last executing test programs: 4.362535286s ago: executing program 4 (id=1095): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x100, @string={0x100, 0x3, "04eba7961a3eff47af2ccc9b27aafa16d7165133c1d1fe27a69d6a43de8bc0edab4285ece68a70c88e216c1a5ca233c9815d7aa7e6bee17c8355f59beec4a788d9e7819eeef333f8f1fa0893ff2becf5b9417752bbcf73872f107933b44560f1ed550fcbff2704670173cb6b170ffc65c62635085fa63e77d46a68d413036fcd1d2c333a1fe19a3dc73365a53758f90d08d7bc5ce92aaad5f04d8c041883b31c617ed1c4d03cd849baadc8115867fa718192b0796c25ba12caebb3d066ab8f3679f79257022564180a393b111e9be6769a3695e93bbd08c89a06458b3fe2e48f7cb9f8efed7469732055715690522cb9818c9de88eb724c3508b0039b62a"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x13, @string={0x13, 0x3, "56ce9cf8fecacb92dbdf456128db7cfbe7"}}, 0x0, 0x0}, 0x0) 2.407660108s ago: executing program 2 (id=1114): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x3091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2081c80, 0x0) move_mount(r0, &(0x7f0000000280)='./file0\x00', r0, 0x0, 0x272) 2.380319514s ago: executing program 2 (id=1115): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) 2.248099242s ago: executing program 0 (id=1118): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x4018480c, &(0x7f0000000000)={0x2, 0x100, 0x10000}) 2.24726714s ago: executing program 2 (id=1120): r0 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x1000168}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 2.116315599s ago: executing program 3 (id=1121): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 2.083844626s ago: executing program 2 (id=1122): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x9}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x60}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 1.923594567s ago: executing program 3 (id=1124): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r1, 0x16) 1.92242475s ago: executing program 2 (id=1125): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000b80)=ANY=[@ANYBLOB="01000000000000807a3f09e269f49b"], 0x0, 0x0, 0x0, 0x0, 0x0}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 1.861557056s ago: executing program 3 (id=1127): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00009e2000/0x2000)=nil, &(0x7f00003ea000/0x3000)=nil, 0x2000, 0x1}) 1.646750045s ago: executing program 3 (id=1129): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.476076057s ago: executing program 3 (id=1130): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='contention_end\x00', r3, 0x0, 0x4}, 0x18) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003200)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100000000000000}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40c4) 1.332081412s ago: executing program 3 (id=1131): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x2000b, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) 1.301702398s ago: executing program 4 (id=1132): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xffffffffffffff84, &(0x7f00000001c0)=ANY=[@ANYBLOB="ba010000aaaa0180c20000000800450000b00000000000119078"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f00000000c0)) 1.03358248s ago: executing program 4 (id=1133): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0}, 0x90) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x2, 0x0) 963.477469ms ago: executing program 4 (id=1134): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) 607.642098ms ago: executing program 1 (id=1139): io_submit(0x0, 0x0, &(0x7f0000000000)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x9}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000210001002bbd7000fddbdf250a10001a080000040500000014000100fe8000000000000000000000000000aa050016002e000000080017"], 0x40}, 0x1, 0x0, 0x0, 0x60048080}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400c0) 580.868501ms ago: executing program 1 (id=1140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x110) 479.370569ms ago: executing program 1 (id=1141): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900"}) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000d40)={0x0, 0xec25, 0x8, 0x1, 0x40000337}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 375.913773ms ago: executing program 0 (id=1142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8001, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2}, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x40) 375.504121ms ago: executing program 0 (id=1143): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') mount(&(0x7f0000000280)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1001, 0x0) 311.857749ms ago: executing program 0 (id=1144): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}, {0x85, 0x0, 0x0, 0x10}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20) 299.901102ms ago: executing program 1 (id=1145): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x30011}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 172.068847ms ago: executing program 0 (id=1146): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback}, 0x10) 171.694917ms ago: executing program 1 (id=1147): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) splice(r1, 0x0, r0, 0x0, 0x25a5, 0x0) 104.44134ms ago: executing program 1 (id=1148): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000080)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 70.660115ms ago: executing program 4 (id=1149): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2a, 0xffffffff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x3, 0x1, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) 42.789035ms ago: executing program 0 (id=1150): ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000200)="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") r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x80000) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 22.530071ms ago: executing program 2 (id=1151): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x20, 0x0, &(0x7f0000000800)=[@request_death, @request_death], 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=1152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) kernel console output (not intermixed with test programs): ystem_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.255964][ T6283] binder: 6282:6283 ioctl 4018620d 0 returned -22 [ 87.268963][ T30] audit: type=1400 audit(1755042548.642:225): avc: denied { open } for pid=6282 comm="syz.4.122" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.298309][ T30] audit: type=1400 audit(1755042548.652:226): avc: denied { ioctl } for pid=6282 comm="syz.4.122" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.343562][ T6258] netlink: 176 bytes leftover after parsing attributes in process `syz.3.110'. [ 87.353729][ T6258] netlink: 176 bytes leftover after parsing attributes in process `syz.3.110'. [ 87.368612][ T5915] usb 4-1: USB disconnect, device number 3 [ 87.483137][ T30] audit: type=1400 audit(1755042548.872:227): avc: denied { setopt } for pid=6288 comm="syz.1.125" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.576628][ T30] audit: type=1400 audit(1755042548.972:228): avc: denied { write } for pid=6292 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 87.730331][ T30] audit: type=1400 audit(1755042549.122:229): avc: denied { create } for pid=6300 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 87.766933][ T30] audit: type=1400 audit(1755042549.142:230): avc: denied { getopt } for pid=6300 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 87.818956][ T30] audit: type=1400 audit(1755042549.212:231): avc: denied { write } for pid=6303 comm="syz.0.131" name="anycast6" dev="proc" ino=4026533271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 88.021366][ T6314] pim6reg1: entered promiscuous mode [ 88.027699][ T6314] pim6reg1: entered allmulticast mode [ 88.142296][ T30] audit: type=1400 audit(1755042549.532:232): avc: denied { ioctl } for pid=6317 comm="syz.3.138" path="socket:[9265]" dev="sockfs" ino=9265 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.351886][ T6326] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 88.373654][ T6326] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 89.321009][ T6374] program syz.3.163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.351308][ T6374] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 89.884278][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 89.922488][ T6403] team_slave_0: entered promiscuous mode [ 89.928411][ T6403] team_slave_1: entered promiscuous mode [ 89.938526][ T6403] macsec1: entered promiscuous mode [ 89.944145][ T6403] team0: entered promiscuous mode [ 89.950472][ T6403] macsec1: entered allmulticast mode [ 89.958543][ T6403] team0: entered allmulticast mode [ 89.963842][ T6403] team_slave_0: entered allmulticast mode [ 89.971024][ T6403] team_slave_1: entered allmulticast mode [ 89.997116][ T6403] team0: Device macsec1 is already an upper device of the team interface [ 90.025984][ T6403] team0: left allmulticast mode [ 90.030996][ T6403] team_slave_0: left allmulticast mode [ 90.037003][ T6403] team_slave_1: left allmulticast mode [ 90.042658][ T6403] team0: left promiscuous mode [ 90.050534][ T6403] team_slave_0: left promiscuous mode [ 90.056033][ T6403] team_slave_1: left promiscuous mode [ 90.090559][ T6417] process 'syz.1.182' launched './file0' with NULL argv: empty string added [ 91.190126][ T5964] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.376890][ T5964] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 91.403248][ T5964] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 91.433308][ T5964] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.467747][ T5964] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 91.485240][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 91.501001][ T5964] usb 5-1: Product: syz [ 91.509501][ T5964] usb 5-1: Manufacturer: syz [ 91.514150][ T5964] usb 5-1: SerialNumber: syz [ 91.638853][ T6480] netlink: 'syz.3.211': attribute type 1 has an invalid length. [ 91.807299][ T5964] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 92.030305][ T5964] usb 5-1: USB disconnect, device number 2 [ 92.063934][ T5964] usblp0: removed [ 92.137995][ T6496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.522918][ T6509] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 92.725134][ T5915] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.897267][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 92.905404][ T5915] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 92.921743][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.951192][ T5915] usb 4-1: config 0 descriptor?? [ 92.992365][ T6513] team0 (unregistering): Port device team_slave_0 removed [ 93.017623][ T6513] team0 (unregistering): Port device team_slave_1 removed [ 93.199100][ T5915] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 93.235104][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 93.259016][ T5915] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 93.279520][ T5915] usb 4-1: media controller created [ 93.332524][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.410778][ T5915] az6027: usb out operation failed. (-71) [ 93.448094][ T5915] az6027: usb out operation failed. (-71) [ 93.453862][ T5915] stb0899_attach: Driver disabled by Kconfig [ 93.473933][ T5915] az6027: no front-end attached [ 93.473933][ T5915] [ 93.488498][ T5915] az6027: usb out operation failed. (-71) [ 93.500724][ T5915] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 93.544956][ T5915] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 93.627269][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 93.627283][ T30] audit: type=1400 audit(1755042555.022:275): avc: denied { read } for pid=5203 comm="acpid" name="event4" dev="devtmpfs" ino=2833 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.627501][ T5915] dvb-usb: schedule remote query interval to 400 msecs. [ 93.647570][ T30] audit: type=1400 audit(1755042555.022:276): avc: denied { open } for pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2833 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.731461][ T30] audit: type=1400 audit(1755042555.022:277): avc: denied { ioctl } for pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2833 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.754426][ T5915] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 93.807784][ T5915] usb 4-1: USB disconnect, device number 4 [ 94.062737][ T5915] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 94.351430][ T30] audit: type=1400 audit(1755042555.732:278): avc: denied { sqpoll } for pid=6537 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.772134][ T6550] Bluetooth: hci5: Frame reassembly failed (-84) [ 95.104603][ T30] audit: type=1400 audit(1755042556.492:279): avc: denied { mount } for pid=6555 comm="syz.0.243" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 95.129670][ T30] audit: type=1400 audit(1755042556.492:280): avc: denied { mounton } for pid=6555 comm="syz.0.243" path="/54/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 95.162889][ T30] audit: type=1400 audit(1755042556.552:281): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 95.644728][ T5964] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.779672][ T6459] Set syz1 is full, maxelem 65536 reached [ 95.806176][ T5964] usb 5-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.827763][ T5964] usb 5-1: config 0 interface 0 altsetting 238 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.841314][ T5964] usb 5-1: config 0 interface 0 has no altsetting 0 [ 95.850595][ T5964] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 95.860462][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.871801][ T5964] usb 5-1: config 0 descriptor?? [ 96.327076][ T5964] acrux 0003:1A34:F705.0004: unknown global tag 0xd [ 96.335203][ T5964] acrux 0003:1A34:F705.0004: item 0 0 1 13 parsing failed [ 96.350596][ T5964] acrux 0003:1A34:F705.0004: parse failed [ 96.359841][ T5964] acrux 0003:1A34:F705.0004: probe with driver acrux failed with error -22 [ 96.544825][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.550616][ T5922] usb 5-1: USB disconnect, device number 3 [ 96.724762][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 96.732329][ T24] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 96.744566][ T24] usb 1-1: config 0 has no interface number 0 [ 96.753884][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 96.768951][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.778174][ T24] usb 1-1: Product: syz [ 96.782488][ T24] usb 1-1: Manufacturer: syz [ 96.790761][ T24] usb 1-1: SerialNumber: syz [ 96.796026][ T51] Bluetooth: hci5: command 0xfc11 tx timeout [ 96.802957][ T5863] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 96.838095][ T24] usb 1-1: config 0 descriptor?? [ 96.873713][ T24] smsc95xx v2.0.0 [ 97.454786][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 97.496507][ T5964] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.617107][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 97.624163][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.647268][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 97.666582][ T5964] usb 5-1: Using ep0 maxpacket: 8 [ 97.673017][ T43] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 97.691865][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 97.702079][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.705440][ T6608] syzkaller1: entered promiscuous mode [ 97.713390][ T5964] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.724741][ T6608] syzkaller1: entered allmulticast mode [ 97.729025][ T5964] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.741771][ T43] usb 4-1: config 0 descriptor?? [ 97.748446][ T5964] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.764376][ T5964] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.781901][ T5964] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.791383][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.892734][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 97.917593][ T24] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 97.942935][ T24] usb 1-1: USB disconnect, device number 4 [ 98.027345][ T5964] usb 5-1: GET_CAPABILITIES returned 0 [ 98.043577][ T5964] usbtmc 5-1:16.0: can't read capabilities [ 98.192555][ T43] nintendo 0003:057E:2019.0005: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 98.201128][ T6519] Set syz1 is full, maxelem 65536 reached [ 98.249124][ T30] audit: type=1400 audit(1755042559.642:282): avc: denied { create } for pid=6615 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.282467][ T30] audit: type=1400 audit(1755042559.672:283): avc: denied { write } for pid=6602 comm="syz.4.263" name="usbtmc0" dev="devtmpfs" ino=2844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 98.306673][ T24] usb 5-1: USB disconnect, device number 4 [ 98.310661][ T30] audit: type=1400 audit(1755042559.692:284): avc: denied { bind } for pid=6615 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.577473][ T43] nintendo 0003:057E:2019.0005: Failed to get joycon info; ret=-71 [ 98.623221][ T43] nintendo 0003:057E:2019.0005: Failed to retrieve controller info; ret=-71 [ 98.647706][ T43] nintendo 0003:057E:2019.0005: Failed to initialize controller; ret=-71 [ 98.671484][ T43] nintendo 0003:057E:2019.0005: probe - fail = -71 [ 98.694940][ T43] nintendo 0003:057E:2019.0005: probe with driver nintendo failed with error -71 [ 98.723881][ T43] usb 4-1: USB disconnect, device number 5 [ 99.170600][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 99.170616][ T30] audit: type=1400 audit(1755042560.562:287): avc: denied { read append } for pid=6645 comm="syz.2.281" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 99.261403][ T30] audit: type=1400 audit(1755042560.562:288): avc: denied { open } for pid=6645 comm="syz.2.281" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 99.335318][ T30] audit: type=1400 audit(1755042560.592:289): avc: denied { map } for pid=6645 comm="syz.2.281" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 99.361708][ T30] audit: type=1400 audit(1755042560.592:290): avc: denied { write execute } for pid=6645 comm="syz.2.281" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 99.711007][ T30] audit: type=1400 audit(1755042561.102:291): avc: denied { set_context_mgr } for pid=6663 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 99.755929][ T30] audit: type=1400 audit(1755042561.102:292): avc: denied { write } for pid=6663 comm="syz.1.289" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.781286][ T30] audit: type=1400 audit(1755042561.142:293): avc: denied { ioctl } for pid=6657 comm="syz.0.286" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.805060][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.972304][ T6675] binder: 6674:6675 ioctl c0306201 200000000080 returned -14 [ 99.985024][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 99.996341][ T30] audit: type=1400 audit(1755042561.382:294): avc: denied { create } for pid=6676 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 100.003055][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.057397][ T30] audit: type=1400 audit(1755042561.392:295): avc: denied { write } for pid=6676 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 100.154775][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 100.207991][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.256875][ T30] audit: type=1326 audit(1755042561.652:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.2.300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf1058ebe9 code=0x0 [ 100.297711][ T6685] binder: 6682:6685 ioctl c0306201 2000000003c0 returned -22 [ 100.308283][ T24] usb 1-1: config 0 descriptor?? [ 100.502860][ T6699] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 100.525808][ T24] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 100.621901][ T6703] capability: warning: `syz.1.306' uses 32-bit capabilities (legacy support in use) [ 100.689608][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 100.892814][ T6718] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.021685][ T5936] usb 1-1: USB disconnect, device number 5 [ 101.055604][ T5922] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.227798][ T5922] usb 2-1: unable to get BOS descriptor or descriptor too short [ 101.244573][ T5922] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.281422][ T5922] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.296364][ T5922] usb 2-1: config 1 interface 1 has no altsetting 0 [ 101.318379][ T5922] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.328591][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.336761][ T5922] usb 2-1: Product: syz [ 101.341037][ T5922] usb 2-1: Manufacturer: syz [ 101.346034][ T5922] usb 2-1: SerialNumber: syz [ 101.462195][ T6739] openvswitch: netlink: IPv4 tun info is not correct [ 101.506520][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 101.606376][ T5922] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 101.617268][ T5922] usb 2-1: found format II with max.bitrate = 2418, frame size=7 [ 101.625925][ T5922] usb 2-1: 2:1: All rates were zero [ 101.664913][ T5922] usb 2-1: USB disconnect, device number 4 [ 101.697275][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.729025][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.741994][ T24] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 101.784754][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.818081][ T24] usb 3-1: config 0 descriptor?? [ 102.278523][ T6761] syzkaller1: entered promiscuous mode [ 102.297726][ T6761] syzkaller1: entered allmulticast mode [ 102.443176][ T24] usb 3-1: string descriptor 0 read error: -22 [ 102.493024][ T6770] all (unregistering): Released all slaves [ 102.556729][ T6775] syzkaller1: entered promiscuous mode [ 102.562240][ T6775] syzkaller1: entered allmulticast mode [ 102.649736][ T24] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0006/input/input9 [ 102.772529][ T6786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.341'. [ 102.825974][ T24] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0006/input/input10 [ 102.835224][ T6786] netlink: 52 bytes leftover after parsing attributes in process `syz.4.341'. [ 102.881467][ T6786] netlink: 208 bytes leftover after parsing attributes in process `syz.4.341'. [ 102.891987][ T24] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0006/input/input11 [ 103.042199][ T24] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0006/input/input12 [ 103.221655][ T24] uclogic 0003:256C:006D.0006: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 103.415071][ T24] usb 3-1: USB disconnect, device number 5 [ 103.477374][ T6806] fido_id[6806]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 104.164950][ T5915] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.174466][ T5922] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.188193][ T6837] input: syz1 as /devices/virtual/input/input13 [ 104.284897][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.294817][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 104.344625][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 104.351728][ T30] audit: type=1400 audit(1755042565.732:314): avc: denied { mount } for pid=6842 comm="syz.3.365" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.373477][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.383976][ T5915] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 104.393222][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.405256][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.413894][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.427710][ T5915] usb 1-1: config 0 descriptor?? [ 104.434468][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 104.461463][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.466162][ T24] usb 3-1: config 0 has no interfaces? [ 104.480169][ T5922] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.489224][ T24] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 104.492366][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.511293][ T10] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 104.512063][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.521113][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.549178][ T5922] usb 2-1: config 0 descriptor?? [ 104.552157][ T24] usb 3-1: Product: syz [ 104.567587][ T24] usb 3-1: Manufacturer: syz [ 104.575339][ T24] usb 3-1: SerialNumber: syz [ 104.594539][ T24] usb 3-1: config 0 descriptor?? [ 104.608239][ T10] usb 5-1: config 0 descriptor?? [ 104.616660][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 104.928616][ T6000] usb 3-1: USB disconnect, device number 6 [ 104.983091][ T5922] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 104.994932][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.013983][ T5922] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 105.032297][ T10] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 105.154771][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 105.166804][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.193566][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.209613][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.222624][ T24] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 105.236165][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.260171][ T24] usb 4-1: config 0 descriptor?? [ 105.437351][ T10] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 105.466768][ T5915] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 105.479743][ T5915] usb 1-1: USB disconnect, device number 6 [ 105.657467][ T5915] usb 5-1: USB disconnect, device number 5 [ 105.702143][ T24] hid-multitouch 0003:0457:07DA.0008: hidraw1: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 105.916820][ T24] usb 4-1: USB disconnect, device number 6 [ 106.327564][ T30] audit: type=1400 audit(1755042567.722:315): avc: denied { read } for pid=6872 comm="syz.4.378" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 106.334946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 106.352248][ T30] audit: type=1400 audit(1755042567.722:316): avc: denied { open } for pid=6872 comm="syz.4.378" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 106.358259][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.394086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.404277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.534753][ T5935] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.684843][ T5935] usb 1-1: Using ep0 maxpacket: 8 [ 106.699356][ T5935] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 106.709953][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.742271][ T5935] usb 1-1: Product: syz [ 106.751640][ T5935] usb 1-1: Manufacturer: syz [ 106.759140][ T5935] usb 1-1: SerialNumber: syz [ 106.801010][ T5935] usb 1-1: config 0 descriptor?? [ 106.817724][ T5935] usb 1-1: bad CDC descriptors [ 106.830740][ T5935] usb 1-1: unsupported MDLM descriptors [ 107.037390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 107.111559][ T6886] capability: warning: `syz.1.384' uses deprecated v2 capabilities in a way that may be insecure [ 107.143794][ T6000] usb 1-1: USB disconnect, device number 7 [ 107.188075][ T10] usb 2-1: USB disconnect, device number 5 [ 107.417416][ T6896] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.389'. [ 107.436503][ T30] audit: type=1400 audit(1755042568.832:317): avc: denied { append } for pid=6897 comm="syz.1.390" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 107.528398][ T30] audit: type=1400 audit(1755042568.902:318): avc: denied { listen } for pid=6901 comm="syz.4.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.563950][ T30] audit: type=1400 audit(1755042568.902:319): avc: denied { accept } for pid=6901 comm="syz.4.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.750259][ T6908] kvm: apic: phys broadcast and lowest prio [ 107.795123][ T30] audit: type=1400 audit(1755042569.182:320): avc: denied { read } for pid=6911 comm="syz.0.397" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.856377][ T30] audit: type=1400 audit(1755042569.182:321): avc: denied { open } for pid=6911 comm="syz.0.397" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.393060][ T30] audit: type=1400 audit(1755042569.782:322): avc: denied { read } for pid=6934 comm="syz.4.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.453183][ T30] audit: type=1400 audit(1755042569.842:323): avc: denied { create } for pid=6938 comm="syz.1.409" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 108.456790][ T6937] netlink: 'syz.0.407': attribute type 5 has an invalid length. [ 108.524824][ T6937] netlink: 130080 bytes leftover after parsing attributes in process `syz.0.407'. [ 108.674015][ T6949] ======================================================= [ 108.674015][ T6949] WARNING: The mand mount option has been deprecated and [ 108.674015][ T6949] and is ignored by this kernel. Remove the mand [ 108.674015][ T6949] option from the mount to silence this warning. [ 108.674015][ T6949] ======================================================= [ 108.758911][ T6952] overlayfs: overlapping lowerdir path [ 108.786840][ T5935] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.944799][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 108.957516][ T5935] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 108.970780][ T5935] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.017578][ T5935] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.034574][ T5935] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.047388][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.058570][ T5935] usb 4-1: Product: syz [ 109.062796][ T5935] usb 4-1: Manufacturer: syz [ 109.095096][ T5935] usb 4-1: SerialNumber: syz [ 109.255092][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 109.418432][ T10] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 109.427656][ T5915] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.439163][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.456588][ T10] usb 1-1: Product: syz [ 109.461247][ T10] usb 1-1: Manufacturer: syz [ 109.465909][ T10] usb 1-1: SerialNumber: syz [ 109.482403][ T10] usb 1-1: config 0 descriptor?? [ 109.494065][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 109.530706][ T5935] usb 4-1: 0:2 : does not exist [ 109.545454][ T6000] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.604779][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 109.611360][ T5915] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 109.621405][ T5915] usb 5-1: config 0 has no interface number 0 [ 109.630591][ T5915] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 109.640255][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.648337][ T5915] usb 5-1: Product: syz [ 109.652509][ T5915] usb 5-1: Manufacturer: syz [ 109.657156][ T5915] usb 5-1: SerialNumber: syz [ 109.664906][ T5915] usb 5-1: config 0 descriptor?? [ 109.677286][ T5915] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 109.698064][ T10] gspca_sunplus: reg_r err -71 [ 109.702953][ T10] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 109.711228][ T6000] usb 2-1: Using ep0 maxpacket: 16 [ 109.718336][ T10] usb 1-1: USB disconnect, device number 8 [ 109.729463][ T6000] usb 2-1: New USB device found, idVendor=2717, idProduct=4106, bcdDevice=28.92 [ 109.738736][ T6000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.748605][ T6000] usb 2-1: Product: syz [ 109.752832][ T6000] usb 2-1: Manufacturer: syz [ 109.757777][ T6000] usb 2-1: SerialNumber: syz [ 109.766543][ T6000] usb 2-1: config 0 descriptor?? [ 109.881474][ T5915] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 109.894553][ T5915] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 109.991139][ T24] usb 2-1: USB disconnect, device number 6 [ 110.086637][ T43] kernel read not supported for file /dsp1 (pid: 43 comm: kworker/1:1) [ 110.149571][ T5935] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 110.235311][ T5935] usb 4-1: USB disconnect, device number 7 [ 110.307064][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 110.324960][ T5915] usb 5-1: USB disconnect, device number 6 [ 110.371159][ T5915] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 110.406189][ T5915] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 110.430030][ T5915] quatech2 5-1:0.51: device disconnected [ 110.984921][ T5935] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 111.161809][ T5935] usb 3-1: Using ep0 maxpacket: 32 [ 111.172131][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 111.172145][ T30] audit: type=1400 audit(1755042572.562:332): avc: denied { getopt } for pid=7021 comm="syz.4.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.224126][ T5935] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 111.234849][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.261590][ T5935] usb 3-1: config 0 descriptor?? [ 111.295355][ T5935] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 111.342504][ T7026] syzkaller1: entered promiscuous mode [ 111.356282][ T7026] syzkaller1: entered allmulticast mode [ 111.414276][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 111.593722][ T30] audit: type=1400 audit(1755042572.982:333): avc: denied { read } for pid=5513 comm="dhcpcd" name="n101" dev="tmpfs" ino=3585 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 111.677303][ T30] audit: type=1400 audit(1755042573.012:334): avc: denied { open } for pid=5513 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3585 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 111.771058][ T30] audit: type=1400 audit(1755042573.012:335): avc: denied { getattr } for pid=5513 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3585 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 111.794328][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.894742][ T30] audit: type=1326 audit(1755042573.022:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0338ebe9 code=0x7ffc0000 [ 111.939940][ T30] audit: type=1326 audit(1755042573.032:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0338ebe9 code=0x7ffc0000 [ 112.057026][ T30] audit: type=1326 audit(1755042573.032:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c0338ebe9 code=0x7ffc0000 [ 112.123678][ T30] audit: type=1326 audit(1755042573.042:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0338ebe9 code=0x7ffc0000 [ 112.151396][ T30] audit: type=1326 audit(1755042573.042:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1c0338ebe9 code=0x7ffc0000 [ 112.174578][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.181772][ T30] audit: type=1326 audit(1755042573.042:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0338ebe9 code=0x7ffc0000 [ 112.278369][ T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 112.321504][ T5935] gspca_nw80x: reg_w err -71 [ 112.327552][ T5935] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 112.370835][ T5935] usb 3-1: USB disconnect, device number 7 [ 112.427028][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.457906][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.478363][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 112.508126][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.520028][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.538382][ T10] usb 1-1: Product: syz [ 112.547156][ T10] usb 1-1: Manufacturer: syz [ 112.552895][ T10] usb 1-1: SerialNumber: syz [ 112.604732][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 112.656608][ T24] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 112.670431][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 112.717841][ T24] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 112.754731][ T24] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 112.786232][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 112.798084][ T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 112.814200][ T24] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 112.847363][ T24] usb 2-1: Product: syz [ 112.852863][ T24] usb 2-1: Manufacturer: syz [ 112.864356][ T24] usb 2-1: SerialNumber: syz [ 112.885290][ T24] usb 2-1: config 0 descriptor?? [ 112.901849][ T24] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 112.918009][ T24] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 112.977769][ T6000] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 113.168556][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.201751][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.231704][ T6000] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.277426][ T6000] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.308235][ T6000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.340079][ T6000] usb 5-1: config 0 descriptor?? [ 113.601375][ T10] cdc_ncm 1-1:1.0: bind() failure [ 113.626383][ T10] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 113.649213][ T10] usb 1-1: USB disconnect, device number 9 [ 113.665097][ T5936] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 113.697333][ T5915] usb 2-1: USB disconnect, device number 7 [ 113.708707][ T5915] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 113.770479][ T6000] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 113.806785][ T6000] kernel read not supported for file /dsp (pid: 6000 comm: kworker/0:7) [ 113.838531][ T5936] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 113.878630][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.888056][ T5936] usb 4-1: Product: syz [ 113.892280][ T5936] usb 4-1: Manufacturer: syz [ 113.901981][ T5936] usb 4-1: SerialNumber: syz [ 113.912171][ T5936] usb 4-1: config 0 descriptor?? [ 114.039706][ T5915] usb 5-1: USB disconnect, device number 7 [ 114.244788][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 114.417821][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.434821][ T10] usb 3-1: config 0 has no interface number 0 [ 114.444877][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.456957][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.468007][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 114.481419][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.502947][ T10] usb 3-1: config 0 descriptor?? [ 114.865585][ T6000] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 114.939986][ T5936] usb 4-1: f81604_read: reg: 100f failed: -EPROTO [ 114.950881][ T10] uclogic 0003:256C:006D.000A: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input1 [ 114.972800][ T5936] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 114.995643][ T5936] usb 4-1: USB disconnect, device number 8 [ 115.011507][ T7152] mkiss: ax0: crc mode is auto. [ 115.018392][ T5513] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 115.040899][ T5513] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 115.061008][ T6000] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 115.073716][ T5936] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 115.084922][ T5915] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 115.093178][ T6000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.107134][ T6000] usb 5-1: config 0 descriptor?? [ 115.115316][ T6000] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 115.127993][ T5513] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 115.138360][ T5936] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 115.157282][ T5935] usb 3-1: USB disconnect, device number 8 [ 115.266435][ T5915] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.281193][ T5915] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.292679][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.301755][ T5915] usb 1-1: Product: syz [ 115.305979][ T5915] usb 1-1: Manufacturer: syz [ 115.310617][ T5915] usb 1-1: SerialNumber: syz [ 115.334278][ T6000] gp8psk: usb in 128 operation failed. [ 115.403807][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 115.548632][ T6000] gp8psk: usb in 146 operation failed. [ 115.554207][ T6000] gp8psk: failed to get FW version [ 115.573509][ T6000] gp8psk: FPGA Version = 51 [ 115.637215][ T7171] loop8: detected capacity change from 0 to 7 [ 115.666061][ T7171] Dev loop8: unable to read RDB block 7 [ 115.672850][ T7171] loop8: unable to read partition table [ 115.683801][ T7171] loop8: partition table beyond EOD, truncated [ 115.693338][ T7171] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 115.786708][ T6000] gp8psk: usb in 138 operation failed. [ 115.792261][ T6000] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 115.836259][ T6000] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 115.885175][ T6000] usb 5-1: USB disconnect, device number 8 [ 115.959011][ T7185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.505'. [ 115.969148][ T7185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.505'. [ 116.081080][ T7189] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 116.199819][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 116.199837][ T30] audit: type=1400 audit(1755042577.592:359): avc: denied { getopt } for pid=7192 comm="syz.1.509" lport=47079 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 116.253394][ T7195] dvmrp0: entered allmulticast mode [ 116.271447][ T7195] syz_tun: entered allmulticast mode [ 116.281570][ T7195] dvmrp0: left allmulticast mode [ 116.287115][ T7195] syz_tun: left allmulticast mode [ 116.337415][ T7201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.513'. [ 116.347215][ T5915] cdc_ncm 1-1:1.0: bind() failure [ 116.350813][ T5915] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 116.356569][ T30] audit: type=1400 audit(1755042577.752:360): avc: denied { read } for pid=7200 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.383442][ T5915] cdc_ncm 1-1:1.1: bind() failure [ 116.439826][ T5915] usb 1-1: USB disconnect, device number 10 [ 116.492165][ T7204] 9pnet: p9_errstr2errno: server reported unknown error @íÿ0x0000000000000004 [ 116.686168][ T7211] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 116.722012][ T7213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7213 comm=syz.3.519 [ 117.192331][ T7240] netlink: 'syz.4.531': attribute type 1 has an invalid length. [ 117.247391][ T7240] bond1: entered promiscuous mode [ 117.252712][ T7240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.292744][ T7243] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.316522][ T5935] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 117.324958][ T7243] bond1: (slave bond2): making interface the new active one [ 117.347598][ T7243] bond2: entered promiscuous mode [ 117.353900][ T7243] bond1: (slave bond2): Enslaving as an active interface with an up link [ 117.480404][ T30] audit: type=1400 audit(1755042578.872:361): avc: denied { write } for pid=7252 comm="syz.4.537" path="socket:[14804]" dev="sockfs" ino=14804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.517697][ T5935] usb 4-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 117.528310][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.553649][ T5935] usb 4-1: config 0 descriptor?? [ 117.574769][ T43] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 117.727290][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 117.754779][ T43] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 117.783010][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.805289][ T43] usb 1-1: config 0 descriptor?? [ 117.812144][ T7246] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 117.980659][ T5935] aquacomputer_d5next 0003:0C70:F010.000B: item fetching failed at offset 1/5 [ 117.994624][ T5935] aquacomputer_d5next 0003:0C70:F010.000B: probe with driver aquacomputer_d5next failed with error -22 [ 118.030858][ T7272] dummy0: entered promiscuous mode [ 118.047467][ T7272] bond0: entered promiscuous mode [ 118.052617][ T7272] bond_slave_0: entered promiscuous mode [ 118.060289][ T7272] bond_slave_1: entered promiscuous mode [ 118.069072][ T7272] hsr1: entered allmulticast mode [ 118.074238][ T7272] dummy0: entered allmulticast mode [ 118.080933][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 118.087379][ T5863] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 118.095312][ T7272] bond0: entered allmulticast mode [ 118.101150][ T7272] bond_slave_0: entered allmulticast mode [ 118.109678][ T7272] bond_slave_1: entered allmulticast mode [ 118.239393][ T30] audit: type=1326 audit(1755042579.622:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1058ebe9 code=0x7ffc0000 [ 118.272873][ T1593] usb 4-1: USB disconnect, device number 9 [ 118.285290][ T43] elan 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 118.315325][ T30] audit: type=1326 audit(1755042579.622:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1058ebe9 code=0x7ffc0000 [ 118.372700][ T30] audit: type=1326 audit(1755042579.622:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7faf1058ebe9 code=0x7ffc0000 [ 118.456725][ T30] audit: type=1326 audit(1755042579.622:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1058ebe9 code=0x7ffc0000 [ 118.513532][ T1593] usb 1-1: USB disconnect, device number 11 [ 118.523689][ T30] audit: type=1326 audit(1755042579.622:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1058ebe9 code=0x7ffc0000 [ 118.572500][ T30] audit: type=1326 audit(1755042579.622:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7faf1058ebe9 code=0x7ffc0000 [ 118.596180][ T30] audit: type=1326 audit(1755042579.622:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1058ebe9 code=0x7ffc0000 [ 118.624775][ T5936] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 118.804945][ T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 118.806987][ T5936] usb 2-1: config 0 has no interfaces? [ 118.853506][ T5936] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 118.888406][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.918850][ T5936] usb 2-1: config 0 descriptor?? [ 118.930640][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 118.956721][ T43] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 118.974270][ T43] usb 3-1: config 0 has no interface number 0 [ 118.991133][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 119.001225][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.010330][ T43] usb 3-1: Product: syz [ 119.014982][ T43] usb 3-1: Manufacturer: syz [ 119.039812][ T43] usb 3-1: SerialNumber: syz [ 119.076774][ T43] usb 3-1: config 0 descriptor?? [ 119.178252][ T7281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.195942][ T7281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.220178][ T7300] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.240953][ T7281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.252773][ T7307] loop5: detected capacity change from 0 to 1367 [ 119.274583][ T7281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.310337][ T43] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 119.317874][ T7308] loop5: detected capacity change from 1367 to 3727 [ 119.336516][ T43] usb 3-1: No valid video chain found. [ 119.349579][ T6000] usb 2-1: USB disconnect, device number 8 [ 119.351230][ T43] usb 3-1: USB disconnect, device number 9 [ 119.381100][ T5852] Buffer I/O error on dev loop5, logical block 465, async page read [ 119.498611][ T7300] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.585310][ T7300] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.701587][ T7300] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.804721][ T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 119.951481][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.967155][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.997468][ T43] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 120.020820][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.029133][ T4382] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.039905][ T43] usb 2-1: Product: syz [ 120.053936][ T43] usb 2-1: Manufacturer: syz [ 120.069380][ T4382] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.071421][ T43] usb 2-1: SerialNumber: syz [ 120.097265][ T2908] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.345796][ T43] usb 2-1: selecting invalid altsetting 1 [ 120.372283][ T43] cdc_ncm 2-1:1.0: bind() failure [ 120.389186][ T43] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 120.582204][ T43] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 120.606598][ T43] usb 2-1: USB disconnect, device number 9 [ 120.650703][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.724779][ T5935] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 120.933328][ T5935] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.963863][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.982741][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 121.015422][ T5935] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.029959][ T5935] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.039732][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.050203][ T5935] usb 4-1: config 0 descriptor?? [ 121.251927][ T7358] syz.2.580 (7358): /proc/7357/oom_adj is deprecated, please use /proc/7357/oom_score_adj instead. [ 121.358672][ T7364] loop2: detected capacity change from 0 to 7 [ 121.359581][ T7365] random: crng reseeded on system resumption [ 121.364965][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 121.364980][ T30] audit: type=1400 audit(1755042582.752:372): avc: denied { append } for pid=7362 comm="syz.2.585" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 121.402577][ T5852] Dev loop2: unable to read RDB block 7 [ 121.414957][ T5852] loop2: AHDI p2 [ 121.419965][ T5852] loop2: partition table partially beyond EOD, truncated [ 121.445102][ T7364] Dev loop2: unable to read RDB block 7 [ 121.450743][ T7364] loop2: AHDI p2 [ 121.460738][ T7364] loop2: partition table partially beyond EOD, truncated [ 121.674306][ T5935] usbhid 4-1:0.0: can't add hid device: -71 [ 121.680773][ T5935] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 121.693846][ T5935] usb 4-1: USB disconnect, device number 10 [ 121.794818][ T6000] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 121.884811][ T5936] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 121.954785][ T6000] usb 1-1: Using ep0 maxpacket: 32 [ 121.962139][ T6000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.974737][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 121.976316][ T6000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.994546][ T6000] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 122.007525][ T6000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.021647][ T6000] usb 1-1: config 0 descriptor?? [ 122.054883][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 122.065618][ T5936] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 122.075393][ T5936] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.089040][ T5936] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.102435][ T5936] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.115892][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.124111][ T5936] usb 5-1: Product: syz [ 122.133147][ T5936] usb 5-1: Manufacturer: syz [ 122.136204][ T24] usb 3-1: config 0 has no interfaces? [ 122.138085][ T5936] usb 5-1: SerialNumber: syz [ 122.143384][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 122.174721][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.187628][ T24] usb 3-1: config 0 descriptor?? [ 122.292953][ T7377] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 122.305484][ T7377] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 122.424352][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.434320][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.448935][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.457228][ T6000] ft260 0003:0403:6030.000D: unknown main item tag 0x7 [ 122.464237][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.467231][ T5967] usb 3-1: USB disconnect, device number 10 [ 122.577776][ T5936] usb 5-1: 0:2 : does not exist [ 122.654792][ T6000] ft260 0003:0403:6030.000D: chip code: 6424 8183 [ 122.862657][ T6000] ft260 0003:0403:6030.000D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 122.955339][ T5915] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 123.063995][ T6000] ft260 0003:0403:6030.000D: failed to retrieve status: -71, no wakeup [ 123.075780][ T6000] ft260 0003:0403:6030.000D: failed to retrieve status: -71 [ 123.083410][ T6000] ft260 0003:0403:6030.000D: failed to reset I2C controller: -71 [ 123.100208][ T6000] usb 1-1: USB disconnect, device number 12 [ 123.134118][ T5915] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.153619][ T5915] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 123.174706][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.197413][ T5915] usb 3-1: Product: syz [ 123.218586][ T5915] usb 3-1: Manufacturer: syz [ 123.231289][ T5936] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 123.244752][ T5915] usb 3-1: SerialNumber: syz [ 123.321530][ T5936] usb 5-1: USB disconnect, device number 9 [ 123.348605][ T7388] netlink: 'syz.1.594': attribute type 5 has an invalid length. [ 123.359409][ T7388] netlink: 130080 bytes leftover after parsing attributes in process `syz.1.594'. [ 123.475477][ T5915] usb 3-1: selecting invalid altsetting 1 [ 123.483429][ T5915] cdc_ncm 3-1:1.0: bind() failure [ 123.491844][ T5915] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 123.522993][ T5915] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 123.541992][ T5915] usb 3-1: USB disconnect, device number 11 [ 123.563685][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.240557][ T7405] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.367375][ T7405] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.444802][ T1593] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 124.501850][ T7405] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.607421][ T1593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 124.623948][ T7421] loop5: detected capacity change from 0 to 6631 [ 124.657075][ T7405] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.658566][ T1593] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 124.690989][ T1593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.700289][ T7422] loop5: detected capacity change from 6631 to 7863 [ 124.720102][ T1593] usb 5-1: config 0 descriptor?? [ 124.734845][ T5852] Buffer I/O error on dev loop5, logical block 982, async page read [ 124.756580][ T7408] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 124.782677][ T7424] geneve2: entered promiscuous mode [ 124.798319][ T7424] geneve2: entered allmulticast mode [ 124.812518][ T5852] Buffer I/O error on dev loop5, logical block 982, async page read [ 124.913880][ T7426] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.033836][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 125.057465][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 125.081438][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 125.150001][ T2908] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.188898][ T1593] elan 0003:04F3:0755.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 125.212701][ T2908] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.247284][ T2908] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.295234][ T2908] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.437941][ T7440] dummy0: entered allmulticast mode [ 125.465490][ T7440] dummy0: left allmulticast mode [ 125.480176][ T30] audit: type=1400 audit(1755042586.872:373): avc: denied { append } for pid=7406 comm="syz.4.603" name="hidraw0" dev="devtmpfs" ino=3001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 125.515392][ T5936] usb 5-1: USB disconnect, device number 10 [ 125.674840][ T6000] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 125.767141][ T30] audit: type=1400 audit(1755042587.162:374): avc: denied { execute } for pid=7445 comm="syz.1.621" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 125.834849][ T6000] usb 3-1: Using ep0 maxpacket: 32 [ 125.842123][ T6000] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.853200][ T6000] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.863037][ T6000] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 125.872479][ T6000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.884994][ T6000] usb 3-1: config 0 descriptor?? [ 126.305519][ T6000] ft260 0003:0403:6030.000F: unknown main item tag 0x7 [ 126.511363][ T6000] ft260 0003:0403:6030.000F: chip code: 6424 8183 [ 126.689758][ T7426] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.717062][ T6000] ft260 0003:0403:6030.000F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 126.734023][ T7426] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 126.868095][ T7426] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.882325][ T7426] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 126.917496][ T6000] ft260 0003:0403:6030.000F: failed to retrieve status: -71, no wakeup [ 126.946938][ T6000] ft260 0003:0403:6030.000F: failed to retrieve status: -71 [ 126.965485][ T6000] ft260 0003:0403:6030.000F: failed to reset I2C controller: -71 [ 126.996411][ T7426] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.017500][ T7426] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 127.038421][ T6000] usb 3-1: USB disconnect, device number 12 [ 127.090443][ T7479] IPv6: sit1: Disabled Multicast RS [ 127.109146][ T7479] sit1: entered allmulticast mode [ 127.129248][ T7483] openvswitch: netlink: Missing key (keys=40, expected=80) [ 127.243308][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 127.263978][ T49] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.313136][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 127.323354][ T7489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.631'. [ 127.323841][ T36] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.355472][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 127.378550][ T36] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.394548][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 127.406861][ T36] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.462736][ T7494] netlink: 'syz.1.633': attribute type 7 has an invalid length. [ 127.471119][ T7494] netlink: 'syz.1.633': attribute type 3 has an invalid length. [ 127.483368][ T7494] netlink: 224 bytes leftover after parsing attributes in process `syz.1.633'. [ 127.753577][ T7509] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 127.772751][ T7509] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 127.934725][ T6000] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 128.094690][ T6000] usb 5-1: Using ep0 maxpacket: 32 [ 128.111192][ T6000] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 128.148264][ T6000] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.197835][ T6000] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 128.212892][ T6000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.304586][ T6000] usb 5-1: config 0 descriptor?? [ 128.827259][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 129.131045][ T6000] corsair-cpro 0003:1B1C:0C10.0010: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 129.313953][ T6000] corsair-cpro 0003:1B1C:0C10.0010: probe with driver corsair-cpro failed with error -5 [ 129.325798][ T5852] udevd[5852]: setting mode of /dev/hidraw0 to 020600 failed: No such file or directory [ 129.340868][ T5852] udevd[5852]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: No such file or directory [ 129.395047][ T5967] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 129.547603][ T5935] usb 5-1: USB disconnect, device number 11 [ 129.570044][ T5967] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.597979][ T5967] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.611470][ T5967] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.630484][ T5967] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 129.640874][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 129.649246][ T5967] usb 4-1: Product: syz [ 129.653416][ T5967] usb 4-1: Manufacturer: syz [ 129.658086][ T5967] usb 4-1: SerialNumber: syz [ 129.664940][ T1593] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 129.839212][ T1593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.850296][ T1593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.860905][ T1593] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 129.870358][ T1593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.880166][ T1593] usb 1-1: config 0 descriptor?? [ 129.893996][ T5967] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 130.105638][ T6000] usb 4-1: USB disconnect, device number 11 [ 130.119939][ T6000] usblp0: removed [ 130.176797][ T30] audit: type=1400 audit(1755042591.572:375): avc: denied { map } for pid=7584 comm="syz.2.682" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.230414][ T30] audit: type=1400 audit(1755042591.572:376): avc: denied { execute } for pid=7584 comm="syz.2.682" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.304723][ T1593] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 130.311657][ T1593] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 130.342528][ T1593] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 130.355881][ T1593] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 130.362843][ T1593] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 130.370430][ T1593] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 130.380694][ T1593] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 130.395156][ T1593] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 130.574778][ T5915] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 130.703562][ T1593] pyra 0003:1E7D:2CF6.0011: couldn't init struct pyra_device [ 130.711115][ T5967] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 130.719159][ T1593] pyra 0003:1E7D:2CF6.0011: couldn't install mouse [ 130.724809][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 130.732892][ T1593] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -71 [ 130.739967][ T5915] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 130.743880][ T1593] usb 1-1: USB disconnect, device number 13 [ 130.761237][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.770501][ T5915] usb 3-1: Product: syz [ 130.775038][ T5915] usb 3-1: Manufacturer: syz [ 130.779644][ T5915] usb 3-1: SerialNumber: syz [ 130.787531][ T5915] usb 3-1: config 0 descriptor?? [ 130.875507][ T5863] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 130.875513][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 130.875598][ T5967] usb 5-1: Using ep0 maxpacket: 16 [ 130.894851][ T6000] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 130.902917][ T5967] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.912033][ T5967] usb 5-1: config 0 has no interface number 0 [ 130.928615][ T5967] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 130.939346][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.944944][ T7601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.679'. [ 130.961313][ T5967] usb 5-1: Product: syz [ 130.966281][ T5967] usb 5-1: Manufacturer: syz [ 130.971017][ T5967] usb 5-1: SerialNumber: syz [ 130.981792][ T5967] usb 5-1: config 0 descriptor?? [ 130.990314][ T5967] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 131.056178][ T6000] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.068955][ T6000] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.080992][ T6000] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 131.091411][ T6000] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.114546][ T6000] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.124125][ T6000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.136472][ T6000] usb 4-1: config 0 descriptor?? [ 131.212863][ T5915] airspy 3-1:0.0: Board ID: 00 [ 131.217863][ T5915] airspy 3-1:0.0: Firmware version: [ 131.403398][ T5967] gspca_spca1528: reg_w err -71 [ 131.435074][ T5967] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 131.454883][ T5967] usb 5-1: USB disconnect, device number 12 [ 131.537591][ T7611] netlink: 'syz.1.685': attribute type 13 has an invalid length. [ 131.545457][ T7611] netlink: 'syz.1.685': attribute type 17 has an invalid length. [ 131.578536][ T6000] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 131.622098][ T7619] loop8: detected capacity change from 0 to 8 [ 131.659815][ T7611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.687061][ T7619] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 131.703694][ T7619] loop8: partition table partially beyond EOD, truncated [ 131.718028][ T7619] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 131.803074][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 131.814544][ T5915] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 131.849165][ T5915] airspy 3-1:0.0: Registered as swradio24 [ 131.865965][ T5922] usb 4-1: USB disconnect, device number 12 [ 131.883186][ T5915] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 131.919188][ T5915] usb 3-1: USB disconnect, device number 13 [ 132.488495][ T7641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.518312][ T7645] netlink: 'syz.2.697': attribute type 9 has an invalid length. [ 132.548004][ T7645] netlink: 'syz.2.697': attribute type 7 has an invalid length. [ 132.574723][ T7645] netlink: 'syz.2.697': attribute type 8 has an invalid length. [ 132.632701][ T30] audit: type=1400 audit(1755042594.022:377): avc: denied { append } for pid=7646 comm="syz.0.698" name="sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 132.683177][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.691075][ T7649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.698025][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.856011][ T30] audit: type=1400 audit(1755042594.252:378): avc: denied { mount } for pid=7657 comm="syz.3.704" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 132.888385][ T7658] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 132.926680][ T30] audit: type=1400 audit(1755042594.282:379): avc: denied { read } for pid=7657 comm="syz.3.704" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 132.951033][ T30] audit: type=1400 audit(1755042594.282:380): avc: denied { open } for pid=7657 comm="syz.3.704" path="/130/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 133.069251][ T30] audit: type=1400 audit(1755042594.322:381): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 133.079244][ T7663] IPVS: stopping master sync thread 7667 ... [ 133.089532][ T7667] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 133.135103][ T30] audit: type=1400 audit(1755042594.442:382): avc: denied { unmount } for pid=5855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 133.191807][ T30] audit: type=1400 audit(1755042594.452:383): avc: denied { setopt } for pid=7662 comm="syz.2.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 133.640292][ T7688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.716'. [ 133.706168][ T1593] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 133.775221][ T5967] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 133.843682][ T7695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.866224][ T1593] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 133.885059][ T1593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.911403][ T1593] usb 3-1: config 0 descriptor?? [ 133.945113][ T5967] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.974096][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 133.990260][ T1593] cp210x 3-1:0.0: cp210x converter detected [ 134.008527][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 134.020417][ T5967] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.039357][ T5967] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.050811][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.076735][ T5967] usb 1-1: config 0 descriptor?? [ 134.084389][ T7685] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 134.341240][ T7711] netlink: 24 bytes leftover after parsing attributes in process `syz.3.726'. [ 134.404172][ T1593] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 134.525023][ T5967] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd [ 134.560680][ T5967] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 134.648789][ T1593] usb 3-1: cp210x converter now attached to ttyUSB0 [ 134.696452][ T30] audit: type=1400 audit(1755042596.092:384): avc: denied { setopt } for pid=7725 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.830238][ T5915] usb 3-1: USB disconnect, device number 14 [ 134.842190][ T6000] usb 1-1: USB disconnect, device number 14 [ 134.862137][ T5915] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 134.880083][ T5915] cp210x 3-1:0.0: device disconnected [ 135.034780][ T5967] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 135.187507][ T5967] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 135.198252][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.208743][ T5967] usb 4-1: config 0 descriptor?? [ 135.420847][ T7736] trusted_key: syz.2.735 sent an empty control message without MSG_MORE. [ 135.433724][ T5967] kaweth 4-1:0.0: Firmware present in device. [ 135.628338][ T5967] kaweth 4-1:0.0: Statistics collection: 0 [ 135.634929][ T5967] kaweth 4-1:0.0: Multicast filter limit: 0 [ 135.640996][ T5967] kaweth 4-1:0.0: MTU: 0 [ 135.644770][ T5915] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 135.645357][ T5967] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 135.806496][ T5915] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 135.831833][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.853461][ T5915] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 135.869578][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 135.882491][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.893664][ T5915] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 135.904880][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 135.912636][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.930345][ T5915] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 135.941797][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 135.949798][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.961386][ T5915] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 135.977284][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 135.985185][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.994216][ T5915] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.009603][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 136.017689][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.026868][ T5915] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.042273][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 136.050351][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.059391][ T5915] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.086722][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 136.107183][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.117934][ T5915] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.152839][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 136.167339][ T5915] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 136.176659][ T5915] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 136.213073][ T5915] usb 1-1: Product: syz [ 136.217536][ T5915] usb 1-1: Manufacturer: syz [ 136.223161][ T5915] usb 1-1: SerialNumber: syz [ 136.241399][ T5967] kaweth 4-1:0.0: Error setting receive filter [ 136.254370][ T5915] usb 1-1: config 0 descriptor?? [ 136.262117][ T5967] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 136.288592][ T5967] usb 4-1: USB disconnect, device number 13 [ 136.308703][ T5915] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 136.343018][ T30] audit: type=1400 audit(1755042597.732:385): avc: denied { compute_member } for pid=7766 comm="syz.1.748" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 136.482623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 136.629816][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 136.630076][ T5967] usb 1-1: USB disconnect, device number 15 [ 136.647731][ T30] audit: type=1400 audit(1755042598.042:386): avc: denied { create } for pid=7774 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 136.678924][ T5967] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 136.692600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 136.702431][ T30] audit: type=1400 audit(1755042598.082:387): avc: denied { connect } for pid=7774 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 136.735385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 136.741107][ T30] audit: type=1400 audit(1755042598.132:388): avc: denied { getopt } for pid=7768 comm="syz.4.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.166916][ T30] audit: type=1400 audit(1755042598.562:389): avc: denied { append } for pid=7782 comm="syz.1.754" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.169892][ T7783] loop6: detected capacity change from 0 to 63 [ 137.203746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.219042][ T7783] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.242405][ T7783] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.244945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.258833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.353448][ T7790] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 137.353446][ T30] audit: type=1400 audit(1755042598.672:390): avc: denied { watch } for pid=7788 comm="syz.3.756" path="/149/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 137.353496][ T30] audit: type=1400 audit(1755042598.672:391): avc: denied { watch_sb watch_reads } for pid=7788 comm="syz.3.756" path="/149/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.372872][ T7790] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 137.468352][ T7791] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 137.478137][ T7783] loop6: unable to read partition table [ 137.483955][ T7783] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 137.518277][ T7793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.547515][ T7790] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 137.575417][ T7790] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 137.612727][ T7790] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 137.663922][ T7790] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 137.718728][ T7799] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 137.738367][ T7799] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 137.750922][ T7790] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 137.781696][ T7799] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 137.820513][ T7799] overlayfs: conflicting lowerdir path [ 138.265063][ T1593] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 138.447964][ T1593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.477464][ T30] audit: type=1400 audit(1755042599.862:392): avc: denied { write } for pid=7829 comm="syz.3.775" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 138.478940][ T1593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.509321][ T30] audit: type=1400 audit(1755042599.902:393): avc: denied { ioctl } for pid=7829 comm="syz.3.775" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 138.539778][ T1593] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 138.539906][ T5936] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 138.549418][ T1593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.582125][ T1593] usb 2-1: config 0 descriptor?? [ 138.716699][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 138.724268][ T5936] usb 5-1: config 0 has an invalid interface number: 227 but max is 0 [ 138.742380][ T5936] usb 5-1: config 0 has no interface number 0 [ 138.762775][ T5936] usb 5-1: New USB device found, idVendor=05d8, idProduct=810b, bcdDevice=c3.83 [ 138.775831][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.786789][ T5936] usb 5-1: Product: syz [ 138.800436][ T5936] usb 5-1: Manufacturer: syz [ 138.806950][ T5936] usb 5-1: SerialNumber: syz [ 138.826510][ T5936] usb 5-1: config 0 descriptor?? [ 138.848345][ T5936] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in cold state, will try to load a firmware [ 138.877204][ T5936] usb 5-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 138.902491][ T5936] usb 5-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 138.924621][ T30] audit: type=1400 audit(1755042600.312:394): avc: denied { map } for pid=7838 comm="syz.0.778" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 139.003007][ T1593] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 139.037555][ T1593] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 139.063432][ T7824] mmap: syz.4.771 (7824) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.202094][ T1593] cp2112 0003:10C4:EA90.0014: Part Number: 0x82 Device Version: 0xFE [ 139.266462][ T7853] input: syz0 as /devices/virtual/input/input18 [ 139.403454][ T1593] cp2112 0003:10C4:EA90.0014: error requesting SMBus config [ 139.440361][ T1593] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -71 [ 139.492587][ T1593] usb 2-1: USB disconnect, device number 10 [ 139.686889][ T5967] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 139.751456][ T7874] vxcan1: tx drop: invalid da for name 0xfffffffffffffffd [ 139.867666][ T5967] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.906492][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 139.951366][ T7882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.963777][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 140.008186][ T5967] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.040121][ T5967] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.059462][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.096523][ T5967] usb 3-1: config 0 descriptor?? [ 140.533458][ T5967] plantronics 0003:047F:FFFF.0015: ignoring exceeding usage max [ 140.573571][ T5967] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 140.746528][ T7922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7922 comm=syz.0.801 [ 140.769652][ T7922] netlink: 32 bytes leftover after parsing attributes in process `syz.0.801'. [ 141.907909][ T24] kernel write not supported for file /amidi2 (pid: 24 comm: kworker/1:0) [ 141.980406][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 141.980422][ T30] audit: type=1400 audit(1755042603.372:400): avc: denied { read } for pid=7987 comm="syz.1.819" path="socket:[17742]" dev="sockfs" ino=17742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 142.072256][ T30] audit: type=1326 audit(1755042603.462:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0338ebe9 code=0x7ffc0000 [ 142.129670][ T30] audit: type=1326 audit(1755042603.462:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0338ebe9 code=0x7ffc0000 [ 142.180272][ T30] audit: type=1326 audit(1755042603.492:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1c0338ebe9 code=0x7ffc0000 [ 142.250379][ T30] audit: type=1326 audit(1755042603.492:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0338ebe9 code=0x7ffc0000 [ 142.314381][ T30] audit: type=1326 audit(1755042603.492:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0338ebe9 code=0x7ffc0000 [ 142.592552][ T1593] usb 3-1: USB disconnect, device number 15 [ 142.667595][ T30] audit: type=1326 audit(1755042603.492:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1c0338ebe9 code=0x7ffc0000 [ 142.748381][ T30] audit: type=1326 audit(1755042603.492:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0338ebe9 code=0x7ffc0000 [ 142.833213][ T30] audit: type=1326 audit(1755042603.492:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0338ebe9 code=0x7ffc0000 [ 142.872524][ T30] audit: type=1326 audit(1755042603.492:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.0.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1c0338ebe9 code=0x7ffc0000 [ 143.125623][ T1593] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 143.216855][ T5915] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 143.305656][ T1593] usb 3-1: Using ep0 maxpacket: 32 [ 143.313042][ T1593] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 143.347327][ T1593] usb 3-1: config 0 has no interface number 0 [ 143.406983][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.423958][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.425778][ T1593] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.461140][ T5915] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 143.482366][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.490319][ T1593] usb 3-1: config 0 interface 85 has no altsetting 0 [ 143.507334][ T1593] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 143.517952][ T1593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.528335][ T5915] usb 2-1: config 0 descriptor?? [ 143.543124][ T1593] usb 3-1: Product: syz [ 143.557133][ T1593] usb 3-1: Manufacturer: syz [ 143.561813][ T1593] usb 3-1: SerialNumber: syz [ 143.604766][ T1593] usb 3-1: config 0 descriptor?? [ 143.977870][ T5915] samsung 0003:0419:0001.0016: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0 [ 144.198800][ T6000] usb 2-1: USB disconnect, device number 11 [ 144.238107][ T1593] appletouch 3-1:0.85: Geyser mode initialized. [ 144.255901][ T1593] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input19 [ 144.511411][ T6000] usb 3-1: USB disconnect, device number 16 [ 144.553571][ T6000] appletouch 3-1:0.85: input: appletouch disconnected [ 145.396924][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.853'. [ 145.658854][ T8121] netlink: 212924 bytes leftover after parsing attributes in process `syz.3.857'. [ 145.960217][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'. [ 146.394952][ T5967] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 146.569297][ T5967] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.579538][ T5967] usb 1-1: not running at top speed; connect to a high speed hub [ 146.601802][ T5967] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.637550][ T5967] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 146.674893][ T5967] usb 1-1: config 1 has no interface number 1 [ 146.693814][ T5967] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 146.726323][ T5967] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 146.761393][ T5967] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.771663][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.788093][ T5967] usb 1-1: Product: syz [ 146.805831][ T5967] usb 1-1: Manufacturer: syz [ 146.833508][ T5967] usb 1-1: SerialNumber: syz [ 146.988386][ T5915] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 147.016283][ T5915] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 147.085712][ T5967] hub 1-1:1.0: Invalid hub with more than one config or interface [ 147.114486][ T5967] hub 1-1:1.0: probe with driver hub failed with error -22 [ 147.131996][ T6000] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 147.136441][ T5967] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 147.206876][ T5915] IPVS: starting estimator thread 0... [ 147.250188][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 147.250205][ T30] audit: type=1400 audit(1755042608.642:430): avc: denied { setopt } for pid=8182 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.254892][ T5967] usb 1-1: USB disconnect, device number 16 [ 147.277454][ T30] audit: type=1400 audit(1755042608.652:431): avc: denied { bind } for pid=8182 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.301669][ T8181] IPVS: using max 45 ests per chain, 108000 per kthread [ 147.314706][ T6000] usb 2-1: Using ep0 maxpacket: 8 [ 147.355770][ T6000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.386260][ T8185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.401628][ T6000] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 147.442518][ T6000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.452220][ T30] audit: type=1400 audit(1755042608.842:432): avc: denied { map } for pid=8186 comm="syz.2.879" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 147.512949][ T30] audit: type=1400 audit(1755042608.882:433): avc: denied { execute } for pid=8186 comm="syz.2.879" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 147.541391][ T6000] usb 2-1: config 0 descriptor?? [ 147.772661][ T6000] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 147.822901][ T8199] overlayfs: conflicting lowerdir path [ 147.836759][ T8199] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 147.848911][ T8200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.881'. [ 147.896311][ T8200] IPVS: Error connecting to the multicast addr [ 148.260728][ T5967] usb 2-1: USB disconnect, device number 12 [ 148.513088][ T8226] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.894'. [ 148.541341][ T8223] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.894'. [ 148.576689][ T8229] syzkaller1: entered promiscuous mode [ 148.582213][ T8229] syzkaller1: entered allmulticast mode [ 148.674481][ T30] audit: type=1400 audit(1755042610.062:434): avc: denied { read } for pid=8231 comm="syz.0.897" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 148.716313][ T30] audit: type=1400 audit(1755042610.062:435): avc: denied { open } for pid=8231 comm="syz.0.897" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 148.744151][ T30] audit: type=1400 audit(1755042610.092:436): avc: denied { ioctl } for pid=8231 comm="syz.0.897" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 149.494832][ T5967] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 149.580408][ T30] audit: type=1326 audit(1755042610.972:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1058ebe9 code=0x7ffc0000 [ 149.605219][ T30] audit: type=1326 audit(1755042610.972:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf1052add9 code=0x7ffc0000 [ 149.634955][ T30] audit: type=1326 audit(1755042610.972:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf1052add9 code=0x7ffc0000 [ 149.675074][ T5967] usb 4-1: Using ep0 maxpacket: 8 [ 149.681628][ T5967] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.697576][ T5967] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.714428][ T5967] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.738297][ T5967] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.751893][ T5967] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.766554][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.807887][ T8267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.996695][ T5967] usb 4-1: GET_CAPABILITIES returned 0 [ 150.003434][ T5967] usbtmc 4-1:16.0: can't read capabilities [ 150.220324][ T8283] bridge0: port 3(syz_tun) entered blocking state [ 150.231536][ T5935] usb 4-1: USB disconnect, device number 14 [ 150.259665][ T8283] bridge0: port 3(syz_tun) entered disabled state [ 150.268354][ T8283] syz_tun: entered allmulticast mode [ 150.275798][ T8283] syz_tun: entered promiscuous mode [ 150.277995][ T8284] netlink: 'syz.1.920': attribute type 10 has an invalid length. [ 150.283256][ T8283] bridge0: port 3(syz_tun) entered blocking state [ 150.295807][ T8283] bridge0: port 3(syz_tun) entered forwarding state [ 150.307439][ T8284] bridge0: port 3(syz_tun) entered disabled state [ 150.314127][ T8284] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.322686][ T8284] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.338679][ T8284] bridge0: port 3(syz_tun) entered blocking state [ 150.345262][ T8284] bridge0: port 3(syz_tun) entered forwarding state [ 150.352199][ T8284] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.359393][ T8284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.366860][ T8284] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.374002][ T8284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.415746][ T8284] bridge0: entered promiscuous mode [ 150.444353][ T8284] bridge0: entered allmulticast mode [ 150.453141][ T8284] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 150.914708][ T5935] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 150.925095][ T5967] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 151.071022][ T5935] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 151.094261][ T5967] usb 1-1: Using ep0 maxpacket: 16 [ 151.107958][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.120784][ T5967] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 151.133884][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.134094][ T5935] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.157043][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.168149][ T5967] usb 1-1: config 0 descriptor?? [ 151.187384][ T5935] usb 3-1: SerialNumber: syz [ 151.318249][ T5915] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 151.486242][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.501195][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.512814][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.526859][ T5915] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.536050][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.546261][ T5915] usb 4-1: config 0 descriptor?? [ 151.607341][ T5967] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 151.823960][ T5935] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 151.967092][ T5915] plantronics 0003:047F:FFFF.0019: ignoring exceeding usage max [ 151.987276][ T5915] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 152.062062][ T5935] usb 1-1: USB disconnect, device number 17 [ 152.229660][ T5915] usb 3-1: USB disconnect, device number 17 [ 152.243878][ T6000] usb 4-1: USB disconnect, device number 15 [ 152.266924][ T5915] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 152.674793][ T5967] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 152.874893][ T5967] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 152.906354][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.948599][ T5967] usb 2-1: config 0 descriptor?? [ 153.155882][ T5915] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 153.184194][ T30] kauditd_printk_skb: 210 callbacks suppressed [ 153.184215][ T30] audit: type=1400 audit(1755042614.572:650): avc: denied { watch watch_reads } for pid=8377 comm="syz.4.955" path="pipe:[19780]" dev="pipefs" ino=19780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 153.195156][ T5967] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 153.214622][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.274257][ T8378] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 153.367310][ T5915] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.380412][ T5915] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.401892][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 153.417019][ T5915] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 153.445042][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.471748][ T5915] usb 4-1: config 0 descriptor?? [ 153.572376][ T30] audit: type=1400 audit(1755042614.962:651): avc: denied { create } for pid=8397 comm="syz.0.960" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 153.583358][ T8398] Invalid source name [ 153.607486][ T8398] UBIFS error (pid: 8398): cannot open "./file0", error -22 [ 153.619298][ T30] audit: type=1400 audit(1755042614.962:652): avc: denied { mounton } for pid=8397 comm="syz.0.960" path="/195/file0" dev="tmpfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 153.715681][ T30] audit: type=1400 audit(1755042614.962:653): avc: denied { mounton } for pid=8397 comm="syz.0.960" path="/195/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 154.008907][ T5967] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 154.019771][ T5967] asix 2-1:0.0: probe with driver asix failed with error -71 [ 154.055611][ T5967] usb 2-1: USB disconnect, device number 13 [ 154.097586][ T5915] usb 4-1: string descriptor 0 read error: -22 [ 154.210114][ T8422] netlink: 67 bytes leftover after parsing attributes in process `syz.2.968'. [ 154.495247][ T5922] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 154.504438][ T5915] uclogic 0003:256C:006D.001A: failed retrieving string descriptor #100: -71 [ 154.521047][ T5915] uclogic 0003:256C:006D.001A: failed retrieving pen parameters: -71 [ 154.527301][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 154.531784][ T5915] uclogic 0003:256C:006D.001A: failed probing pen v1 parameters: -71 [ 154.550301][ T5915] uclogic 0003:256C:006D.001A: failed probing parameters: -71 [ 154.558874][ T5915] uclogic 0003:256C:006D.001A: probe with driver uclogic failed with error -71 [ 154.574777][ T5915] usb 4-1: USB disconnect, device number 16 [ 154.668471][ T5922] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 154.687124][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.707454][ T5922] usb 1-1: Product: syz [ 154.711666][ T5922] usb 1-1: Manufacturer: syz [ 154.732937][ T5922] usb 1-1: SerialNumber: syz [ 154.741644][ T5922] usb 1-1: config 0 descriptor?? [ 155.000561][ T8459] netlink: 'syz.2.983': attribute type 10 has an invalid length. [ 155.018047][ T8459] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.029920][ T8459] bond0: (slave team0): Enslaving as an active interface with an up link [ 155.127023][ T8464] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 155.133623][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 155.384788][ T5915] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 155.537799][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 155.549382][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 155.560897][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 155.572344][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.585595][ T5915] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.594851][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.604503][ T5915] usb 4-1: config 0 descriptor?? [ 155.610398][ T8468] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 155.786140][ T5922] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 155.987365][ T5922] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 155.998326][ T5922] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 156.008999][ T5922] asix 1-1:0.0: probe with driver asix failed with error -71 [ 156.019696][ T5922] usb 1-1: USB disconnect, device number 18 [ 156.029956][ T5915] plantronics 0003:047F:FFFF.001B: reserved main item tag 0xd [ 156.050935][ T5915] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 156.286084][ T5922] usb 4-1: USB disconnect, device number 17 [ 156.312742][ T8489] program syz.1.995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.485052][ C1] sd 0:0:1:0: [sda] tag#2099 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 156.495655][ C1] sd 0:0:1:0: [sda] tag#2099 CDB: Write(6) 0a 00 00 00 00 00 [ 156.540606][ T8492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.608428][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.998'. [ 156.671162][ T30] audit: type=1400 audit(1755042618.062:654): avc: denied { connect } for pid=8500 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 156.691884][ T30] audit: type=1400 audit(1755042618.062:655): avc: denied { bind } for pid=8500 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.194909][ T5863] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 157.202846][ T5863] Bluetooth: hci0: command tx timeout [ 157.492234][ T8531] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 157.510123][ T30] audit: type=1400 audit(1755042618.902:656): avc: denied { name_bind } for pid=8530 comm="syz.3.1012" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 157.696745][ T30] audit: type=1400 audit(1755042619.082:657): avc: denied { mount } for pid=8538 comm="syz.0.1016" name="/" dev="configfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 157.729215][ T30] audit: type=1400 audit(1755042619.092:658): avc: denied { search } for pid=8538 comm="syz.0.1016" name="/" dev="configfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.751241][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.801846][ T30] audit: type=1400 audit(1755042619.092:659): avc: denied { search } for pid=8538 comm="syz.0.1016" name="/" dev="configfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.894764][ T5915] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 158.034608][ T8557] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1022'. [ 158.094952][ T5915] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 158.145007][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.194806][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.214973][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 158.243034][ T5915] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 158.292563][ T5915] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 158.323338][ T5915] usb 4-1: Manufacturer: syz [ 158.337268][ T5915] usb 4-1: config 0 descriptor?? [ 158.766597][ T5915] appleir 0003:05AC:8243.001C: unknown main item tag 0x0 [ 158.788944][ T5915] appleir 0003:05AC:8243.001C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 158.914825][ T5967] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 159.074794][ T5967] usb 1-1: Using ep0 maxpacket: 16 [ 159.082294][ T5967] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.093280][ T5967] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2039, setting to 1024 [ 159.104419][ T5967] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 159.114337][ T5967] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 159.126187][ T5967] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.135683][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.143763][ T5967] usb 1-1: Product: syz [ 159.148113][ T5967] usb 1-1: Manufacturer: syz [ 159.152845][ T5967] usb 1-1: SerialNumber: syz [ 159.160603][ T8579] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 159.380403][ T8579] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 159.389337][ T8579] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 160.003909][ T5967] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 160.010537][ T5967] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 160.035262][ T5967] cdc_ncm 1-1:1.0: bind() failure [ 160.050322][ T5967] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 160.070057][ T5967] cdc_ncm 1-1:1.1: bind() failure [ 160.096502][ T5967] usb 1-1: USB disconnect, device number 19 [ 160.442640][ T8619] netlink: 'syz.1.1047': attribute type 1 has an invalid length. [ 160.787078][ T5922] usb 4-1: USB disconnect, device number 18 [ 161.473633][ T8658] input: syz0 as /devices/virtual/input/input21 [ 161.537608][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 161.537634][ T30] audit: type=1400 audit(1755042622.932:663): avc: denied { map } for pid=8659 comm="syz.2.1062" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 161.567375][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.721439][ T30] audit: type=1400 audit(1755042623.092:664): avc: denied { watch } for pid=8661 comm="syz.3.1063" path="/220/file0" dev="tmpfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 161.987018][ T30] audit: type=1400 audit(1755042623.372:665): avc: denied { mount } for pid=8680 comm="syz.0.1071" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 162.015258][ T30] audit: type=1400 audit(1755042623.402:666): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 162.717933][ T30] audit: type=1400 audit(1755042624.112:667): avc: denied { create } for pid=8706 comm="syz.0.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 162.785593][ T30] audit: type=1400 audit(1755042624.152:668): avc: denied { setopt } for pid=8706 comm="syz.0.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 162.880025][ T8714] overlayfs: upper fs does not support file handles, falling back to index=off. [ 163.204760][ T5967] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 163.305009][ T5935] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 163.354797][ T5967] usb 1-1: Using ep0 maxpacket: 32 [ 163.366789][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.378301][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.391626][ T5967] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 163.401131][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.413336][ T5967] usb 1-1: config 0 descriptor?? [ 163.423671][ T5967] hub 1-1:0.0: USB hub found [ 163.467373][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.479124][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.490956][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 163.500762][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.513730][ T5935] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.523161][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.533596][ T5935] usb 2-1: config 0 descriptor?? [ 163.628429][ T5967] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 163.953912][ T5935] plantronics 0003:047F:FFFF.001D: ignoring exceeding usage max [ 163.982541][ T5935] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 164.033430][ T5967] usbhid 1-1:0.0: can't add hid device: -71 [ 164.044864][ T5967] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 164.090045][ T5967] usb 1-1: USB disconnect, device number 20 [ 164.702286][ T5922] hid-generic 0000:007F:0005.001E: unknown main item tag 0x0 [ 164.725207][ T5922] hid-generic 0000:007F:0005.001E: unknown main item tag 0x0 [ 164.737551][ T5922] hid-generic 0000:007F:0005.001E: unknown main item tag 0x0 [ 164.748827][ T5922] hid-generic 0000:007F:0005.001E: unknown main item tag 0x0 [ 164.756875][ T5922] hid-generic 0000:007F:0005.001E: unknown main item tag 0x0 [ 164.764376][ T5922] hid-generic 0000:007F:0005.001E: unknown main item tag 0x0 [ 164.776409][ T5922] hid-generic 0000:007F:0005.001E: unknown main item tag 0x0 [ 164.783991][ T5922] hid-generic 0000:007F:0005.001E: unknown main item tag 0x0 [ 164.793155][ T5922] hid-generic 0000:007F:0005.001E: unknown main item tag 0x0 [ 164.803767][ T5922] hid-generic 0000:007F:0005.001E: unknown main item tag 0x0 [ 164.819347][ T5922] hid-generic 0000:007F:0005.001E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 164.880256][ T8769] fido_id[8769]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 165.158050][ T8778] binder: 8777:8778 ioctl c0306201 2000000003c0 returned -14 [ 165.236993][ T8780] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 165.771663][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1122'. [ 165.774845][ T1593] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 165.780849][ T8804] netlink: 'syz.2.1122': attribute type 1 has an invalid length. [ 165.799690][ T8804] netlink: 'syz.2.1122': attribute type 2 has an invalid length. [ 165.808073][ T8804] netlink: 'syz.2.1122': attribute type 3 has an invalid length. [ 165.816336][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1122'. [ 165.976343][ T1593] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.992878][ T30] audit: type=1400 audit(1755042627.382:669): avc: denied { write } for pid=8814 comm="syz.1.1126" path="socket:[21435]" dev="sockfs" ino=21435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.024755][ T1593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 166.043866][ T1593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 166.058005][ T1593] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.067012][ T5935] usb 2-1: USB disconnect, device number 14 [ 166.093586][ T1593] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.105101][ T1593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.120469][ T1593] usb 1-1: config 0 descriptor?? [ 166.136830][ T8796] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 166.164958][ T5922] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 166.346242][ T5922] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 166.370696][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 166.394857][ T5922] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 166.417154][ T5922] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 166.446258][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.454312][ T5922] usb 3-1: Product: syz [ 166.472335][ T5922] usb 3-1: Manufacturer: syz [ 166.490766][ T5922] usb 3-1: SerialNumber: syz [ 166.525057][ T5922] usb 3-1: config 0 descriptor?? [ 166.536717][ T8810] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 166.543988][ T8810] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 166.556872][ T1593] plantronics 0003:047F:FFFF.001F: reserved main item tag 0xd [ 166.587431][ T5922] usb 3-1: ucan: probing device on interface #0 [ 166.618992][ T1593] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 166.810252][ T30] audit: type=1400 audit(1755042628.202:670): avc: denied { map } for pid=8829 comm="syz.4.1133" path="socket:[21840]" dev="sockfs" ino=21840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 166.837814][ T30] audit: type=1400 audit(1755042628.202:671): avc: denied { write } for pid=8829 comm="syz.4.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 166.861357][ T6000] usb 1-1: USB disconnect, device number 21 [ 166.988076][ T5922] usb 3-1: ucan: device reported invalid device info [ 166.997669][ T5922] usb 3-1: ucan: probe failed; try to update the device firmware [ 167.213481][ T6000] usb 3-1: USB disconnect, device number 18 [ 167.251826][ T8846] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 167.259618][ T8846] syzkaller1: Linktype set failed because interface is up [ 167.447561][ T30] audit: type=1400 audit(1755042628.842:672): avc: denied { mounton } for pid=8851 comm="syz.0.1143" path=2F3233302F66696C6530202864656C6574656429 dev="proc" ino=4026533311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 167.518700][ T30] audit: type=1400 audit(1755042628.882:673): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 167.649296][ T8859] netlink: 'syz.0.1146': attribute type 4 has an invalid length. [ 167.680127][ T8859] netlink: 'syz.0.1146': attribute type 4 has an invalid length. [ 167.826448][ T8869] [ 167.828818][ T8869] ===================================================== [ 167.835749][ T8869] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 167.843185][ T8869] 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 Not tainted [ 167.850270][ T8869] ----------------------------------------------------- [ 167.857184][ T8869] syz.0.1150/8869 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 167.864812][ T8869] ffff888028db10c0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 167.873517][ T8869] [ 167.873517][ T8869] and this task is already holding: [ 167.880863][ T8869] ffff88806199c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 167.890688][ T8869] which would create a new lock dependency: [ 167.896558][ T8869] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 167.904646][ T8869] [ 167.904646][ T8869] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 167.914072][ T8869] (&dev->event_lock#2){..-.}-{3:3} [ 167.914099][ T8869] [ 167.914099][ T8869] ... which became SOFTIRQ-irq-safe at: [ 167.927049][ T8869] lock_acquire+0x179/0x350 [ 167.931632][ T8869] _raw_spin_lock_irqsave+0x3a/0x60 [ 167.936913][ T8869] input_event+0x74/0xd0 [ 167.941225][ T8869] atp_complete_geyser_3_4+0xa2c/0x16f0 [ 167.946842][ T8869] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 167.952291][ T8869] usb_hcd_giveback_urb+0x39b/0x450 [ 167.957560][ T8869] dummy_timer+0x1814/0x3a30 [ 167.962222][ T8869] __hrtimer_run_queues+0x202/0xad0 [ 167.967489][ T8869] hrtimer_run_softirq+0x17d/0x350 [ 167.972666][ T8869] handle_softirqs+0x216/0x8e0 [ 167.977502][ T8869] __irq_exit_rcu+0x109/0x170 [ 167.982249][ T8869] irq_exit_rcu+0x9/0x30 [ 167.986676][ T8869] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 167.992381][ T8869] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 167.998429][ T8869] _raw_spin_unlock_irqrestore+0x31/0x80 [ 168.004133][ T8869] dummy_urb_enqueue+0x558/0x920 [ 168.009138][ T8869] usb_hcd_submit_urb+0x258/0x1c60 [ 168.014321][ T8869] usb_submit_urb+0x890/0x1770 [ 168.019147][ T8869] atp_open+0x60/0xd0 [ 168.023201][ T8869] input_open_device+0x249/0x3d0 [ 168.028208][ T8869] mousedev_open_device+0xe0/0x140 [ 168.033386][ T8869] mousedev_open+0x2fd/0x580 [ 168.038040][ T8869] chrdev_open+0x231/0x6a0 [ 168.042534][ T8869] do_dentry_open+0x982/0x1530 [ 168.047363][ T8869] vfs_open+0x82/0x3f0 [ 168.051503][ T8869] path_openat+0x1de4/0x2cb0 [ 168.056157][ T8869] do_filp_open+0x20b/0x470 [ 168.060725][ T8869] do_sys_openat2+0x11b/0x1d0 [ 168.065471][ T8869] __x64_sys_openat+0x174/0x210 [ 168.070392][ T8869] do_syscall_64+0xcd/0x4c0 [ 168.074959][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.080918][ T8869] [ 168.080918][ T8869] to a SOFTIRQ-irq-unsafe lock: [ 168.087925][ T8869] (tasklist_lock){.+.+}-{3:3} [ 168.087947][ T8869] [ 168.087947][ T8869] ... which became SOFTIRQ-irq-unsafe at: [ 168.100536][ T8869] ... [ 168.100542][ T8869] lock_acquire+0x179/0x350 [ 168.107673][ T8869] _raw_read_lock+0x5f/0x70 [ 168.112248][ T8869] __do_wait+0x105/0x890 [ 168.116575][ T8869] do_wait+0x21e/0x5a0 [ 168.120746][ T8869] kernel_wait+0x9f/0x160 [ 168.125143][ T8869] call_usermodehelper_exec_work+0xf1/0x170 [ 168.131111][ T8869] process_one_work+0x9cc/0x1b70 [ 168.136112][ T8869] worker_thread+0x6c8/0xf10 [ 168.140766][ T8869] kthread+0x3c5/0x780 [ 168.144897][ T8869] ret_from_fork+0x5d7/0x6f0 [ 168.149551][ T8869] ret_from_fork_asm+0x1a/0x30 [ 168.154386][ T8869] [ 168.154386][ T8869] other info that might help us debug this: [ 168.154386][ T8869] [ 168.164589][ T8869] Chain exists of: [ 168.164589][ T8869] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 168.164589][ T8869] [ 168.178147][ T8869] Possible interrupt unsafe locking scenario: [ 168.178147][ T8869] [ 168.186440][ T8869] CPU0 CPU1 [ 168.191795][ T8869] ---- ---- [ 168.197142][ T8869] lock(tasklist_lock); [ 168.201361][ T8869] local_irq_disable(); [ 168.208090][ T8869] lock(&dev->event_lock#2); [ 168.215278][ T8869] lock(&client->buffer_lock); [ 168.222710][ T8869] [ 168.226142][ T8869] lock(&dev->event_lock#2); [ 168.230981][ T8869] [ 168.230981][ T8869] *** DEADLOCK *** [ 168.230981][ T8869] [ 168.239102][ T8869] 7 locks held by syz.0.1150/8869: [ 168.244186][ T8869] #0: ffff888146b3e118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 168.253302][ T8869] #1: ffff88801fbde230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 168.263377][ T8869] #2: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 168.273010][ T8869] #3: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 168.282558][ T8869] #4: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 168.291668][ T8869] #5: ffff88806199c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 168.301915][ T8869] #6: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 168.310963][ T8869] [ 168.310963][ T8869] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 168.321359][ T8869] -> (&dev->event_lock#2){..-.}-{3:3} { [ 168.326986][ T8869] IN-SOFTIRQ-W at: [ 168.331030][ T8869] lock_acquire+0x179/0x350 [ 168.337358][ T8869] _raw_spin_lock_irqsave+0x3a/0x60 [ 168.344385][ T8869] input_event+0x74/0xd0 [ 168.350436][ T8869] atp_complete_geyser_3_4+0xa2c/0x16f0 [ 168.357785][ T8869] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 168.364964][ T8869] usb_hcd_giveback_urb+0x39b/0x450 [ 168.371973][ T8869] dummy_timer+0x1814/0x3a30 [ 168.378364][ T8869] __hrtimer_run_queues+0x202/0xad0 [ 168.385370][ T8869] hrtimer_run_softirq+0x17d/0x350 [ 168.392286][ T8869] handle_softirqs+0x216/0x8e0 [ 168.398855][ T8869] __irq_exit_rcu+0x109/0x170 [ 168.405337][ T8869] irq_exit_rcu+0x9/0x30 [ 168.411383][ T8869] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 168.418826][ T8869] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 168.426613][ T8869] _raw_spin_unlock_irqrestore+0x31/0x80 [ 168.434064][ T8869] dummy_urb_enqueue+0x558/0x920 [ 168.440802][ T8869] usb_hcd_submit_urb+0x258/0x1c60 [ 168.447721][ T8869] usb_submit_urb+0x890/0x1770 [ 168.454287][ T8869] atp_open+0x60/0xd0 [ 168.460069][ T8869] input_open_device+0x249/0x3d0 [ 168.466810][ T8869] mousedev_open_device+0xe0/0x140 [ 168.473724][ T8869] mousedev_open+0x2fd/0x580 [ 168.480122][ T8869] chrdev_open+0x231/0x6a0 [ 168.486347][ T8869] do_dentry_open+0x982/0x1530 [ 168.492913][ T8869] vfs_open+0x82/0x3f0 [ 168.498789][ T8869] path_openat+0x1de4/0x2cb0 [ 168.505196][ T8869] do_filp_open+0x20b/0x470 [ 168.511505][ T8869] do_sys_openat2+0x11b/0x1d0 [ 168.517994][ T8869] __x64_sys_openat+0x174/0x210 [ 168.524652][ T8869] do_syscall_64+0xcd/0x4c0 [ 168.530957][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.538650][ T8869] INITIAL USE at: [ 168.542607][ T8869] lock_acquire+0x179/0x350 [ 168.548832][ T8869] _raw_spin_lock_irqsave+0x3a/0x60 [ 168.555757][ T8869] input_inject_event+0x9f/0x3b0 [ 168.562413][ T8869] led_set_brightness+0x217/0x290 [ 168.569155][ T8869] kbd_led_trigger_activate+0xcb/0x110 [ 168.576329][ T8869] led_trigger_set+0x59a/0xc50 [ 168.582813][ T8869] led_trigger_set_default+0x1e0/0x2e0 [ 168.589991][ T8869] led_classdev_register_ext+0x7b8/0xa10 [ 168.597341][ T8869] input_leds_connect+0x552/0x8e0 [ 168.604083][ T8869] input_attach_handler.isra.0+0x176/0x250 [ 168.611606][ T8869] input_register_device+0xab9/0x1180 [ 168.618696][ T8869] atkbd_connect+0x5f8/0xa40 [ 168.625023][ T8869] serio_driver_probe+0x7c/0xd0 [ 168.631590][ T8869] really_probe+0x241/0xa90 [ 168.637809][ T8869] __driver_probe_device+0x1de/0x440 [ 168.644826][ T8869] driver_probe_device+0x4c/0x1b0 [ 168.651567][ T8869] __driver_attach+0x283/0x580 [ 168.658044][ T8869] bus_for_each_dev+0x13b/0x1d0 [ 168.664615][ T8869] serio_handle_event+0x335/0xc30 [ 168.671360][ T8869] process_one_work+0x9cc/0x1b70 [ 168.678039][ T8869] worker_thread+0x6c8/0xf10 [ 168.684347][ T8869] kthread+0x3c5/0x780 [ 168.690146][ T8869] ret_from_fork+0x5d7/0x6f0 [ 168.696477][ T8869] ret_from_fork_asm+0x1a/0x30 [ 168.702983][ T8869] } [ 168.705543][ T8869] ... key at: [] __key.7+0x0/0x40 [ 168.712718][ T8869] -> (&client->buffer_lock){....}-{3:3} { [ 168.718430][ T8869] INITIAL USE at: [ 168.722301][ T8869] lock_acquire+0x179/0x350 [ 168.728352][ T8869] _raw_spin_lock+0x2e/0x40 [ 168.734427][ T8869] evdev_pass_values+0x10e/0x9b0 [ 168.741120][ T8869] evdev_events+0x104/0x390 [ 168.747172][ T8869] input_pass_values+0x138/0x880 [ 168.753671][ T8869] input_handle_event+0xf00/0x14d0 [ 168.760331][ T8869] input_inject_event+0x1e8/0x3b0 [ 168.767428][ T8869] evdev_write+0x457/0x750 [ 168.773389][ T8869] vfs_write+0x29d/0x11d0 [ 168.779258][ T8869] ksys_write+0x1f8/0x250 [ 168.785128][ T8869] do_syscall_64+0xcd/0x4c0 [ 168.791174][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.798710][ T8869] } [ 168.801187][ T8869] ... key at: [] __key.1+0x0/0x40 [ 168.808277][ T8869] ... acquired at: [ 168.812055][ T8869] _raw_spin_lock+0x2e/0x40 [ 168.816716][ T8869] evdev_pass_values+0x10e/0x9b0 [ 168.821823][ T8869] evdev_events+0x104/0x390 [ 168.826515][ T8869] input_pass_values+0x138/0x880 [ 168.831609][ T8869] input_handle_event+0xf00/0x14d0 [ 168.836873][ T8869] input_inject_event+0x1e8/0x3b0 [ 168.842051][ T8869] evdev_write+0x457/0x750 [ 168.846619][ T8869] vfs_write+0x29d/0x11d0 [ 168.851118][ T8869] ksys_write+0x1f8/0x250 [ 168.855596][ T8869] do_syscall_64+0xcd/0x4c0 [ 168.860249][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.866295][ T8869] [ 168.868594][ T8869] [ 168.868594][ T8869] the dependencies between the lock to be acquired [ 168.868601][ T8869] and SOFTIRQ-irq-unsafe lock: [ 168.882068][ T8869] -> (tasklist_lock){.+.+}-{3:3} { [ 168.887343][ T8869] HARDIRQ-ON-R at: [ 168.891472][ T8869] lock_acquire+0x179/0x350 [ 168.897970][ T8869] _raw_read_lock+0x5f/0x70 [ 168.904481][ T8869] __do_wait+0x105/0x890 [ 168.910733][ T8869] do_wait+0x21e/0x5a0 [ 168.916784][ T8869] kernel_wait+0x9f/0x160 [ 168.923102][ T8869] call_usermodehelper_exec_work+0xf1/0x170 [ 168.930974][ T8869] process_one_work+0x9cc/0x1b70 [ 168.937937][ T8869] worker_thread+0x6c8/0xf10 [ 168.944507][ T8869] kthread+0x3c5/0x780 [ 168.950549][ T8869] ret_from_fork+0x5d7/0x6f0 [ 168.957116][ T8869] ret_from_fork_asm+0x1a/0x30 [ 168.963860][ T8869] SOFTIRQ-ON-R at: [ 168.967992][ T8869] lock_acquire+0x179/0x350 [ 168.974487][ T8869] _raw_read_lock+0x5f/0x70 [ 168.980972][ T8869] __do_wait+0x105/0x890 [ 168.987212][ T8869] do_wait+0x21e/0x5a0 [ 168.993263][ T8869] kernel_wait+0x9f/0x160 [ 168.999565][ T8869] call_usermodehelper_exec_work+0xf1/0x170 [ 169.007437][ T8869] process_one_work+0x9cc/0x1b70 [ 169.014350][ T8869] worker_thread+0x6c8/0xf10 [ 169.020914][ T8869] kthread+0x3c5/0x780 [ 169.026959][ T8869] ret_from_fork+0x5d7/0x6f0 [ 169.033525][ T8869] ret_from_fork_asm+0x1a/0x30 [ 169.040355][ T8869] INITIAL USE at: [ 169.044400][ T8869] lock_acquire+0x179/0x350 [ 169.050797][ T8869] _raw_write_lock_irq+0x36/0x50 [ 169.057629][ T8869] copy_process+0x4caf/0x7690 [ 169.064202][ T8869] kernel_clone+0xfc/0x930 [ 169.070510][ T8869] user_mode_thread+0xc7/0x110 [ 169.077185][ T8869] rest_init+0x23/0x2b0 [ 169.083264][ T8869] start_kernel+0x3ee/0x4d0 [ 169.089674][ T8869] x86_64_start_reservations+0x18/0x30 [ 169.097028][ T8869] x86_64_start_kernel+0x130/0x190 [ 169.104033][ T8869] common_startup_64+0x13e/0x148 [ 169.110951][ T8869] INITIAL READ USE at: [ 169.115430][ T8869] lock_acquire+0x179/0x350 [ 169.122262][ T8869] _raw_read_lock+0x5f/0x70 [ 169.129094][ T8869] __do_wait+0x105/0x890 [ 169.135674][ T8869] do_wait+0x21e/0x5a0 [ 169.142068][ T8869] kernel_wait+0x9f/0x160 [ 169.148719][ T8869] call_usermodehelper_exec_work+0xf1/0x170 [ 169.156936][ T8869] process_one_work+0x9cc/0x1b70 [ 169.164203][ T8869] worker_thread+0x6c8/0xf10 [ 169.171113][ T8869] kthread+0x3c5/0x780 [ 169.177519][ T8869] ret_from_fork+0x5d7/0x6f0 [ 169.184432][ T8869] ret_from_fork_asm+0x1a/0x30 [ 169.191519][ T8869] } [ 169.194182][ T8869] ... key at: [] tasklist_lock+0x18/0x40 [ 169.202066][ T8869] ... acquired at: [ 169.206035][ T8869] _raw_read_lock+0x5f/0x70 [ 169.210721][ T8869] send_sigurg+0xed/0xc80 [ 169.215211][ T8869] sk_send_sigurg+0x76/0x360 [ 169.219961][ T8869] unix_stream_sendmsg+0xfa5/0x1340 [ 169.225311][ T8869] ____sys_sendmsg+0xa98/0xc70 [ 169.230232][ T8869] ___sys_sendmsg+0x134/0x1d0 [ 169.235075][ T8869] __sys_sendmmsg+0x200/0x420 [ 169.239902][ T8869] __x64_sys_sendmmsg+0x9c/0x100 [ 169.244992][ T8869] do_syscall_64+0xcd/0x4c0 [ 169.249652][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.255697][ T8869] [ 169.257997][ T8869] -> (&f_owner->lock){....}-{3:3} { [ 169.263295][ T8869] INITIAL USE at: [ 169.267263][ T8869] lock_acquire+0x179/0x350 [ 169.273486][ T8869] _raw_write_lock_irq+0x36/0x50 [ 169.280170][ T8869] __f_setown+0x61/0x3c0 [ 169.286147][ T8869] fcntl_dirnotify+0x7b1/0xb60 [ 169.292628][ T8869] do_fcntl+0xe62/0x15a0 [ 169.298605][ T8869] __x64_sys_fcntl+0x163/0x200 [ 169.305143][ T8869] do_syscall_64+0xcd/0x4c0 [ 169.311378][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.319090][ T8869] INITIAL READ USE at: [ 169.323505][ T8869] lock_acquire+0x179/0x350 [ 169.330183][ T8869] _raw_read_lock_irqsave+0x74/0x90 [ 169.337545][ T8869] send_sigio+0x31/0x3e0 [ 169.343942][ T8869] dnotify_handle_event+0x15e/0x2b0 [ 169.351291][ T8869] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 169.359874][ T8869] fsnotify+0x13d6/0x1dc0 [ 169.366352][ T8869] vfs_mkdir+0x71d/0x8c0 [ 169.372749][ T8869] do_mkdirat+0x304/0x3e0 [ 169.379241][ T8869] __x64_sys_mkdirat+0x83/0xb0 [ 169.386155][ T8869] do_syscall_64+0xcd/0x4c0 [ 169.392809][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.400854][ T8869] } [ 169.403415][ T8869] ... key at: [] __key.1+0x0/0x40 [ 169.410589][ T8869] ... acquired at: [ 169.414452][ T8869] _raw_read_lock_irqsave+0x74/0x90 [ 169.419833][ T8869] send_sigio+0x31/0x3e0 [ 169.424227][ T8869] kill_fasync+0x214/0x510 [ 169.428797][ T8869] lease_break_callback+0x23/0x30 [ 169.433981][ T8869] __break_lease+0x674/0x1810 [ 169.438809][ T8869] do_dentry_open+0x91f/0x1530 [ 169.443723][ T8869] vfs_open+0x82/0x3f0 [ 169.447944][ T8869] path_openat+0x1de4/0x2cb0 [ 169.452684][ T8869] do_filp_open+0x20b/0x470 [ 169.457339][ T8869] do_sys_openat2+0x11b/0x1d0 [ 169.462169][ T8869] __x64_sys_open+0x153/0x1e0 [ 169.467003][ T8869] do_syscall_64+0xcd/0x4c0 [ 169.471658][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.477701][ T8869] [ 169.480028][ T8869] -> (&new->fa_lock){....}-{3:3} { [ 169.485129][ T8869] INITIAL USE at: [ 169.488999][ T8869] lock_acquire+0x179/0x350 [ 169.495048][ T8869] _raw_write_lock_irq+0x36/0x50 [ 169.501532][ T8869] fasync_remove_entry+0xb2/0x1e0 [ 169.508138][ T8869] fasync_helper+0xaf/0xd0 [ 169.514116][ T8869] sock_fasync+0x92/0x140 [ 169.519988][ T8869] __fput+0x968/0xb70 [ 169.525521][ T8869] task_work_run+0x150/0x240 [ 169.531652][ T8869] exit_to_user_mode_loop+0xeb/0x110 [ 169.538587][ T8869] do_syscall_64+0x3f6/0x4c0 [ 169.544719][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.552152][ T8869] INITIAL READ USE at: [ 169.556457][ T8869] lock_acquire+0x179/0x350 [ 169.562952][ T8869] _raw_read_lock_irqsave+0x74/0x90 [ 169.570150][ T8869] kill_fasync+0x138/0x510 [ 169.576546][ T8869] sock_wake_async+0x132/0x160 [ 169.583284][ T8869] unix_write_space+0x2ae/0x510 [ 169.590220][ T8869] sock_wfree+0x261/0x880 [ 169.596550][ T8869] unix_destruct_scm+0x137/0x190 [ 169.603463][ T8869] skb_release_head_state+0xa3/0x290 [ 169.610719][ T8869] sk_skb_reason_drop+0xeb/0x1a0 [ 169.617652][ T8869] skb_queue_purge_reason+0x2b0/0x420 [ 169.625010][ T8869] unix_dgram_disconnected+0x54/0x150 [ 169.632355][ T8869] unix_dgram_connect+0x86f/0xc80 [ 169.639353][ T8869] __sys_connect_file+0x141/0x1a0 [ 169.646359][ T8869] __sys_connect+0x13b/0x160 [ 169.652929][ T8869] __x64_sys_connect+0x72/0xb0 [ 169.659694][ T8869] do_syscall_64+0xcd/0x4c0 [ 169.666198][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.674064][ T8869] } [ 169.676538][ T8869] ... key at: [] __key.0+0x0/0x40 [ 169.683714][ T8869] ... acquired at: [ 169.687491][ T8869] lock_acquire+0x179/0x350 [ 169.692154][ T8869] _raw_read_lock_irqsave+0x74/0x90 [ 169.697513][ T8869] kill_fasync+0x138/0x510 [ 169.702084][ T8869] evdev_pass_values+0x619/0x9b0 [ 169.707177][ T8869] evdev_events+0x1bb/0x390 [ 169.711832][ T8869] input_pass_values+0x74e/0x880 [ 169.716922][ T8869] input_handle_event+0xf00/0x14d0 [ 169.722186][ T8869] input_inject_event+0x1e8/0x3b0 [ 169.727365][ T8869] evdev_write+0x457/0x750 [ 169.731936][ T8869] vfs_write+0x29d/0x11d0 [ 169.736414][ T8869] ksys_write+0x1f8/0x250 [ 169.740895][ T8869] do_syscall_64+0xcd/0x4c0 [ 169.745551][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.751595][ T8869] [ 169.753897][ T8869] [ 169.753897][ T8869] stack backtrace: [ 169.759762][ T8869] CPU: 1 UID: 0 PID: 8869 Comm: syz.0.1150 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 169.759780][ T8869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.759788][ T8869] Call Trace: [ 169.759795][ T8869] [ 169.759801][ T8869] dump_stack_lvl+0x116/0x1f0 [ 169.759817][ T8869] check_irq_usage+0x7dc/0x920 [ 169.759837][ T8869] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 169.759857][ T8869] ? check_path.constprop.0+0x24/0x50 [ 169.759878][ T8869] ? __lock_acquire+0x12bc/0x1ce0 [ 169.759898][ T8869] __lock_acquire+0x12bc/0x1ce0 [ 169.759921][ T8869] lock_acquire+0x179/0x350 [ 169.759940][ T8869] ? kill_fasync+0x138/0x510 [ 169.759961][ T8869] _raw_read_lock_irqsave+0x74/0x90 [ 169.759982][ T8869] ? kill_fasync+0x138/0x510 [ 169.759999][ T8869] kill_fasync+0x138/0x510 [ 169.760018][ T8869] evdev_pass_values+0x619/0x9b0 [ 169.760039][ T8869] evdev_events+0x1bb/0x390 [ 169.760057][ T8869] input_pass_values+0x74e/0x880 [ 169.760077][ T8869] input_handle_event+0xf00/0x14d0 [ 169.760094][ T8869] ? _copy_from_user+0x59/0xd0 [ 169.760115][ T8869] input_inject_event+0x1e8/0x3b0 [ 169.760135][ T8869] evdev_write+0x457/0x750 [ 169.760155][ T8869] ? __pfx_evdev_write+0x10/0x10 [ 169.760173][ T8869] ? bpf_lsm_file_permission+0x9/0x10 [ 169.760194][ T8869] ? security_file_permission+0x71/0x210 [ 169.760216][ T8869] ? rw_verify_area+0xcf/0x6c0 [ 169.760240][ T8869] ? __pfx_evdev_write+0x10/0x10 [ 169.760257][ T8869] vfs_write+0x29d/0x11d0 [ 169.760272][ T8869] ? __pfx_vfs_write+0x10/0x10 [ 169.760284][ T8869] ? find_held_lock+0x2b/0x80 [ 169.760299][ T8869] ? __fget_files+0x204/0x3c0 [ 169.760315][ T8869] ? __fget_files+0x20e/0x3c0 [ 169.760332][ T8869] ksys_write+0x1f8/0x250 [ 169.760344][ T8869] ? __pfx_ksys_write+0x10/0x10 [ 169.760360][ T8869] do_syscall_64+0xcd/0x4c0 [ 169.760374][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.760388][ T8869] RIP: 0033:0x7f1c0338ebe9 [ 169.760400][ T8869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.760413][ T8869] RSP: 002b:00007f1c0413e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.760428][ T8869] RAX: ffffffffffffffda RBX: 00007f1c035b5fa0 RCX: 00007f1c0338ebe9 [ 169.760436][ T8869] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 169.760445][ T8869] RBP: 00007f1c03411e19 R08: 0000000000000000 R09: 0000000000000000 [ 169.760452][ T8869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.760460][ T8869] R13: 00007f1c035b6038 R14: 00007f1c035b5fa0 R15: 00007ffe06a1ab58 [ 169.760473][ T8869]