last executing test programs: 1m59.857322019s ago: executing program 2 (id=1921): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(r1, 0x0) 1m59.504861751s ago: executing program 2 (id=1924): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000151000010400000000004402000000000028aa8acd47eded0943a1bf011d90ef98b36ce5b3816a91a08dac0741d94643d693de1a"], 0x20}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10014, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1m59.084644925s ago: executing program 2 (id=1925): r0 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x11e, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r3 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r0, 0x4ce1, 0x0, 0x0, 0x0, 0x0) 1m57.48069838s ago: executing program 2 (id=1934): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 1m55.263631383s ago: executing program 2 (id=1944): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000418110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000700b7040000000000008500000003000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 1m55.085407294s ago: executing program 2 (id=1945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f00000034c0)={{0x2, 0x0, 0x80, {0x2, 0x8000000, 0x2}}, "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", "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"}) 1m39.90561425s ago: executing program 32 (id=1945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f00000034c0)={{0x2, 0x0, 0x80, {0x2, 0x8000000, 0x2}}, "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", "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"}) 5.944864628s ago: executing program 5 (id=2894): socket(0x840000000002, 0x3, 0xfa) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 4.27616243s ago: executing program 5 (id=2918): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) 4.118696583s ago: executing program 5 (id=2921): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r0, &(0x7f0000001840)=[{&(0x7f0000001900)=""/4096, 0x1000}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.163160171s ago: executing program 5 (id=2929): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x3}, 0x1c) r1 = socket(0x2, 0x80805, 0x0) sendmsg$inet6(r0, &(0x7f0000001cc0)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @private0, 0x1}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000000180)="af", 0x1}], 0x1}, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r2, 0x10001}, 0x8) 2.208216351s ago: executing program 5 (id=2940): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 2.047528138s ago: executing program 4 (id=2942): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x1, r2}) sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) 1.92651258s ago: executing program 4 (id=2946): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f000024e000/0x1000)=nil, 0x1000, 0x2000005, 0x28011, r1, 0x77aa000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.637573633s ago: executing program 0 (id=2950): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000001c180)=@newtaction={0x1000, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0xfec, 0x1, [@m_ipt={0x60, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x35, 0x6, "9dbf40cf4270866e31eb9ceef43dbaaaae6878a5cfb956cdbf16723a0e7bd140c3b76527d792db1845904574e4eb7cabb3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0xf88, 0x12, 0x0, 0x0, {{0x8}, {0xea4, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0xb5, 0x6, {0x8, 'security\x00', 0x28, 0x3, "f4b0775f0e6de4b4ff29d42ad934f5473bc8764d6675f3b39fc177f509bf9a5cd9390f6cf52dd1341ee7d98950cc5dfdce1169a6c65843df84dd4361a3f30850687b3e21fbac48a0b280741f48026eb05907f6d7a55be422489ceb89469556bbe3561a13f626ba8855a2309f9a9fbf1d2dd368199d6c7f07183fabeb4b23330fc52289d37e74d575ad816b"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x39, 0x6, {0x8, 'raw\x00', 0xc, 0x0, "fdab49e9eada13ffe711afe67a3890"}}, @TCA_IPT_TARG={0xd59, 0x6, {0x4, 'security\x00', 0x1, 0x0, "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"}}]}, {0xbd, 0x6, "1b3ec043f25e80566bc4eb402e2bc33874852d29b48a9934d226d2f5a403d6d03d6c825988153d860d07e1371e057ac538e21d2d9877f0654a0b1f761ca7b971025cac9d94bd6759765489180ed5d8fe9cdbfd63453f6f6307afd0f56de6ee8c27937598679411da1b1951c8366bbd4d0ed8538869fe88774cd1c225699b855e8c25bc3ee5968e46f35b3e67033a09a851e844ae81e2cd40ee043e913c830c207d40ea8e961cede4eea5f75502a7cae28f639a470ec2a25a3e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1000}, 0x1, 0x0, 0x0, 0x24004000}, 0x24048880) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 1.564628884s ago: executing program 3 (id=2951): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1}, 0x3a89375}], 0x2, 0xcb, 0x0) 1.464783368s ago: executing program 3 (id=2952): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mlock(&(0x7f0000259000/0x1000)=nil, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.458359184s ago: executing program 0 (id=2953): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) r2 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) 1.335622117s ago: executing program 0 (id=2954): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x4040) read(r0, &(0x7f0000000800)=""/47, 0x2f) 1.258357072s ago: executing program 4 (id=2956): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000100)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.254584529s ago: executing program 5 (id=2957): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000240)={0x40, 0x18, 0x15, "e7e6ad2c0c7c6b2dd9e9bc4499b92eaa4d22ba7128"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x20, 0x80, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 895.442125ms ago: executing program 1 (id=2961): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) io_uring_setup(0x669, &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x20000004) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8", 0x5b2, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 891.197663ms ago: executing program 3 (id=2962): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) 825.600442ms ago: executing program 1 (id=2963): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) 645.385785ms ago: executing program 1 (id=2964): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 623.266547ms ago: executing program 4 (id=2965): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x54) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000140)) 577.307977ms ago: executing program 3 (id=2966): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 496.751016ms ago: executing program 3 (id=2967): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 490.222848ms ago: executing program 4 (id=2968): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$rds(0x15, 0x5, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000c80), &(0x7f0000000cc0)={'enc=', 'pkcs1', ' hash=', {'sha1-neon\x00'}}, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000140)="9917ba0c8e26ccb3e4ab2c4bb788cadc7c7e7a163b00eee2ac3e422cd00f41235848e10e54e673f73ae335be22725865cebe1216c73a24365ba7d5e4d9cb027ea918e0ba9176030601d701b5b6a77050ee0a327bd1f200ce9166e670ea5fd42fef67e65e5c141792c2c51cd3b1dc59292311", 0x72, &(0x7f0000000300), 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0xc01, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c1}, 0x4008010) 424.650873ms ago: executing program 1 (id=2969): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 398.348908ms ago: executing program 0 (id=2970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 252.446771ms ago: executing program 3 (id=2971): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 216.200603ms ago: executing program 4 (id=2972): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) fcntl$setsig(r1, 0xa, 0x1d) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x40015) 215.534938ms ago: executing program 0 (id=2973): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r1, 0x6000000) unshare(0x20040600) pread64(r1, &(0x7f0000001480)=""/4080, 0xff0, 0x7) 212.344254ms ago: executing program 1 (id=2974): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r4}) 78.420529ms ago: executing program 0 (id=2975): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 0s ago: executing program 1 (id=2976): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): k+0x2c5/0x16b0 [ 176.786760][ T5823] ? rcu_is_watching+0x12/0xc0 [ 176.786792][ T5823] process_one_work+0x9cf/0x1b70 [ 176.786828][ T5823] ? __pfx_process_one_work+0x10/0x10 [ 176.786861][ T5823] ? assign_work+0x1a0/0x250 [ 176.786886][ T5823] worker_thread+0x6c8/0xf10 [ 176.786923][ T5823] ? __pfx_worker_thread+0x10/0x10 [ 176.786947][ T5823] kthread+0x3c5/0x780 [ 176.786969][ T5823] ? __pfx_kthread+0x10/0x10 [ 176.786992][ T5823] ? rcu_is_watching+0x12/0xc0 [ 176.787019][ T5823] ? __pfx_kthread+0x10/0x10 [ 176.787041][ T5823] ret_from_fork+0x675/0x7d0 [ 176.787060][ T5823] ? __pfx_kthread+0x10/0x10 [ 176.787082][ T5823] ret_from_fork_asm+0x1a/0x30 [ 176.787128][ T5823] [ 176.787518][ T5823] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 177.045624][ T5823] Bluetooth: hci2: failed to register connection device [ 177.361214][ T870] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 177.408562][ T870] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 177.471673][T10401] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1711'. [ 177.656281][ T30] audit: type=1400 audit(1763494403.809:721): avc: denied { create } for pid=10411 comm="syz.1.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 177.676024][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.682318][ T870] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 177.707655][ T870] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 177.728003][ T30] audit: type=1400 audit(1763494403.849:722): avc: denied { connect } for pid=10411 comm="syz.1.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 177.748949][ T870] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 177.759100][ T870] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 177.805677][T10415] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1717'. [ 178.044472][ T870] usb 4-1: USB disconnect, device number 15 [ 178.138451][T10419] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1720'. [ 178.149143][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1719'. [ 178.165298][T10419] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1720'. [ 178.320391][ T30] audit: type=1400 audit(1763494404.469:723): avc: denied { create } for pid=10424 comm="syz.0.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 178.383575][ T30] audit: type=1400 audit(1763494404.479:724): avc: denied { write } for pid=10424 comm="syz.0.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 178.572904][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1727'. [ 178.639176][T10434] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 179.021169][T10450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1733'. [ 179.251070][ T30] audit: type=1400 audit(1763494405.399:725): avc: denied { map } for pid=10462 comm="syz.4.1739" path="socket:[28438]" dev="sockfs" ino=28438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 179.323172][ T30] audit: type=1400 audit(1763494405.429:726): avc: denied { getopt } for pid=10462 comm="syz.4.1739" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.343475][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.453105][ T30] audit: type=1400 audit(1763494405.599:727): avc: denied { ioctl } for pid=10470 comm="syz.0.1738" path="socket:[28460]" dev="sockfs" ino=28460 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 179.478944][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.682981][ T30] audit: type=1400 audit(1763494405.829:728): avc: denied { read } for pid=10480 comm="syz.4.1746" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.819861][T10484] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 179.827233][ T5880] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 179.983630][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 180.008297][ T5880] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 180.025311][ T5880] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 180.051637][ T5880] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.084320][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'. [ 180.096215][ T5880] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 180.120644][T10495] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1753'. [ 180.122448][T10494] netlink: 'syz.2.1752': attribute type 20 has an invalid length. [ 180.141516][ T5880] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.154052][T10494] netlink: 'syz.2.1752': attribute type 21 has an invalid length. [ 180.165322][ T5880] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 180.189612][ T5880] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 180.202361][ T5880] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.252578][ T5880] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 180.285038][ T5880] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.314744][ T5880] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 180.326270][ T5880] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 180.358090][ T5880] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.370440][ T5880] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 180.385753][ T5880] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.410815][ T5880] usb 1-1: string descriptor 0 read error: -22 [ 180.417232][ T5880] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 180.427056][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.450098][ T5880] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 180.483692][ T980] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 180.656502][ T980] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.674819][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 180.696462][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 180.753803][ T980] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.833638][ T980] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.843117][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.882637][ T980] usb 5-1: config 0 descriptor?? [ 181.332482][ T980] plantronics 0003:047F:FFFF.0014: ignoring exceeding usage max [ 181.353863][ T980] plantronics 0003:047F:FFFF.0014: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 181.551708][ T5885] usb 5-1: USB disconnect, device number 18 [ 181.965554][ T30] audit: type=1326 audit(1763494408.119:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10537 comm="syz.2.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14718f6c9 code=0x7fc00000 [ 181.993047][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.008934][ T30] audit: type=1400 audit(1763494408.119:730): avc: denied { getopt } for pid=10543 comm="syz.1.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.635261][ T30] audit: type=1326 audit(1763494408.789:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10537 comm="syz.2.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff14718f6c9 code=0x7fc00000 [ 182.816036][ T870] usb 1-1: USB disconnect, device number 17 [ 182.861713][ T30] audit: type=1400 audit(1763494409.009:732): avc: denied { ioctl } for pid=10572 comm="syz.0.1785" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 182.970035][ T30] audit: type=1400 audit(1763494409.119:733): avc: denied { ioctl } for pid=10579 comm="syz.0.1788" path="socket:[28637]" dev="sockfs" ino=28637 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 183.272868][T10592] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1795'. [ 183.453845][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 183.853742][ T5823] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 183.864180][ T5823] Bluetooth: hci4: Injecting HCI hardware error event [ 183.873425][ T5816] Bluetooth: hci4: hardware error 0x00 [ 185.246214][ T30] audit: type=1400 audit(1763494411.389:734): avc: denied { sqpoll } for pid=10622 comm="syz.1.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 185.886703][ T30] audit: type=1400 audit(1763494412.039:735): avc: denied { write } for pid=10639 comm="syz.1.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 186.021569][ T30] audit: type=1400 audit(1763494412.149:736): avc: denied { bind } for pid=10646 comm="syz.3.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.575172][ T5816] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 186.649889][ T30] audit: type=1400 audit(1763494412.799:737): avc: denied { watch watch_reads } for pid=10662 comm="syz.2.1825" path="/387/file1" dev="tmpfs" ino=1994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 186.788204][ T30] audit: type=1400 audit(1763494412.939:738): avc: denied { setopt } for pid=10669 comm="syz.1.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.064063][ T980] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 187.153391][ T30] audit: type=1400 audit(1763494413.299:739): avc: denied { bind } for pid=10679 comm="syz.4.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.245440][ T30] audit: type=1400 audit(1763494413.329:740): avc: denied { bind } for pid=10678 comm="syz.2.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.274751][ T980] usb 2-1: Using ep0 maxpacket: 8 [ 187.305135][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 187.324179][ T56] block nbd0: Possible stuck request ffff8880260be000: control (read@0,1024B). Runtime 90 seconds [ 187.349651][ T56] block nbd0: Possible stuck request ffff8880260be1c0: control (read@1024,1024B). Runtime 90 seconds [ 187.360940][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.360969][ T980] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 187.360996][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 187.361019][ T980] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 187.361059][ T980] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 187.361084][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.366428][ T980] usb 2-1: config 0 descriptor?? [ 187.389909][ T30] audit: type=1400 audit(1763494413.329:741): avc: denied { name_bind } for pid=10679 comm="syz.4.1833" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 187.389959][ T30] audit: type=1400 audit(1763494413.329:742): avc: denied { node_bind } for pid=10679 comm="syz.4.1833" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 187.390001][ T30] audit: type=1400 audit(1763494413.329:743): avc: denied { name_connect } for pid=10679 comm="syz.4.1833" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 187.458733][ T5816] Bluetooth: hci5: urb ffff88807410aa00 submission failed (90) [ 187.478912][ T56] block nbd0: Possible stuck request ffff8880260be380: control (read@2048,1024B). Runtime 90 seconds [ 187.494274][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1835'. [ 187.494336][T10685] bridge_slave_1: left allmulticast mode [ 187.494356][T10685] bridge_slave_1: left promiscuous mode [ 187.494578][T10685] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.589443][ T980] usb 2-1: USB disconnect, device number 19 [ 187.609183][ T56] block nbd0: Possible stuck request ffff8880260be540: control (read@3072,1024B). Runtime 90 seconds [ 187.740092][T10685] bridge_slave_0: left allmulticast mode [ 187.749513][T10685] bridge_slave_0: left promiscuous mode [ 187.771612][T10685] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.278427][T10687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.348425][T10690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.496921][T10700] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 189.739215][ T5184] Dev loop6: unable to read RDB block 1 [ 189.780294][ T5184] loop6: unable to read partition table [ 189.798338][ T5184] loop6: partition table beyond EOD, truncated [ 190.354755][ T980] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 190.547746][T10722] ref_ctr_offset mismatch. inode: 0x67c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1140200000010 [ 190.570392][ T980] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.591092][ T980] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.619214][ T980] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 190.685707][ T980] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 190.706847][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.735387][ T980] usb 1-1: Product: syz [ 190.753550][ T980] usb 1-1: Manufacturer: syz [ 190.787549][ T980] usb 1-1: SerialNumber: syz [ 190.887795][ T30] audit: type=1400 audit(1763494417.039:744): avc: denied { create } for pid=10728 comm="syz.3.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 190.990322][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 190.996477][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 191.412548][T10745] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1859'. [ 191.422351][T10746] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1858'. [ 191.472674][T10743] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1858'. [ 191.568563][ T30] audit: type=1400 audit(1763494417.719:745): avc: denied { ioctl } for pid=10747 comm="syz.2.1861" path="socket:[30726]" dev="sockfs" ino=30726 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 191.802868][T10753] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1860'. [ 191.865895][ T6414] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.897743][ T5965] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.908844][ T980] cdc_ncm 1-1:1.0: bind() failure [ 191.914146][ T6414] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.954483][ T980] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 192.006290][ T980] usb 1-1: USB disconnect, device number 18 [ 192.284816][ T980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.653986][ T5965] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.423987][ T30] audit: type=1400 audit(1763494419.569:746): avc: denied { wake_alarm } for pid=10783 comm="syz.2.1875" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 193.561068][ T30] audit: type=1400 audit(1763494419.619:747): avc: denied { bind } for pid=10785 comm="syz.1.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 193.672188][ T30] audit: type=1400 audit(1763494419.619:748): avc: denied { name_bind } for pid=10785 comm="syz.1.1876" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 193.753735][ T5965] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 193.808343][ T30] audit: type=1400 audit(1763494419.619:749): avc: denied { node_bind } for pid=10785 comm="syz.1.1876" saddr=ff01::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 193.928878][ T30] audit: type=1400 audit(1763494419.809:750): avc: denied { sys_module } for pid=10785 comm="syz.1.1876" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 193.996503][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.062026][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.087234][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.101963][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.115492][T10805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.142674][ T30] audit: type=1400 audit(1763494420.249:751): avc: denied { setopt } for pid=10803 comm="syz.2.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 194.174469][ T5965] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 194.236983][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.285312][ T5965] usb 4-1: config 0 descriptor?? [ 194.782332][ T5965] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 194.835496][ T5965] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 194.979323][ T5965] cp2112 0003:10C4:EA90.0015: Part Number: 0x82 Device Version: 0xFE [ 195.381849][ T5965] cp2112 0003:10C4:EA90.0015: error setting SMBus config [ 195.431696][ T5965] cp2112 0003:10C4:EA90.0015: probe with driver cp2112 failed with error -71 [ 195.499633][ T5965] usb 4-1: USB disconnect, device number 16 [ 195.693774][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 196.342654][ T30] audit: type=1400 audit(1763494422.489:752): avc: denied { map } for pid=10842 comm="syz.0.1899" path="socket:[31028]" dev="sockfs" ino=31028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.537065][ T30] audit: type=1400 audit(1763494422.489:753): avc: denied { read accept } for pid=10842 comm="syz.0.1899" path="socket:[31028]" dev="sockfs" ino=31028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.619890][T10847] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1901'. [ 198.041783][T10873] GUP no longer grows the stack in syz.0.1912 (10873): 200000004000-200000005000 (200000001000) [ 198.124109][T10873] CPU: 1 UID: 0 PID: 10873 Comm: syz.0.1912 Not tainted syzkaller #0 PREEMPT(full) [ 198.124142][T10873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.124155][T10873] Call Trace: [ 198.124162][T10873] [ 198.124171][T10873] dump_stack_lvl+0x16c/0x1f0 [ 198.124199][T10873] gup_vma_lookup+0x1d2/0x220 [ 198.124226][T10873] __get_user_pages+0x241/0x3530 [ 198.124255][T10873] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 198.124294][T10873] ? down_read_killable+0x220/0x4b0 [ 198.124318][T10873] ? __lock_acquire+0x622/0x1c90 [ 198.124338][T10873] ? __pfx___get_user_pages+0x10/0x10 [ 198.124366][T10873] ? __lock_acquire+0x622/0x1c90 [ 198.124388][T10873] __gup_longterm_locked+0xa92/0x17e0 [ 198.124423][T10873] ? __pfx___gup_longterm_locked+0x10/0x10 [ 198.124451][T10873] ? try_get_folio+0x255/0x730 [ 198.124473][T10873] ? find_held_lock+0x2b/0x80 [ 198.124507][T10873] gup_fast_fallback+0xee2/0x22a0 [ 198.124556][T10873] ? __pfx_gup_fast_fallback+0x10/0x10 [ 198.124588][T10873] ? __lock_acquire+0xb8a/0x1c90 [ 198.124614][T10873] get_user_pages_fast+0xa7/0xf0 [ 198.124639][T10873] ? __pfx_get_user_pages_fast+0x10/0x10 [ 198.124664][T10873] ? __mutex_trylock_common+0xe9/0x250 [ 198.124687][T10873] ? __pfx___mutex_trylock_common+0x10/0x10 [ 198.124712][T10873] __iov_iter_get_pages_alloc+0x818/0x20a0 [ 198.124742][T10873] ? trace_contention_end+0xdd/0x130 [ 198.124772][T10873] ? __mutex_lock+0x1c5/0x1060 [ 198.124797][T10873] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 198.124830][T10873] ? __pfx___mutex_lock+0x10/0x10 [ 198.124852][T10873] ? import_ubuf+0x1b6/0x220 [ 198.124884][T10873] iov_iter_get_pages2+0xa3/0x100 [ 198.124911][T10873] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 198.124937][T10873] ? wait_for_space+0x231/0x2e0 [ 198.124965][T10873] __do_sys_vmsplice+0xa47/0x11a0 [ 198.124996][T10873] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 198.125018][T10873] ? futex_private_hash_put+0xd5/0x190 [ 198.125056][T10873] ? __pfx_futex_wait+0x10/0x10 [ 198.125091][T10873] ? up_write+0x1b2/0x520 [ 198.125155][T10873] ? do_syscall_64+0xcd/0xfa0 [ 198.125179][T10873] do_syscall_64+0xcd/0xfa0 [ 198.125204][T10873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.125227][T10873] RIP: 0033:0x7efebc98f6c9 [ 198.125254][T10873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.125276][T10873] RSP: 002b:00007efebd76b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 198.125297][T10873] RAX: ffffffffffffffda RBX: 00007efebcbe5fa0 RCX: 00007efebc98f6c9 [ 198.125312][T10873] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 198.125325][T10873] RBP: 00007efebca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 198.125338][T10873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.125350][T10873] R13: 00007efebcbe6038 R14: 00007efebcbe5fa0 R15: 00007ffda4ccb0d8 [ 198.125382][T10873] [ 198.243519][ C0] sched: DL replenish lagged too much [ 199.319231][T10889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1920'. [ 199.385476][ T30] audit: type=1400 audit(1763494425.539:754): avc: denied { associate } for pid=10893 comm="syz.2.1921" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 201.990330][T10922] netlink: 360 bytes leftover after parsing attributes in process `syz.4.1935'. [ 202.053942][ T5965] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 202.236710][ T5965] usb 3-1: Using ep0 maxpacket: 32 [ 202.273672][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.336554][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.382819][ T5965] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 202.411201][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.450895][ T5965] usb 3-1: config 0 descriptor?? [ 202.954867][ T5965] savu 0003:1E7D:2D5A.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 203.244161][ T5965] usb 3-1: USB disconnect, device number 13 [ 203.525632][ T30] audit: type=1400 audit(1763494429.679:755): avc: denied { connect } for pid=10945 comm="syz.4.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.623737][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.911008][ T30] audit: type=1400 audit(1763494430.059:756): avc: denied { mounton } for pid=10948 comm="syz.2.1944" path="/412/file0" dev="tmpfs" ino=2121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 203.937221][T10949] FAT-fs (loop5): unable to read boot sector [ 207.582152][T10970] binder: 10967:10970 ioctl 40046205 0 returned -22 [ 207.931918][ T30] audit: type=1326 audit(1763494434.079:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.1.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a478f6c9 code=0x7ffc0000 [ 208.017140][ T30] audit: type=1326 audit(1763494434.109:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.1.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a478f6c9 code=0x7ffc0000 [ 208.121859][ T30] audit: type=1326 audit(1763494434.119:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.1.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8a478f6c9 code=0x7ffc0000 [ 208.190181][ T30] audit: type=1326 audit(1763494434.129:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.1.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a478f6c9 code=0x7ffc0000 [ 208.271465][ T30] audit: type=1326 audit(1763494434.129:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.1.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8a478f6c9 code=0x7ffc0000 [ 208.376317][ T30] audit: type=1326 audit(1763494434.129:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.1.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a478f6c9 code=0x7ffc0000 [ 208.450153][ T30] audit: type=1326 audit(1763494434.139:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.1.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a478f6c9 code=0x7ffc0000 [ 208.535493][ T30] audit: type=1326 audit(1763494434.139:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.1.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fb8a478f6c9 code=0x7ffc0000 [ 208.614852][ T30] audit: type=1326 audit(1763494434.139:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.1.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a478f6c9 code=0x7ffc0000 [ 208.696617][ T30] audit: type=1326 audit(1763494434.139:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.1.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a478f6c9 code=0x7ffc0000 [ 214.136917][ T5184] udevd[5184]: worker [5813] /devices/virtual/block/nbd0 is taking a long time [ 215.784899][T11018] netlink: zone id is out of range [ 216.081137][T11022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1975'. [ 216.103666][T11022] netlink: 'syz.3.1975': attribute type 7 has an invalid length. [ 216.126250][T11022] netlink: 'syz.3.1975': attribute type 8 has an invalid length. [ 216.145559][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1975'. [ 216.229218][T11022] erspan0: entered promiscuous mode [ 216.247354][T11022] gretap0: entered promiscuous mode [ 216.264536][T11022] erspan0: left promiscuous mode [ 216.280638][T11022] gretap0: left promiscuous mode [ 218.312576][ T56] block nbd0: Possible stuck request ffff8880260be000: control (read@0,1024B). Runtime 120 seconds [ 218.334662][ T56] block nbd0: Possible stuck request ffff8880260be1c0: control (read@1024,1024B). Runtime 120 seconds [ 218.358429][ T56] block nbd0: Possible stuck request ffff8880260be380: control (read@2048,1024B). Runtime 120 seconds [ 218.381835][ T56] block nbd0: Possible stuck request ffff8880260be540: control (read@3072,1024B). Runtime 120 seconds [ 218.983665][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 219.787282][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 219.787298][ T30] audit: type=1400 audit(1763494445.939:770): avc: denied { setopt } for pid=11038 comm="syz.1.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 220.135516][T11042] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1984'. [ 220.322287][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.342462][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.351138][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.359498][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.367959][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.397319][ T30] audit: type=1400 audit(1763494446.539:771): avc: denied { mounton } for pid=11044 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 220.431309][ T30] audit: type=1400 audit(1763494446.579:772): avc: denied { shutdown } for pid=11043 comm="syz.1.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.829058][T11044] chnl_net:caif_netlink_parms(): no params data found [ 221.129292][ T30] audit: type=1400 audit(1763494447.279:773): avc: denied { read } for pid=11053 comm="syz.4.1988" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 221.215905][ T30] audit: type=1400 audit(1763494447.279:774): avc: denied { open } for pid=11053 comm="syz.4.1988" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 221.297721][ T30] audit: type=1400 audit(1763494447.339:775): avc: denied { ioctl } for pid=11053 comm="syz.4.1988" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 221.522483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 222.011054][ T30] audit: type=1400 audit(1763494447.399:776): avc: denied { read } for pid=11052 comm="syz.3.1987" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 222.413797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 223.218009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 223.244041][ T5823] Bluetooth: hci5: command tx timeout [ 223.373848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 223.382751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 223.483582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 223.550819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 224.188181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 224.247682][ T30] audit: type=1400 audit(1763494447.399:777): avc: denied { open } for pid=11052 comm="syz.3.1987" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 224.417933][ T5880] IPVS: starting estimator thread 0... [ 224.425198][T11063] IPVS: rr: FWM 3 0x00000003 - no destination available [ 224.432256][ C1] IPVS: rr: FWM 3 0x00000003 - no destination available [ 224.554465][T11064] IPVS: using max 47 ests per chain, 112800 per kthread [ 225.297747][ T5823] Bluetooth: hci5: command tx timeout [ 226.100825][T11044] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.140857][T11044] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.186564][T11044] bridge_slave_0: entered allmulticast mode [ 226.233313][T11044] bridge_slave_0: entered promiscuous mode [ 226.323946][T11044] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.331084][T11044] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.456571][T11044] bridge_slave_1: entered allmulticast mode [ 226.528372][T11044] bridge_slave_1: entered promiscuous mode [ 226.800868][T11044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.895350][T11044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.241709][T11044] team0: Port device team_slave_0 added [ 227.293465][T11044] team0: Port device team_slave_1 added [ 227.373836][ T5823] Bluetooth: hci5: command tx timeout [ 227.615631][T11044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.662302][T11044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.812917][T11044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.926209][T11044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.978614][T11044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.176805][T11044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.513531][ T30] audit: type=1400 audit(1763494454.659:778): avc: denied { create } for pid=11098 comm="syz.3.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 228.653865][ T30] audit: type=1400 audit(1763494454.699:779): avc: denied { setopt } for pid=11098 comm="syz.3.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 228.989428][T11044] hsr_slave_0: entered promiscuous mode [ 229.063288][T11044] hsr_slave_1: entered promiscuous mode [ 229.088067][T11044] debugfs: 'hsr0' already exists in 'hsr' [ 229.119425][T11044] Cannot create hsr debugfs directory [ 229.409771][ T30] audit: type=1400 audit(1763494455.559:780): avc: denied { unlink } for pid=11116 comm="syz.1.2009" name="#7" dev="tmpfs" ino=2099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 229.476087][ T5823] Bluetooth: hci5: command tx timeout [ 230.001850][T11134] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2017'. [ 230.224682][ T5880] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 230.263714][ T5965] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 230.386204][ T5880] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 230.402450][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.443692][ T5965] usb 2-1: Using ep0 maxpacket: 8 [ 230.462966][ T5880] usb 1-1: config 0 descriptor?? [ 230.478502][ T5965] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.506016][ T5880] cp210x 1-1:0.0: cp210x converter detected [ 230.517060][ T5965] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.568056][ T5965] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 230.622445][T11044] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.633136][ T5965] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 230.693222][T11044] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.713654][ T5965] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.780468][T11044] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.787423][ T30] audit: type=1400 audit(1763494456.929:781): avc: denied { read } for pid=11143 comm="syz.4.2022" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 230.814170][ T5965] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.823262][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.871590][T11044] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.904236][ T5965] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 230.928814][ T30] audit: type=1400 audit(1763494456.999:782): avc: denied { ioctl } for pid=11143 comm="syz.4.2022" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 230.980066][ T5880] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 231.044391][ T5880] usb 1-1: cp210x converter now attached to ttyUSB0 [ 231.206432][T11154] geneve2: entered promiscuous mode [ 231.213118][T11154] geneve2: entered allmulticast mode [ 231.262714][ T5965] usb 1-1: USB disconnect, device number 19 [ 231.280876][ T5965] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 233.034276][ T5921] usb 2-1: USB disconnect, device number 20 [ 233.706880][T11180] netlink: 'syz.1.2035': attribute type 11 has an invalid length. [ 233.838027][ T30] audit: type=1400 audit(1763494459.979:783): avc: denied { name_connect } for pid=11183 comm="syz.4.2036" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 233.915209][T11044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.951667][ T30] audit: type=1400 audit(1763494460.079:784): avc: denied { listen } for pid=11183 comm="syz.4.2036" lport=42802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 234.076797][ T30] audit: type=1400 audit(1763494460.079:785): avc: denied { accept } for pid=11183 comm="syz.4.2036" lport=42802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 234.163463][T11044] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.374243][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.381424][ T6412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.497596][ T6412] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.504804][ T6412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.880081][T11044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.270680][T11211] input: syz0 as /devices/virtual/input/input31 [ 236.306858][T11044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.423536][T11213] ip6tnl0: Caught tx_queue_len zero misconfig [ 236.796302][T11222] input: syz0 as /devices/virtual/input/input32 [ 236.834396][T11222] input: failed to attach handler leds to device input32, error: -6 [ 237.729192][T11044] veth0_vlan: entered promiscuous mode [ 237.828635][T11044] veth1_vlan: entered promiscuous mode [ 237.956925][T11044] veth0_macvtap: entered promiscuous mode [ 238.010063][T11044] veth1_macvtap: entered promiscuous mode [ 238.090696][T11044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.161515][T11044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.232350][ T6414] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.255630][ T6414] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.280632][ T6414] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.311903][ T6414] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.522642][ T6412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.562869][ T6412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.661668][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.686409][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.743816][ T30] audit: type=1400 audit(1763494464.889:786): avc: denied { mounton } for pid=11044 comm="syz-executor" path="/root/syzkaller.sbGVQe/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 238.930960][ T30] audit: type=1400 audit(1763494464.919:787): avc: denied { mount } for pid=11044 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 239.056161][ T30] audit: type=1400 audit(1763494464.939:788): avc: denied { mounton } for pid=11044 comm="syz-executor" path="/root/syzkaller.sbGVQe/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=33430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 239.263639][ T30] audit: type=1400 audit(1763494465.019:789): avc: denied { mounton } for pid=11044 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 239.376227][ T30] audit: type=1400 audit(1763494465.019:790): avc: denied { mount } for pid=11044 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 239.424390][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2053'. [ 239.445807][ T30] audit: type=1400 audit(1763494465.019:791): avc: denied { mounton } for pid=11044 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 240.105080][T11249] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2054'. [ 240.141113][T11249] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2054'. [ 241.259210][ T30] audit: type=1400 audit(1763494467.409:792): avc: denied { mounton } for pid=11256 comm="syz.3.2058" path="/440/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 242.003142][T11264] loop2: detected capacity change from 0 to 7 [ 242.012750][ T7158] Dev loop2: unable to read RDB block 7 [ 242.051233][ T7158] loop2: AHDI p2 p3 [ 242.061464][ T7158] loop2: partition table partially beyond EOD, truncated [ 242.072358][ T7158] loop2: p2 size 1701016946 extends beyond EOD, truncated [ 243.067572][T11234] Set syz1 is full, maxelem 65536 reached [ 243.408685][ T43] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 243.565626][ T43] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 243.575311][ T43] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 243.586918][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 243.596278][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 243.608367][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 243.622557][ T43] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 243.638527][ T43] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 243.646948][ T43] usb 5-1: Product: syz [ 243.651237][ T43] usb 5-1: Manufacturer: syz [ 243.664997][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 243.670228][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 243.683278][ T43] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 243.689645][ T43] cdc_wdm 5-1:1.0: Unknown control protocol [ 243.836814][ T7158] udevd[7158]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 243.947479][T11268] netlink: 'syz.3.2063': attribute type 1 has an invalid length. [ 243.994561][ T30] audit: type=1400 audit(1763494470.139:793): avc: denied { read write } for pid=11265 comm="syz.4.2062" name="cdc-wdm0" dev="devtmpfs" ino=3351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 244.090364][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 244.097261][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 244.105136][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 244.111763][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 244.118032][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 244.124634][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 244.130992][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 244.137605][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 244.143872][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 244.150499][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 244.156773][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 244.163390][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 244.172148][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 244.178783][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 244.185919][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 244.192545][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 244.204025][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 244.210654][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 244.217207][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 244.223818][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 244.273044][T11268] bond1: entered promiscuous mode [ 244.282446][ T43] usb 5-1: USB disconnect, device number 19 [ 244.288515][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 244.316438][ T30] audit: type=1400 audit(1763494470.139:794): avc: denied { open } for pid=11265 comm="syz.4.2062" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 244.369623][T11268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.386079][T11266] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 244.580082][T11271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.628412][T11271] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 244.651186][T11271] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 244.721600][T11271] bond1: (slave gre1): making interface the new active one [ 244.747707][T11271] gre1: entered promiscuous mode [ 244.771204][T11271] bond1: (slave gre1): Enslaving as an active interface with an up link [ 244.800872][ T30] audit: type=1400 audit(1763494470.949:795): avc: denied { append } for pid=11280 comm="syz.1.2067" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 244.871445][T11273] tipc: Enabling of bearer rejected, already enabled [ 244.896595][T11278] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 245.161129][ T30] audit: type=1400 audit(1763494471.309:796): avc: denied { mounton } for pid=11284 comm="syz.0.2070" path=2F3431392FE91F7189591E9233614B dev="tmpfs" ino=2144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 245.400018][ T5965] cp210x 1-1:0.0: device disconnected [ 245.793655][ T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 245.996148][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.040887][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.074668][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.138984][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.174777][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.212824][ T43] usb 4-1: config 0 descriptor?? [ 246.239035][ T5965] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 246.423879][ T5965] usb 2-1: Using ep0 maxpacket: 8 [ 246.448414][ T5965] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 246.488960][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.525763][ T5965] usb 2-1: Product: syz [ 246.540158][ T5965] usb 2-1: Manufacturer: syz [ 246.560172][ T5965] usb 2-1: SerialNumber: syz [ 246.592411][ T5965] usb 2-1: config 0 descriptor?? [ 246.630129][ T5965] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 246.678973][ T43] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xd [ 246.704501][ T5965] dvb-usb: bulk message failed: -22 (2/0) [ 246.738736][ T5965] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 246.774662][ T43] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 246.815523][ T5965] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 246.877045][ T5965] usb 2-1: media controller created [ 246.975783][ T5965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.031959][ T43] usb 4-1: USB disconnect, device number 17 [ 247.038660][ T5921] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 247.094104][T11313] fido_id[11313]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 247.129928][ T5965] dvb-usb: bulk message failed: -22 (1/0) [ 247.153025][ T5965] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 247.199507][ T5965] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 247.230848][ T5921] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 247.276830][ T5965] dvb-usb: schedule remote query interval to 50 msecs. [ 247.289891][ T5921] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 247.310546][ T5965] dvb-usb: bulk message failed: -22 (2/0) [ 247.323582][ T5921] usb 6-1: config 1 interface 0 has no altsetting 0 [ 247.332529][ T5965] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 247.363102][ T5921] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 247.382310][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 247.400899][ T43] dvb-usb: error while querying for an remote control event. [ 247.424687][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.447225][ T5965] usb 2-1: USB disconnect, device number 21 [ 247.487349][ T5921] usb 6-1: Product: syz [ 247.528000][ T5921] usb 6-1: Manufacturer: syz [ 247.555536][ T5921] usb 6-1: SerialNumber: syz [ 247.662619][T11312] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 247.702915][T11312] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 247.710461][ T5826] Bluetooth: hci2: command 0x1003 tx timeout [ 247.718065][ T5823] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 247.799134][ T5965] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 247.852534][T11315] vivid-002: ================= START STATUS ================= [ 247.896606][T11315] vivid-002: Radio HW Seek Mode: Bounded [ 247.931386][T11315] vivid-002: Radio Programmable HW Seek: false [ 247.974610][T11315] vivid-002: RDS Rx I/O Mode: Block I/O [ 248.009520][T11315] vivid-002: Generate RBDS Instead of RDS: false [ 248.034938][T11315] vivid-002: RDS Reception: true [ 248.053577][T11315] vivid-002: RDS Program Type: 0 inactive [ 248.119055][T11315] vivid-002: RDS PS Name: inactive [ 248.139294][T11315] vivid-002: RDS Radio Text: inactive [ 248.164281][T11315] vivid-002: RDS Traffic Announcement: false inactive [ 248.192040][T11315] vivid-002: RDS Traffic Program: false inactive [ 248.219169][T11315] vivid-002: RDS Music: false inactive [ 248.238271][T11315] vivid-002: ================== END STATUS ================== [ 248.424577][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.488028][ T30] audit: type=1400 audit(1763494474.639:797): avc: denied { create } for pid=11322 comm="syz.4.2084" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 248.681784][ T56] block nbd0: Possible stuck request ffff8880260be000: control (read@0,1024B). Runtime 150 seconds [ 248.706249][ T56] block nbd0: Possible stuck request ffff8880260be1c0: control (read@1024,1024B). Runtime 150 seconds [ 248.762602][ T56] block nbd0: Possible stuck request ffff8880260be380: control (read@2048,1024B). Runtime 150 seconds [ 248.790724][ T56] block nbd0: Possible stuck request ffff8880260be540: control (read@3072,1024B). Runtime 150 seconds [ 248.943324][ T5921] (unnamed net_device) (uninitialized): Assigned a random MAC address: 2e:44:99:c1:fc:f3 [ 249.049637][ T5921] rtl8150 6-1:1.0: eth1: rtl8150 is detected [ 249.099951][ T5921] usb 6-1: USB disconnect, device number 2 [ 249.323602][ T5965] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 249.507000][ T5965] usb 1-1: device descriptor read/64, error -71 [ 249.813637][ T5965] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 249.892105][ T30] audit: type=1400 audit(1763494476.039:798): avc: denied { override_creds } for pid=11337 comm="syz.1.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 250.003579][ T5965] usb 1-1: device descriptor read/64, error -71 [ 250.142987][ T5965] usb usb1-port1: attempt power cycle [ 250.523576][ T5965] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 250.582315][ T5965] usb 1-1: device descriptor read/8, error -71 [ 250.882082][ T5965] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 250.972302][ T5965] usb 1-1: device descriptor read/8, error -71 [ 251.135233][ T5965] usb usb1-port1: unable to enumerate USB device [ 251.329175][ T30] audit: type=1400 audit(1763494477.479:799): avc: denied { connect } for pid=11350 comm="syz.5.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 251.530396][ T30] audit: type=1400 audit(1763494477.659:800): avc: denied { setopt } for pid=11350 comm="syz.5.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 252.063684][ T5921] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 252.636306][ T5921] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 253.449969][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.494919][ T5921] usb 4-1: config 0 descriptor?? [ 254.423768][ T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 254.613961][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 254.636781][ T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 254.698006][ T43] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 254.738329][ T43] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 254.773614][ T43] usb 6-1: Product: syz [ 254.798218][ T43] usb 6-1: Manufacturer: syz [ 254.819115][ T43] usb 6-1: SerialNumber: syz [ 254.871477][ T5921] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 254.899662][ T43] usb 6-1: config 0 descriptor?? [ 254.933940][ T5921] usb 4-1: USB disconnect, device number 18 [ 254.943975][T11367] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 255.345514][ T5921] usb 6-1: USB disconnect, device number 3 [ 255.457423][ C1] hrtimer: interrupt took 22307 ns [ 255.468430][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.478566][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.856905][ T30] audit: type=1400 audit(1763494481.999:801): avc: denied { bind } for pid=11392 comm="syz.3.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.866213][T11393] netlink: 'syz.3.2113': attribute type 10 has an invalid length. [ 256.006428][T11396] netlink: 'syz.3.2113': attribute type 10 has an invalid length. [ 256.327101][T11386] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.334834][T11386] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.803562][ T5873] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 256.886556][T11386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.936650][T11386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.964431][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 256.978157][ T5873] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 256.987620][ T5873] usb 5-1: config 0 has no interface number 0 [ 257.016314][ T5873] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 257.034161][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.051672][ T5873] usb 5-1: Product: syz [ 257.060745][ T5873] usb 5-1: Manufacturer: syz [ 257.071014][ T5873] usb 5-1: SerialNumber: syz [ 257.091720][ T5873] usb 5-1: config 0 descriptor?? [ 257.108160][ T5873] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 257.319038][ T5873] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 257.333420][ T5873] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 257.474797][T11386] batman_adv: batadv0: Interface deactivated: gretap1 [ 257.492119][T11386] batman_adv: batadv0: Interface deactivated: macvlan2 [ 257.536509][T11393] team0: Port device dummy0 added [ 257.551477][T11396] team0: Port device dummy0 removed [ 257.561491][T11396] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 257.621249][ T6440] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.630828][ T6440] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.651966][ T6440] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.672977][ T30] audit: type=1400 audit(1763494483.819:802): avc: denied { execute } for pid=11417 comm="syz.3.2122" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=29889 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 257.752789][ T6440] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.776749][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 257.793655][ T5965] usb 5-1: USB disconnect, device number 20 [ 257.824479][ T5965] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 257.909958][ T5965] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 257.947787][ T5965] quatech2 5-1:0.51: device disconnected [ 258.164328][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2124'. [ 258.282611][T11425] bond0: (slave bond_slave_1): Releasing backup interface [ 258.359446][T11436] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2128'. [ 258.689973][T11450] deleting an unspecified loop device is not supported. [ 259.030610][T11457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.098406][ T30] audit: type=1400 audit(1763494485.249:803): avc: denied { read } for pid=11461 comm="syz.1.2140" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 259.112560][T11464] input: syz1 as /devices/virtual/input/input35 [ 259.207366][ T30] audit: type=1400 audit(1763494485.249:804): avc: denied { open } for pid=11461 comm="syz.1.2140" path="/431/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 259.294122][ T30] audit: type=1400 audit(1763494485.249:805): avc: denied { read } for pid=11461 comm="syz.1.2140" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 259.522724][T11478] TCP: TCP_TX_DELAY enabled [ 259.669161][T11483] bond1: invalid ARP target 0.0.0.0 specified for addition [ 259.695172][T11483] bond1: option arp_ip_target: invalid value (0) [ 259.738138][T11483] bond1 (unregistering): Released all slaves [ 259.804359][T11491] netlink: 'syz.3.2153': attribute type 23 has an invalid length. [ 260.514485][ T870] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 260.565037][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2169'. [ 260.572721][T11524] input: syz1 as /devices/virtual/input/input36 [ 260.615406][T11525] netlink: zone id is out of range [ 260.695860][ T870] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 260.724144][ T870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.748496][ T870] usb 2-1: config 0 descriptor?? [ 260.765162][ T870] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 260.952035][ T30] audit: type=1326 audit(1763494487.099:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11543 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 260.982726][ T870] gspca_sn9c2028: read1 error -32 [ 260.986270][ T30] audit: type=1326 audit(1763494487.099:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11543 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 261.073641][ T30] audit: type=1326 audit(1763494487.099:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11543 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 261.099658][ T30] audit: type=1326 audit(1763494487.099:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11543 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 261.126770][ T30] audit: type=1326 audit(1763494487.099:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11543 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 261.155924][ T30] audit: type=1326 audit(1763494487.099:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11543 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 261.238618][ T30] audit: type=1326 audit(1763494487.099:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11543 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 261.317670][ T30] audit: type=1326 audit(1763494487.099:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11543 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 261.356355][ T30] audit: type=1326 audit(1763494487.129:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11543 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 261.409284][ T5873] usb 2-1: USB disconnect, device number 22 [ 261.416537][ T30] audit: type=1326 audit(1763494487.159:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11543 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 261.622729][T11559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2185'. [ 261.711277][T11559] block nbd1: Unsupported socket: should be TCP or UNIX. [ 262.537867][ T870] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 262.569239][T11609] netlink: 'syz.0.2208': attribute type 1 has an invalid length. [ 262.578595][T11609] netlink: 'syz.0.2208': attribute type 6 has an invalid length. [ 262.588456][T11609] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2208'. [ 262.703974][ T870] usb 6-1: Using ep0 maxpacket: 8 [ 262.717113][ T870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.735365][ T870] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 262.745397][ T870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.762940][ T870] usb 6-1: config 0 descriptor?? [ 262.921102][T11618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.994294][ T870] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 263.348796][T11633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2218'. [ 263.478294][ T5922] usb 6-1: USB disconnect, device number 4 [ 263.823005][ T5922] kernel write not supported for file [eventfd] (pid: 5922 comm: kworker/1:7) [ 264.101016][T11661] IPv6: sit1: Disabled Multicast RS [ 264.129811][T11661] sit1: entered allmulticast mode [ 264.714841][ T870] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 264.883562][ T870] usb 2-1: Using ep0 maxpacket: 32 [ 264.890703][ T870] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 264.900599][ T870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.912523][ T870] usb 2-1: config 0 descriptor?? [ 265.009342][T11694] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2243'. [ 265.131440][ T870] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 265.150959][ T870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 265.181699][ T870] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 265.203765][ T870] usb 2-1: media controller created [ 265.280074][ T870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.364301][ T870] DVB: Unable to find symbol dib7000p_attach() [ 265.371432][ T870] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 265.457553][T11692] block device autoloading is deprecated and will be removed. [ 265.465155][ T870] rc_core: IR keymap rc-dib0700-rc5 not found [ 265.471956][ T870] Registered IR keymap rc-empty [ 265.500547][ T870] dvb-usb: could not initialize remote control. [ 265.521545][ T870] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 265.543225][ T870] usb 2-1: USB disconnect, device number 23 [ 265.555252][T11707] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.606218][ T870] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 265.726075][T11707] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.810104][T11718] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.841564][T11707] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.938704][T11707] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.076405][ T1004] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.099983][ T6427] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.123344][ T1004] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.158928][ T6427] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.379727][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 266.379741][ T30] audit: type=1400 audit(1763494492.529:835): avc: denied { listen } for pid=11732 comm="syz.4.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 266.419606][ T30] audit: type=1400 audit(1763494492.559:836): avc: denied { accept } for pid=11732 comm="syz.4.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 266.725222][ T30] audit: type=1400 audit(1763494492.869:837): avc: denied { firmware_load } for pid=11747 comm="syz.0.2266" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 266.877862][T11748] syz.0.2266 (11748) used greatest stack depth: 18680 bytes left [ 268.579952][ T5873] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 268.765508][ T5873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 268.840240][ T5873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 268.938773][ T5873] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 268.954381][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.987335][ T5873] usb 5-1: Product: syz [ 268.991553][ T5873] usb 5-1: Manufacturer: syz [ 269.021522][ T5873] usb 5-1: SerialNumber: syz [ 269.061690][ T5873] usb 5-1: config 0 descriptor?? [ 269.091805][T11802] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 269.104015][T11802] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 269.303925][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2299'. [ 269.369602][T11802] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 269.397347][T11802] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 269.839961][ T5873] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 270.255388][ T5873] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 270.285639][ T5873] usb 5-1: USB disconnect, device number 21 [ 270.532856][ T30] audit: type=1400 audit(1763494496.679:838): avc: denied { write } for pid=11865 comm="syz.0.2315" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 270.556227][ T30] audit: type=1400 audit(1763494496.689:839): avc: denied { watch watch_reads } for pid=11865 comm="syz.0.2315" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 271.005764][ T870] libceph: connect (1)[c::]:6789 error -22 [ 271.012324][ T870] libceph: mon0 (1)[c::]:6789 connect error [ 271.028295][T11891] ceph: No mds server is up or the cluster is laggy [ 271.034072][ T870] libceph: connect (1)[c::]:6789 error -22 [ 271.043868][ T870] libceph: mon0 (1)[c::]:6789 connect error [ 271.083043][ T30] audit: type=1400 audit(1763494497.229:840): avc: denied { ioctl } for pid=11898 comm="syz.5.2328" path="socket:[36168]" dev="sockfs" ino=36168 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 271.175723][ T30] audit: type=1400 audit(1763494497.329:841): avc: denied { write } for pid=11903 comm="syz.5.2331" path="socket:[35218]" dev="sockfs" ino=35218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 271.314698][ T30] audit: type=1400 audit(1763494497.469:842): avc: denied { read } for pid=11907 comm="syz.4.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 271.376821][ T30] audit: type=1400 audit(1763494497.499:843): avc: denied { mounton } for pid=11910 comm="syz.3.2335" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 271.425543][ T30] audit: type=1400 audit(1763494497.549:844): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 271.447158][T11915] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2334'. [ 271.483562][ T30] audit: type=1400 audit(1763494497.619:845): avc: denied { read } for pid=11916 comm="syz.3.2336" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 271.536907][ T30] audit: type=1400 audit(1763494497.619:846): avc: denied { open } for pid=11916 comm="syz.3.2336" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 271.922346][T11927] syzkaller1: entered promiscuous mode [ 271.948058][T11927] syzkaller1: entered allmulticast mode [ 271.996730][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2343'. [ 272.254383][ T30] audit: type=1400 audit(1763494498.389:847): avc: denied { watch } for pid=11942 comm="syz.0.2348" path="/492/file0" dev="tmpfs" ino=2519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 272.320218][ T30] audit: type=1400 audit(1763494498.399:848): avc: denied { watch_sb } for pid=11942 comm="syz.0.2348" path="/492/file0" dev="tmpfs" ino=2519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 272.373550][ T30] audit: type=1400 audit(1763494498.519:849): avc: denied { ioctl } for pid=11945 comm="syz.1.2349" path="socket:[35297]" dev="sockfs" ino=35297 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 272.539293][T11957] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2355'. [ 272.682923][ T30] audit: type=1400 audit(1763494498.829:850): avc: denied { mount } for pid=11962 comm="syz.0.2357" name="/" dev="hugetlbfs" ino=35319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 273.259539][T11983] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2364'. [ 273.821514][ T30] audit: type=1800 audit(1763494499.969:851): pid=12014 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2378" name="bus" dev="tmpfs" ino=2492 res=0 errno=0 [ 274.002697][ T30] audit: type=1400 audit(1763494500.149:852): avc: denied { read open } for pid=12020 comm="syz.5.2382" path="/" dev="configfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 274.782133][ T30] audit: type=1326 audit(1763494500.929:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.1.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a478f6c9 code=0x7ffc0000 [ 275.324334][ T5925] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 275.556395][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.580465][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.598760][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 275.635142][ T5925] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.679243][T12069] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2402'. [ 275.690195][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.713886][T12069] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2402'. [ 275.735572][ T5925] usb 1-1: config 0 descriptor?? [ 275.974742][T12078] Invalid ELF header magic: != ELF [ 275.980712][T12076] netlink: 'syz.4.2405': attribute type 4 has an invalid length. [ 276.180709][ T5925] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xd [ 276.220123][ T5925] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 276.469406][T12095] netlink: 'syz.3.2413': attribute type 10 has an invalid length. [ 276.479399][T12095] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2413'. [ 276.490341][T12095] veth0_vlan: entered allmulticast mode [ 276.500701][T12095] bridge0: port 3(veth0_vlan) entered blocking state [ 276.508314][T12095] bridge0: port 3(veth0_vlan) entered disabled state [ 276.518332][T12095] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 276.639928][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 276.639944][ T30] audit: type=1400 audit(1763494502.789:865): avc: denied { remount } for pid=12100 comm="syz.3.2416" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 276.813973][ T870] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 276.977028][ T870] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 276.991520][ T870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.005688][ T870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.015587][ T870] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 277.030581][ T870] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 277.040500][ T870] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 277.048900][ T870] usb 2-1: Manufacturer: syz [ 277.073853][ T870] usb 2-1: config 0 descriptor?? [ 277.497364][ T870] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 277.555990][ T870] appleir 0003:05AC:8243.0019: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 277.629822][ T30] audit: type=1400 audit(1763494503.779:866): avc: denied { name_bind } for pid=12125 comm="syz.4.2426" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 277.762775][T12097] usb 1-1: string descriptor 0 read error: -71 [ 278.363686][ T5965] usb 1-1: USB disconnect, device number 24 [ 278.933912][ T5965] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 278.965365][T12193] virtiofs: Unknown parameter 'always' [ 279.100945][ T30] audit: type=1400 audit(1763494505.249:867): avc: denied { bind } for pid=12200 comm="syz.5.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 279.121526][ T30] audit: type=1400 audit(1763494505.249:868): avc: denied { listen } for pid=12200 comm="syz.5.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 279.126669][ T5965] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 279.149998][ T56] block nbd0: Possible stuck request ffff8880260be000: control (read@0,1024B). Runtime 180 seconds [ 279.152985][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.164806][ T56] block nbd0: Possible stuck request ffff8880260be1c0: control (read@1024,1024B). Runtime 180 seconds [ 279.185518][ T56] block nbd0: Possible stuck request ffff8880260be380: control (read@2048,1024B). Runtime 180 seconds [ 279.197093][ T56] block nbd0: Possible stuck request ffff8880260be540: control (read@3072,1024B). Runtime 180 seconds [ 279.209806][ T30] audit: type=1400 audit(1763494505.249:869): avc: denied { accept } for pid=12200 comm="syz.5.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 279.218135][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.263819][ T43] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 279.271747][ T5965] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 279.281986][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.299159][ T5965] usb 5-1: config 0 descriptor?? [ 279.396969][ T5925] kernel read not supported for file /eth0 (pid: 5925 comm: kworker/0:6) [ 279.446389][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2461'. [ 279.464389][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 279.473836][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.485824][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.496961][ T43] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 279.525515][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.553181][ T43] usb 4-1: config 0 descriptor?? [ 279.561027][ T5922] usb 2-1: USB disconnect, device number 24 [ 279.591559][ T43] hub 4-1:0.0: USB hub found [ 279.741093][ T5965] sony 0003:054C:024B.001A: unknown main item tag 0x0 [ 279.755536][ T5965] sony 0003:054C:024B.001A: unknown main item tag 0x0 [ 279.762560][ T5965] sony 0003:054C:024B.001A: unknown main item tag 0x0 [ 279.772249][ T5965] sony 0003:054C:024B.001A: unknown main item tag 0x0 [ 279.784697][ T5965] sony 0003:054C:024B.001A: unknown main item tag 0x0 [ 279.791726][ T5965] sony 0003:054C:024B.001A: unknown main item tag 0x0 [ 279.800052][ T5965] sony 0003:054C:024B.001A: unknown main item tag 0x0 [ 279.813601][ T43] hub 4-1:0.0: 1 port detected [ 279.822045][ T5965] sony 0003:054C:024B.001A: unknown main item tag 0x0 [ 279.833263][ T5965] sony 0003:054C:024B.001A: unknown main item tag 0x0 [ 279.856676][ T5965] sony 0003:054C:024B.001A: unexpected long global item [ 279.865230][ T5965] sony 0003:054C:024B.001A: parse failed [ 279.871065][ T5965] sony 0003:054C:024B.001A: probe with driver sony failed with error -22 [ 280.004758][ T5965] usb 5-1: USB disconnect, device number 22 [ 280.038279][T12228] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2469'. [ 280.237228][ T30] audit: type=1326 audit(1763494506.389:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12229 comm="syz.1.2470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8a478f6c9 code=0x0 [ 280.419462][ T43] hub 4-1:0.0: activate --> -90 [ 280.753751][ T870] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 280.813664][ T5873] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 280.826508][ T5925] usb 4-1: USB disconnect, device number 19 [ 280.903620][ T870] usb 6-1: Using ep0 maxpacket: 8 [ 280.910139][ T870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.920547][ T870] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 280.930174][ T870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.940837][ T870] usb 6-1: config 0 descriptor?? [ 280.949202][ T870] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 280.965728][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.977035][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.987114][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.000129][ T5873] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.009604][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.020091][ T5873] usb 5-1: config 0 descriptor?? [ 281.448013][ T5873] plantronics 0003:047F:FFFF.001B: unbalanced delimiter at end of report description [ 281.484250][ T5873] plantronics 0003:047F:FFFF.001B: parse failed [ 281.492348][ T30] audit: type=1400 audit(1763494507.639:871): avc: denied { mounton } for pid=12249 comm="syz.3.2478" path="/proc/1140/task" dev="proc" ino=37964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 281.503685][ T5873] plantronics 0003:047F:FFFF.001B: probe with driver plantronics failed with error -22 [ 281.719791][ T5866] usb 5-1: USB disconnect, device number 23 [ 282.163594][ T870] gspca_vc032x: reg_w err -71 [ 282.171556][ T870] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 282.192613][ T870] usb 6-1: USB disconnect, device number 5 [ 282.509299][T12278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2489'. [ 282.849517][T12295] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2494'. [ 283.842242][T12315] tipc: Started in network mode [ 283.859133][T12315] tipc: Node identity 4, cluster identity 4711 [ 283.881505][T12315] tipc: Node number set to 4 [ 284.484956][ T870] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 284.522480][T12343] bridge_slave_0: left allmulticast mode [ 284.533913][T12343] bridge_slave_0: left promiscuous mode [ 284.539846][T12343] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.569147][T12343] bridge_slave_1: left allmulticast mode [ 284.575710][T12343] bridge_slave_1: left promiscuous mode [ 284.585992][T12343] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.600338][T12343] bond0: (slave bond_slave_0): Releasing backup interface [ 284.622526][T12343] team0: Port device team_slave_0 removed [ 284.644517][ T870] usb 2-1: Using ep0 maxpacket: 8 [ 284.651138][T12343] team0: Port device team_slave_1 removed [ 284.661271][ T870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.675200][T12343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.682640][ T870] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 284.693638][T12343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.710889][T12343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.718706][ T870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.728181][T12343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.738680][ T870] usb 2-1: config 0 descriptor?? [ 284.748803][T12343] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 284.956191][ T870] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 284.995582][ T30] audit: type=1400 audit(1763494511.149:872): avc: denied { read } for pid=12360 comm="syz.3.2524" lport=43500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 285.069068][T12366] netlink: 408 bytes leftover after parsing attributes in process `syz.0.2526'. [ 285.083075][ T30] audit: type=1326 audit(1763494511.229:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12367 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 285.100671][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2527'. [ 285.117427][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2527'. [ 285.142047][ T30] audit: type=1326 audit(1763494511.229:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12367 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 285.204309][ T30] audit: type=1326 audit(1763494511.229:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12367 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 285.229731][ T30] audit: type=1326 audit(1763494511.229:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12367 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 285.256188][ T30] audit: type=1326 audit(1763494511.259:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12367 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 285.289240][ T30] audit: type=1326 audit(1763494511.259:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12367 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 285.315565][ T30] audit: type=1326 audit(1763494511.259:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12367 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 285.348562][ T30] audit: type=1326 audit(1763494511.259:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12367 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 285.375978][ T30] audit: type=1326 audit(1763494511.259:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12367 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 285.518115][ T870] usb 2-1: USB disconnect, device number 25 [ 285.733723][ T5866] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 285.905712][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 285.927139][ T5866] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 285.946569][ T5866] usb 1-1: config 0 has no interface number 0 [ 285.997692][ T5866] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 286.023355][T12395] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2539'. [ 286.028098][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.072694][ T5866] usb 1-1: Product: syz [ 286.080832][ T5866] usb 1-1: Manufacturer: syz [ 286.096969][ T5866] usb 1-1: SerialNumber: syz [ 286.143018][ T5866] usb 1-1: config 0 descriptor?? [ 286.390210][ T5866] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 286.404080][ T5866] uvcvideo 1-1:0.31: No valid video chain found. [ 286.429647][ T5866] usb 1-1: USB disconnect, device number 25 [ 286.585161][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2548'. [ 286.596183][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2548'. [ 286.624751][ T6427] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.634082][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2548'. [ 286.645524][ T1004] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.657920][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2548'. [ 286.669995][ T1004] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.679080][ T1004] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.805503][T12424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.081549][T12432] geneve2: entered promiscuous mode [ 287.091484][T12432] geneve2: entered allmulticast mode [ 287.703445][T12464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.953716][ T5965] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 289.123451][T12505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.157982][ T5965] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.182459][ T5965] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 289.194647][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2586'. [ 289.210177][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.231393][ T5965] usb 6-1: Product: syz [ 289.243676][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2586'. [ 289.246044][ T5965] usb 6-1: Manufacturer: syz [ 289.287407][ T5965] usb 6-1: SerialNumber: syz [ 289.306875][ T5965] usb 6-1: config 0 descriptor?? [ 289.381352][ T5965] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 289.506417][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2589'. [ 289.518741][ T7158] udevd[7158]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.601857][T12516] bridge0: port 3(gretap0) entered disabled state [ 289.775066][ T5965] usb 6-1: USB disconnect, device number 6 [ 290.047746][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 290.047763][ T30] audit: type=1400 audit(1763494516.199:943): avc: denied { map } for pid=12536 comm="syz.3.2599" path="socket:[38653]" dev="sockfs" ino=38653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 290.570431][T12568] netlink: 'syz.0.2614': attribute type 10 has an invalid length. [ 290.576187][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2612'. [ 290.585692][T12568] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 290.603416][T12565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2612'. [ 290.631594][T12565] netlink: 'syz.5.2612': attribute type 20 has an invalid length. [ 290.650041][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2612'. [ 290.666436][ T30] audit: type=1400 audit(1763494516.819:944): avc: denied { create } for pid=12570 comm="syz.4.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 290.680020][T12565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2612'. [ 290.686209][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.705085][ T5965] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 290.711616][T12565] netlink: 'syz.5.2612': attribute type 20 has an invalid length. [ 290.715940][ T30] audit: type=1400 audit(1763494516.819:945): avc: denied { sys_admin } for pid=12570 comm="syz.4.2615" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 290.864769][ T5965] usb 4-1: Using ep0 maxpacket: 32 [ 290.874352][ T30] audit: type=1400 audit(1763494517.019:946): avc: denied { write } for pid=12579 comm="syz.5.2619" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 290.915758][ T5965] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 290.928947][ T5965] usb 4-1: config 0 has no interface number 0 [ 290.945843][ T5965] usb 4-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 290.971478][ T5965] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 290.983611][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.000922][ T5965] usb 4-1: Product: syz [ 291.015186][ T5965] usb 4-1: Manufacturer: syz [ 291.028631][ T5965] usb 4-1: SerialNumber: syz [ 291.048657][ T5965] usb 4-1: config 0 descriptor?? [ 291.073460][ T5965] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 291.916430][ T5965] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input40 [ 292.133441][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 292.140589][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 292.147874][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 292.154860][ T5866] usb 4-1: USB disconnect, device number 20 [ 292.158158][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 292.167608][ C1] gspca_main: Resubmit URB failed with error -19 [ 292.184545][ T30] audit: type=1400 audit(1763494518.309:947): avc: denied { bind } for pid=12609 comm="syz.5.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 292.203766][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.289543][T12614] bond1: option mode: unable to set because the bond device is up [ 292.308121][T12614] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 292.330750][ T30] audit: type=1400 audit(1763494518.479:948): avc: denied { read } for pid=12609 comm="syz.5.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 292.655234][T12614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.689426][T12614] bond1: (slave lo): Enslaving as an active interface with an up link [ 292.700883][T12614] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 292.735635][ T30] audit: type=1400 audit(1763494518.889:949): avc: denied { listen } for pid=12617 comm="syz.1.2634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 292.922264][T12620] input: syz0 as /devices/virtual/input/input41 [ 293.047992][ T30] audit: type=1400 audit(1763494519.199:950): avc: denied { setopt } for pid=12621 comm="syz.3.2636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 293.195512][ T30] audit: type=1400 audit(1763494519.349:951): avc: denied { module_load } for pid=12626 comm="syz.0.2638" path="/sys/power/wakeup_count" dev="sysfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 293.219785][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.423138][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2640'. [ 293.443135][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2640'. [ 293.491055][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2640'. [ 293.628242][ T30] audit: type=1400 audit(1763494519.779:952): avc: denied { append } for pid=12652 comm="syz.5.2649" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 293.723073][T12657] kAFS: unable to lookup cell '(,' [ 293.783646][ T5922] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 293.949100][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.985949][ T5922] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 294.004022][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.033251][ T5922] usb 4-1: config 0 descriptor?? [ 294.467889][ T5922] hid_parser_main: 202 callbacks suppressed [ 294.467911][ T5922] lua 0003:1E7D:2C2E.001C: unknown main item tag 0x0 [ 294.493063][ T5922] lua 0003:1E7D:2C2E.001C: unknown main item tag 0x0 [ 294.509877][ T5922] lua 0003:1E7D:2C2E.001C: unknown main item tag 0x0 [ 294.517721][ T5922] lua 0003:1E7D:2C2E.001C: unknown main item tag 0x0 [ 294.534042][ T5922] lua 0003:1E7D:2C2E.001C: unknown main item tag 0x0 [ 294.540804][ T5922] lua 0003:1E7D:2C2E.001C: unknown main item tag 0x0 [ 294.548031][ T5922] lua 0003:1E7D:2C2E.001C: unknown main item tag 0x0 [ 294.580665][ T5922] lua 0003:1E7D:2C2E.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0 [ 294.734783][ T5922] usb 4-1: USB disconnect, device number 21 [ 294.900680][T12688] __nla_validate_parse: 1 callbacks suppressed [ 294.900698][T12688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2662'. [ 294.988355][ T5823] block nbd1: Receive control failed (result -107) [ 295.165994][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 295.166012][ T30] audit: type=1400 audit(1763494521.309:954): avc: denied { read } for pid=12691 comm="syz.4.2664" path="socket:[38886]" dev="sockfs" ino=38886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 296.381562][T12680] netlink: 'syz.1.2660': attribute type 13 has an invalid length. [ 296.499222][T12680] netlink: 'syz.1.2660': attribute type 13 has an invalid length. [ 297.049584][ T30] audit: type=1400 audit(1763494523.199:955): avc: denied { getopt } for pid=12736 comm="syz.0.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 297.069166][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.173664][ T5866] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 297.326483][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 297.335556][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.363424][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 297.386454][ T5866] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 297.399071][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.415230][ T5866] usb 4-1: config 0 descriptor?? [ 297.488244][ T30] audit: type=1326 audit(1763494523.629:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12751 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebc98f6c9 code=0x7ffc0000 [ 297.594550][ T30] audit: type=1326 audit(1763494523.629:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12751 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebc98f6c9 code=0x7ffc0000 [ 297.726886][ T30] audit: type=1326 audit(1763494523.629:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12751 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7efebc98f6c9 code=0x7ffc0000 [ 297.880174][ T5866] HID 045e:07da: Invalid code 65791 type 1 [ 297.916425][ T30] audit: type=1326 audit(1763494523.629:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12751 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebc98f6c9 code=0x7ffc0000 [ 297.942211][ T5866] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001D/input/input42 [ 297.992394][ T30] audit: type=1326 audit(1763494523.629:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12751 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebc98f6c9 code=0x7ffc0000 [ 298.052302][ T5866] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 298.125257][ T30] audit: type=1326 audit(1763494523.629:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12751 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7efebc98f6c9 code=0x7ffc0000 [ 298.267807][ T30] audit: type=1326 audit(1763494523.629:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12751 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efebc92b789 code=0x7ffc0000 [ 298.373762][ T30] audit: type=1326 audit(1763494523.629:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12751 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efebc92b789 code=0x7ffc0000 [ 298.909550][ T5922] usb 4-1: USB disconnect, device number 22 [ 299.073937][ T43] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 299.243953][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 299.256541][ T43] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 299.267947][ T43] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 299.279814][ T43] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 299.292195][ T43] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 299.309233][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055793400: rx timeout, send abort [ 299.321251][ T43] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 299.331080][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.339886][ T43] usb 2-1: Product: syz [ 299.344865][ T43] usb 2-1: Manufacturer: syz [ 299.349700][ T43] usb 2-1: SerialNumber: syz [ 299.378639][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 299.446059][ T43] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input43 [ 299.593606][ T43] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 299.602302][ T43] (id 0x00) [ 299.723609][ T43] rc_core: IR keymap rc-imon-pad not found [ 299.729830][ T43] Registered IR keymap rc-empty [ 299.736448][ T43] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 299.748446][ T43] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 299.795212][ T43] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 299.810832][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055792800: rx timeout, send abort [ 299.819235][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055793400: abort rx timeout. Force session deactivation [ 299.832062][ T43] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input44 [ 299.906191][ T43] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:26> initialized [ 300.155785][ T5922] usb 2-1: USB disconnect, device number 26 [ 300.164766][T12783] imon:send_packet: packet tx failed (-71) [ 300.201205][T12783] imon:vfd_write: send packet #0 failed [ 300.319117][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055792800: abort rx timeout. Force session deactivation [ 300.536520][T12838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2723'. [ 300.591007][T12838] cgroup: Unexpected value for 'cpuset_v2_mode' [ 300.739872][T12846] netlink: 'syz.5.2727': attribute type 1 has an invalid length. [ 300.754470][T12846] netlink: 'syz.5.2727': attribute type 4 has an invalid length. [ 300.762320][T12846] netlink: 15334 bytes leftover after parsing attributes in process `syz.5.2727'. [ 300.863609][ T5184] Dev loop6: unable to read RDB block 1 [ 300.869239][ T5184] loop6: unable to read partition table [ 300.889856][ T30] kauditd_printk_skb: 403 callbacks suppressed [ 300.889871][ T30] audit: type=1400 audit(1763494527.039:1367): avc: denied { lock } for pid=12850 comm="syz.5.2730" path="socket:[40178]" dev="sockfs" ino=40178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 300.894047][ T5184] loop6: partition table beyond EOD, truncated [ 300.943970][ T5922] Process accounting resumed [ 301.987739][ T30] audit: type=1400 audit(1763494528.139:1368): avc: denied { read write } for pid=12912 comm="syz.0.2753" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 302.039355][ T30] audit: type=1400 audit(1763494528.139:1369): avc: denied { open } for pid=12912 comm="syz.0.2753" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 302.248485][T12920] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2755'. [ 303.469695][T12952] loop2: detected capacity change from 0 to 7 [ 303.564737][T12952] Dev loop2: unable to read RDB block 7 [ 303.582378][T12952] loop2: AHDI p1 p2 p3 [ 303.630468][T12952] loop2: partition table partially beyond EOD, truncated [ 303.651236][T12952] loop2: p1 start 1601398130 is beyond EOD, truncated [ 303.680230][T12957] input: syz0 as /devices/virtual/input/input45 [ 303.681301][T12952] loop2: p2 start 1702059890 is beyond EOD, truncated [ 304.391905][ T30] audit: type=1400 audit(1763494530.539:1370): avc: denied { setopt } for pid=12970 comm="syz.1.2777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 304.674262][T12983] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2782'. [ 304.884447][ T30] audit: type=1400 audit(1763494531.039:1371): avc: denied { ioctl } for pid=12992 comm="syz.1.2787" path="socket:[40514]" dev="sockfs" ino=40514 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 304.951784][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2789'. [ 305.194062][ T43] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 305.374074][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 305.381063][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 305.424442][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 305.451849][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 305.463578][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.471598][ T43] usb 4-1: Product: syz [ 305.493633][ T43] usb 4-1: Manufacturer: syz [ 305.498389][ T43] usb 4-1: SerialNumber: syz [ 305.508676][ T30] audit: type=1400 audit(1763494531.659:1372): avc: denied { execute } for pid=13012 comm="syz.1.2796" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 305.510353][ T43] usb 4-1: config 0 descriptor?? [ 305.558888][ T43] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 305.568598][ T43] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 306.172259][ T43] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 306.186778][ T43] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 306.400203][ T43] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 306.407395][ T43] em28xx 4-1:0.0: No AC97 audio processor [ 306.418535][ T43] usb 4-1: USB disconnect, device number 23 [ 306.428731][ T43] em28xx 4-1:0.0: Disconnecting em28xx [ 306.438181][ T43] em28xx 4-1:0.0: Freeing device [ 306.553612][ T870] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 306.706533][ T870] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 306.717611][ T870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.728652][ T870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.738804][ T870] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 306.753007][ T870] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 306.762288][ T870] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 306.770573][ T870] usb 1-1: Manufacturer: syz [ 306.777065][ T870] usb 1-1: config 0 descriptor?? [ 307.470805][ T870] appleir 0003:05AC:8243.001E: unknown main item tag 0x0 [ 307.536241][ T870] appleir 0003:05AC:8243.001E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 307.606634][ T870] usb 1-1: USB disconnect, device number 26 [ 307.701395][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2821'. [ 307.903601][T13072] netlink: 'syz.5.2821': attribute type 9 has an invalid length. [ 308.015211][T13075] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2823'. [ 308.051792][T13075] openvswitch: netlink: Missing key (keys=40, expected=80) [ 308.154295][T13073] fido_id[13073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 308.591518][ T30] audit: type=1400 audit(1763494534.729:1373): avc: denied { bind } for pid=13101 comm="syz.4.2835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 308.793797][ T43] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 308.963694][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 308.970539][ T43] usb 1-1: config 0 has no interfaces? [ 308.979661][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 308.993593][ T43] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 309.008424][ T43] usb 1-1: Manufacturer: syz [ 309.021413][ T43] usb 1-1: config 0 descriptor?? [ 309.214016][ T56] block nbd0: Possible stuck request ffff8880260be000: control (read@0,1024B). Runtime 210 seconds [ 309.225448][ T56] block nbd0: Possible stuck request ffff8880260be1c0: control (read@1024,1024B). Runtime 210 seconds [ 309.236840][ T56] block nbd0: Possible stuck request ffff8880260be380: control (read@2048,1024B). Runtime 210 seconds [ 309.248248][ T56] block nbd0: Possible stuck request ffff8880260be540: control (read@3072,1024B). Runtime 210 seconds [ 309.353054][T13097] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 309.459986][ T43] usb 1-1: USB disconnect, device number 27 [ 309.669361][T13137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2846'. [ 309.897786][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2852'. [ 309.963638][ T5866] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 310.181632][ T5866] usb 6-1: config index 0 descriptor too short (expected 45925, got 18) [ 310.190362][ T5866] usb 6-1: config 0 has too many interfaces: 83, using maximum allowed: 32 [ 310.223762][ T5866] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.250153][ T5866] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 83 [ 310.303801][ T5866] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 310.312874][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.353058][ T5866] usb 6-1: Product: syz [ 310.361034][ T5866] usb 6-1: Manufacturer: syz [ 310.367012][ T5866] usb 6-1: SerialNumber: syz [ 310.394192][ T5866] usb 6-1: config 0 descriptor?? [ 310.816836][ T43] usb 6-1: USB disconnect, device number 7 [ 310.885988][T13188] netlink: 'syz.0.2869': attribute type 1 has an invalid length. [ 310.899528][T13189] af_packet: tpacket_rcv: packet too big, clamped from 124 to 4294967272. macoff=96 [ 310.948594][T13188] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 310.979552][T13188] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 310.993636][ T5925] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 311.016815][T13188] bond2: (slave xfrm1): making interface the new active one [ 311.047331][T13188] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 311.154354][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 311.161253][ T5925] usb 4-1: config 0 has no interfaces? [ 311.168237][ T5925] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 311.187145][ T5925] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 311.203553][ T5925] usb 4-1: Manufacturer: syz [ 311.226772][ T5925] usb 4-1: config 0 descriptor?? [ 311.524249][T13205] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2875'. [ 311.669432][T13183] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 311.748786][ T43] usb 4-1: USB disconnect, device number 24 [ 311.783992][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 312.526043][ T30] audit: type=1400 audit(1763494538.679:1374): avc: denied { map } for pid=13229 comm="syz.0.2885" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 312.730916][T13237] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 312.750217][T13237] block nbd1: NBD_DISCONNECT [ 312.758762][T13237] block nbd1: Send disconnect failed -32 [ 312.770590][T13237] block nbd1: shutting down sockets [ 312.820670][T13239] loop2: detected capacity change from 0 to 7 [ 312.829830][T13239] Dev loop2: unable to read RDB block 7 [ 312.837531][T13239] loop2: unable to read partition table [ 312.844636][T13239] loop2: partition table beyond EOD, truncated [ 312.853218][T13239] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 312.922683][ T5184] Dev loop2: unable to read RDB block 7 [ 312.939946][ T5184] loop2: unable to read partition table [ 312.962900][ T5184] loop2: partition table beyond EOD, truncated [ 313.178822][ T30] audit: type=1400 audit(1763494539.329:1375): avc: denied { set_context_mgr } for pid=13248 comm="syz.1.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 313.264174][ T870] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 313.447482][ T870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.496556][ T870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.503618][ T43] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 313.563348][ T870] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 313.616138][ T870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.635690][ T870] usb 4-1: config 0 descriptor?? [ 313.714016][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 313.738103][ T43] usb 6-1: config 0 has no interfaces? [ 313.758419][ T43] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 313.784480][ T43] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 313.802695][ T43] usb 6-1: Manufacturer: syz [ 313.821162][ T43] usb 6-1: config 0 descriptor?? [ 313.949594][ T30] audit: type=1400 audit(1763494540.099:1376): avc: denied { mount } for pid=13268 comm="syz.0.2900" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 314.075347][ T870] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 314.082695][ T870] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 314.105385][T13283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.127619][ T870] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.001F/input/input46 [ 314.153263][T13250] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 314.177516][ T870] cm6533_jd 0003:0D8C:0022.001F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 314.227971][ T5866] usb 6-1: USB disconnect, device number 8 [ 314.350336][ T870] usb 4-1: USB disconnect, device number 25 [ 314.456861][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2911'. [ 314.477605][T13292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2911'. [ 314.487976][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2911'. [ 314.498343][T13292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2911'. [ 315.072568][ T30] audit: type=1400 audit(1763494541.199:1377): avc: denied { append } for pid=13312 comm="syz.5.2921" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 315.577140][T13323] serio: Serial port ptm0 [ 316.011382][T13335] netlink: 'syz.4.2928': attribute type 9 has an invalid length. [ 316.056113][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2928'. [ 316.067551][T13338] netlink: 'syz.4.2928': attribute type 9 has an invalid length. [ 316.081656][T13335] hsr0: entered promiscuous mode [ 316.087457][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2928'. [ 316.097685][T13335] macvlan2: entered promiscuous mode [ 316.103183][T13335] macvlan2: entered allmulticast mode [ 316.110358][T13335] hsr0: entered allmulticast mode [ 316.115751][T13335] hsr_slave_0: entered allmulticast mode [ 316.121565][T13335] hsr_slave_1: entered allmulticast mode [ 316.155904][T13311] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.164694][T13311] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.211359][T13338] macvlan3: entered promiscuous mode [ 316.218923][T13338] macvlan3: entered allmulticast mode [ 316.574824][T13349] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2934'. [ 316.905612][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.911926][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.954815][ T30] audit: type=1326 audit(1763494543.109:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13361 comm="syz.5.2940" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f895fd8f6c9 code=0x0 [ 316.987988][T13364] netlink: 'syz.1.2938': attribute type 21 has an invalid length. [ 317.008942][T13364] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2938'. [ 318.113616][ T43] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 318.211755][T13416] binder: 13414:13416 ioctl c0306201 0 returned -14 [ 318.265919][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.285905][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.305464][ T43] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 318.317843][ T43] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 318.327986][ T43] usb 6-1: Manufacturer: syz [ 318.339731][ T43] usb 6-1: config 0 descriptor?? [ 318.769796][ T30] audit: type=1400 audit(1763494544.919:1379): avc: denied { read write } for pid=13432 comm="syz.0.2970" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 318.824596][ T30] audit: type=1400 audit(1763494544.919:1380): avc: denied { open } for pid=13432 comm="syz.0.2970" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 318.903872][ T30] audit: type=1326 audit(1763494545.029:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 318.955754][T13438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.963625][ T30] audit: type=1326 audit(1763494545.029:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 319.000222][ T43] uclogic 0003:256C:006D.0020: failed retrieving Huion firmware version: -71 [ 319.009285][ T43] uclogic 0003:256C:006D.0020: failed probing parameters: -71 [ 319.013718][ T30] audit: type=1326 audit(1763494545.029:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 319.033610][ T43] uclogic 0003:256C:006D.0020: probe with driver uclogic failed with error -71 [ 319.055203][ T30] audit: type=1326 audit(1763494545.039:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 319.080756][ T30] audit: type=1326 audit(1763494545.039:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 319.093909][ T43] usb 6-1: USB disconnect, device number 9 [ 319.107842][ T30] audit: type=1326 audit(1763494545.039:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 319.167899][T13444] [ 319.170251][T13444] ===================================================== [ 319.177163][T13444] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 319.184598][T13444] syzkaller #0 Not tainted [ 319.188989][T13444] ----------------------------------------------------- [ 319.195982][T13444] syz.4.2972/13444 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 319.203696][T13444] ffffffff8e00c098 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0xed/0xc80 [ 319.212403][T13444] [ 319.212403][T13444] and this task is already holding: [ 319.219752][T13444] ffff8880754652a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 319.228462][T13444] which would create a new lock dependency: [ 319.234329][T13444] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 319.241899][T13444] [ 319.241899][T13444] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 319.251324][T13444] (&dev->event_lock#2){..-.}-{3:3} [ 319.251356][T13444] [ 319.251356][T13444] ... which became SOFTIRQ-irq-safe at: [ 319.264208][T13444] lock_acquire+0x179/0x350 [ 319.268787][T13444] _raw_spin_lock_irqsave+0x3a/0x60 [ 319.274064][T13444] input_event+0x74/0xd0 [ 319.278438][T13444] atp_complete_geyser_3_4+0xca9/0x16f0 [ 319.284169][T13444] __usb_hcd_giveback_urb+0x38b/0x610 [ 319.289626][T13444] usb_hcd_giveback_urb+0x39b/0x450 [ 319.294908][T13444] dummy_timer+0x1809/0x3a00 [ 319.299570][T13444] __hrtimer_run_queues+0x202/0xad0 [ 319.304842][T13444] hrtimer_run_softirq+0x17d/0x350 [ 319.310029][T13444] handle_softirqs+0x219/0x8e0 [ 319.314870][T13444] __irq_exit_rcu+0x109/0x170 [ 319.319621][T13444] irq_exit_rcu+0x9/0x30 [ 319.323963][T13444] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 319.329697][T13444] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 319.335766][T13444] _raw_spin_unlock_irqrestore+0x31/0x80 [ 319.341500][T13444] dummy_urb_enqueue+0x558/0x920 [ 319.346615][T13444] usb_hcd_submit_urb+0x25b/0x1c60 [ 319.351821][T13444] usb_submit_urb+0x89f/0x1990 [ 319.356672][T13444] atp_open+0x60/0xd0 [ 319.360733][T13444] input_open_device+0x24c/0x3d0 [ 319.365755][T13444] mousedev_open_device+0xe0/0x140 [ 319.370950][T13444] mousedev_open+0x2fd/0x580 [ 319.375613][T13444] chrdev_open+0x234/0x6a0 [ 319.380102][T13444] do_dentry_open+0x982/0x1530 [ 319.384935][T13444] vfs_open+0x82/0x3f0 [ 319.389079][T13444] path_openat+0x1de4/0x2cb0 [ 319.393739][T13444] do_filp_open+0x20b/0x470 [ 319.398320][T13444] do_sys_openat2+0x11b/0x1d0 [ 319.403085][T13444] __x64_sys_openat+0x174/0x210 [ 319.408024][T13444] do_syscall_64+0xcd/0xfa0 [ 319.412606][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.418575][T13444] [ 319.418575][T13444] to a SOFTIRQ-irq-unsafe lock: [ 319.425575][T13444] (tasklist_lock){.+.+}-{3:3} [ 319.425600][T13444] [ 319.425600][T13444] ... which became SOFTIRQ-irq-unsafe at: [ 319.438192][T13444] ... [ 319.438200][T13444] lock_acquire+0x179/0x350 [ 319.445330][T13444] _raw_read_lock+0x5f/0x70 [ 319.449909][T13444] __do_wait+0x105/0x890 [ 319.454247][T13444] do_wait+0x21d/0x590 [ 319.458395][T13444] kernel_wait+0x9f/0x160 [ 319.462791][T13444] call_usermodehelper_exec_work+0xf1/0x170 [ 319.468759][T13444] process_one_work+0x9cf/0x1b70 [ 319.473766][T13444] worker_thread+0x6c8/0xf10 [ 319.478427][T13444] kthread+0x3c5/0x780 [ 319.482575][T13444] ret_from_fork+0x675/0x7d0 [ 319.487233][T13444] ret_from_fork_asm+0x1a/0x30 [ 319.492080][T13444] [ 319.492080][T13444] other info that might help us debug this: [ 319.492080][T13444] [ 319.502283][T13444] Chain exists of: [ 319.502283][T13444] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 319.502283][T13444] [ 319.515310][T13444] Possible interrupt unsafe locking scenario: [ 319.515310][T13444] [ 319.523605][T13444] CPU0 CPU1 [ 319.528958][T13444] ---- ---- [ 319.534311][T13444] lock(tasklist_lock); [ 319.538547][T13444] local_irq_disable(); [ 319.545286][T13444] lock(&dev->event_lock#2); [ 319.552473][T13444] lock(&f_owner->lock); [ 319.559304][T13444] [ 319.562740][T13444] lock(&dev->event_lock#2); [ 319.567580][T13444] [ 319.567580][T13444] *** DEADLOCK *** [ 319.567580][T13444] [ 319.575697][T13444] 2 locks held by syz.4.2972/13444: [ 319.580869][T13444] #0: ffff888077c986d8 (&u->lock){+.+.}-{3:3}, at: unix_stream_sendmsg+0xd35/0x1340 [ 319.590359][T13444] #1: ffff8880754652a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 319.599510][T13444] [ 319.599510][T13444] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 319.609896][T13444] -> (&dev->event_lock#2){..-.}-{3:3} { [ 319.615711][T13444] IN-SOFTIRQ-W at: [ 319.619934][T13444] lock_acquire+0x179/0x350 [ 319.626598][T13444] _raw_spin_lock_irqsave+0x3a/0x60 [ 319.633969][T13444] input_event+0x74/0xd0 [ 319.640388][T13444] atp_complete_geyser_3_4+0xca9/0x16f0 [ 319.648099][T13444] __usb_hcd_giveback_urb+0x38b/0x610 [ 319.655642][T13444] usb_hcd_giveback_urb+0x39b/0x450 [ 319.663001][T13444] dummy_timer+0x1809/0x3a00 [ 319.669748][T13444] __hrtimer_run_queues+0x202/0xad0 [ 319.677103][T13444] hrtimer_run_softirq+0x17d/0x350 [ 319.684369][T13444] handle_softirqs+0x219/0x8e0 [ 319.691290][T13444] __irq_exit_rcu+0x109/0x170 [ 319.698122][T13444] irq_exit_rcu+0x9/0x30 [ 319.704523][T13444] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 319.712319][T13444] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 319.720454][T13444] _raw_spin_unlock_irqrestore+0x31/0x80 [ 319.728248][T13444] dummy_urb_enqueue+0x558/0x920 [ 319.735342][T13444] usb_hcd_submit_urb+0x25b/0x1c60 [ 319.742614][T13444] usb_submit_urb+0x89f/0x1990 [ 319.749537][T13444] atp_open+0x60/0xd0 [ 319.755673][T13444] input_open_device+0x24c/0x3d0 [ 319.762773][T13444] mousedev_open_device+0xe0/0x140 [ 319.770044][T13444] mousedev_open+0x2fd/0x580 [ 319.776792][T13444] chrdev_open+0x234/0x6a0 [ 319.783363][T13444] do_dentry_open+0x982/0x1530 [ 319.790279][T13444] vfs_open+0x82/0x3f0 [ 319.796509][T13444] path_openat+0x1de4/0x2cb0 [ 319.803254][T13444] do_filp_open+0x20b/0x470 [ 319.809912][T13444] do_sys_openat2+0x11b/0x1d0 [ 319.816747][T13444] __x64_sys_openat+0x174/0x210 [ 319.823757][T13444] do_syscall_64+0xcd/0xfa0 [ 319.830416][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.838462][T13444] INITIAL USE at: [ 319.842597][T13444] lock_acquire+0x179/0x350 [ 319.849176][T13444] _raw_spin_lock_irqsave+0x3a/0x60 [ 319.856453][T13444] input_inject_event+0x9f/0x3b0 [ 319.863467][T13444] led_set_brightness+0x217/0x290 [ 319.870567][T13444] kbd_led_trigger_activate+0xcb/0x110 [ 319.878105][T13444] led_trigger_set+0x59a/0xc50 [ 319.884944][T13444] led_trigger_set_default+0x1e0/0x2e0 [ 319.892557][T13444] led_classdev_register_ext+0x7b8/0xa10 [ 319.900281][T13444] input_leds_connect+0x552/0x8e0 [ 319.907380][T13444] input_attach_handler.isra.0+0x176/0x250 [ 319.915264][T13444] input_register_device+0xab9/0x1180 [ 319.922713][T13444] atkbd_connect+0x5f8/0xa40 [ 319.929371][T13444] serio_driver_probe+0x7f/0xd0 [ 319.936384][T13444] really_probe+0x241/0xa90 [ 319.942956][T13444] __driver_probe_device+0x1de/0x440 [ 319.950311][T13444] driver_probe_device+0x4c/0x1b0 [ 319.957416][T13444] __driver_attach+0x283/0x580 [ 319.964250][T13444] bus_for_each_dev+0x13e/0x1d0 [ 319.971174][T13444] serio_handle_event+0x335/0xc30 [ 319.978277][T13444] process_one_work+0x9cf/0x1b70 [ 319.985285][T13444] worker_thread+0x6c8/0xf10 [ 319.991941][T13444] kthread+0x3c5/0x780 [ 319.998073][T13444] ret_from_fork+0x675/0x7d0 [ 320.004731][T13444] ret_from_fork_asm+0x1a/0x30 [ 320.011571][T13444] } [ 320.014311][T13444] ... key at: [] __key.7+0x0/0x40 [ 320.021690][T13444] -> (&client->buffer_lock){....}-{3:3} { [ 320.027593][T13444] INITIAL USE at: [ 320.031646][T13444] lock_acquire+0x179/0x350 [ 320.038059][T13444] _raw_spin_lock_irq+0x36/0x50 [ 320.044815][T13444] evdev_read+0x436/0xee0 [ 320.051055][T13444] vfs_readv+0x5c1/0x8b0 [ 320.057205][T13444] do_readv+0x28c/0x340 [ 320.063265][T13444] do_syscall_64+0xcd/0xfa0 [ 320.069679][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.077470][T13444] } [ 320.080121][T13444] ... key at: [] __key.83+0x0/0x40 [ 320.087504][T13444] ... acquired at: [ 320.091483][T13444] _raw_spin_lock+0x2e/0x40 [ 320.096598][T13444] evdev_pass_values+0x10e/0x9b0 [ 320.101700][T13444] evdev_events+0x104/0x390 [ 320.106364][T13444] input_pass_values+0x138/0x880 [ 320.111463][T13444] input_handle_event+0xf00/0x14d0 [ 320.116756][T13444] input_inject_event+0x1e8/0x3b0 [ 320.121943][T13444] evdev_write+0x457/0x750 [ 320.126523][T13444] vfs_write+0x2a0/0x11d0 [ 320.131012][T13444] ksys_write+0x1f8/0x250 [ 320.135493][T13444] do_syscall_64+0xcd/0xfa0 [ 320.140154][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.146202][T13444] [ 320.148503][T13444] -> (&new->fa_lock){....}-{3:3} { [ 320.153702][T13444] INITIAL USE at: [ 320.157661][T13444] lock_acquire+0x179/0x350 [ 320.163881][T13444] _raw_write_lock_irq+0x36/0x50 [ 320.170552][T13444] fasync_remove_entry+0xb2/0x1e0 [ 320.177305][T13444] fasync_helper+0xaf/0xd0 [ 320.183446][T13444] fuse_dev_fasync+0xad/0x100 [ 320.189857][T13444] __fput+0x96b/0xb70 [ 320.195562][T13444] task_work_run+0x150/0x240 [ 320.201871][T13444] exit_to_user_mode_loop+0xec/0x130 [ 320.208879][T13444] do_syscall_64+0x426/0xfa0 [ 320.215188][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.222801][T13444] INITIAL READ USE at: [ 320.227196][T13444] lock_acquire+0x179/0x350 [ 320.233851][T13444] _raw_read_lock_irqsave+0x74/0x90 [ 320.241212][T13444] kill_fasync+0x138/0x510 [ 320.247958][T13444] fuse_abort_conn+0x9f0/0xd30 [ 320.254905][T13444] cuse_process_init_reply+0x158/0x10b0 [ 320.262613][T13444] fuse_request_end+0x533/0xa10 [ 320.269631][T13444] fuse_dev_do_write+0x8b3/0x3a50 [ 320.276812][T13444] fuse_dev_write+0x16a/0x200 [ 320.283644][T13444] vfs_write+0x7d3/0x11d0 [ 320.290226][T13444] ksys_write+0x12a/0x250 [ 320.296738][T13444] do_syscall_64+0xcd/0xfa0 [ 320.303432][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.311485][T13444] } [ 320.314052][T13444] ... key at: [] __key.0+0x0/0x40 [ 320.321241][T13444] ... acquired at: [ 320.325108][T13444] _raw_read_lock_irqsave+0x74/0x90 [ 320.330476][T13444] kill_fasync+0x138/0x510 [ 320.335057][T13444] evdev_pass_values+0x619/0x9b0 [ 320.340163][T13444] evdev_events+0x1bb/0x390 [ 320.344831][T13444] input_pass_values+0x74e/0x880 [ 320.349932][T13444] input_handle_event+0xf00/0x14d0 [ 320.355216][T13444] input_inject_event+0x1e8/0x3b0 [ 320.360432][T13444] evdev_write+0x457/0x750 [ 320.365034][T13444] vfs_write+0x2a0/0x11d0 [ 320.369529][T13444] ksys_write+0x1f8/0x250 [ 320.374015][T13444] do_syscall_64+0xcd/0xfa0 [ 320.378692][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.384764][T13444] [ 320.387075][T13444] -> (&f_owner->lock){....}-{3:3} { [ 320.392275][T13444] INITIAL USE at: [ 320.396151][T13444] lock_acquire+0x179/0x350 [ 320.402200][T13444] _raw_write_lock_irq+0x36/0x50 [ 320.408699][T13444] __f_setown+0x61/0x3c0 [ 320.414495][T13444] fcntl_dirnotify+0x7b1/0xb60 [ 320.420814][T13444] do_fcntl+0xe62/0x15a0 [ 320.426620][T13444] __x64_sys_fcntl+0x163/0x200 [ 320.432947][T13444] do_syscall_64+0xcd/0xfa0 [ 320.439006][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.446449][T13444] INITIAL READ USE at: [ 320.450762][T13444] lock_acquire+0x179/0x350 [ 320.457262][T13444] _raw_read_lock_irqsave+0x74/0x90 [ 320.464455][T13444] send_sigio+0x31/0x3e0 [ 320.470691][T13444] dnotify_handle_event+0x15e/0x2b0 [ 320.477882][T13444] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 320.486280][T13444] fsnotify+0x13d6/0x1dc0 [ 320.492621][T13444] vfs_readv+0x7a6/0x8b0 [ 320.498852][T13444] do_preadv+0x1a6/0x270 [ 320.505081][T13444] do_syscall_64+0xcd/0xfa0 [ 320.511566][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.519501][T13444] } [ 320.521979][T13444] ... key at: [] __key.1+0x0/0x40 [ 320.529080][T13444] ... acquired at: [ 320.532858][T13444] _raw_read_lock_irqsave+0x74/0x90 [ 320.538221][T13444] send_sigio+0x31/0x3e0 [ 320.542624][T13444] kill_fasync+0x214/0x510 [ 320.547203][T13444] lease_break_callback+0x23/0x30 [ 320.552391][T13444] __break_lease+0x674/0x1810 [ 320.557254][T13444] do_dentry_open+0x91f/0x1530 [ 320.562173][T13444] vfs_open+0x82/0x3f0 [ 320.566400][T13444] path_openat+0x1de4/0x2cb0 [ 320.571147][T13444] do_filp_open+0x20b/0x470 [ 320.575807][T13444] do_sys_openat2+0x11b/0x1d0 [ 320.580647][T13444] __x64_sys_openat+0x174/0x210 [ 320.585678][T13444] do_syscall_64+0xcd/0xfa0 [ 320.590334][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.596382][T13444] [ 320.598683][T13444] [ 320.598683][T13444] the dependencies between the lock to be acquired [ 320.598691][T13444] and SOFTIRQ-irq-unsafe lock: [ 320.612159][T13444] -> (tasklist_lock){.+.+}-{3:3} { [ 320.617270][T13444] HARDIRQ-ON-R at: [ 320.621232][T13444] lock_acquire+0x179/0x350 [ 320.627369][T13444] _raw_read_lock+0x5f/0x70 [ 320.633528][T13444] __do_wait+0x105/0x890 [ 320.639444][T13444] do_wait+0x21d/0x590 [ 320.645175][T13444] kernel_wait+0x9f/0x160 [ 320.651145][T13444] call_usermodehelper_exec_work+0xf1/0x170 [ 320.658675][T13444] process_one_work+0x9cf/0x1b70 [ 320.665255][T13444] worker_thread+0x6c8/0xf10 [ 320.671487][T13444] kthread+0x3c5/0x780 [ 320.677189][T13444] ret_from_fork+0x675/0x7d0 [ 320.683416][T13444] ret_from_fork_asm+0x1a/0x30 [ 320.689824][T13444] SOFTIRQ-ON-R at: [ 320.693786][T13444] lock_acquire+0x179/0x350 [ 320.699922][T13444] _raw_read_lock+0x5f/0x70 [ 320.706071][T13444] __do_wait+0x105/0x890 [ 320.711955][T13444] do_wait+0x21d/0x590 [ 320.717662][T13444] kernel_wait+0x9f/0x160 [ 320.723621][T13444] call_usermodehelper_exec_work+0xf1/0x170 [ 320.731150][T13444] process_one_work+0x9cf/0x1b70 [ 320.737724][T13444] worker_thread+0x6c8/0xf10 [ 320.743954][T13444] kthread+0x3c5/0x780 [ 320.749655][T13444] ret_from_fork+0x675/0x7d0 [ 320.755875][T13444] ret_from_fork_asm+0x1a/0x30 [ 320.762283][T13444] INITIAL USE at: [ 320.766160][T13444] lock_acquire+0x179/0x350 [ 320.772213][T13444] _raw_write_lock_irq+0x36/0x50 [ 320.778707][T13444] copy_process+0x4fe3/0x76a0 [ 320.784943][T13444] kernel_clone+0xfc/0x930 [ 320.790910][T13444] user_mode_thread+0xc8/0x110 [ 320.797226][T13444] rest_init+0x23/0x2b0 [ 320.802932][T13444] start_kernel+0x3f6/0x4e0 [ 320.808987][T13444] x86_64_start_reservations+0x18/0x30 [ 320.815998][T13444] x86_64_start_kernel+0x130/0x190 [ 320.822663][T13444] common_startup_64+0x13e/0x148 [ 320.829237][T13444] INITIAL READ USE at: [ 320.833544][T13444] lock_acquire+0x179/0x350 [ 320.840031][T13444] _raw_read_lock+0x5f/0x70 [ 320.846522][T13444] __do_wait+0x105/0x890 [ 320.852753][T13444] do_wait+0x21d/0x590 [ 320.858808][T13444] kernel_wait+0x9f/0x160 [ 320.865115][T13444] call_usermodehelper_exec_work+0xf1/0x170 [ 320.872995][T13444] process_one_work+0x9cf/0x1b70 [ 320.880006][T13444] worker_thread+0x6c8/0xf10 [ 320.886590][T13444] kthread+0x3c5/0x780 [ 320.892635][T13444] ret_from_fork+0x675/0x7d0 [ 320.899203][T13444] ret_from_fork_asm+0x1a/0x30 [ 320.905953][T13444] } [ 320.908429][T13444] ... key at: [] tasklist_lock+0x18/0x40 [ 320.916144][T13444] ... acquired at: [ 320.919925][T13444] lock_acquire+0x179/0x350 [ 320.924580][T13444] _raw_read_lock+0x5f/0x70 [ 320.929250][T13444] send_sigurg+0xed/0xc80 [ 320.933742][T13444] sk_send_sigurg+0x76/0x360 [ 320.938493][T13444] unix_stream_sendmsg+0xfa5/0x1340 [ 320.943851][T13444] ____sys_sendmsg+0xa98/0xc70 [ 320.948802][T13444] ___sys_sendmsg+0x134/0x1d0 [ 320.953642][T13444] __sys_sendmmsg+0x200/0x420 [ 320.958599][T13444] __x64_sys_sendmmsg+0x9c/0x100 [ 320.963714][T13444] do_syscall_64+0xcd/0xfa0 [ 320.968380][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.974528][T13444] [ 320.976839][T13444] [ 320.976839][T13444] stack backtrace: [ 320.982727][T13444] CPU: 1 UID: 0 PID: 13444 Comm: syz.4.2972 Not tainted syzkaller #0 PREEMPT(full) [ 320.982753][T13444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.982770][T13444] Call Trace: [ 320.982778][T13444] [ 320.982787][T13444] dump_stack_lvl+0x116/0x1f0 [ 320.982810][T13444] check_irq_usage+0x7dc/0x920 [ 320.982846][T13444] ? check_path.constprop.0+0x24/0x50 [ 320.982876][T13444] ? __lock_acquire+0x1285/0x1c90 [ 320.982892][T13444] __lock_acquire+0x1285/0x1c90 [ 320.982910][T13444] ? find_held_lock+0x2b/0x80 [ 320.982935][T13444] lock_acquire+0x179/0x350 [ 320.982951][T13444] ? send_sigurg+0xed/0xc80 [ 320.982985][T13444] _raw_read_lock+0x5f/0x70 [ 320.983013][T13444] ? send_sigurg+0xed/0xc80 [ 320.983035][T13444] send_sigurg+0xed/0xc80 [ 320.983058][T13444] ? find_held_lock+0x2b/0x80 [ 320.983083][T13444] sk_send_sigurg+0x76/0x360 [ 320.983107][T13444] unix_stream_sendmsg+0xfa5/0x1340 [ 320.983133][T13444] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 320.983159][T13444] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 320.983187][T13444] ____sys_sendmsg+0xa98/0xc70 [ 320.983206][T13444] ? copy_msghdr_from_user+0x10a/0x160 [ 320.983231][T13444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.983251][T13444] ? find_held_lock+0x2b/0x80 [ 320.983273][T13444] ? futex_unqueue+0x133/0x2c0 [ 320.983305][T13444] ___sys_sendmsg+0x134/0x1d0 [ 320.983329][T13444] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.983360][T13444] ? find_held_lock+0x2b/0x80 [ 320.983389][T13444] __sys_sendmmsg+0x200/0x420 [ 320.983415][T13444] ? __pfx___sys_sendmmsg+0x10/0x10 [ 320.983443][T13444] ? __pfx_do_futex+0x10/0x10 [ 320.983467][T13444] ? xfd_validate_state+0x61/0x180 [ 320.983492][T13444] __x64_sys_sendmmsg+0x9c/0x100 [ 320.983512][T13444] ? lockdep_hardirqs_on+0x7c/0x110 [ 320.983528][T13444] do_syscall_64+0xcd/0xfa0 [ 320.983546][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.983565][T13444] RIP: 0033:0x7f2cc4f8f6c9 [ 320.983580][T13444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.983599][T13444] RSP: 002b:00007f2cc5e6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 320.983617][T13444] RAX: ffffffffffffffda RBX: 00007f2cc51e5fa0 RCX: 00007f2cc4f8f6c9 [ 320.983630][T13444] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 320.983642][T13444] RBP: 00007f2cc5011f91 R08: 0000000000000000 R09: 0000000000000000 [ 320.983653][T13444] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 320.983665][T13444] R13: 00007f2cc51e6038 R14: 00007f2cc51e5fa0 R15: 00007fff2d287a28 [ 320.983684][T13444] [ 320.983808][ T870] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 321.006409][ T30] audit: type=1326 audit(1763494545.039:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 321.278481][ T30] audit: type=1326 audit(1763494545.039:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 321.295767][ T870] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 321.302264][ T30] audit: type=1326 audit(1763494545.049:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 321.314159][ T870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.335197][ T30] audit: type=1326 audit(1763494545.049:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 321.368592][ T30] audit: type=1326 audit(1763494545.049:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.3.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78c18f6c9 code=0x7ffc0000 [ 321.404706][ T870] usb 4-1: config 0 descriptor?? [ 321.826306][ T870] usbhid 4-1:0.0: can't add hid device: -71 [ 321.836517][ T870] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 321.852381][ T870] usb 4-1: USB disconnect, device number 26 [ 324.871138][ T5184] udevd[5184]: worker [5813] /devices/virtual/block/nbd0 timeout; kill it [ 324.880416][ T5184] udevd[5184]: seq 11825 '/devices/virtual/block/nbd0' killed