last executing test programs: 2m34.157858357s ago: executing program 0 (id=1789): r0 = userfaultfd(0x80801) r1 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x5}) 2m33.95691383s ago: executing program 0 (id=1790): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000440)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x7]}}) 2m33.504955423s ago: executing program 0 (id=1793): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000340)=ANY=[]) 2m33.109303085s ago: executing program 0 (id=1800): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x103) 2m33.019055105s ago: executing program 0 (id=1803): userfaultfd(0x80001) epoll_create1(0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec27, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0xfffffffffffffd11) 2m32.75444221s ago: executing program 0 (id=1806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000280)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) 2m32.484757586s ago: executing program 32 (id=1806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000280)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) 16.997434772s ago: executing program 4 (id=3436): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xdd3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x32ce750b, 0x61}) 16.840115171s ago: executing program 4 (id=3438): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="bf", 0x1}], 0x1}, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000400)={r2, r1}) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) 16.672650067s ago: executing program 4 (id=3442): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002380)="fb904d54fe74bf8e9f31558a1c60c12f", 0x10}], 0x1}}], 0x1, 0x20000000) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)='J', 0x1}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) 16.475033839s ago: executing program 4 (id=3446): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 16.319172094s ago: executing program 4 (id=3448): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) unshare(0x8000000) unshare(0x2c040000) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)={0x0, 0x16, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000300)={0x40, 0x14, 0x28, "3cf033c502f001650ceda3698b7d52e3fee78a4c1cbffa474380859b0428375c913384c6fe73c381"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="20132800000030a6"], 0x0, 0x0, 0x0, 0x0}) 16.131469585s ago: executing program 4 (id=3451): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000380)='9A', 0x2}], 0x1) 15.886055329s ago: executing program 33 (id=3451): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000380)='9A', 0x2}], 0x1) 2.670690248s ago: executing program 6 (id=3583): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) shutdown(r0, 0x1) 2.633133044s ago: executing program 6 (id=3585): r0 = memfd_create(&(0x7f0000000380)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97bla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0\x00\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 2.276049156s ago: executing program 3 (id=3593): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_INPUT(r0, &(0x7f0000001100)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 2.089615046s ago: executing program 3 (id=3597): signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x6]}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x80, 0xa0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r1], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 1.988058925s ago: executing program 3 (id=3598): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x24000, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 1.843494478s ago: executing program 3 (id=3599): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, 0x0, 0x0) syz_io_uring_setup(0x890, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1.64311633s ago: executing program 3 (id=3601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10000002}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x10}, {0x1, 0x9}, {0x8, 0xffe3}}}, 0x24}}, 0x20040054) 1.509010014s ago: executing program 6 (id=3604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 1.312914806s ago: executing program 6 (id=3608): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 1.223065377s ago: executing program 3 (id=3611): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x82}}}}}}}, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 1.195623215s ago: executing program 6 (id=3613): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 978.73624ms ago: executing program 1 (id=3616): syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) 973.914896ms ago: executing program 2 (id=3617): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1000005, 0x0, 0x2, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xfffffffffffffffe, {0x2, 0x0, 0x100000000, 0x0, 0xc7, 0x1, {0x5, 0x8000, 0x2, 0x7, 0xfffffffffffffff7, 0xb95, 0x80, 0x3fffc, 0x7, 0x4000, 0x8001, 0xffffffffffffffff, r2, 0x2, 0x3ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 839.448983ms ago: executing program 1 (id=3619): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0xc}}]}}]}, 0x40}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 833.332306ms ago: executing program 2 (id=3620): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0xfffc}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, 0x0) dup(0xffffffffffffffff) 758.710219ms ago: executing program 5 (id=3621): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0x5, 0x80, 0xe000, 0xb3, 0x17, "041000"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4) 735.638522ms ago: executing program 2 (id=3622): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x3a, @rand_addr=0x64010102, 0x4e20, 0x1, 'rr\x00', 0x35, 0x7, 0x2b}, {@rand_addr=0x64010100, 0x5e22, 0x0, 0x80000001, 0x7ffffff7, 0x200004}}, 0x44) ioctl$KVM_RUN(r2, 0xae80, 0x0) 681.504796ms ago: executing program 5 (id=3623): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000280)={{r0}, 0xdda8, 0xb531, 0x3ff}) 634.284385ms ago: executing program 1 (id=3624): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x3, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) 603.283343ms ago: executing program 2 (id=3625): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) lstat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x578}], 0x1) 511.184614ms ago: executing program 1 (id=3626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 494.449412ms ago: executing program 5 (id=3627): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x2acb, 0x8, 0x3, 0x7, 0x4, "1826d56a2100425fa146fa977f7498f0a6d3ba", 0xe1, 0x5}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) 386.702576ms ago: executing program 2 (id=3628): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x5000, 0x4, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xf, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x3000, 0x8, 0xf8, 0x3, 0x46, 0x9, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0xaf4b, 0x5, 0xc5]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x8f5, 0x0, 0x280000000}]}) 386.547418ms ago: executing program 5 (id=3629): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 380.139452ms ago: executing program 1 (id=3630): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = dup2(r0, r0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000, 0x0) 311.10398ms ago: executing program 5 (id=3631): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r2, &(0x7f0000000240)='V', 0x1, 0x404c810, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0xf7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x58) 289.895021ms ago: executing program 2 (id=3632): shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shmget(0x3, 0x4000, 0x200, &(0x7f0000ffa000/0x4000)=nil) r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f00000001c0)=[{0x7, 0x211, 0x0, 0x0}, {0x50, 0x4000, 0x0, 0x0}], 0x2}) 277.064455ms ago: executing program 1 (id=3633): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000080904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x14, 0x10, 0x3, 0x5, 0x10, 0xa53, 0x10, 0x9, 0x1, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0xa, @string={0xa, 0x3, "c32cae419ca9d489"}}, 0x0, 0x0, 0x0}, 0x0) 76.604344ms ago: executing program 5 (id=3634): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 6 (id=3635): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r1, 0x25, 0x4, @val=@tcx}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000880)={@empty, @random="a6dde6557137", @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0x1, 0x6, "ab279c", 0xc, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, @local, {[], {0x4e24, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): ysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 231.344512][ T5900] usb 3-1: USB disconnect, device number 24 [ 231.599278][T10952] binder: 10951:10952 ioctl 40046205 0 returned -22 [ 231.951831][ T5900] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 232.038342][ T5922] uclogic 0003:256C:006D.0025: failed retrieving string descriptor #100: -71 [ 232.076287][ T5922] uclogic 0003:256C:006D.0025: failed retrieving pen parameters: -71 [ 232.116917][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 232.124928][ T5922] uclogic 0003:256C:006D.0025: failed probing pen v1 parameters: -71 [ 232.136339][ T5900] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 232.148621][ T5922] uclogic 0003:256C:006D.0025: failed probing parameters: -71 [ 232.166237][ T5922] uclogic 0003:256C:006D.0025: probe with driver uclogic failed with error -71 [ 232.183303][ T5900] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 232.211186][ T5900] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.246261][ T5922] usb 6-1: USB disconnect, device number 4 [ 232.278204][ T5900] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.344193][ T5900] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.366106][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.597738][ T5900] usb 2-1: GET_CAPABILITIES returned 0 [ 232.614724][ T5900] usbtmc 2-1:16.0: can't read capabilities [ 232.759335][T10977] syzkaller1: entered promiscuous mode [ 232.774868][T10977] syzkaller1: entered allmulticast mode [ 232.809029][T10977] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 232.846195][T10957] usbtmc 2-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 232.873246][ T978] usb 2-1: USB disconnect, device number 25 [ 232.913563][ T30] audit: type=1400 audit(1755110285.701:781): avc: denied { create } for pid=10982 comm="syz.3.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 232.966812][ T30] audit: type=1400 audit(1755110285.701:782): avc: denied { read write } for pid=10982 comm="syz.3.2048" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 232.993972][ T30] audit: type=1400 audit(1755110285.701:783): avc: denied { open } for pid=10982 comm="syz.3.2048" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 233.024556][ T5956] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 233.051744][ T30] audit: type=1400 audit(1755110285.851:784): avc: denied { connect } for pid=10984 comm="syz.5.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 233.191874][ T5956] usb 5-1: Using ep0 maxpacket: 32 [ 233.319370][ T5956] usb 5-1: unable to get BOS descriptor or descriptor too short [ 233.352464][ T5956] usb 5-1: no configurations [ 233.357116][ T5956] usb 5-1: can't read configurations, error -22 [ 233.363682][ T978] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 233.532128][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 233.540352][ T978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.553933][ T978] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 233.567820][ T978] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 233.577113][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.592032][ T978] usb 4-1: Product: syz [ 233.596239][ T978] usb 4-1: Manufacturer: syz [ 233.624662][ T978] usb 4-1: SerialNumber: syz [ 233.642943][ T978] usb 4-1: config 0 descriptor?? [ 233.681249][ T978] powermate 4-1:0.0: probe with driver powermate failed with error -22 [ 233.819666][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 233.819684][ T30] audit: type=1400 audit(1755110286.631:788): avc: denied { ioctl } for pid=11010 comm="syz.2.2061" path="socket:[35931]" dev="sockfs" ino=35931 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 233.850944][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.861675][ T5900] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 233.968359][ T30] audit: type=1400 audit(1755110286.781:789): avc: denied { watch watch_reads } for pid=11015 comm="syz.4.2062" path="/393/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 234.032381][ T5900] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 234.052560][ T5900] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 234.081413][ T30] audit: type=1400 audit(1755110286.891:790): avc: denied { unmount } for pid=5855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 234.081587][ T5900] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 234.123152][ T5900] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.132707][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.151999][ T5900] usb 6-1: Product: syz [ 234.158390][ T5900] usb 6-1: Manufacturer: syz [ 234.179281][ T5900] usb 6-1: SerialNumber: syz [ 234.198977][T11003] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 234.240228][ T30] audit: type=1400 audit(1755110287.051:791): avc: denied { map } for pid=11022 comm="syz.4.2065" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.434983][T11030] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 234.475363][T11003] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 234.494225][T11003] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 234.608647][ T30] audit: type=1400 audit(1755110287.411:792): avc: denied { execute } for pid=11037 comm="syz.4.2072" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=35967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 234.634862][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.068486][T11058] input: syz1 as /devices/virtual/input/input29 [ 235.141404][T11003] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 235.157322][T11003] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 235.171622][ T5956] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 235.321649][ T5956] usb 2-1: Using ep0 maxpacket: 8 [ 235.328329][ T5956] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 235.336714][ T5956] usb 2-1: config 179 has no interface number 0 [ 235.343056][ T5956] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 235.358354][ T5956] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 235.371148][ T5956] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 235.385383][ T5956] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 235.387230][ T5900] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 235.396847][ T5956] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 235.396896][ T5956] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 235.396917][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.434887][ T5900] cdc_ncm 6-1:1.0: setting rx_max = 16384 [ 235.443335][T11051] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 235.588075][ T5900] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 235.609654][ T5900] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 235.638155][ T5900] usb 6-1: USB disconnect, device number 5 [ 235.672419][ T5900] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 235.777255][ T5956] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input30 [ 235.983923][T11051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.022302][T11051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.160846][ T5956] usb 4-1: USB disconnect, device number 27 [ 236.302370][ T5900] usb 2-1: USB disconnect, device number 26 [ 236.302368][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 236.487293][ T36] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 237.481721][ T5922] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 237.521758][ T30] audit: type=1400 audit(1755110290.331:793): avc: denied { write } for pid=11101 comm="syz.5.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 237.624185][T11102] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 237.636195][T11102] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 237.654550][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 237.673005][ T5922] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 237.699939][ T5922] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 237.719856][ T5922] usb 2-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 237.746837][ T5922] usb 2-1: Product: syz [ 237.762085][ T5922] usb 2-1: Manufacturer: syz [ 237.772486][ T5922] usb 2-1: SerialNumber: syz [ 237.816848][ T5922] usb 2-1: config 0 descriptor?? [ 237.859980][ T5922] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 237.871478][ T30] audit: type=1400 audit(1755110290.691:794): avc: denied { read } for pid=11116 comm="syz.2.2104" path="socket:[37127]" dev="sockfs" ino=37127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 237.975970][T11121] SELinux: ebitmap: empty map [ 237.986114][T11121] SELinux: failed to load policy [ 238.864846][ T5922] gspca_zc3xx: reg_w_i err -71 [ 239.301733][ T5907] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 239.441632][ T978] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 239.454549][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 239.460983][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.472172][ T5922] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 239.478428][ T5922] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 239.492826][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.505347][ T5907] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 239.516617][ T5922] usb 2-1: USB disconnect, device number 27 [ 239.525091][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.551413][ T5907] usb 6-1: config 0 descriptor?? [ 239.614101][ T978] usb 3-1: config 1 interface 0 has no altsetting 0 [ 239.627094][ T978] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 239.636934][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.651719][T11155] netlink: 'syz.3.2120': attribute type 1 has an invalid length. [ 239.660057][T11155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.667787][T11155] IPv6: NLM_F_CREATE should be set when creating new route [ 239.671460][ T30] audit: type=1400 audit(1755110292.481:795): avc: denied { ioctl } for pid=11156 comm="syz.1.2121" path="socket:[36239]" dev="sockfs" ino=36239 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 239.678221][ T978] usb 3-1: Product: syz [ 239.701437][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2121'. [ 239.711904][ T978] usb 3-1: Manufacturer: syz [ 239.718745][ T978] usb 3-1: SerialNumber: syz [ 239.727971][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'. [ 239.991117][ T5907] ft260 0003:0403:6030.0026: unknown main item tag 0x7 [ 240.162964][ T978] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 240.180045][ T5907] ft260 0003:0403:6030.0026: chip code: 6424 8183 [ 240.291648][ T5922] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 240.380752][ T5907] ft260 0003:0403:6030.0026: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 240.441734][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 240.462613][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.475158][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.485243][ T5922] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 240.494478][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.505472][ T5922] usb 2-1: config 0 descriptor?? [ 240.529994][ T30] audit: type=1400 audit(1755110293.341:796): avc: denied { read write } for pid=11139 comm="syz.2.2115" name="lp0" dev="devtmpfs" ino=3763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 240.558128][ T30] audit: type=1400 audit(1755110293.341:797): avc: denied { open } for pid=11139 comm="syz.2.2115" path="/dev/usb/lp0" dev="devtmpfs" ino=3763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 240.600543][T11183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2133'. [ 240.796092][ T5907] ft260 0003:0403:6030.0026: failed to retrieve status: -71 [ 240.806963][ T5907] ft260 0003:0403:6030.0026: failed to reset I2C controller: -71 [ 240.828911][ T5907] usb 6-1: USB disconnect, device number 6 [ 240.934461][ T5922] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0027/input/input31 [ 241.017897][ T5922] appleir 0003:05AC:8241.0027: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 241.221351][ T978] usb 2-1: USB disconnect, device number 28 [ 241.527814][T11193] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2137'. [ 241.721808][ T978] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 241.809474][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2139'. [ 241.874316][ T978] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 241.884540][ T978] usb 6-1: config 0 has no interface number 0 [ 241.890682][ T978] usb 6-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid maxpacket 194, setting to 64 [ 241.902028][ T978] usb 6-1: config 0 interface 235 has no altsetting 0 [ 241.913030][ T978] usb 6-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 241.922389][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.930446][ T978] usb 6-1: Product: syz [ 241.935807][ T978] usb 6-1: Manufacturer: syz [ 241.940547][ T978] usb 6-1: SerialNumber: syz [ 241.964803][ T978] usb 6-1: config 0 descriptor?? [ 241.974343][T11191] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 241.988338][ T978] keyspan 6-1:0.235: Keyspan 1 port adapter converter detected [ 241.997463][ T978] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 87 [ 242.008484][ T978] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 7 [ 242.018473][ T978] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 81 [ 242.028498][ T978] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 1 [ 242.038104][ T978] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 85 [ 242.050510][ T978] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 242.084489][ T44] usb 3-1: USB disconnect, device number 25 [ 242.115457][ T44] usblp0: removed [ 242.260734][ T978] usb 6-1: USB disconnect, device number 7 [ 242.320305][ T978] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 242.343011][ T978] keyspan 6-1:0.235: device disconnected [ 243.396789][ T30] audit: type=1400 audit(1755110296.211:798): avc: denied { mount } for pid=11244 comm="syz.3.2157" name="/" dev="configfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 243.402806][ T978] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 243.425489][ T30] audit: type=1400 audit(1755110296.241:799): avc: denied { search } for pid=11244 comm="syz.3.2157" name="/" dev="configfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 243.456466][ T30] audit: type=1400 audit(1755110296.241:800): avc: denied { search } for pid=11244 comm="syz.3.2157" name="/" dev="configfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 243.482846][ T30] audit: type=1400 audit(1755110296.241:801): avc: denied { read open } for pid=11244 comm="syz.3.2157" path="/" dev="configfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 243.571742][ T975] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 243.602751][ T978] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 243.610893][ T978] usb 2-1: config 0 has no interface number 0 [ 243.618077][ T978] usb 2-1: config 0 interface 98 has no altsetting 0 [ 243.626653][ T978] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 243.636351][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.644665][ T978] usb 2-1: Product: syz [ 243.650477][ T978] usb 2-1: Manufacturer: syz [ 243.655692][ T978] usb 2-1: SerialNumber: syz [ 243.665033][ T978] usb 2-1: config 0 descriptor?? [ 243.722444][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 243.729191][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 243.746595][ T975] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 243.756705][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.770326][ T975] usb 3-1: config 0 descriptor?? [ 243.831760][ T1208] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 243.887357][ T978] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 243.990936][ T1208] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 243.991005][ T975] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 244.009927][ T1208] usb 4-1: config 0 has no interface number 0 [ 244.011606][ T1208] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 244.033496][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.055215][ T1208] usb 4-1: Product: syz [ 244.068670][ T1208] usb 4-1: Manufacturer: syz [ 244.079576][ T1208] usb 4-1: SerialNumber: syz [ 244.094138][ T1208] usb 4-1: config 0 descriptor?? [ 244.114210][T11254] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.121849][T11254] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.225620][T11254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.241190][T11254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.330782][ T3080] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.340228][ T3080] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.367619][ T3080] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.376190][ T3080] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.457685][ T5922] usb 3-1: USB disconnect, device number 26 [ 244.687031][ T978] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 244.703086][ T978] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 244.711436][ T5956] usb 2-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 244.727158][ T5956] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 244.727179][ T30] audit: type=1400 audit(1755110297.541:802): avc: denied { firmware_load } for pid=5956 comm="kworker/1:4" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 244.741730][ T978] usb 2-1: USB disconnect, device number 29 [ 245.123599][ T1208] usb 4-1: non-Atmel transceiver xxxxe6de [ 245.327588][ T1208] usb 4-1: Firmware version (0.0) predates our first public release. [ 245.356421][ T1208] usb 4-1: Please update to version 0.2 or newer [ 245.381817][ T1208] usb 4-1: atusb_probe: initialization failed, error = -19 [ 245.440890][ T1208] usb 4-1: USB disconnect, device number 28 [ 245.842459][ T30] audit: type=1400 audit(1755110298.641:803): avc: denied { name_bind } for pid=11307 comm="syz.2.2184" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 246.032807][T11316] evm: overlay not supported [ 246.223626][ T1208] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 246.434467][ T1208] usb 3-1: Using ep0 maxpacket: 16 [ 246.451426][ T1208] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 246.476009][ T1208] usb 3-1: config 0 has no interface number 0 [ 246.489327][ T1208] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 246.552957][ T1208] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 246.600597][ T1208] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 246.621147][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 246.656636][ T1208] usb 3-1: Product: syz [ 246.660868][ T1208] usb 3-1: SerialNumber: syz [ 246.710099][ T1208] usb 3-1: config 0 descriptor?? [ 246.753642][ T1208] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 246.781199][ T1208] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input32 [ 246.968191][ T30] audit: type=1400 audit(1755110299.781:804): avc: denied { setopt } for pid=11333 comm="syz.4.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 247.000096][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 247.258010][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 247.271712][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 247.279052][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 247.287459][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 247.294745][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 247.301971][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 247.309111][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 247.316312][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 247.323483][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 247.330617][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 247.340660][ T44] usb 3-1: USB disconnect, device number 27 [ 247.346628][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 247.369719][ T44] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 247.843001][ T64] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 248.273268][ T30] audit: type=1400 audit(1755110301.091:805): avc: denied { unmount } for pid=10517 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 248.630209][ T5922] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 248.694361][ T5922] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 248.719066][ T30] audit: type=1400 audit(1755110301.531:806): avc: denied { accept } for pid=11383 comm="syz.5.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 248.825299][ T30] audit: type=1400 audit(1755110301.601:807): avc: denied { listen } for pid=11383 comm="syz.5.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 249.815532][ T30] audit: type=1400 audit(1755110302.631:808): avc: denied { write } for pid=11397 comm="syz.4.2221" name="sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 249.931752][ T30] audit: type=1400 audit(1755110302.681:809): avc: denied { ioctl } for pid=11397 comm="syz.4.2221" path="/dev/sg0" dev="devtmpfs" ino=774 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 250.701543][ T30] audit: type=1400 audit(1755110303.511:810): avc: denied { read } for pid=11411 comm="syz.4.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 250.864829][ T30] audit: type=1400 audit(1755110303.671:811): avc: denied { write } for pid=11416 comm="syz.1.2229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 251.567201][T11429] af_packet: tpacket_rcv: packet too big, clamped from 4352 to 3952. macoff=96 [ 252.026835][ T30] audit: type=1400 audit(1755110304.841:812): avc: denied { sqpoll } for pid=11434 comm="syz.1.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 252.215088][T11440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.436675][T11481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2258'. [ 253.658991][T11486] syz.4.2260 (11486) used obsolete PPPIOCDETACH ioctl [ 253.737607][T11497] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2262'. [ 253.771968][ T30] audit: type=1400 audit(1755110306.571:813): avc: denied { execute } for pid=11495 comm="syz.1.2265" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.055524][ T30] audit: type=1400 audit(1755110306.871:814): avc: denied { connect } for pid=11507 comm="syz.3.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 254.357780][ T30] audit: type=1400 audit(1755110307.171:815): avc: denied { create } for pid=11520 comm="syz.4.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 254.555539][ T30] audit: type=1400 audit(1755110307.191:816): avc: denied { setopt } for pid=11520 comm="syz.4.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 254.575032][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.782463][ T30] audit: type=1400 audit(1755110307.601:817): avc: denied { ioctl } for pid=11528 comm="syz.5.2278" path="socket:[40568]" dev="sockfs" ino=40568 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 254.807166][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.081645][ T5922] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 255.241780][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 255.248668][ T5922] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.288419][ T5922] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 255.383724][ T5922] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.405705][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.412210][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.426922][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.492621][ T5922] usb 2-1: Product: syz [ 255.496882][ T5922] usb 2-1: Manufacturer: syz [ 255.531735][ T5922] usb 2-1: SerialNumber: syz [ 255.732385][ T44] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 255.740249][ T5989] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 255.795597][T11533] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 255.973756][ T5989] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 255.984340][ T5989] usb 4-1: config 1 has no interface number 0 [ 255.991277][ T44] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 256.015498][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.025009][ T5989] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.041537][ T44] usb 6-1: Product: syz [ 256.045722][ T44] usb 6-1: Manufacturer: syz [ 256.051053][ T5989] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 256.063608][ T44] usb 6-1: SerialNumber: syz [ 256.070406][ T44] usb 6-1: config 0 descriptor?? [ 256.085805][ T5989] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 50109, setting to 1024 [ 256.106043][ T5989] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 256.164102][ T5989] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.201895][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.230266][ T5989] usb 4-1: Product: syz [ 256.239231][ T5989] usb 4-1: Manufacturer: syz [ 256.254345][ T5989] usb 4-1: SerialNumber: syz [ 256.405472][ T30] audit: type=1400 audit(1755110309.221:818): avc: denied { accept } for pid=11567 comm="syz.2.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 256.428511][T11533] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 256.506849][T11551] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 256.527395][ T44] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 256.554674][ T44] asix 6-1:0.0: probe with driver asix failed with error -71 [ 256.606233][ T44] usb 6-1: USB disconnect, device number 8 [ 256.649451][ T5922] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 256.661140][ T5922] cdc_ncm 2-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 256.682019][ T5922] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 256.754947][ T5907] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 256.850221][ T5922] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 256.864696][ T5922] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 256.889866][ T5922] usb 2-1: USB disconnect, device number 30 [ 256.898335][ T5922] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 256.925258][ T5907] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.935522][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.952379][ T5907] usb 3-1: Product: syz [ 256.956744][ T5907] usb 3-1: Manufacturer: syz [ 256.968922][ T5907] usb 3-1: SerialNumber: syz [ 257.152223][T11551] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 257.170913][ T5989] cdc_ncm 4-1:1.1: bind() failure [ 257.330358][T11580] input: syz1 as /devices/virtual/input/input33 [ 257.466372][ T5989] usb 4-1: USB disconnect, device number 29 [ 257.571704][T11585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.660838][T11589] netlink: 'syz.1.2306': attribute type 2 has an invalid length. [ 257.669054][T11589] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2306'. [ 257.679513][T11589] nbd: must specify a device to reconfigure [ 258.035335][ T5907] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 258.048469][ T5907] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 258.070275][ T5907] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 258.092022][T11600] syzkaller1: entered promiscuous mode [ 258.097701][T11600] syzkaller1: entered allmulticast mode [ 258.235050][ T30] audit: type=1326 audit(1755110311.051:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.5.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a11f8ebe9 code=0x7fc00000 [ 258.259816][ T5907] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 258.280224][ T5907] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 258.297755][ T5907] usb 3-1: USB disconnect, device number 28 [ 258.311895][ T5907] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 258.711702][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2318'. [ 258.727220][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2318'. [ 258.727372][ T3633] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.747857][ T3633] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.760001][ T3633] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.768968][ T3633] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.792770][ T5995] kernel read not supported for file /dsp (pid: 5995 comm: kworker/1:6) [ 258.972656][ T30] audit: type=1326 audit(1755110311.771:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.5.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5a11f8ebe9 code=0x7fc00000 [ 259.015518][T11626] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2322'. [ 259.029713][T11626] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.2322'. [ 259.423087][T11647] program syz.2.2332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.502612][ T5995] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 259.581745][ T5907] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 259.683115][ T5995] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.702703][ T5995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.739573][ T5995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 259.756132][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.767766][ T5995] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.777526][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.794284][ T5900] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 259.798650][ T5995] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.809314][ T5907] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 259.820503][ T5995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.827259][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.848539][ T5907] usb 2-1: config 0 descriptor?? [ 259.884166][ T5995] usb 6-1: config 0 descriptor?? [ 259.899965][ T30] audit: type=1400 audit(1755110312.711:821): avc: denied { read } for pid=11660 comm="syz.2.2338" path="socket:[42031]" dev="sockfs" ino=42031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 259.967245][ T5900] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 259.975748][ T5900] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 259.985778][ T5900] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 260.000264][ T5900] usb 4-1: config 220 has no interface number 2 [ 260.006883][ T5900] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 260.020486][ T5900] usb 4-1: config 220 interface 0 has no altsetting 0 [ 260.027592][ T5900] usb 4-1: config 220 interface 76 has no altsetting 0 [ 260.035567][ T5900] usb 4-1: config 220 interface 1 has no altsetting 0 [ 260.045216][ T5900] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 260.062024][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.070757][ T5900] usb 4-1: Product: syz [ 260.079220][ T5900] usb 4-1: Manufacturer: syz [ 260.084219][ T5900] usb 4-1: SerialNumber: syz [ 260.296513][ T5995] plantronics 0003:047F:FFFF.002A: ignoring exceeding usage max [ 260.307430][ T5900] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 260.312732][ T5995] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 260.327956][ T5900] usb 4-1: No valid video chain found. [ 260.335776][ T5900] usb 4-1: selecting invalid altsetting 0 [ 260.357672][ T5900] usb 4-1: selecting invalid altsetting 0 [ 260.364438][ T5900] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 260.386291][ T5900] usb 4-1: USB disconnect, device number 30 [ 260.485903][ T5907] usb 2-1: language id specifier not provided by device, defaulting to English [ 260.502481][ T975] usb 6-1: USB disconnect, device number 9 [ 260.899309][ T5907] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0029/input/input34 [ 260.999671][ T5907] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0029/input/input35 [ 261.049702][ T5907] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0029/input/input36 [ 261.071578][ T975] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 261.216357][ T5907] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0029/input/input37 [ 261.255275][ T975] usb 3-1: config 0 interface 0 has no altsetting 0 [ 261.263409][ T975] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 261.286433][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.337968][ T975] usb 3-1: config 0 descriptor?? [ 261.401047][ T5907] uclogic 0003:256C:006D.0029: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 261.449637][ T5907] usb 2-1: USB disconnect, device number 31 [ 261.503590][T11692] fido_id[11692]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 261.765572][ T975] zeroplus 0003:0C12:0005.002B: item fetching failed at offset 0/3 [ 261.777922][ T975] zeroplus 0003:0C12:0005.002B: parse failed [ 261.787018][ T975] zeroplus 0003:0C12:0005.002B: probe with driver zeroplus failed with error -22 [ 261.985785][ T975] usb 3-1: USB disconnect, device number 29 [ 262.220374][ T30] audit: type=1400 audit(1755110315.021:822): avc: denied { mount } for pid=11695 comm="syz.3.2352" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 262.307210][ T30] audit: type=1400 audit(1755110315.081:823): avc: denied { mounton } for pid=11695 comm="syz.3.2352" path="/489/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 262.338456][ T30] audit: type=1400 audit(1755110315.081:824): avc: denied { read } for pid=11695 comm="syz.3.2352" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 262.408866][ T30] audit: type=1400 audit(1755110315.081:825): avc: denied { open } for pid=11695 comm="syz.3.2352" path="/489/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 262.446039][ T30] audit: type=1400 audit(1755110315.081:826): avc: denied { read } for pid=11695 comm="syz.3.2352" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 262.474189][ T30] audit: type=1400 audit(1755110315.091:827): avc: denied { read } for pid=11695 comm="syz.3.2352" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 262.496989][T11704] loop8: detected capacity change from 0 to 79 [ 262.540417][ T30] audit: type=1400 audit(1755110315.181:828): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 262.591001][ T30] audit: type=1400 audit(1755110315.401:829): avc: denied { watch_sb } for pid=11707 comm="syz.1.2357" path="/80" dev="tmpfs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 262.629605][T11704] loop8: detected capacity change from 79 to 78 [ 262.811589][ T5954] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 262.906833][T11720] netlink: 'syz.3.2362': attribute type 4 has an invalid length. [ 262.916735][T11720] netlink: 'syz.3.2362': attribute type 4 has an invalid length. [ 262.964876][T11722] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2363'. [ 262.976190][ T5954] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.988896][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.008710][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.047104][ T5954] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 263.060642][ T5954] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 263.064221][ T5995] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 263.069948][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.105927][ T5954] usb 6-1: config 0 descriptor?? [ 263.123203][ T30] audit: type=1400 audit(1755110315.931:830): avc: denied { mounton } for pid=11725 comm="syz.2.2365" path="/499/file0" dev="tmpfs" ino=2611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 263.233598][ T5995] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 263.260331][ T5995] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 263.282604][ T5995] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 263.295165][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.304047][ T5995] usb 2-1: Product: syz [ 263.310224][ T5995] usb 2-1: Manufacturer: syz [ 263.319224][ T5995] usb 2-1: SerialNumber: syz [ 263.331755][ T5995] usb 2-1: config 0 descriptor?? [ 263.342989][T11717] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 263.367855][T11717] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 263.537712][ T5954] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 263.573302][ T5954] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.002C/input/input38 [ 263.608732][T11717] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 263.635723][T11717] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 263.736746][T11706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.762655][ T5954] keytouch 0003:0926:3333.002C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 263.785262][T11706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.950200][ T5954] usb 6-1: USB disconnect, device number 10 [ 264.210173][T11748] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.217893][T11748] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.316354][T11752] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2377'. [ 264.428801][T11748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.458381][T11748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.664531][T11748] bond1: left promiscuous mode [ 264.669436][T11748] bond2: left promiscuous mode [ 264.690345][ T5995] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 264.701879][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.737873][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.756430][T11759] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 264.763311][T11759] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 264.784763][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.835564][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.879352][ T5995] dm9601 2-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 264.895829][T11759] hsr_slave_0: left promiscuous mode [ 264.923340][T11759] hsr_slave_1: left promiscuous mode [ 264.925141][ T5995] usb 2-1: USB disconnect, device number 32 [ 264.975631][ T5995] dm9601 2-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 264.999838][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.020320][ T30] audit: type=1400 audit(1755110317.831:831): avc: denied { watch } for pid=11762 comm="syz.2.2382" path="/506/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 265.053423][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.107504][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.143180][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.320904][T11771] netlink: 'syz.2.2386': attribute type 1 has an invalid length. [ 265.350563][T11771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.381359][T11771] bond3: (slave geneve2): making interface the new active one [ 265.390373][T11771] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 265.400065][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.429804][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.466827][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.476413][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.684478][T11785] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.882272][T11785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.897790][T11785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.024559][ T3080] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.043265][ T3080] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.052706][ T3080] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.061948][ T3080] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.091697][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 266.099310][ T3080] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.113700][ T3080] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.124873][ T3080] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.159835][ T3080] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.261585][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 266.447911][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 266.477391][ T24] usb 3-1: no configurations [ 266.483114][ T24] usb 3-1: can't read configurations, error -22 [ 266.821572][ T6002] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 266.941664][T11790] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 266.975813][ T6002] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.001571][ T6002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 267.016395][ T6002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 267.040423][ T6002] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.064571][ T6002] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.074957][ T6002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.094438][ T6002] usb 2-1: config 0 descriptor?? [ 267.105857][T11813] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 267.106142][T11790] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 267.145266][T11790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.161145][T11790] usb 4-1: Product: syz [ 267.165937][T11790] usb 4-1: Manufacturer: syz [ 267.170624][T11790] usb 4-1: SerialNumber: syz [ 267.195910][T11790] usb 4-1: config 0 descriptor?? [ 267.224122][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 267.224137][ T30] audit: type=1400 audit(1755110320.041:836): avc: denied { mounton } for pid=11820 comm="syz.2.2400" path="/512/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 267.242002][T11821] Invalid source name [ 267.301912][T11821] UBIFS error (pid: 11821): cannot open "./file0", error -22 [ 267.481252][T11790] usb 4-1: USB disconnect, device number 31 [ 267.541741][ T6002] plantronics 0003:047F:FFFF.002D: reserved main item tag 0xd [ 267.585154][ T6002] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 267.815531][T11831] netlink: 212264 bytes leftover after parsing attributes in process `syz.2.2403'. [ 267.828041][T11833] netlink: 'syz.4.2404': attribute type 4 has an invalid length. [ 267.840969][T11833] netlink: 'syz.4.2404': attribute type 4 has an invalid length. [ 267.865203][ T24] usb 2-1: USB disconnect, device number 33 [ 269.711735][ T5995] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 269.903360][ T5995] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 269.966201][ T5995] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 269.980696][ T5995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 269.992143][ T5995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 270.004643][ T5995] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 270.018214][ T5995] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.083258][ T5995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.118249][ T5995] usb 6-1: config 0 descriptor?? [ 270.140706][T11861] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 270.214776][T11876] input: syz1 as /devices/virtual/input/input40 [ 270.612110][ T5995] plantronics 0003:047F:FFFF.002E: reserved main item tag 0xd [ 270.646540][ T5995] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 270.849273][T11891] SELinux: failed to load policy [ 270.927395][ T5995] usb 6-1: USB disconnect, device number 11 [ 271.047172][ T30] audit: type=1400 audit(1755110323.861:837): avc: denied { transition } for pid=11899 comm="syz.2.2433" path="/523/file0" dev="tmpfs" ino=2738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 271.074776][ T30] audit: type=1400 audit(1755110323.861:838): avc: denied { entrypoint } for pid=11899 comm="syz.2.2433" path="/523/file0" dev="tmpfs" ino=2738 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 271.100726][ T30] audit: type=1400 audit(1755110323.861:839): avc: denied { share } for pid=11899 comm="syz.2.2433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 271.185721][ T30] audit: type=1400 audit(1755110323.861:840): avc: denied { noatsecure } for pid=11899 comm="syz.2.2433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 271.345614][T11911] atomic_op ffff88805a097998 conn xmit_atomic 0000000000000000 [ 271.366847][T11913] kernel read not supported for file /!sel (pid: 11913 comm: syz.2.2438) [ 271.387741][ T30] audit: type=1800 audit(1755110324.191:841): pid=11913 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2438" name="!sel" dev="mqueue" ino=43245 res=0 errno=0 [ 271.465567][ T6002] libceph: connect (1)[c::]:6789 error -22 [ 271.475330][ T6002] libceph: mon0 (1)[c::]:6789 connect error [ 271.528748][T11792] libceph: connect (1)[c::]:6789 error -22 [ 271.538660][T11792] libceph: mon0 (1)[c::]:6789 connect error [ 271.594874][T11927] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.602488][T11927] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.664117][T11927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.678222][T11927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.742398][ T6002] libceph: connect (1)[c::]:6789 error -22 [ 271.750216][ T6002] libceph: mon0 (1)[c::]:6789 connect error [ 271.811839][T11787] libceph: connect (1)[c::]:6789 error -22 [ 271.817986][T11787] libceph: mon0 (1)[c::]:6789 connect error [ 271.856661][ T3080] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.865867][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2444'. [ 271.877386][ T3080] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.887993][ T3080] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.897434][ T3080] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.906979][ T3080] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.917833][ T3080] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.947230][ T3080] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.970664][ T3080] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.097085][T11941] input: syz0 as /devices/virtual/input/input42 [ 272.293804][T11921] ceph: No mds server is up or the cluster is laggy [ 272.293857][T11917] ceph: No mds server is up or the cluster is laggy [ 272.310464][ T6002] libceph: connect (1)[c::]:6789 error -22 [ 272.328608][ T6002] libceph: mon0 (1)[c::]:6789 connect error [ 272.333280][T11790] libceph: connect (1)[c::]:6789 error -22 [ 272.340852][T11790] libceph: mon0 (1)[c::]:6789 connect error [ 272.470815][T11946] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 272.472534][ T6002] IPVS: starting estimator thread 0... [ 272.601882][T11950] IPVS: using max 50 ests per chain, 120000 per kthread [ 273.002910][ T3479] Bluetooth: hci5: Frame reassembly failed (-84) [ 274.158198][ T5861] block nbd0: Receive control failed (result -107) [ 274.211778][T11985] nbd0: detected capacity change from 0 to 63 [ 274.228307][ T5837] block nbd0: Dead connection, failed to find a fallback [ 274.261592][ T5837] block nbd0: shutting down sockets [ 274.290301][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.323127][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 274.335241][ T5837] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.345810][ T5837] Buffer I/O error on dev nbd0, logical block 1, async page read [ 274.354508][ T5837] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.366469][ T5837] Buffer I/O error on dev nbd0, logical block 2, async page read [ 274.374507][ T5837] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.384236][ T5837] Buffer I/O error on dev nbd0, logical block 3, async page read [ 274.393051][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.409335][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 274.417808][ T5837] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.427745][ T5837] Buffer I/O error on dev nbd0, logical block 1, async page read [ 274.436526][ T5837] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.446375][ T5837] Buffer I/O error on dev nbd0, logical block 2, async page read [ 274.455338][ T5837] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.466368][ T5837] Buffer I/O error on dev nbd0, logical block 3, async page read [ 274.475388][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.491849][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 274.500352][ T5837] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.510014][ T5837] Buffer I/O error on dev nbd0, logical block 1, async page read [ 274.525130][ T5837] ldm_validate_partition_table(): Disk read failed. [ 274.533524][ T5837] Dev nbd0: unable to read RDB block 0 [ 274.541153][ T5837] nbd0: unable to read partition table [ 274.555973][ T5837] ldm_validate_partition_table(): Disk read failed. [ 274.564152][ T5837] Dev nbd0: unable to read RDB block 0 [ 274.571150][ T5837] nbd0: unable to read partition table [ 275.039346][ T30] audit: type=1400 audit(1755110327.851:842): avc: denied { bind } for pid=12008 comm="syz.4.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 275.071627][ T5861] Bluetooth: hci0: command 0x0c20 tx timeout [ 275.071896][T11966] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 275.081695][ T5850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 275.090752][ T5861] Bluetooth: hci5: command 0x1003 tx timeout [ 275.111721][ T30] audit: type=1400 audit(1755110327.851:843): avc: denied { setopt } for pid=12008 comm="syz.4.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 275.141615][ T30] audit: type=1400 audit(1755110327.951:844): avc: denied { setopt } for pid=12010 comm="syz.4.2477" lport=57125 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 275.165986][ T30] audit: type=1400 audit(1755110327.951:845): avc: denied { getopt } for pid=12010 comm="syz.4.2477" lport=57125 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 275.493368][T12025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.521807][T11787] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 275.701865][T11787] usb 4-1: Using ep0 maxpacket: 16 [ 275.722222][T11787] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 275.752893][T11787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 275.766414][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2489'. [ 275.791958][T11787] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 275.801838][T11787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.815047][T11787] usb 4-1: Product: syz [ 275.830420][T11787] usb 4-1: Manufacturer: syz [ 275.835470][T11787] usb 4-1: SerialNumber: syz [ 275.844707][T11787] usb 4-1: config 0 descriptor?? [ 275.885316][T11787] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 275.921778][T11787] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 276.036738][T12039] SELinux: ebitmap: truncated map [ 276.067744][T12039] SELinux: failed to load policy [ 276.203998][T12052] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2495'. [ 276.208557][ T30] audit: type=1400 audit(1755110329.021:846): avc: denied { getopt } for pid=12053 comm="syz.4.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 276.272788][ T30] audit: type=1400 audit(1755110329.081:847): avc: denied { mounton } for pid=12055 comm="syz.2.2497" path="/539/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 276.289492][T12056] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 276.380130][ T30] audit: type=1400 audit(1755110329.191:848): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 276.515004][T11787] em28xx 4-1:0.0: unknown em28xx chip ID (250) [ 276.677487][T12073] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2504'. [ 276.716564][T11787] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 276.949410][T11787] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 276.975783][T11787] em28xx 4-1:0.0: No AC97 audio processor [ 277.009323][T11787] usb 4-1: USB disconnect, device number 32 [ 277.019460][T11787] em28xx 4-1:0.0: Disconnecting em28xx [ 277.094204][T11787] em28xx 4-1:0.0: Freeing device [ 277.481712][ T5995] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 277.631619][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 277.643571][ T5995] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.671867][ T5995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 277.704253][ T5995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 277.732157][ T5995] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.775581][ T5995] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.808871][ T5995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.819926][ T24] usb 3-1: config 0 has no interfaces? [ 277.825562][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 277.843582][ T5995] usb 2-1: config 0 descriptor?? [ 277.848649][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.859454][T12096] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 277.885421][ T24] usb 3-1: config 0 descriptor?? [ 278.156163][ T24] usb 3-1: USB disconnect, device number 32 [ 278.290245][ T5995] plantronics 0003:047F:FFFF.002F: reserved main item tag 0xd [ 278.322990][ T5995] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 278.553815][T11787] usb 2-1: USB disconnect, device number 34 [ 279.050463][T12154] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 279.289886][ T5995] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 279.454861][T12179] bond0: entered promiscuous mode [ 279.460134][T12179] bond_slave_0: entered promiscuous mode [ 279.468674][T12179] bond_slave_1: entered promiscuous mode [ 279.476323][ T5995] usb 3-1: Using ep0 maxpacket: 32 [ 279.483775][ T5995] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 279.496945][T12179] batadv0: entered promiscuous mode [ 279.502295][ T5995] usb 3-1: config 0 has no interface number 0 [ 279.509576][ T5995] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 279.520386][T12179] debugfs: 'hsr0' already exists in 'hsr' [ 279.526315][T12179] Cannot create hsr debugfs directory [ 279.529822][ T5995] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 279.534695][T12179] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 279.542770][ T5995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.564762][ T5995] usb 3-1: Product: syz [ 279.569017][ T5995] usb 3-1: Manufacturer: syz [ 279.575465][T12179] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 279.585799][ T5995] usb 3-1: SerialNumber: syz [ 279.591856][T11787] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 279.599506][T12179] hsr0: entered allmulticast mode [ 279.605215][T12179] bond0: entered allmulticast mode [ 279.610421][T12179] bond_slave_0: entered allmulticast mode [ 279.622204][ T5995] usb 3-1: config 0 descriptor?? [ 279.628616][T12179] bond_slave_1: entered allmulticast mode [ 279.636339][T12179] batadv0: entered allmulticast mode [ 279.638718][ T5995] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 279.643804][T12179] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 279.653244][ T5995] em28xx 3-1:0.132: Video interface 132 found: [ 279.667944][T12179] bond0: left promiscuous mode [ 279.672873][T12179] bond_slave_0: left promiscuous mode [ 279.678428][T12179] bond_slave_1: left promiscuous mode [ 279.685131][T12179] batadv0: left promiscuous mode [ 279.705461][T12183] netlink: 'syz.4.2549': attribute type 4 has an invalid length. [ 279.761935][T11787] usb 4-1: Using ep0 maxpacket: 32 [ 279.769904][T11787] usb 4-1: config 14 has an invalid interface number: 68 but max is 0 [ 279.796753][T11787] usb 4-1: config 14 has no interface number 0 [ 279.804013][T11787] usb 4-1: config 14 interface 68 has no altsetting 0 [ 279.814371][ T30] audit: type=1400 audit(1755110332.631:849): avc: denied { watch_mount } for pid=12187 comm="syz.5.2551" path="/145" dev="tmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 279.815523][T11787] usb 4-1: New USB device found, idVendor=0870, idProduct=0001, bcdDevice=28.bf [ 279.896745][T11787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.905424][T11787] usb 4-1: Product: syz [ 279.909590][T11787] usb 4-1: Manufacturer: syz [ 279.915146][T11787] usb 4-1: SerialNumber: syz [ 280.047058][ T5995] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 280.466503][T11787] usb 4-1: USB disconnect, device number 33 [ 280.958130][T12210] SELinux: failed to load policy [ 281.104093][T12216] netlink: 'syz.1.2561': attribute type 1 has an invalid length. [ 281.113676][T12216] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2561'. [ 281.126996][ T30] audit: type=1400 audit(1755110333.941:850): avc: denied { create } for pid=12217 comm="syz.3.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 281.137735][T12218] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 281.156074][ T30] audit: type=1400 audit(1755110333.941:851): avc: denied { write } for pid=12217 comm="syz.3.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 281.163981][T12218] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 281.232393][ T5995] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 281.247493][T12162] em28xx 3-1:0.132: failed to trigger write to i2c address 0x2 (error=-5) [ 281.259481][ T5995] em28xx 3-1:0.132: board has no eeprom [ 281.269301][ T30] audit: type=1400 audit(1755110334.081:852): avc: denied { write } for pid=12220 comm="syz.4.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 281.393597][ T5995] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 281.419489][ T5995] em28xx 3-1:0.132: analog set to bulk mode. [ 281.439395][ T24] em28xx 3-1:0.132: Registering V4L2 extension [ 281.487859][ T5995] usb 3-1: USB disconnect, device number 33 [ 281.535570][ T5995] em28xx 3-1:0.132: Disconnecting em28xx [ 281.668769][ T24] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 281.710805][ T24] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 281.730927][ T24] em28xx 3-1:0.132: No AC97 audio processor [ 281.775780][ T24] usb 3-1: Decoder not found [ 281.785495][ T24] em28xx 3-1:0.132: failed to create media graph [ 281.834543][ T24] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 281.865684][ T24] em28xx 3-1:0.132: Remote control support is not available for this card. [ 281.900415][ T5995] em28xx 3-1:0.132: Closing input extension [ 281.947084][ T5995] em28xx 3-1:0.132: Freeing device [ 282.418319][T12250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.432515][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2574'. [ 282.600855][ T30] audit: type=1326 audit(1755110335.411:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12230 comm="syz.1.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068178ebe9 code=0x7fc00000 [ 283.011760][T11787] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 283.057115][T12286] sg_read: process 274 (syz.1.2589) changed security contexts after opening file descriptor, this is not allowed. [ 283.193286][T11787] usb 3-1: Using ep0 maxpacket: 8 [ 283.227533][T11787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 283.242550][T11787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.259562][T11787] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 283.271092][T11787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 283.306451][T11787] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 283.336530][T11787] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 283.356418][T11787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.372917][T11787] usb 3-1: config 0 descriptor?? [ 283.422043][ T5850] Bluetooth: hci5: urb ffff888036872900 submission failed (90) [ 283.510931][T12299] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2595'. [ 283.523883][ T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 283.534593][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2595'. [ 283.628325][T11787] usb 3-1: USB disconnect, device number 34 [ 283.714595][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.725560][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.735424][ T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 283.744518][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.756084][ T24] usb 2-1: config 0 descriptor?? [ 283.973682][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 283.982657][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 284.002684][ T24] usb 2-1: USB disconnect, device number 35 [ 284.571357][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2606'. [ 284.584122][T12325] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 284.597190][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2606'. [ 284.607207][T12325] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 285.002274][T11787] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 285.163500][T11787] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.174407][T11787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 285.184075][T11787] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.199426][T11787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.225654][T11787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.254544][T11787] usb 3-1: Product: syz [ 285.258803][T11787] usb 3-1: Manufacturer: syz [ 285.264403][T11787] usb 3-1: SerialNumber: syz [ 285.278493][T11787] cdc_mbim 3-1:1.0: CDC Union missing and no IAD found [ 285.285574][T11787] cdc_mbim 3-1:1.0: bind() failure [ 285.498675][ T30] audit: type=1400 audit(1755110338.311:854): avc: denied { shutdown } for pid=12328 comm="syz.2.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 285.504784][T11787] usb 3-1: USB disconnect, device number 35 [ 285.527889][ T5850] Bluetooth: hci3: link tx timeout [ 285.535114][ T5850] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.547956][ T5850] Bluetooth: hci3: link tx timeout [ 285.559696][ T5850] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.901214][ T30] audit: type=1400 audit(1755110338.711:855): avc: denied { create } for pid=12381 comm="syz.5.2631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 286.113697][ T44] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 286.284309][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 286.303197][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 286.337292][ T44] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 286.353193][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.379151][ T44] usb 4-1: config 0 descriptor?? [ 286.415221][T12398] netlink: 'syz.1.2638': attribute type 4 has an invalid length. [ 286.604755][ T44] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 286.781568][T11792] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 286.943750][T11792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.962721][T11792] usb 2-1: config 0 has no interfaces? [ 286.982478][T11792] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 286.995336][T11792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.017403][T11792] usb 2-1: config 0 descriptor?? [ 287.226540][ T5995] usb 4-1: USB disconnect, device number 34 [ 287.255487][T11792] usb 2-1: USB disconnect, device number 36 [ 287.332921][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2655'. [ 287.379098][ T30] audit: type=1400 audit(1755110340.191:856): avc: denied { mount } for pid=12418 comm="syz.4.2645" name="/" dev="hugetlbfs" ino=45485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 287.417769][T12417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.430401][T12417] batadv_slave_1 (unregistering): left promiscuous mode [ 287.641591][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 288.869836][ T30] audit: type=1400 audit(1755110341.681:857): avc: denied { setopt } for pid=12460 comm="syz.2.2667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 289.025656][T12468] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 289.448102][ T30] audit: type=1400 audit(1755110342.261:858): avc: denied { write } for pid=12490 comm="syz.3.2680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 289.485686][T11792] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 289.617326][ T30] audit: type=1400 audit(1755110342.431:859): avc: denied { mounton } for pid=12496 comm="syz.3.2683" path="/548/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 289.644405][ T30] audit: type=1400 audit(1755110342.461:860): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 289.665144][T11792] usb 3-1: Using ep0 maxpacket: 32 [ 289.672045][T11792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.683848][T11792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.695426][T11792] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 289.706200][T11792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.717824][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 289.726984][T11792] usb 3-1: config 0 descriptor?? [ 289.731826][ T44] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 289.891939][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 289.910222][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 289.923523][ T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x2A, changing to 0xA [ 289.936674][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 171, changing to 11 [ 289.950583][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 17932, setting to 1024 [ 289.970617][ T44] usb 2-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 289.980083][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.988517][ T44] usb 2-1: Product: syz [ 289.993073][ T44] usb 2-1: Manufacturer: syz [ 289.997668][ T44] usb 2-1: SerialNumber: syz [ 290.012412][ T44] usb 2-1: config 0 descriptor?? [ 290.019821][T12493] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 290.154963][T11792] ft260 0003:0403:6030.0030: unknown main item tag 0x7 [ 290.242942][T11789] usb 2-1: USB disconnect, device number 37 [ 290.258667][T12512] team0: Port device team_slave_0 removed [ 290.351037][T11792] ft260 0003:0403:6030.0030: chip code: 6424 8183 [ 290.553590][T11792] ft260 0003:0403:6030.0030: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 290.768221][T11792] ft260 0003:0403:6030.0030: failed to retrieve status: -32, no wakeup [ 291.196620][T11792] ft260 0003:0403:6030.0030: failed to reset I2C controller: -71 [ 291.254240][T11792] usb 3-1: USB disconnect, device number 36 [ 291.312387][T12537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.988577][ T30] audit: type=1400 audit(1755110344.751:861): avc: denied { relabelfrom } for pid=12550 comm="syz.1.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 292.014014][ T30] audit: type=1400 audit(1755110344.751:862): avc: denied { relabelto } for pid=12550 comm="syz.1.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 292.330138][T12561] fuse: Bad value for 'fd' [ 293.955588][ T5861] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 293.957652][ T5850] Bluetooth: hci5: command 0x1003 tx timeout [ 294.136094][T12597] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 294.168549][T12597] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 294.175447][T12597] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 294.194706][T12597] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 294.201980][T12597] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 294.222935][T12597] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 294.229658][T12597] comedi comedi3: 8255: I/O port conflict (0x802,4) [ 294.243594][T12597] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 294.257728][T12597] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 294.300574][T12597] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 294.314718][T12597] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 294.321197][T12597] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 294.381066][T12597] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 294.405260][T12597] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 294.416161][T12597] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 294.425442][T12597] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 294.439067][T12597] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 294.451672][T12597] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 294.458151][T12597] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 294.471772][T12597] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 294.478312][T12597] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 294.485317][T12597] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 294.717554][T12601] netlink: 'syz.2.2726': attribute type 3 has an invalid length. [ 295.926218][T12650] binder: 12649:12650 ioctl 4018620d 0 returned -22 [ 296.009471][T12655] binder: 12649:12655 ioctl c018620c 0 returned -14 [ 296.680241][ T30] audit: type=1400 audit(1755110349.491:863): avc: denied { accept } for pid=12669 comm="syz.3.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 296.832527][ T5861] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 296.989787][T12680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.523735][T12691] IPv4: Oversized IP packet from 172.20.20.24 [ 297.532487][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 297.539119][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 297.570518][T12686] syzkaller0: entered promiscuous mode [ 297.600150][T12686] syzkaller0: entered allmulticast mode [ 297.666043][ T30] audit: type=1400 audit(1755110350.471:864): avc: denied { read } for pid=12694 comm="syz.5.2764" path="socket:[46660]" dev="sockfs" ino=46660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 298.285282][T12712] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 300.981978][ T30] audit: type=1400 audit(1755110353.791:865): avc: denied { ioctl } for pid=12739 comm="syz.3.2779" path="socket:[47237]" dev="sockfs" ino=47237 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 301.514348][ T30] audit: type=1400 audit(1755110354.331:866): avc: denied { watch } for pid=12767 comm="syz.1.2790" path="/157/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 301.547270][T12769] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2787'. [ 302.113512][T12794] Bluetooth: (null): Too short H5 packet [ 302.948177][T12806] sctp: [Deprecated]: syz.2.2806 (pid 12806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.948177][T12806] Use struct sctp_sack_info instead [ 302.986557][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2807'. [ 303.471792][ T30] audit: type=1400 audit(1755110356.281:867): avc: denied { remount } for pid=12821 comm="syz.2.2812" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 303.997302][T12848] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2822'. [ 304.359350][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2831'. [ 304.377831][T12868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2831'. [ 304.391294][T12868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2831'. [ 304.672393][T12887] netlink: 'syz.5.2840': attribute type 1 has an invalid length. [ 304.708006][T12887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.793719][T12887] bond1: (slave gretap1): making interface the new active one [ 304.813160][T12887] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 305.112819][ T30] audit: type=1400 audit(1755110357.931:868): avc: denied { module_load } for pid=12906 comm="syz.2.2849" path="/596/bus" dev="tmpfs" ino=3124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 305.113076][T12909] Invalid ELF header magic: != ELF [ 305.299729][T12915] netlink: 'syz.2.2852': attribute type 10 has an invalid length. [ 305.341659][T12915] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2852'. [ 305.477501][T12915] dummy0: entered promiscuous mode [ 305.509629][T12915] team0: Port device dummy0 removed [ 305.522496][T12915] bridge0: port 3(dummy0) entered blocking state [ 305.558324][T12915] bridge0: port 3(dummy0) entered disabled state [ 305.582933][T12915] dummy0: entered allmulticast mode [ 306.046710][ T30] audit: type=1400 audit(1755110358.831:869): avc: denied { read } for pid=12931 comm="syz.1.2860" path="socket:[47085]" dev="sockfs" ino=47085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 306.594984][ T5956] usb 2-1: [UEAGLE-ATM] firmware is not available [ 306.623663][ T30] audit: type=1400 audit(1755110359.441:870): avc: denied { ioctl } for pid=12962 comm="syz.2.2869" path="socket:[48130]" dev="sockfs" ino=48130 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 307.325099][T13008] tipc: Enabled bearer , priority 10 [ 308.414806][ T30] audit: type=1326 audit(1755110361.231:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13047 comm="syz.5.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a11f8ebe9 code=0x7ffc0000 [ 308.503853][ T30] audit: type=1326 audit(1755110361.251:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13047 comm="syz.5.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f5a11f8ebe9 code=0x7ffc0000 [ 308.708939][T13060] geneve3: entered promiscuous mode [ 308.795938][ T30] audit: type=1326 audit(1755110361.251:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13047 comm="syz.5.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a11f8ebe9 code=0x7ffc0000 [ 308.913650][ T30] audit: type=1400 audit(1755110361.321:874): avc: denied { map } for pid=13053 comm="syz.4.2907" path="socket:[49169]" dev="sockfs" ino=49169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 309.111962][T11789] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 309.237290][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2918'. [ 309.247761][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2918'. [ 309.295660][T11789] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 309.317949][T11789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.330073][T11789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.340659][T11789] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 309.357778][T11789] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 309.366973][T11789] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 309.375231][T11789] usb 2-1: Manufacturer: syz [ 309.390381][T11789] usb 2-1: config 0 descriptor?? [ 309.805399][T11789] appleir 0003:05AC:8243.0031: unknown main item tag 0x0 [ 309.815588][T11789] appleir 0003:05AC:8243.0031: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 310.347018][T11790] usb 2-1: USB disconnect, device number 38 [ 310.608256][ T30] audit: type=1400 audit(1755110363.421:875): avc: denied { setopt } for pid=13112 comm="syz.3.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 310.673219][T13115] overlay: filesystem on ./bus not supported as upperdir [ 310.729649][T13120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2931'. [ 310.929631][ T5850] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 311.346278][T13127] netlink: 'syz.5.2936': attribute type 13 has an invalid length. [ 311.385782][T13127] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 311.652384][T11789] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 311.833408][T11789] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 311.855215][T11789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.898642][T11789] usb 2-1: config 0 descriptor?? [ 311.916472][T11789] cp210x 2-1:0.0: cp210x converter detected [ 312.305924][T13186] overlayfs: failed to clone upperpath [ 312.562010][T11789] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 312.570778][T11789] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 312.616738][T11789] usb 2-1: cp210x converter now attached to ttyUSB0 [ 312.648280][T11789] usb 2-1: USB disconnect, device number 39 [ 312.694145][T11789] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 312.713415][T11789] cp210x 2-1:0.0: device disconnected [ 314.203772][ T30] audit: type=1400 audit(1755110367.021:876): avc: denied { cmd } for pid=13275 comm="syz.3.2998" path="socket:[49615]" dev="sockfs" ino=49615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 314.251674][T11787] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 314.403196][T11787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.414690][T11787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.424518][T11787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.437452][T11787] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.446628][T11787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.460018][T11787] usb 2-1: config 0 descriptor?? [ 314.880032][T11787] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 314.997401][T13285] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 315.172948][T11789] usb 2-1: USB disconnect, device number 40 [ 315.207815][ T30] audit: type=1400 audit(1755110368.021:877): avc: denied { setopt } for pid=13297 comm="syz.3.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 315.251678][ T30] audit: type=1400 audit(1755110368.051:878): avc: denied { read } for pid=13297 comm="syz.3.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 315.303182][ T30] audit: type=1326 audit(1755110368.121:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13301 comm="syz.3.3011" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f735fd8ebe9 code=0x0 [ 315.889290][T13310] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 315.941665][T11789] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 316.114159][T11789] usb 2-1: Using ep0 maxpacket: 8 [ 316.126275][T11789] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 316.148706][T11789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.187571][T11789] pvrusb2: Hardware description: Terratec Grabster AV400 [ 316.216293][T11789] pvrusb2: ********** [ 316.220348][T11789] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 316.255499][T11789] pvrusb2: Important functionality might not be entirely working. [ 316.285031][T11789] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 316.286039][T13332] geneve2: entered promiscuous mode [ 316.317100][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.327979][T11789] pvrusb2: ********** [ 316.334806][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.345567][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.362076][T13335] tipc: Started in network mode [ 316.367570][T13335] tipc: Node identity ac1414aa, cluster identity 4711 [ 316.378476][T13335] tipc: Enabling of bearer rejected, failed to enable media [ 316.396971][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.404843][ T2330] pvrusb2: Invalid write control endpoint [ 316.443761][T13342] overlayfs: failed to clone upperpath [ 316.457153][ T2330] pvrusb2: Invalid write control endpoint [ 316.464612][ T2330] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 316.476237][ T2330] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 316.484166][ T2330] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 316.496278][ T2330] pvrusb2: Device being rendered inoperable [ 316.508737][ T2330] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 316.517735][ T2330] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 316.535629][ T2330] pvrusb2: Attached sub-driver cx25840 [ 316.541440][ T2330] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 316.552505][ T2330] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 316.618700][T13306] pvrusb2: Attempted to execute control transfer when device not ok [ 316.654722][ T44] usb 2-1: USB disconnect, device number 41 [ 316.834659][T11789] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 316.835145][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.013101][T11789] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 317.031695][T11789] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.053968][T11789] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 317.080249][T11789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.330372][T11789] usb 4-1: GET_CAPABILITIES returned 0 [ 317.349443][T11789] usbtmc 4-1:16.0: can't read capabilities [ 317.571551][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 317.805324][T11789] usb 4-1: USB disconnect, device number 35 [ 317.833593][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.846626][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.872114][ T24] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 317.894334][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.919718][ T24] usb 2-1: config 0 descriptor?? [ 318.388039][ T24] cm6533_jd 0003:0D8C:0022.0033: unknown main item tag 0x0 [ 318.401229][ T24] cm6533_jd 0003:0D8C:0022.0033: unknown main item tag 0x0 [ 318.454379][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0033/input/input44 [ 318.512771][ T24] cm6533_jd 0003:0D8C:0022.0033: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 318.547268][T13383] overlayfs: failed to clone upperpath [ 318.599968][ T24] usb 2-1: USB disconnect, device number 42 [ 318.648708][T13384] fido_id[13384]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 319.270298][ T30] audit: type=1400 audit(1755110372.081:880): avc: denied { bind } for pid=13402 comm="syz.4.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 319.859937][T13428] input: syz1 as /devices/virtual/input/input45 [ 320.099407][T13435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3064'. [ 320.977842][ T30] audit: type=1400 audit(1755110373.791:881): avc: denied { map } for pid=13468 comm="syz.1.3079" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 321.039213][ T30] audit: type=1400 audit(1755110373.821:882): avc: denied { execute } for pid=13468 comm="syz.1.3079" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 321.105289][T13474] 9pnet_fd: Insufficient options for proto=fd [ 321.275197][T13470] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3079'. [ 321.555262][T13494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.741529][ T30] audit: type=1400 audit(1755110374.551:883): avc: denied { read write } for pid=13500 comm="syz.1.3092" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 321.955225][ T30] audit: type=1400 audit(1755110374.551:884): avc: denied { ioctl open } for pid=13500 comm="syz.1.3092" path="/208/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 322.061170][T13520] input: syz0 as /devices/virtual/input/input46 [ 322.852021][ T5956] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 323.029744][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 323.065335][T13560] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 323.083241][ T5956] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 323.094953][ T5956] usb 2-1: config 0 has no interface number 0 [ 323.101424][ T5956] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 323.126208][ T5956] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 323.138139][ T5956] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 323.160493][ T5956] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 323.173839][ T5956] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 323.214049][ T5956] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 323.226747][ T5956] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 323.244259][ T5956] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 323.254972][ T5956] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.273017][ T5956] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 323.285303][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.293840][ T5956] usb 2-1: Product: syz [ 323.298021][ T5956] usb 2-1: Manufacturer: syz [ 323.307458][ T5956] usb 2-1: SerialNumber: syz [ 323.342880][ T5956] usb 2-1: config 0 descriptor?? [ 323.349250][T13546] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.369557][ T5956] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 323.395217][ T5956] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 324.296550][ T5956] usb 2-1: USB disconnect, device number 43 [ 324.538430][T13592] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 324.579497][T13596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3130'. [ 324.638071][T13598] netlink: 'syz.5.3131': attribute type 1 has an invalid length. [ 324.811633][ T5956] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 325.001831][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 325.011122][ T5956] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 325.020936][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.029917][ T5956] usb 4-1: Product: syz [ 325.034534][ T5956] usb 4-1: Manufacturer: syz [ 325.039166][ T5956] usb 4-1: SerialNumber: syz [ 325.057444][ T5956] usb 4-1: config 0 descriptor?? [ 325.074363][ T5956] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 325.441645][T11787] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 325.601650][T11787] usb 2-1: Using ep0 maxpacket: 32 [ 325.615199][T11787] usb 2-1: config 0 has an invalid interface number: 108 but max is 0 [ 325.631216][T11787] usb 2-1: config 0 has no interface number 0 [ 325.653708][T11787] usb 2-1: config 0 interface 108 has no altsetting 0 [ 325.671157][T11787] usb 2-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 325.682183][ T5956] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 325.690212][T11787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.697477][ T5956] usb 4-1: USB disconnect, device number 36 [ 325.710094][T11787] usb 2-1: Product: syz [ 325.722946][T11787] usb 2-1: Manufacturer: syz [ 325.727650][T11787] usb 2-1: SerialNumber: syz [ 325.746210][T11787] usb 2-1: config 0 descriptor?? [ 325.767103][T11787] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 326.095124][T11787] usb 2-1: USB disconnect, device number 44 [ 326.949693][T13691] loop9: detected capacity change from 0 to 8 [ 326.961604][T13691] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 326.967191][T13691] loop9: partition table partially beyond EOD, truncated [ 326.975100][T13691] loop9: p1 size 81768186 extends beyond EOD, truncated [ 327.040201][T13691] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 327.051342][T13691] loop9: partition table partially beyond EOD, truncated [ 327.076200][T13691] loop9: p1 size 81768186 extends beyond EOD, truncated [ 327.144445][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 327.205947][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 327.575606][T13712] overlayfs: failed to clone upperpath [ 327.650927][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 327.660903][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 327.676742][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 327.686087][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 327.695474][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 327.705477][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 327.717522][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 327.727913][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 327.737726][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 327.747182][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 331.288900][T13854] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 331.741916][ T5956] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 331.901600][ T5956] usb 4-1: Using ep0 maxpacket: 32 [ 331.921194][ T5956] usb 4-1: config 0 has no interfaces? [ 331.954633][ T5956] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 331.967615][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.976880][ T5956] usb 4-1: Product: syz [ 331.981105][ T5956] usb 4-1: Manufacturer: syz [ 331.986297][ T5956] usb 4-1: SerialNumber: syz [ 332.026954][ T5956] usb 4-1: config 0 descriptor?? [ 332.263262][ T5956] usb 4-1: USB disconnect, device number 37 [ 333.686609][ T30] audit: type=1400 audit(1755110642.509:885): avc: denied { wake_alarm } for pid=13961 comm="syz.2.3283" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 333.798842][ T30] audit: type=1400 audit(1755110642.619:886): avc: denied { create } for pid=13963 comm="syz.3.3284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 333.871812][ T30] audit: type=1400 audit(1755110642.619:887): avc: denied { write } for pid=13963 comm="syz.3.3284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 334.130072][T13980] syzkaller1: entered promiscuous mode [ 334.137993][T13980] syzkaller1: entered allmulticast mode [ 334.231811][ T44] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 334.271679][ T5861] Bluetooth: hci0: command 0x0c20 tx timeout [ 334.360477][T13987] batadv_slave_1: entered promiscuous mode [ 334.375260][T13987] dvmrp1: entered allmulticast mode [ 334.383358][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 334.389393][ T44] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 334.405275][T13987] dvmrp1: left allmulticast mode [ 334.411139][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.437980][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.450902][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.466590][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.481355][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.497760][T13985] batadv_slave_1: left promiscuous mode [ 334.542006][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.555592][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.566936][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.578263][ T44] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 334.601630][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 334.624348][T13999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13999 comm=syz.1.3295 [ 334.631612][ T44] usb 4-1: SerialNumber: syz [ 334.656015][ T44] usb 4-1: config 0 descriptor?? [ 334.666443][T13999] netlink: 'syz.1.3295': attribute type 1 has an invalid length. [ 334.700440][ T44] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input47 [ 334.784911][T14006] binder: 14005:14006 ioctl c0306201 200000000040 returned -14 [ 334.877036][T14007] bond1: (slave bridge1): making interface the new active one [ 334.942346][T14007] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 334.977282][T13976] input: syz1 as /devices/virtual/input/input48 [ 335.057701][ T44] usb 4-1: USB disconnect, device number 38 [ 335.066583][ T5206] bcm5974 4-1:0.0: could not read from device [ 335.084510][ T6250] bcm5974 4-1:0.0: could not read from device [ 335.147892][T14024] input: syz1 as /devices/virtual/input/input49 [ 335.765235][ T30] audit: type=1400 audit(1755110644.589:888): avc: denied { map } for pid=14052 comm="syz.3.3319" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 337.481579][ T5956] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 337.671671][ T5956] usb 4-1: unable to get BOS descriptor or descriptor too short [ 337.685991][ T5956] usb 4-1: not running at top speed; connect to a high speed hub [ 337.702986][ T5956] usb 4-1: config 6 has an invalid interface number: 7 but max is 0 [ 337.711025][ T5956] usb 4-1: config 6 has no interface number 0 [ 337.719657][ T5956] usb 4-1: config 6 interface 7 altsetting 5 endpoint 0xB has invalid maxpacket 43400, setting to 64 [ 337.766280][ T5956] usb 4-1: config 6 interface 7 has no altsetting 0 [ 337.788505][ T5956] usb 4-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=c9.92 [ 337.799573][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.809339][ T5956] usb 4-1: Product: syz [ 337.814705][ T5956] usb 4-1: Manufacturer: syz [ 337.820639][ T5956] usb 4-1: SerialNumber: syz [ 338.047178][T14102] __nla_validate_parse: 50 callbacks suppressed [ 338.047204][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3341'. [ 338.066850][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3341'. [ 338.093427][ T5956] usb 4-1: Error in usbnet_get_endpoints (-22) [ 338.115618][ T5956] usb 4-1: USB disconnect, device number 39 [ 338.889519][T14155] Invalid ELF header magic: != ELF [ 338.988700][ T30] audit: type=1400 audit(1755110647.809:889): avc: denied { write } for pid=14152 comm="syz.5.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 340.097539][T14191] netlink: 566 bytes leftover after parsing attributes in process `syz.4.3377'. [ 340.580816][T11787] libceph: connect (1)[c::]:6789 error -22 [ 340.597235][T11787] libceph: mon0 (1)[c::]:6789 connect error [ 340.736817][T14215] ceph: No mds server is up or the cluster is laggy [ 341.269843][ T30] audit: type=1326 audit(1755110650.089:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14240 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068178ebe9 code=0x7ffc0000 [ 341.411601][ T30] audit: type=1326 audit(1755110650.089:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14240 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f068178ebe9 code=0x7ffc0000 [ 341.462789][ T30] audit: type=1326 audit(1755110650.089:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14240 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068178ebe9 code=0x7ffc0000 [ 341.521592][ T30] audit: type=1326 audit(1755110650.089:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14240 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068178ebe9 code=0x7ffc0000 [ 341.571666][ T30] audit: type=1326 audit(1755110650.089:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14240 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f068178ebe9 code=0x7ffc0000 [ 341.602811][T14257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14257 comm=syz.1.3401 [ 341.716998][ T30] audit: type=1326 audit(1755110650.089:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14240 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068178ebe9 code=0x7ffc0000 [ 341.793699][ T30] audit: type=1326 audit(1755110650.129:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14240 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068178ebe9 code=0x7ffc0000 [ 342.108822][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3403'. [ 342.140826][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3403'. [ 342.221254][T14266] macsec2: entered promiscuous mode [ 342.245115][T14266] erspan0: entered promiscuous mode [ 342.262876][T14266] macsec2: entered allmulticast mode [ 342.286294][T14266] erspan0: entered allmulticast mode [ 342.306251][T14266] batman_adv: batadv0: Adding interface: macsec2 [ 342.440561][T14266] batman_adv: batadv0: The MTU of interface macsec2 is too small (1418) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.511328][T14266] batman_adv: batadv0: Interface activated: macsec2 [ 343.216376][ T30] audit: type=1800 audit(1755110652.039:897): pid=14305 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3419" name="file0" dev="tmpfs" ino=3279 res=0 errno=0 [ 343.237105][T14307] all: renamed from lo [ 345.731630][ T24] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 345.806747][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.820134][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.830001][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.840315][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.853288][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.893513][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 345.909959][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 345.947834][ T24] usb 2-1: config 1 has an invalid interface number: 6 but max is 2 [ 345.966344][ T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 346.002051][ T24] usb 2-1: config 1 has no interface number 1 [ 346.040237][ T24] usb 2-1: too many endpoints for config 1 interface 6 altsetting 7: 195, using maximum allowed: 30 [ 346.071697][ T24] usb 2-1: config 1 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 195 [ 346.105257][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 346.123112][ T24] usb 2-1: config 1 interface 6 has no altsetting 0 [ 346.143091][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.156979][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.182020][ T24] usb 2-1: Product: syz [ 346.221630][ T24] usb 2-1: Manufacturer: syz [ 346.226263][ T24] usb 2-1: SerialNumber: syz [ 346.444203][T14394] chnl_net:caif_netlink_parms(): no params data found [ 346.463982][ T24] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 346.472670][ T24] usb 2-1: 2:1 : sample bitwidth 11 in over sample bytes 1 [ 346.479892][ T24] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 346.540807][ T24] usb 2-1: USB disconnect, device number 45 [ 346.719105][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.855019][T14394] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.862285][T14394] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.870188][T14394] bridge_slave_0: entered allmulticast mode [ 346.877632][T14394] bridge_slave_0: entered promiscuous mode [ 346.886042][T14394] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.895168][T14394] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.902726][T14394] bridge_slave_1: entered allmulticast mode [ 346.920186][T14394] bridge_slave_1: entered promiscuous mode [ 346.962898][T14394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.977425][T14394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.013385][T14394] team0: Port device team_slave_0 added [ 347.023370][T14394] team0: Port device team_slave_1 added [ 347.091386][T14394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.098731][T14394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.143183][T14394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.174060][T14394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.191222][T14394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.217991][T14394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.314343][T14281] Set syz1 is full, maxelem 65536 reached [ 347.397424][T14394] hsr_slave_0: entered promiscuous mode [ 347.444564][T14394] hsr_slave_1: entered promiscuous mode [ 347.472895][T14394] debugfs: 'hsr0' already exists in 'hsr' [ 347.478676][T14394] Cannot create hsr debugfs directory [ 347.951708][ T5850] Bluetooth: hci4: command tx timeout [ 348.487178][T14394] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 348.520733][T14394] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 348.531260][T14394] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 348.560552][T14394] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 348.690284][T14463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3483'. [ 348.789161][T14394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.942562][T14394] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.960676][ T3633] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.967810][ T3633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.977763][ T3633] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.984992][ T3633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.014252][T14394] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 349.025116][T14394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.720769][T14394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.032548][ T5850] Bluetooth: hci4: command tx timeout [ 350.053994][T14508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.084687][T14508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.363437][T14394] veth0_vlan: entered promiscuous mode [ 350.392752][T14394] veth1_vlan: entered promiscuous mode [ 350.451483][T14394] veth0_macvtap: entered promiscuous mode [ 350.479951][T14394] veth1_macvtap: entered promiscuous mode [ 350.527194][T14394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.597937][T14394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.634996][ T64] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.644443][ T64] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.670393][ T64] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.702590][ T3479] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.070997][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.087638][T14539] lo: entered allmulticast mode [ 351.120117][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.206222][T14538] lo: left allmulticast mode [ 351.242651][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.276601][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.111830][ T5850] Bluetooth: hci4: command tx timeout [ 352.280377][T14572] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3517'. [ 352.452403][T14572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3517'. [ 352.781768][ T30] audit: type=1400 audit(1755110661.589:898): avc: denied { create } for pid=14564 comm="syz.3.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 352.886961][T14583] lo speed is unknown, defaulting to 1000 [ 353.006361][T14584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.067382][T14583] lo speed is unknown, defaulting to 1000 [ 353.098980][T14583] lo speed is unknown, defaulting to 1000 [ 353.593706][T14583] infiniband syz0: set active [ 353.599831][T14583] infiniband syz0: added lo [ 353.638888][T11790] lo speed is unknown, defaulting to 1000 [ 353.762820][T14583] RDS/IB: syz0: added [ 353.767554][T14583] smc: adding ib device syz0 with port count 1 [ 353.774202][T14583] smc: ib device syz0 port 1 has pnetid [ 353.783054][T11790] lo speed is unknown, defaulting to 1000 [ 353.793658][T14583] lo speed is unknown, defaulting to 1000 [ 354.201646][ T5850] Bluetooth: hci4: command tx timeout [ 354.533405][T14583] lo speed is unknown, defaulting to 1000 [ 354.801186][ T30] audit: type=1400 audit(1755110663.619:899): avc: denied { unmount } for pid=14394 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 355.012843][T14583] lo speed is unknown, defaulting to 1000 [ 355.436015][T14583] lo speed is unknown, defaulting to 1000 [ 355.984339][T14583] lo speed is unknown, defaulting to 1000 [ 356.192506][T14645] tipc: Started in network mode [ 356.204161][T14645] tipc: Node identity 566a4be01927, cluster identity 4711 [ 356.221744][T14645] tipc: Enabled bearer , priority 0 [ 356.296998][T14645] tipc: Disabling bearer [ 356.321240][T14583] lo speed is unknown, defaulting to 1000 [ 356.726791][T14583] lo speed is unknown, defaulting to 1000 [ 356.938235][ T30] audit: type=1400 audit(1755110665.759:900): avc: denied { mount } for pid=14664 comm="syz.3.3552" name="/" dev="rpc_pipefs" ino=55900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 356.989840][ T30] audit: type=1400 audit(1755110665.759:901): avc: denied { watch } for pid=14664 comm="syz.3.3552" path="/706/file0" dev="rpc_pipefs" ino=55900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 357.049214][ T30] audit: type=1400 audit(1755110665.799:902): avc: denied { unmount } for pid=14664 comm="syz.3.3552" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 357.497938][T14691] fuse: Bad value for 'fd' [ 357.613225][T14696] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 357.768785][T14703] loop9: detected capacity change from 0 to 8 [ 357.783115][ T5837] Dev loop9: unable to read RDB block 8 [ 357.803348][ T5837] loop9: unable to read partition table [ 357.809171][ T5837] loop9: partition table beyond EOD, truncated [ 357.817702][ T30] audit: type=1326 audit(1755110666.629:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14706 comm="syz.2.3569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23f2b8ebe9 code=0x0 [ 357.862410][T14703] Dev loop9: unable to read RDB block 8 [ 357.868062][T14703] loop9: unable to read partition table [ 357.908136][T14714] overlayfs: failed to clone upperpath [ 357.909655][T14703] loop9: partition table beyond EOD, truncated [ 357.922873][T14703] loop_reread_partitions: partition scan of loop9 (■швлx№        ) failed (rc=-5) [ 358.714244][T14752] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 358.741088][T14752] batman_adv: batadv0: Adding interface: ip6gretap1 [ 358.754473][T14752] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.803782][T14752] batman_adv: batadv0: Interface activated: ip6gretap1 [ 359.303953][T14781] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaa [ 359.595221][ T30] audit: type=1400 audit(1755110668.409:904): avc: denied { getopt } for pid=14790 comm="syz.3.3599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 359.886523][T14798] overlayfs: failed to clone upperpath [ 360.391691][T11789] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 360.563409][T11789] usb 4-1: Using ep0 maxpacket: 8 [ 360.570111][T11789] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 360.578925][T11789] usb 4-1: config 179 has no interface number 0 [ 360.588936][T11789] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 360.612648][T11789] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 360.634261][T11789] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 360.672126][T11789] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 360.699950][T11789] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 360.702058][T14844] overlayfs: failed to clone upperpath [ 360.722506][T11789] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 360.736431][T11789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.757911][T14816] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 361.070254][T11789] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input50 [ 361.288034][T14816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.319066][T14816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.335862][ C0] [ 361.338212][ C0] ======================================================== [ 361.345486][ C0] WARNING: possible irq lock inversion dependency detected [ 361.352671][ C0] 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 Not tainted [ 361.359778][ C0] -------------------------------------------------------- [ 361.366961][ C0] syz.5.3634/14866 just changed the state of lock: [ 361.373436][ C0] ffff888028dd7230 (&dev->event_lock#2){..-.}-{3:3}, at: input_event+0x74/0xd0 [ 361.382392][ C0] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 361.390342][ C0] (tasklist_lock){.+.+}-{3:3} [ 361.390365][ C0] [ 361.390365][ C0] [ 361.390365][ C0] and interrupts could create inverse lock ordering between them. [ 361.390365][ C0] [ 361.409375][ C0] [ 361.409375][ C0] other info that might help us debug this: [ 361.417409][ C0] Chain exists of: [ 361.417409][ C0] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 361.417409][ C0] [ 361.430976][ C0] Possible interrupt unsafe locking scenario: [ 361.430976][ C0] [ 361.439285][ C0] CPU0 CPU1 [ 361.444632][ C0] ---- ---- [ 361.449977][ C0] lock(tasklist_lock); [ 361.454201][ C0] local_irq_disable(); [ 361.460930][ C0] lock(&dev->event_lock#2); [ 361.468115][ C0] lock(&client->buffer_lock); [ 361.475486][ C0] [ 361.478919][ C0] lock(&dev->event_lock#2); [ 361.483775][ C0] [ 361.483775][ C0] *** DEADLOCK *** [ 361.483775][ C0] [ 361.491890][ C0] 5 locks held by syz.5.3634/14866: [ 361.497080][ C0] #0: ffffffff8e6de750 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x4076/0x7690 [ 361.506382][ C0] #1: ffff888029c1c260 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0xfd/0x21d0 [ 361.515333][ C0] #2: ffff888029c181e0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x198/0x21d0 [ 361.524549][ C0] #3: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_handle+0x64/0x550 [ 361.534910][ C0] #4: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: xpad_irq_in+0x1343/0x2ac0 [ 361.544200][ C0] [ 361.544200][ C0] the shortest dependencies between 2nd lock and 1st lock: [ 361.553556][ C0] -> (tasklist_lock){.+.+}-{3:3} { [ 361.559007][ C0] HARDIRQ-ON-R at: [ 361.563307][ C0] lock_acquire+0x179/0x350 [ 361.570142][ C0] _raw_read_lock+0x5f/0x70 [ 361.576989][ C0] __do_wait+0x105/0x890 [ 361.583560][ C0] do_wait+0x21e/0x5a0 [ 361.589957][ C0] kernel_wait+0x9f/0x160 [ 361.596608][ C0] call_usermodehelper_exec_work+0xf1/0x170 [ 361.604837][ C0] process_one_work+0x9cc/0x1b70 [ 361.612103][ C0] worker_thread+0x6c8/0xf10 [ 361.619017][ C0] kthread+0x3c5/0x780 [ 361.625411][ C0] ret_from_fork+0x5d7/0x6f0 [ 361.632323][ C0] ret_from_fork_asm+0x1a/0x30 [ 361.639420][ C0] SOFTIRQ-ON-R at: [ 361.643723][ C0] lock_acquire+0x179/0x350 [ 361.650560][ C0] _raw_read_lock+0x5f/0x70 [ 361.657395][ C0] __do_wait+0x105/0x890 [ 361.663969][ C0] do_wait+0x21e/0x5a0 [ 361.670380][ C0] kernel_wait+0x9f/0x160 [ 361.677034][ C0] call_usermodehelper_exec_work+0xf1/0x170 [ 361.685292][ C0] process_one_work+0x9cc/0x1b70 [ 361.692573][ C0] worker_thread+0x6c8/0xf10 [ 361.699503][ C0] kthread+0x3c5/0x780 [ 361.705902][ C0] ret_from_fork+0x5d7/0x6f0 [ 361.713601][ C0] ret_from_fork_asm+0x1a/0x30 [ 361.720700][ C0] INITIAL USE at: [ 361.724922][ C0] lock_acquire+0x179/0x350 [ 361.731674][ C0] _raw_write_lock_irq+0x36/0x50 [ 361.738857][ C0] copy_process+0x4caf/0x7690 [ 361.745775][ C0] kernel_clone+0xfc/0x930 [ 361.752431][ C0] user_mode_thread+0xc7/0x110 [ 361.759432][ C0] rest_init+0x23/0x2b0 [ 361.765827][ C0] start_kernel+0x3ee/0x4d0 [ 361.772574][ C0] x86_64_start_reservations+0x18/0x30 [ 361.780274][ C0] x86_64_start_kernel+0x130/0x190 [ 361.787633][ C0] common_startup_64+0x13e/0x148 [ 361.794809][ C0] INITIAL READ USE at: [ 361.799460][ C0] lock_acquire+0x179/0x350 [ 361.806656][ C0] _raw_read_lock+0x5f/0x70 [ 361.813840][ C0] __do_wait+0x105/0x890 [ 361.820763][ C0] do_wait+0x21e/0x5a0 [ 361.827512][ C0] kernel_wait+0x9f/0x160 [ 361.834513][ C0] call_usermodehelper_exec_work+0xf1/0x170 [ 361.843083][ C0] process_one_work+0x9cc/0x1b70 [ 361.850690][ C0] worker_thread+0x6c8/0xf10 [ 361.857966][ C0] kthread+0x3c5/0x780 [ 361.864720][ C0] ret_from_fork+0x5d7/0x6f0 [ 361.871985][ C0] ret_from_fork_asm+0x1a/0x30 [ 361.879427][ C0] } [ 361.882251][ C0] ... key at: [] tasklist_lock+0x18/0x40 [ 361.890301][ C0] ... acquired at: [ 361.894434][ C0] _raw_read_lock+0x5f/0x70 [ 361.899120][ C0] send_sigurg+0xed/0xc80 [ 361.903607][ C0] sk_send_sigurg+0x76/0x360 [ 361.908359][ C0] unix_stream_sendmsg+0xfa5/0x1340 [ 361.913717][ C0] ____sys_sendmsg+0xa98/0xc70 [ 361.918695][ C0] ___sys_sendmsg+0x134/0x1d0 [ 361.923525][ C0] __sys_sendmmsg+0x200/0x420 [ 361.928352][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 361.933447][ C0] do_syscall_64+0xcd/0x4c0 [ 361.938107][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.944152][ C0] [ 361.946467][ C0] -> (&f_owner->lock){....}-{3:3} { [ 361.951918][ C0] INITIAL USE at: [ 361.956047][ C0] lock_acquire+0x179/0x350 [ 361.962621][ C0] _raw_write_lock_irq+0x36/0x50 [ 361.969636][ C0] __f_setown+0x61/0x3c0 [ 361.975944][ C0] generic_setlease+0xeef/0x1300 [ 361.982947][ C0] kernel_setlease+0x106/0x140 [ 361.989774][ C0] vfs_setlease+0x258/0x2d0 [ 361.996338][ C0] fcntl_setlease+0x3ed/0x5a0 [ 362.003089][ C0] do_fcntl+0x751/0x15a0 [ 362.009402][ C0] __x64_sys_fcntl+0x163/0x200 [ 362.016234][ C0] do_syscall_64+0xcd/0x4c0 [ 362.022802][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.030761][ C0] INITIAL READ USE at: [ 362.035329][ C0] lock_acquire+0x179/0x350 [ 362.042351][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 362.050059][ C0] send_sigio+0x31/0x3e0 [ 362.056803][ C0] kill_fasync+0x214/0x510 [ 362.063724][ C0] lease_break_callback+0x23/0x30 [ 362.071253][ C0] __break_lease+0x671/0x1810 [ 362.078426][ C0] do_dentry_open+0x91f/0x1530 [ 362.085688][ C0] vfs_open+0x82/0x3f0 [ 362.092261][ C0] path_openat+0x1de4/0x2cb0 [ 362.099351][ C0] do_filp_open+0x20b/0x470 [ 362.106349][ C0] do_sys_openat2+0x11b/0x1d0 [ 362.113528][ C0] __x64_sys_open+0x153/0x1e0 [ 362.120706][ C0] do_syscall_64+0xcd/0x4c0 [ 362.127707][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.136110][ C0] } [ 362.138844][ C0] ... key at: [] __key.1+0x0/0x40 [ 362.146196][ C0] ... acquired at: [ 362.150238][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 362.155612][ C0] send_sigio+0x31/0x3e0 [ 362.160010][ C0] kill_fasync+0x214/0x510 [ 362.164581][ C0] lease_break_callback+0x23/0x30 [ 362.169763][ C0] __break_lease+0x671/0x1810 [ 362.174589][ C0] do_dentry_open+0x91f/0x1530 [ 362.179504][ C0] vfs_open+0x82/0x3f0 [ 362.183729][ C0] path_openat+0x1de4/0x2cb0 [ 362.188472][ C0] do_filp_open+0x20b/0x470 [ 362.193162][ C0] do_sys_openat2+0x11b/0x1d0 [ 362.198052][ C0] __x64_sys_open+0x153/0x1e0 [ 362.202910][ C0] do_syscall_64+0xcd/0x4c0 [ 362.207569][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.213702][ C0] [ 362.216004][ C0] -> (&new->fa_lock){....}-{3:3} { [ 362.221284][ C0] INITIAL USE at: [ 362.225334][ C0] lock_acquire+0x179/0x350 [ 362.231738][ C0] _raw_write_lock_irq+0x36/0x50 [ 362.238593][ C0] fasync_remove_entry+0xb2/0x1e0 [ 362.245515][ C0] fasync_helper+0xaf/0xd0 [ 362.251824][ C0] lease_modify+0x232/0x500 [ 362.258215][ C0] locks_remove_file+0x29e/0x5c0 [ 362.265041][ C0] __fput+0x351/0xb70 [ 362.270916][ C0] task_work_run+0x150/0x240 [ 362.277396][ C0] exit_to_user_mode_loop+0xeb/0x110 [ 362.284571][ C0] do_syscall_64+0x3f6/0x4c0 [ 362.291051][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.298853][ C0] INITIAL READ USE at: [ 362.303344][ C0] lock_acquire+0x179/0x350 [ 362.310184][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 362.317713][ C0] kill_fasync+0x138/0x510 [ 362.324462][ C0] lease_break_callback+0x23/0x30 [ 362.331819][ C0] __break_lease+0x671/0x1810 [ 362.338822][ C0] do_dentry_open+0x91f/0x1530 [ 362.345912][ C0] vfs_open+0x82/0x3f0 [ 362.352325][ C0] path_openat+0x1de4/0x2cb0 [ 362.359242][ C0] do_filp_open+0x20b/0x470 [ 362.366072][ C0] do_sys_openat2+0x11b/0x1d0 [ 362.373100][ C0] __x64_sys_open+0x153/0x1e0 [ 362.380106][ C0] do_syscall_64+0xcd/0x4c0 [ 362.386937][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.395154][ C0] } [ 362.397828][ C0] ... key at: [] __key.0+0x0/0x40 [ 362.405091][ C0] ... acquired at: [ 362.409040][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 362.414401][ C0] kill_fasync+0x138/0x510 [ 362.418975][ C0] evdev_pass_values+0x619/0x9b0 [ 362.424070][ C0] evdev_events+0x1bb/0x390 [ 362.428728][ C0] input_pass_values+0x74e/0x880 [ 362.433825][ C0] input_handle_event+0xf00/0x14d0 [ 362.439096][ C0] input_inject_event+0x1e8/0x3b0 [ 362.444285][ C0] evdev_write+0x457/0x750 [ 362.448869][ C0] vfs_write+0x2a0/0x11d0 [ 362.453376][ C0] ksys_write+0x1f8/0x250 [ 362.457877][ C0] do_syscall_64+0xcd/0x4c0 [ 362.462552][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.468608][ C0] [ 362.470909][ C0] -> (&client->buffer_lock){....}-{3:3} { [ 362.476730][ C0] INITIAL USE at: [ 362.480689][ C0] lock_acquire+0x179/0x350 [ 362.486919][ C0] _raw_spin_lock_irq+0x36/0x50 [ 362.493499][ C0] evdev_read+0x436/0xee0 [ 362.499550][ C0] vfs_read+0x1e4/0xcf0 [ 362.505420][ C0] ksys_read+0x1f8/0x250 [ 362.511388][ C0] do_syscall_64+0xcd/0x4c0 [ 362.517607][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.525223][ C0] } [ 362.527785][ C0] ... key at: [] __key.1+0x0/0x40 [ 362.534977][ C0] ... acquired at: [ 362.538844][ C0] _raw_spin_lock+0x2e/0x40 [ 362.543505][ C0] evdev_pass_values+0x10e/0x9b0 [ 362.548614][ C0] evdev_events+0x1bb/0x390 [ 362.553272][ C0] input_pass_values+0x74e/0x880 [ 362.558364][ C0] input_handle_event+0xf00/0x14d0 [ 362.563630][ C0] input_inject_event+0x1e8/0x3b0 [ 362.568810][ C0] evdev_write+0x457/0x750 [ 362.573383][ C0] vfs_write+0x2a0/0x11d0 [ 362.577861][ C0] ksys_write+0x1f8/0x250 [ 362.582344][ C0] do_syscall_64+0xcd/0x4c0 [ 362.587001][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.593047][ C0] [ 362.595350][ C0] -> (&dev->event_lock#2){..-.}-{3:3} { [ 362.600893][ C0] IN-SOFTIRQ-W at: [ 362.604850][ C0] lock_acquire+0x179/0x350 [ 362.610991][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 362.617828][ C0] input_event+0x74/0xd0 [ 362.623706][ C0] xpad360_process_packet.part.0+0xed/0xce0 [ 362.631228][ C0] xpad_irq_in+0x1414/0x2ac0 [ 362.637446][ C0] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 362.644455][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 362.651287][ C0] dummy_timer+0x1814/0x3a30 [ 362.657529][ C0] __hrtimer_run_queues+0x202/0xad0 [ 362.664375][ C0] hrtimer_run_softirq+0x17d/0x350 [ 362.671137][ C0] handle_softirqs+0x216/0x8e0 [ 362.677537][ C0] __irq_exit_rcu+0x109/0x170 [ 362.683847][ C0] irq_exit_rcu+0x9/0x30 [ 362.689721][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 362.696992][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 362.704601][ C0] lookup_page_ext+0x46/0x1d0 [ 362.710920][ C0] __update_page_owner_handle+0xd9/0x550 [ 362.718181][ C0] __set_page_owner+0x126/0x550 [ 362.724658][ C0] post_alloc_hook+0x1c0/0x230 [ 362.731063][ C0] get_page_from_freelist+0x132b/0x38e0 [ 362.738247][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 362.745769][ C0] alloc_pages_mpol+0x1fb/0x550 [ 362.752249][ C0] folio_alloc_mpol_noprof+0x36/0x2f0 [ 362.759251][ C0] vma_alloc_folio_noprof+0xed/0x1e0 [ 362.766169][ C0] copy_page_range+0x4336/0x5c80 [ 362.772741][ C0] dup_mmap+0xe88/0x21d0 [ 362.778618][ C0] copy_process+0x4081/0x7690 [ 362.784934][ C0] kernel_clone+0xfc/0x930 [ 362.790989][ C0] __do_sys_clone+0xce/0x120 [ 362.797213][ C0] do_syscall_64+0xcd/0x4c0 [ 362.803359][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.810890][ C0] INITIAL USE at: [ 362.814791][ C0] lock_acquire+0x179/0x350 [ 362.820874][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 362.827658][ C0] input_inject_event+0x9f/0x3b0 [ 362.834158][ C0] led_set_brightness+0x217/0x290 [ 362.840731][ C0] kbd_led_trigger_activate+0xcb/0x110 [ 362.847738][ C0] led_trigger_set+0x59a/0xc50 [ 362.854056][ C0] led_trigger_set_default+0x1e0/0x2e0 [ 362.861067][ C0] led_classdev_register_ext+0x7b8/0xa10 [ 362.868250][ C0] input_leds_connect+0x552/0x8e0 [ 362.874817][ C0] input_attach_handler.isra.0+0x176/0x250 [ 362.882194][ C0] input_register_device+0xab9/0x1180 [ 362.889114][ C0] atkbd_connect+0x5f8/0xa40 [ 362.895260][ C0] serio_driver_probe+0x7c/0xd0 [ 362.901668][ C0] really_probe+0x241/0xa90 [ 362.907714][ C0] __driver_probe_device+0x1de/0x440 [ 362.914540][ C0] driver_probe_device+0x4c/0x1b0 [ 362.921105][ C0] __driver_attach+0x283/0x580 [ 362.927415][ C0] bus_for_each_dev+0x13b/0x1d0 [ 362.933834][ C0] serio_handle_event+0x335/0xc30 [ 362.940426][ C0] process_one_work+0x9cc/0x1b70 [ 362.946917][ C0] worker_thread+0x6c8/0xf10 [ 362.953070][ C0] kthread+0x3c5/0x780 [ 362.958697][ C0] ret_from_fork+0x5d7/0x6f0 [ 362.964834][ C0] ret_from_fork_asm+0x1a/0x30 [ 362.971170][ C0] } [ 362.973650][ C0] ... key at: [] __key.7+0x0/0x40 [ 362.980743][ C0] ... acquired at: [ 362.984525][ C0] __lock_acquire+0x8b7/0x1ce0 [ 362.989450][ C0] lock_acquire+0x179/0x350 [ 362.994118][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 362.999477][ C0] input_event+0x74/0xd0 [ 363.003874][ C0] xpad360_process_packet.part.0+0xed/0xce0 [ 363.009920][ C0] xpad_irq_in+0x1414/0x2ac0 [ 363.014666][ C0] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 363.020207][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 363.025578][ C0] dummy_timer+0x1814/0x3a30 [ 363.030323][ C0] __hrtimer_run_queues+0x202/0xad0 [ 363.035679][ C0] hrtimer_run_softirq+0x17d/0x350 [ 363.040962][ C0] handle_softirqs+0x216/0x8e0 [ 363.045882][ C0] __irq_exit_rcu+0x109/0x170 [ 363.050714][ C0] irq_exit_rcu+0x9/0x30 [ 363.055111][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 363.060904][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.067037][ C0] lookup_page_ext+0x46/0x1d0 [ 363.071869][ C0] __update_page_owner_handle+0xd9/0x550 [ 363.077654][ C0] __set_page_owner+0x126/0x550 [ 363.082680][ C0] post_alloc_hook+0x1c0/0x230 [ 363.087603][ C0] get_page_from_freelist+0x132b/0x38e0 [ 363.093326][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 363.099383][ C0] alloc_pages_mpol+0x1fb/0x550 [ 363.104385][ C0] folio_alloc_mpol_noprof+0x36/0x2f0 [ 363.109912][ C0] vma_alloc_folio_noprof+0xed/0x1e0 [ 363.115352][ C0] copy_page_range+0x4336/0x5c80 [ 363.120452][ C0] dup_mmap+0xe88/0x21d0 [ 363.124851][ C0] copy_process+0x4081/0x7690 [ 363.129688][ C0] kernel_clone+0xfc/0x930 [ 363.134260][ C0] __do_sys_clone+0xce/0x120 [ 363.139004][ C0] do_syscall_64+0xcd/0x4c0 [ 363.143664][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.149710][ C0] [ 363.152012][ C0] [ 363.152012][ C0] stack backtrace: [ 363.157877][ C0] CPU: 0 UID: 0 PID: 14866 Comm: syz.5.3634 Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 PREEMPT(full) [ 363.157897][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.157906][ C0] Call Trace: [ 363.157911][ C0] [ 363.157917][ C0] dump_stack_lvl+0x116/0x1f0 [ 363.157933][ C0] print_irq_inversion_bug.part.0+0x212/0x270 [ 363.157959][ C0] mark_lock+0x2e5/0x610 [ 363.157985][ C0] __lock_acquire+0x8b7/0x1ce0 [ 363.158008][ C0] ? try_to_wake_up+0x160/0x1870 [ 363.158028][ C0] lock_acquire+0x179/0x350 [ 363.158050][ C0] ? input_event+0x74/0xd0 [ 363.158071][ C0] ? __queue_work+0x431/0x1160 [ 363.158090][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 363.158113][ C0] ? input_event+0x74/0xd0 [ 363.158131][ C0] input_event+0x74/0xd0 [ 363.158150][ C0] xpad360_process_packet.part.0+0xed/0xce0 [ 363.158168][ C0] xpad_irq_in+0x1414/0x2ac0 [ 363.158185][ C0] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 363.158209][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 363.158231][ C0] dummy_timer+0x1814/0x3a30 [ 363.158256][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 363.158269][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 363.158282][ C0] ? mark_held_locks+0x49/0x80 [ 363.158304][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 363.158332][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 363.158345][ C0] __hrtimer_run_queues+0x202/0xad0 [ 363.158366][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 363.158383][ C0] ? read_tsc+0x9/0x20 [ 363.158405][ C0] hrtimer_run_softirq+0x17d/0x350 [ 363.158424][ C0] handle_softirqs+0x216/0x8e0 [ 363.158444][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 363.158465][ C0] __irq_exit_rcu+0x109/0x170 [ 363.158482][ C0] irq_exit_rcu+0x9/0x30 [ 363.158499][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 363.158524][ C0] [ 363.158528][ C0] [ 363.158534][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.158550][ C0] RIP: 0010:lookup_page_ext+0x46/0x1d0 [ 363.158566][ C0] Code: fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 73 01 00 00 48 2b 1d 2c c4 c7 0b 48 c1 fb 06 49 89 dc 48 89 dd 49 c1 ec 0f 48 c1 ed 16 18 01 00 00 41 bd 00 00 04 00 e8 ba 02 8e ff 48 89 ee 4c 89 ef [ 363.158582][ C0] RSP: 0018:ffffc90003f5f028 EFLAGS: 00000246 [ 363.158596][ C0] RAX: 1ffffffff1beaa8e RBX: 0000000000082673 RCX: ffffc9001bb8d000 [ 363.158606][ C0] RDX: dffffc0000000000 RSI: ffffffff822d901e RDI: ffffea0002099cc0 [ 363.158617][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 363.158626][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000010 [ 363.158635][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.158648][ C0] ? lookup_page_ext+0xe/0x1d0 [ 363.158663][ C0] ? lookup_page_ext+0xe/0x1d0 [ 363.158677][ C0] __update_page_owner_handle+0xd9/0x550 [ 363.158694][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 363.158716][ C0] __set_page_owner+0x126/0x550 [ 363.158732][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 363.158747][ C0] ? bad_range+0x261/0x4c0 [ 363.158766][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 363.158781][ C0] post_alloc_hook+0x1c0/0x230 [ 363.158806][ C0] get_page_from_freelist+0x132b/0x38e0 [ 363.158825][ C0] ? prepare_alloc_pages+0x444/0x610 [ 363.158844][ C0] ? rcu_is_watching+0x12/0xc0 [ 363.158864][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 363.158880][ C0] ? css_rstat_updated+0x1c2/0x510 [ 363.158902][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 363.158925][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 363.158945][ C0] ? lock_acquire+0x179/0x350 [ 363.158967][ C0] ? find_held_lock+0x2b/0x80 [ 363.158985][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 363.159003][ C0] ? policy_nodemask+0xea/0x4e0 [ 363.159021][ C0] alloc_pages_mpol+0x1fb/0x550 [ 363.159039][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 363.159055][ C0] ? __page_table_check_ptes_set+0x1ae/0x420 [ 363.159071][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 363.159089][ C0] folio_alloc_mpol_noprof+0x36/0x2f0 [ 363.159110][ C0] vma_alloc_folio_noprof+0xed/0x1e0 [ 363.159129][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 363.159149][ C0] ? find_held_lock+0x2b/0x80 [ 363.159165][ C0] ? __pfx___might_resched+0x10/0x10 [ 363.159185][ C0] ? copy_page_range+0x1fa8/0x5c80 [ 363.159209][ C0] copy_page_range+0x4336/0x5c80 [ 363.159241][ C0] ? mas_destroy+0x5de/0xa20 [ 363.159259][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 363.159282][ C0] ? mas_store+0x7a9/0x1160 [ 363.159299][ C0] ? find_held_lock+0x2b/0x80 [ 363.159317][ C0] ? __pfx_mas_store+0x10/0x10 [ 363.159337][ C0] ? __vma_enter_locked+0x163/0x3f0 [ 363.159365][ C0] dup_mmap+0xe88/0x21d0 [ 363.159388][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 363.159414][ C0] copy_process+0x4081/0x7690 [ 363.159438][ C0] ? __pfx_copy_process+0x10/0x10 [ 363.159458][ C0] ? futex_private_hash_put+0x176/0x300 [ 363.159481][ C0] ? futex_private_hash_put+0x18a/0x300 [ 363.159504][ C0] kernel_clone+0xfc/0x930 [ 363.159524][ C0] ? __pfx_futex_wake+0x10/0x10 [ 363.159539][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 363.159564][ C0] __do_sys_clone+0xce/0x120 [ 363.159584][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 363.159604][ C0] ? __sys_sendmsg+0x18c/0x220 [ 363.159622][ C0] ? xfd_validate_state+0x61/0x180 [ 363.159649][ C0] do_syscall_64+0xcd/0x4c0 [ 363.159665][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.159679][ C0] RIP: 0033:0x7f5a11f8ebe9 [ 363.159691][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.159706][ C0] RSP: 002b:00007f5a12e33fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 363.159719][ C0] RAX: ffffffffffffffda RBX: 00007f5a121b5fa0 RCX: 00007f5a11f8ebe9 [ 363.159730][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080040000 [ 363.159738][ C0] RBP: 00007f5a12011e19 R08: 0000000000000000 R09: 0000000000000000 [ 363.159747][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 363.159756][ C0] R13: 00007f5a121b6038 R14: 00007f5a121b5fa0 R15: 00007ffd9b02c408 [ 363.159771][ C0] [ 363.808925][ T5995] usb 4-1: USB disconnect, device number 40 [ 363.808976][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 363.823851][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?