last executing test programs: 1m28.909137345s ago: executing program 4 (id=965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x80) 1m28.612370657s ago: executing program 4 (id=971): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000003c0)={0x4000001, 0x0, 0x6}) pread64(r0, 0x0, 0xfffffef2, 0x8) 1m28.453710465s ago: executing program 4 (id=974): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0xce24, @broadcast}, 0x10) 1m28.312945844s ago: executing program 4 (id=978): r0 = socket(0x29, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) sendmmsg$unix(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1m28.04846474s ago: executing program 4 (id=982): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) fcntl$setstatus(r0, 0x4, 0x400) 1m28.012155711s ago: executing program 4 (id=983): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r1, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) 1m12.728724707s ago: executing program 32 (id=983): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r1, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) 2.72347248s ago: executing program 0 (id=2346): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x5) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.457443167s ago: executing program 0 (id=2350): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000040)={0x0, 0xf, 0xc, "40004700000041f400bec09a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="401e28"], 0x0, 0x0, 0x0, 0x0}) 1.85596844s ago: executing program 5 (id=2363): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f0000000340)='\x00\x01\x00\x00\x00\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\x00\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\x03\x00\x00\x00m\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xa1\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"F\xb4\x02\xc5T\xe5\xc7\x98\xcd\fs\x1ap^\xc1jL\xfb{\xd8\x9e;L9\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90F@\x8a_\xe0\xd7\xfag\x9f\xcfp2*}=\x01h\x04\x81V9\xa1Q\xe19\x85\xa4x\xb6/\xbe~M\xac%\x03\xdfm\x174\xb0\x8a{)$\xa6\xad\xadg6\x02P\xbf\x9a\x1d\xaeR\x1f_\x1b\x9cma\xc3\xa5\x19b\'H\x94|\x18\x8a\xd5\xbb\"\xfe\xdf\x8f', 0x7) fallocate(r0, 0x0, 0x400000000000000, 0x7) 1.767131793s ago: executing program 5 (id=2365): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r1, &(0x7f0000004380)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000480)="ba3d2374", 0x4}], 0x1, 0x0, 0x0, 0x844}}], 0x1, 0x814) 1.652889113s ago: executing program 5 (id=2368): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x0, 0x1}, &(0x7f00000004c0)=0x20) 1.572403309s ago: executing program 5 (id=2369): setreuid(0xee01, 0xee01) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 1.461208371s ago: executing program 5 (id=2370): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1.401146125s ago: executing program 5 (id=2371): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000500)={0x20, 0xc, 0x2, {0x2, 0xf}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000e00)={0x84, &(0x7f0000000980)={0x60, 0x9, 0xaa, "41e0ac9ab0e719150ecc4d79f6cac965f470abbf53b1eb44769193f3216c3eafdc0992b3a7c3b4faef289cf782ffa01a05c70f809b8f1beb8503e4e6f4a805ac31629f0e49453010ef352511cd745dae5a19f37ce6890cdc5e63225f34df8d5de0dfb2237ab4a7801e6b1e4cdead20aa3bb8610ece2d6f2524dbaa591d94bfd65a752a5a4a42090bed1480755a650badcc16125bfabdab2745f6189e18fade556b5490a63c19bbbf2b6c"}, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xf8, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d70") 1.306198242s ago: executing program 1 (id=2373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32=r0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2], 0x24}}, 0x0) 1.216024431s ago: executing program 1 (id=2374): unshare(0x2c020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) 1.195264853s ago: executing program 1 (id=2375): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x4206, r0) ptrace(0x4210, r0) 1.09245874s ago: executing program 1 (id=2377): r0 = socket$can_j1939(0x1d, 0x2, 0x7) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x8, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/11, 0xb}], 0x1) 1.037081773s ago: executing program 1 (id=2379): r0 = openat$kvm(0xffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000e1000000000000000027d2b1a6"]) 790.921106ms ago: executing program 1 (id=2386): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000005c0)={0x60, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 707.458682ms ago: executing program 2 (id=2387): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x5, 0x12) 664.70856ms ago: executing program 2 (id=2388): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = io_uring_setup(0x7691, &(0x7f0000000140)={0x0, 0x58fb, 0x10, 0x801, 0x23f}) close_range(r0, 0xffffffffffffffff, 0x0) 645.017379ms ago: executing program 2 (id=2390): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x1, 0x10100, 0x2, 0x200}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x8, 0x0, 0x0) 548.487812ms ago: executing program 2 (id=2392): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x1) read$FUSE(r2, 0x0, 0x0) 431.928935ms ago: executing program 3 (id=2395): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r0, 0x5, 0x0) 426.15676ms ago: executing program 2 (id=2396): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a6000000000", @ANYRES32], 0x4c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 406.987199ms ago: executing program 0 (id=2397): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x1000000, 0x0) 315.619917ms ago: executing program 2 (id=2398): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) 313.827084ms ago: executing program 3 (id=2399): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12, 0x6}]}}]}, 0x38}}, 0x0) 216.93011ms ago: executing program 0 (id=2400): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c00098008000200030000000c000280080001"], 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x0, 0x20000000}, 0xffffffffffffffff}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x0, 0x2}}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xa82a30e6a2733d2f}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 207.207274ms ago: executing program 3 (id=2401): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f00000002c0)) 124.251666ms ago: executing program 3 (id=2402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x28, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x2) 123.978136ms ago: executing program 0 (id=2403): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x9) 114.850282ms ago: executing program 3 (id=2404): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x28, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x28}}, 0x0) 52.179434ms ago: executing program 3 (id=2405): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) 0s ago: executing program 0 (id=2406): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) kernel console output (not intermixed with test programs): text=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.497689][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.505901][ T24] usb 2-1: config 0 has no interface number 0 [ 136.512330][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.553194][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.573506][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 136.602477][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.619487][ T24] usb 2-1: config 0 descriptor?? [ 136.715717][ T48] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 136.855749][ T5968] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 136.875505][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 136.883742][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.895881][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.907092][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.916857][ T92] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 136.924853][ T48] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 136.938783][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.954667][ T48] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 136.967058][ T48] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 136.975071][ T48] usb 3-1: Manufacturer: syz [ 136.987936][ T48] usb 3-1: config 0 descriptor?? [ 137.010387][ T5968] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 137.020137][ T5968] usb 1-1: config 0 has no interface number 0 [ 137.028011][ T5968] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 137.042895][ T24] prodikeys 0003:041E:2801.0020: invalid report_count -1454144258 [ 137.052226][ T5968] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 137.065684][ T24] prodikeys 0003:041E:2801.0020: item 0 4 1 9 parsing failed [ 137.073730][ T5968] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 137.089405][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.100797][ T24] prodikeys 0003:041E:2801.0020: hid parse failed [ 137.107636][ T5968] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 137.119047][ T92] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 137.128258][ T24] prodikeys 0003:041E:2801.0020: probe with driver prodikeys failed with error -22 [ 137.137969][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.148669][ T5968] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 137.161159][ T5968] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.178397][ T92] usb 4-1: config 0 descriptor?? [ 137.183968][ T5968] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 137.194922][ T5968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.209759][ T5968] usb 1-1: config 0 descriptor?? [ 137.216023][ T8500] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 137.223608][ T8500] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 137.260122][ T5968] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 137.303794][ T5968] usb 2-1: USB disconnect, device number 15 [ 137.347451][ T48] rc_core: IR keymap rc-hauppauge not found [ 137.355539][ T48] Registered IR keymap rc-empty [ 137.360568][ T48] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.385723][ T48] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.406660][ T48] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 137.425095][ T48] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 137.477383][ T48] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.500648][ T48] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.519268][ T9] usb 1-1: USB disconnect, device number 14 [ 137.537656][ T9] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 137.545535][ T48] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.566870][ T48] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.585567][ T48] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.609210][ T92] petalynx 0003:18B1:0037.0021: unknown main item tag 0x5 [ 137.625534][ T48] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.632722][ T92] petalynx 0003:18B1:0037.0021: unknown global tag 0xd [ 137.645534][ T92] petalynx 0003:18B1:0037.0021: item 0 2 1 13 parsing failed [ 137.653568][ T92] petalynx 0003:18B1:0037.0021: parse failed [ 137.675569][ T48] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.682891][ T92] petalynx 0003:18B1:0037.0021: probe with driver petalynx failed with error -22 [ 137.695571][ T48] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.718193][ T48] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.735516][ T48] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.777222][ T48] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 137.785220][ T48] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 137.834008][ T48] usb 3-1: USB disconnect, device number 18 [ 137.926710][ T5968] usb 4-1: USB disconnect, device number 17 [ 138.226548][ T5924] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 138.413181][ T5924] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.423721][ T5924] usb 2-1: config 0 has no interface number 0 [ 138.430635][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 138.444999][ T5924] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 138.455705][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.473356][ T5924] usb 2-1: config 0 descriptor?? [ 138.484037][ T5924] usb 2-1: selecting invalid altsetting 1 [ 138.500931][ T5924] dvb_ttusb_budget: ttusb_init_controller: error [ 138.512034][ T5924] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 138.605535][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 138.624702][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.645616][ T5924] DVB: Unable to find symbol cx22700_attach() [ 138.658234][ T9] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 138.704916][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.746684][ T9] usb 1-1: config 0 descriptor?? [ 138.754328][ T5924] DVB: Unable to find symbol tda10046_attach() [ 138.765104][ T5924] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 138.793683][ T5924] usb 2-1: USB disconnect, device number 16 [ 138.887333][ T48] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 139.045730][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 139.059428][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.077897][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.106154][ T48] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 139.106198][ T48] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 139.106219][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.108917][ T48] usb 4-1: config 0 descriptor?? [ 139.188027][ T9] uclogic 0003:5543:0064.0022: No inputs registered, leaving [ 139.208555][ T9] uclogic 0003:5543:0064.0022: hidraw0: USB HID v10.00 Device [HID 5543:0064] on usb-dummy_hcd.0-1/input0 [ 139.325799][ T8540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1163'. [ 139.349715][ T30] audit: type=1400 audit(1750405530.731:565): avc: denied { recv } for pid=5872 comm="kworker/1:5" saddr=10.128.0.169 src=30006 daddr=10.128.1.135 dest=57920 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 139.445164][ T5968] usb 1-1: USB disconnect, device number 15 [ 139.468679][ T30] audit: type=1400 audit(1750405530.851:566): avc: denied { create } for pid=8542 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 139.504680][ T30] audit: type=1400 audit(1750405530.851:567): avc: denied { getopt } for pid=8542 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 139.601628][ T48] hid-multitouch 0003:0457:07DA.0023: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 139.622046][ T30] audit: type=1400 audit(1750405530.981:568): avc: denied { setopt } for pid=8547 comm="syz.2.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.889172][ T5968] usb 4-1: USB disconnect, device number 18 [ 140.210082][ T5142] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 140.219562][ T5142] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 140.227763][ T5142] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 140.237387][ T5142] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 140.248624][ T5142] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 140.281935][ T30] audit: type=1400 audit(1750405531.661:569): avc: denied { mounton } for pid=8562 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 140.620357][ T30] audit: type=1400 audit(1750405532.001:570): avc: denied { create } for pid=8574 comm="syz.0.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.681411][ T30] audit: type=1400 audit(1750405532.041:571): avc: denied { connect } for pid=8574 comm="syz.0.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.767398][ T30] audit: type=1400 audit(1750405532.041:572): avc: denied { ioctl } for pid=8574 comm="syz.0.1178" path="socket:[17160]" dev="sockfs" ino=17160 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.813786][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.986911][ T8589] sg_write: process 484 (syz.2.1185) changed security contexts after opening file descriptor, this is not allowed. [ 141.187215][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.268829][ T30] audit: type=1400 audit(1750405532.651:573): avc: denied { mounton } for pid=8604 comm="syz.0.1193" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 141.520466][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.716739][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.764920][ T8562] chnl_net:caif_netlink_parms(): no params data found [ 141.815585][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 142.010032][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 142.035225][ T8642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1209'. [ 142.056571][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.069611][ T30] audit: type=1400 audit(1750405533.441:574): avc: denied { firmware_load } for pid=8636 comm="syz.2.1208" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 142.120780][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.135672][ T8637] syz.2.1208 (8637) used greatest stack depth: 19800 bytes left [ 142.175239][ T9] usb 2-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 142.176993][ T5968] libceph: connect (1)[c::]:6789 error -101 [ 142.201194][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.229671][ T9] usb 2-1: config 0 descriptor?? [ 142.232657][ T5968] libceph: mon0 (1)[c::]:6789 connect error [ 142.308722][ T51] Bluetooth: hci4: command tx timeout [ 142.331053][ T8562] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.358573][ T8562] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.369258][ T8562] bridge_slave_0: entered allmulticast mode [ 142.380142][ T8562] bridge_slave_0: entered promiscuous mode [ 142.404704][ T8562] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.417470][ T8562] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.424693][ T8562] bridge_slave_1: entered allmulticast mode [ 142.455323][ T5808] udevd[5808]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 142.458735][ T8562] bridge_slave_1: entered promiscuous mode [ 142.527085][ T5936] udevd[5936]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 142.575883][ T5968] libceph: connect (1)[c::]:6789 error -101 [ 142.596885][ T5968] libceph: mon0 (1)[c::]:6789 connect error [ 142.675550][ T30] audit: type=1400 audit(1750405534.051:575): avc: denied { read open } for pid=8660 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.720169][ T12] bridge_slave_1: left allmulticast mode [ 142.743819][ T9] chicony 0003:04F2:0418.0024: unknown main item tag 0x0 [ 142.754505][ T12] bridge_slave_1: left promiscuous mode [ 142.774089][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.779150][ T30] audit: type=1400 audit(1750405534.051:576): avc: denied { getattr } for pid=8660 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.790576][ T9] chicony 0003:04F2:0418.0024: reserved main item tag 0xe [ 142.837306][ T9] chicony 0003:04F2:0418.0024: unknown main item tag 0x0 [ 142.855480][ T9] chicony 0003:04F2:0418.0024: unbalanced collection at end of report description [ 142.858082][ T8645] ceph: No mds server is up or the cluster is laggy [ 142.865153][ T9] chicony 0003:04F2:0418.0024: Chicony hid parse failed: -22 [ 142.910655][ T12] bridge_slave_0: left allmulticast mode [ 142.929403][ T12] bridge_slave_0: left promiscuous mode [ 142.954300][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.965912][ T9] chicony 0003:04F2:0418.0024: probe with driver chicony failed with error -22 [ 142.968675][ T30] audit: type=1400 audit(1750405534.351:577): avc: denied { getopt } for pid=8667 comm="syz.3.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.007658][ T9] usb 2-1: USB disconnect, device number 17 [ 143.205208][ T30] audit: type=1400 audit(1750405534.581:578): avc: denied { add_name } for pid=8655 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.250785][ T30] audit: type=1400 audit(1750405534.581:579): avc: denied { create } for pid=8655 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.298825][ T30] audit: type=1400 audit(1750405534.581:580): avc: denied { write } for pid=8655 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=6465 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.332243][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1218'. [ 143.333168][ T30] audit: type=1400 audit(1750405534.581:581): avc: denied { append } for pid=8655 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=6465 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.389202][ T30] audit: type=1400 audit(1750405534.771:582): avc: denied { remove_name } for pid=8682 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=6465 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.430237][ T30] audit: type=1400 audit(1750405534.771:583): avc: denied { unlink } for pid=8682 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=6465 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.665034][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.680792][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.691666][ T12] bond0 (unregistering): Released all slaves [ 143.706389][ T8562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.738234][ T8562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.025147][ T8700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1225'. [ 144.110595][ T8703] ubi31: attaching mtd0 [ 144.120028][ T8703] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 144.153709][ T8696] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 144.248260][ T8562] team0: Port device team_slave_0 added [ 144.386128][ T51] Bluetooth: hci4: command tx timeout [ 144.394842][ T8562] team0: Port device team_slave_1 added [ 144.410430][ T5936] udevd[5936]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 144.484325][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1232'. [ 144.527897][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1232'. [ 144.629981][ T8562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.653850][ T8562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.681126][ T8562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.700561][ T8562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.753864][ T8562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.844714][ T8562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.164516][ T12] hsr_slave_0: left promiscuous mode [ 145.172851][ T12] hsr_slave_1: left promiscuous mode [ 145.187215][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.212100][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.231458][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.245257][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.254770][ T8759] netlink: 'syz.1.1249': attribute type 10 has an invalid length. [ 145.294632][ T12] veth1_macvtap: left promiscuous mode [ 145.307131][ T12] veth0_macvtap: left promiscuous mode [ 145.312759][ T12] veth1_vlan: left promiscuous mode [ 145.328071][ T12] veth0_vlan: left promiscuous mode [ 145.923113][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'. [ 145.939533][ T12] team0 (unregistering): Port device team_slave_1 removed [ 145.964548][ T12] team0 (unregistering): Port device team_slave_0 removed [ 146.190321][ T8562] hsr_slave_0: entered promiscuous mode [ 146.226371][ T8562] hsr_slave_1: entered promiscuous mode [ 146.242654][ T8562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.265437][ T8562] Cannot create hsr debugfs directory [ 146.290585][ T8759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.309981][ T8759] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 146.370637][ T8784] IPVS: Error joining to the multicast group [ 146.419114][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 146.476260][ T5142] Bluetooth: hci4: command tx timeout [ 146.732963][ T5968] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 146.802120][ T12] IPVS: stop unused estimator thread 0... [ 146.806798][ T8562] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 146.827547][ T8562] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 146.841177][ T8562] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 146.847967][ T48] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 146.864464][ T8562] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.898487][ T5968] usb 2-1: Using ep0 maxpacket: 8 [ 146.913229][ T5968] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 146.930189][ T5968] usb 2-1: config 0 has no interface number 0 [ 146.948974][ T5968] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 146.953272][ T8562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.969401][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.981263][ T8562] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.992299][ T5968] usb 2-1: Product: syz [ 146.999557][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.001044][ T5968] usb 2-1: Manufacturer: syz [ 147.006689][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.007383][ T5924] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 147.023937][ T48] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 147.038409][ T5968] usb 2-1: SerialNumber: syz [ 147.044571][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.049107][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.052380][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.061554][ T5968] usb 2-1: config 0 descriptor?? [ 147.078503][ T48] usb 3-1: Product: syz [ 147.083036][ T48] usb 3-1: Manufacturer: syz [ 147.101587][ T48] usb 3-1: SerialNumber: syz [ 147.130061][ T48] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 147.165322][ T5982] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 147.209508][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 147.209521][ T30] audit: type=1400 audit(1750405538.591:588): avc: denied { sys_module } for pid=8562 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 147.264256][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.291223][ T5924] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 147.319731][ T5968] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 147.327098][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.328343][ T5968] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 147.353870][ T5924] usb 4-1: config 0 descriptor?? [ 147.412394][ T5968] usb 2-1: Failed to create links for entity 5 [ 147.423047][ T5968] usb 2-1: Failed to register entities (-22). [ 147.451779][ T8562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.461657][ T5968] usb 2-1: USB disconnect, device number 18 [ 147.782335][ T5924] betop 0003:11C0:5506.0025: invalid report_size 531 [ 147.803580][ T5924] betop 0003:11C0:5506.0025: item 0 2 1 7 parsing failed [ 147.816514][ T5924] betop 0003:11C0:5506.0025: parse failed [ 147.832456][ T5924] betop 0003:11C0:5506.0025: probe with driver betop failed with error -22 [ 147.845254][ T8562] veth0_vlan: entered promiscuous mode [ 147.871482][ T8562] veth1_vlan: entered promiscuous mode [ 147.965976][ T5872] usb 3-1: USB disconnect, device number 19 [ 147.993895][ T48] usb 4-1: USB disconnect, device number 19 [ 148.049757][ T8562] veth0_macvtap: entered promiscuous mode [ 148.064464][ T8562] veth1_macvtap: entered promiscuous mode [ 148.091158][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'. [ 148.105266][ T8562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.182673][ T8562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.218244][ T8562] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.230805][ T8562] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.240186][ T8562] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.250508][ T8562] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.286439][ T30] audit: type=1401 audit(1750405539.661:589): op=fscreate invalid_context=04 [ 148.396670][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.415276][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.449614][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.463336][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.468263][ T5142] Bluetooth: hci5: command 0x1003 tx timeout [ 148.470934][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 148.513994][ T30] audit: type=1400 audit(1750405539.881:590): avc: denied { mounton } for pid=8562 comm="syz-executor" path="/root/syzkaller.yHCAaG/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 148.554640][ T5982] usb 3-1: Service connection timeout for: 256 [ 148.565771][ T5982] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 148.575197][ T51] Bluetooth: hci4: command tx timeout [ 148.587530][ T8859] mkiss: ax0: crc mode is auto. [ 148.598726][ T30] audit: type=1400 audit(1750405539.881:591): avc: denied { mount } for pid=8562 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 148.621612][ T30] audit: type=1400 audit(1750405539.881:592): avc: denied { mount } for pid=8562 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 148.654112][ T30] audit: type=1400 audit(1750405539.881:593): avc: denied { mounton } for pid=8562 comm="syz-executor" path="/root/syzkaller.yHCAaG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 148.681220][ T5982] ath9k_htc: Failed to initialize the device [ 148.690940][ T5872] usb 3-1: ath9k_htc: USB layer deinitialized [ 148.719952][ T30] audit: type=1400 audit(1750405539.881:594): avc: denied { mounton } for pid=8562 comm="syz-executor" path="/root/syzkaller.yHCAaG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 148.879626][ T30] audit: type=1400 audit(1750405540.021:595): avc: denied { mounton } for pid=8562 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 149.012274][ T30] audit: type=1400 audit(1750405540.031:596): avc: denied { mount } for pid=8562 comm="syz-executor" name="/" dev="gadgetfs" ino=5047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 149.115563][ T30] audit: type=1400 audit(1750405540.031:597): avc: denied { mount } for pid=8562 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 151.167502][ T8994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.450246][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1330'. [ 151.648817][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'. [ 151.689118][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'. [ 151.726138][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'. [ 152.284779][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 152.284795][ T30] audit: type=1400 audit(1750405543.661:608): avc: denied { connect } for pid=9050 comm="syz.3.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 152.463701][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1351'. [ 152.473911][ T9063] netlink: 552 bytes leftover after parsing attributes in process `syz.3.1361'. [ 152.529172][ T30] audit: type=1400 audit(1750405543.911:609): avc: denied { write } for pid=9066 comm="syz.1.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.661134][ T30] audit: type=1400 audit(1750405544.041:610): avc: denied { connect } for pid=9074 comm="syz.2.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.767694][ T9063] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 153.004377][ T30] audit: type=1400 audit(1750405544.381:611): avc: denied { mounton } for pid=9086 comm="syz.0.1358" path="/315/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 153.063166][ T5887] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 153.084858][ T30] audit: type=1400 audit(1750405544.461:612): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 153.151044][ T30] audit: type=1400 audit(1750405544.491:613): avc: denied { mounton } for pid=9095 comm="syz.5.1363" path="/20/bus" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 153.225440][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 153.251537][ T9100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1364'. [ 153.279567][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.314785][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.348375][ T30] audit: type=1400 audit(1750405544.731:614): avc: denied { setcheckreqprot } for pid=9103 comm="syz.2.1366" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 153.355142][ T5887] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 153.481582][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.516191][ T5887] usb 2-1: config 0 descriptor?? [ 153.792692][ T30] audit: type=1400 audit(1750405545.171:615): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 153.891124][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'. [ 153.943495][ T5887] hkems 0003:2006:0118.0026: item fetching failed at offset 0/2 [ 153.958725][ T5887] hkems 0003:2006:0118.0026: parse failed [ 153.987268][ T5887] hkems 0003:2006:0118.0026: probe with driver hkems failed with error -22 [ 154.035484][ T5924] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 154.199494][ T9143] mkiss: ax0: crc mode is auto. [ 154.215969][ T5924] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 154.236448][ T9] usb 2-1: USB disconnect, device number 19 [ 154.245605][ T5924] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 154.267304][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.297421][ T5924] usb 6-1: config 0 descriptor?? [ 154.520875][ T30] audit: type=1400 audit(1750405545.901:616): avc: denied { create } for pid=9151 comm="syz.0.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 154.727090][ T5924] lua 0003:1E7D:2C2E.0027: item fetching failed at offset 2/3 [ 154.746194][ T5924] lua 0003:1E7D:2C2E.0027: parse failed [ 154.785529][ T5924] lua 0003:1E7D:2C2E.0027: probe with driver lua failed with error -22 [ 154.923994][ T5924] usb 6-1: USB disconnect, device number 2 [ 155.476476][ T5982] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 155.515762][ T5924] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 155.561575][ T9209] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.651284][ T5982] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 155.682123][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.696780][ T5924] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 155.710187][ T30] audit: type=1400 audit(1750405547.091:617): avc: denied { block_suspend } for pid=9215 comm="syz.5.1411" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.731001][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 155.746017][ T5982] usb 2-1: config 0 descriptor?? [ 155.782623][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 155.805814][ T5887] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 155.824559][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 155.862679][ T5924] usb 3-1: New USB device found, idVendor=227d, idProduct=0709, bcdDevice= 0.00 [ 155.886032][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.930495][ T5924] usb 3-1: config 0 descriptor?? [ 155.950298][ T9195] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 155.965873][ T9195] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 155.987832][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.019131][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.062025][ T5887] usb 4-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 156.072078][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.106075][ T5887] usb 4-1: config 0 descriptor?? [ 156.384505][ T5982] usb 2-1: Cannot set autoneg [ 156.410319][ T5982] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 156.424803][ T5924] hid-generic 0003:227D:0709.0028: hidraw0: USB HID v1.01 Device [HID 227d:0709] on usb-dummy_hcd.2-1/input0 [ 156.453297][ T5982] usb 2-1: USB disconnect, device number 20 [ 156.515802][ T9251] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1422'. [ 156.555164][ T9251] tipc: Invalid UDP bearer configuration [ 156.555212][ T9251] tipc: Enabling of bearer rejected, failed to enable media [ 156.570183][ T5887] waltop 0003:172F:0038.0029: hidraw1: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.3-1/input0 [ 156.699231][ T5887] usb 3-1: USB disconnect, device number 20 [ 156.799784][ T5968] usb 4-1: USB disconnect, device number 20 [ 156.880947][ T9264] IPVS: length: 139 != 8 [ 157.255612][ T5968] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 157.395544][ T5924] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 157.432374][ T5968] usb 6-1: Using ep0 maxpacket: 32 [ 157.446623][ T5968] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.454987][ T5968] usb 6-1: config 0 has no interface number 0 [ 157.493559][ T5968] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 157.514731][ T5968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.528624][ T9300] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 157.528624][ T9300] program syz.1.1439 not setting count and/or reply_len properly [ 157.545695][ T5968] usb 6-1: Product: syz [ 157.549864][ T5968] usb 6-1: Manufacturer: syz [ 157.566090][ T5968] usb 6-1: SerialNumber: syz [ 157.572852][ T5968] usb 6-1: config 0 descriptor?? [ 157.588118][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.610521][ T5968] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 157.625559][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.625599][ T5924] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 157.625621][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.628644][ T5924] usb 1-1: config 0 descriptor?? [ 157.640238][ T5968] usb 6-1: selecting invalid altsetting 1 [ 157.671243][ T5968] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 157.679466][ T5968] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 157.679767][ T5968] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 157.679808][ T5968] usb 6-1: media controller created [ 157.719018][ T5968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.815788][ T5887] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 157.968844][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 157.968859][ T30] audit: type=1400 audit(1750405549.351:623): avc: denied { getopt } for pid=9316 comm="syz.1.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.011420][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 158.023944][ T5887] usb 3-1: config 0 has an invalid interface number: 92 but max is 0 [ 158.034885][ T5887] usb 3-1: config 0 has no interface number 0 [ 158.043301][ T5887] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=81.44 [ 158.058904][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.077404][ T5887] usb 3-1: Product: syz [ 158.083502][ T5924] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 158.098201][ T5887] usb 3-1: Manufacturer: syz [ 158.105465][ T5887] usb 3-1: SerialNumber: syz [ 158.126019][ T5924] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002A/input/input20 [ 158.144760][ T5887] usb 3-1: config 0 descriptor?? [ 158.306577][ T5924] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 158.354784][ T5924] usb 1-1: USB disconnect, device number 16 [ 158.374612][ T5887] usb 3-1: USB disconnect, device number 21 [ 158.503150][ T9332] fido_id[9332]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 158.660622][ T5982] kernel write not supported for file /dsp1 (pid: 5982 comm: kworker/1:8) [ 158.786932][ T5968] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 158.794870][ T5968] zl10353_read_register: readreg error (reg=127, ret==-110) [ 158.808536][ T5968] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 158.828156][ T5872] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 158.865734][ T5968] usb 6-1: USB disconnect, device number 3 [ 158.959470][ T30] audit: type=1326 audit(1750405550.341:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9353 comm="syz.1.1465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49a838e929 code=0x0 [ 158.997672][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.002207][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1464'. [ 159.021593][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.038085][ T5872] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 159.049193][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.090937][ T5872] usb 4-1: config 0 descriptor?? [ 159.108311][ T5872] hub 4-1:0.0: USB hub found [ 159.184613][ T30] audit: type=1400 audit(1750405550.561:625): avc: denied { write } for pid=9363 comm="syz.0.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 159.299905][ T5872] hub 4-1:0.0: 2 ports detected [ 159.337806][ T5924] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 159.506061][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 159.519366][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.533712][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.547891][ T5924] usb 3-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.00 [ 159.557130][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.578812][ T5924] usb 3-1: config 0 descriptor?? [ 159.715518][ T5887] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 159.718537][ T5872] usb 4-1: USB disconnect, device number 21 [ 159.895457][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 159.895610][ T48] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 159.902214][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.920788][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.931032][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 159.943900][ T5887] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 159.953053][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.965052][ T5887] usb 1-1: config 0 descriptor?? [ 160.002391][ T5924] lenovo 0003:04B3:3103.002B: item fetching failed at offset 7/9 [ 160.015367][ T5924] lenovo 0003:04B3:3103.002B: hid_parse failed [ 160.023828][ T5924] lenovo 0003:04B3:3103.002B: probe with driver lenovo failed with error -22 [ 160.057526][ T48] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 160.065880][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 160.081899][ T48] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 160.093272][ T48] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 160.107340][ T48] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 160.119299][ T48] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 160.137509][ T48] usb 6-1: config 0 interface 0 has no altsetting 0 [ 160.151148][ T48] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 160.162974][ T48] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 160.172205][ T48] usb 6-1: Product: syz [ 160.179121][ T48] usb 6-1: Manufacturer: syz [ 160.183722][ T48] usb 6-1: SerialNumber: syz [ 160.192129][ T48] usb 6-1: config 0 descriptor?? [ 160.212265][ T9381] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 160.225644][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 160.243216][ T9] usb 2-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.243543][ T48] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 160.267916][ T5968] usb 3-1: USB disconnect, device number 22 [ 160.289441][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.289636][ T48] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 160.317256][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 160.350934][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.379039][ T9] usb 2-1: config 0 descriptor?? [ 160.416362][ T5887] shield 0003:0955:7214.002C: unknown main item tag 0x0 [ 160.423434][ T5887] shield 0003:0955:7214.002C: unknown main item tag 0x0 [ 160.450534][ T5887] shield 0003:0955:7214.002C: unknown main item tag 0x0 [ 160.475317][ T5887] shield 0003:0955:7214.002C: unknown main item tag 0x0 [ 160.485822][ T5887] shield 0003:0955:7214.002C: unknown main item tag 0x0 [ 160.500971][ T5887] input: HID 0955:7214 Haptics as /devices/virtual/input/input21 [ 160.518013][ T5968] usb 6-1: USB disconnect, device number 4 [ 160.539348][ T5968] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 160.571618][ T5887] shield 0003:0955:7214.002C: Registered Thunderstrike controller [ 160.571958][ T5887] shield 0003:0955:7214.002C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 160.629154][ T5887] usb 1-1: USB disconnect, device number 17 [ 160.644843][ T1208] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 160.669916][ T1208] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 160.690864][ T1208] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 160.703047][ T1208] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 160.735260][ T30] audit: type=1400 audit(1750405552.111:626): avc: denied { name_bind } for pid=9405 comm="syz.3.1479" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 160.830450][ T9] logitech 0003:046D:C219.002D: unknown main item tag 0x2 [ 160.863883][ T9] logitech 0003:046D:C219.002D: hidraw0: USB HID v0.01 Device [HID 046d:c219] on usb-dummy_hcd.1-1/input0 [ 160.903887][ T9] logitech 0003:046D:C219.002D: no inputs found [ 161.012832][ T9417] ucma_write: process 597 (syz.2.1484) changed security contexts after opening file descriptor, this is not allowed. [ 161.044337][ T5887] usb 2-1: USB disconnect, device number 21 [ 161.331334][ T9428] mkiss: ax0: crc mode is auto. [ 161.856843][ T9460] overlayfs: workdir and upperdir must be separate subtrees [ 161.943052][ T9466] SELinux: security policydb version 18 (MLS) not backwards compatible [ 161.944552][ T30] audit: type=1400 audit(1750405553.321:627): avc: denied { load_policy } for pid=9465 comm="syz.1.1507" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 161.972233][ T9466] SELinux: failed to load policy [ 162.040044][ T30] audit: type=1400 audit(1750405553.381:628): avc: denied { append } for pid=9470 comm="syz.2.1510" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 162.075974][ T9472] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 162.119649][ T9475] tipc: Can't bind to reserved service type 0 [ 162.132424][ T30] audit: type=1400 audit(1750405553.511:629): avc: denied { create } for pid=9476 comm="syz.2.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 162.151789][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.227235][ T30] audit: type=1400 audit(1750405553.561:630): avc: denied { bind } for pid=9476 comm="syz.2.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 162.285971][ T30] audit: type=1400 audit(1750405553.561:631): avc: denied { connect } for pid=9476 comm="syz.2.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 162.424236][ T9491] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 162.435693][ T5968] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 162.595529][ T5968] usb 2-1: Using ep0 maxpacket: 32 [ 162.612289][ T5968] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 162.624036][ T5968] usb 2-1: config 0 has no interface number 0 [ 162.632840][ T5968] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 162.642798][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.651107][ T5968] usb 2-1: Product: syz [ 162.656771][ T5968] usb 2-1: Manufacturer: syz [ 162.661734][ T5968] usb 2-1: SerialNumber: syz [ 162.677016][ T5982] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 162.706522][ T5968] usb 2-1: config 0 descriptor?? [ 162.718801][ T5968] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 162.749448][ T5968] usb 2-1: selecting invalid altsetting 1 [ 162.756867][ T5968] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 162.771684][ T30] audit: type=1400 audit(1750405554.151:632): avc: denied { connect } for pid=9507 comm="syz.5.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 162.773795][ T5968] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 162.802292][ T5968] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 162.814501][ T5968] usb 2-1: media controller created [ 162.834212][ T5968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.847001][ T5982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.872232][ T5982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.898837][ T5982] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 162.908794][ T5982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.926900][ T5982] usb 1-1: config 0 descriptor?? [ 163.013210][ T30] audit: type=1400 audit(1750405554.391:633): avc: denied { write } for pid=9513 comm="syz.3.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.270257][ T9527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1535'. [ 163.351502][ T30] audit: type=1400 audit(1750405554.731:634): avc: denied { ioctl } for pid=9531 comm="syz.2.1537" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.413243][ T30] audit: type=1400 audit(1750405554.731:635): avc: denied { set_context_mgr } for pid=9531 comm="syz.2.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 163.482737][ T30] audit: type=1400 audit(1750405554.861:636): avc: denied { create } for pid=9539 comm="syz.2.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 163.549765][ T30] audit: type=1400 audit(1750405554.901:637): avc: denied { connect } for pid=9539 comm="syz.2.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 163.601022][ T5982] usb 1-1: string descriptor 0 read error: -71 [ 163.613391][ T5982] uclogic 0003:256C:006D.002E: failed retrieving string descriptor #200: -71 [ 163.640925][ T30] audit: type=1400 audit(1750405554.901:638): avc: denied { write } for pid=9539 comm="syz.2.1540" laddr=172.20.20.10 lport=1 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 163.688446][ T5982] uclogic 0003:256C:006D.002E: failed retrieving pen parameters: -71 [ 163.699074][ T5982] uclogic 0003:256C:006D.002E: failed probing pen v2 parameters: -71 [ 163.713364][ T5982] uclogic 0003:256C:006D.002E: failed probing parameters: -71 [ 163.748789][ T30] audit: type=1400 audit(1750405554.991:639): avc: denied { create } for pid=9542 comm="syz.5.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 163.783990][ T5982] uclogic 0003:256C:006D.002E: probe with driver uclogic failed with error -71 [ 163.805758][ T5982] usb 1-1: USB disconnect, device number 18 [ 163.840596][ T30] audit: type=1400 audit(1750405554.991:640): avc: denied { write } for pid=9542 comm="syz.5.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 163.906560][ T5968] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 163.918638][ T5968] zl10353_read_register: readreg error (reg=127, ret==-110) [ 163.937624][ T9480] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 163.974681][ T5968] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 164.040347][ T9558] pim6reg9: entered allmulticast mode [ 164.104055][ T5968] usb 2-1: USB disconnect, device number 22 [ 164.377870][ T30] audit: type=1400 audit(1750405555.751:641): avc: denied { getopt } for pid=9573 comm="syz.3.1552" lport=48 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.389002][ T9574] Bluetooth: MGMT ver 1.23 [ 164.686916][ T9594] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 164.729137][ T9594] overlayfs: missing 'lowerdir' [ 165.659724][ T30] audit: type=1400 audit(1750405557.041:642): avc: denied { ioctl } for pid=9646 comm="syz.0.1576" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 165.828332][ T9655] team_slave_0: entered promiscuous mode [ 165.834262][ T9655] team_slave_1: entered promiscuous mode [ 165.913250][ T9655] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 165.976700][ T9655] team0: Device macvtap1 is already an upper device of the team interface [ 166.060320][ T9655] team_slave_0: left promiscuous mode [ 166.065832][ T9655] team_slave_1: left promiscuous mode [ 167.555679][ T5968] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 168.185524][ T5968] usb 3-1: Using ep0 maxpacket: 16 [ 168.218552][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.241194][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.282479][ T5968] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 168.315443][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.331404][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 168.331418][ T30] audit: type=1400 audit(1750405559.711:651): avc: denied { bind } for pid=9768 comm="syz.0.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 168.337679][ T5968] usb 3-1: config 0 descriptor?? [ 168.495483][ T5924] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 168.589349][ T9785] autofs: Bad value for 'fd' [ 168.655479][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 168.674183][ T5924] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 168.685471][ T5924] usb 4-1: config 0 has no interface number 0 [ 168.691581][ T5924] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 168.746409][ T5924] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 168.768829][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.801440][ T5924] usb 4-1: Product: syz [ 168.810316][ T5924] usb 4-1: Manufacturer: syz [ 168.837558][ T5924] usb 4-1: SerialNumber: syz [ 168.848067][ T5924] usb 4-1: config 0 descriptor?? [ 168.849772][ T5968] samsung 0003:0419:0001.002F: global environment stack underflow [ 168.918898][ T5968] samsung 0003:0419:0001.002F: item 0 4 1 11 parsing failed [ 168.945854][ T5968] samsung 0003:0419:0001.002F: parse failed [ 168.967434][ T5968] samsung 0003:0419:0001.002F: probe with driver samsung failed with error -22 [ 169.177303][ T5924] usb 4-1: USB disconnect, device number 22 [ 169.240951][ T5887] usb 3-1: USB disconnect, device number 23 [ 169.244097][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.400302][ T30] audit: type=1400 audit(1750405560.781:652): avc: denied { read } for pid=9822 comm="syz.0.1637" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.521309][ T30] audit: type=1400 audit(1750405560.901:653): avc: denied { ioctl } for pid=9829 comm="syz.0.1640" path="/dev/vhost-vsock" dev="devtmpfs" ino=1276 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 169.818987][ T30] audit: type=1400 audit(1750405561.191:654): avc: denied { setopt } for pid=9846 comm="syz.0.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 170.195445][ T30] audit: type=1400 audit(1750405561.571:655): avc: denied { ioctl } for pid=9869 comm="syz.5.1656" path="socket:[21399]" dev="sockfs" ino=21399 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 170.528110][ T30] audit: type=1400 audit(1750405561.911:656): avc: denied { connect } for pid=9892 comm="syz.2.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 170.655540][ T9902] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1669'. [ 170.890761][ T30] audit: type=1400 audit(1750405562.271:657): avc: denied { listen } for pid=9916 comm="syz.0.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.914446][ T5924] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 171.097049][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 171.142185][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 171.154116][ T5924] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.201229][ T5924] usb 6-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 171.255509][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.294099][ T5924] usb 6-1: config 0 descriptor?? [ 171.330752][ T9904] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 171.494521][ T9953] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 171.550957][ T9953] CIFS: Unable to determine destination address [ 171.591878][ T9957] [U]  [ 171.688121][ T30] audit: type=1326 audit(1750405563.061:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.2.1694" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c9d58e929 code=0x0 [ 171.767517][ T5924] nzxt-smart2 0003:1E71:200F.0030: unknown main item tag 0x0 [ 171.800101][ T5924] nzxt-smart2 0003:1E71:200F.0030: item fetching failed at offset 4/5 [ 171.829523][ T5924] nzxt-smart2 0003:1E71:200F.0030: probe with driver nzxt-smart2 failed with error -22 [ 171.831741][ T9972] Bluetooth: MGMT ver 1.23 [ 171.971734][ T5924] usb 6-1: USB disconnect, device number 5 [ 171.972377][ T9980] loop2: detected capacity change from 0 to 7 [ 172.006128][ T5936] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 172.015690][ T5936] loop2: partition table partially beyond EOD, truncated [ 172.026125][ T5936] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 172.056182][ T9980] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 172.061570][ T9980] loop2: partition table partially beyond EOD, truncated [ 172.072702][ T9980] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 172.119477][ T5936] udevd[5936]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 172.153421][ T5936] udevd[5936]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 172.255472][ T5982] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 172.308814][ T30] audit: type=1400 audit(1750405563.691:659): avc: denied { ioctl } for pid=9993 comm="syz.3.1709" path="socket:[23635]" dev="sockfs" ino=23635 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.335567][ T5887] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 172.408710][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.421738][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.432764][ T5982] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 172.436429][ T30] audit: type=1400 audit(1750405563.811:660): avc: denied { mounton } for pid=9997 comm="syz.3.1711" path="/newroot/proc/735/ns/mnt" dev="proc" ino=22622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 172.444230][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.481112][ T5982] usb 2-1: config 0 descriptor?? [ 172.525316][T10000] vivid-002: disconnect [ 172.534677][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 172.544750][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.575945][ T9999] vivid-002: reconnect [ 172.585567][ T5887] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.641036][ T5887] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.669923][ T5887] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 172.694678][ T5887] usb 1-1: config 0 interface 0 has no altsetting 0 [ 172.701461][ T5887] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 172.715613][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.771770][ T5887] usb 1-1: config 0 descriptor?? [ 172.909083][ T5982] hid-steam 0003:28DE:1142.0031: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 172.997619][ T5982] hid-steam 0003:28DE:1142.0031: Steam wireless receiver connected [ 173.038947][T10025] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1723'. [ 173.061269][ T5982] hid-steam 0003:28DE:1142.0032: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 173.073430][T10025] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1723'. [ 173.193305][ T5982] usb 2-1: USB disconnect, device number 23 [ 173.236821][T10026] fido_id[10026]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 173.238749][ T5887] hid-thrustmaster 0003:044F:B65D.0033: global environment stack underflow [ 173.256965][ T5982] hid-steam 0003:28DE:1142.0031: Steam wireless receiver disconnected [ 173.310362][ T5887] hid-thrustmaster 0003:044F:B65D.0033: item 0 4 1 11 parsing failed [ 173.356678][ T5887] hid-thrustmaster 0003:044F:B65D.0033: parse failed with error -22 [ 173.364747][ T5887] hid-thrustmaster 0003:044F:B65D.0033: probe with driver hid-thrustmaster failed with error -22 [ 173.527703][ T1208] usb 1-1: USB disconnect, device number 19 [ 173.549097][T10042] usb usb8: usbfs: process 10042 (syz.2.1731) did not claim interface 0 before use [ 174.057746][ T5887] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 174.256394][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 174.266770][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.293097][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.315162][ T5887] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 174.325381][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.356227][ T5887] usb 2-1: config 0 descriptor?? [ 174.405510][ T5982] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 174.425501][ T48] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 174.525644][ T1208] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 174.569684][ T5982] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.581992][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 174.587407][ T5982] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.598280][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.612998][ T48] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 174.613136][ T5982] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.632632][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.640846][ T5982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.651148][ T5982] usb 1-1: Product: syz [ 174.657186][ T48] usb 4-1: config 0 descriptor?? [ 174.662219][ T5982] usb 1-1: Manufacturer: syz [ 174.667414][ T5982] usb 1-1: SerialNumber: syz [ 174.675454][ T1208] usb 3-1: Using ep0 maxpacket: 32 [ 174.693159][ T1208] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.708301][ T1208] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 174.723881][ T1208] usb 3-1: config 0 interface 0 has no altsetting 0 [ 174.733555][ T1208] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 174.743514][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.759735][ T1208] usb 3-1: config 0 descriptor?? [ 174.806858][ T5887] aquacomputer_d5next 0003:0C70:F00A.0034: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.1-1/input0 [ 174.964120][T10104] syz.5.1761 (10104): /proc/10103/oom_adj is deprecated, please use /proc/10103/oom_score_adj instead. [ 175.023928][ T5887] usb 2-1: USB disconnect, device number 24 [ 175.089397][ T48] pantherlord 0003:0E8F:0003.0035: item fetching failed at offset 4/5 [ 175.100982][ T5982] usb 1-1: cannot find UAC_HEADER [ 175.122772][ T48] pantherlord 0003:0E8F:0003.0035: parse failed [ 175.131245][ T48] pantherlord 0003:0E8F:0003.0035: probe with driver pantherlord failed with error -22 [ 175.146080][ T5982] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 175.214827][ T1208] wacom 0003:056A:0094.0036: Using device in hidraw-only mode [ 175.233340][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.251464][ T1208] wacom 0003:056A:0094.0036: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 175.262625][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 175.262637][ T30] audit: type=1400 audit(1750405566.631:666): avc: denied { map } for pid=10111 comm="syz.5.1765" path="socket:[24015]" dev="sockfs" ino=24015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.302608][ T48] usb 4-1: USB disconnect, device number 23 [ 175.340696][ T5924] usb 1-1: USB disconnect, device number 20 [ 175.359109][ T30] audit: type=1400 audit(1750405566.631:667): avc: denied { read } for pid=10111 comm="syz.5.1765" path="socket:[24015]" dev="sockfs" ino=24015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.409036][ T5982] usb 3-1: USB disconnect, device number 24 [ 175.422301][T10115] tmpfs: Cannot disable swap on remount [ 175.431225][ T30] audit: type=1400 audit(1750405566.801:668): avc: denied { remount } for pid=10114 comm="syz.5.1766" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.458277][ T30] audit: type=1400 audit(1750405566.831:669): avc: denied { unmount } for pid=8562 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.569120][ T30] audit: type=1400 audit(1750405566.951:670): avc: denied { map } for pid=10118 comm="syz.5.1768" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.086111][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1777'. [ 176.348789][ T30] audit: type=1400 audit(1750405567.731:671): avc: denied { map } for pid=10149 comm="syz.5.1781" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 176.443804][ T30] audit: type=1400 audit(1750405567.731:672): avc: denied { execute } for pid=10149 comm="syz.5.1781" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 176.550899][ T30] audit: type=1400 audit(1750405567.931:673): avc: denied { create } for pid=10158 comm="syz.3.1787" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.575959][T10161] overlayfs: failed to resolve '/f(ƀ': -2 [ 176.633484][ T30] audit: type=1400 audit(1750405567.961:674): avc: denied { write } for pid=10158 comm="syz.3.1787" name="file0" dev="tmpfs" ino=1884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.718884][ T30] audit: type=1400 audit(1750405567.961:675): avc: denied { open } for pid=10158 comm="syz.3.1787" path="/370/file0" dev="tmpfs" ino=1884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 177.395772][ T48] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 177.578085][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.613296][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.638744][ T48] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 177.664543][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.700787][ T48] usb 2-1: config 0 descriptor?? [ 177.717124][ T9] hid-generic 0007:0005:0009.0037: unknown main item tag 0x1 [ 177.745139][ T9] hid-generic 0007:0005:0009.0037: unknown main item tag 0x3 [ 177.767977][ T9] hid-generic 0007:0005:0009.0037: hidraw0: HID v0.08 Device [syz1] on syz1 [ 177.885544][T10223] sg_write: data in/out 209152/4 bytes for SCSI command 0xf2-- guessing data in; [ 177.885544][T10223] program syz.0.1818 not setting count and/or reply_len properly [ 177.937638][T10222] fido_id[10222]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 178.157790][ T48] lenovo 0003:17EF:6047.0038: unknown main item tag 0x0 [ 178.171854][ T48] lenovo 0003:17EF:6047.0038: unknown main item tag 0x0 [ 178.189665][ T48] lenovo 0003:17EF:6047.0038: unknown main item tag 0x0 [ 178.212908][ T48] lenovo 0003:17EF:6047.0038: unknown main item tag 0x0 [ 178.220521][ T48] lenovo 0003:17EF:6047.0038: unknown main item tag 0x0 [ 178.256634][ T48] lenovo 0003:17EF:6047.0038: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 178.383806][ T48] lenovo 0003:17EF:6047.0038: Failed to switch F7/9/11 mode: -71 [ 178.406598][ T5982] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 178.424693][ T48] lenovo 0003:17EF:6047.0038: Failed to switch middle button: -71 [ 178.445855][ T48] lenovo 0003:17EF:6047.0038: Fn-lock setting failed: -71 [ 178.463562][ T48] lenovo 0003:17EF:6047.0038: Sensitivity setting failed: -71 [ 178.491186][ T48] usb 2-1: USB disconnect, device number 25 [ 178.595473][ T5982] usb 3-1: Using ep0 maxpacket: 32 [ 178.602245][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.630732][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.680336][ T5982] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 178.695055][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1833'. [ 178.715651][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.736544][ T5982] usb 3-1: config 0 descriptor?? [ 179.166914][ T5982] macally 0003:060B:0001.0039: unknown main item tag 0x0 [ 179.175064][ T5982] macally 0003:060B:0001.0039: unknown main item tag 0x0 [ 179.182184][ T48] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 179.215767][ T5982] macally 0003:060B:0001.0039: unknown main item tag 0x0 [ 179.222845][ T5982] macally 0003:060B:0001.0039: unknown main item tag 0x0 [ 179.245454][ T5982] macally 0003:060B:0001.0039: unknown main item tag 0x0 [ 179.245498][ T5924] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 179.275166][ T5982] macally 0003:060B:0001.0039: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.2-1/input0 [ 179.308402][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1846'. [ 179.317366][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1846'. [ 179.329879][T10287] netlink: 'syz.0.1846': attribute type 12 has an invalid length. [ 179.366854][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 179.381938][ T5887] usb 3-1: USB disconnect, device number 25 [ 179.388068][ T48] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 179.415250][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 179.426827][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 179.426862][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 179.426887][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 179.426910][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 179.428717][ T5924] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 179.447451][ T48] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 179.449910][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.473496][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.480531][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 179.505916][ T48] usb 6-1: Product: syz [ 179.505935][ T48] usb 6-1: Manufacturer: syz [ 179.505949][ T48] usb 6-1: SerialNumber: syz [ 179.526927][ T48] usb 6-1: config 0 descriptor?? [ 179.529543][ T5924] usb 4-1: Product: syz [ 179.536575][ T5924] usb 4-1: Manufacturer: syz [ 179.541172][ T5924] usb 4-1: SerialNumber: syz [ 179.546112][T10269] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 179.555601][T10269] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 179.567366][ T48] usb 6-1: ucan: probing device on interface #0 [ 179.567910][ T5924] usb 4-1: config 0 descriptor?? [ 179.585104][ T5924] iguanair 4-1:0.0: failed to get version [ 179.597588][ T5924] iguanair 4-1:0.0: probe with driver iguanair failed with error -90 [ 179.697038][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.710383][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.722488][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 179.733727][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.743578][ T9] usb 2-1: config 0 descriptor?? [ 179.843045][ T5982] usb 4-1: USB disconnect, device number 24 [ 179.976538][ T48] usb 6-1: ucan: device reported invalid device info [ 179.983271][ T48] usb 6-1: ucan: probe failed; try to update the device firmware [ 180.196714][ T9] kone 0003:1E7D:2CED.003A: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 180.221954][ T5982] usb 6-1: USB disconnect, device number 6 [ 180.379918][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1861'. [ 180.433719][ T9] usb 2-1: USB disconnect, device number 26 [ 180.644505][T10330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.872106][T10340] block nbd3: not configured, cannot reconfigure [ 181.154491][T10353] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1877'. [ 181.225553][ T5982] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 181.378521][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 181.378537][ T30] audit: type=1400 audit(1750405572.761:687): avc: denied { name_bind } for pid=10362 comm="syz.1.1882" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 181.408074][ T5982] usb 4-1: Using ep0 maxpacket: 16 [ 181.421885][ T5982] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 181.440074][ T5982] usb 4-1: config 0 interface 0 has no altsetting 0 [ 181.446977][ T5982] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 181.448351][T10365] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.1881'. [ 181.458699][ T5982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.488985][ T5982] usb 4-1: config 0 descriptor?? [ 181.775815][ T30] audit: type=1400 audit(1750405573.161:688): avc: denied { bind } for pid=10374 comm="syz.5.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.901615][ T5982] hid (null): invalid report_size 27418 [ 181.907483][ T5982] hid (null): report_id 1505116794 is invalid [ 181.913564][ T5982] hid (null): unknown global tag 0xe [ 181.920456][ T5982] hid (null): unknown global tag 0xd [ 182.139073][ T5982] usb 4-1: USB disconnect, device number 25 [ 182.144371][T10384] mkiss: ax0: crc mode is auto. [ 182.341029][ T30] audit: type=1400 audit(1750405573.721:689): avc: denied { setopt } for pid=10387 comm="syz.2.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 182.488735][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1898'. [ 182.591763][T10402] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1901'. [ 183.197232][T10435] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 183.687323][ T30] audit: type=1400 audit(1750405575.071:690): avc: denied { mount } for pid=10462 comm="syz.5.1928" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 183.768735][ T30] audit: type=1400 audit(1750405575.071:691): avc: denied { remount } for pid=10462 comm="syz.5.1928" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 183.836205][ T30] audit: type=1400 audit(1750405575.091:692): avc: denied { unmount } for pid=8562 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 183.869674][ T51] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 183.885816][ T30] audit: type=1400 audit(1750405575.131:693): avc: denied { ioctl } for pid=10466 comm="syz.3.1930" path="socket:[25724]" dev="sockfs" ino=25724 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 184.823246][ T51] Bluetooth: hci3: unexpected cc 0x0c2d length: 5 > 4 [ 184.831549][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 185.215571][ T5982] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 185.276180][T10524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.387842][ T5982] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 185.405488][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.436482][ T5982] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 185.457704][ T5982] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 185.482741][ T5982] usb 3-1: Manufacturer: syz [ 185.507708][ T5982] usb 3-1: config 0 descriptor?? [ 185.533968][T10534] use of bytesused == 0 is deprecated and will be removed in the future, [ 185.558651][T10534] use the actual size instead. [ 185.635584][ T5982] rc_core: IR keymap rc-hauppauge not found [ 185.645779][ T5982] Registered IR keymap rc-empty [ 185.651516][ T5982] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 185.684296][ T5982] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24 [ 185.945715][ T30] audit: type=1400 audit(1750405577.321:694): avc: denied { shutdown } for pid=10552 comm="syz.1.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 186.155462][T10545] rc rc0: two consecutive events of type space [ 186.343693][ T5968] usb 3-1: USB disconnect, device number 26 [ 186.451082][T10567] wg1: entered promiscuous mode [ 186.845553][ T48] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 187.018903][ T30] audit: type=1400 audit(1750405578.401:695): avc: denied { connect } for pid=10604 comm="syz.1.1990" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.041665][ T48] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.052984][ T48] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 187.063811][ T48] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 187.075789][ T30] audit: type=1400 audit(1750405578.451:696): avc: denied { read write } for pid=10606 comm="syz.1.1991" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 187.101566][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.125072][ T48] usb 4-1: config 0 descriptor?? [ 187.134533][ T30] audit: type=1400 audit(1750405578.451:697): avc: denied { open } for pid=10606 comm="syz.1.1991" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 187.163512][ T48] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 187.182715][ T48] dvb-usb: bulk message failed: -22 (3/0) [ 187.207640][ T48] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 187.218210][ T48] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 187.225491][ T48] usb 4-1: media controller created [ 187.233887][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.258169][ T48] dvb-usb: bulk message failed: -22 (6/0) [ 187.268815][ T48] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 187.287030][ T48] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 187.328218][ T48] dvb-usb: schedule remote query interval to 150 msecs. [ 187.347401][ T48] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 187.376694][T10574] dvb-usb: bulk message failed: -22 (2/0) [ 187.452720][ T48] usb 4-1: USB disconnect, device number 26 [ 187.504915][ T48] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 187.763664][ T30] audit: type=1326 audit(1750405579.141:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10595 comm="syz.2.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9d58e929 code=0x7fc00000 [ 188.169365][ T30] audit: type=1400 audit(1750405579.551:699): avc: denied { listen } for pid=10654 comm="syz.5.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 188.220407][ T30] audit: type=1400 audit(1750405579.571:700): avc: denied { attach_queue } for pid=10655 comm="syz.3.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 188.251232][ T30] audit: type=1400 audit(1750405579.571:701): avc: denied { setopt } for pid=10654 comm="syz.5.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 188.421380][ T30] audit: type=1400 audit(1750405579.801:702): avc: denied { mount } for pid=10668 comm="syz.1.2017" name="/" dev="hugetlbfs" ino=25285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 188.484773][ T30] audit: type=1400 audit(1750405579.861:703): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 188.935707][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 189.095650][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 189.122601][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 189.144595][ T9] usb 4-1: config 0 has no interface number 0 [ 189.165148][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 189.190757][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.208962][ T9] usb 4-1: Product: syz [ 189.213174][ T9] usb 4-1: Manufacturer: syz [ 189.229409][ T9] usb 4-1: SerialNumber: syz [ 189.277796][ T9] usb 4-1: config 0 descriptor?? [ 189.311486][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 189.414559][T10673] syz.0.2019 (10673): drop_caches: 2 [ 189.511264][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 189.547299][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 189.662199][T10704] input: syz0 as /devices/virtual/input/input26 [ 189.809711][T10708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2036'. [ 189.891679][T10713] bond0: entered promiscuous mode [ 189.904098][T10713] bond_slave_0: entered promiscuous mode [ 189.945679][T10713] bond_slave_1: entered promiscuous mode [ 189.992163][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 190.001546][ T5887] usb 4-1: USB disconnect, device number 27 [ 190.018075][ T5887] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 190.076994][ T5887] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 190.112076][ T5887] quatech2 4-1:0.51: device disconnected [ 190.196528][ T30] audit: type=1400 audit(1750405581.581:704): avc: denied { listen } for pid=10723 comm="syz.1.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.576021][T10746] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2052'. [ 191.073242][T10771] input: syz1 as /devices/virtual/input/input27 [ 192.248712][T10806] dlm: no local IP address has been set [ 192.291827][T10806] dlm: cannot start dlm midcomms -107 [ 192.687325][ T5968] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 192.873429][ T5968] usb 6-1: unable to get BOS descriptor or descriptor too short [ 192.884371][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 192.884384][ T30] audit: type=1400 audit(1750405584.261:710): avc: denied { recv } for pid=10815 comm="syz.5.2084" saddr=10.128.0.169 src=30006 daddr=10.128.1.135 dest=57920 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 192.891135][ T5968] usb 6-1: not running at top speed; connect to a high speed hub [ 192.988618][ T30] audit: type=1400 audit(1750405584.261:709): avc: denied { ioctl } for pid=10815 comm="syz.5.2084" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.997329][ T5968] usb 6-1: config 0 has an invalid interface number: 164 but max is 0 [ 193.018710][ T30] audit: type=1400 audit(1750405584.261:711): avc: denied { unmount } for pid=10839 comm="syz.2.2094" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 193.064224][ T30] audit: type=1400 audit(1750405584.311:712): avc: denied { create } for pid=10844 comm="syz.3.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.083974][ T5968] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 193.125503][ T5968] usb 6-1: config 0 has no interface number 0 [ 193.126218][ T30] audit: type=1400 audit(1750405584.321:713): avc: denied { mounton } for pid=10839 comm="syz.2.2094" path="/413/file0" dev="rpc_pipefs" ino=26724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 193.138800][ T5968] usb 6-1: config 0 interface 164 has no altsetting 0 [ 193.161162][ T30] audit: type=1400 audit(1750405584.331:714): avc: denied { write } for pid=10844 comm="syz.3.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.192178][ T5968] usb 6-1: string descriptor 0 read error: -22 [ 193.234582][ T30] audit: type=1400 audit(1750405584.331:715): avc: denied { read } for pid=10844 comm="syz.3.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.260747][ T30] audit: type=1400 audit(1750405584.331:716): avc: denied { ioctl } for pid=10844 comm="syz.3.2098" path="socket:[26740]" dev="sockfs" ino=26740 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.275840][ T5968] usb 6-1: New USB device found, idVendor=02c7, idProduct=d349, bcdDevice=8a.42 [ 193.299552][ T30] audit: type=1400 audit(1750405584.371:717): avc: denied { read write } for pid=5817 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 193.337046][ T5968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.385983][ T30] audit: type=1400 audit(1750405584.371:718): avc: denied { open } for pid=5817 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 193.386713][ T5968] usb 6-1: config 0 descriptor?? [ 193.582152][ T5968] cdc_acm 6-1:0.164: invalid descriptor buffer length [ 193.715295][T10869] netlink: 'syz.0.2109': attribute type 1 has an invalid length. [ 193.760777][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.767187][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.894434][ T5887] usb 6-1: USB disconnect, device number 7 [ 194.080459][T10874] bridge0: entered allmulticast mode [ 194.136453][T10878] overlayfs: failed to clone lowerpath [ 194.363031][T10886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.370608][T10886] IPv6: NLM_F_CREATE should be set when creating new route [ 194.377929][T10886] IPv6: NLM_F_CREATE should be set when creating new route [ 194.385138][T10886] IPv6: NLM_F_CREATE should be set when creating new route [ 194.558625][T10897] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 194.795754][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 194.970323][ T9] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 195.009783][ T9] usb 1-1: config 0 has no interface number 0 [ 195.030755][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 195.065243][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.105958][ T9] usb 1-1: config 0 descriptor?? [ 195.127099][ T9] cp210x 1-1:0.35: cp210x converter detected [ 195.541152][ T9] cp210x 1-1:0.35: failed to get vendor val 0x000e size 3: -71 [ 195.555458][ T92] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 195.574943][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 195.603778][ T9] usb 1-1: USB disconnect, device number 21 [ 195.640870][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 195.667338][ T9] cp210x 1-1:0.35: device disconnected [ 195.719910][ T92] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 195.733923][ T92] usb 2-1: config 0 has no interface number 0 [ 195.770651][ T92] usb 2-1: config 0 interface 41 has no altsetting 0 [ 195.799753][ T92] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 195.825159][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.855468][ T92] usb 2-1: Product: syz [ 195.859668][ T92] usb 2-1: Manufacturer: syz [ 195.884347][ T92] usb 2-1: SerialNumber: syz [ 195.918977][ T92] usb 2-1: config 0 descriptor?? [ 195.948930][T10945] syz.3.2142: attempt to access beyond end of device [ 195.948930][T10945] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 196.015876][T10945] syz.3.2142: attempt to access beyond end of device [ 196.015876][T10945] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 196.059014][T10945] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 196.080420][T10945] syz.3.2142: attempt to access beyond end of device [ 196.080420][T10945] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 196.098621][T10945] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 196.110180][T10945] syz.3.2142: attempt to access beyond end of device [ 196.110180][T10945] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 196.144454][T10945] syz.3.2142: attempt to access beyond end of device [ 196.144454][T10945] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 196.158749][T10945] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 196.170537][T10945] syz.3.2142: attempt to access beyond end of device [ 196.170537][T10945] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 196.196102][T10945] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 196.207332][T10945] syz.3.2142: attempt to access beyond end of device [ 196.207332][T10945] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 196.252967][T10945] syz.3.2142: attempt to access beyond end of device [ 196.252967][T10945] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 196.286213][T10945] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 196.315629][T10945] syz.3.2142: attempt to access beyond end of device [ 196.315629][T10945] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 196.345610][T10945] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 196.379245][T10945] syz.3.2142: attempt to access beyond end of device [ 196.379245][T10945] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 196.431046][T10945] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 196.440985][T10945] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 196.490065][T10945] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 196.543328][ T92] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 196.589688][ T92] usb 2-1: USB disconnect, device number 27 [ 196.822720][T10974] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2157'. [ 196.863322][T10974] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.905545][T10974] bridge_slave_0 (unregistering): left allmulticast mode [ 196.917686][T10974] bridge_slave_0 (unregistering): left promiscuous mode [ 196.936737][T10974] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.014012][T10982] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2161'. [ 197.195212][T10990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2164'. [ 197.615733][ T5887] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 197.776933][ T5887] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.787867][ T5887] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.798272][ T5887] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 197.811560][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 197.819733][ T5887] usb 3-1: SerialNumber: syz [ 197.964192][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 197.964208][ T30] audit: type=1400 audit(1750405589.341:820): avc: denied { mount } for pid=11030 comm="syz.0.2183" name="/" dev="configfs" ino=1174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 197.993300][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.999827][ T92] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 198.038635][ T5887] usb 3-1: 0:2 : does not exist [ 198.050896][ T5887] usb 3-1: 5:0: cannot get min/max values for control 1 (id 5) [ 198.072097][ T5887] usb 3-1: 5:0: cannot get min/max values for control 9 (id 5) [ 198.084089][ T30] audit: type=1400 audit(1750405589.461:821): avc: denied { name_connect } for pid=11034 comm="syz.0.2185" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 198.104384][ T5887] usb 3-1: unit 128 not found! [ 198.134944][ T5887] usb 3-1: USB disconnect, device number 27 [ 198.143649][ T30] audit: type=1400 audit(1750405589.491:822): avc: denied { setopt } for pid=11034 comm="syz.0.2185" lport=43454 faddr=::ffff:100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.155505][ T92] usb 2-1: Using ep0 maxpacket: 32 [ 198.214892][ T92] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 198.249177][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.277093][ T92] usb 2-1: config 0 descriptor?? [ 198.364174][ T30] audit: type=1400 audit(1750405589.741:823): avc: denied { create } for pid=11042 comm="syz.0.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 198.444491][T11048] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2189'. [ 198.444722][ T30] audit: type=1400 audit(1750405589.821:824): avc: denied { write } for pid=11042 comm="syz.0.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 198.474859][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.486270][ T30] audit: type=1400 audit(1750405589.871:825): avc: denied { write } for pid=11046 comm="syz.5.2191" name="vlan0" dev="proc" ino=4026533651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 198.508931][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.525966][ T92] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 198.533395][T11050] @: renamed from vlan0 (while UP) [ 198.538322][ T30] audit: type=1400 audit(1750405589.901:826): avc: denied { write } for pid=11047 comm="syz.3.2190" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 198.546724][ T92] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 198.581637][ T30] audit: type=1400 audit(1750405589.901:827): avc: denied { create } for pid=11046 comm="syz.5.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 198.610160][ T92] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 198.617406][ T92] usb 2-1: media controller created [ 198.632787][ T30] audit: type=1400 audit(1750405589.911:828): avc: denied { ioctl } for pid=11046 comm="syz.5.2191" path="socket:[27346]" dev="sockfs" ino=27346 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 198.663294][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.726771][ T92] az6027: usb out operation failed. (-71) [ 198.735578][ T30] audit: type=1400 audit(1750405590.111:829): avc: denied { write } for pid=11055 comm="syz.2.2193" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 198.758243][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.764699][ T92] az6027: usb out operation failed. (-71) [ 198.771513][ T92] stb0899_attach: Driver disabled by Kconfig [ 198.777814][ T92] az6027: no front-end attached [ 198.777814][ T92] [ 198.803540][ T92] az6027: usb out operation failed. (-71) [ 198.826789][ T92] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 198.855971][ T92] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 198.952353][ T92] dvb-usb: schedule remote query interval to 400 msecs. [ 198.976230][ T92] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 199.003321][ T92] usb 2-1: USB disconnect, device number 28 [ 199.152676][ T92] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 200.306737][ T92] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 200.384319][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2216'. [ 200.421514][T11117] netlink: 'syz.1.2218': attribute type 12 has an invalid length. [ 200.441779][T11117] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2218'. [ 200.476391][ T92] usb 4-1: Using ep0 maxpacket: 16 [ 200.485855][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.504198][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.531961][ T92] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 200.554126][ T92] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 200.563627][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.581529][ T92] usb 4-1: config 0 descriptor?? [ 200.682573][T11129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2223'. [ 200.936364][T11141] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 200.942913][T11141] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 200.992813][T11141] vhci_hcd vhci_hcd.0: Device attached [ 201.047569][ T92] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.003C/input/input29 [ 201.133814][ T92] microsoft 0003:045E:07DA.003C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 201.165519][ T5968] vhci_hcd: vhci_device speed not set [ 201.235448][ T5887] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 201.235930][ T5968] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 201.321579][ T92] usb 4-1: USB disconnect, device number 28 [ 201.426037][ T5887] usb 6-1: Using ep0 maxpacket: 8 [ 201.432781][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 201.448781][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 201.475944][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 201.505489][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.541490][ T5887] usb 6-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 201.560991][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.589244][ T5887] usb 6-1: Product: syz [ 201.599331][ T5887] usb 6-1: Manufacturer: syz [ 201.609587][ T5887] usb 6-1: SerialNumber: syz [ 201.630638][ T5887] usb 6-1: config 0 descriptor?? [ 201.686757][ T5887] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input30 [ 201.883071][ T5887] imon:send_packet: packet tx failed (-71) [ 201.915570][ T5887] imon 6-1:0.0: panel buttons/knobs setup failed [ 201.982884][T11142] vhci_hcd: connection reset by peer [ 202.006407][ T12] vhci_hcd: stop threads [ 202.015620][ T12] vhci_hcd: release socket [ 202.022008][ T12] vhci_hcd: disconnect device [ 202.135571][ T5887] rc_core: IR keymap rc-imon-pad not found [ 202.137116][T11159] smc: net device bond0 erased user defined pnetid SYZ2 [ 202.143147][ T5887] Registered IR keymap rc-empty [ 202.174193][ T5887] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 202.204887][ T5887] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 202.235640][ T5887] imon:send_packet: packet tx failed (-71) [ 202.265593][ T5887] imon 6-1:0.0: remote input dev register failed [ 202.292508][ T5887] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 202.376334][ T5887] imon 6-1:0.0: unable to initialize intf0, err 0 [ 202.385598][ T5887] imon:imon_probe: failed to initialize context! [ 202.391943][ T5887] imon 6-1:0.0: unable to register, err -19 [ 202.455450][ T5887] usb 6-1: USB disconnect, device number 8 [ 202.851629][T11176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2240'. [ 203.040120][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 203.040134][ T30] audit: type=1400 audit(1750405594.421:854): avc: denied { read write } for pid=11182 comm="syz.5.2243" name="rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 203.076189][ T30] audit: type=1400 audit(1750405594.461:855): avc: denied { open } for pid=11182 comm="syz.5.2243" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 203.167517][ T30] audit: type=1400 audit(1750405594.511:856): avc: denied { ioctl } for pid=11186 comm="syz.0.2245" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=29699 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 203.511616][T11197] bond0: entered promiscuous mode [ 203.559739][T11197] bond_slave_0: entered promiscuous mode [ 203.567147][T11197] bond_slave_1: entered promiscuous mode [ 203.587719][T11197] batadv0: entered promiscuous mode [ 203.594387][T11197] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 203.626584][T11197] bond0: left promiscuous mode [ 203.631417][T11197] bond_slave_0: left promiscuous mode [ 203.637178][T11197] bond_slave_1: left promiscuous mode [ 203.679598][T11197] batadv0: left promiscuous mode [ 204.000790][ T30] audit: type=1400 audit(1750405595.381:857): avc: denied { connect } for pid=11209 comm="syz.0.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 204.055824][ T30] audit: type=1400 audit(1750405595.411:858): avc: denied { write } for pid=11209 comm="syz.0.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 204.338486][ T30] audit: type=1400 audit(1750405595.711:859): avc: denied { create } for pid=11224 comm="syz.2.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 204.428367][ T30] audit: type=1400 audit(1750405595.711:860): avc: denied { read } for pid=11224 comm="syz.2.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 204.503327][ T30] audit: type=1400 audit(1750405595.751:861): avc: denied { listen } for pid=11226 comm="syz.1.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.575905][ T30] audit: type=1400 audit(1750405595.751:862): avc: denied { accept } for pid=11226 comm="syz.1.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.628042][ T30] audit: type=1400 audit(1750405595.761:863): avc: denied { setopt } for pid=11224 comm="syz.2.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 205.049739][T11254] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11254 comm=syz.5.2272 [ 205.485487][ T48] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 205.655699][ T48] usb 6-1: Using ep0 maxpacket: 16 [ 205.662698][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.675106][ T48] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 205.685701][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.714840][ T48] usb 6-1: config 0 descriptor?? [ 205.847209][ T92] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 205.872192][T11295] loop6: detected capacity change from 0 to 524287487 [ 205.882345][T11295] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.893187][T11295] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.913935][T11295] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.932799][T11295] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.941902][T11295] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.949982][T11295] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.986540][T11300] loop6: detected capacity change from 524287487 to 33554432 [ 205.987006][T11295] Buffer I/O error on dev loop6, logical block 0, async page read [ 206.010197][T11295] Buffer I/O error on dev loop6, logical block 0, async page read [ 206.018869][T11295] ldm_validate_partition_table(): Disk read failed. [ 206.029897][T11295] Buffer I/O error on dev loop6, logical block 0, async page read [ 206.038472][T11295] Buffer I/O error on dev loop6, logical block 0, async page read [ 206.038610][ T92] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.060965][T11295] Dev loop6: unable to read RDB block 0 [ 206.066728][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 206.079671][T11295] loop6: unable to read partition table [ 206.085623][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.095555][ T92] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 206.109798][T11295] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 206.135526][ T5982] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 206.146303][ T92] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 206.155982][ T48] mcp2221 0003:04D8:00DD.003D: unknown main item tag 0x0 [ 206.163044][ T48] mcp2221 0003:04D8:00DD.003D: unknown main item tag 0x0 [ 206.171292][ T92] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 206.180554][ T92] usb 3-1: Manufacturer: syz [ 206.185906][ T48] mcp2221 0003:04D8:00DD.003D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 206.202335][ T92] usb 3-1: config 0 descriptor?? [ 206.219282][ T5191] ldm_validate_partition_table(): Disk read failed. [ 206.226903][ T5191] Dev loop6: unable to read RDB block 0 [ 206.232890][ T5191] loop6: unable to read partition table [ 206.319430][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.330703][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.374314][ T5982] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 206.386372][ C1] usb 6-1: input irq status -75 received [ 206.402498][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.435644][ T5982] usb 2-1: config 0 descriptor?? [ 206.455586][ T5968] vhci_hcd: vhci_device speed not set [ 206.515493][ T92] rc_core: IR keymap rc-hauppauge not found [ 206.521446][ T92] Registered IR keymap rc-empty [ 206.549213][ T92] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 206.575500][ T92] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 206.596456][ T9] usb 6-1: USB disconnect, device number 9 [ 206.617039][ T92] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 206.677571][ T92] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32 [ 206.705959][ T92] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 206.735563][ T92] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 206.746401][ T5887] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 206.765947][ T92] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 206.795768][ T92] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 206.815501][ T92] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 206.844483][ T92] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 206.860990][ T5982] hid-led 0003:1D34:0004.003E: unknown main item tag 0x0 [ 206.879591][ T92] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 206.889731][ T5982] hid-led 0003:1D34:0004.003E: unknown main item tag 0x0 [ 206.897236][ T5982] hid-led 0003:1D34:0004.003E: unknown main item tag 0x0 [ 206.904300][ T5982] hid-led 0003:1D34:0004.003E: unknown main item tag 0x0 [ 206.911873][ T5982] hid-led 0003:1D34:0004.003E: item fetching failed at offset 6/7 [ 206.920233][ T92] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 206.925808][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 206.934729][ T5982] hid-led 0003:1D34:0004.003E: probe with driver hid-led failed with error -22 [ 206.943635][ T5887] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 206.953614][ T5887] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 206.965485][ T92] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 206.971339][ T5887] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 206.983829][ T5887] usb 1-1: config 0 interface 0 has no altsetting 0 [ 206.985578][ T92] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 206.992419][ T5887] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 207.006837][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.014795][ T5887] usb 1-1: Product: syz [ 207.017568][ T92] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.019106][ T5887] usb 1-1: Manufacturer: syz [ 207.032056][ T5887] usb 1-1: SerialNumber: syz [ 207.043056][ T5887] usb 1-1: config 0 descriptor?? [ 207.047632][ T92] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 207.049444][T11313] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 207.065130][ T48] usb 2-1: USB disconnect, device number 29 [ 207.072431][ T92] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 207.092606][ T92] usb 3-1: USB disconnect, device number 28 [ 207.296228][T11313] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 207.308719][ T5887] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33 [ 207.602005][ T5968] usb 1-1: USB disconnect, device number 22 [ 207.964255][T11349] bridge_slave_0: invalid flags given to default FDB implementation [ 208.432451][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 208.432466][ T30] audit: type=1400 audit(1750405599.811:888): avc: denied { create } for pid=11365 comm="syz.1.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.507563][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2326'. [ 208.526644][ T30] audit: type=1400 audit(1750405599.861:889): avc: denied { setopt } for pid=11365 comm="syz.1.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.163898][ T30] audit: type=1400 audit(1750405600.541:890): avc: denied { read append } for pid=11402 comm="syz.0.2340" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 209.251385][ T30] audit: type=1400 audit(1750405600.571:891): avc: denied { open } for pid=11402 comm="syz.0.2340" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 209.318207][ T30] audit: type=1400 audit(1750405600.571:892): avc: denied { map } for pid=11402 comm="syz.0.2340" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 209.347300][ T30] audit: type=1400 audit(1750405600.571:893): avc: denied { write execute } for pid=11402 comm="syz.0.2340" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 209.433398][ T30] audit: type=1400 audit(1750405600.771:894): avc: denied { ioctl } for pid=11407 comm="syz.3.2344" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 209.508597][ T30] audit: type=1400 audit(1750405600.781:895): avc: denied { create } for pid=11413 comm="syz.1.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.510885][T11417] mkiss: ax0: crc mode is auto. [ 209.534405][ T92] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 209.557944][ T30] audit: type=1400 audit(1750405600.791:896): avc: denied { ioctl } for pid=11413 comm="syz.1.2345" path="socket:[29162]" dev="sockfs" ino=29162 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.605092][ T30] audit: type=1400 audit(1750405600.791:897): avc: denied { write } for pid=11413 comm="syz.1.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.709083][ T92] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 209.718925][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.738500][ T92] usb 4-1: config 0 descriptor?? [ 209.795471][ T5968] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 209.895163][T11433] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 209.945502][ T5968] usb 3-1: Using ep0 maxpacket: 8 [ 209.962260][ T92] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 209.970742][ T5968] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 209.983312][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.995452][ T48] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 210.011984][ T5968] pvrusb2: Hardware description: Terratec Grabster AV400 [ 210.019144][ T5968] pvrusb2: ********** [ 210.023158][ T5968] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 210.033756][ T5968] pvrusb2: Important functionality might not be entirely working. [ 210.046537][ T5968] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 210.060423][ T5968] pvrusb2: ********** [ 210.165469][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 210.190838][ T92] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 210.209626][ T48] usb 1-1: config 0 interface 0 has no altsetting 0 [ 210.219897][ T2338] pvrusb2: Invalid write control endpoint [ 210.229151][ T48] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 210.238385][ T92] [drm] Initialized udl on minor 2 [ 210.245426][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.253457][ T48] usb 1-1: Product: syz [ 210.265347][ T48] usb 1-1: Manufacturer: syz [ 210.275480][ T48] usb 1-1: SerialNumber: syz [ 210.293784][ T48] usb 1-1: config 0 descriptor?? [ 210.332371][ T2338] pvrusb2: Invalid write control endpoint [ 210.345408][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 210.360727][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 210.369732][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 210.382161][ T2338] pvrusb2: Device being rendered inoperable [ 210.393499][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 210.401348][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 210.413230][ T2338] pvrusb2: Attached sub-driver cx25840 [ 210.419131][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 210.435192][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 210.446169][T11421] pvrusb2: Attempted to execute control transfer when device not ok [ 210.489893][ T5924] usb 3-1: USB disconnect, device number 29 [ 210.592704][ T92] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 210.604263][ T92] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 210.618794][ T5982] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 210.631146][ T92] usb 4-1: USB disconnect, device number 29 [ 210.638201][ T5982] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 210.718795][ T48] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 210.932358][ T48] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 210.951173][ T48] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 210.995523][ T5982] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 211.059664][T11480] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 211.159764][ T5982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.161897][ T5924] usb 1-1: USB disconnect, device number 23 [ 211.179171][ T5982] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 211.208412][ T5982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.241142][ T5982] usb 6-1: config 0 descriptor?? [ 211.354005][ T92] kernel read not supported for file /video37 (pid: 92 comm: kworker/1:2) [ 211.408026][T11501] netlink: 'syz.3.2385': attribute type 1 has an invalid length. [ 211.419283][T11501] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2385'. [ 211.557668][T11513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2391'. [ 211.605658][ T92] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 211.664464][ T5982] keytouch 0003:0926:3333.003F: fixing up Keytouch IEC report descriptor [ 211.687954][ T5982] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.003F/input/input34 [ 211.745462][T11521] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2396'. [ 211.781238][ T5982] keytouch 0003:0926:3333.003F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 211.794543][ T92] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 211.803976][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.837490][ T92] usb 2-1: config 0 descriptor?? [ 211.851748][ T92] gspca_main: spca508-2.14.0 probing 8086:0110 [ 211.950038][T11532] netlink: 'syz.0.2400': attribute type 1 has an invalid length. [ 211.963042][T11532] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2400'. [ 212.032016][T11537] sp0: Synchronizing with TNC [ 212.049021][ T92] gspca_spca508: reg_read err -32 [ 212.105788][ T5982] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 212.130608][ T5924] usb 6-1: USB disconnect, device number 10 [ 212.184152][T11544] sp0: Synchronizing with TNC [ 212.191195][ T967] [ 212.193520][ T967] ===================================================== [ 212.200443][ T967] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 212.207884][ T967] 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 Not tainted [ 212.214967][ T967] ----------------------------------------------------- [ 212.221880][ T967] kworker/u8:5/967 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 212.229573][ T967] ffffffff8f79a1f8 (disc_data_lock){.+.+}-{3:3}, at: sp_get+0x18/0xf0 [ 212.237724][ T967] [ 212.237724][ T967] and this task is already holding: [ 212.245068][ T967] ffffffff9b087e78 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 212.253760][ T967] which would create a new lock dependency: [ 212.259635][ T967] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock){.+.+}-{3:3} [ 212.267265][ T967] [ 212.267265][ T967] but this new dependency connects a HARDIRQ-irq-safe lock: [ 212.276685][ T967] (&port_lock_key){-.-.}-{3:3} [ 212.276699][ T967] [ 212.276699][ T967] ... which became HARDIRQ-irq-safe at: [ 212.289188][ T967] lock_acquire+0x179/0x350 [ 212.293759][ T967] _raw_spin_lock_irqsave+0x3a/0x60 [ 212.299020][ T967] serial8250_handle_irq+0x95/0xcb0 [ 212.304277][ T967] serial8250_default_handle_irq+0x9a/0x210 [ 212.310228][ T967] serial8250_interrupt+0x103/0x210 [ 212.315484][ T967] __handle_irq_event_percpu+0x229/0x7d0 [ 212.321175][ T967] handle_irq_event+0xab/0x1e0 [ 212.326431][ T967] handle_edge_irq+0x28e/0xab0 [ 212.331254][ T967] __common_interrupt+0xdf/0x250 [ 212.336250][ T967] common_interrupt+0xba/0xe0 [ 212.340983][ T967] asm_common_interrupt+0x26/0x40 [ 212.346066][ T967] pv_native_safe_halt+0xf/0x20 [ 212.350977][ T967] default_idle+0x13/0x20 [ 212.355362][ T967] default_idle_call+0x6d/0xb0 [ 212.360182][ T967] do_idle+0x391/0x510 [ 212.364309][ T967] cpu_startup_entry+0x4f/0x60 [ 212.369131][ T967] start_secondary+0x21d/0x2b0 [ 212.373955][ T967] common_startup_64+0x13e/0x148 [ 212.378950][ T967] [ 212.378950][ T967] to a HARDIRQ-irq-unsafe lock: [ 212.385934][ T967] (disc_data_lock){.+.+}-{3:3} [ 212.385949][ T967] [ 212.385949][ T967] ... which became HARDIRQ-irq-unsafe at: [ 212.398611][ T967] ... [ 212.398615][ T967] lock_acquire+0x179/0x350 [ 212.405731][ T967] _raw_read_lock+0x5f/0x70 [ 212.410294][ T967] sp_get+0x18/0xf0 [ 212.414163][ T967] sixpack_receive_buf+0x59/0x1c90 [ 212.419336][ T967] tty_ldisc_receive_buf+0x15a/0x1a0 [ 212.424680][ T967] tty_port_default_receive_buf+0x70/0xb0 [ 212.430465][ T967] flush_to_ldisc+0x26b/0x780 [ 212.435201][ T967] process_one_work+0x9cc/0x1b70 [ 212.440196][ T967] worker_thread+0x6c8/0xf10 [ 212.444841][ T967] kthread+0x3c2/0x780 [ 212.448965][ T967] ret_from_fork+0x5d4/0x6f0 [ 212.453620][ T967] ret_from_fork_asm+0x1a/0x30 [ 212.458442][ T967] [ 212.458442][ T967] other info that might help us debug this: [ 212.458442][ T967] [ 212.468640][ T967] Possible interrupt unsafe locking scenario: [ 212.468640][ T967] [ 212.476926][ T967] CPU0 CPU1 [ 212.482260][ T967] ---- ---- [ 212.487594][ T967] lock(disc_data_lock); [ 212.491895][ T967] local_irq_disable(); [ 212.498620][ T967] lock(&port_lock_key); [ 212.505437][ T967] lock(disc_data_lock); [ 212.512261][ T967] [ 212.515684][ T967] lock(&port_lock_key); [ 212.520167][ T967] [ 212.520167][ T967] *** DEADLOCK *** [ 212.520167][ T967] [ 212.528278][ T967] 6 locks held by kworker/u8:5/967: [ 212.533443][ T967] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 212.544543][ T967] #1: ffffc90003c27d10 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 212.555549][ T967] #2: ffff888025c70ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x34/0x780 [ 212.564561][ T967] #3: ffff88802a4900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 212.573833][ T967] #4: ffffffff9b087e78 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 212.582932][ T967] #5: ffff88802a4900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 212.592203][ T967] [ 212.592203][ T967] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 212.602575][ T967] -> (&port_lock_key){-.-.}-{3:3} { [ 212.607753][ T967] IN-HARDIRQ-W at: [ 212.611704][ T967] lock_acquire+0x179/0x350 [ 212.617831][ T967] _raw_spin_lock_irqsave+0x3a/0x60 [ 212.624652][ T967] serial8250_handle_irq+0x95/0xcb0 [ 212.631480][ T967] serial8250_default_handle_irq+0x9a/0x210 [ 212.638992][ T967] serial8250_interrupt+0x103/0x210 [ 212.645810][ T967] __handle_irq_event_percpu+0x229/0x7d0 [ 212.653064][ T967] handle_irq_event+0xab/0x1e0 [ 212.659449][ T967] handle_edge_irq+0x28e/0xab0 [ 212.665840][ T967] __common_interrupt+0xdf/0x250 [ 212.672398][ T967] common_interrupt+0xba/0xe0 [ 212.678696][ T967] asm_common_interrupt+0x26/0x40 [ 212.685340][ T967] pv_native_safe_halt+0xf/0x20 [ 212.691821][ T967] default_idle+0x13/0x20 [ 212.697767][ T967] default_idle_call+0x6d/0xb0 [ 212.704148][ T967] do_idle+0x391/0x510 [ 212.709836][ T967] cpu_startup_entry+0x4f/0x60 [ 212.716219][ T967] start_secondary+0x21d/0x2b0 [ 212.722611][ T967] common_startup_64+0x13e/0x148 [ 212.729166][ T967] IN-SOFTIRQ-W at: [ 212.733113][ T967] lock_acquire+0x179/0x350 [ 212.739240][ T967] _raw_spin_lock_irqsave+0x3a/0x60 [ 212.746060][ T967] serial8250_handle_irq+0x95/0xcb0 [ 212.752876][ T967] serial8250_default_handle_irq+0x9a/0x210 [ 212.760385][ T967] serial8250_interrupt+0x103/0x210 [ 212.767207][ T967] __handle_irq_event_percpu+0x229/0x7d0 [ 212.774468][ T967] handle_irq_event+0xab/0x1e0 [ 212.780857][ T967] handle_edge_irq+0x28e/0xab0 [ 212.787241][ T967] __common_interrupt+0xdf/0x250 [ 212.793797][ T967] common_interrupt+0x61/0xe0 [ 212.800091][ T967] asm_common_interrupt+0x26/0x40 [ 212.806740][ T967] handle_softirqs+0x1dd/0x8e0 [ 212.813125][ T967] __irq_exit_rcu+0x109/0x170 [ 212.819422][ T967] irq_exit_rcu+0x9/0x30 [ 212.825285][ T967] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 212.832543][ T967] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 212.840141][ T967] _raw_spin_unlock_irqrestore+0x31/0x80 [ 212.847403][ T967] uart_write+0x2a4/0xb30 [ 212.853356][ T967] n_tty_write+0x40f/0x1160 [ 212.859487][ T967] file_tty_write.constprop.0+0x504/0x9b0 [ 212.866829][ T967] redirected_tty_write+0xd4/0x150 [ 212.873568][ T967] vfs_write+0x6c4/0x1150 [ 212.879520][ T967] ksys_write+0x12a/0x250 [ 212.885475][ T967] do_syscall_64+0xcd/0x4c0 [ 212.891601][ T967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.899110][ T967] INITIAL USE at: [ 212.902969][ T967] lock_acquire+0x179/0x350 [ 212.909015][ T967] _raw_spin_lock_irqsave+0x3a/0x60 [ 212.915747][ T967] serial8250_do_set_termios+0x310/0x1710 [ 212.922997][ T967] serial8250_set_termios+0x6e/0x80 [ 212.929726][ T967] uart_set_options+0x31a/0x5f0 [ 212.936111][ T967] serial8250_console_setup+0x189/0x450 [ 212.943186][ T967] univ8250_console_setup+0x1eb/0x2e0 [ 212.950097][ T967] try_enable_preferred_console+0x2fd/0x530 [ 212.957524][ T967] register_console+0x3ab/0x11b0 [ 212.963999][ T967] univ8250_console_init+0x5f/0x90 [ 212.970647][ T967] console_init+0x14f/0x680 [ 212.976686][ T967] start_kernel+0x29f/0x4d0 [ 212.982723][ T967] x86_64_start_reservations+0x18/0x30 [ 212.989716][ T967] x86_64_start_kernel+0x130/0x190 [ 212.996361][ T967] common_startup_64+0x13e/0x148 [ 213.002828][ T967] } [ 213.005295][ T967] ... key at: [] port_lock_key+0x0/0x40 [ 213.012900][ T967] [ 213.012900][ T967] the dependencies between the lock to be acquired [ 213.012905][ T967] and HARDIRQ-irq-unsafe lock: [ 213.026359][ T967] -> (disc_data_lock){.+.+}-{3:3} { [ 213.031540][ T967] HARDIRQ-ON-R at: [ 213.035488][ T967] lock_acquire+0x179/0x350 [ 213.041614][ T967] _raw_read_lock+0x5f/0x70 [ 213.047738][ T967] sp_get+0x18/0xf0 [ 213.053166][ T967] sixpack_receive_buf+0x59/0x1c90 [ 213.059899][ T967] tty_ldisc_receive_buf+0x15a/0x1a0 [ 213.066806][ T967] tty_port_default_receive_buf+0x70/0xb0 [ 213.074149][ T967] flush_to_ldisc+0x26b/0x780 [ 213.080447][ T967] process_one_work+0x9cc/0x1b70 [ 213.087001][ T967] worker_thread+0x6c8/0xf10 [ 213.093208][ T967] kthread+0x3c2/0x780 [ 213.098900][ T967] ret_from_fork+0x5d4/0x6f0 [ 213.105111][ T967] ret_from_fork_asm+0x1a/0x30 [ 213.111492][ T967] SOFTIRQ-ON-R at: [ 213.115439][ T967] lock_acquire+0x179/0x350 [ 213.121564][ T967] _raw_read_lock+0x5f/0x70 [ 213.127687][ T967] sp_get+0x18/0xf0 [ 213.133115][ T967] sixpack_receive_buf+0x59/0x1c90 [ 213.139848][ T967] tty_ldisc_receive_buf+0x15a/0x1a0 [ 213.146755][ T967] tty_port_default_receive_buf+0x70/0xb0 [ 213.154097][ T967] flush_to_ldisc+0x26b/0x780 [ 213.160395][ T967] process_one_work+0x9cc/0x1b70 [ 213.166949][ T967] worker_thread+0x6c8/0xf10 [ 213.173158][ T967] kthread+0x3c2/0x780 [ 213.178841][ T967] ret_from_fork+0x5d4/0x6f0 [ 213.185051][ T967] ret_from_fork_asm+0x1a/0x30 [ 213.191434][ T967] INITIAL USE at: [ 213.195293][ T967] lock_acquire+0x179/0x350 [ 213.201333][ T967] _raw_write_lock_irq+0x36/0x50 [ 213.207805][ T967] sixpack_close+0x1e/0x2f0 [ 213.213842][ T967] tty_ldisc_close+0x114/0x1a0 [ 213.220145][ T967] tty_ldisc_kill+0x8e/0x150 [ 213.226267][ T967] tty_ldisc_release+0x109/0x2e0 [ 213.232740][ T967] tty_release_struct+0x23/0xe0 [ 213.239125][ T967] tty_release+0xe2d/0x1430 [ 213.245172][ T967] __fput+0x3ff/0xb70 [ 213.250689][ T967] task_work_run+0x150/0x240 [ 213.256810][ T967] exit_to_user_mode_loop+0xeb/0x110 [ 213.263708][ T967] do_syscall_64+0x3f6/0x4c0 [ 213.269853][ T967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.277300][ T967] INITIAL READ USE at: [ 213.281603][ T967] lock_acquire+0x179/0x350 [ 213.288082][ T967] _raw_read_lock+0x5f/0x70 [ 213.294559][ T967] sp_get+0x18/0xf0 [ 213.300339][ T967] sixpack_receive_buf+0x59/0x1c90 [ 213.307419][ T967] tty_ldisc_receive_buf+0x15a/0x1a0 [ 213.314676][ T967] tty_port_default_receive_buf+0x70/0xb0 [ 213.322367][ T967] flush_to_ldisc+0x26b/0x780 [ 213.329036][ T967] process_one_work+0x9cc/0x1b70 [ 213.335960][ T967] worker_thread+0x6c8/0xf10 [ 213.342527][ T967] kthread+0x3c2/0x780 [ 213.348567][ T967] ret_from_fork+0x5d4/0x6f0 [ 213.355132][ T967] ret_from_fork_asm+0x1a/0x30 [ 213.361869][ T967] } [ 213.364337][ T967] ... key at: [] disc_data_lock+0x18/0xfe0 [ 213.372213][ T967] ... acquired at: [ 213.375990][ T967] lock_acquire+0x179/0x350 [ 213.380642][ T967] _raw_read_lock+0x5f/0x70 [ 213.385297][ T967] sp_get+0x18/0xf0 [ 213.389252][ T967] sixpack_write_wakeup+0x20/0x390 [ 213.394525][ T967] tty_wakeup+0xe8/0x120 [ 213.398931][ T967] tty_port_default_wakeup+0x2a/0x40 [ 213.404372][ T967] serial8250_tx_chars+0x68e/0x860 [ 213.409645][ T967] __start_tx+0x3e9/0x4a0 [ 213.414125][ T967] serial8250_start_tx+0x368/0x530 [ 213.419390][ T967] __uart_start+0x292/0x4c0 [ 213.424037][ T967] uart_write+0x218/0xb30 [ 213.428512][ T967] sixpack_receive_buf+0x3d3/0x1c90 [ 213.433868][ T967] tty_ldisc_receive_buf+0x15a/0x1a0 [ 213.439309][ T967] tty_port_default_receive_buf+0x70/0xb0 [ 213.445186][ T967] flush_to_ldisc+0x26b/0x780 [ 213.450018][ T967] process_one_work+0x9cc/0x1b70 [ 213.455101][ T967] worker_thread+0x6c8/0xf10 [ 213.459835][ T967] kthread+0x3c2/0x780 [ 213.464046][ T967] ret_from_fork+0x5d4/0x6f0 [ 213.468785][ T967] ret_from_fork_asm+0x1a/0x30 [ 213.473703][ T967] [ 213.475999][ T967] [ 213.475999][ T967] stack backtrace: [ 213.481858][ T967] CPU: 0 UID: 0 PID: 967 Comm: kworker/u8:5 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 213.481872][ T967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.481880][ T967] Workqueue: events_unbound flush_to_ldisc [ 213.481897][ T967] Call Trace: [ 213.481903][ T967] [ 213.481908][ T967] dump_stack_lvl+0x116/0x1f0 [ 213.481926][ T967] check_irq_usage+0x7dc/0x920 [ 213.481945][ T967] ? check_path.constprop.0+0x24/0x50 [ 213.481962][ T967] ? __lock_acquire+0x1285/0x1c90 [ 213.481977][ T967] __lock_acquire+0x1285/0x1c90 [ 213.481994][ T967] ? lock_acquire+0x179/0x350 [ 213.482010][ T967] lock_acquire+0x179/0x350 [ 213.482025][ T967] ? sp_get+0x18/0xf0 [ 213.482040][ T967] ? ldsem_down_read_trylock+0x11a/0x180 [ 213.482050][ T967] ? ldsem_down_read_trylock+0x120/0x180 [ 213.482060][ T967] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 213.482076][ T967] _raw_read_lock+0x5f/0x70 [ 213.482090][ T967] ? sp_get+0x18/0xf0 [ 213.482103][ T967] sp_get+0x18/0xf0 [ 213.482116][ T967] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 213.482131][ T967] sixpack_write_wakeup+0x20/0x390 [ 213.482146][ T967] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 213.482161][ T967] tty_wakeup+0xe8/0x120 [ 213.482173][ T967] tty_port_default_wakeup+0x2a/0x40 [ 213.482189][ T967] serial8250_tx_chars+0x68e/0x860 [ 213.482208][ T967] __start_tx+0x3e9/0x4a0 [ 213.482224][ T967] serial8250_start_tx+0x368/0x530 [ 213.482242][ T967] __uart_start+0x292/0x4c0 [ 213.482254][ T967] uart_write+0x218/0xb30 [ 213.482270][ T967] sixpack_receive_buf+0x3d3/0x1c90 [ 213.482286][ T967] ? ldsem_down_read_trylock+0x120/0x180 [ 213.482296][ T967] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 213.482307][ T967] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 213.482322][ T967] tty_ldisc_receive_buf+0x15a/0x1a0 [ 213.482337][ T967] tty_port_default_receive_buf+0x70/0xb0 [ 213.482353][ T967] flush_to_ldisc+0x26b/0x780 [ 213.482368][ T967] ? rcu_is_watching+0x12/0xc0 [ 213.482382][ T967] process_one_work+0x9cc/0x1b70 [ 213.482394][ T967] ? __pfx_process_one_work+0x10/0x10 [ 213.482406][ T967] ? assign_work+0x1a0/0x250 [ 213.482423][ T967] worker_thread+0x6c8/0xf10 [ 213.482435][ T967] ? __kthread_parkme+0x19e/0x250 [ 213.482449][ T967] ? __pfx_worker_thread+0x10/0x10 [ 213.482459][ T967] kthread+0x3c2/0x780 [ 213.482468][ T967] ? __pfx_kthread+0x10/0x10 [ 213.482477][ T967] ? rcu_is_watching+0x12/0xc0 [ 213.482489][ T967] ? __pfx_kthread+0x10/0x10 [ 213.482498][ T967] ret_from_fork+0x5d4/0x6f0 [ 213.482512][ T967] ? __pfx_kthread+0x10/0x10 [ 213.482521][ T967] ret_from_fork_asm+0x1a/0x30 [ 213.482539][ T967] [ 213.482669][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.744983][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.771698][ T92] gspca_spca508: reg_read err -71 [ 213.779436][ T92] gspca_spca508: reg_read err -71 [ 213.785107][ T92] gspca_spca508: reg_read err -71 [ 213.792379][ T92] gspca_spca508: reg write: error -71 [ 213.798724][ T92] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 213.807628][ T5982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.817804][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 213.828808][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 213.838463][ T5982] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 213.852304][ T92] usb 2-1: USB disconnect, device number 30 [ 213.858772][ T5982] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 213.867835][ T5982] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 213.875872][ T5982] usb 3-1: Manufacturer: syz [ 213.881182][ T5982] usb 3-1: config 0 descriptor?? [ 214.135468][ T5982] rc_core: IR keymap rc-hauppauge not found [ 214.141408][ T5982] Registered IR keymap rc-empty [ 214.146350][ T5982] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.165485][ T5982] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.185825][ T5982] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 214.199021][ T5982] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 214.211957][ T5982] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.236279][ T5982] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.255490][ T5982] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.275523][ T5982] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.305535][ T5982] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.325475][ T5982] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.345502][ T5982] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.365462][ T5982] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.385492][ T5982] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.405479][ T5982] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.425477][ T5982] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.446188][ T5982] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 214.455239][ T5982] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 214.531342][ T5982] usb 3-1: USB disconnect, device number 30