last executing test programs: 20.192524223s ago: executing program 0 (id=520): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 17.089616366s ago: executing program 0 (id=558): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='overlay\x00', &(0x7f0000000100)='./file0\x00', r2) 17.08042137s ago: executing program 0 (id=559): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r1, {0x7, 0x8000, 0x0, {0x3, 0x8, 0x5, 0x7, 0x8001, 0x5, 0x6, 0x531, 0x3, 0x6000, 0x4, 0x0, 0xee01, 0x4, 0x4}}}, 0x78) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x200000007}}, 0x30) 16.985575856s ago: executing program 0 (id=560): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 16.942011569s ago: executing program 0 (id=561): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000002180)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00j\x05\xf9\xa1k;L\xb3C\xeb\xf1\xa7\f\xfb\xa8U\t\xc4\x00t\xbb\x03\x01/\x8dQxk\f\xa7\xfd\xa2=\xb9\xfa\x8d\xa4>\x11\xed\a\xd8\xd4NEz[\xb5\xd4\xd05j\xf2}\xa1a\xd9\xdf0*K \xec\xbc\x86>,\x9dLJ\x13\x1a1\x8fI\x12\xc9\xc5\x11\xf9\xa0S\x95\x9dU\xadn\x89v\xe9\x82\xdd=\xf5e\xacq\x0e\x17\xd4\x19\x8dEp\xbd0\xe8\xb5U\x8fx\xa3\xd0\x92\xbb\xd8>\xda\xe1\x9d\x8c\x1b4\x9c\x17\xb2\xec;\xef\xcd\xa1){\x91\xd2\xc9#;9a,x\x93\xb1xN\x02\x91J\x9c\xed\xff\xea\x16^v\x17\xcc\xfe\xa2g\xa9\x9dk\xe4', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x9, 0xfffffffffffff7f4}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x3, 0x0) 16.739666748s ago: executing program 0 (id=562): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmmsg$inet_sctp(r1, &(0x7f0000002a00)=[{&(0x7f0000000600)=@in={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\'', 0x1}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x40) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x85b, @local, 0x9}}, 0x8, 0xd}, 0x90) 16.568562194s ago: executing program 32 (id=562): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmmsg$inet_sctp(r1, &(0x7f0000002a00)=[{&(0x7f0000000600)=@in={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\'', 0x1}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x40) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x85b, @local, 0x9}}, 0x8, 0xd}, 0x90) 2.85648444s ago: executing program 2 (id=679): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) 2.739261289s ago: executing program 2 (id=682): r0 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.542335256s ago: executing program 2 (id=686): mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x4000005, 0x1000, 0x476, 0x4000000000000000, 0xfffffbfffffffffc, 0x103, 0x0, 0xfeff}) fallocate(r0, 0x1, 0x9, 0x81) 2.481361825s ago: executing program 1 (id=687): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.460386462s ago: executing program 2 (id=688): ioperm(0x0, 0x8, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 2.41057595s ago: executing program 1 (id=690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5, 0x8}, {0x4, 0xfff1}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) 2.261347359s ago: executing program 1 (id=692): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000340)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 2.182777933s ago: executing program 1 (id=694): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000005c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xdddd1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.150527663s ago: executing program 2 (id=696): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x0) 2.096846565s ago: executing program 1 (id=697): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000008c0)={r1, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={r2, 0xb6, 0x3, 0x6, 0x4000, 0x401, 0x7, 0x3, {r2, @in={{0x2, 0x4e20, @broadcast}}, 0x5, 0x6, 0x5, 0x3, 0x1}}, &(0x7f0000000480)=0xb0) 2.021488036s ago: executing program 2 (id=700): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0x36) 1.778484408s ago: executing program 5 (id=703): r0 = io_uring_setup(0x5ae4, 0x0) r1 = epoll_create1(0x0) r2 = dup3(r1, r0, 0x0) epoll_pwait2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, 0x1411, 0x1, 0xffffff7e, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x40001}]}, 0x20}}, 0x40) 1.702281468s ago: executing program 5 (id=705): socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 1.221977881s ago: executing program 5 (id=706): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2) 1.198050628s ago: executing program 5 (id=707): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) openat(r1, &(0x7f0000000480)='./file0\x00', 0x6a4800, 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) 1.166534385s ago: executing program 1 (id=708): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000306"], 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 1.014877184s ago: executing program 5 (id=709): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) 777.528118ms ago: executing program 3 (id=712): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x8, 0x40}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, r2, 0x1fc, 0x0, 0x404, 0x800008, 0x0, 0x4, 0x4000}) 717.71562ms ago: executing program 4 (id=713): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000440)=0x9, 0x1a) 615.403644ms ago: executing program 3 (id=714): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x6, @loopback, 0xfffffffd}}, 0x0, 0xfffd, 0xfffffffc, 0x0, 0x54, 0x10}, 0x9c) 589.672712ms ago: executing program 4 (id=715): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x9}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 505.260051ms ago: executing program 4 (id=716): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) 437.644529ms ago: executing program 3 (id=717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) personality(0x8000000) 427.010469ms ago: executing program 4 (id=718): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 394.408842ms ago: executing program 3 (id=719): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r0, 0xa1) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) 332.719244ms ago: executing program 4 (id=720): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 245.14818ms ago: executing program 3 (id=721): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write$binfmt_script(r3, 0x0, 0xd9) write(r0, 0x0, 0x0) 191.743167ms ago: executing program 4 (id=722): syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) 105.073523ms ago: executing program 5 (id=723): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) socket(0x28, 0x5, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 3 (id=724): setreuid(0x0, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x40015) kernel console output (not intermixed with test programs): amily 0 port 6081 - 0 [ 82.029738][ T4883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.068901][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.077547][ T4883] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.117483][ T4883] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.147676][ T4883] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.165691][ T4883] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.174656][ T4883] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.195721][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.207777][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.230376][ T5843] veth0_macvtap: entered promiscuous mode [ 82.279036][ T5843] veth1_macvtap: entered promiscuous mode [ 82.292958][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.304112][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.347650][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.363767][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.415953][ T30] audit: type=1400 audit(1754721499.020:87): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.lfe98q/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 82.429721][ T5844] veth0_vlan: entered promiscuous mode [ 82.449220][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.483216][ T30] audit: type=1400 audit(1754721499.020:88): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.499928][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.516264][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.517310][ T30] audit: type=1400 audit(1754721499.030:89): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.lfe98q/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 82.525374][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.551123][ T30] audit: type=1400 audit(1754721499.070:90): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 82.565259][ T5844] veth1_vlan: entered promiscuous mode [ 82.597901][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.619272][ T30] audit: type=1400 audit(1754721499.070:91): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.lfe98q/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 82.646892][ T32] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.662698][ T32] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.671448][ T32] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.681468][ T30] audit: type=1400 audit(1754721499.070:92): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.lfe98q/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 82.758412][ T32] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.767795][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.771879][ T30] audit: type=1400 audit(1754721499.080:93): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.803734][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.857814][ T30] audit: type=1400 audit(1754721499.090:94): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 82.870165][ T5844] veth0_macvtap: entered promiscuous mode [ 82.921814][ T30] audit: type=1400 audit(1754721499.100:95): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="gadgetfs" ino=6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 82.945613][ T30] audit: type=1400 audit(1754721499.100:96): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 82.975355][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.985660][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.999831][ T5844] veth1_macvtap: entered promiscuous mode [ 83.073991][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.098260][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.130106][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.143025][ T5961] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.145987][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.158795][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.204799][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.224713][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.259756][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.268629][ T5859] Bluetooth: hci4: command tx timeout [ 83.275570][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.286746][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.322580][ T5961] usb 3-1: Using ep0 maxpacket: 32 [ 83.336657][ T5961] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 83.347926][ T5859] Bluetooth: hci0: command tx timeout [ 83.353521][ T5860] Bluetooth: hci3: command tx timeout [ 83.353966][ T5854] Bluetooth: hci2: command tx timeout [ 83.358914][ T5860] Bluetooth: hci1: command tx timeout [ 83.366118][ T5961] usb 3-1: config 0 has no interface number 0 [ 83.382440][ T5961] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 83.435876][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.448272][ T5961] usb 3-1: Product: syz [ 83.453788][ T5961] usb 3-1: Manufacturer: syz [ 83.458616][ T5961] usb 3-1: SerialNumber: syz [ 83.469147][ T5961] usb 3-1: config 0 descriptor?? [ 83.521856][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.537005][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.591893][ T24] kernel write not supported for file bpf-prog (pid: 24 comm: kworker/1:0) [ 83.656034][ T4883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.678848][ T4883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.723757][ T5961] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 83.848274][ T5961] usb 3-1: USB disconnect, device number 2 [ 84.015520][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.392572][ T5896] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.422994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.582173][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.602922][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.669667][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.719613][ T5896] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.748134][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.772138][ T5896] usb 4-1: config 0 descriptor?? [ 85.272157][ T6014] netlink: 9 bytes leftover after parsing attributes in process `syz.0.19'. [ 85.285578][ T5896] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 85.322346][ T6014] gretap0: entered promiscuous mode [ 85.352784][ T5854] Bluetooth: hci4: command tx timeout [ 85.360256][ T6014] netlink: 5 bytes leftover after parsing attributes in process `syz.0.19'. [ 85.415519][ T6014] 0ªî{X¹¦: renamed from gretap0 [ 85.422915][ T5854] Bluetooth: hci2: command tx timeout [ 85.428326][ T5854] Bluetooth: hci0: command tx timeout [ 85.433935][ T51] Bluetooth: hci1: command tx timeout [ 85.439339][ T51] Bluetooth: hci3: command tx timeout [ 85.452938][ T6014] 0ªî{X¹¦: left promiscuous mode [ 85.465971][ T6014] 0ªî{X¹¦: entered allmulticast mode [ 85.491302][ T6014] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 85.558355][ T5916] usb 4-1: USB disconnect, device number 2 [ 86.129796][ T6047] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.33'. [ 86.274431][ T5896] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 86.435513][ T5896] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.453859][ T5896] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.471160][ T5896] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.481456][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.499806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.733975][ T5896] usb 2-1: usb_control_msg returned -32 [ 86.744398][ T5896] usbtmc 2-1:16.0: can't read capabilities [ 86.807037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.871792][ T92] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.882779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.097683][ T6068] usbtmc 2-1:16.0: usbtmc_ioctl_request failed -32 [ 87.123211][ T92] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 87.123912][ T5896] usb 2-1: USB disconnect, device number 2 [ 87.159648][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.198633][ T92] usb 3-1: config 0 descriptor?? [ 87.221608][ T92] cp210x 3-1:0.0: cp210x converter detected [ 87.646491][ T92] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 87.654092][ T5931] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.693408][ T5961] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.780616][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 87.780672][ T30] audit: type=1400 audit(1754721504.400:162): avc: denied { read write } for pid=6079 comm="syz.1.46" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.813229][ T30] audit: type=1400 audit(1754721504.430:163): avc: denied { open } for pid=6079 comm="syz.1.46" path="/dev/sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.841567][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 87.848337][ T5931] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.858905][ T5931] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 87.892994][ T92] usb 3-1: cp210x converter now attached to ttyUSB0 [ 87.901765][ T5931] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 87.914485][ T5961] usb 5-1: Using ep0 maxpacket: 32 [ 87.927818][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.941394][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.951341][ T5931] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 87.968495][ T5961] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 87.977677][ T5931] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 88.000280][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.008835][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.022986][ T5961] usb 5-1: config 0 descriptor?? [ 88.039497][ T5931] hub 4-1:1.0: bad descriptor, ignoring hub [ 88.054656][ T5931] hub 4-1:1.0: probe with driver hub failed with error -5 [ 88.068463][ T5931] cdc_wdm 4-1:1.0: skipping garbage [ 88.079006][ T5931] cdc_wdm 4-1:1.0: skipping garbage [ 88.092271][ T5931] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 88.099494][ T5849] usb 3-1: USB disconnect, device number 3 [ 88.113868][ T5849] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 88.127017][ T5931] cdc_wdm 4-1:1.0: Unknown control protocol [ 88.141309][ T5849] cp210x 3-1:0.0: device disconnected [ 88.220995][ T30] audit: type=1400 audit(1754721504.840:164): avc: denied { create } for pid=6081 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.239325][ T6082] Bluetooth: MGMT ver 1.23 [ 88.300966][ T30] audit: type=1400 audit(1754721504.860:165): avc: denied { bind } for pid=6081 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.346641][ T6084] netlink: 'syz.0.48': attribute type 3 has an invalid length. [ 88.362613][ T6084] netlink: 'syz.0.48': attribute type 3 has an invalid length. [ 88.386103][ T30] audit: type=1400 audit(1754721504.860:166): avc: denied { write } for pid=6081 comm="syz.1.47" path="socket:[8615]" dev="sockfs" ino=8615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.393238][ T6087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.49'. [ 88.425056][ T6087] netlink: 'syz.1.49': attribute type 7 has an invalid length. [ 88.438306][ T6087] netlink: 'syz.1.49': attribute type 8 has an invalid length. [ 88.449920][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 88.479779][ T5961] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 88.490277][ T30] audit: type=1400 audit(1754721504.920:167): avc: denied { read write } for pid=6073 comm="syz.3.43" name="cdc-wdm0" dev="devtmpfs" ino=2817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 88.576622][ T30] audit: type=1400 audit(1754721504.920:168): avc: denied { open } for pid=6073 comm="syz.3.43" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 88.621364][ T30] audit: type=1400 audit(1754721504.960:169): avc: denied { ioctl } for pid=6083 comm="syz.0.48" path="socket:[7961]" dev="sockfs" ino=7961 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.670385][ T9] cfg80211: failed to load regulatory.db [ 88.678662][ T5961] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 88.698064][ T30] audit: type=1400 audit(1754721505.320:170): avc: denied { append } for pid=6091 comm="syz.0.51" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.812592][ T30] audit: type=1400 audit(1754721505.370:171): avc: denied { read write } for pid=6091 comm="syz.0.51" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 88.834604][ T6094] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 88.881687][ T6094] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 88.886168][ T5961] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 89.280624][ T6100] Zero length message leads to an empty skb [ 89.285705][ T5961] ft260 0003:0403:6030.0002: failed to retrieve status: -71 [ 89.362759][ T5961] ft260 0003:0403:6030.0002: failed to reset I2C controller: -71 [ 89.394877][ T5961] usb 5-1: USB disconnect, device number 2 [ 90.278463][ T5849] kernel read not supported for file /dsp (pid: 5849 comm: kworker/0:3) [ 90.406286][ T5896] usb 4-1: USB disconnect, device number 3 [ 91.299573][ T6176] Bluetooth: MGMT ver 1.23 [ 91.322673][ T5903] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.383759][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 91.512632][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 91.527476][ T5903] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 91.548067][ T5903] usb 3-1: config 0 has no interface number 0 [ 91.580450][ T5903] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 91.601760][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.641555][ T5903] usb 3-1: Product: syz [ 91.657349][ T5903] usb 3-1: Manufacturer: syz [ 91.676414][ T5903] usb 3-1: SerialNumber: syz [ 91.702142][ T5903] usb 3-1: config 0 descriptor?? [ 91.741274][ T5903] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 91.767711][ T5903] dvb-usb: bulk message failed: -22 (2/0) [ 91.795201][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.824833][ T5903] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 91.841358][ T5903] usb 3-1: media controller created [ 91.907429][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.939826][ T5903] cxusb: set interface failed [ 91.959171][ T5903] dvb-usb: bulk message failed: -22 (1/0) [ 91.968979][ T6164] cxusb: i2c rd: len=133 is too big! [ 91.968979][ T6164] [ 92.077295][ T5903] DVB: Unable to find symbol lgdt330x_attach() [ 92.088854][ T5903] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 92.172754][ T5903] rc_core: IR keymap rc-dvico-portable not found [ 92.179216][ T5903] Registered IR keymap rc-empty [ 92.186559][ T5903] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 92.198624][ T5903] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input5 [ 92.218858][ T5903] dvb-usb: schedule remote query interval to 100 msecs. [ 92.226768][ T5903] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 92.285367][ T5903] usb 3-1: USB disconnect, device number 4 [ 92.389615][ T5903] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 92.807812][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 92.807828][ T30] audit: type=1400 audit(1754721509.430:225): avc: denied { name_bind } for pid=6236 comm="syz.4.112" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 92.876863][ T30] audit: type=1400 audit(1754721509.490:226): avc: denied { mount } for pid=6238 comm="syz.0.114" name="/" dev="ramfs" ino=9020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 93.035534][ T6244] syz.0.115 uses obsolete (PF_INET,SOCK_PACKET) [ 93.054773][ T30] audit: type=1400 audit(1754721509.680:227): avc: denied { ioctl } for pid=6243 comm="syz.0.115" path="socket:[9392]" dev="sockfs" ino=9392 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.126295][ T5916] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.265080][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.293273][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 93.302117][ T5916] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 93.325943][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.356483][ T5916] usb 3-1: config 0 descriptor?? [ 93.377881][ T5916] gspca_main: sq930x-2.14.0 probing 041e:403c [ 93.424263][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.436685][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.461026][ T43] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 93.472347][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 93.489199][ T43] usb 2-1: SerialNumber: syz [ 93.720480][ T43] usb 2-1: 0:2 : does not exist [ 93.754834][ T43] usb 2-1: USB disconnect, device number 3 [ 93.796847][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.269052][ T6268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.405255][ T30] audit: type=1400 audit(1754721511.030:228): avc: denied { read write } for pid=6271 comm="syz.0.128" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 94.422859][ T6272] input: syz0 as /devices/virtual/input/input6 [ 94.480331][ T30] audit: type=1400 audit(1754721511.030:229): avc: denied { open } for pid=6271 comm="syz.0.128" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 94.557709][ T30] audit: type=1400 audit(1754721511.040:230): avc: denied { ioctl } for pid=6271 comm="syz.0.128" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 94.632543][ T5916] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 94.640607][ T5916] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 94.674626][ T30] audit: type=1400 audit(1754721511.220:231): avc: denied { ioctl } for pid=6274 comm="syz.1.129" path="socket:[9477]" dev="sockfs" ino=9477 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.692112][ T5916] usb 3-1: USB disconnect, device number 5 [ 94.797065][ T30] audit: type=1400 audit(1754721511.220:232): avc: denied { write } for pid=6274 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.867617][ T30] audit: type=1400 audit(1754721511.450:233): avc: denied { write } for pid=6280 comm="syz.0.132" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.972560][ T30] audit: type=1400 audit(1754721511.590:234): avc: denied { mount } for pid=6282 comm="syz.3.134" name="/" dev="overlay" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 95.098962][ T6294] warning: `syz.3.138' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.143149][ T6296] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.158566][ T6296] netlink: 'syz.3.139': attribute type 12 has an invalid length. [ 95.171042][ T6296] netlink: 'syz.3.139': attribute type 29 has an invalid length. [ 95.179790][ T6296] netlink: 148 bytes leftover after parsing attributes in process `syz.3.139'. [ 95.202406][ T6296] netlink: 'syz.3.139': attribute type 1 has an invalid length. [ 95.302766][ T5916] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.472636][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 95.478957][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.497218][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.507790][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.521671][ T5916] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 95.530754][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.540409][ T5916] usb 1-1: config 0 descriptor?? [ 95.632646][ T5961] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.693462][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 95.783075][ T5961] usb 4-1: Using ep0 maxpacket: 8 [ 95.799253][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.814602][ T5961] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.828916][ T5961] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 95.838559][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.850297][ T5961] usb 4-1: config 0 descriptor?? [ 95.862990][ T9] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 95.872047][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.905768][ T9] usb 3-1: config 0 descriptor?? [ 95.962165][ T5916] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 95.979715][ T5916] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 95.998583][ T5916] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 96.012095][ T5916] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 96.030055][ T5916] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 96.140121][ T5916] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 96.168339][ T5916] microsoft 0003:045E:07DA.0003: no inputs found [ 96.168776][ T9] kaweth 3-1:0.0: Firmware present in device. [ 96.184947][ T5916] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 96.215560][ T5916] usb 1-1: USB disconnect, device number 2 [ 96.264574][ T6319] fido_id[6319]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 96.289151][ T5961] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 96.302878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.326517][ T5961] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 96.340758][ T5961] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 96.349209][ T5961] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 96.357531][ T5961] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 96.357702][ T9] kaweth 3-1:0.0: Statistics collection: 0 [ 96.373895][ T5961] hid-rmi 0003:06CB:81A7.0004: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.3-1/input0 [ 96.386184][ T9] kaweth 3-1:0.0: Multicast filter limit: 0 [ 96.392179][ T9] kaweth 3-1:0.0: MTU: 0 [ 96.399477][ T9] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 96.537315][ T5961] usb 4-1: USB disconnect, device number 4 [ 96.882799][ T5849] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.979546][ T9] kaweth 3-1:0.0: kaweth interface created at eth1 [ 97.047224][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.061797][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.075773][ T5849] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.088983][ T5849] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.111097][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.145733][ T5849] usb 5-1: config 0 descriptor?? [ 97.220842][ T6347] input: syz1 as /devices/virtual/input/input7 [ 97.252774][ T5961] usb 3-1: USB disconnect, device number 6 [ 97.622321][ T5849] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 97.925257][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 97.925272][ T30] audit: type=1400 audit(1754721514.550:258): avc: denied { remove_name } for pid=6377 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2568 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.963543][ T30] audit: type=1400 audit(1754721514.580:259): avc: denied { unlink } for pid=6377 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2568 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.266447][ C1] plantronics 0003:047F:FFFF.0005: hid_field_extract() called with n (132) > 32! (syz.4.152) [ 98.266802][ T30] audit: type=1400 audit(1754721514.890:260): avc: denied { ioctl } for pid=6329 comm="syz.4.152" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.484202][ T5849] usb 5-1: USB disconnect, device number 3 [ 98.703120][ T30] audit: type=1400 audit(1754721515.330:261): avc: denied { write } for pid=6397 comm="syz.0.168" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.778829][ T30] audit: type=1400 audit(1754721515.350:262): avc: denied { open } for pid=6397 comm="syz.0.168" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.799064][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.169'. [ 98.850885][ T30] audit: type=1400 audit(1754721515.470:263): avc: denied { read } for pid=6404 comm="syz.0.171" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.881119][ T32] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.881226][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.169'. [ 98.900214][ T32] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.917561][ T1156] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.965219][ T1156] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.998516][ T30] audit: type=1400 audit(1754721515.620:264): avc: denied { read write } for pid=6410 comm="syz.3.174" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 99.040543][ T5903] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.063011][ T30] audit: type=1400 audit(1754721515.620:265): avc: denied { open } for pid=6410 comm="syz.3.174" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 99.086212][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.095306][ T5916] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.222352][ T30] audit: type=1400 audit(1754721515.770:266): avc: denied { mount } for pid=6413 comm="syz.4.175" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 99.283383][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 99.288031][ T30] audit: type=1400 audit(1754721515.840:267): avc: denied { getopt } for pid=6414 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.290014][ T5916] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 99.371155][ T5916] usb 1-1: config 0 has no interface number 0 [ 99.380012][ T5916] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 99.394929][ T5916] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 99.405262][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.415171][ T5916] usb 1-1: Product: syz [ 99.422690][ T5916] usb 1-1: Manufacturer: syz [ 99.427792][ T5916] usb 1-1: SerialNumber: syz [ 99.457123][ T5916] usb 1-1: config 0 descriptor?? [ 99.687083][ T5916] usbtouchscreen 1-1:0.214: Failed to read FW rev: -32 [ 99.695411][ T5916] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 99.759667][ T5916] usb 1-1: USB disconnect, device number 3 [ 100.818991][ T5961] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.876128][ T6457] binder: 6456:6457 ioctl 4018620d 0 returned -22 [ 100.911801][ T6459] input: syz0 as /devices/virtual/input/input9 [ 101.038470][ T5961] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.081890][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.122019][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 101.149387][ T5961] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.177478][ T5961] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.186963][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.198056][ T5961] usb 1-1: config 0 descriptor?? [ 101.439423][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.199'. [ 101.631667][ T5961] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 101.655176][ T5961] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 101.822696][ T5903] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 101.996823][ T5903] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.028826][ T5903] usb 4-1: config 0 interface 0 has no altsetting 0 [ 102.044648][ T5903] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 102.062275][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.080922][ T5903] usb 4-1: config 0 descriptor?? [ 102.386138][ T6493] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.539168][ T5903] hid_parser_main: 7 callbacks suppressed [ 102.539191][ T5903] magicmouse 0003:05AC:0269.0008: unknown main item tag 0x0 [ 102.577421][ T5903] magicmouse 0003:05AC:0269.0008: unknown main item tag 0x0 [ 102.607866][ T5903] magicmouse 0003:05AC:0269.0008: unknown main item tag 0x0 [ 102.629443][ T5903] magicmouse 0003:05AC:0269.0008: unknown main item tag 0x0 [ 102.649593][ T5903] magicmouse 0003:05AC:0269.0008: unknown main item tag 0x0 [ 102.669767][ T5903] magicmouse 0003:05AC:0269.0008: unknown main item tag 0x0 [ 102.692172][ T5903] magicmouse 0003:05AC:0269.0008: unknown main item tag 0x0 [ 102.718921][ T5903] magicmouse 0003:05AC:0269.0008: hidraw1: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0 [ 102.766559][ T5903] usb 4-1: USB disconnect, device number 5 [ 102.920256][ T6504] fido_id[6504]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 102.946501][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 102.946516][ T30] audit: type=1400 audit(1754721519.570:276): avc: denied { read write } for pid=6505 comm="syz.1.211" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 103.046088][ T30] audit: type=1400 audit(1754721519.570:277): avc: denied { open } for pid=6505 comm="syz.1.211" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 103.388532][ T30] audit: type=1400 audit(1754721520.010:278): avc: denied { ioctl } for pid=6502 comm="syz.4.210" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10694 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 103.541679][ T30] audit: type=1400 audit(1754721520.160:279): avc: denied { write } for pid=6517 comm="syz.1.215" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 103.648721][ T30] audit: type=1400 audit(1754721520.190:280): avc: denied { map } for pid=6515 comm="syz.3.214" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.797032][ T5849] usb 1-1: USB disconnect, device number 4 [ 103.862699][ T30] audit: type=1400 audit(1754721520.480:281): avc: denied { mounton } for pid=6523 comm="syz.1.218" path="mnt:[4026533870]" dev="nsfs" ino=4026533870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 103.987516][ T6531] veth0: entered promiscuous mode [ 104.008829][ T6530] veth0: left promiscuous mode [ 104.138559][ T6534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.161540][ T30] audit: type=1400 audit(1754721520.780:282): avc: denied { map } for pid=6535 comm="syz.3.223" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 104.217433][ T30] audit: type=1400 audit(1754721520.780:283): avc: denied { execute } for pid=6535 comm="syz.3.223" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 104.782362][ T30] audit: type=1400 audit(1754721521.400:284): avc: denied { connect } for pid=6552 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.831480][ T30] audit: type=1400 audit(1754721521.400:285): avc: denied { block_suspend } for pid=6553 comm="syz.1.232" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.090446][ T6572] input: syz1 as /devices/virtual/input/input10 [ 105.790139][ T6606] netlink: 'syz.3.254': attribute type 1 has an invalid length. [ 105.874383][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'. [ 105.878830][ T6606] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.929746][ T6609] bond1: (slave geneve2): making interface the new active one [ 105.964265][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'. [ 106.002279][ T6609] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 106.048484][ T6618] netlink: 'syz.0.258': attribute type 1 has an invalid length. [ 106.592674][ T5961] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.714457][ T6651] process 'syz.2.272' launched './file0' with NULL argv: empty string added [ 106.753565][ T6651] No control pipe specified [ 106.759546][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.778362][ T6651] overlayfs: missing 'lowerdir' [ 106.787749][ T5961] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 106.810094][ T6649] kvm: kvm [6648]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 106.829582][ T5961] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 106.852782][ T6649] kvm: kvm [6648]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 106.862892][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.882628][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 106.927781][ T6655] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 106.933365][ T6649] kvm: kvm [6648]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 106.977212][ T6649] kvm: kvm [6648]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 107.003095][ T5961] usb 4-1: config 0 descriptor?? [ 107.040320][ T6649] kvm: kvm [6648]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 107.292776][ T5931] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 107.425256][ T5961] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 107.436141][ T5961] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 107.445261][ T5961] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 107.455374][ T5961] kovaplus 0003:1E7D:2D50.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 107.473894][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.485406][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.518638][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 107.540743][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.566308][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.613763][ T5931] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.629305][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.649006][ T5931] usb 3-1: config 0 descriptor?? [ 107.652852][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 107.657331][ T6660] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 107.666521][ T43] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 107.675870][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.684827][ T43] usb 5-1: Product: syz [ 107.689112][ T43] usb 5-1: Manufacturer: syz [ 107.694062][ T43] usb 5-1: SerialNumber: syz [ 107.704619][ T43] usb 5-1: config 0 descriptor?? [ 107.726324][ T43] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 107.841361][ T5961] kovaplus 0003:1E7D:2D50.0009: couldn't init struct kovaplus_device [ 107.860773][ T5961] kovaplus 0003:1E7D:2D50.0009: couldn't install mouse [ 107.908154][ T5961] kovaplus 0003:1E7D:2D50.0009: probe with driver kovaplus failed with error -32 [ 107.937235][ T5961] usb 4-1: USB disconnect, device number 6 [ 108.008964][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 108.008979][ T30] audit: type=1400 audit(1754721524.630:298): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 108.106845][ T5931] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 108.198535][ T6684] cgroup: fork rejected by pids controller in /syz1 [ 108.408373][ T30] audit: type=1400 audit(1754721525.030:299): avc: denied { sys_module } for pid=6690 comm="syz.0.287" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 108.676251][ T1156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.783417][ T5961] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 108.801151][ T1156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.923491][ T6702] loop6: detected capacity change from 0 to 524287999 [ 108.949406][ T1156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.972046][ T43] gspca_stk1135: reg_w 0xd err -71 [ 108.973110][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 108.991711][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 108.998736][ T5961] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 109.006732][ T43] gspca_stk1135: Sensor write failed [ 109.036993][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 109.042563][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.045126][ T43] gspca_stk1135: Sensor write failed [ 109.074938][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 109.083781][ T5961] usb 1-1: config 0 descriptor?? [ 109.094679][ T6698] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 109.116315][ T43] gspca_stk1135: Sensor read failed [ 109.130347][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 109.138076][ T43] gspca_stk1135: Sensor read failed [ 109.145003][ T1156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.166420][ T43] gspca_stk1135: Detected sensor type unknown (0x0) [ 109.186682][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 109.207958][ T43] gspca_stk1135: Sensor read failed [ 109.220282][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 109.243415][ T43] gspca_stk1135: Sensor read failed [ 109.265163][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 109.282286][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.290613][ T43] gspca_stk1135: Sensor write failed [ 109.297063][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.304396][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 109.314839][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.336358][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.341459][ T43] gspca_stk1135: Sensor write failed [ 109.352007][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.370758][ T43] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 109.384985][ T30] audit: type=1400 audit(1754721525.990:300): avc: denied { mounton } for pid=6705 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 109.468967][ T43] usb 5-1: USB disconnect, device number 4 [ 109.541357][ T1156] bridge_slave_1: left allmulticast mode [ 109.558997][ T1156] bridge_slave_1: left promiscuous mode [ 109.568457][ T5961] elan 0003:04F3:0755.000B: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 109.571507][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.661626][ T1156] bridge_slave_0: left allmulticast mode [ 109.675177][ T1156] bridge_slave_0: left promiscuous mode [ 109.697947][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.708501][ T30] audit: type=1400 audit(1754721526.330:301): avc: denied { ioctl } for pid=6709 comm="syz.3.294" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 109.732854][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.976970][ T30] audit: type=1400 audit(1754721526.600:302): avc: denied { write } for pid=6721 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.001158][ T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.174006][ T43] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 110.192419][ T43] usb 5-1: config 0 has no interface number 0 [ 110.208837][ T43] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 110.219307][ T30] audit: type=1400 audit(1754721526.830:303): avc: denied { connect } for pid=6725 comm="syz.3.299" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.236469][ T43] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 110.252376][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.271296][ T5903] usb 3-1: USB disconnect, device number 7 [ 110.274700][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.335074][ T43] usb 5-1: config 0 descriptor?? [ 110.342980][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.365589][ T43] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input13 [ 110.392044][ T1156] bond0 (unregistering): Released all slaves [ 111.022736][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.227902][ T6705] chnl_net:caif_netlink_parms(): no params data found [ 111.300962][ T30] audit: type=1400 audit(1754721527.920:304): avc: denied { watch watch_reads } for pid=6746 comm="syz.2.303" path=2F6D656D66643A2D42D54E49C56A9A08202864656C6574656429 dev="tmpfs" ino=1035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.385020][ T5931] usb 1-1: USB disconnect, device number 5 [ 111.426048][ T5854] Bluetooth: hci2: command tx timeout [ 111.460128][ T30] audit: type=1400 audit(1754721528.080:305): avc: denied { create } for pid=6751 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 111.499878][ T30] audit: type=1400 audit(1754721528.120:306): avc: denied { ioctl } for pid=6751 comm="syz.0.306" path="socket:[11603]" dev="sockfs" ino=11603 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 111.549852][ T30] audit: type=1400 audit(1754721528.150:307): avc: denied { write } for pid=6751 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 111.586321][ T5849] usb 5-1: USB disconnect, device number 5 [ 111.834472][ T1156] hsr_slave_0: left promiscuous mode [ 111.862852][ T1156] hsr_slave_1: left promiscuous mode [ 111.879835][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.908576][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.929505][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.937341][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.988689][ T1156] veth1_macvtap: left promiscuous mode [ 111.997335][ T1156] veth0_macvtap: left promiscuous mode [ 112.008613][ T1156] veth1_vlan: left promiscuous mode [ 112.026659][ T1156] veth0_vlan: left promiscuous mode [ 112.136551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.140250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.289114][ T6773] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.310'. [ 112.422143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.482969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.492617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 112.574528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.822142][ T6782] loop8: detected capacity change from 0 to 79 [ 112.924627][ T6782] loop8: detected capacity change from 79 to 78 [ 113.014277][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 113.014292][ T30] audit: type=1400 audit(1754721529.640:311): avc: denied { read } for pid=6785 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.109540][ T30] audit: type=1400 audit(1754721529.730:312): avc: denied { name_connect } for pid=6787 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 113.188416][ T30] audit: type=1400 audit(1754721529.810:313): avc: denied { shutdown } for pid=6787 comm="syz.3.317" lport=48017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.259840][ T30] audit: type=1400 audit(1754721529.880:314): avc: denied { read } for pid=6787 comm="syz.3.317" lport=48017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.466969][ T30] audit: type=1400 audit(1754721530.080:315): avc: denied { ioctl } for pid=6798 comm="syz.3.322" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 113.517101][ T5854] Bluetooth: hci2: command tx timeout [ 113.582319][ T30] audit: type=1400 audit(1754721530.180:316): avc: denied { watch watch_reads } for pid=6804 comm="syz.4.324" path="/58" dev="tmpfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 113.806366][ T6815] netlink: 51 bytes leftover after parsing attributes in process `syz.3.328'. [ 113.818697][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 113.957414][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 114.162600][ T92] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 114.356764][ T92] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 114.378927][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.390719][ T92] usb 3-1: Product: syz [ 114.396870][ T92] usb 3-1: Manufacturer: syz [ 114.425872][ T92] usb 3-1: SerialNumber: syz [ 114.469236][ T92] usb 3-1: config 0 descriptor?? [ 114.528337][ T6822] netlink: 'syz.0.331': attribute type 11 has an invalid length. [ 114.711548][ T92] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 114.934210][ T6705] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.941687][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.962814][ T6705] bridge_slave_0: entered allmulticast mode [ 114.973573][ T6705] bridge_slave_0: entered promiscuous mode [ 114.995030][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.997568][ T30] audit: type=1400 audit(1754721531.620:317): avc: denied { create } for pid=6835 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.002135][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.072274][ T30] audit: type=1400 audit(1754721531.650:318): avc: denied { write } for pid=6835 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.082748][ T6705] bridge_slave_1: entered allmulticast mode [ 115.135977][ T6705] bridge_slave_1: entered promiscuous mode [ 115.144168][ T30] audit: type=1400 audit(1754721531.650:319): avc: denied { nlmsg_write } for pid=6835 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.214170][ T30] audit: type=1400 audit(1754721531.650:320): avc: denied { name_connect } for pid=6835 comm="syz.3.335" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 115.286444][ T6849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.338'. [ 115.315418][ T6705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.370668][ T6705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.442016][ T6852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.338'. [ 115.492088][ T6852] nbd: nbd64 already in use [ 115.587765][ T5854] Bluetooth: hci2: command tx timeout [ 115.733932][ T92] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 115.761468][ T92] usb 3-1: USB disconnect, device number 8 [ 115.776735][ T6705] team0: Port device team_slave_0 added [ 115.813775][ T5855] udevd[5855]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 115.822015][ T6705] team0: Port device team_slave_1 added [ 115.922024][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.941916][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.978606][ T6705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.999426][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.014871][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.056918][ T6705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.132701][ T6877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.344'. [ 116.217523][ T6705] hsr_slave_0: entered promiscuous mode [ 116.278644][ T6705] hsr_slave_1: entered promiscuous mode [ 116.303701][ T6705] debugfs: 'hsr0' already exists in 'hsr' [ 116.319607][ T6705] Cannot create hsr debugfs directory [ 117.103117][ T5896] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 117.316964][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 117.351126][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.373359][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.385086][ T5896] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 117.413057][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.448021][ T5896] usb 1-1: config 0 descriptor?? [ 117.470337][ T5896] hub 1-1:0.0: USB hub found [ 117.662805][ T5854] Bluetooth: hci2: command tx timeout [ 117.674078][ T5896] hub 1-1:0.0: 1 port detected [ 118.008495][ T6923] overlayfs: failed to set uuid (59/file0, err=-1); falling back to uuid=null. [ 118.036230][ T6923] overlayfs: failed to verify upper root origin [ 118.207178][ T6705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 118.259430][ T6705] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 118.270758][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 118.270772][ T30] audit: type=1400 audit(1754721534.890:322): avc: denied { create } for pid=6926 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.313050][ T6705] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 118.331876][ T30] audit: type=1400 audit(1754721534.930:323): avc: denied { connect } for pid=6926 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.365539][ T6705] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 118.422639][ T5903] hub 1-1:0.0: activate --> -90 [ 118.427771][ T30] audit: type=1400 audit(1754721534.980:324): avc: denied { write } for pid=6926 comm="syz.2.358" laddr=172.20.20.170 lport=1 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.646561][ T6705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.705910][ T6705] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.730000][ T4883] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.737189][ T4883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.751683][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.758856][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.812770][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 118.832328][ T92] usb 1-1: USB disconnect, device number 6 [ 118.841537][ T6705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.983907][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.013619][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.026621][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.044220][ T5903] usb 1-1-port1: config error [ 119.060487][ T24] usb 3-1: config 0 descriptor?? [ 119.168636][ T6705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.237634][ T6705] veth0_vlan: entered promiscuous mode [ 119.258918][ T6705] veth1_vlan: entered promiscuous mode [ 119.303220][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 119.320432][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 119.327206][ T6705] veth0_macvtap: entered promiscuous mode [ 119.351961][ T24] usb 3-1: USB disconnect, device number 9 [ 119.367490][ T6705] veth1_macvtap: entered promiscuous mode [ 119.397514][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.408245][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.460070][ T1156] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.485174][ T1156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.528351][ T1156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.574745][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.830356][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.862665][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.903089][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 120.022330][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.033785][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.095955][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 120.105995][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.127665][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 120.168095][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.303360][ T24] usb 3-1: config 0 descriptor?? [ 120.325313][ T24] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 120.360397][ T24] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 120.617043][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 120.617046][ T9] usb 3-1: USB disconnect, device number 10 [ 120.629670][ T9] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 120.841970][ T6941] ldusb: No device or device unplugged -19 [ 120.843008][ T5961] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.031118][ T5961] usb 1-1: Using ep0 maxpacket: 16 [ 121.052392][ T5961] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 121.081980][ T5961] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.164705][ T5961] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.180246][ T5961] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.198089][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.207873][ T5961] usb 1-1: Product: syz [ 121.234381][ T5961] usb 1-1: Manufacturer: syz [ 121.245999][ T5961] usb 1-1: SerialNumber: syz [ 121.542108][ T30] audit: type=1400 audit(1754721538.160:325): avc: denied { search } for pid=7009 comm="syz.3.370" name="/" dev="configfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.570082][ T30] audit: type=1400 audit(1754721538.190:326): avc: denied { search } for pid=7009 comm="syz.3.370" name="/" dev="configfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.592051][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.649104][ T30] audit: type=1400 audit(1754721538.190:327): avc: denied { read open } for pid=7009 comm="syz.3.370" path="/" dev="configfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.684972][ T7014] veth0: entered promiscuous mode [ 121.691611][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 121.707036][ T30] audit: type=1400 audit(1754721538.190:328): avc: denied { create } for pid=7006 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.764590][ T5961] usb 1-1: 0:2 : does not exist [ 121.787110][ T30] audit: type=1400 audit(1754721538.190:329): avc: denied { connect } for pid=7006 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.806763][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.817852][ T30] audit: type=1400 audit(1754721538.190:330): avc: denied { bind } for pid=7006 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.905724][ T5903] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 122.114533][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 122.119787][ T30] audit: type=1400 audit(1754721538.700:331): avc: denied { write } for pid=7022 comm="syz.3.375" path="socket:[13003]" dev="sockfs" ino=13003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 122.132915][ T5903] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 122.143196][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.196896][ T5903] usb 2-1: config 0 has no interface number 0 [ 122.215718][ T5903] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.242262][ T5903] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 122.263528][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.290769][ T5903] usb 2-1: Product: syz [ 122.335445][ T5903] usb 2-1: Manufacturer: syz [ 122.376943][ T5903] usb 2-1: SerialNumber: syz [ 122.398535][ T5903] usb 2-1: config 0 descriptor?? [ 122.449548][ T5903] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 122.462184][ T5903] em28xx 2-1:0.132: Video interface 132 found: [ 122.596084][ T5961] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 122.822819][ T5961] usb 1-1: USB disconnect, device number 7 [ 122.858144][ T5903] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 122.902124][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.475743][ T5903] em28xx 2-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 123.492341][ T5903] em28xx 2-1:0.132: failed to read eeprom (err=-5) [ 123.513706][ T5903] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 123.593094][ T5903] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 123.618925][ T5903] em28xx 2-1:0.132: analog set to bulk mode. [ 123.641825][ T5896] em28xx 2-1:0.132: Registering V4L2 extension [ 123.687765][ T5903] usb 2-1: USB disconnect, device number 4 [ 123.724719][ T5903] em28xx 2-1:0.132: Disconnecting em28xx [ 123.992854][ T5896] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 124.016100][ T5896] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 124.030790][ T5896] em28xx 2-1:0.132: No AC97 audio processor [ 124.048371][ T5896] usb 2-1: Decoder not found [ 124.074562][ T5896] em28xx 2-1:0.132: failed to create media graph [ 124.113485][ T5896] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 124.132602][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.151132][ T5896] em28xx 2-1:0.132: Remote control support is not available for this card. [ 124.185366][ T5903] em28xx 2-1:0.132: Closing input extension [ 124.241946][ T5903] em28xx 2-1:0.132: Freeing device [ 124.292767][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 124.321023][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.349230][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.380905][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.411005][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.436005][ T24] usb 5-1: Product: syz [ 124.465976][ T24] usb 5-1: Manufacturer: syz [ 124.481002][ T24] usb 5-1: SerialNumber: syz [ 124.543112][ T5961] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 124.712551][ T5961] usb 3-1: Using ep0 maxpacket: 16 [ 124.728831][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.756671][ T5961] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.819608][ T5961] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 124.857992][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.868203][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 124.868219][ T30] audit: type=1400 audit(1754721541.480:335): avc: denied { append } for pid=7079 comm="syz.0.392" name="userio" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.913761][ T5961] usb 3-1: config 0 descriptor?? [ 124.970885][ T24] usb 5-1: 0:2 : does not exist [ 125.340224][ T5961] HID 045e:07da: Invalid code 65791 type 1 [ 125.351542][ T5961] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000C/input/input15 [ 125.417171][ T5961] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 125.639118][ T5849] usb 5-1: USB disconnect, device number 6 [ 125.683623][ T7049] syz.3.383 (7049): drop_caches: 2 [ 125.715805][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.359996][ T24] usb 3-1: USB disconnect, device number 11 [ 126.940398][ T30] audit: type=1400 audit(1754721543.560:336): avc: denied { bind } for pid=7113 comm="syz.0.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.969276][ T5849] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.123991][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.147793][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.179071][ T5849] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 127.211437][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.231141][ T5849] usb 5-1: config 0 descriptor?? [ 127.236301][ T5931] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 127.276262][ T7126] overlayfs: failed lookup in lower (newroot/10, name='bus', err=-40): overlapping layers [ 127.416781][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.440133][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.452985][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.490779][ T5931] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.501466][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.522832][ T5931] usb 3-1: config 0 descriptor?? [ 127.553104][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 127.583032][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 127.691802][ T5849] hid_mf 0003:0079:1846.000D: item fetching failed at offset 10/11 [ 127.707827][ T5849] hid_mf 0003:0079:1846.000D: HID parse failed. [ 127.717568][ T5849] hid_mf 0003:0079:1846.000D: probe with driver hid_mf failed with error -22 [ 127.733549][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.747664][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.760801][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 127.763484][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 127.773782][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.787790][ T9] usb 1-1: config 0 descriptor?? [ 127.798074][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 127.812652][ T24] usb 4-1: config 179 has no interface number 0 [ 127.830630][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 127.846422][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 127.857937][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.870602][ T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 127.883910][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 127.893255][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.922896][ T7129] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 127.944217][ T7104] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.964932][ T5931] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 127.988342][ T5961] usb 5-1: USB disconnect, device number 7 [ 128.023532][ T5931] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 128.220344][ T9] lua 0003:1E7D:2C2E.000F: item fetching failed at offset 4/5 [ 128.232356][ T9] lua 0003:1E7D:2C2E.000F: parse failed [ 128.234739][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input16 [ 128.238880][ T9] lua 0003:1E7D:2C2E.000F: probe with driver lua failed with error -22 [ 128.259122][ T5961] usb 3-1: USB disconnect, device number 12 [ 128.437129][ T9] usb 4-1: USB disconnect, device number 7 [ 128.437173][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 128.452384][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 128.477188][ T5961] usb 1-1: USB disconnect, device number 8 [ 128.551033][ T30] audit: type=1400 audit(1754721545.170:337): avc: denied { create } for pid=7147 comm="syz.4.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 128.606624][ T30] audit: type=1400 audit(1754721545.230:338): avc: denied { bind } for pid=7149 comm="syz.4.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 128.668818][ T30] audit: type=1400 audit(1754721545.290:339): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 129.102863][ T30] audit: type=1400 audit(1754721545.710:340): avc: denied { mounton } for pid=7162 comm="syz.0.431" path="/106/file0" dev="tmpfs" ino=562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.146262][ T5961] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 129.206176][ T30] audit: type=1400 audit(1754721545.820:341): avc: denied { create } for pid=7166 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 129.272545][ T30] audit: type=1400 audit(1754721545.840:342): avc: denied { setopt } for pid=7166 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 129.335930][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.361444][ T7173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.381324][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.430258][ T5961] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.489366][ T5961] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.505741][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.529085][ T5961] usb 3-1: config 0 descriptor?? [ 129.542948][ T7179] binder: 7178:7179 ioctl 4018620d 0 returned -22 [ 129.570937][ T7179] binder: 7178:7179 ioctl c0306201 200000000640 returned -22 [ 129.765540][ T30] audit: type=1400 audit(1754721546.390:343): avc: denied { bind } for pid=7185 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.967947][ T5961] hid_parser_main: 2 callbacks suppressed [ 129.967969][ T5961] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 130.032553][ T5961] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 130.069786][ T5961] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 130.080985][ T5961] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 130.089746][ T5961] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 130.099201][ T5961] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 130.120545][ T5961] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 130.273665][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'. [ 130.339646][ T30] audit: type=1400 audit(1754721546.960:344): avc: denied { bind } for pid=7207 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.467170][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 130.493251][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 130.503304][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 130.503331][ T4883] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.528035][ T4883] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.555700][ T4883] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.565608][ T4883] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.674447][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.691212][ T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 130.716844][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.760649][ T24] usb 5-1: config 0 descriptor?? [ 130.852948][ T5903] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 130.982585][ T5961] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.992679][ T92] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 131.022719][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 131.029665][ T5903] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 131.037913][ T5903] usb 4-1: config 0 has no interface number 0 [ 131.047171][ T5903] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 131.056348][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.064469][ T5903] usb 4-1: Product: syz [ 131.068688][ T5903] usb 4-1: Manufacturer: syz [ 131.073498][ T5903] usb 4-1: SerialNumber: syz [ 131.080141][ T5903] usb 4-1: config 0 descriptor?? [ 131.089839][ T5903] smsc95xx v2.0.0 [ 131.134268][ T5961] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 131.143495][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.156891][ T5961] usb 2-1: config 0 descriptor?? [ 131.162086][ T92] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.170983][ T92] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 131.183601][ T92] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.192813][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 131.203928][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 131.204611][ T24] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 131.216700][ T92] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.233075][ T92] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.241113][ T92] usb 1-1: Product: syz [ 131.245384][ T92] usb 1-1: Manufacturer: syz [ 131.253175][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0011/input/input17 [ 131.276040][ T92] cdc_wdm 1-1:1.0: skipping garbage [ 131.281281][ T92] cdc_wdm 1-1:1.0: skipping garbage [ 131.293037][ T92] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 131.299052][ T92] cdc_wdm 1-1:1.0: Unknown control protocol [ 131.368562][ T24] keytouch 0003:0926:3333.0011: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 131.500297][ T24] usb 1-1: USB disconnect, device number 9 [ 131.981811][ T5931] usb 5-1: USB disconnect, device number 8 [ 132.093616][ T9] usb 3-1: USB disconnect, device number 13 [ 132.157356][ T5896] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 132.216331][ T5961] usb 2-1: Cannot set autoneg [ 132.221466][ T5961] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 132.301554][ T5903] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 132.312697][ T5903] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 132.322217][ T5903] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 132.334506][ T5903] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 132.343274][ T5896] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.356303][ T5903] usb 4-1: USB disconnect, device number 8 [ 132.362435][ T5896] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 132.375905][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.387824][ T5896] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 132.398936][ T5896] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 132.413062][ T5896] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.432936][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.436770][ T9] usb 2-1: USB disconnect, device number 5 [ 132.440956][ T5896] usb 1-1: Product: syz [ 132.440981][ T5896] usb 1-1: Manufacturer: syz [ 132.468240][ T5896] cdc_wdm 1-1:1.0: skipping garbage [ 132.473487][ T5896] cdc_wdm 1-1:1.0: skipping garbage [ 132.481426][ T5896] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 132.487935][ T5896] cdc_wdm 1-1:1.0: Unknown control protocol [ 132.678172][ T9] usb 1-1: USB disconnect, device number 10 [ 133.532566][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 133.585454][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.468'. [ 133.742688][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 133.749124][ T7257] ======================================================= [ 133.749124][ T7257] WARNING: The mand mount option has been deprecated and [ 133.749124][ T7257] and is ignored by this kernel. Remove the mand [ 133.749124][ T7257] option from the mount to silence this warning. [ 133.749124][ T7257] ======================================================= [ 133.761699][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 133.784040][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.842110][ T30] audit: type=1400 audit(1754721550.460:345): avc: denied { mount } for pid=7255 comm="syz.1.469" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 133.888913][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.909643][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.934604][ T30] audit: type=1400 audit(1754721550.490:346): avc: denied { mounton } for pid=7255 comm="syz.1.469" path="/29/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 133.956908][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 133.956935][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 133.997097][ T30] audit: type=1400 audit(1754721550.620:347): avc: denied { unmount } for pid=6705 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 134.005592][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 134.061098][ T7264] hub 2-0:1.0: USB hub found [ 134.072710][ T7264] hub 2-0:1.0: 1 port detected [ 134.088635][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.099366][ T9] usb 5-1: config 0 descriptor?? [ 134.121506][ T5854] Bluetooth: hci5: urb ffff888059317500 submission failed (90) [ 134.152653][ T5896] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 134.187434][ T30] audit: type=1400 audit(1754721550.810:348): avc: denied { transition } for pid=7267 comm="syz.3.475" path="/97/file0" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 134.218930][ T30] audit: type=1400 audit(1754721550.810:349): avc: denied { entrypoint } for pid=7267 comm="syz.3.475" path="/97/file0" dev="tmpfs" ino=523 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.250041][ T5903] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 134.258050][ T30] audit: type=1400 audit(1754721550.810:350): avc: denied { share } for pid=7267 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 134.278590][ T30] audit: type=1400 audit(1754721550.810:351): avc: denied { noatsecure } for pid=7267 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 134.300871][ T30] audit: type=1400 audit(1754721550.870:352): avc: denied { connect } for pid=7270 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.332579][ T30] audit: type=1400 audit(1754721550.870:353): avc: denied { setopt } for pid=7270 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.351940][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 134.357531][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.368355][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 134.386090][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.401588][ T5896] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 134.407900][ T9] usb 5-1: USB disconnect, device number 9 [ 134.411150][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.429887][ T5896] usb 3-1: Product: syz [ 134.444538][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 134.450311][ T5896] usb 3-1: Manufacturer: syz [ 134.455227][ T5896] usb 3-1: SerialNumber: syz [ 134.461214][ T5903] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 134.471505][ T5903] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.483433][ T5903] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.496140][ T5896] usb 3-1: config 0 descriptor?? [ 134.504897][ T5903] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.516161][ T5896] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 134.526862][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.535689][ T5903] usb 1-1: Product: syz [ 134.540117][ T5896] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 134.550111][ T5903] usb 1-1: Manufacturer: syz [ 134.555499][ T24] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.569357][ T5903] usb 1-1: SerialNumber: syz [ 134.575337][ T24] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.586893][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 134.594740][ T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 134.604354][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.623597][ T24] usb 2-1: config 0 descriptor?? [ 134.706791][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.717655][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.023167][ T5903] usb 1-1: 0:2 : does not exist [ 135.126903][ T5896] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 135.146082][ T5896] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 135.153278][ T5916] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 135.250028][ T24] usb 2-1: string descriptor 0 read error: -22 [ 135.316622][ T5916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.332132][ T5916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.349823][ T5916] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 135.367515][ T5896] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 135.386199][ T5896] em28xx 3-1:0.0: No AC97 audio processor [ 135.397130][ T5916] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.410592][ T5896] usb 3-1: USB disconnect, device number 14 [ 135.417071][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.425525][ T5854] Bluetooth: hci2: command tx timeout [ 135.434360][ T5916] usb 4-1: Product: syz [ 135.438668][ T5916] usb 4-1: Manufacturer: syz [ 135.444389][ T5916] usb 4-1: SerialNumber: syz [ 135.450261][ T5896] em28xx 3-1:0.0: Disconnecting em28xx [ 135.458687][ T24] uclogic 0003:256C:006D.0012: interface is invalid, ignoring [ 135.477789][ T5896] em28xx 3-1:0.0: Freeing device [ 135.493137][ T24] usb 2-1: USB disconnect, device number 6 [ 135.521787][ T7294] input: syz0 as /devices/virtual/input/input18 [ 135.686516][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 135.689225][ T7281] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.840387][ T9] usb 1-1: USB disconnect, device number 11 [ 136.113019][ T92] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 136.282705][ T92] usb 5-1: Using ep0 maxpacket: 32 [ 136.485620][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 136.485636][ T30] audit: type=1400 audit(1754721553.110:361): avc: denied { create } for pid=7325 comm="syz.0.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 136.528076][ T7281] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 136.573322][ T92] usb 5-1: unable to get BOS descriptor or descriptor too short [ 136.594921][ T92] usb 5-1: no configurations [ 136.599548][ T92] usb 5-1: can't read configurations, error -22 [ 136.757125][ T5916] cdc_ncm 4-1:1.0: bind() failure [ 136.802414][ T5916] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 136.816487][ T5916] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 136.830623][ T5916] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 136.876643][ T5916] usb 4-1: USB disconnect, device number 9 [ 136.919900][ T30] audit: type=1400 audit(1754721553.540:362): avc: denied { mounton } for pid=7338 comm="syz.1.504" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 136.991016][ T30] audit: type=1400 audit(1754721553.610:363): avc: denied { unmount } for pid=6705 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 137.201943][ T30] audit: type=1400 audit(1754721553.820:364): avc: denied { create } for pid=7345 comm="syz.4.507" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 137.244140][ T7346] 9pnet: p9_errstr2errno: server reported unknown error aaaaaa [ 137.323057][ T30] audit: type=1400 audit(1754721553.920:365): avc: denied { unlink } for pid=5844 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 137.446664][ T30] audit: type=1400 audit(1754721554.060:366): avc: denied { bind } for pid=7351 comm="syz.4.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.469389][ T30] audit: type=1400 audit(1754721554.060:367): avc: denied { node_bind } for pid=7351 comm="syz.4.510" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 137.757142][ T30] audit: type=1400 audit(1754721554.380:368): avc: denied { bind } for pid=7373 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.778594][ T7374] netlink: 'syz.0.517': attribute type 39 has an invalid length. [ 137.790690][ T30] audit: type=1400 audit(1754721554.380:369): avc: denied { node_bind } for pid=7373 comm="syz.0.517" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 138.120166][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'. [ 138.149212][ T7389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.201438][ T7389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.211748][ T7389] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 138.223729][ T7389] bond2: (slave vcan1): Error -95 calling set_mac_address [ 138.302671][ T5896] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 138.501497][ T7402] netlink: 'syz.3.527': attribute type 12 has an invalid length. [ 138.523659][ T5896] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.533483][ T7402] netlink: 'syz.3.527': attribute type 29 has an invalid length. [ 138.533503][ T7402] netlink: 148 bytes leftover after parsing attributes in process `syz.3.527'. [ 138.534365][ T7402] netlink: 'syz.3.527': attribute type 3 has an invalid length. [ 138.562169][ T5896] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.599522][ T7404] loop6: detected capacity change from 0 to 7 [ 138.612832][ T5896] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.632003][ T7404] Dev loop6: unable to read RDB block 7 [ 138.639047][ T7402] netlink: 'syz.3.527': attribute type 2 has an invalid length. [ 138.642622][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.655013][ T30] audit: type=1400 audit(1754721555.280:370): avc: denied { bind } for pid=7405 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.671099][ T7402] netlink: 35 bytes leftover after parsing attributes in process `syz.3.527'. [ 138.674578][ T7404] loop6: unable to read partition table [ 138.690614][ T7404] loop6: partition table beyond EOD, truncated [ 138.698702][ T7404] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 138.913689][ T5896] usb 1-1: usb_control_msg returned -32 [ 138.919336][ T5896] usbtmc 1-1:16.0: can't read capabilities [ 138.989166][ T7416] kvm: kvm [7415]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x200000000500 [ 139.412884][ T5896] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 139.462678][ T92] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 139.562680][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 139.572283][ T5896] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 139.585891][ T5896] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 139.596248][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 139.606275][ T5896] usb 5-1: Product: syz [ 139.610614][ T5896] usb 5-1: Manufacturer: syz [ 139.620028][ T5896] usb 5-1: SerialNumber: syz [ 139.632582][ T92] usb 4-1: Using ep0 maxpacket: 32 [ 139.644273][ T5896] usb 5-1: config 0 descriptor?? [ 139.645172][ T92] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.652022][ T7431] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 139.689627][ T92] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 139.712266][ T92] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.727842][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.738572][ T92] usb 4-1: Product: syz [ 139.742984][ T92] usb 4-1: Manufacturer: syz [ 139.748394][ T92] usb 4-1: SerialNumber: syz [ 139.802252][ T7447] loop2: detected capacity change from 0 to 7 [ 139.835116][ T7447] Dev loop2: unable to read RDB block 7 [ 139.840984][ T7447] loop2: unable to read partition table [ 139.847036][ T7447] loop2: partition table beyond EOD, truncated [ 139.854800][ T7447] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 139.968217][ T7434] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 139.980490][ T7431] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 140.017799][ T5931] usb 5-1: USB disconnect, device number 12 [ 140.262619][ T5896] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 140.424364][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.441873][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.455574][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.472645][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.475317][ T5896] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 140.496878][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.507990][ T5896] usb 2-1: config 0 descriptor?? [ 140.592241][ T7434] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 140.808428][ T92] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 140.821591][ T92] cdc_ncm 4-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 140.842283][ T92] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 140.941385][ T5896] chicony 0003:04F2:1421.0013: item fetching failed at offset 1/5 [ 140.958078][ T5896] chicony 0003:04F2:1421.0013: Chicony hid parse failed: -22 [ 140.967315][ T5896] chicony 0003:04F2:1421.0013: probe with driver chicony failed with error -22 [ 141.016029][ T92] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 141.038412][ T92] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 141.059910][ T92] usb 4-1: USB disconnect, device number 10 [ 141.075809][ T92] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 141.095386][ T5896] usb 1-1: USB disconnect, device number 12 [ 141.165187][ T9] usb 2-1: USB disconnect, device number 7 [ 141.549751][ T4883] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.645661][ T4883] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.764769][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 141.793597][ T4883] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.935061][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 141.954147][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.975130][ T4883] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.988733][ T9] usb 3-1: config 0 has no interfaces? [ 142.003820][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 142.032600][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.082646][ T9] usb 3-1: config 0 descriptor?? [ 142.107865][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.121519][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.131244][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.153382][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.162659][ T5903] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 142.171273][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.287804][ T4883] bridge_slave_1: left allmulticast mode [ 142.302545][ T4883] bridge_slave_1: left promiscuous mode [ 142.313417][ T4883] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.332241][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 142.332257][ T30] audit: type=1400 audit(1754721558.950:380): avc: denied { append } for pid=7482 comm="syz.2.563" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 142.393183][ T5903] usb 2-1: unable to get BOS descriptor or descriptor too short [ 142.401870][ T4883] bridge_slave_0: left allmulticast mode [ 142.411154][ T5903] usb 2-1: not running at top speed; connect to a high speed hub [ 142.419268][ T4883] bridge_slave_0: left promiscuous mode [ 142.423568][ T5903] usb 2-1: config 13 has an invalid interface number: 90 but max is 0 [ 142.437962][ T5903] usb 2-1: config 13 has no interface number 0 [ 142.452738][ T5903] usb 2-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 142.476747][ T5903] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7 [ 142.486322][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.492457][ T9] usb 3-1: USB disconnect, device number 15 [ 142.500542][ T5903] usb 2-1: Product: syz [ 142.513540][ T5903] usb 2-1: Manufacturer: syz [ 142.516380][ T4883] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.522827][ T5903] usb 2-1: SerialNumber: syz [ 142.665322][ T92] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 142.768825][ T5903] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 142.821211][ T5903] usb 2-1: USB disconnect, device number 8 [ 142.843213][ T92] usb 5-1: Using ep0 maxpacket: 32 [ 142.858547][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.880832][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.891370][ T92] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 142.919720][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.948077][ T92] usb 5-1: config 0 descriptor?? [ 143.128584][ T4883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.140607][ T4883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.163329][ T4883] bond0 (unregistering): Released all slaves [ 143.381899][ T92] ft260 0003:0403:6030.0014: unknown main item tag 0x7 [ 143.558761][ T30] audit: type=1400 audit(1754721560.180:381): avc: denied { listen } for pid=7538 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.579016][ T92] ft260 0003:0403:6030.0014: chip code: 6424 8183 [ 143.595415][ T30] audit: type=1400 audit(1754721560.220:382): avc: denied { read } for pid=7538 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.770182][ T7544] binder: 7543:7544 ioctl c0306201 200000000000 returned -14 [ 143.779681][ T92] ft260 0003:0403:6030.0014: uart interface is not supported [ 143.871860][ T7502] chnl_net:caif_netlink_parms(): no params data found [ 143.988981][ T9] usb 5-1: USB disconnect, device number 13 [ 144.026996][ T4883] hsr_slave_0: left promiscuous mode [ 144.040975][ T4883] hsr_slave_1: left promiscuous mode [ 144.059728][ T4883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.082876][ T4883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.137388][ T4883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.175546][ T4883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.232791][ T51] Bluetooth: hci3: command tx timeout [ 144.329560][ T4883] veth1_macvtap: left promiscuous mode [ 144.374937][ T4883] veth0_macvtap: left promiscuous mode [ 144.380581][ T4883] veth1_vlan: left promiscuous mode [ 144.399499][ T30] audit: type=1400 audit(1754721561.010:383): avc: denied { listen } for pid=7573 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.427154][ T4883] veth0_vlan: left promiscuous mode [ 144.702698][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 144.886613][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.908390][ T9] usb 4-1: config 0 has no interfaces? [ 144.920040][ T9] usb 4-1: New USB device found, idVendor=0411, idProduct=000a, bcdDevice=6d.d9 [ 144.938795][ T9] usb 4-1: New USB device strings: Mfr=246, Product=0, SerialNumber=0 [ 144.964424][ T9] usb 4-1: Manufacturer: syz [ 144.982374][ T9] usb 4-1: config 0 descriptor?? [ 145.275255][ T5916] usb 4-1: USB disconnect, device number 11 [ 145.422144][ T4883] team0 (unregistering): Port device team_slave_1 removed [ 145.454752][ T4883] team0 (unregistering): Port device team_slave_0 removed [ 146.105866][ T7615] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 146.117149][ T5903] IPVS: starting estimator thread 0... [ 146.238679][ T7620] IPVS: using max 74 ests per chain, 177600 per kthread [ 146.302737][ T51] Bluetooth: hci3: command tx timeout [ 146.692437][ T7638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.736050][ T7502] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.743719][ T7502] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.755416][ T7502] bridge_slave_0: entered allmulticast mode [ 146.768690][ T7502] bridge_slave_0: entered promiscuous mode [ 146.776826][ T7502] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.783968][ T7502] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.791167][ T7502] bridge_slave_1: entered allmulticast mode [ 146.799117][ T7502] bridge_slave_1: entered promiscuous mode [ 146.988517][ T5903] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 147.008683][ T7502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.036557][ T7502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.102578][ T5916] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 147.144879][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 147.169835][ T7502] team0: Port device team_slave_0 added [ 147.193873][ T5903] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.206514][ T7502] team0: Port device team_slave_1 added [ 147.218683][ T5903] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.246415][ T5903] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.265534][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.308863][ T5903] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.332233][ T5916] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 147.346153][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.355156][ T5903] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.372564][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.381848][ T5916] usb 5-1: config 0 descriptor?? [ 147.403976][ T7502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.426370][ T7502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.477045][ T7502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.521475][ T7502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.528616][ T7502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.557063][ T7502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.609703][ T5916] usbhid 5-1:0.0: can't add hid device: -71 [ 147.616939][ T5916] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 147.628096][ T5903] usb 4-1: GET_CAPABILITIES returned 0 [ 147.640237][ T5903] usbtmc 4-1:16.0: can't read capabilities [ 147.673164][ T5916] usb 5-1: USB disconnect, device number 14 [ 147.780929][ T7502] hsr_slave_0: entered promiscuous mode [ 147.799447][ T7502] hsr_slave_1: entered promiscuous mode [ 147.811842][ T7502] debugfs: 'hsr0' already exists in 'hsr' [ 147.820383][ T7502] Cannot create hsr debugfs directory [ 147.854191][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.880042][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.889148][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.898234][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.907338][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.916417][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.937729][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.945781][ T5849] usb 4-1: USB disconnect, device number 12 [ 148.132574][ T5916] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 148.303117][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 148.336071][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.367707][ T5916] usb 5-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 148.384169][ T51] Bluetooth: hci3: command tx timeout [ 148.422604][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.459473][ T5916] usb 5-1: config 0 descriptor?? [ 148.547200][ T7502] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.569628][ T7502] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.601150][ T7502] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.636038][ T7502] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.734940][ T5903] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 148.801608][ T7502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.831564][ T7502] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.888546][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.895708][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.922855][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 148.930990][ T5916] logitech-djreceiver 0003:046D:C714.0015: hidraw0: USB HID v0.05 Device [HID 046d:c714] on usb-dummy_hcd.4-1/input0 [ 148.954697][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.973461][ T4883] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.980658][ T4883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.002678][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 97, changing to 10 [ 149.022810][ T5849] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 149.032339][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24929, setting to 1024 [ 149.108069][ T5903] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 149.112540][ T30] audit: type=1400 audit(1754721565.730:384): avc: denied { listen } for pid=7706 comm="syz.1.626" path=2F37332FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 149.122192][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.198780][ T5903] usb 3-1: Product: syz [ 149.214979][ T5903] usb 3-1: Manufacturer: syz [ 149.232677][ T5903] usb 3-1: SerialNumber: syz [ 149.236575][ T5849] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 149.259704][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.264255][ T5903] usb 3-1: config 0 descriptor?? [ 149.286510][ T5916] usb 5-1: USB disconnect, device number 15 [ 149.290729][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.361173][ T5849] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 149.409891][ T30] audit: type=1400 audit(1754721566.030:385): avc: denied { mount } for pid=7715 comm="syz.1.628" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 149.424000][ T5903] rc_core: IR keymap rc-streamzap not found [ 149.458266][ T5903] Registered IR keymap rc-empty [ 149.464666][ T5849] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 149.485456][ T5903] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 149.492535][ T5849] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 149.512859][ T30] audit: type=1400 audit(1754721566.040:386): avc: denied { mounton } for pid=7715 comm="syz.1.628" path="/75/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 149.529494][ T5903] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input21 [ 149.543784][ T5849] usb 4-1: Manufacturer: syz [ 149.555568][ T5849] usb 4-1: config 0 descriptor?? [ 149.585692][ T30] audit: type=1400 audit(1754721566.060:387): avc: denied { read } for pid=7715 comm="syz.1.628" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 149.653227][ T5903] usb 3-1: USB disconnect, device number 16 [ 149.684587][ T30] audit: type=1400 audit(1754721566.060:388): avc: denied { open } for pid=7715 comm="syz.1.628" path="/75/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 149.686850][ T7502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.792645][ T30] audit: type=1400 audit(1754721566.060:389): avc: denied { read } for pid=7715 comm="syz.1.628" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 149.879571][ T30] audit: type=1400 audit(1754721566.080:390): avc: denied { read } for pid=7715 comm="syz.1.628" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 149.939634][ T7728] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 149.958459][ T30] audit: type=1400 audit(1754721566.210:391): avc: denied { unmount } for pid=6705 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 149.991366][ T5849] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 150.020801][ T5849] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 150.044818][ T7731] syzkaller1: entered promiscuous mode [ 150.056990][ T7731] syzkaller1: entered allmulticast mode [ 150.296253][ T30] audit: type=1400 audit(1754721566.920:392): avc: denied { append } for pid=7697 comm="syz.3.624" name="hiddev0" dev="devtmpfs" ino=3071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 150.319686][ T7502] veth0_vlan: entered promiscuous mode [ 150.462938][ T51] Bluetooth: hci3: command tx timeout [ 150.561840][ T7502] veth1_vlan: entered promiscuous mode [ 150.694787][ T7502] veth0_macvtap: entered promiscuous mode [ 150.715433][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 150.728609][ T7502] veth1_macvtap: entered promiscuous mode [ 150.798839][ T7502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.855728][ T7502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.879225][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.894009][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 150.918989][ T9] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 150.932415][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.948731][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.959395][ T9] usb 5-1: Product: syz [ 150.963961][ T9] usb 5-1: Manufacturer: syz [ 150.971659][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.990428][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.999841][ T9] usb 5-1: SerialNumber: syz [ 151.129689][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.155109][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.207458][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.230337][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.431416][ T9] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 151.496531][ T9] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 151.532662][ T9] usb 5-1: USB disconnect, device number 16 [ 152.203991][ T7798] mmap: syz.5.646 (7798) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 152.224703][ T7799] netlink: 'syz.1.645': attribute type 12 has an invalid length. [ 152.230777][ T92] usb 4-1: USB disconnect, device number 13 [ 152.236977][ T7799] netlink: 'syz.1.645': attribute type 29 has an invalid length. [ 152.255572][ T7799] netlink: 148 bytes leftover after parsing attributes in process `syz.1.645'. [ 152.317679][ T7799] netlink: 'syz.1.645': attribute type 2 has an invalid length. [ 152.346999][ T7799] netlink: 23 bytes leftover after parsing attributes in process `syz.1.645'. [ 152.351808][ T30] audit: type=1400 audit(1754721568.970:393): avc: denied { bind } for pid=7805 comm="syz.3.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 152.392911][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 152.428836][ T7803] netlink: 'syz.1.645': attribute type 12 has an invalid length. [ 152.454395][ T7803] netlink: 'syz.1.645': attribute type 29 has an invalid length. [ 152.466280][ T7803] netlink: 148 bytes leftover after parsing attributes in process `syz.1.645'. [ 152.496337][ T7803] netlink: 'syz.1.645': attribute type 2 has an invalid length. [ 152.527231][ T7803] netlink: 23 bytes leftover after parsing attributes in process `syz.1.645'. [ 152.568876][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.595140][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 152.633421][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 152.653876][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.678429][ T7795] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 152.695957][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.995838][ T9] usb 5-1: USB disconnect, device number 17 [ 153.532988][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 153.712691][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 153.730731][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.755551][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.769162][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 153.817845][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 153.848025][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.907762][ T9] usb 2-1: config 0 descriptor?? [ 153.913756][ T5896] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 154.102613][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 154.122054][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.136990][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.149926][ T5896] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 154.159626][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.183658][ T5896] usb 4-1: config 0 descriptor?? [ 154.193979][ T5896] hub 4-1:0.0: USB hub found [ 154.340481][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 154.374064][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0017/input/input22 [ 154.410513][ T5896] hub 4-1:0.0: 1 port detected [ 154.430481][ T9] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 154.743143][ T5916] usb 2-1: USB disconnect, device number 9 [ 154.766083][ T7857] fido_id[7857]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 154.972191][ T7867] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.670'. [ 155.001973][ T7867] netlink: 6320 bytes leftover after parsing attributes in process `syz.5.670'. [ 155.051876][ T5896] hub 4-1:0.0: activate --> -90 [ 155.259794][ T5896] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 155.563164][ T5896] usb 4-1: USB disconnect, device number 14 [ 155.565504][ T30] audit: type=1400 audit(1754721572.190:394): avc: denied { watch_mount } for pid=7888 comm="syz.1.681" path="/90" dev="tmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 155.591152][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.341581][ T7936] netlink: 'syz.3.702': attribute type 1 has an invalid length. [ 156.368618][ T7936] netlink: 128 bytes leftover after parsing attributes in process `syz.3.702'. [ 156.378919][ T7936] netlink: 'syz.3.702': attribute type 2 has an invalid length. [ 156.390436][ T7936] netlink: 'syz.3.702': attribute type 1 has an invalid length. [ 157.157175][ T30] audit: type=1400 audit(1754721573.780:395): avc: denied { module_request } for pid=7947 comm="syz.1.708" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 157.182617][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 157.349131][ T30] audit: type=1400 audit(1754721573.970:396): avc: denied { write } for pid=7953 comm="syz.5.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 158.071505][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'. [ 158.285891][ T7990] [ 158.288256][ T7990] ===================================================== [ 158.295191][ T7990] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 158.302704][ T7990] 6.16.0-syzkaller-12187-g0227b49b5027 #0 Not tainted [ 158.309451][ T7990] ----------------------------------------------------- [ 158.316355][ T7990] syz.3.724/7990 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 158.323919][ T7990] ffffffff8e20c098 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0xed/0xc80 [ 158.332511][ T7990] [ 158.332511][ T7990] and this task is already holding: [ 158.339846][ T7990] ffff8880322e1f20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 158.348527][ T7990] which would create a new lock dependency: [ 158.354404][ T7990] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 158.361943][ T7990] [ 158.361943][ T7990] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 158.371360][ T7990] (&client->buffer_lock){..-.}-{3:3} [ 158.371377][ T7990] [ 158.371377][ T7990] ... which became SOFTIRQ-irq-safe at: [ 158.384391][ T7990] lock_acquire+0x179/0x350 [ 158.388974][ T7990] _raw_spin_lock+0x2e/0x40 [ 158.393554][ T7990] evdev_pass_values+0x10e/0x9b0 [ 158.398562][ T7990] evdev_events+0x1bb/0x390 [ 158.403135][ T7990] input_pass_values+0x74e/0x880 [ 158.408145][ T7990] input_handle_event+0xb29/0x14d0 [ 158.413318][ T7990] input_event+0x8e/0xd0 [ 158.417622][ T7990] hidinput_hid_event+0x1d55/0x2420 [ 158.422880][ T7990] hid_process_event+0x4b7/0x5e0 [ 158.427882][ T7990] hid_report_raw_event+0xa0a/0x1290 [ 158.433231][ T7990] __hid_input_report.constprop.0+0x33f/0x450 [ 158.439360][ T7990] hid_irq_in+0x35e/0x870 [ 158.443750][ T7990] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 158.449211][ T7990] usb_hcd_giveback_urb+0x39b/0x450 [ 158.454469][ T7990] dummy_timer+0x1814/0x3a30 [ 158.459128][ T7990] __hrtimer_run_queues+0x202/0xad0 [ 158.464393][ T7990] hrtimer_run_softirq+0x17d/0x350 [ 158.469565][ T7990] handle_softirqs+0x216/0x8e0 [ 158.474396][ T7990] __irq_exit_rcu+0x109/0x170 [ 158.479133][ T7990] irq_exit_rcu+0x9/0x30 [ 158.483435][ T7990] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 158.489136][ T7990] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 158.495184][ T7990] debug_lockdep_rcu_enabled+0x14/0x40 [ 158.500704][ T7990] __might_resched+0x5d/0x5e0 [ 158.505453][ T7990] __wait_for_common+0x90/0x4e0 [ 158.510367][ T7990] wait_for_completion_interruptible+0x1f/0x40 [ 158.516576][ T7990] raw_process_ep_io+0x667/0xc30 [ 158.521576][ T7990] raw_ioctl+0xaab/0x2c30 [ 158.525975][ T7990] __x64_sys_ioctl+0x18e/0x210 [ 158.530803][ T7990] do_syscall_64+0xcd/0x4c0 [ 158.535367][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.541313][ T7990] [ 158.541313][ T7990] to a SOFTIRQ-irq-unsafe lock: [ 158.548298][ T7990] (tasklist_lock){.+.+}-{3:3} [ 158.548318][ T7990] [ 158.548318][ T7990] ... which became SOFTIRQ-irq-unsafe at: [ 158.560917][ T7990] ... [ 158.560922][ T7990] lock_acquire+0x179/0x350 [ 158.568050][ T7990] _raw_read_lock+0x5f/0x70 [ 158.572616][ T7990] __do_wait+0x105/0x890 [ 158.576956][ T7990] do_wait+0x21e/0x5a0 [ 158.581081][ T7990] kernel_wait+0x9f/0x160 [ 158.585466][ T7990] call_usermodehelper_exec_work+0xf1/0x170 [ 158.591428][ T7990] process_one_work+0x9cc/0x1b70 [ 158.596434][ T7990] worker_thread+0x6c8/0xf10 [ 158.601085][ T7990] kthread+0x3c5/0x780 [ 158.605215][ T7990] ret_from_fork+0x5d4/0x6f0 [ 158.609866][ T7990] ret_from_fork_asm+0x1a/0x30 [ 158.614690][ T7990] [ 158.614690][ T7990] other info that might help us debug this: [ 158.614690][ T7990] [ 158.624886][ T7990] Chain exists of: [ 158.624886][ T7990] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 158.624886][ T7990] [ 158.638072][ T7990] Possible interrupt unsafe locking scenario: [ 158.638072][ T7990] [ 158.646361][ T7990] CPU0 CPU1 [ 158.651695][ T7990] ---- ---- [ 158.657043][ T7990] lock(tasklist_lock); [ 158.661266][ T7990] local_irq_disable(); [ 158.667987][ T7990] lock(&client->buffer_lock); [ 158.675331][ T7990] lock(&f_owner->lock); [ 158.682160][ T7990] [ 158.685583][ T7990] lock(&client->buffer_lock); [ 158.690579][ T7990] [ 158.690579][ T7990] *** DEADLOCK *** [ 158.690579][ T7990] [ 158.698703][ T7990] 2 locks held by syz.3.724/7990: [ 158.703697][ T7990] #0: ffff888034026440 (&u->lock){+.+.}-{3:3}, at: unix_stream_sendmsg+0xd35/0x1340 [ 158.713163][ T7990] #1: ffff8880322e1f20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 158.722268][ T7990] [ 158.722268][ T7990] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 158.732657][ T7990] -> (&client->buffer_lock){..-.}-{3:3} { [ 158.738532][ T7990] IN-SOFTIRQ-W at: [ 158.742657][ T7990] lock_acquire+0x179/0x350 [ 158.749157][ T7990] _raw_spin_lock+0x2e/0x40 [ 158.755652][ T7990] evdev_pass_values+0x10e/0x9b0 [ 158.762564][ T7990] evdev_events+0x1bb/0x390 [ 158.769053][ T7990] input_pass_values+0x74e/0x880 [ 158.775959][ T7990] input_handle_event+0xb29/0x14d0 [ 158.783041][ T7990] input_event+0x8e/0xd0 [ 158.789258][ T7990] hidinput_hid_event+0x1d55/0x2420 [ 158.796430][ T7990] hid_process_event+0x4b7/0x5e0 [ 158.803346][ T7990] hid_report_raw_event+0xa0a/0x1290 [ 158.810614][ T7990] __hid_input_report.constprop.0+0x33f/0x450 [ 158.818667][ T7990] hid_irq_in+0x35e/0x870 [ 158.824994][ T7990] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 158.832350][ T7990] usb_hcd_giveback_urb+0x39b/0x450 [ 158.839527][ T7990] dummy_timer+0x1814/0x3a30 [ 158.846102][ T7990] __hrtimer_run_queues+0x202/0xad0 [ 158.853294][ T7990] hrtimer_run_softirq+0x17d/0x350 [ 158.860380][ T7990] handle_softirqs+0x216/0x8e0 [ 158.867129][ T7990] __irq_exit_rcu+0x109/0x170 [ 158.873797][ T7990] irq_exit_rcu+0x9/0x30 [ 158.880009][ T7990] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 158.887664][ T7990] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 158.896226][ T7990] debug_lockdep_rcu_enabled+0x14/0x40 [ 158.903666][ T7990] __might_resched+0x5d/0x5e0 [ 158.910354][ T7990] __wait_for_common+0x90/0x4e0 [ 158.917185][ T7990] wait_for_completion_interruptible+0x1f/0x40 [ 158.925311][ T7990] raw_process_ep_io+0x667/0xc30 [ 158.932224][ T7990] raw_ioctl+0xaab/0x2c30 [ 158.938524][ T7990] __x64_sys_ioctl+0x18e/0x210 [ 158.945265][ T7990] do_syscall_64+0xcd/0x4c0 [ 158.951737][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.959598][ T7990] INITIAL USE at: [ 158.963646][ T7990] lock_acquire+0x179/0x350 [ 158.970037][ T7990] _raw_spin_lock+0x2e/0x40 [ 158.976425][ T7990] evdev_pass_values+0x10e/0x9b0 [ 158.983248][ T7990] evdev_events+0x1bb/0x390 [ 158.989632][ T7990] input_pass_values+0x74e/0x880 [ 158.996453][ T7990] input_handle_event+0xf00/0x14d0 [ 159.003454][ T7990] input_inject_event+0x1e8/0x3b0 [ 159.010368][ T7990] evdev_write+0x457/0x750 [ 159.016667][ T7990] vfs_write+0x2a0/0x1150 [ 159.022883][ T7990] ksys_write+0x1f8/0x250 [ 159.029115][ T7990] do_syscall_64+0xcd/0x4c0 [ 159.035502][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.043278][ T7990] } [ 159.045920][ T7990] ... key at: [] __key.1+0x0/0x40 [ 159.053182][ T7990] -> (&new->fa_lock){....}-{3:3} { [ 159.058359][ T7990] INITIAL USE at: [ 159.062317][ T7990] lock_acquire+0x179/0x350 [ 159.068539][ T7990] _raw_write_lock_irq+0x36/0x50 [ 159.075200][ T7990] fasync_remove_entry+0xb2/0x1e0 [ 159.081941][ T7990] fasync_helper+0xaf/0xd0 [ 159.088078][ T7990] lease_modify+0x232/0x500 [ 159.094308][ T7990] locks_remove_file+0x29e/0x5c0 [ 159.100958][ T7990] __fput+0x351/0xb70 [ 159.106676][ T7990] task_work_run+0x150/0x240 [ 159.112979][ T7990] exit_to_user_mode_loop+0xeb/0x110 [ 159.119975][ T7990] do_syscall_64+0x3f6/0x4c0 [ 159.126274][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.133878][ T7990] INITIAL READ USE at: [ 159.138266][ T7990] lock_acquire+0x179/0x350 [ 159.144924][ T7990] _raw_read_lock_irqsave+0x74/0x90 [ 159.152280][ T7990] kill_fasync+0x138/0x510 [ 159.158850][ T7990] lease_break_callback+0x23/0x30 [ 159.166044][ T7990] __break_lease+0x671/0x1810 [ 159.172887][ T7990] do_dentry_open+0x91f/0x1530 [ 159.179794][ T7990] vfs_open+0x82/0x3f0 [ 159.186044][ T7990] path_openat+0x1de4/0x2cb0 [ 159.192780][ T7990] do_filp_open+0x20b/0x470 [ 159.199422][ T7990] do_sys_openat2+0x11b/0x1d0 [ 159.206250][ T7990] __x64_sys_open+0x153/0x1e0 [ 159.213075][ T7990] do_syscall_64+0xcd/0x4c0 [ 159.219720][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.227753][ T7990] } [ 159.230314][ T7990] ... key at: [] __key.0+0x0/0x40 [ 159.237484][ T7990] ... acquired at: [ 159.241345][ T7990] _raw_read_lock_irqsave+0x74/0x90 [ 159.246695][ T7990] kill_fasync+0x138/0x510 [ 159.251261][ T7990] evdev_pass_values+0x619/0x9b0 [ 159.256346][ T7990] evdev_events+0x1bb/0x390 [ 159.260993][ T7990] input_pass_values+0x74e/0x880 [ 159.266107][ T7990] input_handle_event+0xf00/0x14d0 [ 159.271368][ T7990] input_inject_event+0x1e8/0x3b0 [ 159.276537][ T7990] evdev_write+0x457/0x750 [ 159.281106][ T7990] vfs_write+0x2a0/0x1150 [ 159.285589][ T7990] ksys_write+0x1f8/0x250 [ 159.290061][ T7990] do_syscall_64+0xcd/0x4c0 [ 159.294720][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.300758][ T7990] [ 159.303078][ T7990] -> (&f_owner->lock){....}-{3:3} { [ 159.308257][ T7990] INITIAL USE at: [ 159.312122][ T7990] lock_acquire+0x179/0x350 [ 159.318166][ T7990] _raw_write_lock_irq+0x36/0x50 [ 159.324644][ T7990] __f_setown+0x61/0x3c0 [ 159.330424][ T7990] generic_setlease+0xef2/0x1300 [ 159.336896][ T7990] kernel_setlease+0x106/0x140 [ 159.343195][ T7990] vfs_setlease+0x258/0x2d0 [ 159.349253][ T7990] fcntl_setlease+0x3ed/0x5a0 [ 159.355462][ T7990] do_fcntl+0x751/0x15a0 [ 159.361243][ T7990] __x64_sys_fcntl+0x163/0x200 [ 159.367564][ T7990] do_syscall_64+0xcd/0x4c0 [ 159.373599][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.381051][ T7990] INITIAL READ USE at: [ 159.385349][ T7990] lock_acquire+0x179/0x350 [ 159.391826][ T7990] _raw_read_lock_irqsave+0x74/0x90 [ 159.399013][ T7990] send_sigio+0x31/0x3e0 [ 159.405237][ T7990] kill_fasync+0x214/0x510 [ 159.411635][ T7990] lease_break_callback+0x23/0x30 [ 159.418645][ T7990] __break_lease+0x671/0x1810 [ 159.425294][ T7990] do_dentry_open+0x91f/0x1530 [ 159.432032][ T7990] vfs_open+0x82/0x3f0 [ 159.438070][ T7990] path_openat+0x1de4/0x2cb0 [ 159.444627][ T7990] do_filp_open+0x20b/0x470 [ 159.451101][ T7990] do_sys_openat2+0x11b/0x1d0 [ 159.457780][ T7990] __x64_sys_open+0x153/0x1e0 [ 159.464443][ T7990] do_syscall_64+0xcd/0x4c0 [ 159.470917][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.478794][ T7990] } [ 159.481265][ T7990] ... key at: [] __key.1+0x0/0x40 [ 159.488346][ T7990] ... acquired at: [ 159.492117][ T7990] _raw_read_lock_irqsave+0x74/0x90 [ 159.497467][ T7990] send_sigio+0x31/0x3e0 [ 159.501857][ T7990] kill_fasync+0x214/0x510 [ 159.506438][ T7990] lease_break_callback+0x23/0x30 [ 159.511639][ T7990] __break_lease+0x671/0x1810 [ 159.516471][ T7990] do_dentry_open+0x91f/0x1530 [ 159.521380][ T7990] vfs_open+0x82/0x3f0 [ 159.525595][ T7990] path_openat+0x1de4/0x2cb0 [ 159.531414][ T7990] do_filp_open+0x20b/0x470 [ 159.536079][ T7990] do_sys_openat2+0x11b/0x1d0 [ 159.540942][ T7990] __x64_sys_open+0x153/0x1e0 [ 159.545774][ T7990] do_syscall_64+0xcd/0x4c0 [ 159.550429][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.556473][ T7990] [ 159.558771][ T7990] [ 159.558771][ T7990] the dependencies between the lock to be acquired [ 159.558778][ T7990] and SOFTIRQ-irq-unsafe lock: [ 159.572248][ T7990] -> (tasklist_lock){.+.+}-{3:3} { [ 159.577355][ T7990] HARDIRQ-ON-R at: [ 159.581303][ T7990] lock_acquire+0x179/0x350 [ 159.587440][ T7990] _raw_read_lock+0x5f/0x70 [ 159.593577][ T7990] __do_wait+0x105/0x890 [ 159.599442][ T7990] do_wait+0x21e/0x5a0 [ 159.605137][ T7990] kernel_wait+0x9f/0x160 [ 159.611089][ T7990] call_usermodehelper_exec_work+0xf1/0x170 [ 159.618617][ T7990] process_one_work+0x9cc/0x1b70 [ 159.625197][ T7990] worker_thread+0x6c8/0xf10 [ 159.631414][ T7990] kthread+0x3c5/0x780 [ 159.637107][ T7990] ret_from_fork+0x5d4/0x6f0 [ 159.643322][ T7990] ret_from_fork_asm+0x1a/0x30 [ 159.649718][ T7990] SOFTIRQ-ON-R at: [ 159.653683][ T7990] lock_acquire+0x179/0x350 [ 159.659814][ T7990] _raw_read_lock+0x5f/0x70 [ 159.666036][ T7990] __do_wait+0x105/0x890 [ 159.671909][ T7990] do_wait+0x21e/0x5a0 [ 159.677596][ T7990] kernel_wait+0x9f/0x160 [ 159.683544][ T7990] call_usermodehelper_exec_work+0xf1/0x170 [ 159.691060][ T7990] process_one_work+0x9cc/0x1b70 [ 159.697630][ T7990] worker_thread+0x6c8/0xf10 [ 159.703838][ T7990] kthread+0x3c5/0x780 [ 159.709527][ T7990] ret_from_fork+0x5d4/0x6f0 [ 159.715790][ T7990] ret_from_fork_asm+0x1a/0x30 [ 159.722182][ T7990] INITIAL USE at: [ 159.726049][ T7990] lock_acquire+0x179/0x350 [ 159.732091][ T7990] _raw_write_lock_irq+0x36/0x50 [ 159.738576][ T7990] copy_process+0x4caf/0x7690 [ 159.744814][ T7990] kernel_clone+0xfc/0x930 [ 159.750789][ T7990] user_mode_thread+0xc7/0x110 [ 159.757100][ T7990] rest_init+0x23/0x2b0 [ 159.762898][ T7990] start_kernel+0x3ee/0x4d0 [ 159.768949][ T7990] x86_64_start_reservations+0x18/0x30 [ 159.775948][ T7990] x86_64_start_kernel+0x130/0x190 [ 159.782598][ T7990] common_startup_64+0x13e/0x148 [ 159.789084][ T7990] INITIAL READ USE at: [ 159.793394][ T7990] lock_acquire+0x179/0x350 [ 159.799886][ T7990] _raw_read_lock+0x5f/0x70 [ 159.806385][ T7990] __do_wait+0x105/0x890 [ 159.812607][ T7990] do_wait+0x21e/0x5a0 [ 159.818655][ T7990] kernel_wait+0x9f/0x160 [ 159.824955][ T7990] call_usermodehelper_exec_work+0xf1/0x170 [ 159.832823][ T7990] process_one_work+0x9cc/0x1b70 [ 159.839728][ T7990] worker_thread+0x6c8/0xf10 [ 159.846287][ T7990] kthread+0x3c5/0x780 [ 159.852322][ T7990] ret_from_fork+0x5d4/0x6f0 [ 159.858879][ T7990] ret_from_fork_asm+0x1a/0x30 [ 159.865615][ T7990] } [ 159.868084][ T7990] ... key at: [] tasklist_lock+0x18/0x40 [ 159.875777][ T7990] ... acquired at: [ 159.879566][ T7990] lock_acquire+0x179/0x350 [ 159.884219][ T7990] _raw_read_lock+0x5f/0x70 [ 159.889044][ T7990] send_sigurg+0xed/0xc80 [ 159.893521][ T7990] sk_send_sigurg+0x76/0x360 [ 159.898270][ T7990] unix_stream_sendmsg+0xfa5/0x1340 [ 159.903615][ T7990] ____sys_sendmsg+0xa95/0xc70 [ 159.908538][ T7990] ___sys_sendmsg+0x134/0x1d0 [ 159.913357][ T7990] __sys_sendmmsg+0x200/0x420 [ 159.918178][ T7990] __x64_sys_sendmmsg+0x9c/0x100 [ 159.923272][ T7990] do_syscall_64+0xcd/0x4c0 [ 159.927924][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.933961][ T7990] [ 159.936266][ T7990] [ 159.936266][ T7990] stack backtrace: [ 159.942178][ T7990] CPU: 0 UID: 60929 PID: 7990 Comm: syz.3.724 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 159.942194][ T7990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.942202][ T7990] Call Trace: [ 159.942207][ T7990] [ 159.942213][ T7990] dump_stack_lvl+0x116/0x1f0 [ 159.942228][ T7990] check_irq_usage+0x7dc/0x920 [ 159.942248][ T7990] ? check_path.constprop.0+0x24/0x50 [ 159.942278][ T7990] ? __lock_acquire+0x12bc/0x1ce0 [ 159.942293][ T7990] __lock_acquire+0x12bc/0x1ce0 [ 159.942310][ T7990] ? find_held_lock+0x2b/0x80 [ 159.942323][ T7990] lock_acquire+0x179/0x350 [ 159.942339][ T7990] ? send_sigurg+0xed/0xc80 [ 159.942356][ T7990] _raw_read_lock+0x5f/0x70 [ 159.942372][ T7990] ? send_sigurg+0xed/0xc80 [ 159.942385][ T7990] send_sigurg+0xed/0xc80 [ 159.942400][ T7990] ? find_held_lock+0x2b/0x80 [ 159.942413][ T7990] sk_send_sigurg+0x76/0x360 [ 159.942431][ T7990] unix_stream_sendmsg+0xfa5/0x1340 [ 159.942445][ T7990] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 159.942479][ T7990] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 159.942499][ T7990] ____sys_sendmsg+0xa95/0xc70 [ 159.942518][ T7990] ? copy_msghdr_from_user+0x10a/0x160 [ 159.942533][ T7990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.942554][ T7990] ? irqentry_exit+0x3b/0x90 [ 159.942568][ T7990] ? lockdep_hardirqs_on+0x7c/0x110 [ 159.942584][ T7990] ___sys_sendmsg+0x134/0x1d0 [ 159.942601][ T7990] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.942623][ T7990] ? find_held_lock+0x2b/0x80 [ 159.942650][ T7990] __sys_sendmmsg+0x200/0x420 [ 159.942668][ T7990] ? __pfx___sys_sendmmsg+0x10/0x10 [ 159.942688][ T7990] ? __pfx_do_futex+0x10/0x10 [ 159.942722][ T7990] ? xfd_validate_state+0x61/0x180 [ 159.942740][ T7990] __x64_sys_sendmmsg+0x9c/0x100 [ 159.942756][ T7990] ? lockdep_hardirqs_on+0x7c/0x110 [ 159.942771][ T7990] do_syscall_64+0xcd/0x4c0 [ 159.942789][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.942806][ T7990] RIP: 0033:0x7f3d8bf8ebe9 [ 159.942822][ T7990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.942833][ T7990] RSP: 002b:00007f3d8a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 159.942852][ T7990] RAX: ffffffffffffffda RBX: 00007f3d8c1b5fa0 RCX: 00007f3d8bf8ebe9 [ 159.942858][ T7990] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 159.942865][ T7990] RBP: 00007f3d8c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 159.942871][ T7990] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 159.942877][ T7990] R13: 00007f3d8c1b6038 R14: 00007f3d8c1b5fa0 R15: 00007ffe489d0908 [ 159.942886][ T7990] [ 159.942938][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.209559][ C0] vkms_vblank_simulate: vblank timer overrun