mode [ 359.899795][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4266'. [ 359.911464][T16039] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4265'. [ 359.914369][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4266'. [ 359.932205][T16039] 0{X: renamed from gretap0 [ 359.945966][T16039] 0{X: left promiscuous mode [ 359.960093][T16039] 0{X: entered allmulticast mode [ 359.985469][T16039] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 360.020362][ T30] audit: type=1400 audit(1754894428.812:1296): avc: denied { create } for pid=16045 comm="syz.3.4268" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 360.049612][ T30] audit: type=1400 audit(1754894428.822:1297): avc: denied { mounton } for pid=16045 comm="syz.3.4268" path="/853/file0" dev="tmpfs" ino=4387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 360.072739][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.121274][T16050] kvm: kvm [16047]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x200000000500 [ 360.199300][ T30] audit: type=1400 audit(1754894428.982:1298): avc: denied { unlink } for pid=5846 comm="syz-executor" name="file0" dev="tmpfs" ino=4387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 360.499092][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 360.511760][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 360.519954][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 360.526993][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 360.792434][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 360.798550][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 360.832527][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 360.992213][ T9] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 361.005601][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.023538][ T9] usb 1-1: config 0 descriptor?? [ 361.141042][ T5855] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 361.164919][ T30] audit: type=1400 audit(1754894429.962:1299): avc: denied { connect } for pid=16103 comm="syz.2.4293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 361.184755][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.289480][T16068] ceph: No mds server is up or the cluster is laggy [ 361.306606][ T5855] usb 7-1: Using ep0 maxpacket: 32 [ 361.312242][ T55] libceph: connect (1)[c::]:6789 error -101 [ 361.320260][ T5855] usb 7-1: config 0 has an invalid interface number: 225 but max is 0 [ 361.328675][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 361.335154][ T5855] usb 7-1: config 0 has no interface number 0 [ 361.350570][ T5855] usb 7-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 361.360259][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.371353][ T5855] usb 7-1: Product: syz [ 361.375563][ T5855] usb 7-1: Manufacturer: syz [ 361.380534][ T5855] usb 7-1: SerialNumber: syz [ 361.389376][ T5855] usb 7-1: config 0 descriptor?? [ 361.753341][T16120] netlink: 'syz.3.4299': attribute type 13 has an invalid length. [ 361.763900][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4299'. [ 361.784700][ T8455] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.793718][T16120] netlink: 'syz.3.4299': attribute type 13 has an invalid length. [ 361.805346][ T8455] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.814866][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4299'. [ 361.831273][ T8455] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.849978][ T8455] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.917013][T16124] program syz.2.4301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.015741][ T5855] mos7840 7-1:0.225: required endpoints missing [ 362.031545][ T5855] usb 7-1: USB disconnect, device number 5 [ 362.050567][T16128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4303'. [ 362.059833][ T9] usb 1-1: Cannot set autoneg [ 362.064778][ T9] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 362.114343][T16132] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4305'. [ 362.212684][ T5930] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 362.278379][T16137] unknown channel width for channel at 909000KHz? [ 362.284248][ T5855] usb 1-1: USB disconnect, device number 68 [ 362.287195][T16137] unknown channel width for channel at 909000KHz? [ 362.382571][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 362.403523][ T5930] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 362.490783][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.500892][ T5930] usb 4-1: config 0 descriptor?? [ 362.506525][T16126] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 363.371449][ T5930] elan 0003:04F3:0755.0060: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 363.420905][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 363.435241][T16166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4318'. [ 363.489564][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4318'. [ 363.525227][T16166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.915153][ T8441] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9 [ 364.151680][T16191] syz.2.4327 (16191) used obsolete PPPIOCDETACH ioctl [ 364.328843][T16201] input: syz1 as /devices/virtual/input/input86 [ 364.551568][ T5855] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 364.704228][ T5855] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 364.716637][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.725609][ T5855] usb 6-1: Product: syz [ 364.729946][ T5855] usb 6-1: Manufacturer: syz [ 364.736435][ T5855] usb 6-1: SerialNumber: syz [ 364.768973][ T5855] r8152-cfgselector 6-1: Unknown version 0x0000 [ 364.776830][ T5855] r8152-cfgselector 6-1: config 0 descriptor?? [ 364.790976][ T30] audit: type=1400 audit(1754894433.592:1300): avc: denied { create } for pid=16210 comm="syz.0.4336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 364.811389][ T30] audit: type=1400 audit(1754894433.612:1301): avc: denied { connect } for pid=16210 comm="syz.0.4336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 364.834456][ T30] audit: type=1400 audit(1754894433.632:1302): avc: denied { read } for pid=16210 comm="syz.0.4336" path="socket:[66063]" dev="sockfs" ino=66063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 364.885988][ T30] audit: type=1400 audit(1754894433.682:1303): avc: denied { write } for pid=16210 comm="syz.0.4336" path="socket:[65221]" dev="sockfs" ino=65221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 365.017309][T16214] netlink: 'syz.0.4337': attribute type 1 has an invalid length. [ 365.030107][T16214] __nla_validate_parse: 3 callbacks suppressed [ 365.030125][T16214] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4337'. [ 365.200411][T16197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.212785][T16197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.255554][ T6005] usb 4-1: USB disconnect, device number 69 [ 365.474357][T16230] input: syz1 as /devices/virtual/input/input87 [ 365.500095][ T5855] r8152-cfgselector 6-1: USB disconnect, device number 34 [ 366.000872][ T6005] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 366.020700][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4348'. [ 366.033056][T16243] netlink: 'syz.2.4348': attribute type 30 has an invalid length. [ 366.051967][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4348'. [ 366.052289][ T8441] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.069176][T16243] netlink: 'syz.2.4348': attribute type 30 has an invalid length. [ 366.111391][ T8441] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.170603][ T6005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.185848][ T8441] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.188005][ T6005] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 366.207111][ T8441] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.282333][ T6005] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.302348][ T6005] usb 1-1: config 0 descriptor?? [ 366.519836][ T6005] usbhid 1-1:0.0: can't add hid device: -71 [ 366.530909][ T5855] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 366.540260][ T6005] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 366.555681][ T6005] usb 1-1: USB disconnect, device number 69 [ 366.680869][ T5855] usb 3-1: Using ep0 maxpacket: 32 [ 366.689617][ T5855] usb 3-1: config 0 has an invalid interface number: 225 but max is 0 [ 366.857123][T16279] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4364'. [ 367.050838][ T5923] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 367.192197][T16285] bridge: RTM_NEWNEIGH with invalid ether address [ 367.240928][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 367.252911][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.274206][ T5923] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 367.302984][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.325673][ T5923] usb 1-1: config 0 descriptor?? [ 367.335821][ T5923] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 367.349339][ T5923] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 367.410786][ T5855] usb 3-1: config 0 has no interface number 0 [ 367.432759][ T5855] usb 3-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 367.446521][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.454564][ T5855] usb 3-1: Product: syz [ 367.458776][ T5855] usb 3-1: Manufacturer: syz [ 367.463391][ T5855] usb 3-1: SerialNumber: syz [ 367.483841][ T5855] usb 3-1: config 0 descriptor?? [ 367.751396][ T5915] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 367.759280][ T6005] usb 1-1: USB disconnect, device number 70 [ 367.771281][ T6005] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 367.877213][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4375'. [ 367.938008][ T5915] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 367.948343][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.957037][ T5915] usb 7-1: Product: syz [ 367.963946][ T5915] usb 7-1: Manufacturer: syz [ 367.968571][ T5915] usb 7-1: SerialNumber: syz [ 368.111490][ T5855] mos7840 3-1:0.225: required endpoints missing [ 368.120928][ T5855] usb 3-1: USB disconnect, device number 69 [ 368.449254][T16326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4384'. [ 368.479745][T16326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4384'. [ 368.821102][ T5855] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 368.993520][ T5855] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 369.014177][ T5915] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 369.110918][ T6005] psmouse serio2: Failed to reset mouse on : -5 [ 369.204018][ T5915] cdc_ncm 7-1:1.0: setting tx_max = 184 [ 369.210917][ T5855] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 369.227992][ T5855] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 369.243481][ T5915] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 369.260883][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.268932][ T5855] usb 6-1: Product: syz [ 369.300836][ T5915] usb 7-1: USB disconnect, device number 6 [ 369.307667][ T5915] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 369.330911][ T5855] usb 6-1: Manufacturer: syz [ 369.335540][ T5855] usb 6-1: SerialNumber: syz [ 369.354201][ T5855] usb 6-1: config 0 descriptor?? [ 369.359736][T16329] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 369.379373][T16329] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 369.516588][ T30] audit: type=1400 audit(1754894438.312:1304): avc: denied { create } for pid=16343 comm="syz.0.4401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 369.619605][T16329] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 369.647556][T16329] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 370.058163][T16362] overlayfs: failed to verify upper (878/file0, ino=4516, err=-116) [ 370.075900][T16362] overlayfs: failed to verify index dir 'upper' xattr [ 370.083331][T16362] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 370.704359][ T5855] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 370.723407][ T5855] dm9601 6-1:0.0 eth9: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 370.741730][ T5855] usb 6-1: USB disconnect, device number 35 [ 370.749546][ T5855] dm9601 6-1:0.0 eth9: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 370.791028][ T43] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 370.965249][ T43] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 370.974464][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.985315][ T43] usb 1-1: config 0 descriptor?? [ 370.992862][ T43] cp210x 1-1:0.0: cp210x converter detected [ 371.082634][ T30] audit: type=1326 audit(1754894439.882:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16370 comm="syz.3.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb7b8ebe9 code=0x7fc00000 [ 371.106131][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.425296][ T43] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 371.469523][T16405] input: syz1 as /devices/virtual/input/input89 [ 371.640542][ T43] usb 1-1: cp210x converter now attached to ttyUSB0 [ 371.863647][ T5855] usb 1-1: USB disconnect, device number 71 [ 371.881544][ T5855] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 371.906647][ T5855] cp210x 1-1:0.0: device disconnected [ 371.970818][ T5923] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 372.136776][ T5923] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 372.160565][ T5923] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 372.170460][ T5923] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 372.179587][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.330896][ T5855] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 372.481023][ T5855] usb 6-1: Using ep0 maxpacket: 8 [ 372.487507][ T5855] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 372.495818][ T5855] usb 6-1: config 179 has no interface number 0 [ 372.502319][ T5855] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 372.514237][ T5855] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 372.525658][ T5855] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 372.536899][ T5855] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 372.550286][ T5855] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 372.560087][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.575360][T16430] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 372.596787][ T5923] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 372.606022][ T5923] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input90 [ 372.617398][ T5923] input: failed to attach handler kbd to device input90, error: -5 [ 372.632772][ T5923] usb 7-1: USB disconnect, device number 7 [ 372.670939][ T6005] misc userio: Buffer overflowed, userio client isn't keeping up [ 372.814364][ T5855] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input91 [ 373.019687][ T5923] usb 6-1: USB disconnect, device number 36 [ 373.019744][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 373.035628][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 373.900890][ T5976] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 373.932416][ T6005] input: PS/2 Generic Mouse as /devices/serio2/input/input88 [ 374.080840][ T5976] usb 7-1: Using ep0 maxpacket: 8 [ 374.116102][ T5976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.127555][ T5976] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.142707][ T5976] usb 7-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 374.152442][ T5976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.175207][ T5976] usb 7-1: config 0 descriptor?? [ 374.181236][ T6005] psmouse serio2: Failed to enable mouse on [ 374.597925][ T5976] hid-rmi 0003:06CB:81A7.0061: unknown main item tag 0x0 [ 374.617782][ T5976] hid-rmi 0003:06CB:81A7.0061: unknown main item tag 0x0 [ 374.636358][ T5976] hid-rmi 0003:06CB:81A7.0061: unknown main item tag 0x0 [ 374.649736][ T5976] hid-rmi 0003:06CB:81A7.0061: unknown main item tag 0x0 [ 374.665720][ T5976] hid-rmi 0003:06CB:81A7.0061: unknown main item tag 0x0 [ 374.683970][ T5976] hid-rmi 0003:06CB:81A7.0061: unknown main item tag 0x0 [ 374.693732][ T5976] hid-rmi 0003:06CB:81A7.0061: unknown main item tag 0x0 [ 374.704102][ T5976] hid-rmi 0003:06CB:81A7.0061: unknown main item tag 0x0 [ 374.712563][ T5976] hid-rmi 0003:06CB:81A7.0061: unknown main item tag 0x0 [ 374.732823][ T5976] hid-rmi 0003:06CB:81A7.0061: unknown main item tag 0x0 [ 374.742872][ T5976] hid-rmi 0003:06CB:81A7.0061: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.6-1/input0 [ 374.837421][ T5976] usb 7-1: USB disconnect, device number 8 [ 375.231744][ T5923] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 375.251038][ T5855] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 375.434486][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.440912][ T5855] usb 3-1: Using ep0 maxpacket: 32 [ 375.461985][ T5855] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 375.464617][ T5923] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 375.493786][ T5855] usb 3-1: config 0 interface 0 has no altsetting 0 [ 375.503108][ T5855] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 375.514274][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.566486][ T5855] usb 3-1: config 0 descriptor?? [ 375.617919][T16533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.712844][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.723687][ T5923] usb 1-1: config 0 descriptor?? [ 375.985658][ T5855] corsair-cpro 0003:1B1C:0C10.0062: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 376.135255][ T5923] keytouch 0003:0926:3333.0063: fixing up Keytouch IEC report descriptor [ 376.138912][ T30] audit: type=1400 audit(1754894444.932:1306): avc: denied { watch watch_reads } for pid=16537 comm="syz.5.4469" path="pipe:[68128]" dev="pipefs" ino=68128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 376.147391][ T5923] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0063/input/input92 [ 376.168226][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.193466][T16538] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 376.271506][ T5923] keytouch 0003:0926:3333.0063: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 376.349462][ T5976] usb 1-1: USB disconnect, device number 72 [ 376.397158][ T5855] corsair-cpro 0003:1B1C:0C10.0062: probe with driver corsair-cpro failed with error -71 [ 376.424856][ T5855] usb 3-1: USB disconnect, device number 70 [ 376.539450][ T8422] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 376.805131][T16567] evm: overlay not supported [ 377.110841][ T5855] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 377.275219][ T5855] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 377.301274][ T5855] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 377.321684][T16584] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 377.345644][ T5855] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 377.365957][ T5855] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 377.402287][ T5855] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 377.442536][ T5855] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 377.465999][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 377.475386][ T5855] usb 4-1: Product: syz [ 377.479582][ T5855] usb 4-1: Manufacturer: syz [ 377.489359][ T5855] cdc_wdm 4-1:1.0: skipping garbage [ 377.497940][ T30] audit: type=1400 audit(1754894446.302:1307): avc: denied { mounton } for pid=16592 comm="syz.6.4490" path="/89/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 377.520809][ T5855] cdc_wdm 4-1:1.0: skipping garbage [ 377.526892][ T30] audit: type=1400 audit(1754894446.302:1308): avc: denied { write } for pid=16592 comm="syz.6.4490" path="socket:[68352]" dev="sockfs" ino=68352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 377.550468][ T5855] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 377.556470][ T5855] cdc_wdm 4-1:1.0: Unknown control protocol [ 377.565563][ T30] audit: type=1400 audit(1754894446.372:1309): avc: denied { unmount } for pid=15415 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 377.585641][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.673147][ T6005] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 377.716998][ T5855] usb 4-1: USB disconnect, device number 70 [ 377.726103][T16603] input: syz0 as /devices/virtual/input/input94 [ 377.847621][ T6005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.879018][ T6005] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 377.891014][ T6005] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.901938][ T6005] usb 1-1: config 0 descriptor?? [ 378.116677][ T6005] usbhid 1-1:0.0: can't add hid device: -71 [ 378.127512][ T6005] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 378.143647][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.146732][ T6005] usb 1-1: USB disconnect, device number 73 [ 378.370950][ T5915] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 378.398903][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4506'. [ 378.430898][ T5930] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 378.516777][ T30] audit: type=1400 audit(1754894447.312:1310): avc: denied { bind } for pid=16627 comm="syz.6.4507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 378.559291][ T5915] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 378.574091][ T5915] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 378.597379][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 378.614573][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 378.624200][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 378.635522][ T5915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 378.647010][ T5915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 378.658076][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 378.658108][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 378.658148][ T5930] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 378.658169][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.659925][ T5930] usb 3-1: config 0 descriptor?? [ 378.671324][ T5915] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 378.686395][ T6005] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 378.692613][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 378.731114][T16622] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 378.731832][ T5915] usb 4-1: Product: syz [ 378.742788][ T5915] usb 4-1: Manufacturer: syz [ 378.763604][ T5915] cdc_wdm 4-1:1.0: skipping garbage [ 378.768839][ T5915] cdc_wdm 4-1:1.0: skipping garbage [ 378.792145][ T5915] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 378.798369][ T5915] cdc_wdm 4-1:1.0: Unknown control protocol [ 378.808806][T16637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.861088][ T6005] usb 1-1: Using ep0 maxpacket: 16 [ 378.868037][ T6005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.885129][ T6005] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 378.894288][ T6005] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.907784][ T6005] usb 1-1: config 0 descriptor?? [ 379.010887][ T5915] usb 4-1: USB disconnect, device number 71 [ 379.163733][ T5930] plantronics 0003:047F:FFFF.0064: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 379.327008][ T6005] mcp2221 0003:04D8:00DD.0065: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 379.685130][ T30] audit: type=1400 audit(1754894448.482:1311): avc: denied { read } for pid=16655 comm="syz.6.4520" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 379.708677][ T30] audit: type=1400 audit(1754894448.482:1312): avc: denied { open } for pid=16655 comm="syz.6.4520" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 379.736699][ T30] audit: type=1400 audit(1754894448.482:1313): avc: denied { ioctl } for pid=16655 comm="syz.6.4520" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 379.763614][ T6005] usb 1-1: USB disconnect, device number 74 [ 380.077852][T16668] veth0: entered promiscuous mode [ 380.088750][T16667] veth0: left promiscuous mode [ 380.150116][T16670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4526'. [ 380.370583][ T8387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.381745][ T8387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.414971][T16683] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4532'. [ 380.526650][ T30] audit: type=1400 audit(1754894449.322:1314): avc: denied { mount } for pid=16691 comm="syz.6.4536" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 380.590524][ T30] audit: type=1400 audit(1754894449.352:1315): avc: denied { mounton } for pid=16691 comm="syz.6.4536" path="/106/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 380.771042][ T5915] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 380.789378][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 380.795997][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 380.942687][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.957217][ T5915] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 380.971048][ T5855] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 380.995316][ T5915] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 381.013472][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.046050][ T5915] usb 6-1: config 0 descriptor?? [ 381.061136][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 381.082017][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 381.130037][T16721] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4547'. [ 381.165685][ T5855] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 381.175259][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.184941][ T43] usb 3-1: USB disconnect, device number 71 [ 381.202187][ T5855] usb 7-1: config 0 descriptor?? [ 381.255396][ T5915] Bluetooth: Can't get state to change to load ram patch err [ 381.263660][ T5915] Bluetooth: Loading patch file failed [ 381.269147][ T5915] ath3k 6-1:0.0: probe with driver ath3k failed with error -121 [ 381.594919][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 381.601130][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 381.603916][T16706] ceph: No mds server is up or the cluster is laggy [ 381.789659][ T5851] Bluetooth: hci5: sending frame failed (-49) [ 381.798597][ T5861] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 382.054873][T16748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4560'. [ 382.077948][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 382.077964][ T30] audit: type=1400 audit(1754894450.872:1323): avc: denied { create } for pid=16747 comm="syz.2.4561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 382.127841][ T30] audit: type=1400 audit(1754894450.912:1324): avc: denied { read write } for pid=16747 comm="syz.2.4561" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 382.152537][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.161071][ T30] audit: type=1400 audit(1754894450.912:1325): avc: denied { open } for pid=16747 comm="syz.2.4561" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 382.185599][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.302689][ T30] audit: type=1400 audit(1754894451.092:1326): avc: denied { watch_mount } for pid=16754 comm="syz.2.4564" path="/927" dev="tmpfs" ino=4765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 382.383231][T16759] syz.2.4566 (16759): drop_caches: 2 [ 382.429312][ T5855] pegasus 7-1:0.0: can't reset MAC [ 382.434829][ T5855] pegasus 7-1:0.0: probe with driver pegasus failed with error -5 [ 382.446070][ T5855] usb 7-1: USB disconnect, device number 9 [ 382.580838][ T6005] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 382.751889][ T6005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.778970][ T6005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.788793][ T6005] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 382.794966][ T30] audit: type=1400 audit(1754894451.592:1327): avc: denied { bind } for pid=16771 comm="syz.3.4572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 382.802018][ T5930] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 382.802145][ T6005] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 382.838680][ T6005] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.848686][ T6005] usb 1-1: config 0 descriptor?? [ 382.980806][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 382.989882][ T5930] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 383.004948][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.013189][ T5930] usb 3-1: Product: syz [ 383.017549][ T5930] usb 3-1: Manufacturer: syz [ 383.024633][ T5930] usb 3-1: SerialNumber: syz [ 383.037007][ T5930] usb 3-1: config 0 descriptor?? [ 383.110870][ T43] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 383.166112][ T30] audit: type=1400 audit(1754894451.962:1328): avc: denied { append } for pid=16781 comm="syz.6.4577" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 383.263588][ T6005] plantronics 0003:047F:FFFF.0066: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 383.282569][ T43] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 383.293928][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.304378][ T43] usb 4-1: config 0 descriptor?? [ 383.451136][ T5930] airspy 3-1:0.0: Board ID: 00 [ 383.455954][ T5930] airspy 3-1:0.0: Firmware version: [ 383.547209][ T5855] usb 6-1: USB disconnect, device number 37 [ 383.561148][ T5959] usb 1-1: USB disconnect, device number 75 [ 383.604142][ T30] audit: type=1400 audit(1754894452.402:1329): avc: denied { shutdown } for pid=16793 comm="syz.6.4583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 383.646153][T16796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4584'. [ 383.655288][T16796] netlink: 'syz.6.4584': attribute type 30 has an invalid length. [ 383.669589][ T8441] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.669770][T16796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4584'. [ 383.682221][ T8441] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.693249][T16796] netlink: 'syz.6.4584': attribute type 30 has an invalid length. [ 383.696727][ T8441] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.713513][ T8441] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.782282][ T30] audit: type=1400 audit(1754894452.582:1330): avc: denied { ioctl } for pid=16797 comm="syz.6.4585" path="socket:[68824]" dev="sockfs" ino=68824 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 383.940917][ T5855] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 384.097061][ T5855] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.139608][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.169382][ T5855] usb 6-1: Product: syz [ 384.178137][ T5855] usb 6-1: Manufacturer: syz [ 384.187699][ T5855] usb 6-1: SerialNumber: syz [ 384.206607][ T30] audit: type=1400 audit(1754894453.002:1331): avc: denied { append } for pid=16808 comm="syz.0.4590" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 384.265712][ T5930] airspy 3-1:0.0: usb_control_msg() failed -71 request 0f [ 384.281182][ T5930] airspy 3-1:0.0: Registered as swradio24 [ 384.287945][ T5930] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 384.302406][ T5930] usb 3-1: USB disconnect, device number 72 [ 384.335708][T16811] input: syz1 as /devices/virtual/input/input96 [ 384.542353][ T43] usb 4-1: Cannot set autoneg [ 384.547530][ T43] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 384.568216][ T43] usb 4-1: USB disconnect, device number 72 [ 385.184236][ T5923] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 385.230390][ T5855] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 385.240872][ T5855] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 385.245751][T16855] virtiofs: Unknown parameter 'always' [ 385.253896][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4609'. [ 385.297840][T16857] input: syz1 as /devices/virtual/input/input97 [ 385.341230][ T5923] usb 7-1: Using ep0 maxpacket: 8 [ 385.349807][ T5923] usb 7-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 385.360826][ T5930] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 385.371348][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.379659][ T5923] usb 7-1: Product: syz [ 385.387385][ T5923] usb 7-1: Manufacturer: syz [ 385.392705][ T5923] usb 7-1: SerialNumber: syz [ 385.437593][ T5855] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 385.455659][ T5855] usb 6-1: USB disconnect, device number 38 [ 385.466155][ T5855] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 385.520781][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 385.550297][ T5930] usb 4-1: config 0 has an invalid interface number: 225 but max is 0 [ 385.578949][ T5930] usb 4-1: config 0 has no interface number 0 [ 385.597921][ T5930] usb 4-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 385.608617][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.616813][ T5930] usb 4-1: Product: syz [ 385.621287][ T5930] usb 4-1: Manufacturer: syz [ 385.625918][ T5930] usb 4-1: SerialNumber: syz [ 385.638959][ T5930] usb 4-1: config 0 descriptor?? [ 385.834593][ T5923] mxuport 7-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 385.858454][ T5923] mxuport 7-1:254.0: probe with driver mxuport failed with error -5 [ 385.870406][ T5923] usb 7-1: USB disconnect, device number 10 [ 386.258688][ T5930] mos7840 4-1:0.225: required endpoints missing [ 386.274582][ T5930] usb 4-1: USB disconnect, device number 73 [ 386.280781][ T5855] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 386.452196][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.464004][ T5855] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 386.473220][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.497753][ T5855] usb 3-1: config 0 descriptor?? [ 386.542541][ T5915] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 386.700933][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 386.712548][ T5915] usb 6-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 386.726426][ T5855] usbhid 3-1:0.0: can't add hid device: -71 [ 386.733206][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.741459][ T5855] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 386.749449][ T5915] usb 6-1: Product: syz [ 386.769126][ T5915] usb 6-1: Manufacturer: syz [ 386.774542][ T5855] usb 3-1: USB disconnect, device number 73 [ 386.780541][ T5915] usb 6-1: SerialNumber: syz [ 386.815139][ T5915] usb 6-1: config 0 descriptor?? [ 386.825367][ T5915] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 386.925464][T16902] netlink: 'syz.3.4631': attribute type 12 has an invalid length. [ 386.934125][T16902] netlink: 'syz.3.4631': attribute type 29 has an invalid length. [ 386.942379][T16902] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4631'. [ 386.953481][T16902] netlink: 'syz.3.4631': attribute type 1 has an invalid length. [ 387.187752][T16904] SELinux: failed to load policy [ 387.270991][ T5855] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 387.433187][ T5855] usb 3-1: Using ep0 maxpacket: 32 [ 387.440160][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.451584][ T5855] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 387.460691][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.483331][ T5855] usb 3-1: config 0 descriptor?? [ 387.492956][ T5855] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 387.507973][ T5855] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 387.929185][ T5855] usb 3-1: USB disconnect, device number 74 [ 387.936419][ T5855] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 387.988200][T16922] 9pnet: p9_errstr2errno: server reported unknown error 6z9f00000000000000000003 [ 388.032533][ T5915] gspca_sonixj: reg_w1 err -71 [ 388.038250][ T5915] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 388.065987][ T5915] usb 6-1: USB disconnect, device number 39 [ 388.223620][T16932] veth3: entered allmulticast mode [ 388.540298][ T30] audit: type=1400 audit(1754894457.332:1332): avc: denied { connect } for pid=16941 comm="syz.0.4650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 388.692317][ T30] audit: type=1400 audit(1754894457.492:1333): avc: denied { append } for pid=16949 comm="syz.2.4652" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 388.715302][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.791331][ T8441] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.813615][ T8441] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.944653][ T8441] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.965620][ T8441] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.127257][ T8441] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.164746][ T8441] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.334156][ T8441] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.367998][ T8441] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.478778][T16972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16972 comm=syz.2.4663 [ 389.646602][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 389.668624][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 389.691238][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 389.711241][ T8441] bridge_slave_1: left allmulticast mode [ 389.716924][ T8441] bridge_slave_1: left promiscuous mode [ 389.731097][ T8441] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.746612][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 389.765813][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 389.773966][ T8441] bridge_slave_0: left allmulticast mode [ 389.779629][ T8441] bridge_slave_0: left promiscuous mode [ 389.841379][ T8441] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.474608][ T8441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.486483][ T8441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.496196][ T8441] bond0 (unregistering): Released all slaves [ 390.732407][ T30] audit: type=1400 audit(1754894459.522:1334): avc: denied { transition } for pid=17008 comm="syz.3.4675" path="/935/file0" dev="tmpfs" ino=4828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 390.800080][ T30] audit: type=1400 audit(1754894459.522:1335): avc: denied { entrypoint } for pid=17008 comm="syz.3.4675" path="/935/file0" dev="tmpfs" ino=4828 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 390.880805][ T30] audit: type=1400 audit(1754894459.522:1336): avc: denied { share } for pid=17008 comm="syz.3.4675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 390.892365][T17019] netlink: 'syz.2.4676': attribute type 12 has an invalid length. [ 390.930988][ T30] audit: type=1400 audit(1754894459.522:1337): avc: denied { noatsecure } for pid=17008 comm="syz.3.4675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 390.978953][ T30] audit: type=1400 audit(1754894459.682:1338): avc: denied { bind } for pid=17018 comm="syz.2.4676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 391.053221][ T30] audit: type=1400 audit(1754894459.682:1339): avc: denied { setopt } for pid=17018 comm="syz.2.4676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 391.226272][ T8441] hsr_slave_0: left promiscuous mode [ 391.236372][ T8441] hsr_slave_1: left promiscuous mode [ 391.242852][ T8441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.250910][ T8441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.261465][ T8441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.269091][ T8441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.298061][ T8441] veth1_macvtap: left promiscuous mode [ 391.304276][ T8441] veth0_macvtap: left promiscuous mode [ 391.309905][ T8441] veth1_vlan: left promiscuous mode [ 391.315482][ T8441] veth0_vlan: left promiscuous mode [ 391.512157][ T5855] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 391.714697][ T5855] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.728650][ T5855] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 391.738767][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.759141][ T5855] usb 3-1: Product: syz [ 391.763693][ T5855] usb 3-1: Manufacturer: syz [ 391.768301][ T5855] usb 3-1: SerialNumber: syz [ 391.826343][ T5861] Bluetooth: hci2: command tx timeout [ 391.833106][T17041] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 391.862447][ T8441] team0 (unregistering): Port device team_slave_1 removed [ 391.912769][ T8441] team0 (unregistering): Port device team_slave_0 removed [ 392.387352][T17050] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4691'. [ 392.595613][T16976] chnl_net:caif_netlink_parms(): no params data found [ 392.775849][T16976] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.785767][T16976] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.793020][T16976] bridge_slave_0: entered allmulticast mode [ 392.800447][T16976] bridge_slave_0: entered promiscuous mode [ 392.809877][T16976] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.813802][ T5855] cdc_ncm 3-1:1.0: failed to get mac address [ 392.825772][T16976] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.833237][T16976] bridge_slave_1: entered allmulticast mode [ 392.841083][T16976] bridge_slave_1: entered promiscuous mode [ 392.917858][T16976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.951544][T16976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.966025][T17073] netlink: 'syz.3.4700': attribute type 7 has an invalid length. [ 392.974357][T17073] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4700'. [ 393.018713][ T5855] cdc_ncm 3-1:1.0: bind() failure [ 393.037576][ T5855] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 393.053008][T16976] team0: Port device team_slave_0 added [ 393.061301][ T5855] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 393.070093][T16976] team0: Port device team_slave_1 added [ 393.075836][ T5855] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 393.100047][ T5855] usb 3-1: USB disconnect, device number 75 [ 393.133869][T16976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.141572][T16976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.167460][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.178620][T16976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.198244][T16976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.208294][T16976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.234180][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.238805][ T30] audit: type=1400 audit(1754894462.032:1340): avc: denied { write } for pid=17081 comm="syz.0.4702" name="file0" dev="tmpfs" ino=4649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 393.264855][T16976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.278448][ T30] audit: type=1400 audit(1754894462.032:1341): avc: denied { open } for pid=17081 comm="syz.0.4702" path="/908/file0" dev="tmpfs" ino=4649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 393.557605][T16976] hsr_slave_0: entered promiscuous mode [ 393.566138][T16976] hsr_slave_1: entered promiscuous mode [ 393.573236][T16976] debugfs: 'hsr0' already exists in 'hsr' [ 393.578985][T16976] Cannot create hsr debugfs directory [ 393.675122][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 393.675138][ T30] audit: type=1400 audit(1754894462.472:1343): avc: denied { lock } for pid=17095 comm="syz.2.4707" path="socket:[70419]" dev="sockfs" ino=70419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 393.905019][ T5861] Bluetooth: hci2: command tx timeout [ 393.969278][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4713'. [ 393.981061][T17110] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4714'. [ 394.065436][T16976] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 394.077662][T16976] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 394.097878][T16976] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 394.111927][T16976] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 394.140875][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 394.233784][T17122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4718'. [ 394.285868][T16976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.369013][T16976] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.439770][ T8422] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.446943][ T8422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.484304][ T8387] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.486846][T17127] SELinux: failed to load policy [ 394.491475][ T8387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.630290][T16976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.090352][T16976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.345892][T17164] netlink: 'syz.5.4731': attribute type 10 has an invalid length. [ 395.550230][T16976] veth0_vlan: entered promiscuous mode [ 395.566025][T16976] veth1_vlan: entered promiscuous mode [ 395.588779][T16976] veth0_macvtap: entered promiscuous mode [ 395.601035][T16976] veth1_macvtap: entered promiscuous mode [ 395.616824][T16976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.629597][T16976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.643630][ T8422] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.652822][ T8422] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.668648][ T8422] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.677632][ T8422] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.736457][ T8441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.744967][ T8441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.769180][ T8387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.778334][ T8387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.967381][T17185] SELinux: failed to load policy [ 395.981113][ T5861] Bluetooth: hci2: command tx timeout [ 396.080201][T17194] binder: 17192:17194 ioctl 4018620d 0 returned -22 [ 396.120394][T17197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4741'. [ 396.229825][T17200] Bluetooth: hci0: unsupported parameter 64317 [ 396.241717][T17200] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 396.497551][ T55] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 396.682122][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 396.691185][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.702511][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.712369][ T55] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 396.721607][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.732384][ T55] usb 4-1: config 0 descriptor?? [ 396.980242][ T30] audit: type=1400 audit(1754894465.772:1344): avc: denied { map } for pid=17218 comm="syz.7.4750" path="/dev/sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 397.166710][ T55] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0067/input/input98 [ 397.190038][ T30] audit: type=1400 audit(1754894465.982:1345): avc: denied { create } for pid=17228 comm="syz.2.4755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 397.237799][ T30] audit: type=1400 audit(1754894465.982:1346): avc: denied { ioctl } for pid=17228 comm="syz.2.4755" path="socket:[71152]" dev="sockfs" ino=71152 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 397.262535][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.281693][ T55] appleir 0003:05AC:8241.0067: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 397.291892][T17235] syzkaller1: entered promiscuous mode [ 397.295856][ T30] audit: type=1400 audit(1754894465.982:1347): avc: denied { write } for pid=17228 comm="syz.2.4755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 397.310920][T17235] syzkaller1: entered allmulticast mode [ 397.565004][ T55] kernel write not supported for file /1501/attr/exec (pid: 55 comm: kworker/1:2) [ 398.061171][ T5861] Bluetooth: hci2: command tx timeout [ 398.547080][ T30] audit: type=1400 audit(1754894467.342:1348): avc: denied { name_bind } for pid=17276 comm="syz.0.4774" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 398.756370][ T30] audit: type=1400 audit(1754894467.552:1349): avc: denied { map } for pid=17284 comm="syz.5.4779" path="socket:[72112]" dev="sockfs" ino=72112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 398.779892][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.880819][ T5923] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 399.032547][ T5923] usb 1-1: config 162 has an invalid interface number: 251 but max is 1 [ 399.041138][ T5923] usb 1-1: config 162 has an invalid interface number: 209 but max is 1 [ 399.049527][ T5923] usb 1-1: config 162 has no interface number 0 [ 399.056059][ T5923] usb 1-1: config 162 has no interface number 1 [ 399.062455][ T5923] usb 1-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 399.075896][ T5923] usb 1-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 399.089439][ T5923] usb 1-1: config 162 interface 209 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 399.111130][ T5959] usb 4-1: USB disconnect, device number 74 [ 399.125506][ T5923] usb 1-1: config 162 interface 209 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 399.151739][ T5923] usb 1-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 399.163759][ T5923] usb 1-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 399.179614][ T5923] usb 1-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 399.194695][ T5923] usb 1-1: config 162 interface 251 has no altsetting 0 [ 399.201735][ T5923] usb 1-1: config 162 interface 209 has no altsetting 0 [ 399.214924][ T5923] usb 1-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88 [ 399.227434][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.236287][ T5923] usb 1-1: Product: syz [ 399.240528][ T5923] usb 1-1: Manufacturer: syz [ 399.246162][ T5923] usb 1-1: SerialNumber: syz [ 399.256537][T17305] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4787'. [ 399.472389][ T5923] io_edgeport 1-1:162.251: required endpoints missing [ 399.673957][ T5923] io_edgeport 1-1:162.209: Edgeport 2 port adapter converter detected [ 399.992316][ T30] audit: type=1400 audit(1754894468.792:1350): avc: denied { listen } for pid=17336 comm="syz.2.4802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 400.016258][ T30] audit: type=1400 audit(1754894468.792:1351): avc: denied { accept } for pid=17336 comm="syz.2.4802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 400.073745][ T5923] usb 1-1: 䀁 detected [ 400.276981][ T5923] usb 1-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 400.287571][ T5923] usb 1-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 400.497129][ T55] usb 1-1: USB disconnect, device number 76 [ 400.497158][ C0] usb 1-1: edge_interrupt_callback - Error -19 submitting control urb [ 400.535048][ T55] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 400.568993][ T55] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 400.600276][ T55] io_edgeport 1-1:162.209: device disconnected [ 400.771652][T17359] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 400.968617][ T8397] Bluetooth: hci5: Frame reassembly failed (-84) [ 401.520838][ T55] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 401.723431][ T55] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 401.743658][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.755051][ T55] usb 6-1: config 0 descriptor?? [ 401.762380][ T55] cp210x 6-1:0.0: cp210x converter detected [ 401.972682][T17379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.987110][T17379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.218557][ T55] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 402.235200][ T55] usb 6-1: cp210x converter now attached to ttyUSB0 [ 402.440301][ T55] usb 6-1: USB disconnect, device number 40 [ 402.499373][ T55] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 402.549215][ T30] audit: type=1400 audit(1754894471.342:1352): avc: denied { ioctl } for pid=17406 comm="syz.0.4833" path="socket:[72529]" dev="sockfs" ino=72529 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 402.649643][ T55] cp210x 6-1:0.0: device disconnected [ 403.021024][ T5851] Bluetooth: hci5: command 0x1003 tx timeout [ 403.022964][ T5861] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 403.244635][T17434] input: syz0 as /devices/virtual/input/input99 [ 403.361237][ T5855] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 403.522576][ T30] audit: type=1400 audit(1754894472.312:1353): avc: denied { module_load } for pid=17439 comm="syz.0.4849" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 403.573427][ T5855] usb 6-1: Using ep0 maxpacket: 16 [ 403.580196][ T5855] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.595447][ T5855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.614787][ T5855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 403.626029][ T5855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 403.639886][ T5855] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.656893][ T5855] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 403.667778][ T5855] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 403.679231][ T5855] usb 6-1: Manufacturer: syz [ 403.701730][ T5855] usb 6-1: config 0 descriptor?? [ 404.046043][ T5855] rc_core: IR keymap rc-hauppauge not found [ 404.060938][ T5855] Registered IR keymap rc-empty [ 404.091704][ T5855] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.110916][ T5855] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.234729][ T5855] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 404.283070][ T5855] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input100 [ 404.300141][ T5855] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.317024][ T30] audit: type=1400 audit(1754894473.112:1354): avc: denied { write } for pid=17449 comm="syz.3.4852" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 404.341868][ T5855] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.364605][ T5855] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.401115][ T5855] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.429928][ T5855] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.450896][ T5855] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.483907][ T5855] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.530892][ T5855] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.552487][ T5855] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.566532][ T30] audit: type=1400 audit(1754894473.362:1355): avc: denied { ioctl } for pid=17468 comm="syz.3.4857" path="net:[4026533029]" dev="nsfs" ino=4026533029 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 404.572301][T17471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4858'. [ 404.592851][ T5855] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.642209][ T5855] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 404.652477][ T5855] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 404.668345][ T5855] usb 6-1: USB disconnect, device number 41 [ 404.693124][T17473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4858'. [ 404.704316][T17473] nbd: device at index 64 is going down [ 404.890819][ T6005] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 404.979534][ T30] audit: type=1400 audit(1754894473.772:1356): avc: denied { ioctl } for pid=17484 comm="syz.3.4864" path="socket:[73031]" dev="sockfs" ino=73031 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 405.054042][ T6005] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.075579][ T6005] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.086174][ T6005] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 405.098372][ T6005] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.108067][ T6005] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.116203][ T6005] usb 1-1: Product: syz [ 405.120450][ T6005] usb 1-1: Manufacturer: syz [ 405.125502][ T6005] usb 1-1: SerialNumber: syz [ 405.140784][ T5923] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 405.305578][ T5923] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 405.323177][ T5923] usb 3-1: config 0 has no interface number 0 [ 405.343166][ T5923] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 405.357868][T17475] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 405.365274][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.376896][ T5923] usb 3-1: Product: syz [ 405.381963][ T5923] usb 3-1: Manufacturer: syz [ 405.386816][ T5923] usb 3-1: SerialNumber: syz [ 405.407842][ T5923] usb 3-1: config 0 descriptor?? [ 405.626628][ T5923] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 405.634205][ T5923] usb 3-1: No valid video chain found. [ 405.641599][ T5923] usb 3-1: USB disconnect, device number 76 [ 406.193479][T17475] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 406.406884][ T6005] cdc_ncm 1-1:1.0: bind() failure [ 406.433095][ T6005] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 406.450145][ T6005] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 406.467672][ T6005] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 406.508107][ T6005] usb 1-1: USB disconnect, device number 77 [ 406.741336][ T30] audit: type=1400 audit(1754894475.532:1357): avc: denied { bind } for pid=17549 comm="syz.7.4892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 407.310843][ T55] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 407.377078][T17568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4900'. [ 407.389166][T17568] netlink: 'syz.0.4900': attribute type 1 has an invalid length. [ 407.397462][T17568] netlink: 'syz.0.4900': attribute type 2 has an invalid length. [ 407.472476][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.498033][ T55] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 407.515189][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.538499][ T55] usb 3-1: config 0 descriptor?? [ 407.720149][ T30] audit: type=1400 audit(1754894476.512:1358): avc: denied { view } for pid=17581 comm="syz.7.4906" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 407.756606][ T55] usbhid 3-1:0.0: can't add hid device: -71 [ 407.776939][ T55] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 407.806629][ T55] usb 3-1: USB disconnect, device number 77 [ 407.904615][T17596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.260799][ T55] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 408.412546][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 408.434913][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 408.450865][ T5855] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 408.468635][ T55] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 408.484117][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.503838][ T55] usb 3-1: config 0 descriptor?? [ 408.613308][ T5855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.630387][ T5855] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 408.654327][ T8397] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 408.660564][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.683317][ T5855] usb 6-1: config 0 descriptor?? [ 408.901296][ T5855] usbhid 6-1:0.0: can't add hid device: -71 [ 408.907686][ T5855] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 408.923030][ T55] mcp2221 0003:04D8:00DD.0068: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 408.943398][ T5855] usb 6-1: USB disconnect, device number 42 [ 409.270072][T17649] Process accounting resumed [ 409.326408][ T6005] usb 3-1: USB disconnect, device number 78 [ 409.371077][ T55] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 409.441022][ T30] audit: type=1400 audit(1754894478.222:1359): avc: denied { connect } for pid=17654 comm="syz.7.4934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 409.550901][ T55] usb 6-1: Using ep0 maxpacket: 16 [ 409.561427][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.578794][ T55] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 409.583196][T17664] ALSA: seq fatal error: cannot create timer (-16) [ 409.591482][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.606484][ T55] usb 6-1: config 0 descriptor?? [ 409.783119][ T5855] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 409.982896][ T5855] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.039039][ T55] mcp2221 0003:04D8:00DD.0069: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 410.055385][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.066393][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.077068][ T5855] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 410.078031][ T8455] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 410.090202][ T5855] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 410.090252][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.092253][ T5855] usb 1-1: config 0 descriptor?? [ 410.440020][ T6005] usb 6-1: USB disconnect, device number 43 [ 410.532580][ T5855] keytouch 0003:0926:3333.006A: fixing up Keytouch IEC report descriptor [ 410.543361][ T5855] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.006A/input/input101 [ 410.630681][ T5855] keytouch 0003:0926:3333.006A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 410.709081][T17713] tls_set_device_offload: netdev not found [ 410.715600][ T55] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 410.744729][T17661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.754831][T17661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.764496][ T5855] usb 1-1: USB disconnect, device number 78 [ 410.880875][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 410.887355][ T55] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 410.895560][ T55] usb 3-1: config 0 has no interface number 0 [ 410.901879][ T55] usb 3-1: config 0 interface 184 has no altsetting 0 [ 410.910299][ T55] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 410.919517][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.927630][ T55] usb 3-1: Product: syz [ 410.931885][ T55] usb 3-1: Manufacturer: syz [ 410.936479][ T55] usb 3-1: SerialNumber: syz [ 410.943789][ T55] usb 3-1: config 0 descriptor?? [ 410.950199][ T55] smsc75xx v1.0.0 [ 411.155251][ T30] audit: type=1400 audit(1754894479.952:1360): avc: denied { create } for pid=17724 comm="syz.3.4966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 411.188437][ T30] audit: type=1400 audit(1754894479.952:1361): avc: denied { ioctl } for pid=17724 comm="syz.3.4966" path="socket:[73538]" dev="sockfs" ino=73538 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 411.213245][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.226996][ T6005] libceph: connect (1)[c::]:6789 error -101 [ 411.236376][ T6005] libceph: mon0 (1)[c::]:6789 connect error [ 411.246617][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 411.254433][ T30] audit: type=1400 audit(1754894479.952:1362): avc: denied { bind } for pid=17724 comm="syz.3.4966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 411.278247][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 411.541128][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 411.547302][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 411.553744][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 411.560619][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 411.986677][T17727] ceph: No mds server is up or the cluster is laggy [ 412.000422][T17730] ceph: No mds server is up or the cluster is laggy [ 412.054643][T17762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4978'. [ 412.161300][T17764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4978'. [ 412.190261][ T55] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 412.203199][ T55] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 412.209070][T17764] nbd: device at index 64 is going down [ 412.218276][ T55] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 412.234812][ T55] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 412.244729][ T55] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 412.255422][ T55] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 412.265417][ T55] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 412.277546][ T55] usb 3-1: USB disconnect, device number 79 [ 412.403971][T17771] [ 412.406333][T17771] ===================================================== [ 412.413254][T17771] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 412.420689][T17771] 6.16.0-syzkaller-12016-gbec077162bd0 #0 Not tainted [ 412.427425][T17771] ----------------------------------------------------- [ 412.434329][T17771] syz.3.4981/17771 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 412.442027][T17771] ffff88805a014558 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 412.450711][T17771] [ 412.450711][T17771] and this task is already holding: [ 412.458054][T17771] ffff88802e38f028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 412.467862][T17771] which would create a new lock dependency: [ 412.473723][T17771] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 412.481790][T17771] [ 412.481790][T17771] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 412.491214][T17771] (&client->buffer_lock){..-.}-{3:3} [ 412.491232][T17771] [ 412.491232][T17771] ... which became SOFTIRQ-irq-safe at: [ 412.504259][T17771] lock_acquire+0x179/0x350 [ 412.508839][T17771] _raw_spin_lock+0x2e/0x40 [ 412.513410][T17771] evdev_pass_values+0x10e/0x9b0 [ 412.518420][T17771] evdev_events+0x1bb/0x390 [ 412.522991][T17771] input_pass_values+0x74e/0x880 [ 412.527996][T17771] input_handle_event+0xb29/0x14d0 [ 412.533171][T17771] input_event+0x8e/0xd0 [ 412.537478][T17771] hidinput_hid_event+0x1d55/0x2420 [ 412.542739][T17771] hid_process_event+0x4b7/0x5e0 [ 412.547747][T17771] hid_report_raw_event+0xa0a/0x1290 [ 412.553102][T17771] __hid_input_report.constprop.0+0x33f/0x450 [ 412.559236][T17771] hid_irq_in+0x35e/0x870 [ 412.563630][T17771] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 412.569068][T17771] usb_hcd_giveback_urb+0x39b/0x450 [ 412.574332][T17771] dummy_timer+0x1814/0x3a30 [ 412.578995][T17771] __hrtimer_run_queues+0x202/0xad0 [ 412.584260][T17771] hrtimer_run_softirq+0x17d/0x350 [ 412.589437][T17771] handle_softirqs+0x216/0x8e0 [ 412.594270][T17771] __irq_exit_rcu+0x109/0x170 [ 412.599017][T17771] irq_exit_rcu+0x9/0x30 [ 412.603330][T17771] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 412.609035][T17771] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 412.615078][T17771] unwind_next_frame+0x159d/0x20a0 [ 412.620257][T17771] arch_stack_walk+0x94/0x100 [ 412.625002][T17771] stack_trace_save+0x8e/0xc0 [ 412.629749][T17771] kasan_save_stack+0x33/0x60 [ 412.634490][T17771] kasan_save_track+0x14/0x30 [ 412.639231][T17771] __kasan_kmalloc+0xaa/0xb0 [ 412.643883][T17771] proc_do_submiturb+0x1c45/0x3b10 [ 412.649062][T17771] usbdev_ioctl+0x2d21/0x4070 [ 412.653828][T17771] __x64_sys_ioctl+0x18e/0x210 [ 412.658665][T17771] do_syscall_64+0xcd/0x4c0 [ 412.663231][T17771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.669193][T17771] [ 412.669193][T17771] to a SOFTIRQ-irq-unsafe lock: [ 412.676183][T17771] (tasklist_lock){.+.+}-{3:3} [ 412.676203][T17771] [ 412.676203][T17771] ... which became SOFTIRQ-irq-unsafe at: [ 412.688784][T17771] ... [ 412.688789][T17771] lock_acquire+0x179/0x350 [ 412.695918][T17771] _raw_read_lock+0x5f/0x70 [ 412.700492][T17771] __do_wait+0x105/0x890 [ 412.704798][T17771] do_wait+0x21e/0x5a0 [ 412.708928][T17771] kernel_wait+0x9f/0x160 [ 412.713319][T17771] call_usermodehelper_exec_work+0xf1/0x170 [ 412.719278][T17771] process_one_work+0x9cc/0x1b70 [ 412.724281][T17771] worker_thread+0x6c8/0xf10 [ 412.728935][T17771] kthread+0x3c5/0x780 [ 412.733066][T17771] ret_from_fork+0x5d4/0x6f0 [ 412.737729][T17771] ret_from_fork_asm+0x1a/0x30 [ 412.742577][T17771] [ 412.742577][T17771] other info that might help us debug this: [ 412.742577][T17771] [ 412.752779][T17771] Chain exists of: [ 412.752779][T17771] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 412.752779][T17771] [ 412.765872][T17771] Possible interrupt unsafe locking scenario: [ 412.765872][T17771] [ 412.774162][T17771] CPU0 CPU1 [ 412.779502][T17771] ---- ---- [ 412.784841][T17771] lock(tasklist_lock); [ 412.789057][T17771] local_irq_disable(); [ 412.795786][T17771] lock(&client->buffer_lock); [ 412.803130][T17771] lock(&new->fa_lock); [ 412.809868][T17771] [ 412.813295][T17771] lock(&client->buffer_lock); [ 412.818294][T17771] [ 412.818294][T17771] *** DEADLOCK *** [ 412.818294][T17771] [ 412.826412][T17771] 7 locks held by syz.3.4981/17771: [ 412.831581][T17771] #0: ffff88802b692118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 412.840692][T17771] #1: ffff88801f3b7230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 412.850767][T17771] #2: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 412.860396][T17771] #3: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 412.869939][T17771] #4: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 412.879049][T17771] #5: ffff88802e38f028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 412.889286][T17771] #6: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 412.898310][T17771] [ 412.898310][T17771] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 412.908688][T17771] -> (&client->buffer_lock){..-.}-{3:3} { [ 412.914396][T17771] IN-SOFTIRQ-W at: [ 412.918353][T17771] lock_acquire+0x179/0x350 [ 412.924490][T17771] _raw_spin_lock+0x2e/0x40 [ 412.930626][T17771] evdev_pass_values+0x10e/0x9b0 [ 412.937209][T17771] evdev_events+0x1bb/0x390 [ 412.943342][T17771] input_pass_values+0x74e/0x880 [ 412.949920][T17771] input_handle_event+0xb29/0x14d0 [ 412.956659][T17771] input_event+0x8e/0xd0 [ 412.962544][T17771] hidinput_hid_event+0x1d55/0x2420 [ 412.969372][T17771] hid_process_event+0x4b7/0x5e0 [ 412.975939][T17771] hid_report_raw_event+0xa0a/0x1290 [ 412.982854][T17771] __hid_input_report.constprop.0+0x33f/0x450 [ 412.990553][T17771] hid_irq_in+0x35e/0x870 [ 412.996514][T17771] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 413.003518][T17771] usb_hcd_giveback_urb+0x39b/0x450 [ 413.010348][T17771] dummy_timer+0x1814/0x3a30 [ 413.016577][T17771] __hrtimer_run_queues+0x202/0xad0 [ 413.023405][T17771] hrtimer_run_softirq+0x17d/0x350 [ 413.030146][T17771] handle_softirqs+0x216/0x8e0 [ 413.036538][T17771] __irq_exit_rcu+0x109/0x170 [ 413.042850][T17771] irq_exit_rcu+0x9/0x30 [ 413.048719][T17771] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 413.055983][T17771] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 413.063591][T17771] unwind_next_frame+0x159d/0x20a0 [ 413.070331][T17771] arch_stack_walk+0x94/0x100 [ 413.076637][T17771] stack_trace_save+0x8e/0xc0 [ 413.082944][T17771] kasan_save_stack+0x33/0x60 [ 413.089245][T17771] kasan_save_track+0x14/0x30 [ 413.095558][T17771] __kasan_kmalloc+0xaa/0xb0 [ 413.101792][T17771] proc_do_submiturb+0x1c45/0x3b10 [ 413.108555][T17771] usbdev_ioctl+0x2d21/0x4070 [ 413.114869][T17771] __x64_sys_ioctl+0x18e/0x210 [ 413.121272][T17771] do_syscall_64+0xcd/0x4c0 [ 413.127411][T17771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.134941][T17771] INITIAL USE at: [ 413.138811][T17771] lock_acquire+0x179/0x350 [ 413.144859][T17771] _raw_spin_lock+0x2e/0x40 [ 413.150914][T17771] evdev_pass_values+0x10e/0x9b0 [ 413.157417][T17771] evdev_events+0x1bb/0x390 [ 413.163476][T17771] input_pass_values+0x74e/0x880 [ 413.169957][T17771] input_handle_event+0xf00/0x14d0 [ 413.176608][T17771] input_inject_event+0x1e8/0x3b0 [ 413.183173][T17771] evdev_write+0x457/0x750 [ 413.189129][T17771] vfs_write+0x2a0/0x1150 [ 413.194999][T17771] ksys_write+0x1f8/0x250 [ 413.200866][T17771] do_syscall_64+0xcd/0x4c0 [ 413.206921][T17771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.214352][T17771] } [ 413.216825][T17771] ... key at: [] __key.1+0x0/0x40 [ 413.223933][T17771] [ 413.223933][T17771] the dependencies between the lock to be acquired [ 413.223940][T17771] and SOFTIRQ-irq-unsafe lock: [ 413.237395][T17771] -> (tasklist_lock){.+.+}-{3:3} { [ 413.242668][T17771] HARDIRQ-ON-R at: [ 413.246797][T17771] lock_acquire+0x179/0x350 [ 413.253280][T17771] _raw_read_lock+0x5f/0x70 [ 413.259759][T17771] __do_wait+0x105/0x890 [ 413.265981][T17771] do_wait+0x21e/0x5a0 [ 413.272020][T17771] kernel_wait+0x9f/0x160 [ 413.278320][T17771] call_usermodehelper_exec_work+0xf1/0x170 [ 413.286198][T17771] process_one_work+0x9cc/0x1b70 [ 413.293127][T17771] worker_thread+0x6c8/0xf10 [ 413.299707][T17771] kthread+0x3c5/0x780 [ 413.305753][T17771] ret_from_fork+0x5d4/0x6f0 [ 413.312318][T17771] ret_from_fork_asm+0x1a/0x30 [ 413.319059][T17771] SOFTIRQ-ON-R at: [ 413.323190][T17771] lock_acquire+0x179/0x350 [ 413.329676][T17771] _raw_read_lock+0x5f/0x70 [ 413.336164][T17771] __do_wait+0x105/0x890 [ 413.342384][T17771] do_wait+0x21e/0x5a0 [ 413.348425][T17771] kernel_wait+0x9f/0x160 [ 413.354735][T17771] call_usermodehelper_exec_work+0xf1/0x170 [ 413.362623][T17771] process_one_work+0x9cc/0x1b70 [ 413.369536][T17771] worker_thread+0x6c8/0xf10 [ 413.376121][T17771] kthread+0x3c5/0x780 [ 413.382161][T17771] ret_from_fork+0x5d4/0x6f0 [ 413.388723][T17771] ret_from_fork_asm+0x1a/0x30 [ 413.395462][T17771] INITIAL USE at: [ 413.399505][T17771] lock_acquire+0x179/0x350 [ 413.405912][T17771] _raw_write_lock_irq+0x36/0x50 [ 413.412745][T17771] copy_process+0x4caf/0x7690 [ 413.419314][T17771] kernel_clone+0xfc/0x930 [ 413.425622][T17771] user_mode_thread+0xc7/0x110 [ 413.432275][T17771] rest_init+0x23/0x2b0 [ 413.438317][T17771] start_kernel+0x3ee/0x4d0 [ 413.444707][T17771] x86_64_start_reservations+0x18/0x30 [ 413.452052][T17771] x86_64_start_kernel+0x130/0x190 [ 413.459048][T17771] common_startup_64+0x13e/0x148 [ 413.465872][T17771] INITIAL READ USE at: [ 413.470347][T17771] lock_acquire+0x179/0x350 [ 413.477176][T17771] _raw_read_lock+0x5f/0x70 [ 413.484005][T17771] __do_wait+0x105/0x890 [ 413.490565][T17771] do_wait+0x21e/0x5a0 [ 413.496962][T17771] kernel_wait+0x9f/0x160 [ 413.503613][T17771] call_usermodehelper_exec_work+0xf1/0x170 [ 413.511832][T17771] process_one_work+0x9cc/0x1b70 [ 413.519090][T17771] worker_thread+0x6c8/0xf10 [ 413.526000][T17771] kthread+0x3c5/0x780 [ 413.532389][T17771] ret_from_fork+0x5d4/0x6f0 [ 413.539297][T17771] ret_from_fork_asm+0x1a/0x30 [ 413.546383][T17771] } [ 413.549030][T17771] ... key at: [] tasklist_lock+0x18/0x40 [ 413.556896][T17771] ... acquired at: [ 413.560848][T17771] _raw_read_lock+0x5f/0x70 [ 413.565510][T17771] send_sigurg+0xed/0xc80 [ 413.569993][T17771] sk_send_sigurg+0x76/0x360 [ 413.574737][T17771] unix_stream_sendmsg+0xfa5/0x1340 [ 413.580083][T17771] ____sys_sendmsg+0xa95/0xc70 [ 413.584996][T17771] ___sys_sendmsg+0x134/0x1d0 [ 413.589826][T17771] __sys_sendmmsg+0x200/0x420 [ 413.594658][T17771] __x64_sys_sendmmsg+0x9c/0x100 [ 413.599749][T17771] do_syscall_64+0xcd/0x4c0 [ 413.604399][T17771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.610441][T17771] [ 413.612738][T17771] -> (&f_owner->lock){....}-{3:3} { [ 413.618012][T17771] INITIAL USE at: [ 413.621965][T17771] lock_acquire+0x179/0x350 [ 413.628189][T17771] _raw_write_lock_irq+0x36/0x50 [ 413.634844][T17771] __f_setown+0x61/0x3c0 [ 413.640803][T17771] fcntl_dirnotify+0x7b1/0xb60 [ 413.647282][T17771] do_fcntl+0xe62/0x15a0 [ 413.653238][T17771] __x64_sys_fcntl+0x163/0x200 [ 413.659737][T17771] do_syscall_64+0xcd/0x4c0 [ 413.665953][T17771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.673557][T17771] INITIAL READ USE at: [ 413.677946][T17771] lock_acquire+0x179/0x350 [ 413.684606][T17771] _raw_read_lock_irqsave+0x74/0x90 [ 413.691953][T17771] send_sigio+0x31/0x3e0 [ 413.698345][T17771] kill_fasync+0x214/0x510 [ 413.704910][T17771] sock_wake_async+0x132/0x160 [ 413.711818][T17771] unix_release_sock+0xc0d/0x14f0 [ 413.718994][T17771] unix_release+0x91/0xf0 [ 413.725475][T17771] __sock_release+0xb3/0x270 [ 413.732222][T17771] sock_close+0x1c/0x30 [ 413.738520][T17771] __fput+0x402/0xb70 [ 413.744666][T17771] task_work_run+0x150/0x240 [ 413.751405][T17771] exit_to_user_mode_loop+0xeb/0x110 [ 413.759197][T17771] do_syscall_64+0x3f6/0x4c0 [ 413.765953][T17771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.774000][T17771] } [ 413.776563][T17771] ... key at: [] __key.1+0x0/0x40 [ 413.783740][T17771] ... acquired at: [ 413.787602][T17771] _raw_read_lock_irqsave+0x74/0x90 [ 413.792955][T17771] send_sigio+0x31/0x3e0 [ 413.797352][T17771] kill_fasync+0x214/0x510 [ 413.801937][T17771] sock_wake_async+0x132/0x160 [ 413.806849][T17771] unix_release_sock+0xc0d/0x14f0 [ 413.812030][T17771] unix_release+0x91/0xf0 [ 413.816515][T17771] __sock_release+0xb3/0x270 [ 413.821262][T17771] sock_close+0x1c/0x30 [ 413.825565][T17771] __fput+0x402/0xb70 [ 413.829710][T17771] task_work_run+0x150/0x240 [ 413.834470][T17771] exit_to_user_mode_loop+0xeb/0x110 [ 413.839905][T17771] do_syscall_64+0x3f6/0x4c0 [ 413.844642][T17771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.850682][T17771] [ 413.852982][T17771] -> (&new->fa_lock){....}-{3:3} { [ 413.858082][T17771] INITIAL USE at: [ 413.861948][T17771] lock_acquire+0x179/0x350 [ 413.868011][T17771] _raw_write_lock_irq+0x36/0x50 [ 413.874494][T17771] fasync_remove_entry+0xb2/0x1e0 [ 413.881066][T17771] fasync_helper+0xaf/0xd0 [ 413.887024][T17771] sock_fasync+0x92/0x140 [ 413.892893][T17771] __fput+0x96b/0xb70 [ 413.898417][T17771] task_work_run+0x150/0x240 [ 413.904544][T17771] exit_to_user_mode_loop+0xeb/0x110 [ 413.911367][T17771] do_syscall_64+0x3f6/0x4c0 [ 413.917494][T17771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.924929][T17771] INITIAL READ USE at: [ 413.929237][T17771] lock_acquire+0x179/0x350 [ 413.935735][T17771] _raw_read_lock_irqsave+0x74/0x90 [ 413.942914][T17771] kill_fasync+0x138/0x510 [ 413.949307][T17771] sock_wake_async+0x132/0x160 [ 413.956041][T17771] unix_release_sock+0xc0d/0x14f0 [ 413.963045][T17771] unix_release+0x91/0xf0 [ 413.969354][T17771] __sock_release+0xb3/0x270 [ 413.975923][T17771] sock_close+0x1c/0x30 [ 413.982050][T17771] __fput+0x402/0xb70 [ 413.988011][T17771] task_work_run+0x150/0x240 [ 413.994608][T17771] exit_to_user_mode_loop+0xeb/0x110 [ 414.001890][T17771] do_syscall_64+0x3f6/0x4c0 [ 414.008467][T17771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.016338][T17771] } [ 414.018813][T17771] ... key at: [] __key.0+0x0/0x40 [ 414.025908][T17771] ... acquired at: [ 414.029687][T17771] lock_acquire+0x179/0x350 [ 414.034349][T17771] _raw_read_lock_irqsave+0x74/0x90 [ 414.039705][T17771] kill_fasync+0x138/0x510 [ 414.044277][T17771] evdev_pass_values+0x619/0x9b0 [ 414.049367][T17771] evdev_events+0x1bb/0x390 [ 414.054032][T17771] input_pass_values+0x74e/0x880 [ 414.059192][T17771] input_handle_event+0xf00/0x14d0 [ 414.064470][T17771] input_inject_event+0x1e8/0x3b0 [ 414.069651][T17771] evdev_write+0x457/0x750 [ 414.074237][T17771] vfs_write+0x2a0/0x1150 [ 414.078727][T17771] ksys_write+0x1f8/0x250 [ 414.083228][T17771] do_syscall_64+0xcd/0x4c0 [ 414.087899][T17771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.093947][T17771] [ 414.096246][T17771] [ 414.096246][T17771] stack backtrace: [ 414.102110][T17771] CPU: 1 UID: 0 PID: 17771 Comm: syz.3.4981 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 414.102129][T17771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.102137][T17771] Call Trace: [ 414.102145][T17771] [ 414.102152][T17771] dump_stack_lvl+0x116/0x1f0 [ 414.102174][T17771] check_irq_usage+0x7dc/0x920 [ 414.102197][T17771] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 414.102217][T17771] ? check_path.constprop.0+0x24/0x50 [ 414.102239][T17771] ? __lock_acquire+0x12bc/0x1ce0 [ 414.102259][T17771] __lock_acquire+0x12bc/0x1ce0 [ 414.102284][T17771] lock_acquire+0x179/0x350 [ 414.102304][T17771] ? kill_fasync+0x138/0x510 [ 414.102327][T17771] _raw_read_lock_irqsave+0x74/0x90 [ 414.102347][T17771] ? kill_fasync+0x138/0x510 [ 414.102374][T17771] kill_fasync+0x138/0x510 [ 414.102393][T17771] evdev_pass_values+0x619/0x9b0 [ 414.102412][T17771] evdev_events+0x1bb/0x390 [ 414.102428][T17771] input_pass_values+0x74e/0x880 [ 414.102445][T17771] input_handle_event+0xf00/0x14d0 [ 414.102460][T17771] ? _copy_from_user+0x59/0xd0 [ 414.102478][T17771] input_inject_event+0x1e8/0x3b0 [ 414.102495][T17771] evdev_write+0x457/0x750 [ 414.102512][T17771] ? __pfx_evdev_write+0x10/0x10 [ 414.102528][T17771] ? bpf_lsm_file_permission+0x9/0x10 [ 414.102546][T17771] ? security_file_permission+0x71/0x210 [ 414.102566][T17771] ? rw_verify_area+0xcf/0x6c0 [ 414.102587][T17771] ? __pfx_evdev_write+0x10/0x10 [ 414.102602][T17771] vfs_write+0x2a0/0x1150 [ 414.102618][T17771] ? __pfx_vfs_write+0x10/0x10 [ 414.102630][T17771] ? find_held_lock+0x2b/0x80 [ 414.102646][T17771] ? __fget_files+0x204/0x3c0 [ 414.102662][T17771] ? __fget_files+0x20e/0x3c0 [ 414.102679][T17771] ksys_write+0x1f8/0x250 [ 414.102692][T17771] ? __pfx_ksys_write+0x10/0x10 [ 414.102706][T17771] ? fdget+0x187/0x210 [ 414.102721][T17771] do_syscall_64+0xcd/0x4c0 [ 414.102734][T17771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.102748][T17771] RIP: 0033:0x7effb7b8ebe9 [ 414.102760][T17771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.102774][T17771] RSP: 002b:00007effb8a9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 414.102788][T17771] RAX: ffffffffffffffda RBX: 00007effb7db5fa0 RCX: 00007effb7b8ebe9 [ 414.102801][T17771] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 414.102809][T17771] RBP: 00007effb7c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 414.102818][T17771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.102826][T17771] R13: 00007effb7db6038 R14: 00007effb7db5fa0 R15: 00007ffd102f9208 [ 414.102840][T17771]