last executing test programs: 1m22.031823293s ago: executing program 4 (id=1216): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) 1m21.222206876s ago: executing program 4 (id=1229): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00)=0xfdfd) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143083) 1m21.112602244s ago: executing program 4 (id=1232): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8, &(0x7f00000005c0), 0x2, 0xa}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 1m20.904990284s ago: executing program 4 (id=1235): pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 1m20.696135362s ago: executing program 4 (id=1239): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x184) 1m20.503676291s ago: executing program 4 (id=1243): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000029c0)={0xc, {"a2e3ad214fc7529b1b5f470787f70e06d038e7ff7fc6e5539b3267078b089b3b083841090890e0878f0e1ac6e70a9b334a959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31340d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ed30c000000000000040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85824056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000007008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07845754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f5d6d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9ef6d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcdddd754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfbb655548cf99c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad03f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a12810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de0ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac34b308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2dd9bb96e222d8e904f6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39e3313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb9957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 1m5.4611368s ago: executing program 32 (id=1243): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) 10.385823121s ago: executing program 3 (id=2180): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000080)='syz1\x00') 10.007180914s ago: executing program 3 (id=2185): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acb"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 7.345892016s ago: executing program 3 (id=2204): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000000)=0x18) 5.803221754s ago: executing program 3 (id=2217): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x74000000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 3.660582197s ago: executing program 2 (id=2233): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) 3.534169922s ago: executing program 1 (id=2235): symlink(&(0x7f0000000480)='.\x00', &(0x7f0000000040)='./file0\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x273) 3.348841487s ago: executing program 2 (id=2237): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) 2.89771587s ago: executing program 0 (id=2240): r0 = add_key$user(&(0x7f00000006c0), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000440)="3118a062c5e6f9b332e2f3006a9a29fcaff672ae900d6fa95c321004ea8844c7a92ca02b058250a07854dcfb2951b8ea60e3c13305cb31f9a5493befc04fb0be50cc07b31ecfb1baf775d8efd3f847d3392d421fe46244c6886cbb9ad6077b29e5fa3bfdf07a4515d5588050fde3c0f03ddda2ebe8649cf2a473b5069866bd0d8a78cf92c40574dd50446db139d9723e0d3753eb94c0fac0c409d1f208c29e115fba14d1e378ef478508ae2e37b64ca1826d14e1209183948dc754c1d92fdebf", 0xc0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000340)="8e", 0x1, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r0, r1}, 0x0, 0x0, 0x0) 2.74688032s ago: executing program 0 (id=2241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x2, 0x0, 0x0, 0x1000, {[@md5sig={0x13, 0x12, "2313a3101166d6c856214c013c019043"}, @generic={0x13, 0xf, "d0ec52ee559766e131b50c7780"}, @sack={0x5, 0xe, [0x5, 0x3, 0x20]}, @sack={0x5, 0x12, [0xfffe, 0x8, 0x9, 0x17]}]}}}}}}}, 0x0) 2.622079295s ago: executing program 3 (id=2242): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x24002, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d6010100c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a5658d6cb833e7000", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f00", [0x3]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x55d) 2.526850235s ago: executing program 1 (id=2243): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x203, 0x70bd26, 0x25dfdc01}, 0x14}}, 0x20000840) 2.479748167s ago: executing program 0 (id=2244): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 2.225216861s ago: executing program 1 (id=2245): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r1 = syz_open_dev$video(&(0x7f0000003d00), 0x9, 0x0) read(r1, &(0x7f0000000d00)=""/132, 0x84) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x1, 0x8, 0x10001, 0x80080}) 2.218162547s ago: executing program 0 (id=2246): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) 1.859010805s ago: executing program 1 (id=2247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80147, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) 1.851574833s ago: executing program 0 (id=2248): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 1.804280441s ago: executing program 5 (id=2249): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 1.636989161s ago: executing program 2 (id=2250): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000240)={0x18, 0x2, 0x6}) 1.588693323s ago: executing program 3 (id=2251): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) read(r1, &(0x7f0000000080)=""/128, 0x80) syz_usb_disconnect(r0) 1.438027167s ago: executing program 2 (id=2252): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bd4e54d45303aaaaaaaaaa000806000100000604"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.095095158s ago: executing program 2 (id=2253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f54503"]) 940.529503ms ago: executing program 5 (id=2254): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000000)) 779.659998ms ago: executing program 5 (id=2255): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x9782, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, 0x0) 652.422453ms ago: executing program 5 (id=2256): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000040), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x38, r1, 0xeeeeeeee}) 484.295709ms ago: executing program 0 (id=2257): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setuid(0xee00) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 456.193868ms ago: executing program 5 (id=2258): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = dup2(r0, r1) sendto$inet6(r2, &(0x7f0000000000)="7800000018001f05b9409b0dffff000d0203be040205060506014007040012000f000000fac8388827a685a168d9a4c6040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400040012000a00000000000000000000080756ede4ccbe5880", 0x78, 0x0, 0x0, 0x0) 293.365521ms ago: executing program 1 (id=2259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)={0x20, r1, 0x405, 0x70bd24, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 208.699878ms ago: executing program 5 (id=2260): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x101600, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 97.599289ms ago: executing program 1 (id=2261): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5f67, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000540)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0) 0s ago: executing program 2 (id=2262): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a001000ff04ff08"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) kernel console output (not intermixed with test programs): =0c45, idProduct=1010, bcdDevice=49.8e [ 118.086208][ T971] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 118.101663][ T971] usb 5-1: Product: syz [ 118.105850][ T971] usb 5-1: Manufacturer: syz [ 118.118911][ T971] usb 5-1: SerialNumber: syz [ 118.131826][ T971] usb 5-1: config 0 descriptor?? [ 118.160596][ T971] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 118.200152][ T30] audit: type=1400 audit(1744023244.308:464): avc: denied { create } for pid=7917 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 118.262459][ T30] audit: type=1400 audit(1744023244.318:465): avc: denied { connect } for pid=7917 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 118.463606][ T9] usb 5-1: USB disconnect, device number 10 [ 118.482590][ T9] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 118.560161][ T5911] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 118.710320][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 118.720840][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.742638][ T5911] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.00 [ 118.751858][ T5869] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 118.760503][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.773851][ T5911] usb 4-1: config 0 descriptor?? [ 118.934209][ T5869] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 118.946501][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.954809][ T5869] usb 1-1: Product: syz [ 118.959215][ T5869] usb 1-1: Manufacturer: syz [ 118.966314][ T5869] usb 1-1: SerialNumber: syz [ 118.979584][ T5869] usb 1-1: config 0 descriptor?? [ 119.001226][ T5869] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 119.033536][ T971] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 119.195199][ T971] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.222177][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 384, setting to 64 [ 119.236890][ T5911] hid-generic 0003:0DFC:0106.0019: hidraw0: USB HID v0.00 Device [HID 0dfc:0106] on usb-dummy_hcd.3-1/input0 [ 119.251488][ T971] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 119.270589][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.284097][ T7978] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[7978] [ 119.296281][ T971] usb 3-1: Product: syz [ 119.303524][ T971] usb 3-1: Manufacturer: syz [ 119.308146][ T971] usb 3-1: SerialNumber: syz [ 119.319650][ T971] usb 3-1: config 0 descriptor?? [ 119.334820][ T7952] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 119.429371][ T5873] usb 4-1: USB disconnect, device number 8 [ 119.453819][ T971] rc_core: IR keymap rc-streamzap not found [ 119.464580][ T971] Registered IR keymap rc-empty [ 119.499746][ T971] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 119.532484][ T971] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 119.576995][ T7991] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 119.578232][ T971] usb 3-1: USB disconnect, device number 12 [ 119.678676][ T5911] usb 1-1: USB disconnect, device number 7 [ 119.790437][ T30] audit: type=1400 audit(1744023245.908:466): avc: denied { ioctl } for pid=7998 comm="syz.4.929" path="socket:[14017]" dev="sockfs" ino=14017 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.104451][ T8009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.934'. [ 120.394681][ T8019] mmap: syz.3.939 (8019) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.406727][ T5869] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 120.426762][ T30] audit: type=1400 audit(1744023246.538:467): avc: denied { read write } for pid=8014 comm="syz.2.937" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 120.454798][ T30] audit: type=1400 audit(1744023246.538:468): avc: denied { open } for pid=8014 comm="syz.2.937" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 120.588540][ T5869] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 120.606800][ T5869] usb 5-1: config 0 has no interface number 0 [ 120.629368][ T5869] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 120.656274][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.669728][ T5869] usb 5-1: Product: syz [ 120.676272][ T5869] usb 5-1: Manufacturer: syz [ 120.690123][ T5869] usb 5-1: SerialNumber: syz [ 120.699159][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.2.943'. [ 120.712923][ T5869] usb 5-1: config 0 descriptor?? [ 120.952938][ T5869] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 120.961560][ T8048] can0: slcan on ptm0. [ 120.999770][ T5869] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 121.024650][ T5869] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 121.043511][ T8047] can0 (unregistered): slcan off ptm0. [ 121.049013][ T5869] usb 5-1: media controller created [ 121.081014][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.477907][ T971] usb 5-1: USB disconnect, device number 11 [ 121.544550][ T8033] orangefs_mount: mount request failed with -4 [ 121.582642][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.963'. [ 121.597948][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.963'. [ 121.609365][ T8082] netlink: 'syz.3.963': attribute type 14 has an invalid length. [ 121.980192][ T971] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 122.030271][ T5911] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 122.130668][ T971] usb 3-1: Using ep0 maxpacket: 32 [ 122.166849][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.175635][ T30] audit: type=1326 audit(1744023248.278:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3767f8d169 code=0x7ffc0000 [ 122.203163][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.241828][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.252864][ T971] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 122.252891][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.261131][ T971] usb 3-1: config 0 descriptor?? [ 122.298583][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 122.300387][ T30] audit: type=1326 audit(1744023248.278:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3767f8d169 code=0x7ffc0000 [ 122.331751][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 122.342361][ T30] audit: type=1326 audit(1744023248.318:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f3767f8d169 code=0x7ffc0000 [ 122.368366][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.405053][ T5911] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 122.437073][ T30] audit: type=1326 audit(1744023248.318:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3767f8d169 code=0x7ffc0000 [ 122.446223][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.508032][ T5911] usb 2-1: config 0 descriptor?? [ 122.513401][ T30] audit: type=1326 audit(1744023248.318:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f3767f8d169 code=0x7ffc0000 [ 122.536574][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.537289][ T8097] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 122.542755][ T5873] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 122.564864][ T30] audit: type=1326 audit(1744023248.328:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3767f8d169 code=0x7ffc0000 [ 122.588086][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.709915][ T971] savu 0003:1E7D:2D5A.001A: item fetching failed at offset 5/8 [ 122.717669][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 122.726777][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.739494][ T971] savu 0003:1E7D:2D5A.001A: parse failed [ 122.749970][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.774245][ T971] savu 0003:1E7D:2D5A.001A: probe with driver savu failed with error -22 [ 122.786011][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.818071][ T5873] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 122.828785][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.855579][ T8147] overlayfs: missing 'lowerdir' [ 122.857645][ T5873] usb 4-1: config 0 descriptor?? [ 122.944420][ T9] usb 3-1: USB disconnect, device number 13 [ 122.989191][ T5911] aureal 0003:0755:2626.001B: unknown main item tag 0x6 [ 123.001501][ T5911] aureal 0003:0755:2626.001B: report_id 29495 is invalid [ 123.009184][ T5911] aureal 0003:0755:2626.001B: item 0 2 1 8 parsing failed [ 123.022899][ T5911] aureal 0003:0755:2626.001B: probe with driver aureal failed with error -22 [ 123.055493][ T8155] sp0: Synchronizing with TNC [ 123.077487][ T8154] [U] ` [ 123.167060][ T8162] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 123.194646][ T30] audit: type=1326 audit(1744023249.308:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8163 comm="syz.0.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2d8d169 code=0x7ffc0000 [ 123.217866][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.267490][ T971] usb 2-1: USB disconnect, device number 11 [ 123.288980][ T5873] hid-picolcd 0003:04D8:C002.001C: reserved main item tag 0xe [ 123.355358][ T5873] hid-picolcd 0003:04D8:C002.001C: No report with id 0x11 found [ 123.510220][ T8182] block nbd4: not configured, cannot reconfigure [ 123.533036][ T5873] usb 4-1: USB disconnect, device number 9 [ 124.223591][ T5911] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 124.308786][ T8223] vcan0: MTU too low for tipc bearer [ 124.325342][ T8223] tipc: Enabling of bearer rejected, failed to enable media [ 124.402299][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 124.437207][ T5911] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 124.449003][ T5911] usb 5-1: config 0 has no interface number 0 [ 124.468440][ T5911] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 124.496571][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.530774][ T5911] usb 5-1: Product: syz [ 124.542371][ T5911] usb 5-1: Manufacturer: syz [ 124.550853][ T5911] usb 5-1: SerialNumber: syz [ 124.566843][ T5911] usb 5-1: config 0 descriptor?? [ 124.589673][ T5911] smsc95xx v2.0.0 [ 124.615796][ T8243] netlink: 'syz.3.1034': attribute type 27 has an invalid length. [ 124.762014][ T8251] program syz.3.1039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.813100][ T8255] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 124.832588][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 124.832602][ T30] audit: type=1400 audit(1744023250.948:485): avc: denied { create } for pid=8256 comm="syz.0.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.919124][ T30] audit: type=1400 audit(1744023250.978:486): avc: denied { setopt } for pid=8256 comm="syz.0.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.931295][ T8261] geneve2: entered promiscuous mode [ 124.968550][ T8261] geneve2: entered allmulticast mode [ 124.975847][ T30] audit: type=1400 audit(1744023251.098:487): avc: denied { bind } for pid=8263 comm="syz.0.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.030168][ T30] audit: type=1400 audit(1744023251.098:488): avc: denied { write } for pid=8263 comm="syz.0.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.200052][ T8277] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1051'. [ 125.212337][ T5911] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 125.248577][ T5911] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 125.265959][ T5911] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 125.288413][ T5911] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 125.297752][ T30] audit: type=1400 audit(1744023251.408:489): avc: denied { bind } for pid=8278 comm="syz.3.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.351510][ T5911] usb 5-1: USB disconnect, device number 12 [ 125.360902][ T30] audit: type=1400 audit(1744023251.408:490): avc: denied { node_bind } for pid=8278 comm="syz.3.1054" saddr=172.20.20.18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 125.436556][ T30] audit: type=1400 audit(1744023251.408:491): avc: denied { write } for pid=8278 comm="syz.3.1054" laddr=172.20.20.0 lport=40819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.458816][ T30] audit: type=1400 audit(1744023251.408:492): avc: denied { connect } for pid=8278 comm="syz.3.1054" laddr=172.20.20.0 lport=40819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.518530][ T30] audit: type=1400 audit(1744023251.408:493): avc: denied { name_connect } for pid=8278 comm="syz.3.1054" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 125.670177][ T5869] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 125.750428][ T24] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 125.770380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.794054][ T5829] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 125.834461][ T5869] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 125.854306][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.896407][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 125.912143][ T24] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 125.919574][ T5869] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 125.930291][ T24] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 125.952618][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 125.973188][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.977550][ T24] usb 1-1: config 1 has no interface number 0 [ 125.988883][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 126.015639][ T24] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 126.023130][ T5869] usb 2-1: config 0 descriptor?? [ 126.079118][ T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 126.098675][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.139484][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 126.484250][ T5869] waltop 0003:172F:0032.001D: hidraw0: USB HID vff.fd Device [HID 172f:0032] on usb-dummy_hcd.1-1/input0 [ 126.510421][ T30] audit: type=1400 audit(1744023252.608:494): avc: denied { bind } for pid=8346 comm="syz.2.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.703231][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 126.764295][ T974] usb 2-1: USB disconnect, device number 12 [ 126.858678][ T8367] netlink: 'syz.3.1085': attribute type 10 has an invalid length. [ 126.972452][ T24] usb 1-1: USB disconnect, device number 8 [ 126.994116][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 127.002748][ T8367] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.060435][ T8366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.123862][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'. [ 127.252430][ T8389] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.261342][ T8389] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.270024][ T8389] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.279399][ T8389] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.816352][ T8422] sp0: Synchronizing with TNC [ 127.832844][ T8421] [U] [ 128.076712][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'. [ 128.603216][ T8458] xt_time: unknown flags 0xc [ 128.751739][ T8465] Invalid ELF header magic: != ELF [ 128.806498][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1123'. [ 129.610619][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 129.774580][ T24] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.785900][ T24] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.800738][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 129.807362][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 129.826711][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.840877][ T24] usb 2-1: config 0 descriptor?? [ 129.851933][ T5827] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 129.860549][ T5827] Bluetooth: hci0: Injecting HCI hardware error event [ 129.930708][ T5829] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 129.930747][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.944738][ T5829] Bluetooth: hci0: hardware error 0x00 [ 130.255411][ T24] magicmouse 0003:05AC:0269.001E: item fetching failed at offset 5/7 [ 130.263898][ T24] magicmouse 0003:05AC:0269.001E: magicmouse hid parse failed [ 130.271787][ T24] magicmouse 0003:05AC:0269.001E: probe with driver magicmouse failed with error -22 [ 130.469056][ T24] usb 2-1: USB disconnect, device number 13 [ 131.061876][ T8517] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.071306][ T8517] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.080005][ T8517] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.089160][ T8517] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.280257][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1153'. [ 131.308753][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 131.308767][ T30] audit: type=1326 audit(1744023257.418:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8532 comm="syz.4.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3767f8d169 code=0x7ffc0000 [ 131.340906][ T8536] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 131.365897][ T30] audit: type=1326 audit(1744023257.418:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8532 comm="syz.4.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3767f8d169 code=0x7ffc0000 [ 131.450041][ T30] audit: type=1326 audit(1744023257.458:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8532 comm="syz.4.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3767f8d169 code=0x7ffc0000 [ 131.532759][ T30] audit: type=1326 audit(1744023257.458:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8532 comm="syz.4.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3767f8d169 code=0x7ffc0000 [ 131.609150][ T30] audit: type=1326 audit(1744023257.458:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8532 comm="syz.4.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3767f8d169 code=0x7ffc0000 [ 131.693552][ T30] audit: type=1326 audit(1744023257.458:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8532 comm="syz.4.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f3767f8d169 code=0x7ffc0000 [ 131.730215][ T30] audit: type=1326 audit(1744023257.458:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8532 comm="syz.4.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3767f8d169 code=0x7ffc0000 [ 131.799661][ T30] audit: type=1326 audit(1744023257.458:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8532 comm="syz.4.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3767f8d169 code=0x7ffc0000 [ 131.849371][ T8561] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1170'. [ 131.880490][ T5911] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 132.011270][ T5829] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 132.072431][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 132.087742][ T30] audit: type=1400 audit(1744023258.198:521): avc: denied { getopt } for pid=8578 comm="syz.1.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.109708][ T5911] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.123355][ T5911] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.155427][ T5911] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.166976][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.185923][ T5911] usb 1-1: Product: syz [ 132.218520][ T5911] usb 1-1: Manufacturer: syz [ 132.275990][ T5911] usb 1-1: SerialNumber: syz [ 132.320755][ T8591] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1181'. [ 132.332154][ T8591] 0XD: renamed from gretap0 (while UP) [ 132.350259][ T8591] 0XD: entered allmulticast mode [ 132.355841][ T8591] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 132.413488][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.420943][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.728468][ T5911] usb 1-1: cannot find UAC_HEADER [ 132.781109][ T5911] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 132.798756][ T8619] Invalid ELF header magic: != ELF [ 132.807493][ T5911] usb 1-1: USB disconnect, device number 9 [ 132.979449][ T8630] syz.4.1195 (8630): /proc/8628/oom_adj is deprecated, please use /proc/8628/oom_score_adj instead. [ 133.043586][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.138344][ T8637] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1197'. [ 133.160219][ T8637] 0XD: renamed from gretap0 (while UP) [ 133.179570][ T8637] 0XD: entered allmulticast mode [ 133.190060][ T8637] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 133.640251][ T5869] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 133.753329][ T30] audit: type=1326 audit(1744023259.868:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.3.1217" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f8178d169 code=0x0 [ 133.850910][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 133.862343][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 133.884707][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'. [ 133.905049][ T5869] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 133.926189][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.954240][ T5869] usb 1-1: Product: syz [ 133.958445][ T5869] usb 1-1: Manufacturer: syz [ 133.973466][ T5869] usb 1-1: SerialNumber: syz [ 133.988903][ T5869] usb 1-1: config 0 descriptor?? [ 134.001829][ T5869] hub 1-1:0.0: bad descriptor, ignoring hub [ 134.010728][ T5869] hub 1-1:0.0: probe with driver hub failed with error -5 [ 134.043651][ T5869] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 134.430567][ T5869] usb 1-1: USB disconnect, device number 10 [ 134.540169][ T974] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 134.710157][ T974] usb 3-1: Using ep0 maxpacket: 16 [ 134.728964][ T974] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 134.739088][ T974] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 134.766736][ T974] usb 3-1: Product: syz [ 134.783264][ T974] usb 3-1: Manufacturer: syz [ 134.790322][ T974] usb 3-1: SerialNumber: syz [ 134.804575][ T974] usb 3-1: config 0 descriptor?? [ 135.131243][ T974] usb 3-1: USB disconnect, device number 14 [ 135.530225][ T5869] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 135.690236][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 135.697351][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.718587][ T5869] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 135.733117][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.740387][ T5873] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 135.760473][ T5869] usb 1-1: config 0 descriptor?? [ 135.901700][ T5873] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 135.917151][ T5873] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 135.940174][ T5873] usb 2-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 135.960170][ T5873] usb 2-1: config 220 has no interface number 2 [ 135.973696][ T5873] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 136.000702][ T5873] usb 2-1: config 220 interface 0 has no altsetting 0 [ 136.007530][ T5873] usb 2-1: config 220 interface 76 has no altsetting 0 [ 136.030242][ T5873] usb 2-1: config 220 interface 1 has no altsetting 0 [ 136.048928][ T5873] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 136.068841][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.080584][ T5873] usb 2-1: Product: syz [ 136.085183][ T5873] usb 2-1: Manufacturer: syz [ 136.099965][ T5873] usb 2-1: SerialNumber: syz [ 136.177888][ T5869] lenovo 0003:17EF:6009.001F: unknown main item tag 0x0 [ 136.200275][ T5869] lenovo 0003:17EF:6009.001F: unknown main item tag 0x0 [ 136.220450][ T5869] lenovo 0003:17EF:6009.001F: unknown main item tag 0x0 [ 136.240631][ T5869] lenovo 0003:17EF:6009.001F: unknown main item tag 0x0 [ 136.247625][ T5869] lenovo 0003:17EF:6009.001F: unknown main item tag 0x0 [ 136.267554][ T5869] lenovo 0003:17EF:6009.001F: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.0-1/input0 [ 136.352820][ T5873] usb 2-1: selecting invalid altsetting 0 [ 136.374961][ T5873] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 136.383783][ T5869] usb 1-1: USB disconnect, device number 11 [ 136.398643][ T5873] usb 2-1: No valid video chain found. [ 136.441272][ T5873] usb 2-1: selecting invalid altsetting 0 [ 136.449462][ T5873] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 136.482994][ T5873] usb 2-1: USB disconnect, device number 14 [ 137.441126][ T5873] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 137.520191][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 137.601530][ T5873] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 137.690351][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.732065][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.752974][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 137.760123][ T5873] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 137.783422][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 137.820248][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.822660][ T5873] usb 2-1: New USB device found, idVendor=046d, idProduct=c713, bcdDevice= 0.00 [ 137.876032][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.902013][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 137.911005][ T5873] usb 2-1: config 0 descriptor?? [ 138.092025][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 138.092040][ T30] audit: type=1400 audit(1744023264.208:525): avc: denied { bind } for pid=8825 comm="syz.2.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 138.198321][ T30] audit: type=1400 audit(1744023264.208:526): avc: denied { name_bind } for pid=8825 comm="syz.2.1276" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 138.209271][ T8828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1277'. [ 138.249504][ T30] audit: type=1400 audit(1744023264.208:527): avc: denied { node_bind } for pid=8825 comm="syz.2.1276" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 138.334501][ T5873] logitech-djreceiver 0003:046D:C713.0020: item fetching failed at offset 2/3 [ 138.346589][ T5873] logitech-djreceiver 0003:046D:C713.0020: logi_dj_probe: parse failed [ 138.356608][ T5873] logitech-djreceiver 0003:046D:C713.0020: probe with driver logitech-djreceiver failed with error -22 [ 138.627234][ T24] usb 2-1: USB disconnect, device number 15 [ 138.630225][ T8838] netlink: 'syz.2.1281': attribute type 2 has an invalid length. [ 138.700977][ T8838] netlink: 'syz.2.1281': attribute type 2 has an invalid length. [ 138.977022][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 139.017333][ T9] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 139.045129][ T9] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 139.052545][ T5829] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 139.272442][ T30] audit: type=1400 audit(1744023265.388:528): avc: denied { read write } for pid=8846 comm="syz.1.1285" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 139.341606][ T974] usb 4-1: USB disconnect, device number 10 [ 139.365232][ T30] audit: type=1400 audit(1744023265.388:529): avc: denied { open } for pid=8846 comm="syz.1.1285" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 139.863371][ T30] audit: type=1400 audit(1744023265.978:530): avc: denied { bind } for pid=8860 comm="syz.1.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.095250][ T30] audit: type=1400 audit(1744023266.208:531): avc: denied { connect } for pid=8866 comm="syz.0.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 140.114894][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.470215][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 140.631552][ T24] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 140.660149][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.685558][ T24] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 140.703295][ T24] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 140.739570][ T24] usb 1-1: Manufacturer: syz [ 140.760236][ T24] usb 1-1: config 0 descriptor?? [ 140.880176][ T24] rc_core: IR keymap rc-hauppauge not found [ 140.889317][ T24] Registered IR keymap rc-empty [ 140.906401][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 140.934195][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 140.935852][ T30] audit: type=1400 audit(1744023267.038:532): avc: denied { mount } for pid=8903 comm="syz.1.1311" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 140.967086][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.978650][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 141.071458][ T30] audit: type=1400 audit(1744023267.048:533): avc: denied { remount } for pid=8903 comm="syz.1.1311" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 141.102553][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 141.111969][ T974] usb 1-1: USB disconnect, device number 13 [ 141.160861][ T30] audit: type=1400 audit(1744023267.078:534): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 141.180769][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.690828][ T974] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 141.810157][ T971] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 141.850464][ T974] usb 2-1: Using ep0 maxpacket: 16 [ 141.856972][ T974] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 141.870116][ T974] usb 2-1: config 0 has no interface number 0 [ 141.876233][ T974] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 141.917789][ T974] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 141.943832][ T974] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 141.953148][ T974] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 141.971085][ T974] usb 2-1: Product: syz [ 141.975364][ T974] usb 2-1: SerialNumber: syz [ 141.992972][ T971] usb 3-1: Using ep0 maxpacket: 8 [ 141.995987][ T974] usb 2-1: config 0 descriptor?? [ 142.014209][ T971] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 142.016834][ T974] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 142.042588][ T971] usb 3-1: config 6 has no interface number 0 [ 142.048727][ T971] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 142.051875][ T974] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input12 [ 142.088994][ T971] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.126185][ T971] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 142.151110][ T971] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 142.175947][ T971] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 142.187630][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.205941][ T971] usb 3-1: Product: syz [ 142.216048][ T971] usb 3-1: Manufacturer: syz [ 142.226171][ T971] usb 3-1: SerialNumber: syz [ 142.258429][ T971] hso 3-1:6.2: Failed to find BULK IN ep [ 142.385080][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 142.388473][ T971] usb 2-1: USB disconnect, device number 16 [ 142.392062][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 142.451865][ T971] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 142.523945][ T974] usb 3-1: USB disconnect, device number 15 [ 142.546681][ T8954] tipc: Started in network mode [ 142.558222][ T8954] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 142.581676][ T8954] tipc: Enabled bearer , priority 0 [ 142.763436][ T8962] SELinux: security policydb version 18 (MLS) not backwards compatible [ 142.776516][ T8962] SELinux: failed to load policy [ 142.940583][ T971] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 142.997097][ T8968] sp0: Synchronizing with TNC [ 143.009603][ T8967] [U] [ 143.092479][ T971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.114465][ T971] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 143.141446][ T971] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 143.165487][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.190694][ T971] usb 4-1: config 0 descriptor?? [ 143.212400][ T971] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 143.232969][ T971] dvb-usb: bulk message failed: -22 (3/0) [ 143.253877][ T971] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 143.278373][ T971] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 143.300751][ T971] usb 4-1: media controller created [ 143.317742][ T971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.355311][ T971] dvb-usb: bulk message failed: -22 (6/0) [ 143.370626][ T5873] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 143.378362][ T971] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 143.408751][ T971] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 143.425761][ T8960] dibusb: i2c wr: len=62 is too big! [ 143.425761][ T8960] [ 143.442140][ T971] dvb-usb: schedule remote query interval to 150 msecs. [ 143.449123][ T971] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 143.501809][ T971] usb 4-1: USB disconnect, device number 11 [ 143.536329][ T971] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 143.544782][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 143.562258][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.577697][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.600285][ T5873] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 143.609352][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.663566][ T5873] usb 3-1: config 0 descriptor?? [ 143.700896][ T24] tipc: Node number set to 10136234 [ 143.882294][ T974] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 143.897586][ T9000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1359'. [ 144.040147][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 144.052921][ T974] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.084267][ T5873] hkems 0003:2006:0118.0021: item fetching failed at offset 0/2 [ 144.092061][ T974] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.103366][ T5873] hkems 0003:2006:0118.0021: parse failed [ 144.109160][ T5873] hkems 0003:2006:0118.0021: probe with driver hkems failed with error -22 [ 144.119455][ T974] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 144.137032][ T974] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 144.154034][ T974] usb 2-1: Product: syz [ 144.158321][ T974] usb 2-1: Manufacturer: syz [ 144.194885][ T974] hub 2-1:4.0: USB hub found [ 144.312821][ T5869] usb 3-1: USB disconnect, device number 16 [ 144.415461][ T974] hub 2-1:4.0: 7 ports detected [ 144.427452][ T974] hub 2-1:4.0: insufficient power available to use all downstream ports [ 144.735712][ T9030] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 144.750630][ T9030] overlayfs: missing 'lowerdir' [ 144.808532][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 144.808547][ T30] audit: type=1400 audit(1744023270.918:541): avc: denied { connect } for pid=9031 comm="syz.0.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.847022][ T974] hub 2-1:4.0: set hub depth failed [ 144.885221][ T974] usb 2-1: USB disconnect, device number 17 [ 144.934269][ T9034] tipc: Enabling of bearer rejected, failed to enable media [ 145.120115][ T30] audit: type=1326 audit(1744023271.228:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8178d169 code=0x7ffc0000 [ 145.186704][ T30] audit: type=1326 audit(1744023271.228:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8178d169 code=0x7ffc0000 [ 145.271185][ T30] audit: type=1326 audit(1744023271.228:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f3f8178d169 code=0x7ffc0000 [ 145.350226][ T30] audit: type=1326 audit(1744023271.228:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8178d169 code=0x7ffc0000 [ 145.421032][ T30] audit: type=1326 audit(1744023271.228:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8178d169 code=0x7ffc0000 [ 145.630643][ T5869] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 145.814612][ T5869] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.840199][ T5869] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 145.870260][ T5869] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.879261][ T5869] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 145.910389][ T5869] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 145.946447][ T5869] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.968030][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 145.986311][ T5869] usb 1-1: Product: syz [ 145.996410][ T5869] usb 1-1: Manufacturer: syz [ 146.043535][ T5869] cdc_wdm 1-1:1.0: skipping garbage [ 146.049130][ T5869] cdc_wdm 1-1:1.0: skipping garbage [ 146.059347][ T5869] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 146.073617][ T5869] cdc_wdm 1-1:1.0: Unknown control protocol [ 146.354876][ T9093] overlayfs: lower data-only dirs require metacopy support. [ 146.488096][ T30] audit: type=1326 audit(1744023272.598:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.3.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8178d169 code=0x7ffc0000 [ 146.516622][ T9] usb 1-1: USB disconnect, device number 14 [ 146.545979][ T30] audit: type=1326 audit(1744023272.628:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.3.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8178d169 code=0x7ffc0000 [ 146.580205][ T5869] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 146.611640][ T30] audit: type=1326 audit(1744023272.628:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.3.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3f8178d169 code=0x7ffc0000 [ 146.655818][ T9101] use of bytesused == 0 is deprecated and will be removed in the future, [ 146.667070][ T9101] use the actual size instead. [ 146.671937][ T30] audit: type=1326 audit(1744023272.628:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.3.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8178d169 code=0x7ffc0000 [ 146.780893][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 146.802623][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.833957][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1412'. [ 146.836524][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.874641][ T5869] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 146.898303][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.923037][ T5869] usb 2-1: config 0 descriptor?? [ 146.977899][ T9115] netlink: 'syz.2.1415': attribute type 10 has an invalid length. [ 147.005641][ T9115] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 147.027595][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.141204][ T5873] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 147.312804][ T5873] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 147.324953][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.335874][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.345641][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 147.351844][ T5869] lua 0003:1E7D:2C2E.0022: unknown main item tag 0x1 [ 147.358637][ T5873] usb 4-1: New USB device found, idVendor=046d, idProduct=c713, bcdDevice= 0.00 [ 147.374629][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.384864][ T5873] usb 4-1: config 0 descriptor?? [ 147.395784][ T5869] lua 0003:1E7D:2C2E.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 147.451078][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 147.613685][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.636706][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 147.656006][ T9] usb 1-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 147.669096][ T971] usb 2-1: USB disconnect, device number 18 [ 147.674324][ T9] usb 1-1: Manufacturer: syz [ 147.688851][ T9] usb 1-1: SerialNumber: syz [ 147.703225][ T9] usb 1-1: config 0 descriptor?? [ 147.827483][ T5873] logitech-djreceiver 0003:046D:C713.0023: item fetching failed at offset 2/3 [ 147.843588][ T5873] logitech-djreceiver 0003:046D:C713.0023: logi_dj_probe: parse failed [ 147.870255][ T5873] logitech-djreceiver 0003:046D:C713.0023: probe with driver logitech-djreceiver failed with error -22 [ 147.952520][ T9] usb 1-1: USB disconnect, device number 15 [ 148.090516][ T5869] usb 4-1: USB disconnect, device number 12 [ 148.783232][ T9154] syz.0.1434 uses obsolete (PF_INET,SOCK_PACKET) [ 149.477040][ T9186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1449'. [ 149.839503][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 149.839517][ T30] audit: type=1400 audit(1744023275.948:555): avc: denied { setopt } for pid=9202 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 150.318220][ T9223] tipc: Enabled bearer , priority 10 [ 150.672822][ T30] audit: type=1400 audit(1744023276.788:556): avc: denied { kexec_image_load } for pid=9239 comm="syz.3.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 150.759900][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.769250][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.778017][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.793069][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.801538][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.818505][ T30] audit: type=1400 audit(1744023276.928:557): avc: denied { mounton } for pid=9245 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 151.167763][ T4508] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.188414][ T4508] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.248040][ T9245] chnl_net:caif_netlink_parms(): no params data found [ 151.271478][ T4508] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.284045][ T4508] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.534220][ T4508] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.559441][ T4508] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.585959][ T9276] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1489'. [ 151.652287][ T9245] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.669613][ T9245] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.679123][ T9245] bridge_slave_0: entered allmulticast mode [ 151.691388][ T9245] bridge_slave_0: entered promiscuous mode [ 151.708410][ T4508] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.725838][ T4508] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.741283][ T9] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 151.763870][ T9245] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.780252][ T9245] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.797659][ T9245] bridge_slave_1: entered allmulticast mode [ 151.811947][ T9245] bridge_slave_1: entered promiscuous mode [ 151.885266][ T9245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.898469][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 151.917017][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 151.929233][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 151.978044][ T9245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.999270][ T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 152.014119][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.035072][ T9] usb 2-1: Product: syz [ 152.039265][ T9] usb 2-1: Manufacturer: syz [ 152.077019][ T9] usb 2-1: SerialNumber: syz [ 152.098025][ T9] usb 2-1: config 0 descriptor?? [ 152.105010][ T9273] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.120514][ T9273] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.153194][ T9295] IPv6: addrconf: prefix option has invalid lifetime [ 152.184050][ T9] usb 2-1: ucan: probing device on interface #0 [ 152.194905][ T9245] team0: Port device team_slave_0 added [ 152.216132][ T9245] team0: Port device team_slave_1 added [ 152.230400][ T971] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 152.329301][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.339855][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.375812][ T9245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.403790][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.423506][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.432203][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.432821][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.458676][ T9245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.511753][ T971] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 152.512426][ T4508] bridge_slave_1: left allmulticast mode [ 152.527501][ T4508] bridge_slave_1: left promiscuous mode [ 152.530530][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.544823][ T4508] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.552958][ T971] usb 3-1: config 0 descriptor?? [ 152.580822][ T4508] bridge_slave_0: left allmulticast mode [ 152.586516][ T4508] bridge_slave_0: left promiscuous mode [ 152.598226][ T9] usb 2-1: ucan: device reported invalid device info [ 152.613720][ T9] usb 2-1: ucan: probe failed; try to update the device firmware [ 152.630951][ T4508] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.651824][ T5904] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 152.815925][ T5904] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 152.828990][ T9] usb 2-1: USB disconnect, device number 19 [ 152.829648][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.867171][ T5904] usb 1-1: Product: syz [ 152.878245][ T5904] usb 1-1: Manufacturer: syz [ 152.900027][ T5904] usb 1-1: SerialNumber: syz [ 152.900708][ T5829] Bluetooth: hci5: command tx timeout [ 152.907913][ T5904] usb 1-1: config 0 descriptor?? [ 152.968917][ T971] playstation 0003:054C:0DF2.0024: unknown main item tag 0x0 [ 153.009270][ T971] playstation 0003:054C:0DF2.0024: unknown main item tag 0x0 [ 153.043651][ T971] playstation 0003:054C:0DF2.0024: unknown main item tag 0x0 [ 153.052650][ T971] playstation 0003:054C:0DF2.0024: unknown main item tag 0x0 [ 153.064617][ T971] playstation 0003:054C:0DF2.0024: unknown main item tag 0x0 [ 153.078314][ T971] playstation 0003:054C:0DF2.0024: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 153.164577][ T5905] usb 1-1: USB disconnect, device number 16 [ 153.172998][ T971] playstation 0003:054C:0DF2.0024: Failed to retrieve feature with reportID 9: -71 [ 153.193679][ T971] playstation 0003:054C:0DF2.0024: Failed to retrieve DualSense pairing info: -71 [ 153.215837][ T971] playstation 0003:054C:0DF2.0024: Failed to get MAC address from DualSense [ 153.228990][ T971] playstation 0003:054C:0DF2.0024: Failed to create dualsense. [ 153.248057][ T971] playstation 0003:054C:0DF2.0024: probe with driver playstation failed with error -71 [ 153.273010][ T971] usb 3-1: USB disconnect, device number 17 [ 153.307410][ T4508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.328225][ T4508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.339117][ T4508] bond0 (unregistering): Released all slaves [ 153.509618][ T9245] hsr_slave_0: entered promiscuous mode [ 153.516476][ T9245] hsr_slave_1: entered promiscuous mode [ 153.526350][ T9245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.536977][ T9245] Cannot create hsr debugfs directory [ 153.695560][ T4508] hsr_slave_0: left promiscuous mode [ 153.716654][ T4508] hsr_slave_1: left promiscuous mode [ 153.730826][ T4508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.758077][ T4508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.773510][ T4508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.790662][ T4508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.831357][ T4508] veth1_macvtap: left promiscuous mode [ 153.837105][ T4508] veth0_macvtap: left promiscuous mode [ 153.851163][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1513'. [ 153.922071][ T5911] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 154.072440][ T9359] overlayfs: failed to resolve './file0': -2 [ 154.103064][ T5911] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.124389][ T5911] usb 2-1: config 0 has no interface number 0 [ 154.150328][ T5911] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 154.182794][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.211876][ T5911] usb 2-1: config 0 descriptor?? [ 154.218395][ T9364] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 154.239510][ T5911] usb 2-1: selecting invalid altsetting 1 [ 154.254472][ T5911] dvb_ttusb_budget: ttusb_init_controller: error [ 154.260983][ T9364] CUSE: unknown device info "3ܟ,̘" [ 154.266858][ T5911] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 154.279830][ T9364] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 154.279830][ T9364] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 154.301243][ T9364] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 154.345126][ T9364] CUSE: DEVNAME unspecified [ 154.414694][ T5911] DVB: Unable to find symbol cx22700_attach() [ 154.444664][ T30] audit: type=1400 audit(1744023280.558:558): avc: denied { setopt } for pid=9368 comm="syz.2.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.522405][ T5911] DVB: Unable to find symbol tda10046_attach() [ 154.776535][ T30] audit: type=1400 audit(1744023280.598:559): avc: denied { append } for pid=9336 comm="syz.1.1511" name="i2c-1" dev="devtmpfs" ino=2999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.800096][ T5911] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 154.835693][ T5911] usb 2-1: USB disconnect, device number 20 [ 154.848103][ T30] audit: type=1400 audit(1744023280.758:560): avc: denied { getopt } for pid=9372 comm="syz.2.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 154.970149][ T5829] Bluetooth: hci5: command tx timeout [ 155.016665][ T4508] team0 (unregistering): Port device team_slave_1 removed [ 155.096101][ T4508] team0 (unregistering): Port device team_slave_0 removed [ 155.383744][ T9360] syz.0.1516 (9360): drop_caches: 2 [ 155.529524][ T30] audit: type=1400 audit(1744023281.638:561): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 155.594550][ T30] audit: type=1400 audit(1744023281.708:562): avc: denied { allowed } for pid=9402 comm="syz.2.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 155.911419][ T5911] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 156.034390][ T9245] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 156.077575][ T9245] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 156.085564][ T5911] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 156.100441][ T5911] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 156.109339][ T5911] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 156.132574][ T5911] usb 3-1: config 220 has no interface number 2 [ 156.138900][ T5911] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 156.148610][ T9245] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 156.179524][ T9245] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 156.199916][ T5911] usb 3-1: config 220 interface 0 has no altsetting 0 [ 156.209427][ T5911] usb 3-1: config 220 interface 76 has no altsetting 0 [ 156.242288][ T5911] usb 3-1: config 220 interface 1 has no altsetting 0 [ 156.293808][ T5911] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 156.312610][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.326376][ T5911] usb 3-1: Product: syz [ 156.332540][ T5911] usb 3-1: Manufacturer: syz [ 156.338046][ T5911] usb 3-1: SerialNumber: syz [ 156.520644][ T9245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.574568][ T9245] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.594915][ T5911] usb 3-1: selecting invalid altsetting 0 [ 156.612138][ T5911] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 156.628732][ T5911] usb 3-1: No valid video chain found. [ 156.637101][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.644268][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.689953][ T5911] usb 3-1: selecting invalid altsetting 0 [ 156.697678][ T5911] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 156.711608][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.718782][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.734576][ T5911] usb 3-1: USB disconnect, device number 18 [ 156.843690][ T5905] IPVS: starting estimator thread 0... [ 156.919351][ T30] audit: type=1400 audit(1744023283.028:563): avc: denied { module_request } for pid=9245 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 156.950393][ T9457] IPVS: using max 48 ests per chain, 115200 per kthread [ 157.019230][ T30] audit: type=1400 audit(1744023283.118:564): avc: denied { bind } for pid=9462 comm="syz.3.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.051068][ T5829] Bluetooth: hci5: command tx timeout [ 157.236819][ T9245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.380166][ T5911] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 157.398069][ T9490] SELinux: syz.1.1561 (9490) set checkreqprot to 1. This is no longer supported. [ 157.550188][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 157.561308][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.598370][ T5911] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 157.630341][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.659219][ T5911] usb 1-1: config 0 descriptor?? [ 157.670302][ T974] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 157.690687][ T30] audit: type=1326 audit(1744023283.798:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.3.1565" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f8178d169 code=0x0 [ 157.785068][ T9245] veth0_vlan: entered promiscuous mode [ 157.830850][ T974] usb 3-1: Using ep0 maxpacket: 32 [ 157.836635][ T9245] veth1_vlan: entered promiscuous mode [ 157.847920][ T974] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 157.870010][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.888678][ T9245] veth0_macvtap: entered promiscuous mode [ 157.896283][ T974] usb 3-1: config 0 descriptor?? [ 157.900670][ T9245] veth1_macvtap: entered promiscuous mode [ 157.906666][ T974] gspca_main: sq930x-2.14.0 probing 041e:403c [ 157.919076][ T9245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.931634][ T9245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.941800][ T9245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.952698][ T9245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.962670][ T9245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.973239][ T9245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.983410][ T9245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.994155][ T9245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.006346][ T9245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.019126][ T9245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.030537][ T9245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.040792][ T9245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.051998][ T9245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.063006][ T9245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.073499][ T9245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.083445][ T9245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.094032][ T5905] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 158.101814][ T9245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.114742][ T9245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.133688][ T9245] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.133721][ T5911] hid-steam 0003:28DE:1102.0025: unknown main item tag 0x0 [ 158.143567][ T9245] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.152918][ T5911] hid-steam 0003:28DE:1102.0025: unknown main item tag 0x0 [ 158.159346][ T9245] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.167159][ T5911] hid-steam 0003:28DE:1102.0025: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 158.175486][ T9245] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.251742][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.255626][ T5911] hid-steam 0003:28DE:1102.0025: Steam Controller 'XXXXXXXXXX' connected [ 158.277894][ T5911] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0025/input/input16 [ 158.280385][ T5905] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 158.298862][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.310702][ T5911] hid-steam 0003:28DE:1102.0026: unknown main item tag 0x0 [ 158.314724][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.332106][ T5905] usb 2-1: config 0 descriptor?? [ 158.334296][ T5911] hid-steam 0003:28DE:1102.0026: unknown main item tag 0x0 [ 158.347939][ T5905] cp210x 2-1:0.0: cp210x converter detected [ 158.360043][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.366919][ T5911] hid-steam 0003:28DE:1102.0026: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 158.371027][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.434606][ T30] audit: type=1400 audit(1744023284.518:566): avc: denied { mounton } for pid=9245 comm="syz-executor" path="/root/syzkaller.RfKUPQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 158.479107][ T5911] usb 1-1: USB disconnect, device number 17 [ 158.558432][ T5911] hid-steam 0003:28DE:1102.0025: Steam Controller 'XXXXXXXXXX' disconnected [ 158.580168][ T974] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 158.586067][ T974] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 158.618106][ T974] usb 3-1: USB disconnect, device number 19 [ 158.723268][ T30] audit: type=1400 audit(1744023284.828:567): avc: denied { mount } for pid=9524 comm="syz.3.1569" name="/" dev="hugetlbfs" ino=21199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 158.757165][ T5905] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 158.770214][ T5905] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 158.818402][ T5905] usb 2-1: cp210x converter now attached to ttyUSB0 [ 158.829894][ T30] audit: type=1400 audit(1744023284.878:568): avc: denied { unmount } for pid=9524 comm="syz.3.1569" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 158.856763][ T5905] usb 2-1: USB disconnect, device number 21 [ 158.937613][ T5905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 158.965576][ T5905] cp210x 2-1:0.0: device disconnected [ 159.052220][ T30] audit: type=1400 audit(1744023285.148:569): avc: denied { append } for pid=9539 comm="syz.5.1573" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 159.139744][ T5829] Bluetooth: hci5: command tx timeout [ 161.265268][ T9616] syz.5.1600 (9616): drop_caches: 2 [ 161.277280][ T9616] syz.5.1600 (9616): drop_caches: 2 [ 161.441579][ T9656] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1614'. [ 161.623651][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1617'. [ 161.718574][ T9663] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.726763][ T9663] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.750807][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 161.857600][ T9663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.867671][ T9663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.910267][ T9663] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.919187][ T9663] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.930576][ T5905] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 161.939884][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 161.950615][ T9663] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.963754][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 161.980276][ T9663] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.989232][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.016079][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 162.036496][ T9] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 162.049095][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.069154][ T9] usb 6-1: config 0 descriptor?? [ 162.132460][ T5905] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 162.174563][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.203017][ T5905] usb 1-1: Product: syz [ 162.207206][ T5905] usb 1-1: Manufacturer: syz [ 162.227748][ T5905] usb 1-1: SerialNumber: syz [ 162.251032][ T5905] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 162.282446][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 162.282460][ T30] audit: type=1400 audit(1744023288.398:578): avc: denied { firmware_load } for pid=971 comm="kworker/1:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 162.366037][ T971] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 162.383361][ T9694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1628'. [ 162.399533][ T9694] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1628'. [ 162.526982][ T9] hid-u2fzero 0003:10C4:8ACF.0027: unknown main item tag 0x0 [ 162.558723][ T9] hid-u2fzero 0003:10C4:8ACF.0027: unknown main item tag 0x0 [ 162.582885][ T9] hid-u2fzero 0003:10C4:8ACF.0027: unknown main item tag 0x0 [ 162.606484][ T9] hid-u2fzero 0003:10C4:8ACF.0027: unknown main item tag 0x0 [ 162.640339][ T9] hid-u2fzero 0003:10C4:8ACF.0027: unknown main item tag 0x0 [ 162.677435][ T9] hid-u2fzero 0003:10C4:8ACF.0027: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.5-1/input0 [ 162.733713][ T9] hid-u2fzero 0003:10C4:8ACF.0027: U2F Zero LED initialised [ 162.760521][ T9] hid-u2fzero 0003:10C4:8ACF.0027: U2F Zero RNG initialised [ 162.808318][ T9] usb 6-1: USB disconnect, device number 2 [ 162.959969][ T9726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1640'. [ 163.004886][ T974] usb 1-1: USB disconnect, device number 18 [ 163.103180][ T9733] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 163.117997][ T9731] tipc: Bearer : already 2 bearers with priority 10 [ 163.127335][ T9731] tipc: Bearer : trying with adjusted priority [ 163.140581][ T9731] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 163.141246][ T9731] tipc: Enabled bearer , priority 9 [ 163.358733][ T9750] pimreg: entered allmulticast mode [ 163.368906][ T9750] pimreg: left allmulticast mode [ 163.410154][ T9] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 163.620011][ T9] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 163.622297][ T971] usb 1-1: Service connection timeout for: 256 [ 163.646571][ T9] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 163.670456][ T971] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 163.690371][ T9] usb 3-1: config 0 has no interface number 0 [ 163.696496][ T9] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 163.705906][ T971] ath9k_htc: Failed to initialize the device [ 163.760370][ T9] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.770604][ T974] usb 1-1: ath9k_htc: USB layer deinitialized [ 163.817039][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 163.849443][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.908065][ T9] usb 3-1: config 0 descriptor?? [ 163.999203][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'. [ 164.230317][ T971] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 164.282640][ T9798] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 164.336470][ T9] usb 3-1: USB disconnect, device number 20 [ 164.748041][ T971] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.763965][ T971] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 164.782783][ T971] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 164.800504][ T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.825338][ T971] usb 6-1: config 0 descriptor?? [ 164.838776][ T971] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 164.850284][ T971] dvb-usb: bulk message failed: -22 (3/0) [ 164.895688][ T971] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 164.923920][ T971] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 164.943543][ T971] usb 6-1: media controller created [ 164.950033][ T971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.958602][ T9811] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1671'. [ 164.979908][ T9811] netlink: 'syz.3.1671': attribute type 5 has an invalid length. [ 164.991738][ T971] dvb-usb: bulk message failed: -22 (6/0) [ 164.997526][ T971] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 165.005761][ T9811] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1671'. [ 165.037239][ T971] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input18 [ 165.042151][ T9782] dvb-usb: bulk message failed: -22 (2/0) [ 165.080605][ T971] dvb-usb: schedule remote query interval to 150 msecs. [ 165.097595][ T971] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 165.138154][ T971] usb 6-1: USB disconnect, device number 3 [ 165.205331][ T9821] netlink: 'syz.0.1678': attribute type 10 has an invalid length. [ 165.231315][ T971] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 165.438144][ T30] audit: type=1326 audit(1744023291.548:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9831 comm="syz.3.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8178d169 code=0x7ffc0000 [ 165.520146][ T30] audit: type=1326 audit(1744023291.548:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9831 comm="syz.3.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8178d169 code=0x7ffc0000 [ 165.589073][ T30] audit: type=1326 audit(1744023291.558:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9831 comm="syz.3.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f8178d169 code=0x7ffc0000 [ 165.612777][ T30] audit: type=1326 audit(1744023291.558:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9831 comm="syz.3.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8178d169 code=0x7ffc0000 [ 165.690051][ T30] audit: type=1326 audit(1744023291.558:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9831 comm="syz.3.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f3f8178d169 code=0x7ffc0000 [ 165.758140][ T30] audit: type=1326 audit(1744023291.558:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9831 comm="syz.3.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8178d169 code=0x7ffc0000 [ 165.818359][ T9847] netlink: 'syz.1.1690': attribute type 5 has an invalid length. [ 165.862720][ T30] audit: type=1400 audit(1744023291.858:585): avc: denied { bind } for pid=9843 comm="syz.0.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.938624][ T30] audit: type=1326 audit(1744023292.048:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8178d169 code=0x7ffc0000 [ 165.986531][ T30] audit: type=1326 audit(1744023292.078:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8178d169 code=0x7ffc0000 [ 166.360164][ T5869] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 166.431221][ T971] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 166.499803][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1710'. [ 166.512324][ T5869] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 166.530816][ T5869] usb 6-1: config 0 has no interface number 0 [ 166.543861][ T5869] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 166.558986][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1712'. [ 166.559697][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.587575][ T5869] usb 6-1: Product: syz [ 166.592179][ T5869] usb 6-1: Manufacturer: syz [ 166.603458][ T5869] usb 6-1: SerialNumber: syz [ 166.613517][ T5869] usb 6-1: config 0 descriptor?? [ 166.619349][ T971] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.630111][ T971] usb 4-1: config 0 has no interface number 0 [ 166.636198][ T971] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.661701][ T971] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.680610][ T971] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 166.689655][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.716965][ T971] usb 4-1: config 0 descriptor?? [ 166.840248][ T5869] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 166.859428][ T5869] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 166.871771][ T5869] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 166.885213][ T5869] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 166.900301][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 166.909766][ T5869] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 167.070282][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 167.077393][ T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 167.090633][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 167.160838][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 167.169820][ T9] usb 1-1: config 1 has no interface number 0 [ 167.184095][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.190237][ T971] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0028/input/input19 [ 167.195571][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 167.253196][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 167.274793][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.306649][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 167.311677][ T5905] usb 6-1: USB disconnect, device number 4 [ 167.330506][ T971] holtek_kbd 0003:04D9:A055.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 167.343874][ T5905] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 167.360898][ T5905] keyspan 6-1:0.133: device disconnected [ 167.393317][ T971] usb 4-1: USB disconnect, device number 13 [ 167.515697][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 167.588520][ T9930] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1730'. [ 167.981040][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 167.981062][ T30] audit: type=1400 audit(1744023294.098:593): avc: denied { bind } for pid=9949 comm="syz.1.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.013609][ T5869] usb 1-1: USB disconnect, device number 19 [ 168.062456][ T5869] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 168.305186][ T30] audit: type=1400 audit(1744023294.418:594): avc: denied { sqpoll } for pid=9968 comm="syz.1.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 168.548525][ T9984] openvswitch: netlink: Key type 30 is not supported [ 168.933684][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1763'. [ 168.973628][T10009] smc: net device bond0 applied user defined pnetid SYZ0 [ 169.525480][T10044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1780'. [ 169.639378][T10047] netlink: 'syz.3.1781': attribute type 1 has an invalid length. [ 170.142792][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'. [ 170.166869][T10082] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1791'. [ 170.488404][T10101] lo: entered promiscuous mode [ 170.516404][T10099] lo: left promiscuous mode [ 170.582479][ T5869] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 170.749112][ T5869] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 170.768629][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.779551][ T5869] usb 3-1: Product: syz [ 170.785476][ T5869] usb 3-1: Manufacturer: syz [ 170.792459][ T5869] usb 3-1: SerialNumber: syz [ 170.815137][ T5869] usb 3-1: config 0 descriptor?? [ 170.993088][T10126] overlayfs: workdir and upperdir must be separate subtrees [ 171.064082][ T5869] usb 3-1: USB disconnect, device number 21 [ 171.459234][T10153] tipc: Bearer : already 2 bearers with priority 10 [ 171.469325][T10153] tipc: Bearer : trying with adjusted priority [ 171.477805][T10153] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 171.604599][ T30] audit: type=1800 audit(1744023297.718:595): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1826" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 171.687266][ T5911] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 172.050195][ T5904] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 172.154947][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1833'. [ 172.211660][ T5911] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 172.213180][ T5904] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 172.232483][ T5911] usb 6-1: config 0 has no interface number 0 [ 172.262946][ T5904] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 172.294674][ T5904] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 172.319700][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.361125][ T5904] usb 2-1: Product: syz [ 172.388578][ T5904] usb 2-1: Manufacturer: syz [ 172.431183][ T5904] usb 2-1: SerialNumber: syz [ 172.445538][ T5911] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 172.482023][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.484555][ T5904] usb 2-1: config 0 descriptor?? [ 172.519884][ T30] audit: type=1400 audit(1744023298.628:596): avc: denied { setopt } for pid=10180 comm="syz.2.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 172.557742][ T5911] usb 6-1: config 0 descriptor?? [ 172.643336][ T5911] ums-realtek 6-1:0.4: USB Mass Storage device detected [ 172.951859][ T5904] mos7840 2-1:0.0: required endpoints missing [ 173.010436][ T5904] usb 2-1: USB disconnect, device number 22 [ 173.153051][ T5911] usb 6-1: USB disconnect, device number 5 [ 174.985430][ T30] audit: type=1400 audit(1744023301.078:597): avc: denied { accept } for pid=10258 comm="syz.5.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 175.041935][T10259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.117686][T10259] bond0: (slave rose0): Enslaving as an active interface with an up link [ 175.166283][T10264] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1863'. [ 175.512123][ T30] audit: type=1400 audit(1744023301.628:598): avc: denied { create } for pid=10274 comm="syz.5.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 175.643349][ T30] audit: type=1400 audit(1744023301.698:599): avc: denied { connect } for pid=10274 comm="syz.5.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 175.698462][ T30] audit: type=1400 audit(1744023301.808:600): avc: denied { write } for pid=10274 comm="syz.5.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 176.592240][T10313] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 176.620326][ T5904] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 176.792999][ T5904] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.822888][ T5904] usb 6-1: config 0 has no interface number 0 [ 176.848074][ T5904] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.870771][ T5904] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.886506][ T5904] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 176.897472][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.947551][ T5904] usb 6-1: config 0 descriptor?? [ 177.539953][ T5904] input: HID 04d9:a055 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:04D9:A055.0029/input/input20 [ 177.667124][T10327] team0 (unregistering): Port device team_slave_0 removed [ 177.797470][T10327] team0 (unregistering): Port device team_slave_1 removed [ 177.837084][ T5904] holtek_kbd 0003:04D9:A055.0029: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.5-1/input1 [ 177.914769][ T5904] usb 6-1: USB disconnect, device number 6 [ 178.427953][T10348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10348 comm=syz.0.1890 [ 178.487246][T10348] bridge0: port 3(syz_tun) entered blocking state [ 178.550332][T10348] bridge0: port 3(syz_tun) entered disabled state [ 178.618852][T10348] syz_tun: entered allmulticast mode [ 178.700792][T10348] syz_tun: entered promiscuous mode [ 178.755536][T10348] bridge0: port 3(syz_tun) entered blocking state [ 178.762466][T10348] bridge0: port 3(syz_tun) entered forwarding state [ 179.505137][ T30] audit: type=1400 audit(1744023305.608:601): avc: denied { write } for pid=10377 comm="syz.3.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.684805][ T30] audit: type=1400 audit(1744023305.798:602): avc: denied { ioctl } for pid=10385 comm="syz.2.1902" path="socket:[24140]" dev="sockfs" ino=24140 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 179.867798][ T30] audit: type=1400 audit(1744023305.918:603): avc: denied { name_bind } for pid=10389 comm="syz.3.1904" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 180.066557][T10395] wireguard0: entered promiscuous mode [ 180.077588][T10395] wireguard0: entered allmulticast mode [ 180.131991][ T30] audit: type=1400 audit(1744023306.248:604): avc: denied { map } for pid=10401 comm="syz.1.1909" path="socket:[24183]" dev="sockfs" ino=24183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.300442][ T5904] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 180.461729][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 180.479434][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.529795][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.628611][ T5904] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 180.703061][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.788853][ T5904] usb 4-1: config 0 descriptor?? [ 181.004521][T10428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1916'. [ 181.093929][T10428] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 181.149305][T10428] bridge1: entered allmulticast mode [ 181.260606][ T5904] usbhid 4-1:0.0: can't add hid device: -71 [ 181.275383][ T5904] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 181.333592][ T5904] usb 4-1: USB disconnect, device number 14 [ 182.250246][ T5904] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 182.471106][ T5904] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.560165][ T5904] usb 1-1: config 0 interface 0 has no altsetting 0 [ 182.603579][ T5904] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 182.689876][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.769158][ T5904] usb 1-1: config 0 descriptor?? [ 183.252045][ T5904] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 183.273478][ T5904] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 183.289152][ T5904] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 183.307714][ T5904] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 183.329735][ T5904] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 183.347351][ T5904] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 183.378587][ T5904] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 183.445274][ T5904] hid-alps 0003:044E:1215.002A: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0 [ 183.470818][ T5905] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 183.528043][ T5904] usb 1-1: USB disconnect, device number 20 [ 183.660349][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 183.683190][ T5905] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.742498][ T5905] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.825186][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.838530][ T30] audit: type=1400 audit(1744023309.948:605): avc: denied { bind } for pid=10509 comm="syz.3.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 183.899309][ T5905] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 183.945393][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.006921][ T5905] usb 2-1: config 0 descriptor?? [ 184.482198][ T5905] mcp2200 0003:04D8:00DF.002B: item fetching failed at offset 6/7 [ 184.549617][ T5905] mcp2200 0003:04D8:00DF.002B: can't parse reports [ 184.608286][ T5905] mcp2200 0003:04D8:00DF.002B: probe with driver mcp2200 failed with error -22 [ 184.732393][ T5905] usb 2-1: USB disconnect, device number 23 [ 186.390473][ T5905] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 186.482463][ T5904] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 186.582074][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 186.612648][ T5905] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.668026][ T5905] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 186.681573][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 186.717612][ T5904] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 186.742526][ T5905] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.749260][ T5904] usb 1-1: config 0 has no interface number 0 [ 186.782610][ T5904] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 186.794054][ T5905] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 186.828225][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.846940][ T5904] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 186.889471][ T5905] usb 4-1: config 0 descriptor?? [ 186.917348][ T5904] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 186.948230][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 187.005497][ T5904] usb 1-1: Product: syz [ 187.042008][ T5904] usb 1-1: SerialNumber: syz [ 187.079117][ T5904] usb 1-1: config 0 descriptor?? [ 187.131596][ T5904] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 187.187983][ T5904] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input21 [ 187.375300][ T5905] magicmouse 0003:05AC:0265.002C: hidraw0: USB HID v0.05 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 187.547226][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 187.556731][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 187.563934][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 187.571068][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 187.578993][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 187.586356][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 187.593678][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 187.600801][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 187.607922][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 187.615137][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 187.631822][ T5905] usb 1-1: USB disconnect, device number 21 [ 187.631870][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 187.686536][ T5905] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 187.721696][ T30] audit: type=1400 audit(1744023313.828:606): avc: denied { write } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.831505][ T971] usb 4-1: USB disconnect, device number 15 [ 187.879378][ T30] audit: type=1400 audit(1744023313.828:607): avc: denied { remove_name } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.901929][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.055270][ T30] audit: type=1400 audit(1744023313.828:608): avc: denied { add_name } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.264994][ T30] audit: type=1400 audit(1744023314.378:609): avc: denied { module_load } for pid=10621 comm="syz.1.1980" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=24708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 188.298102][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.304377][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 188.379022][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1982'. [ 188.453249][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1982'. [ 188.520142][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 188.538293][ T24] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 188.588664][ T24] usb 3-1: config 8 has no interface number 0 [ 188.627712][ T24] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 188.705697][T10623] Invalid ELF header magic: != ELF [ 188.736501][ T24] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 188.815331][ T24] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 188.869145][ T24] usb 3-1: config 8 interface 39 has no altsetting 0 [ 188.922016][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 188.931344][ T971] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 188.973972][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.030261][ T24] usb 3-1: Product: syz [ 189.034557][ T24] usb 3-1: Manufacturer: syz [ 189.080490][ T24] usb 3-1: SerialNumber: syz [ 189.123960][ T971] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.150509][ T971] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.150564][ T971] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 189.150586][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.161586][ T971] usb 1-1: config 0 descriptor?? [ 189.560980][ T24] ipheth 3-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 189.636390][ T24] ipheth 3-1:8.39: probe with driver ipheth failed with error -22 [ 189.656988][ T971] magicmouse 0003:05AC:0269.002D: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.0-1/input0 [ 189.869931][ T971] usb 3-1: USB disconnect, device number 22 [ 189.933067][ T5905] usb 1-1: USB disconnect, device number 22 [ 190.263199][T10670] netlink: 'syz.5.1996': attribute type 2 has an invalid length. [ 190.556104][ T30] audit: type=1400 audit(1744023316.668:610): avc: denied { bind } for pid=10678 comm="syz.5.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 190.716812][ T30] audit: type=1400 audit(1744023316.668:611): avc: denied { name_bind } for pid=10678 comm="syz.5.1999" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 190.896724][ T30] audit: type=1400 audit(1744023316.668:612): avc: denied { node_bind } for pid=10678 comm="syz.5.1999" saddr=172.30.0.6 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 190.918971][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.156671][T10701] ptrace attach of "./syz-executor exec"[5834] was attempted by " [ 191.475014][ T30] audit: type=1400 audit(1744023317.588:613): avc: denied { read write } for pid=10712 comm="syz.1.2014" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 191.566040][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.488902][T10741] sched: DL replenish lagged too much [ 192.490234][ T30] audit: type=1400 audit(1744023317.708:614): avc: denied { open } for pid=10712 comm="syz.1.2014" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 192.518500][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.669031][ T30] audit: type=1400 audit(1744023318.038:615): avc: denied { listen } for pid=10727 comm="syz.3.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.770319][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2027'. [ 192.810327][ T5904] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 192.822786][ T30] audit: type=1400 audit(1744023318.038:616): avc: denied { write } for pid=10727 comm="syz.3.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.943875][ T30] audit: type=1400 audit(1744023318.748:617): avc: denied { ioctl } for pid=10745 comm="syz.1.2026" path="socket:[25094]" dev="sockfs" ino=25094 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 192.968520][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.020590][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 193.050978][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.073545][ T5904] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 193.095289][T10760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2030'. [ 193.124914][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.169911][ T5904] usb 1-1: config 0 descriptor?? [ 193.346499][ T30] audit: type=1400 audit(1744023319.458:618): avc: denied { getopt } for pid=10766 comm="syz.3.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 193.366222][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.611792][ T5904] asus 0003:0B05:17E0.002E: hidraw0: USB HID v9.7d Device [HID 0b05:17e0] on usb-dummy_hcd.0-1/input0 [ 193.645857][T10774] sp0: Synchronizing with TNC [ 193.694164][ T5904] asus 0003:0B05:17E0.002E: Asus input not registered [ 193.738480][ T5904] asus 0003:0B05:17E0.002E: probe with driver asus failed with error -12 [ 193.752504][ T30] audit: type=1400 audit(1744023319.858:619): avc: denied { listen } for pid=10776 comm="syz.1.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 193.820384][ T5904] usb 1-1: USB disconnect, device number 23 [ 193.862301][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.873148][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.890660][ T30] audit: type=1400 audit(1744023319.858:620): avc: denied { accept } for pid=10776 comm="syz.1.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 194.647040][T10797] netlink: 'syz.0.2043': attribute type 1 has an invalid length. [ 195.510744][ T30] audit: type=1400 audit(1744023321.618:621): avc: denied { wake_alarm } for pid=10825 comm="syz.0.2057" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 195.624956][T10832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2060'. [ 195.835973][ T30] audit: type=1326 audit(1744023321.948:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.5.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea23f8d169 code=0x7ffc0000 [ 195.881668][ T5905] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 195.957990][ T30] audit: type=1326 audit(1744023321.968:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.5.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea23f8d169 code=0x7ffc0000 [ 196.081480][ T5905] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 196.099098][ T30] audit: type=1326 audit(1744023321.998:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.5.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fea23f8d169 code=0x7ffc0000 [ 196.122298][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.145033][ T5905] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 196.217110][ T5905] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 196.265478][ T30] audit: type=1326 audit(1744023321.998:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.5.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea23f8d169 code=0x7ffc0000 [ 196.288857][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.297789][ T5905] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.402255][ T5905] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.454154][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 196.501376][ T5905] usb 3-1: Product: syz [ 196.552630][ T5905] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.621986][ T5905] usb 3-1: invalid MIDI out EP 0 [ 196.942594][ T5905] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 197.024344][ T5905] usb 3-1: USB disconnect, device number 23 [ 197.092748][T10196] udevd[10196]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.846412][T10894] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 197.862398][T10898] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2089'. [ 198.050183][ T5905] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 198.191952][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 198.191968][ T30] audit: type=1400 audit(1744023324.308:632): avc: denied { watch watch_reads } for pid=10908 comm="syz.2.2096" path="/proc/855/net" dev="proc" ino=25732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 198.221346][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.297289][ T5905] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 198.344811][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.396119][ T5905] usb 6-1: config 0 descriptor?? [ 198.558059][ T971] kernel write not supported for file /dsp (pid: 971 comm: kworker/1:2) [ 198.652683][ T5905] [drm] vendor descriptor length:6 data:06 5f 01 74 75 6e 00 00 00 00 00 [ 198.684967][ T5905] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 198.697059][T10923] usb usb1: usbfs: process 10923 (syz.3.2103) did not claim interface 0 before use [ 198.740674][T10923] usb usb1: usbfs: process 10923 (syz.3.2103) did not claim interface 0 before use [ 198.842160][ T5905] [drm:udl_init] *ERROR* Selecting channel failed [ 198.917683][ T5905] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 198.963225][ T5905] [drm] Initialized udl on minor 2 [ 198.984234][ T5905] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 199.048804][ T5905] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 199.105868][ T971] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 199.139574][ T5905] usb 6-1: USB disconnect, device number 7 [ 199.178408][ T971] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 199.966122][T10955] netlink: 'syz.3.2119': attribute type 11 has an invalid length. [ 200.869393][T10974] netlink: 'syz.1.2127': attribute type 21 has an invalid length. [ 200.922307][T10974] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2127'. [ 200.966149][ T30] audit: type=1400 audit(1744023327.078:633): avc: denied { nlmsg_read } for pid=10976 comm="syz.5.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.992022][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2129'. [ 201.309566][T10987] veth1_macvtap: left promiscuous mode [ 201.930462][ T5905] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 202.125352][ T5905] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.179692][ T5905] usb 1-1: config 0 has no interface number 0 [ 202.216623][ T5905] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.292719][ T5905] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.326482][T11014] [U] 1WT`8H$09\ [ 202.369241][ T5905] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 202.389078][T11014] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 202.436068][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.452652][ T5905] usb 1-1: config 0 descriptor?? [ 202.482042][T11014] [U] 4XZ^Y)MC. OȞPOW [ 202.499927][T11014] [U] ä%Z [ 202.512729][T11014] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 202.531063][ T30] audit: type=1400 audit(1744023328.638:634): avc: denied { ioctl } for pid=11019 comm="syz.1.2149" path="socket:[26217]" dev="sockfs" ino=26217 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 202.675639][T11013] [U] P>BЍ̖Z% [ 202.704717][ T30] audit: type=1400 audit(1744023328.638:635): avc: denied { write } for pid=11019 comm="syz.1.2149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 203.001564][ T5905] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.002F/input/input22 [ 203.041888][ T30] audit: type=1400 audit(1744023329.138:636): avc: denied { bind } for pid=11027 comm="syz.5.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 203.264443][ T5905] holtek_kbd 0003:04D9:A055.002F: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 203.340138][ T5905] usb 1-1: USB disconnect, device number 24 [ 203.460178][ T5904] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 203.653026][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 203.688523][ T5904] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.764216][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.791876][ T5904] usb 4-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 203.823660][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.849973][ T5904] usb 4-1: config 0 descriptor?? [ 204.018521][T11052] netlink: 95 bytes leftover after parsing attributes in process `syz.2.2164'. [ 204.280167][T11058] sg_write: data in/out 150995429/25 bytes for SCSI command 0x0-- guessing data in; [ 204.280167][T11058] program syz.1.2167 not setting count and/or reply_len properly [ 204.333642][ T5904] chicony 0003:04F2:1236.0030: item fetching failed at offset 5/7 [ 204.354563][T11060] tipc: Started in network mode [ 204.372118][T11062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2169'. [ 204.384411][T11060] tipc: Node identity , cluster identity 4711 [ 204.393835][ T5904] chicony 0003:04F2:1236.0030: Chicony hid parse failed: -22 [ 204.417439][T11060] tipc: Failed to obtain node identity [ 204.447352][ T5904] chicony 0003:04F2:1236.0030: probe with driver chicony failed with error -22 [ 204.460457][T11060] tipc: Enabling of bearer rejected, failed to enable media [ 204.640143][ T5904] usb 4-1: USB disconnect, device number 16 [ 205.281271][ C1] sd 0:0:1:0: [sda] tag#1035 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 205.291741][ C1] sd 0:0:1:0: [sda] tag#1035 CDB: Read(6) 08 00 00 00 00 00 00 00 00 00 00 00 [ 205.571647][ T30] audit: type=1400 audit(1744023331.688:637): avc: denied { append } for pid=11087 comm="syz.3.2180" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 206.036327][T11105] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 206.090836][T11105] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 206.130136][ T971] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 206.153053][T11105] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 206.221419][T11105] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 206.347533][ T971] usb 4-1: Using ep0 maxpacket: 8 [ 206.358861][ T971] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 206.396780][ T971] usb 4-1: config 0 has no interface number 0 [ 206.442360][ T971] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 206.535994][ T971] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 206.621077][ T971] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 206.697047][ T971] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 206.774403][ T971] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.850341][ T971] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 206.887446][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.938789][ T971] usb 4-1: Product: syz [ 206.968061][ T971] usb 4-1: Manufacturer: syz [ 207.001807][ T971] usb 4-1: SerialNumber: syz [ 207.070074][ T971] usb 4-1: config 0 descriptor?? [ 207.346997][ T971] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 207.649548][T11101] iowarrior 4-1:0.186: Error -90 while submitting URB [ 207.686382][ T971] usb 4-1: USB disconnect, device number 17 [ 207.794586][T11138] netlink: 192 bytes leftover after parsing attributes in process `syz.5.2199'. [ 208.420674][T11148] overlayfs: failed to resolve '/9}PF_xKk)".' j [ 208.420674][T11148] 8yATAo)r(5LLOeO'&~': -2 [ 208.762439][ T30] audit: type=1400 audit(1744023334.878:638): avc: denied { append } for pid=11151 comm="syz.5.2205" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 209.079818][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2207'. [ 209.105776][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2207'. [ 209.131245][T11156] netlink: 'syz.5.2207': attribute type 20 has an invalid length. [ 209.520278][ T30] audit: type=1400 audit(1744023335.628:639): avc: denied { read } for pid=11163 comm="syz.2.2211" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.530738][T11187] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 210.537290][T11187] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 210.579463][T11187] vhci_hcd vhci_hcd.0: Device attached [ 210.752433][T11192] dvmrp1: entered allmulticast mode [ 210.767999][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2224'. [ 210.850165][ T5904] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 210.908674][ T30] audit: type=1400 audit(1744023337.018:640): avc: denied { ioctl } for pid=11195 comm="syz.2.2225" path="socket:[26776]" dev="sockfs" ino=26776 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 210.986364][ T5911] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 211.022018][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 211.037884][ T5904] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 211.075241][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.126307][ T5904] usb 2-1: Product: syz [ 211.159177][ T5904] usb 2-1: Manufacturer: syz [ 211.182409][ T5904] usb 2-1: SerialNumber: syz [ 211.211011][ T5904] usb 2-1: config 0 descriptor?? [ 211.239528][ T5904] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 211.271325][ T5904] usb 2-1: Detected FT232H [ 211.453646][T11188] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 211.454382][ T5904] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 211.489636][ T54] vhci_hcd: stop threads [ 211.511126][ T54] vhci_hcd: release socket [ 211.528113][ T54] vhci_hcd: disconnect device [ 211.543798][ T5904] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 211.573458][ T5904] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 211.601359][ T5904] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 211.653260][ T5904] usb 2-1: USB disconnect, device number 24 [ 211.684100][T11092] syz.0.2181 (11092): drop_caches: 1 [ 211.708574][ T5904] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 211.758958][ T5904] ftdi_sio 2-1:0.0: device disconnected [ 213.258774][ T30] audit: type=1400 audit(1744023339.368:641): avc: denied { append } for pid=11236 comm="syz.3.2242" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.305942][T11237] loop6: detected capacity change from 0 to 128 [ 213.346646][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.356028][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.380149][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.389359][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.490751][T11240] Invalid logical block size (1373) [ 213.522023][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.531223][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.551409][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.560609][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.579649][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.588842][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.607182][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.616382][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.630247][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.639435][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.648613][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.657796][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.667654][T11237] ldm_validate_partition_table(): Disk read failed. [ 213.703964][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.713178][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.729308][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.738503][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.751021][T11237] Dev loop6: unable to read RDB block 0 [ 213.794987][T11237] loop6: unable to read partition table [ 213.815838][T11237] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 213.914014][ T5196] ldm_validate_partition_table(): Disk read failed. [ 213.942983][ T5196] Dev loop6: unable to read RDB block 0 [ 213.980560][ T5196] loop6: unable to read partition table [ 214.470151][ T5904] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 214.636200][ T5904] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.668305][ T5904] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 214.700257][ T5904] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.709318][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.765863][T11254] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 214.787270][ T5904] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.175509][ T5904] usb 4-1: USB disconnect, device number 18 [ 215.367476][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2258'. [ 215.660925][T11275] sp0: Synchronizing with TNC [ 215.711428][ T1078] [ 215.713749][ T1078] ===================================================== [ 215.720651][ T1078] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 215.728076][ T1078] 6.15.0-rc1-syzkaller #0 Not tainted [ 215.733412][ T1078] ----------------------------------------------------- [ 215.740308][ T1078] kworker/u8:5/1078 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 215.748080][ T1078] ffffffff8f575f78 (disc_data_lock#3){.+.+}-{3:3}, at: sp_get+0x18/0xf0 [ 215.756401][ T1078] [ 215.756401][ T1078] and this task is already holding: [ 215.763729][ T1078] ffffffff9ae25ff8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 215.772391][ T1078] which would create a new lock dependency: [ 215.778255][ T1078] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#3){.+.+}-{3:3} [ 215.786052][ T1078] [ 215.786052][ T1078] but this new dependency connects a HARDIRQ-irq-safe lock: [ 215.795466][ T1078] (&port_lock_key){-.-.}-{3:3} [ 215.795479][ T1078] [ 215.795479][ T1078] ... which became HARDIRQ-irq-safe at: [ 215.807965][ T1078] lock_acquire+0x179/0x350 [ 215.812524][ T1078] _raw_spin_lock_irqsave+0x3a/0x60 [ 215.817779][ T1078] serial8250_handle_irq+0x95/0xcb0 [ 215.823031][ T1078] serial8250_default_handle_irq+0x9a/0x210 [ 215.828978][ T1078] serial8250_interrupt+0x103/0x210 [ 215.834231][ T1078] __handle_irq_event_percpu+0x229/0x7d0 [ 215.839921][ T1078] handle_irq_event+0xab/0x1e0 [ 215.844753][ T1078] handle_edge_irq+0x263/0xd10 [ 215.849572][ T1078] __common_interrupt+0xdf/0x250 [ 215.854564][ T1078] common_interrupt+0xba/0xe0 [ 215.859294][ T1078] asm_common_interrupt+0x26/0x40 [ 215.864373][ T1078] pv_native_safe_halt+0xf/0x20 [ 215.869279][ T1078] default_idle+0x13/0x20 [ 215.873667][ T1078] default_idle_call+0x6d/0xb0 [ 215.878489][ T1078] do_idle+0x391/0x510 [ 215.882614][ T1078] cpu_startup_entry+0x4f/0x60 [ 215.887435][ T1078] start_secondary+0x21d/0x2b0 [ 215.892252][ T1078] common_startup_64+0x13e/0x148 [ 215.897248][ T1078] [ 215.897248][ T1078] to a HARDIRQ-irq-unsafe lock: [ 215.904240][ T1078] (disc_data_lock#3){.+.+}-{3:3} [ 215.904258][ T1078] [ 215.904258][ T1078] ... which became HARDIRQ-irq-unsafe at: [ 215.917091][ T1078] ... [ 215.917095][ T1078] lock_acquire+0x179/0x350 [ 215.924202][ T1078] _raw_read_lock+0x5f/0x70 [ 215.928759][ T1078] sp_get+0x18/0xf0 [ 215.932624][ T1078] sixpack_receive_buf+0x59/0x1c90 [ 215.937791][ T1078] tty_ldisc_receive_buf+0x157/0x1a0 [ 215.943135][ T1078] tty_port_default_receive_buf+0x70/0xb0 [ 215.948923][ T1078] flush_to_ldisc+0x268/0x780 [ 215.953660][ T1078] process_one_work+0x9cc/0x1b70 [ 215.958686][ T1078] worker_thread+0x6c8/0xf10 [ 215.963344][ T1078] kthread+0x3c2/0x780 [ 215.967476][ T1078] ret_from_fork+0x45/0x80 [ 215.971947][ T1078] ret_from_fork_asm+0x1a/0x30 [ 215.976778][ T1078] [ 215.976778][ T1078] other info that might help us debug this: [ 215.976778][ T1078] [ 215.986972][ T1078] Possible interrupt unsafe locking scenario: [ 215.986972][ T1078] [ 215.995256][ T1078] CPU0 CPU1 [ 216.000587][ T1078] ---- ---- [ 216.005928][ T1078] lock(disc_data_lock#3); [ 216.010404][ T1078] local_irq_disable(); [ 216.017125][ T1078] lock(&port_lock_key); [ 216.023940][ T1078] lock(disc_data_lock#3); [ 216.030933][ T1078] [ 216.034353][ T1078] lock(&port_lock_key); [ 216.038823][ T1078] [ 216.038823][ T1078] *** DEADLOCK *** [ 216.038823][ T1078] [ 216.046933][ T1078] 6 locks held by kworker/u8:5/1078: [ 216.052181][ T1078] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 216.063275][ T1078] #1: ffffc90003e0fd18 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 216.074282][ T1078] #2: ffff888025558ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x34/0x780 [ 216.083293][ T1078] #3: ffff88805bc310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 216.092561][ T1078] #4: ffffffff9ae25ff8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 216.101657][ T1078] #5: ffff88805bc310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 216.110928][ T1078] [ 216.110928][ T1078] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 216.121312][ T1078] -> (&port_lock_key){-.-.}-{3:3} { [ 216.126499][ T1078] IN-HARDIRQ-W at: [ 216.130454][ T1078] lock_acquire+0x179/0x350 [ 216.136582][ T1078] _raw_spin_lock_irqsave+0x3a/0x60 [ 216.143413][ T1078] serial8250_handle_irq+0x95/0xcb0 [ 216.150237][ T1078] serial8250_default_handle_irq+0x9a/0x210 [ 216.157750][ T1078] serial8250_interrupt+0x103/0x210 [ 216.164579][ T1078] __handle_irq_event_percpu+0x229/0x7d0 [ 216.171853][ T1078] handle_irq_event+0xab/0x1e0 [ 216.178246][ T1078] handle_edge_irq+0x263/0xd10 [ 216.184912][ T1078] __common_interrupt+0xdf/0x250 [ 216.191913][ T1078] common_interrupt+0xba/0xe0 [ 216.198213][ T1078] asm_common_interrupt+0x26/0x40 [ 216.204856][ T1078] pv_native_safe_halt+0xf/0x20 [ 216.211326][ T1078] default_idle+0x13/0x20 [ 216.217280][ T1078] default_idle_call+0x6d/0xb0 [ 216.223677][ T1078] do_idle+0x391/0x510 [ 216.229365][ T1078] cpu_startup_entry+0x4f/0x60 [ 216.235752][ T1078] start_secondary+0x21d/0x2b0 [ 216.242132][ T1078] common_startup_64+0x13e/0x148 [ 216.248690][ T1078] IN-SOFTIRQ-W at: [ 216.252650][ T1078] lock_acquire+0x179/0x350 [ 216.258769][ T1078] _raw_spin_lock_irqsave+0x3a/0x60 [ 216.265584][ T1078] serial8250_handle_irq+0x95/0xcb0 [ 216.272411][ T1078] serial8250_default_handle_irq+0x9a/0x210 [ 216.279920][ T1078] serial8250_interrupt+0x103/0x210 [ 216.286737][ T1078] __handle_irq_event_percpu+0x229/0x7d0 [ 216.293996][ T1078] handle_irq_event+0xab/0x1e0 [ 216.300380][ T1078] handle_edge_irq+0x263/0xd10 [ 216.306764][ T1078] __common_interrupt+0xdf/0x250 [ 216.313333][ T1078] common_interrupt+0x61/0xe0 [ 216.319629][ T1078] asm_common_interrupt+0x26/0x40 [ 216.326284][ T1078] __blk_mq_free_request+0x22e/0x530 [ 216.333191][ T1078] blk_mq_free_request+0x1e9/0x340 [ 216.339925][ T1078] __blk_mq_end_request+0x1b8/0x5b0 [ 216.346764][ T1078] scsi_end_request+0x445/0x9c0 [ 216.353243][ T1078] scsi_io_completion+0x17d/0x14c0 [ 216.359985][ T1078] scsi_complete+0x124/0x250 [ 216.366237][ T1078] blk_complete_reqs+0xae/0xf0 [ 216.372625][ T1078] handle_softirqs+0x216/0x8e0 [ 216.379013][ T1078] __irq_exit_rcu+0x109/0x170 [ 216.385311][ T1078] irq_exit_rcu+0x9/0x30 [ 216.391174][ T1078] common_interrupt+0xbf/0xe0 [ 216.397469][ T1078] asm_common_interrupt+0x26/0x40 [ 216.404110][ T1078] pv_native_safe_halt+0xf/0x20 [ 216.410582][ T1078] default_idle+0x13/0x20 [ 216.416534][ T1078] default_idle_call+0x6d/0xb0 [ 216.422922][ T1078] do_idle+0x391/0x510 [ 216.428614][ T1078] cpu_startup_entry+0x4f/0x60 [ 216.434999][ T1078] start_secondary+0x21d/0x2b0 [ 216.441394][ T1078] common_startup_64+0x13e/0x148 [ 216.447951][ T1078] INITIAL USE at: [ 216.451813][ T1078] lock_acquire+0x179/0x350 [ 216.457847][ T1078] _raw_spin_lock_irqsave+0x3a/0x60 [ 216.464576][ T1078] serial8250_do_set_termios+0x310/0x1710 [ 216.471827][ T1078] serial8250_set_termios+0x6e/0x80 [ 216.478568][ T1078] uart_set_options+0x31a/0x5f0 [ 216.484953][ T1078] serial8250_console_setup+0x189/0x450 [ 216.492047][ T1078] univ8250_console_setup+0x1eb/0x2e0 [ 216.498965][ T1078] try_enable_preferred_console+0x2fd/0x530 [ 216.506393][ T1078] register_console+0x3ab/0x11b0 [ 216.512865][ T1078] univ8250_console_init+0x5f/0x90 [ 216.519512][ T1078] console_init+0x14f/0x680 [ 216.525552][ T1078] start_kernel+0x29f/0x4d0 [ 216.531592][ T1078] x86_64_start_reservations+0x18/0x30 [ 216.538587][ T1078] x86_64_start_kernel+0xb0/0xc0 [ 216.545071][ T1078] common_startup_64+0x13e/0x148 [ 216.551553][ T1078] } [ 216.554025][ T1078] ... key at: [] port_lock_key+0x0/0x40 [ 216.561628][ T1078] [ 216.561628][ T1078] the dependencies between the lock to be acquired [ 216.561633][ T1078] and HARDIRQ-irq-unsafe lock: [ 216.575088][ T1078] -> (disc_data_lock#3){.+.+}-{3:3} { [ 216.580445][ T1078] HARDIRQ-ON-R at: [ 216.584408][ T1078] lock_acquire+0x179/0x350 [ 216.590528][ T1078] _raw_read_lock+0x5f/0x70 [ 216.596652][ T1078] sp_get+0x18/0xf0 [ 216.602082][ T1078] sixpack_receive_buf+0x59/0x1c90 [ 216.608813][ T1078] tty_ldisc_receive_buf+0x157/0x1a0 [ 216.615722][ T1078] tty_port_default_receive_buf+0x70/0xb0 [ 216.623068][ T1078] flush_to_ldisc+0x268/0x780 [ 216.629368][ T1078] process_one_work+0x9cc/0x1b70 [ 216.635926][ T1078] worker_thread+0x6c8/0xf10 [ 216.642141][ T1078] kthread+0x3c2/0x780 [ 216.647828][ T1078] ret_from_fork+0x45/0x80 [ 216.653865][ T1078] ret_from_fork_asm+0x1a/0x30 [ 216.660254][ T1078] SOFTIRQ-ON-R at: [ 216.664214][ T1078] lock_acquire+0x179/0x350 [ 216.670336][ T1078] _raw_read_lock+0x5f/0x70 [ 216.676460][ T1078] sp_get+0x18/0xf0 [ 216.681888][ T1078] sixpack_receive_buf+0x59/0x1c90 [ 216.688618][ T1078] tty_ldisc_receive_buf+0x157/0x1a0 [ 216.695525][ T1078] tty_port_default_receive_buf+0x70/0xb0 [ 216.702869][ T1078] flush_to_ldisc+0x268/0x780 [ 216.709169][ T1078] process_one_work+0x9cc/0x1b70 [ 216.715725][ T1078] worker_thread+0x6c8/0xf10 [ 216.721948][ T1078] kthread+0x3c2/0x780 [ 216.727635][ T1078] ret_from_fork+0x45/0x80 [ 216.733681][ T1078] ret_from_fork_asm+0x1a/0x30 [ 216.740071][ T1078] INITIAL USE at: [ 216.743934][ T1078] lock_acquire+0x179/0x350 [ 216.749967][ T1078] _raw_write_lock_irq+0x36/0x50 [ 216.756437][ T1078] sixpack_close+0x1e/0x2f0 [ 216.762474][ T1078] tty_ldisc_close+0x111/0x1a0 [ 216.768776][ T1078] tty_ldisc_kill+0x8e/0x150 [ 216.774903][ T1078] tty_ldisc_release+0x109/0x2e0 [ 216.781374][ T1078] tty_release_struct+0x23/0xe0 [ 216.787761][ T1078] tty_release+0xe2d/0x1430 [ 216.793800][ T1078] __fput+0x3ff/0xb70 [ 216.799316][ T1078] task_work_run+0x14d/0x240 [ 216.805465][ T1078] syscall_exit_to_user_mode+0x27b/0x2a0 [ 216.812633][ T1078] do_syscall_64+0xda/0x260 [ 216.818672][ T1078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.826111][ T1078] INITIAL READ USE at: [ 216.830407][ T1078] lock_acquire+0x179/0x350 [ 216.836875][ T1078] _raw_read_lock+0x5f/0x70 [ 216.843356][ T1078] sp_get+0x18/0xf0 [ 216.849142][ T1078] sixpack_receive_buf+0x59/0x1c90 [ 216.856222][ T1078] tty_ldisc_receive_buf+0x157/0x1a0 [ 216.863476][ T1078] tty_port_default_receive_buf+0x70/0xb0 [ 216.871177][ T1078] flush_to_ldisc+0x268/0x780 [ 216.877824][ T1078] process_one_work+0x9cc/0x1b70 [ 216.884730][ T1078] worker_thread+0x6c8/0xf10 [ 216.891291][ T1078] kthread+0x3c2/0x780 [ 216.897334][ T1078] ret_from_fork+0x45/0x80 [ 216.903730][ T1078] ret_from_fork_asm+0x1a/0x30 [ 216.910469][ T1078] } [ 216.912937][ T1078] ... key at: [] disc_data_lock+0x18/0xfe0 [ 216.920799][ T1078] ... acquired at: [ 216.924569][ T1078] lock_acquire+0x179/0x350 [ 216.929213][ T1078] _raw_read_lock+0x5f/0x70 [ 216.933863][ T1078] sp_get+0x18/0xf0 [ 216.937817][ T1078] sixpack_write_wakeup+0x20/0x390 [ 216.943072][ T1078] tty_wakeup+0xe5/0x120 [ 216.947460][ T1078] tty_port_default_wakeup+0x2a/0x40 [ 216.952974][ T1078] serial8250_tx_chars+0x68e/0x860 [ 216.958230][ T1078] __start_tx+0x3e9/0x4a0 [ 216.962702][ T1078] serial8250_start_tx+0x368/0x530 [ 216.967958][ T1078] __uart_start+0x292/0x4c0 [ 216.972607][ T1078] uart_write+0x218/0xb30 [ 216.977096][ T1078] sixpack_receive_buf+0x3d0/0x1c90 [ 216.982439][ T1078] tty_ldisc_receive_buf+0x157/0x1a0 [ 216.987881][ T1078] tty_port_default_receive_buf+0x70/0xb0 [ 216.993754][ T1078] flush_to_ldisc+0x268/0x780 [ 216.998577][ T1078] process_one_work+0x9cc/0x1b70 [ 217.003678][ T1078] worker_thread+0x6c8/0xf10 [ 217.008413][ T1078] kthread+0x3c2/0x780 [ 217.012625][ T1078] ret_from_fork+0x45/0x80 [ 217.017207][ T1078] ret_from_fork_asm+0x1a/0x30 [ 217.022119][ T1078] [ 217.024415][ T1078] [ 217.024415][ T1078] stack backtrace: [ 217.030298][ T1078] CPU: 1 UID: 0 PID: 1078 Comm: kworker/u8:5 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 217.030312][ T1078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.030320][ T1078] Workqueue: events_unbound flush_to_ldisc [ 217.030340][ T1078] Call Trace: [ 217.030345][ T1078] [ 217.030350][ T1078] dump_stack_lvl+0x116/0x1f0 [ 217.030365][ T1078] check_irq_usage+0x7dc/0x920 [ 217.030384][ T1078] ? check_path.constprop.0+0x24/0x50 [ 217.030401][ T1078] ? __lock_acquire+0x1189/0x1ba0 [ 217.030409][ T1078] __lock_acquire+0x1189/0x1ba0 [ 217.030420][ T1078] ? lock_acquire+0x179/0x350 [ 217.030429][ T1078] lock_acquire+0x179/0x350 [ 217.030438][ T1078] ? sp_get+0x18/0xf0 [ 217.030450][ T1078] ? ldsem_down_read_trylock+0x11a/0x180 [ 217.030461][ T1078] ? ldsem_down_read_trylock+0x120/0x180 [ 217.030472][ T1078] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 217.030485][ T1078] _raw_read_lock+0x5f/0x70 [ 217.030497][ T1078] ? sp_get+0x18/0xf0 [ 217.030507][ T1078] sp_get+0x18/0xf0 [ 217.030519][ T1078] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 217.030531][ T1078] sixpack_write_wakeup+0x20/0x390 [ 217.030543][ T1078] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 217.030556][ T1078] tty_wakeup+0xe5/0x120 [ 217.030569][ T1078] tty_port_default_wakeup+0x2a/0x40 [ 217.030579][ T1078] serial8250_tx_chars+0x68e/0x860 [ 217.030590][ T1078] __start_tx+0x3e9/0x4a0 [ 217.030600][ T1078] serial8250_start_tx+0x368/0x530 [ 217.030610][ T1078] __uart_start+0x292/0x4c0 [ 217.030623][ T1078] uart_write+0x218/0xb30 [ 217.030640][ T1078] sixpack_receive_buf+0x3d0/0x1c90 [ 217.030653][ T1078] ? ldsem_down_read_trylock+0x120/0x180 [ 217.030664][ T1078] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 217.030676][ T1078] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 217.030688][ T1078] tty_ldisc_receive_buf+0x157/0x1a0 [ 217.030704][ T1078] tty_port_default_receive_buf+0x70/0xb0 [ 217.030721][ T1078] flush_to_ldisc+0x268/0x780 [ 217.030736][ T1078] ? rcu_is_watching+0x12/0xc0 [ 217.030757][ T1078] process_one_work+0x9cc/0x1b70 [ 217.030770][ T1078] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 217.030788][ T1078] ? __pfx_process_one_work+0x10/0x10 [ 217.030801][ T1078] ? assign_work+0x1a0/0x250 [ 217.030812][ T1078] worker_thread+0x6c8/0xf10 [ 217.030825][ T1078] ? __kthread_parkme+0x19e/0x250 [ 217.030841][ T1078] ? __pfx_worker_thread+0x10/0x10 [ 217.030853][ T1078] kthread+0x3c2/0x780 [ 217.030863][ T1078] ? __pfx_kthread+0x10/0x10 [ 217.030872][ T1078] ? __pfx_kthread+0x10/0x10 [ 217.030882][ T1078] ? __pfx_kthread+0x10/0x10 [ 217.030892][ T1078] ? __pfx_kthread+0x10/0x10 [ 217.030901][ T1078] ? rcu_is_watching+0x12/0xc0 [ 217.030914][ T1078] ? __pfx_kthread+0x10/0x10 [ 217.030924][ T1078] ret_from_fork+0x45/0x80 [ 217.030935][ T1078] ? __pfx_kthread+0x10/0x10 [ 217.030945][ T1078] ret_from_fork_asm+0x1a/0x30 [ 217.030963][ T1078] [ 217.305859][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.355471][T11280] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2262'. [ 217.364521][T11280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.371738][T11280] IPv6: NLM_F_CREATE should be set when creating new route [ 217.378955][T11280] IPv6: NLM_F_CREATE should be set when creating new route [ 217.390755][T11280] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2262'. [ 217.399800][T11280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.577653][ T5807] syz-executor (5807) used greatest stack depth: 21368 bytes left [ 217.703695][T11284] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 218.636352][T11281] bridge0: port 3(syz_tun) entered disabled state [ 218.652986][T11281] syz_tun (unregistering): left allmulticast mode [ 218.659462][T11281] syz_tun (unregistering): left promiscuous mode [ 218.667220][T11281] bridge0: port 3(syz_tun) entered disabled state [ 218.685963][ T5911] vhci_hcd: vhci_device speed not set