last executing test programs: 1m46.083602881s ago: executing program 3 (id=843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x44, r1, 0x803, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x44}}, 0x8040) 1m45.921737701s ago: executing program 3 (id=845): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 1m45.821574285s ago: executing program 3 (id=848): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x8915, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m45.74947105s ago: executing program 3 (id=849): r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) setresuid(0x0, 0xee01, 0x0) shmctl$IPC_RMID(r0, 0x0) 1m45.573735111s ago: executing program 3 (id=852): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) symlinkat(&(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 1m45.515545963s ago: executing program 3 (id=853): r0 = add_key$user(&(0x7f00000006c0), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000440)="3118a062c5e6f9b332e2f3006a9a29fcaff672ae900d6fa95c321004ea8844c7a92ca02b058250a07854dcfb2951b8ea60e3c13305cb31f9a5493befc04fb0be50cc07b31ecfb1baf775d8efd3f847d3392d421fe46244c6886cbb9ad6077b29e5fa3bfdf07a4515d5588050fde3c0f03ddda2ebe8649cf2a473b5069866bd0d8a78cf92c40574dd50446db139d9723e0d3753eb94c0fac0c409d1f208c29e115fba14d1e378ef478508ae2e37b64ca1826d14e1209183948dc754c1d92fdebf", 0xc0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000340)="8e", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r0, r0}, &(0x7f0000000180)=""/84, 0x54, &(0x7f0000000340)={&(0x7f0000000240)={'wp384\x00'}}) 1m30.340960811s ago: executing program 32 (id=853): r0 = add_key$user(&(0x7f00000006c0), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000440)="3118a062c5e6f9b332e2f3006a9a29fcaff672ae900d6fa95c321004ea8844c7a92ca02b058250a07854dcfb2951b8ea60e3c13305cb31f9a5493befc04fb0be50cc07b31ecfb1baf775d8efd3f847d3392d421fe46244c6886cbb9ad6077b29e5fa3bfdf07a4515d5588050fde3c0f03ddda2ebe8649cf2a473b5069866bd0d8a78cf92c40574dd50446db139d9723e0d3753eb94c0fac0c409d1f208c29e115fba14d1e378ef478508ae2e37b64ca1826d14e1209183948dc754c1d92fdebf", 0xc0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000340)="8e", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r0, r0}, &(0x7f0000000180)=""/84, 0x54, &(0x7f0000000340)={&(0x7f0000000240)={'wp384\x00'}}) 3.13553917s ago: executing program 4 (id=2689): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)='g', 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 3.096480771s ago: executing program 4 (id=2690): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000300)=0xa, 0x4) 3.066096994s ago: executing program 4 (id=2691): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setpriority(0x3, 0x0, 0xfffffffd) 2.730983868s ago: executing program 4 (id=2693): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0x30, 0x5, {0x5, 0x3f, "dced88"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.997101224s ago: executing program 5 (id=2705): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)="580000001400ad", 0x7}, {&(0x7f00000004c0)="7a61ed946be2bbbfb602f1cffbf580c052017a8dec9351fcb41238c79ac77e4efed86ad16038159c7010f1371e481fe96e04b018f79a1df511318b9dcaa2da5d7c625ec76916d85afdf2f42088c355c9fa", 0x51}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x4) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 1.901314365s ago: executing program 5 (id=2708): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x3fff8, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}, 0x22000, 0x0, 0xffffffff, 0x8, 0x101, 0x3, 0xfe, 0x0, 0x0, 0x0, {0x4, 0x6, 0xfffffff9}}}}]}, 0x78}}, 0x0) 1.763525079s ago: executing program 5 (id=2709): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) 1.561736076s ago: executing program 1 (id=2712): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000039c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003a00)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004000}, 0x40) 1.526409287s ago: executing program 1 (id=2713): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.124427835s ago: executing program 1 (id=2718): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001380)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x3, {@in6_addr=@loopback, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40808}, 0x4004010) 1.013431087s ago: executing program 5 (id=2721): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) 979.374781ms ago: executing program 1 (id=2723): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000007c0)='p', 0x1}], 0x1) 902.444645ms ago: executing program 1 (id=2726): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe(&(0x7f0000005880)) 857.72836ms ago: executing program 5 (id=2727): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000300)=ANY=[@ANYRES16], 0x41, 0x800) msgrcv(r0, &(0x7f0000002700)={0x0, ""/206}, 0xd6, 0x3, 0x2000) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/152) 790.082827ms ago: executing program 0 (id=2729): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r0) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000500)={r2, r1, r1}, &(0x7f0000000240)=""/249, 0xf9, &(0x7f0000000400)={&(0x7f0000000340)={'sha512-generic\x00'}}) 733.42084ms ago: executing program 5 (id=2730): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) r1 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 720.552602ms ago: executing program 2 (id=2731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c00038018000380140001006261746164765f736c6176655f31000014000000110001"], 0x70}}, 0x24040880) 661.139901ms ago: executing program 0 (id=2732): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x9, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0x69) 613.910063ms ago: executing program 4 (id=2733): syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r1, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 561.053523ms ago: executing program 0 (id=2734): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440), 0xc2003, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000500)={0x6, 0x5}) 556.310582ms ago: executing program 2 (id=2735): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) 421.178226ms ago: executing program 0 (id=2736): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) 411.055964ms ago: executing program 2 (id=2737): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) 331.259253ms ago: executing program 2 (id=2738): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800068008000200080000003e"], 0x44}}, 0x0) 282.397692ms ago: executing program 0 (id=2739): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r0, 0x1}, 0x20) 203.366318ms ago: executing program 2 (id=2740): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)) fcntl$lock(r0, 0x7, &(0x7f0000000040)) 125.960714ms ago: executing program 0 (id=2741): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x500a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 64.341495ms ago: executing program 4 (id=2742): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x101600, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 12.274706ms ago: executing program 2 (id=2743): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 0s ago: executing program 1 (id=2744): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000880)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffd, 0x0, 0x800000, 0x1, 0xffffffff}, 0x0, 0x0, 0xa, 0x4, 0x40101, 0x18, 0x0, 0x0, 0x0, 0x0, {0x1ff, 0x0, 0x0, 0x7f}}}}]}, 0x78}}, 0x80) kernel console output (not intermixed with test programs): 2 comm="syz.1.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652c18cde9 code=0x7ffc0000 [ 131.395254][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 131.426928][ T52] Bluetooth: hci1: command tx timeout [ 131.434695][ T29] audit: type=1326 audit(1740036675.356:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.1.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652c18cde9 code=0x7ffc0000 [ 131.461567][ T29] audit: type=1326 audit(1740036675.376:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.1.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f652c18cde9 code=0x7ffc0000 [ 131.560843][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 131.570371][ T25] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 131.578624][ T25] usb 3-1: config 0 has no interface number 0 [ 131.592721][ T25] usb 3-1: config 0 interface 12 has no altsetting 0 [ 131.611567][ T25] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 131.627134][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.649957][ T25] usb 3-1: Product: syz [ 131.654156][ T25] usb 3-1: Manufacturer: syz [ 131.658763][ T25] usb 3-1: SerialNumber: syz [ 131.668455][ T25] usb 3-1: config 0 descriptor?? [ 132.124327][ T66] team0 (unregistering): Port device team_slave_1 removed [ 132.191540][ T66] team0 (unregistering): Port device team_slave_0 removed [ 132.300355][ T25] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 132.317258][ T25] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 132.326090][ T25] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 132.334228][ T25] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 132.365568][ T25] usb 3-1: USB disconnect, device number 17 [ 132.653754][ T8244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.663775][ T8244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.690487][ T8244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.715852][ T8244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.730640][ T8244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.798447][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.804958][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.814840][ T8244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.899906][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 133.007609][ T8244] hsr_slave_0: entered promiscuous mode [ 133.029191][ T8244] hsr_slave_1: entered promiscuous mode [ 133.036247][ T8244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.051612][ T8244] Cannot create hsr debugfs directory [ 133.059918][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 133.086910][ T8] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 133.095347][ T8] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 133.126701][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 133.157818][ T8] usb 5-1: config 1 has no interface number 0 [ 133.189217][ T8] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.211520][ T8469] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 133.241436][ T8] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 133.290224][ T8] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 133.299289][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.403188][ T8] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 133.500761][ T52] Bluetooth: hci1: command tx timeout [ 133.534394][ T66] IPVS: stop unused estimator thread 0... [ 133.609379][ T8] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 133.621143][ T8244] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.683781][ T8244] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.766290][ T8244] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.824088][ T8244] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.914507][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 133.914522][ T29] audit: type=1400 audit(1740036677.906:490): avc: denied { open } for pid=8495 comm="syz.2.1159" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 134.021938][ T29] audit: type=1400 audit(1740036677.976:491): avc: denied { ioctl } for pid=8495 comm="syz.2.1159" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 134.067999][ T8244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.113117][ T5873] usb 5-1: USB disconnect, device number 13 [ 134.126518][ T29] audit: type=1400 audit(1740036678.086:492): avc: denied { create } for pid=8499 comm="syz.1.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.133820][ T5873] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 134.170347][ T8244] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.269961][ T29] audit: type=1400 audit(1740036678.096:493): avc: denied { bind } for pid=8499 comm="syz.1.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.306879][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.313992][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.339207][ T29] audit: type=1400 audit(1740036678.096:494): avc: denied { write } for pid=8499 comm="syz.1.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.359652][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.366770][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.692450][ T8244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.017010][ T8549] netlink: 'syz.0.1174': attribute type 21 has an invalid length. [ 135.108794][ T8244] veth0_vlan: entered promiscuous mode [ 135.146241][ T8244] veth1_vlan: entered promiscuous mode [ 135.231828][ T8244] veth0_macvtap: entered promiscuous mode [ 135.265853][ T8244] veth1_macvtap: entered promiscuous mode [ 135.277717][ T8563] tipc: Started in network mode [ 135.287738][ T8563] tipc: Node identity , cluster identity 4711 [ 135.308287][ T8563] tipc: Failed to obtain node identity [ 135.319802][ T29] audit: type=1400 audit(1740036679.306:495): avc: denied { write } for pid=8567 comm="syz.4.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.339281][ T8563] tipc: Enabling of bearer rejected, failed to enable media [ 135.379431][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.414863][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.426960][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.444922][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.469037][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.479927][ T5872] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 135.494268][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.511899][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.534707][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.576188][ T8244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.595511][ T52] Bluetooth: hci1: command tx timeout [ 135.631284][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.642972][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.652925][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.666331][ T5872] usb 2-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.00 [ 135.675799][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.689928][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.708123][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.719917][ T5872] usb 2-1: config 0 descriptor?? [ 135.739916][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.821372][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.838744][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.855238][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.865749][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.884026][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.896145][ T8244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.996740][ T8244] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.034641][ T8244] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.043988][ T8244] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.053598][ T8244] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.154641][ T5872] wacom 0003:056A:00D5.0019: Unknown device_type for 'HID 056a:00d5'. Assuming pen. [ 136.172030][ T29] audit: type=1400 audit(1740036680.166:496): avc: denied { append } for pid=8597 comm="syz.0.1188" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 136.209857][ T5872] wacom 0003:056A:00D5.0019: hidraw0: USB HID v0.00 Device [HID 056a:00d5] on usb-dummy_hcd.1-1/input0 [ 136.244405][ T5872] input: Wacom Bamboo Pen 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D5.0019/input/input15 [ 136.322759][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.341408][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.386854][ T8] usb 2-1: USB disconnect, device number 18 [ 136.421596][ T3603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.446623][ T3603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.487537][ T29] audit: type=1400 audit(1740036680.476:497): avc: denied { mounton } for pid=8244 comm="syz-executor" path="/root/syzkaller.KVMLjv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 136.514156][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.579934][ T8608] nbd: must specify at least one socket [ 136.599031][ T29] audit: type=1400 audit(1740036680.516:498): avc: denied { mount } for pid=8244 comm="syz-executor" name="/" dev="gadgetfs" ino=6743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 136.777226][ T8618] vlan0: entered promiscuous mode [ 136.812217][ T29] audit: type=1400 audit(1740036680.806:499): avc: denied { connect } for pid=8619 comm="syz.4.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 136.829142][ T8618] team0: Port device vlan0 added [ 137.281049][ T8650] Zero length message leads to an empty skb [ 137.799284][ T8682] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1217'. [ 137.925408][ T8689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1218'. [ 138.214632][ T8706] can0: slcan on ttynull. [ 138.410207][ T8705] can0 (unregistered): slcan off ttynull. [ 138.794547][ T8738] vxcan1: entered allmulticast mode [ 138.933774][ T8745] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 139.211631][ T8759] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 139.227285][ T8759] overlayfs: missing 'lowerdir' [ 139.860151][ T5872] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 139.972667][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 139.972682][ T29] audit: type=1400 audit(1740036683.966:511): avc: denied { remount } for pid=8808 comm="syz.4.1270" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 139.999638][ T8809] ======================================================= [ 139.999638][ T8809] WARNING: The mand mount option has been deprecated and [ 139.999638][ T8809] and is ignored by this kernel. Remove the mand [ 139.999638][ T8809] option from the mount to silence this warning. [ 139.999638][ T8809] ======================================================= [ 140.034462][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.060183][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 140.066637][ T5872] usb 3-1: config 0 interface 0 altsetting 112 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.084606][ T5872] usb 3-1: config 0 interface 0 altsetting 112 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.096181][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 140.107280][ T29] audit: type=1400 audit(1740036684.086:512): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 140.119821][ T5872] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice=11.00 [ 140.162325][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.175464][ T29] audit: type=1400 audit(1740036684.156:513): avc: denied { setattr } for pid=8816 comm="syz.4.1273" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 140.210758][ T5872] usb 3-1: config 0 descriptor?? [ 140.224585][ T8819] Illegal XDP return value 4294967282 on prog (id 79) dev N/A, expect packet loss! [ 140.544470][ T29] audit: type=1400 audit(1740036684.536:514): avc: denied { write } for pid=8833 comm="syz.1.1282" path="socket:[19407]" dev="sockfs" ino=19407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 140.629674][ T5872] kye 0003:0458:0153.001A: unknown main item tag 0x0 [ 140.646434][ T5872] kye 0003:0458:0153.001A: unknown main item tag 0x0 [ 140.654058][ T5872] kye 0003:0458:0153.001A: unknown main item tag 0x0 [ 140.673169][ T5872] kye 0003:0458:0153.001A: unknown main item tag 0x0 [ 140.700000][ T5872] kye 0003:0458:0153.001A: unknown main item tag 0x0 [ 140.709045][ T5872] kye 0003:0458:0153.001A: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.2-1/input0 [ 140.749576][ T8844] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1285'. [ 140.885311][ T5872] usb 3-1: USB disconnect, device number 18 [ 141.196076][ T8869] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 141.439914][ T29] audit: type=1326 audit(1740036685.426:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8835 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2747d8cde9 code=0x7fc00000 [ 141.591891][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1306'. [ 141.609936][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1306'. [ 141.621097][ T5872] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 141.713379][ T29] audit: type=1326 audit(1740036685.706:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8893 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 141.760893][ T29] audit: type=1326 audit(1740036685.726:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8893 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 141.779879][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 141.795616][ T29] audit: type=1326 audit(1740036685.726:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8893 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 141.818967][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.826065][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.851116][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.878478][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 141.914114][ T29] audit: type=1326 audit(1740036685.726:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8893 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 141.937390][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.944866][ T5872] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 141.959080][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.969578][ T29] audit: type=1326 audit(1740036685.726:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8893 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 141.993983][ T5872] usb 2-1: config 0 descriptor?? [ 142.300513][ T5915] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 142.416967][ T5872] microsoft 0003:045E:07DA.001B: ignoring exceeding usage max [ 142.443090][ T5872] microsoft 0003:045E:07DA.001B: No inputs registered, leaving [ 142.450869][ T75] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 142.466824][ T5872] microsoft 0003:045E:07DA.001B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 142.478418][ T5872] microsoft 0003:045E:07DA.001B: no inputs found [ 142.484954][ T5872] microsoft 0003:045E:07DA.001B: could not initialize ff, continuing anyway [ 142.497430][ T5915] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.506537][ T5915] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 142.517052][ T5915] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.526200][ T5915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 142.537763][ T5915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 142.550812][ T5915] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.569824][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.577908][ T5915] usb 5-1: Product: syz [ 142.582110][ T5915] usb 5-1: Manufacturer: syz [ 142.610658][ T5915] cdc_wdm 5-1:1.0: skipping garbage [ 142.615897][ T5915] cdc_wdm 5-1:1.0: skipping garbage [ 142.626979][ T75] usb 3-1: Using ep0 maxpacket: 16 [ 142.628156][ T8] usb 2-1: USB disconnect, device number 19 [ 142.633551][ T75] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 142.659928][ T5915] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 142.666293][ T5915] cdc_wdm 5-1:1.0: Unknown control protocol [ 142.689860][ T75] usb 3-1: config 0 has no interface number 0 [ 142.695990][ T75] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 142.716015][ T75] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 142.741664][ T75] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 142.750922][ T75] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.760736][ T75] usb 3-1: Product: syz [ 142.764953][ T75] usb 3-1: Manufacturer: syz [ 142.770006][ T75] usb 3-1: SerialNumber: syz [ 142.780654][ T75] usb 3-1: config 0 descriptor?? [ 142.786190][ T8917] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 142.793613][ T8917] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 142.848160][ T8] usb 5-1: USB disconnect, device number 14 [ 142.939996][ T52] Bluetooth: hci1: command tx timeout [ 143.035817][ T8917] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 143.043447][ T8917] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 143.398202][ T8967] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 143.398202][ T8967] The task syz.0.1343 (8967) triggered the difference, watch for misbehavior. [ 143.461514][ T75] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 143.487537][ T75] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 143.520495][ T75] asix 3-1:0.251: probe with driver asix failed with error -71 [ 143.546632][ T75] usb 3-1: USB disconnect, device number 19 [ 143.566005][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1349'. [ 143.590160][ T8979] netlink: 'syz.4.1350': attribute type 4 has an invalid length. [ 143.597926][ T8979] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1350'. [ 143.919917][ T5915] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 144.021059][ T9007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1362'. [ 144.096351][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.114923][ T5915] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 144.134207][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.167093][ T5915] usb 5-1: config 0 descriptor?? [ 144.303991][ T9021] [U] | [ 144.508888][ T9035] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1375'. [ 144.537907][ T9035] tipc: Invalid UDP bearer configuration [ 144.537951][ T9035] tipc: Enabling of bearer rejected, failed to enable media [ 144.605048][ T5915] uclogic 0003:28BD:0075.001C: interface is invalid, ignoring [ 144.806209][ T5915] usb 5-1: USB disconnect, device number 15 [ 144.924272][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'. [ 145.020059][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 145.179973][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 145.187731][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.205480][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.224983][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 145.246452][ C1] sd 0:0:1:0: [sda] tag#235 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 145.249969][ T8] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 145.256813][ C1] sd 0:0:1:0: [sda] tag#235 CDB: Write(6) 0a 12 15 00 ff ff ff ff 00 00 00 00 [ 145.283205][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.299983][ T8] usb 6-1: config 0 descriptor?? [ 145.628278][ T9090] trusted_key: encrypted_key: key trusted:syz not found [ 145.716020][ T8] microsoft 0003:045E:07DA.001D: ignoring exceeding usage max [ 145.761799][ T8] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 145.769062][ T8] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 145.795305][ T8] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 145.820418][ T8] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 145.838093][ T8] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 145.868971][ T8] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 145.880920][ T8] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 145.888191][ T8] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 145.928125][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.001D/input/input19 [ 146.004387][ T8] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 146.055768][ T8] usb 6-1: USB disconnect, device number 2 [ 146.224742][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'. [ 146.253867][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'. [ 146.659900][ T5915] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 146.667685][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 146.667699][ T29] audit: type=1400 audit(1740036690.656:523): avc: denied { read write } for pid=9151 comm="syz.4.1430" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 146.674863][ T5873] hid-generic 0000:0008:0000.001E: unknown main item tag 0x0 [ 146.707007][ T5873] hid-generic 0000:0008:0000.001E: unknown main item tag 0x0 [ 146.730361][ T29] audit: type=1400 audit(1740036690.656:524): avc: denied { open } for pid=9151 comm="syz.4.1430" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 146.766411][ T5873] hid-generic 0000:0008:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz1 [ 146.860022][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 146.867430][ T5915] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 146.877706][ T5915] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 146.902876][ T5915] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 146.912321][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.929965][ T5915] usb 2-1: Product: syz [ 146.934510][ T5915] usb 2-1: Manufacturer: syz [ 146.939623][ T5915] usb 2-1: SerialNumber: syz [ 147.188201][ T5915] usb 2-1: USB disconnect, device number 20 [ 147.233686][ T9178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1444'. [ 147.411440][ T9191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1449'. [ 147.779863][ T75] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 147.944380][ T75] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 147.960216][ T29] audit: type=1400 audit(1740036691.956:525): avc: denied { read } for pid=9227 comm="syz.1.1461" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 147.990030][ T75] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 148.004622][ T75] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.026560][ T75] usb 5-1: config 0 descriptor?? [ 148.040266][ T9202] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 148.077550][ T29] audit: type=1400 audit(1740036692.066:526): avc: denied { read write } for pid=8244 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.129474][ T29] audit: type=1400 audit(1740036692.066:527): avc: denied { open } for pid=8244 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.159168][ T29] audit: type=1400 audit(1740036692.066:528): avc: denied { ioctl } for pid=8244 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.186207][ T29] audit: type=1400 audit(1740036692.156:529): avc: denied { recv } for pid=24 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.25 dest=53500 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 148.232892][ T29] audit: type=1400 audit(1740036692.226:530): avc: denied { read } for pid=9238 comm="syz.5.1465" dev="nsfs" ino=4026533584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 148.275122][ T29] audit: type=1400 audit(1740036692.226:531): avc: denied { open } for pid=9238 comm="syz.5.1465" path="net:[4026533584]" dev="nsfs" ino=4026533584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 148.298885][ T29] audit: type=1400 audit(1740036692.226:532): avc: denied { create } for pid=9238 comm="syz.5.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 148.335189][ T9244] [U] v3f"S/4:XTzWtlW= [ 148.474148][ T75] wacom 0003:056A:0000.001F: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 148.498376][ T75] wacom 0003:056A:0000.001F: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.4-1/input0 [ 148.520903][ T75] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0000.001F/input/input20 [ 148.675297][ T75] usb 5-1: USB disconnect, device number 16 [ 148.860027][ T5873] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 149.026813][ T5873] usb 6-1: unable to get BOS descriptor or descriptor too short [ 149.067277][ T5873] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 149.079904][ T5873] usb 6-1: can't read configurations, error -71 [ 149.909987][ T5872] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 150.001050][ T970] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 150.069975][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 150.079333][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 150.097440][ T5872] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 150.107194][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.125691][ T5872] usb 3-1: config 0 descriptor?? [ 150.161282][ T970] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 150.169296][ T970] usb 5-1: config 0 has no interface number 0 [ 150.177724][ T970] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.188856][ T970] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.200112][ T970] usb 5-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 150.209953][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.230569][ T970] usb 5-1: config 0 descriptor?? [ 150.547915][ T5872] mcp2200 0003:04D8:00DF.0020: item fetching failed at offset 2/5 [ 150.568163][ T5872] mcp2200 0003:04D8:00DF.0020: can't parse reports [ 150.577744][ T5872] mcp2200 0003:04D8:00DF.0020: probe with driver mcp2200 failed with error -22 [ 150.656127][ T970] uclogic 0003:28BD:0905.0021: Interface probing failed: -22 [ 150.682616][ T970] uclogic 0003:28BD:0905.0021: interface is invalid, ignoring [ 150.807062][ T5872] usb 3-1: USB disconnect, device number 20 [ 150.892783][ T5873] usb 5-1: USB disconnect, device number 17 [ 151.285435][ T9418] vlan2: entered promiscuous mode [ 151.293553][ T9418] vlan2: entered allmulticast mode [ 151.507501][ T9433] random: crng reseeded on system resumption [ 152.033013][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 152.033028][ T29] audit: type=1400 audit(1740036696.026:612): avc: denied { ioctl } for pid=9431 comm="syz.2.1528" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 152.153688][ T29] audit: type=1400 audit(1740036696.136:613): avc: denied { write } for pid=9452 comm="syz.1.1534" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 152.199885][ T5873] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 152.298834][ T9463] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 152.306718][ T29] audit: type=1400 audit(1740036696.306:614): avc: denied { read } for pid=9464 comm="syz.0.1539" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.333654][ T29] audit: type=1400 audit(1740036696.306:615): avc: denied { open } for pid=9464 comm="syz.0.1539" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.357021][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.379928][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 152.385301][ T29] audit: type=1400 audit(1740036696.306:616): avc: denied { ioctl } for pid=9464 comm="syz.0.1539" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.410124][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.430916][ T5873] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 152.448528][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.449911][ T5872] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 152.470606][ T5873] usb 5-1: config 0 descriptor?? [ 152.488928][ T5873] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 152.540454][ T29] audit: type=1400 audit(1740036696.536:617): avc: denied { read write } for pid=9472 comm="syz.1.1543" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 152.574459][ T970] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 152.589885][ T970] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 152.598777][ T970] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 152.606395][ T29] audit: type=1400 audit(1740036696.556:618): avc: denied { open } for pid=9472 comm="syz.1.1543" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 152.630708][ T970] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 152.638153][ T970] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 152.642903][ T5872] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 152.651693][ T970] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 152.662910][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.676450][ T5872] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 152.680329][ T970] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 152.686428][ T5872] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 152.713105][ T29] audit: type=1400 audit(1740036696.706:619): avc: denied { create } for pid=9476 comm="syz.0.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 152.739972][ T29] audit: type=1400 audit(1740036696.706:620): avc: denied { ioctl } for pid=9476 comm="syz.0.1545" path="socket:[22081]" dev="sockfs" ino=22081 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 152.748378][ T970] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz1 [ 152.762701][ T5872] usb 6-1: Manufacturer: syz [ 152.855436][ T5872] usb 6-1: config 0 descriptor?? [ 152.950758][ T5872] rc_core: IR keymap rc-hauppauge not found [ 152.956958][ T29] audit: type=1400 audit(1740036696.946:621): avc: denied { mac_admin } for pid=9488 comm="syz.0.1550" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 152.959934][ T5872] Registered IR keymap rc-empty [ 152.978274][ T9489] SELinux: Context is not valid (left unmapped). [ 153.011583][ T5872] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 153.058868][ T5872] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input23 [ 153.103342][ T5873] gspca_sonixj: reg_w1 err -71 [ 153.111395][ T5873] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 153.125738][ T5873] usb 5-1: USB disconnect, device number 18 [ 153.362058][ C1] igorplugusb 6-1:0.0: receive overflow invalid: 161 [ 153.563493][ T75] usb 6-1: USB disconnect, device number 5 [ 153.836811][ T9535] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1570'. [ 153.837238][ T9530] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1570'. [ 153.910344][ T5872] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 154.066521][ T5872] usb 3-1: config 9 has an invalid interface number: 247 but max is 0 [ 154.087156][ T5872] usb 3-1: config 9 has an invalid descriptor of length 36, skipping remainder of the config [ 154.103907][ T5872] usb 3-1: config 9 has no interface number 0 [ 154.113986][ T5872] usb 3-1: New USB device found, idVendor=0421, idProduct=3aa0, bcdDevice=98.f9 [ 154.134714][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.161814][ T5872] usb 3-1: Product: syz [ 154.174045][ T5872] usb 3-1: Manufacturer: syz [ 154.197693][ T5872] usb 3-1: SerialNumber: syz [ 154.274478][ T9557] CUSE: DEVNAME unspecified [ 154.435368][ T5872] cdc_phonet 3-1:9.247: skipping garbage [ 154.455403][ T5872] cdc_phonet 3-1:9.247: skipping garbage [ 154.475505][ T5872] cdc_phonet 3-1:9.247: probe with driver cdc_phonet failed with error -22 [ 154.507387][ T5872] usb 3-1: USB disconnect, device number 21 [ 154.593786][ T9575] mkiss: ax0: crc mode is auto. [ 154.665895][ T9579] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1594'. [ 154.681058][ T9579] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 154.788338][ T9587] netlink: 'syz.5.1598': attribute type 24 has an invalid length. [ 154.797642][ T9587] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1598'. [ 154.874028][ T9589] vlan2: entered promiscuous mode [ 154.879089][ T9589] vlan2: entered allmulticast mode [ 155.324319][ T9620] overlayfs: failed to resolve '/yJDǼoF(LvRkcBI EZODRre6$JdD_U`ji{;l8Uj -gwΰj'Hٽٯ$%': -2 [ 155.689001][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1626'. [ 156.179906][ T5903] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 156.329878][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 156.334398][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1645'. [ 156.350798][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.371062][ T5903] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 156.388357][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 156.398193][ T5903] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 156.419136][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 156.437366][ T5903] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 156.446498][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.461064][ T5903] usb 3-1: config 0 descriptor?? [ 156.683907][ T5903] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 157.059897][ T5903] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 157.211173][ T5903] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.225130][ T5903] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 157.235811][ T5903] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 157.245167][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 157.253293][ T5903] usb 6-1: SerialNumber: syz [ 157.261170][ T5903] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 157.270656][ T5903] usb-storage 6-1:1.0: USB Mass Storage device detected [ 157.292163][ T5903] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 157.300482][ T5903] scsi host1: usb-storage 6-1:1.0 [ 157.581581][ T52] Bluetooth: hci1: command tx timeout [ 158.044779][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 158.044795][ T29] audit: type=1400 audit(1740036702.036:663): avc: denied { ioctl } for pid=9739 comm="syz.4.1669" path="socket:[23582]" dev="sockfs" ino=23582 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.076576][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.115650][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1670'. [ 158.149954][ T5903] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 158.208715][ T29] audit: type=1400 audit(1740036702.196:664): avc: denied { getopt } for pid=9745 comm="syz.4.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.266700][ T29] audit: type=1400 audit(1740036702.256:665): avc: denied { ioctl } for pid=9747 comm="syz.4.1673" path="socket:[23129]" dev="sockfs" ino=23129 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 158.310513][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 158.317531][ T5903] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 158.338867][ T5903] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 158.350969][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.359133][ T5903] usb 2-1: Product: syz [ 158.364106][ T5903] usb 2-1: Manufacturer: syz [ 158.369012][ T5903] usb 2-1: SerialNumber: syz [ 158.376107][ T5903] usb 2-1: config 0 descriptor?? [ 158.388649][ T9734] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 158.398024][ T5903] hub 2-1:0.0: bad descriptor, ignoring hub [ 158.404241][ T5903] hub 2-1:0.0: probe with driver hub failed with error -5 [ 158.418763][ T5903] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24 [ 158.429348][ T29] audit: type=1400 audit(1740036702.406:666): avc: denied { bind } for pid=9751 comm="syz.4.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.513984][ T29] audit: type=1400 audit(1740036702.506:667): avc: denied { ioctl } for pid=9754 comm="syz.4.1676" path="socket:[23600]" dev="sockfs" ino=23600 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.565126][ T29] audit: type=1400 audit(1740036702.556:668): avc: denied { write } for pid=9753 comm="syz.0.1677" name="cgroup.subtree_control" dev="cgroup2" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.595562][ T970] usb 6-1: USB disconnect, device number 6 [ 158.619964][ T29] audit: type=1400 audit(1740036702.556:669): avc: denied { connect } for pid=9757 comm="syz.4.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.642155][ T29] audit: type=1400 audit(1740036702.586:670): avc: denied { open } for pid=9753 comm="syz.0.1677" path="" dev="cgroup2" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.667535][ T29] audit: type=1400 audit(1740036702.596:671): avc: denied { ioctl } for pid=9753 comm="syz.0.1677" path="" dev="cgroup2" ino=246 ioctlcmd=0x54cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.733580][ T5873] usb 2-1: USB disconnect, device number 21 [ 158.733630][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 158.757411][ T9760] netlink: 'syz.4.1680': attribute type 29 has an invalid length. [ 158.793928][ T9760] netlink: 'syz.4.1680': attribute type 29 has an invalid length. [ 158.807841][ T9760] netlink: 'syz.4.1680': attribute type 29 has an invalid length. [ 158.818687][ T9760] netlink: 'syz.4.1680': attribute type 29 has an invalid length. [ 158.833101][ T9760] netlink: 'syz.4.1680': attribute type 29 has an invalid length. [ 158.854861][ T9760] netlink: 'syz.4.1680': attribute type 29 has an invalid length. [ 158.863851][ T9760] netlink: 'syz.4.1680': attribute type 29 has an invalid length. [ 158.872263][ T9760] netlink: 'syz.4.1680': attribute type 29 has an invalid length. [ 158.946037][ T5903] usb 3-1: USB disconnect, device number 22 [ 158.966086][ T5903] usblp0: removed [ 159.604951][ T9784] use of bytesused == 0 is deprecated and will be removed in the future, [ 159.635015][ T9784] use the actual size instead. [ 159.775896][ T29] audit: type=1400 audit(1740036703.766:672): avc: denied { listen } for pid=9791 comm="syz.0.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 159.856964][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1696'. [ 159.909891][ T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 160.091766][ T8] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.119945][ T8] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.131610][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.138272][ T8] usb 2-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 160.148265][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.162354][ T8] usb 2-1: config 0 descriptor?? [ 160.337712][ T9819] overlayfs: workdir and upperdir must be separate subtrees [ 160.597231][ T8] saitek 0003:0738:1709.0023: hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.1-1/input0 [ 160.821368][ T8] usb 2-1: USB disconnect, device number 22 [ 161.605108][ T9867] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 161.630540][ T9867] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 162.038244][ T9883] tipc: Started in network mode [ 162.049896][ T9883] tipc: Node identity ac141441, cluster identity 4711 [ 162.057284][ T9883] tipc: Enabling of bearer rejected, failed to enable media [ 162.509973][ T75] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 162.670079][ T75] usb 3-1: Using ep0 maxpacket: 32 [ 162.676755][ T75] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 162.689843][ T75] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 162.698472][ T75] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 162.727667][ T75] usb 3-1: config 1 has no interface number 0 [ 162.733937][ T75] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.752705][ T75] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 162.768493][ T75] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 162.777870][ T75] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.791705][ T75] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 162.926379][ T9906] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 163.065230][ T9910] bridge1: entered promiscuous mode [ 163.086143][ T9910] xt_bpf: check failed: parse error [ 163.099027][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 163.099062][ T29] audit: type=1400 audit(1740036707.086:690): avc: denied { create } for pid=9911 comm="syz.1.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 163.130616][ T29] audit: type=1400 audit(1740036707.106:691): avc: denied { write } for pid=9911 comm="syz.1.1747" path="socket:[23494]" dev="sockfs" ino=23494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 163.293798][ T29] audit: type=1400 audit(1740036707.286:692): avc: denied { setopt } for pid=9916 comm="syz.4.1749" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.352612][ T75] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 163.391263][ T29] audit: type=1400 audit(1740036707.376:693): avc: denied { listen } for pid=9922 comm="syz.5.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.447446][ T29] audit: type=1400 audit(1740036707.436:694): avc: denied { sys_module } for pid=9918 comm="syz.1.1750" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 163.504997][ T29] audit: type=1400 audit(1740036707.436:695): avc: denied { mount } for pid=9925 comm="syz.4.1751" name="/" dev="ramfs" ino=23523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 163.567960][ T29] audit: type=1400 audit(1740036707.436:696): avc: denied { unmount } for pid=9925 comm="syz.4.1751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 163.591316][ T8] usb 3-1: USB disconnect, device number 23 [ 163.598136][ T8] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 163.632719][ T29] audit: type=1400 audit(1740036707.626:697): avc: denied { write } for pid=9932 comm="syz.1.1755" name="mcfilter6" dev="proc" ino=4026533406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 163.706634][ T9937] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1757'. [ 163.716891][ T9937] netlink: 'syz.4.1757': attribute type 1 has an invalid length. [ 163.734300][ T9939] netlink: 'syz.5.1759': attribute type 14 has an invalid length. [ 163.765518][ T29] audit: type=1400 audit(1740036707.756:698): avc: denied { connect } for pid=9940 comm="syz.1.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.814175][ T29] audit: type=1400 audit(1740036707.756:699): avc: denied { name_connect } for pid=9940 comm="syz.1.1758" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 164.043892][ T9957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.170078][ T5872] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 164.330580][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 164.343914][ T5872] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 164.362277][ T5872] usb 6-1: config 0 has no interface number 0 [ 164.381590][ T5872] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 164.396367][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.405072][ T5872] usb 6-1: Product: syz [ 164.409354][ T5872] usb 6-1: Manufacturer: syz [ 164.415347][ T5872] usb 6-1: SerialNumber: syz [ 164.423054][ T5872] usb 6-1: config 0 descriptor?? [ 164.440224][ T5872] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 164.568797][ T9984] netlink: 'syz.2.1780': attribute type 32 has an invalid length. [ 164.597444][ T9984] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1780'. [ 164.660638][ T9949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.670370][ T9949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.702420][ T5872] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 164.729954][ T5872] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 164.944010][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 165.070132][ T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 165.148291][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 165.156177][ T5873] usb 6-1: USB disconnect, device number 7 [ 165.210320][ T5873] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 165.238425][ T5873] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 165.265069][ T5873] quatech2 6-1:0.51: device disconnected [ 165.279992][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 165.293285][ T8] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 165.309836][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.317860][ T8] usb 2-1: Product: syz [ 165.331952][ T8] usb 2-1: Manufacturer: syz [ 165.336578][ T8] usb 2-1: SerialNumber: syz [ 165.350555][ T8] usb 2-1: config 0 descriptor?? [ 165.368773][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 165.459886][ T5903] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 165.619885][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 165.628677][ T5903] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 165.648555][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.658076][ T5903] usb 3-1: Product: syz [ 165.662306][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1804'. [ 165.677247][ T5903] usb 3-1: Manufacturer: syz [ 165.682167][ T5903] usb 3-1: SerialNumber: syz [ 165.688724][ T5903] usb 3-1: config 0 descriptor?? [ 165.706047][ T5903] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 165.773520][ T8] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 165.797882][ T8] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 165.820599][ T8] usb 2-1: USB disconnect, device number 23 [ 165.943467][ T5873] usb 3-1: USB disconnect, device number 24 [ 166.029938][ T75] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 166.200122][ T75] usb 6-1: Using ep0 maxpacket: 8 [ 166.214118][ T75] usb 6-1: config 0 interface 0 has no altsetting 0 [ 166.221585][ T75] usb 6-1: New USB device found, idVendor=056a, idProduct=0014, bcdDevice= 0.00 [ 166.237522][ T75] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.249125][ T75] usb 6-1: config 0 descriptor?? [ 166.402601][ T5903] kernel write not supported for file /735/attr/keycreate (pid: 5903 comm: kworker/1:6) [ 166.685813][ T75] wacom 0003:056A:0014.0024: Unknown device_type for 'HID 056a:0014'. Assuming pen. [ 166.731850][ T75] wacom 0003:056A:0014.0024: hidraw0: USB HID v0.00 Device [HID 056a:0014] on usb-dummy_hcd.5-1/input0 [ 166.755776][T10076] loop8: detected capacity change from 0 to 1 [ 166.765945][ T75] input: Wacom Graphire3 6x8 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0014.0024/input/input25 [ 166.776213][T10076] Dev loop8: unable to read RDB block 1 [ 166.808656][T10076] loop8: unable to read partition table [ 166.825675][T10076] loop8: partition table beyond EOD, truncated [ 166.842662][T10076] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 166.905534][ T970] usb 6-1: USB disconnect, device number 8 [ 167.261864][T10105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1836'. [ 167.322306][T10105] nbd: socks must be embedded in a SOCK_ITEM attr [ 167.633451][T10123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1844'. [ 167.821012][ T52] Bluetooth: hci3: command tx timeout [ 167.947928][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1853'. [ 168.079976][ T5872] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 168.180957][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 168.180972][ T29] audit: type=1400 audit(1740036712.176:736): avc: denied { connect } for pid=10155 comm="syz.4.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.219412][ T29] audit: type=1400 audit(1740036712.206:737): avc: denied { write } for pid=10155 comm="syz.4.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.251984][ T5872] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.270620][ T5872] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.286416][ T5872] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.319870][ T29] audit: type=1400 audit(1740036712.236:738): avc: denied { read } for pid=10155 comm="syz.4.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.363679][ T5872] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.389566][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.400003][ T29] audit: type=1400 audit(1740036712.396:739): avc: denied { write } for pid=10165 comm="syz.4.1864" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 168.427254][ T5872] usb 3-1: Product: syz [ 168.432081][ T5872] usb 3-1: Manufacturer: syz [ 168.445529][ T5872] cdc_wdm 3-1:1.0: skipping garbage [ 168.455719][ T5872] cdc_wdm 3-1:1.0: skipping garbage [ 168.472062][ T5872] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 168.578789][ T29] audit: type=1400 audit(1740036712.566:740): avc: denied { bind } for pid=10173 comm="syz.5.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.657493][ T8] usb 3-1: USB disconnect, device number 25 [ 168.683805][ T29] audit: type=1400 audit(1740036712.666:741): avc: denied { mount } for pid=10177 comm="syz.0.1870" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 168.816459][ T29] audit: type=1400 audit(1740036712.806:742): avc: denied { bind } for pid=10183 comm="syz.0.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.842577][ T29] audit: type=1400 audit(1740036712.806:743): avc: denied { name_bind } for pid=10183 comm="syz.0.1872" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 168.902275][ T29] audit: type=1400 audit(1740036712.806:744): avc: denied { node_bind } for pid=10183 comm="syz.0.1872" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 168.928586][ T29] audit: type=1400 audit(1740036712.816:745): avc: denied { write } for pid=10183 comm="syz.0.1872" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.941846][T10186] sctp: [Deprecated]: syz.5.1873 (pid 10186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.941846][T10186] Use struct sctp_sack_info instead [ 169.299558][T10209] vivid-007: disconnect [ 169.311514][T10209] vivid-007: reconnect [ 169.710040][ T8] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 169.869910][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 169.876676][ T8] usb 2-1: config 0 has no interfaces? [ 169.884710][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 169.895449][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.906707][ T8] usb 2-1: Product: syz [ 169.910914][ T8] usb 2-1: Manufacturer: syz [ 169.915508][ T8] usb 2-1: SerialNumber: syz [ 169.924384][ T8] usb 2-1: config 0 descriptor?? [ 169.989918][ T5872] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 170.139886][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 170.144719][ T8] usb 2-1: USB disconnect, device number 24 [ 170.146397][ T5872] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 170.159663][ T5872] usb 5-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 170.170071][ T5872] usb 5-1: config 0 has no interface number 0 [ 170.176164][ T5872] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 170.187981][ T5872] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 170.199386][ T5872] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 170.211297][ T5872] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 19968, setting to 1024 [ 170.229858][ T5872] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 170.244000][ T5872] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 170.259475][ T5872] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 170.273890][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.283601][ T5872] usb 5-1: config 0 descriptor?? [ 170.291506][T10231] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 170.299984][T10231] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 170.311508][ T5872] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 170.558704][ T8] usb 5-1: USB disconnect, device number 19 [ 170.597975][T10248] netlink: 'syz.2.1902': attribute type 10 has an invalid length. [ 170.622279][T10248] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.631420][T10248] bond0: (slave team0): Enslaving as an active interface with an up link [ 170.976374][T10260] input: syz0 as /devices/virtual/input/input28 [ 171.277817][T10267] IPVS: persistence engine module ip_vs_pe_m not found [ 171.588956][T10287] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1919'. [ 171.715810][T10293] can0: slcan on ttyS3. [ 171.821027][T10293] can0 (unregistered): slcan off ttyS3. [ 171.831174][T10293] Falling back ldisc for ttyS3. [ 172.327365][ T5915] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 172.480070][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 172.494617][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.514946][ T5915] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 172.526402][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.534842][ T5915] usb 2-1: Product: syz [ 172.539079][ T5915] usb 2-1: Manufacturer: syz [ 172.546928][ T5915] usb 2-1: SerialNumber: syz [ 172.555533][ T5915] usb 2-1: config 0 descriptor?? [ 172.570794][ T5915] usb 2-1: bad CDC descriptors [ 172.576041][ T5915] usb 2-1: unsupported MDLM descriptors [ 172.751663][T10344] sctp: [Deprecated]: syz.2.1947 (pid 10344) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.751663][T10344] Use struct sctp_sack_info instead [ 172.874658][ T5873] usb 2-1: USB disconnect, device number 25 [ 173.309898][ T5873] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 173.471214][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 173.478327][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.498081][ T5873] usb 5-1: config 0 has no interfaces? [ 173.521303][ C0] hrtimer: interrupt took 187493 ns [ 173.537195][ T5873] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 173.546455][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.564916][ T5873] usb 5-1: Product: syz [ 173.569097][ T5873] usb 5-1: Manufacturer: syz [ 173.574078][ T5873] usb 5-1: SerialNumber: syz [ 173.581407][ T5873] r8152-cfgselector 5-1: Unknown version 0x0000 [ 173.587804][ T5873] r8152-cfgselector 5-1: config 0 descriptor?? [ 173.777720][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 173.777734][ T29] audit: type=1400 audit(1740036717.766:771): avc: denied { read write } for pid=10392 comm="syz.1.1970" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 173.816968][ T29] audit: type=1400 audit(1740036717.766:772): avc: denied { open } for pid=10392 comm="syz.1.1970" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 173.864861][ T5872] r8152-cfgselector 5-1: USB disconnect, device number 20 [ 173.885146][ T29] audit: type=1400 audit(1740036717.826:773): avc: denied { ioctl } for pid=10392 comm="syz.1.1970" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0xae9f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 174.095116][T10407] vivid-004: ================= START STATUS ================= [ 174.115096][T10407] vivid-004: Radio HW Seek Mode: Bounded [ 174.125169][ T29] audit: type=1400 audit(1740036718.106:774): avc: denied { append } for pid=10409 comm="syz.0.1977" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.140038][T10407] vivid-004: Radio Programmable HW Seek: false [ 174.204280][T10407] vivid-004: RDS Rx I/O Mode: Block I/O [ 174.234664][T10407] vivid-004: Generate RBDS Instead of RDS: false [ 174.245025][T10407] vivid-004: RDS Reception: true [ 174.256858][T10407] vivid-004: RDS Program Type: 0 inactive [ 174.264221][T10407] vivid-004: RDS PS Name: inactive [ 174.274224][T10407] vivid-004: RDS Radio Text: inactive [ 174.280036][T10407] vivid-004: RDS Traffic Announcement: false inactive [ 174.287319][T10407] vivid-004: RDS Traffic Program: false inactive [ 174.293837][T10407] vivid-004: RDS Music: false inactive [ 174.299435][T10407] vivid-004: ================== END STATUS ================== [ 174.480350][ T5872] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 174.519919][ T29] audit: type=1400 audit(1740036718.496:775): avc: denied { getopt } for pid=10430 comm="syz.2.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.560475][ T29] audit: type=1400 audit(1740036718.546:776): avc: denied { write } for pid=10432 comm="syz.4.1986" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 174.611512][ T29] audit: type=1400 audit(1740036718.546:777): avc: denied { open } for pid=10432 comm="syz.4.1986" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 174.641485][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 174.664969][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.670008][ T29] audit: type=1400 audit(1740036718.656:778): avc: denied { create } for pid=10436 comm="syz.0.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 174.689021][ T5872] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 174.696412][T10436] delete_channel: no stack [ 174.733281][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.741120][ T29] audit: type=1400 audit(1740036718.696:779): avc: denied { setopt } for pid=10436 comm="syz.0.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 174.766224][ T5872] usb 2-1: config 0 descriptor?? [ 174.785633][ T29] audit: type=1400 audit(1740036718.716:780): avc: denied { read } for pid=10438 comm="syz.4.1989" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 174.831133][T10441] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 174.857481][T10441] CIFS mount error: No usable UNC path provided in device string! [ 174.857481][T10441] [ 174.869743][T10441] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 174.877815][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'. [ 175.064684][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1997'. [ 175.206928][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1999'. [ 175.226596][ T5872] sony 0003:054C:0268.0025: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 175.257775][ T5872] sony 0003:054C:0268.0025: failed to claim input [ 175.453511][ T5873] usb 2-1: USB disconnect, device number 26 [ 175.627921][T10488] tmpfs: Invalid uid '0x00000000ffffffff' [ 175.749985][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 175.888630][T10496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2017'. [ 175.922385][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.949941][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.959733][ T8] usb 6-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 175.962588][T10498] block nbd0: shutting down sockets [ 175.989937][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.999677][ T8] usb 6-1: config 0 descriptor?? [ 176.326283][T10514] can0: slcan on ttyS3. [ 176.381082][T10514] can0 (unregistered): slcan off ttyS3. [ 176.381320][T10517] netlink: 'syz.2.2026': attribute type 1 has an invalid length. [ 176.386913][T10514] Falling back ldisc for ttyS3. [ 176.418455][T10517] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.2026'. [ 176.421830][ T8] ntrig 0003:1B96:0012.0026: item fetching failed at offset 5/7 [ 176.477851][ T8] ntrig 0003:1B96:0012.0026: parse failed [ 176.489970][ T8] ntrig 0003:1B96:0012.0026: probe with driver ntrig failed with error -22 [ 176.626728][ T5915] usb 6-1: USB disconnect, device number 9 [ 177.618624][T10572] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 178.450057][ T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 178.622378][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 178.639505][ T8] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 178.652085][ T8] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 178.664528][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 178.729870][ T8] usb 2-1: config 1 has no interface number 0 [ 178.736039][ T8] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 178.759813][ T8] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 178.787619][ T8] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 178.820752][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.871084][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 179.128226][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 179.637149][ T5915] usb 2-1: USB disconnect, device number 27 [ 179.643944][ T5915] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 179.857131][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 179.857145][ T29] audit: type=1400 audit(1740036723.846:788): avc: denied { create } for pid=10636 comm="syz.0.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 179.883382][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.898221][T10635] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2079'. [ 179.942248][T10635] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 179.963467][ T29] audit: type=1400 audit(1740036723.906:789): avc: denied { write } for pid=10636 comm="syz.0.2080" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 179.979975][ T5825] Bluetooth: hci1: command 0x0405 tx timeout [ 179.982491][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.004064][ T29] audit: type=1400 audit(1740036723.906:790): avc: denied { getopt } for pid=10636 comm="syz.0.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 180.217305][T10647] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 180.225824][ T5998] hid-generic 0005:0B57:0007.0027: unknown main item tag 0x6 [ 180.264640][ T5998] hid-generic 0005:0B57:0007.0027: item fetching failed at offset 2/6 [ 180.267750][ T29] audit: type=1400 audit(1740036724.256:791): avc: denied { append } for pid=10649 comm="syz.5.2086" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 180.280370][ T5998] hid-generic 0005:0B57:0007.0027: probe with driver hid-generic failed with error -22 [ 180.323899][ T29] audit: type=1400 audit(1740036724.306:792): avc: denied { write } for pid=10649 comm="syz.5.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 180.370617][ T29] audit: type=1400 audit(1740036724.356:793): avc: denied { read } for pid=10651 comm="syz.1.2087" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.574521][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2094'. [ 180.638199][ T29] audit: type=1400 audit(1740036724.626:794): avc: denied { watch } for pid=10670 comm="syz.0.2095" path="/431" dev="tmpfs" ino=2191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 180.707516][ T29] audit: type=1400 audit(1740036724.686:795): avc: denied { read append } for pid=10672 comm="syz.1.2096" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 180.731282][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.747804][ T29] audit: type=1400 audit(1740036724.686:796): avc: denied { open } for pid=10672 comm="syz.1.2096" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 180.772975][ T29] audit: type=1400 audit(1740036724.736:797): avc: denied { map } for pid=10672 comm="syz.1.2096" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 180.829014][T10678] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 180.943160][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 180.951409][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.952143][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 181.030587][T10684] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2101'. [ 181.043637][T10684] netlink: 'syz.2.2101': attribute type 10 has an invalid length. [ 181.058099][T10684] bond0: (slave team0): Releasing backup interface [ 181.068365][T10684] team0: Cannot enslave team device to itself [ 181.794380][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2119'. [ 181.805054][T10723] syz_tun: left allmulticast mode [ 181.813269][T10723] syz_tun: left promiscuous mode [ 181.820251][T10723] bridge0: port 3(syz_tun) entered disabled state [ 181.839084][T10723] bridge_slave_1: left allmulticast mode [ 181.848699][T10723] bridge_slave_1: left promiscuous mode [ 181.865100][T10723] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.884400][T10723] bridge_slave_0: left allmulticast mode [ 181.905128][T10723] bridge_slave_0: left promiscuous mode [ 181.912803][T10723] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.996272][T10729] IPVS: Error joining to the multicast group [ 182.109904][ T5998] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 182.139905][T10735] virt_wifi0 speed is unknown, defaulting to 1000 [ 182.146662][T10735] virt_wifi0 speed is unknown, defaulting to 1000 [ 182.156406][T10735] virt_wifi0 speed is unknown, defaulting to 1000 [ 182.167679][T10735] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 182.187721][T10735] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 182.216100][T10735] virt_wifi0 speed is unknown, defaulting to 1000 [ 182.224730][T10735] virt_wifi0 speed is unknown, defaulting to 1000 [ 182.232165][T10735] virt_wifi0 speed is unknown, defaulting to 1000 [ 182.251349][T10735] virt_wifi0 speed is unknown, defaulting to 1000 [ 182.258843][T10735] virt_wifi0 speed is unknown, defaulting to 1000 [ 182.270126][ T5998] usb 3-1: Using ep0 maxpacket: 16 [ 182.280594][ T5998] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.303312][ T5998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.333397][ T5998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 182.349849][ T5998] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 182.361356][T10742] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2126'. [ 182.372802][ T5998] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.387099][ T5998] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 182.398015][ T5998] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 182.408775][ T5998] usb 3-1: Manufacturer: syz [ 182.416838][ T5998] usb 3-1: config 0 descriptor?? [ 182.729976][ T5998] rc_core: IR keymap rc-hauppauge not found [ 182.740625][ T5998] Registered IR keymap rc-empty [ 182.749467][ T5998] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.789879][ T5998] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.820310][ T5998] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 182.840183][ T5998] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input29 [ 182.874120][ T5998] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.919916][ T5998] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.940106][ T5998] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.960255][ T5998] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.999991][ T5998] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 183.030488][ T5998] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 183.080054][ T5998] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 183.124939][ T5998] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 183.150490][ T5998] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 183.182672][ T5998] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 183.221243][ T5998] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 183.252236][ T5998] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 92 [ 183.262797][ T5998] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 183.275905][ T5998] usb 3-1: USB disconnect, device number 26 [ 183.355100][T10764] netlink: 'syz.5.2136': attribute type 7 has an invalid length. [ 183.381673][T10764] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.390690][T10764] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.399643][T10764] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.408666][T10764] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.162928][T10801] input: syz1 as /devices/virtual/input/input30 [ 184.230081][ T75] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 184.284964][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 184.401397][ T75] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.418937][ T75] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.429881][T10813] pim6reg: entered allmulticast mode [ 184.443510][ T75] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.452887][ T75] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.461084][ T75] usb 3-1: Product: syz [ 184.484793][ T75] usb 3-1: Manufacturer: syz [ 184.496741][ T75] usb 3-1: SerialNumber: syz [ 184.810523][ T5872] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 184.924127][T10839] input: syz1 as /devices/virtual/input/input31 [ 184.961261][ T5872] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.979964][ T5872] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.991177][ T5872] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 184.997509][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 184.997522][ T29] audit: type=1400 audit(1740036728.986:808): avc: denied { read } for pid=10840 comm="syz.4.2173" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 185.001065][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 185.007770][ T29] audit: type=1400 audit(1740036728.996:809): avc: denied { open } for pid=10840 comm="syz.4.2173" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 185.030454][ T5872] usb 6-1: SerialNumber: syz [ 185.067913][ T29] audit: type=1400 audit(1740036729.056:810): avc: denied { ioctl } for pid=10840 comm="syz.4.2173" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 185.306442][ T5872] usb 6-1: 0:2 : does not exist [ 185.323362][ T5872] usb 6-1: USB disconnect, device number 10 [ 185.341877][ T75] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 185.348312][ T75] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 185.371672][ T75] cdc_ncm 3-1:1.0: bind() failure [ 185.378542][ T75] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 185.386683][ T75] cdc_ncm 3-1:1.1: bind() failure [ 185.393026][ T29] audit: type=1326 audit(1740036729.386:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54abd8cde9 code=0x7ffc0000 [ 185.400966][ T75] usb 3-1: USB disconnect, device number 27 [ 185.468182][ T29] audit: type=1326 audit(1740036729.386:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54abd8cde9 code=0x7ffc0000 [ 185.529660][ T29] audit: type=1326 audit(1740036729.416:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54abd8cde9 code=0x7ffc0000 [ 185.580943][ T29] audit: type=1326 audit(1740036729.416:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54abd8cde9 code=0x7ffc0000 [ 185.640998][ T29] audit: type=1326 audit(1740036729.416:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54abd8cde9 code=0x7ffc0000 [ 185.679915][ T29] audit: type=1326 audit(1740036729.416:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f54abd8cde9 code=0x7ffc0000 [ 185.766809][ T29] audit: type=1326 audit(1740036729.416:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54abd8cde9 code=0x7ffc0000 [ 185.770475][T10865] syz.4.2184 (10865) used greatest stack depth: 20256 bytes left [ 185.838353][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2185'. [ 186.019725][T10877] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 186.025910][T10877] syzkaller1: linktype set to 780 [ 186.070539][T10882] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2192'. [ 186.609191][T10917] netlink: 'syz.1.2209': attribute type 33 has an invalid length. [ 186.629947][T10917] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2209'. [ 186.661643][T10917] netlink: 'syz.1.2209': attribute type 10 has an invalid length. [ 186.711778][T10917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.740484][T10917] team0: Port device batadv0 added [ 186.789292][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'. [ 186.821130][T10926] bridge_slave_1: left allmulticast mode [ 186.831191][T10926] bridge_slave_1: left promiscuous mode [ 186.838203][T10926] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.887584][T10926] bridge_slave_0: left allmulticast mode [ 186.899188][T10926] bridge_slave_0: left promiscuous mode [ 186.924268][T10926] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.035365][T10930] team0: Device gtp0 is of different type [ 188.009626][T10984] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 188.042902][T10984] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 188.054719][ T5903] virt_wifi0 speed is unknown, defaulting to 1000 [ 188.070084][ T5873] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 188.141789][ T11] bond0: (slave bond_slave_0): interface is now down [ 188.149863][ T11] bond0: (slave bond_slave_1): interface is now down [ 188.160371][ T11] bond0: now running without any active interface! [ 188.240066][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 188.248250][ T5873] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 188.257573][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.273289][ T5873] usb 3-1: Product: syz [ 188.277473][ T5873] usb 3-1: Manufacturer: syz [ 188.282952][ T5873] usb 3-1: SerialNumber: syz [ 188.289670][ T5873] usb 3-1: config 0 descriptor?? [ 188.300102][ T5873] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 188.342919][T11002] pim6reg: entered allmulticast mode [ 188.420724][T11006] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2250'. [ 188.531921][T11009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.544857][T11009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.559957][T11009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.579674][T11009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.595050][T11009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.605871][T11009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.619945][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2252'. [ 188.631645][T11009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.643308][T11009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.653172][T11009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.665967][T11009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.685050][T11014] bridge_slave_1: left allmulticast mode [ 188.693543][T11014] bridge_slave_1: left promiscuous mode [ 188.699284][T11014] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.721723][T11014] bridge_slave_0: left allmulticast mode [ 188.729564][T11014] bridge_slave_0: left promiscuous mode [ 188.741095][T11014] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.128334][ T5873] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 189.159063][ T5873] usb 3-1: USB disconnect, device number 28 [ 189.367674][T11045] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2266'. [ 189.383050][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2265'. [ 190.916090][T11121] netlink: 'syz.1.2294': attribute type 1 has an invalid length. [ 190.934191][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2294'. [ 190.958126][T11124] ax25_connect(): syz.0.2296 uses autobind, please contact jreuter@yaina.de [ 190.968877][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 190.968891][ T29] audit: type=1400 audit(1740036734.946:834): avc: denied { connect } for pid=11123 comm="syz.0.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 190.994699][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.139668][ T29] audit: type=1400 audit(1740036735.126:835): avc: denied { create } for pid=11130 comm="syz.1.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 191.188120][ T29] audit: type=1400 audit(1740036735.166:836): avc: denied { write } for pid=11130 comm="syz.1.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 191.711248][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2315'. [ 191.721325][T11163] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 191.951165][ T5998] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 191.962774][T11174] trusted_key: syz.1.2320 sent an empty control message without MSG_MORE. [ 192.110006][ T5998] usb 3-1: Using ep0 maxpacket: 8 [ 192.127687][ T5998] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 192.150591][ T5998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.170643][ T5998] usb 3-1: config 0 descriptor?? [ 192.189578][ T29] audit: type=1400 audit(1740036736.176:837): avc: denied { audit_read } for pid=11183 comm="syz.5.2326" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.660767][ T29] audit: type=1400 audit(1740036736.656:838): avc: denied { accept } for pid=11194 comm="syz.1.2329" lport=37446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 192.681272][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.802253][T11200] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 192.802331][ T29] audit: type=1400 audit(1740036736.796:839): avc: denied { read } for pid=11199 comm="syz.1.2331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 192.829343][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.889195][T11204] netdevsim netdevsim5 netdevsim0: Unsupported IPsec algorithm [ 192.889437][ T29] audit: type=1400 audit(1740036736.806:840): avc: denied { read } for pid=11201 comm="syz.0.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.991145][ T5998] video4linux radio48: keene_cmd_main failed (-71) [ 192.998864][ T5998] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 193.021822][ T5998] usb 3-1: USB disconnect, device number 29 [ 193.096733][T11214] team0: No ports can be present during mode change [ 193.246631][T11220] block nbd5: not configured, cannot reconfigure [ 193.260669][ T5838] Bluetooth: hci1: command 0x0405 tx timeout [ 193.639240][ T29] audit: type=1400 audit(1740036737.626:841): avc: denied { write } for pid=11233 comm="syz.2.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 193.897830][T11247] Device name cannot be null; rc = [-22] [ 193.897977][ T29] audit: type=1400 audit(1740036737.886:842): avc: denied { mounton } for pid=11246 comm="syz.0.2348" path="/473/bus" dev="tmpfs" ino=2408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 194.122778][ T29] audit: type=1326 audit(1740036738.116:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652c18cde9 code=0x7fc00000 [ 194.226292][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.233038][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.419932][ T5873] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 194.569915][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 194.576535][ T5873] usb 3-1: config 0 has an invalid interface number: 74 but max is 1 [ 194.585748][ T5873] usb 3-1: config 0 has no interface number 1 [ 194.593753][ T5873] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 194.613135][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.640917][ T5873] usb 3-1: Product: syz [ 194.649546][ T5873] usb 3-1: Manufacturer: syz [ 194.658592][ T5873] usb 3-1: SerialNumber: syz [ 194.680012][ T5873] usb 3-1: config 0 descriptor?? [ 194.727228][ T5873] snd-usb-audio 3-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 194.976593][ T8] usb 3-1: USB disconnect, device number 30 [ 195.209837][ T5903] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 195.381183][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.399903][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.419856][ T5903] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 195.428902][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.451614][ T5903] usb 2-1: config 0 descriptor?? [ 195.592798][T11291] overlayfs: disabling nfs_export due to verity=require [ 195.925503][T11303] netem: incorrect gi model size [ 195.933092][T11303] netem: change failed [ 196.152132][ T5903] usb 2-1: string descriptor 0 read error: -71 [ 196.167609][ T5903] uclogic 0003:256C:006D.0028: failed retrieving string descriptor #200: -71 [ 196.201834][ T5903] uclogic 0003:256C:006D.0028: failed retrieving pen parameters: -71 [ 196.226770][ T5903] uclogic 0003:256C:006D.0028: failed probing pen v2 parameters: -71 [ 196.269416][ T5903] uclogic 0003:256C:006D.0028: failed probing parameters: -71 [ 196.296289][ T5903] uclogic 0003:256C:006D.0028: probe with driver uclogic failed with error -71 [ 196.337423][ T5903] usb 2-1: USB disconnect, device number 28 [ 196.710156][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 196.710172][ T29] audit: type=1400 audit(1740036740.696:846): avc: denied { mount } for pid=11312 comm="syz.0.2381" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 196.737737][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.001445][ T5903] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 197.184639][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.204274][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.215773][ T5903] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.235054][ T5903] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.245292][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.260952][ T29] audit: type=1400 audit(1740036741.256:847): avc: denied { write } for pid=75 comm="kworker/1:1" path="socket:[30256]" dev="sockfs" ino=30256 scontext=system_u:system_r:kernel_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 197.266620][ T5903] usb 6-1: config 0 descriptor?? [ 197.320618][ T5873] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 197.405102][T11344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.510912][ T5873] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.520143][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.528550][ T5873] usb 5-1: Product: syz [ 197.552805][ T5873] usb 5-1: Manufacturer: syz [ 197.569843][ T5873] usb 5-1: SerialNumber: syz [ 197.579050][ T5873] usb 5-1: config 0 descriptor?? [ 197.610934][ T5873] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 197.753257][ T5903] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 197.789020][ T5903] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 197.801458][ T5998] usb 5-1: USB disconnect, device number 21 [ 197.914375][T11368] siw: device registration error -23 [ 197.941705][T11370] ALSA: mixer_oss: invalid OSS volume 'P}VIN' [ 198.019973][ T5873] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 198.084435][ T75] usb 6-1: USB disconnect, device number 11 [ 198.180006][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 198.199171][ T5873] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.212379][ T5873] usb 2-1: config 0 has no interface number 0 [ 198.218613][ T5873] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.233306][ T5873] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.247100][ T5873] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 198.260585][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.276110][ T5873] usb 2-1: config 0 descriptor?? [ 198.504083][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2415'. [ 198.889907][ T75] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 198.895791][ T5873] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.002A/input/input32 [ 198.979177][ T5873] uclogic 0003:28BD:0094.002A: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 199.042024][ T75] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.064590][ T75] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 199.082727][ T75] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.098442][ T75] usb 6-1: config 0 descriptor?? [ 199.102702][ T5998] usb 2-1: USB disconnect, device number 29 [ 199.164423][T11409] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2422'. [ 199.184780][T11409] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 199.490146][T11416] sp0: Synchronizing with TNC [ 199.515088][ T75] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 199.548506][ T75] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.002B/input/input33 [ 199.680562][ T75] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 199.914423][ T29] audit: type=1326 audit(1740036743.906:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 200.010209][ T29] audit: type=1326 audit(1740036743.906:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 200.033915][ T5998] usb 6-1: USB disconnect, device number 12 [ 200.080384][ T29] audit: type=1326 audit(1740036743.916:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 200.156514][ T29] audit: type=1326 audit(1740036743.916:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 200.210941][ T29] audit: type=1326 audit(1740036743.916:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 200.252095][ T29] audit: type=1326 audit(1740036743.916:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 200.276860][ T29] audit: type=1326 audit(1740036743.946:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 200.301263][ T29] audit: type=1326 audit(1740036743.946:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdaf8183da7 code=0x7ffc0000 [ 201.069868][ T5998] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 201.220031][ T5998] usb 6-1: Using ep0 maxpacket: 8 [ 201.249005][ T5998] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 201.259031][ T5998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.276590][ T5998] usb 6-1: config 0 descriptor?? [ 201.389911][ T970] kernel read not supported for file /dsp1 (pid: 970 comm: kworker/0:2) [ 201.492786][ T5998] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 201.722605][T11487] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 201.836116][T11489] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 201.890944][T11491] block nbd1: NBD_DISCONNECT [ 202.101328][ T5998] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 202.125957][ T5998] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 202.132951][T11501] sp0: Synchronizing with TNC [ 202.170942][ T5998] asix 6-1:0.0: probe with driver asix failed with error -71 [ 202.186737][ T5998] usb 6-1: USB disconnect, device number 13 [ 202.199156][ T5840] Bluetooth: hci0: unexpected event for opcode 0x0428 [ 202.270074][T11509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2472'. [ 203.282170][T11566] syz.0.2497 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 203.300012][ T5873] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 203.479902][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 203.496668][ T5873] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 203.516014][ T5873] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 203.547409][ T5873] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 203.564259][ T5873] usb 3-1: config 1 has no interface number 0 [ 203.577601][ T5873] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.618561][ T5873] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 203.637432][T11583] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2504'. [ 203.644753][ T5873] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 203.669314][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.720088][ T5873] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 203.910743][ T5873] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 204.383203][ T5998] usb 3-1: USB disconnect, device number 31 [ 204.400705][ T5998] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 204.406926][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 204.406941][ T29] audit: type=1400 audit(1740036748.396:898): avc: denied { bind } for pid=11609 comm="syz.5.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.513293][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2517'. [ 204.580184][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2517'. [ 204.600568][T11612] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2517'. [ 204.889263][T11620] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 205.210553][T11636] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 205.779916][ T5903] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 205.929860][ T5903] usb 6-1: Using ep0 maxpacket: 32 [ 205.937615][ T5903] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 205.948750][ T5903] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 205.957602][ T5903] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 205.971391][ T5903] usb 6-1: config 1 has no interface number 0 [ 205.977555][ T5903] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.996294][ T5903] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 206.015105][ T5903] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 206.024308][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.043017][ T5903] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 206.222829][ T5840] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 206.231827][ T5840] Bluetooth: hci0: Injecting HCI hardware error event [ 206.242061][ T5840] Bluetooth: hci0: hardware error 0x00 [ 206.250301][ T5903] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 206.337932][ T29] audit: type=1400 audit(1740036750.326:899): avc: denied { ioctl } for pid=11684 comm="syz.4.2551" path="socket:[31370]" dev="sockfs" ino=31370 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 206.723827][ T75] usb 6-1: USB disconnect, device number 14 [ 206.731707][ T75] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 207.006258][ T29] audit: type=1326 audit(1740036750.996:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11709 comm="syz.2.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 207.074678][ T29] audit: type=1326 audit(1740036751.026:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11709 comm="syz.2.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 207.133427][ T29] audit: type=1326 audit(1740036751.036:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11709 comm="syz.2.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 207.170060][ T29] audit: type=1326 audit(1740036751.036:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11709 comm="syz.2.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 207.216991][ T29] audit: type=1326 audit(1740036751.036:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11709 comm="syz.2.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 207.249996][ T29] audit: type=1326 audit(1740036751.036:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11709 comm="syz.2.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 207.329865][ T29] audit: type=1326 audit(1740036751.036:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11709 comm="syz.2.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 207.374676][ T29] audit: type=1326 audit(1740036751.036:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11709 comm="syz.2.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf818cde9 code=0x7ffc0000 [ 207.460618][T11728] netlink: 'syz.0.2567': attribute type 11 has an invalid length. [ 207.726183][T11738] netlink: 'syz.0.2579': attribute type 18 has an invalid length. [ 207.739819][T11738] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.748606][T11738] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.757389][T11738] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.766373][T11738] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.776588][T11739] netlink: 'syz.4.2571': attribute type 3 has an invalid length. [ 207.808235][T11739] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2571'. [ 207.988206][T11748] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2575'. [ 208.127994][ T75] kernel write not supported for file /video8 (pid: 75 comm: kworker/1:1) [ 208.257866][T11758] sch_tbf: peakrate 2646 is lower than or equals to rate 17014499898028217207 ! [ 208.296624][T11760] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.2581'. [ 208.313635][ T5840] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 208.651668][T11781] overlayfs: workdir and upperdir must be separate subtrees [ 208.739436][T11788] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.2594'. [ 208.765064][T11790] bridge_slave_0: entered allmulticast mode [ 208.766427][T11788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.785607][T11790] bridge_slave_0: entered promiscuous mode [ 208.888094][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2598'. [ 208.910873][ T5998] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 208.965643][T11800] bond_slave_1: entered promiscuous mode [ 208.973669][T11800] bond0: (slave bond_slave_1): Releasing backup interface [ 209.009717][T11800] netlink: 'syz.2.2599': attribute type 2 has an invalid length. [ 209.018213][T11800] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 209.079957][ T5998] usb 6-1: Using ep0 maxpacket: 32 [ 209.086791][ T5998] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 209.096062][ T5998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.114082][ T5998] usb 6-1: config 0 descriptor?? [ 209.349882][ T5998] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 209.374608][ T5998] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 209.400382][ T5998] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 209.418366][ T5998] usb 6-1: media controller created [ 209.446229][ T5998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.504494][T11825] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2612'. [ 209.937647][T11848] wg1: entered promiscuous mode [ 209.950539][ T5998] az6027: usb out operation failed. (-71) [ 209.956293][ T5998] stb0899_attach: Driver disabled by Kconfig [ 209.989856][ T5998] az6027: no front-end attached [ 209.989856][ T5998] [ 210.002617][ T5998] az6027: usb out operation failed. (-71) [ 210.008397][ T5998] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 210.032676][ T5998] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input34 [ 210.078595][ T5998] dvb-usb: schedule remote query interval to 400 msecs. [ 210.096245][ T5998] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 210.127962][ T5998] usb 6-1: USB disconnect, device number 15 [ 210.192803][ T5998] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 210.201652][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 210.201665][ T29] audit: type=1400 audit(1740036754.186:922): avc: denied { write } for pid=11853 comm="syz.1.2627" path="socket:[32852]" dev="sockfs" ino=32852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 210.498806][ T29] audit: type=1400 audit(1740036754.486:923): avc: denied { read } for pid=11866 comm="syz.0.2632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 210.543457][ T29] audit: type=1400 audit(1740036754.516:924): avc: denied { watch watch_reads } for pid=11870 comm="syz.2.2634" path="/535/file0" dev="tmpfs" ino=2715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 210.846634][ T29] audit: type=1400 audit(1740036754.836:925): avc: denied { watch } for pid=11882 comm="syz.4.2640" path="anon_inode:[fanotify]" dev="anon_inodefs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:anon_inodefs_t tclass=filesystem permissive=1 [ 210.892677][T11883] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2639'. [ 211.052496][T11888] (unnamed net_device) (uninitialized): down delay (32768) is not a multiple of miimon (100), value rounded to 32700 ms [ 211.099895][T11888] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 211.119049][T11891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.196280][ T29] audit: type=1400 audit(1740036755.186:926): avc: denied { setopt } for pid=11895 comm="syz.0.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 211.290414][T11904] new mount options do not match the existing superblock, will be ignored [ 211.301986][ T29] audit: type=1400 audit(1740036755.296:927): avc: denied { remount } for pid=11903 comm="syz.5.2650" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 211.308099][T11904] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 211.379883][ T75] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 211.473575][ T29] audit: type=1400 audit(1740036755.466:928): avc: denied { mount } for pid=11911 comm="syz.5.2654" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 211.530461][ T75] usb 5-1: Using ep0 maxpacket: 8 [ 211.537277][ T75] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 211.545786][ T75] usb 5-1: config 179 has no interface number 0 [ 211.553027][ T75] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 211.564870][ T75] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 211.577127][ T75] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 211.589509][ T75] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 211.602936][ T75] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 211.621170][ T75] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 211.631055][ T75] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.642325][T11894] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 211.745275][ T5998] kernel read not supported for file /dsp (pid: 5998 comm: kworker/0:6) [ 211.837485][T11925] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 212.012680][ T5903] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input35 [ 212.209974][ T75] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 212.218400][ T5873] usb 5-1: USB disconnect, device number 22 [ 212.218414][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 212.233043][ T5873] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 212.233130][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 212.406733][ T75] usb 6-1: Using ep0 maxpacket: 16 [ 212.417397][ T75] usb 6-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.430951][ T75] usb 6-1: config 0 interface 0 has no altsetting 0 [ 212.437545][ T75] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 212.449275][ T75] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.470736][ T75] usb 6-1: config 0 descriptor?? [ 212.538377][ T29] audit: type=1400 audit(1740036756.526:929): avc: denied { write } for pid=11952 comm="syz.2.2673" name="mdstat" dev="proc" ino=4026532011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 212.561404][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.882817][ T75] pantherlord 0003:0810:0001.002C: item fetching failed at offset 6/7 [ 212.891610][ T75] pantherlord 0003:0810:0001.002C: parse failed [ 212.897886][ T75] pantherlord 0003:0810:0001.002C: probe with driver pantherlord failed with error -22 [ 213.095974][ T5915] usb 6-1: USB disconnect, device number 16 [ 213.267196][T11969] xt_hashlimit: max too large, truncated to 1048576 [ 213.668253][T11985] netlink: 'syz.4.2688': attribute type 1 has an invalid length. [ 213.719904][ T5915] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 213.889904][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 213.896365][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.912913][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.931263][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 213.950008][ T5915] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 213.959672][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.983093][ T5915] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 213.993131][ T5915] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 214.001218][ T5915] usb 2-1: Manufacturer: syz [ 214.007628][ T5915] usb 2-1: config 0 descriptor?? [ 214.289876][ T5915] rc_core: IR keymap rc-hauppauge not found [ 214.295843][ T5915] Registered IR keymap rc-empty [ 214.301436][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.319882][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.341964][ T5915] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 214.355666][ T5915] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input36 [ 214.373171][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.389961][ T5903] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 214.399922][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.429890][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.449956][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.470879][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.489858][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.506082][T12014] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2697'. [ 214.516345][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.543255][ T29] audit: type=1400 audit(1740036758.526:930): avc: denied { accept } for pid=12013 comm="syz.2.2698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.550022][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.604604][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.616153][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.626435][ T5903] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 214.635986][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.646895][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.663386][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.690948][ T5903] usb 5-1: config 0 descriptor?? [ 214.711836][ T5915] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 214.727562][ T5915] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 214.743441][ T5915] usb 2-1: USB disconnect, device number 30 [ 214.821861][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2703'. [ 215.475931][ T29] audit: type=1400 audit(1740036759.466:931): avc: denied { watch } for pid=12051 comm="syz.2.2715" path="/559/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 215.509962][ T5903] hid-led 0003:0FC5:B080.002D: probe with driver hid-led failed with error -71 [ 215.520560][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.537272][ T29] audit: type=1400 audit(1740036759.466:932): avc: denied { watch_sb } for pid=12051 comm="syz.2.2715" path="/559/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 215.581670][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.614995][ T5903] usb 5-1: USB disconnect, device number 23 [ 215.661950][T12055] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2716'. [ 216.069924][ T29] audit: type=1400 audit(1740036760.056:933): avc: denied { read } for pid=12077 comm="syz.2.2728" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 216.093933][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.367105][ T29] audit: type=1400 audit(1740036760.356:934): avc: denied { write } for pid=12090 comm="syz.0.2734" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 216.390493][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.399193][T12089] virt_wifi0 speed is unknown, defaulting to 1000 [ 216.712840][ T29] audit: type=1400 audit(1740036760.706:935): avc: denied { lock } for pid=12109 comm="syz.2.2740" path="socket:[33442]" dev="sockfs" ino=33442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 216.877402][T12115] sp0: Synchronizing with TNC [ 216.896835][ T11] [ 216.899155][ T11] ===================================================== [ 216.906069][ T11] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 216.913514][ T11] 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 Not tainted [ 216.920590][ T11] ----------------------------------------------------- [ 216.927492][ T11] kworker/u8:0/11 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 216.935093][ T11] ffffffff8f351f98 (disc_data_lock#2){.?.+}-{3:3}, at: sp_get+0x18/0xf0 [ 216.943417][ T11] [ 216.943417][ T11] and this task is already holding: [ 216.950748][ T11] ffffffff9ab81258 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 216.959421][ T11] which would create a new lock dependency: [ 216.965277][ T11] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#2){.?.+}-{3:3} [ 216.973073][ T11] [ 216.973073][ T11] but this new dependency connects a HARDIRQ-irq-safe lock: [ 216.982486][ T11] (&port_lock_key){-.-.}-{3:3} [ 216.982501][ T11] [ 216.982501][ T11] ... which became HARDIRQ-irq-safe at: [ 216.994994][ T11] lock_acquire.part.0+0x11b/0x380 [ 217.000167][ T11] _raw_spin_lock_irqsave+0x3a/0x60 [ 217.005426][ T11] serial8250_handle_irq+0x95/0xc80 [ 217.010682][ T11] serial8250_default_handle_irq+0x9a/0x210 [ 217.016637][ T11] serial8250_interrupt+0x103/0x210 [ 217.021896][ T11] __handle_irq_event_percpu+0x229/0x7d0 [ 217.027583][ T11] handle_irq_event+0xab/0x1e0 [ 217.032427][ T11] handle_edge_irq+0x263/0xd10 [ 217.037253][ T11] __common_interrupt+0xdf/0x250 [ 217.042248][ T11] common_interrupt+0xba/0xe0 [ 217.046997][ T11] asm_common_interrupt+0x26/0x40 [ 217.052091][ T11] acpi_safe_halt+0x1a/0x20 [ 217.056662][ T11] acpi_idle_enter+0xc5/0x160 [ 217.061400][ T11] cpuidle_enter_state+0xaa/0x4f0 [ 217.066483][ T11] cpuidle_enter+0x4e/0xa0 [ 217.070974][ T11] do_idle+0x310/0x3f0 [ 217.075108][ T11] cpu_startup_entry+0x4f/0x60 [ 217.079937][ T11] start_secondary+0x222/0x2b0 [ 217.084762][ T11] common_startup_64+0x13e/0x148 [ 217.089765][ T11] [ 217.089765][ T11] to a HARDIRQ-irq-unsafe lock: [ 217.096764][ T11] (disc_data_lock#2){.?.+}-{3:3} [ 217.096786][ T11] [ 217.096786][ T11] ... which became HARDIRQ-irq-unsafe at: [ 217.109619][ T11] ... [ 217.109624][ T11] lock_acquire.part.0+0x11b/0x380 [ 217.117349][ T11] _raw_read_lock+0x5f/0x70 [ 217.121924][ T11] sp_get+0x18/0xf0 [ 217.125798][ T11] sixpack_ioctl+0x74/0x430 [ 217.130362][ T11] tty_ioctl+0x6ee/0x15d0 [ 217.134749][ T11] __x64_sys_ioctl+0x190/0x200 [ 217.139591][ T11] do_syscall_64+0xcd/0x250 [ 217.144160][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.150125][ T11] [ 217.150125][ T11] other info that might help us debug this: [ 217.150125][ T11] [ 217.160330][ T11] Possible interrupt unsafe locking scenario: [ 217.160330][ T11] [ 217.168622][ T11] CPU0 CPU1 [ 217.173957][ T11] ---- ---- [ 217.179290][ T11] lock(disc_data_lock#2); [ 217.183769][ T11] local_irq_disable(); [ 217.190556][ T11] lock(&port_lock_key); [ 217.197397][ T11] lock(disc_data_lock#2); [ 217.204406][ T11] [ 217.207896][ T11] lock(&port_lock_key); [ 217.212378][ T11] [ 217.212378][ T11] *** DEADLOCK *** [ 217.212378][ T11] [ 217.220496][ T11] 6 locks held by kworker/u8:0/11: [ 217.225574][ T11] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 217.236682][ T11] #1: ffffc90000107d18 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 217.247696][ T11] #2: ffff888025170ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x31/0x780 [ 217.256705][ T11] #3: ffff888035c1a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 217.265972][ T11] #4: ffffffff9ab81258 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 217.275066][ T11] #5: ffff888035c1a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 217.284332][ T11] [ 217.284332][ T11] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 217.294709][ T11] -> (&port_lock_key){-.-.}-{3:3} { [ 217.299882][ T11] IN-HARDIRQ-W at: [ 217.303840][ T11] lock_acquire.part.0+0x11b/0x380 [ 217.310574][ T11] _raw_spin_lock_irqsave+0x3a/0x60 [ 217.317394][ T11] serial8250_handle_irq+0x95/0xc80 [ 217.324221][ T11] serial8250_default_handle_irq+0x9a/0x210 [ 217.331736][ T11] serial8250_interrupt+0x103/0x210 [ 217.338556][ T11] __handle_irq_event_percpu+0x229/0x7d0 [ 217.345805][ T11] handle_irq_event+0xab/0x1e0 [ 217.352183][ T11] handle_edge_irq+0x263/0xd10 [ 217.358576][ T11] __common_interrupt+0xdf/0x250 [ 217.365134][ T11] common_interrupt+0xba/0xe0 [ 217.371432][ T11] asm_common_interrupt+0x26/0x40 [ 217.378077][ T11] acpi_safe_halt+0x1a/0x20 [ 217.384197][ T11] acpi_idle_enter+0xc5/0x160 [ 217.390492][ T11] cpuidle_enter_state+0xaa/0x4f0 [ 217.397132][ T11] cpuidle_enter+0x4e/0xa0 [ 217.403167][ T11] do_idle+0x310/0x3f0 [ 217.408857][ T11] cpu_startup_entry+0x4f/0x60 [ 217.415241][ T11] start_secondary+0x222/0x2b0 [ 217.421627][ T11] common_startup_64+0x13e/0x148 [ 217.428185][ T11] IN-SOFTIRQ-W at: [ 217.432133][ T11] lock_acquire.part.0+0x11b/0x380 [ 217.438865][ T11] _raw_spin_lock_irqsave+0x3a/0x60 [ 217.445687][ T11] serial8250_handle_irq+0x95/0xc80 [ 217.452505][ T11] serial8250_default_handle_irq+0x9a/0x210 [ 217.460017][ T11] serial8250_interrupt+0x103/0x210 [ 217.466835][ T11] __handle_irq_event_percpu+0x229/0x7d0 [ 217.474089][ T11] handle_irq_event+0xab/0x1e0 [ 217.480480][ T11] handle_edge_irq+0x263/0xd10 [ 217.486864][ T11] __common_interrupt+0xdf/0x250 [ 217.493420][ T11] common_interrupt+0x61/0xe0 [ 217.499716][ T11] asm_common_interrupt+0x26/0x40 [ 217.506363][ T11] handle_softirqs+0x1da/0x8f0 [ 217.512746][ T11] __irq_exit_rcu+0x109/0x170 [ 217.519042][ T11] irq_exit_rcu+0x9/0x30 [ 217.524906][ T11] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 217.532154][ T11] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 217.539756][ T11] _raw_spin_unlock_irqrestore+0x31/0x80 [ 217.547006][ T11] uart_write+0x2a4/0xb30 [ 217.552952][ T11] n_tty_write+0x419/0x1140 [ 217.559076][ T11] file_tty_write.constprop.0+0x506/0x9a0 [ 217.566414][ T11] redirected_tty_write+0xcc/0x140 [ 217.573140][ T11] vfs_write+0x5ae/0x1150 [ 217.579090][ T11] ksys_write+0x12b/0x250 [ 217.585039][ T11] do_syscall_64+0xcd/0x250 [ 217.591160][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.598675][ T11] INITIAL USE at: [ 217.602548][ T11] lock_acquire.part.0+0x11b/0x380 [ 217.609194][ T11] _raw_spin_lock_irqsave+0x3a/0x60 [ 217.615940][ T11] serial8250_do_set_termios+0x307/0x16f0 [ 217.623195][ T11] serial8250_set_termios+0x6e/0x80 [ 217.629936][ T11] uart_set_options+0x31b/0x5f0 [ 217.636315][ T11] serial8250_console_setup+0x18a/0x460 [ 217.643394][ T11] univ8250_console_setup+0x1d4/0x2c0 [ 217.650309][ T11] try_enable_preferred_console+0x2fd/0x530 [ 217.657734][ T11] register_console+0x3ac/0x1170 [ 217.664202][ T11] univ8250_console_init+0x5f/0x90 [ 217.670845][ T11] console_init+0x154/0x690 [ 217.676888][ T11] start_kernel+0x29f/0x4d0 [ 217.682926][ T11] x86_64_start_reservations+0x18/0x30 [ 217.689918][ T11] x86_64_start_kernel+0xb2/0xc0 [ 217.696408][ T11] common_startup_64+0x13e/0x148 [ 217.702881][ T11] } [ 217.705350][ T11] ... key at: [] port_lock_key+0x0/0x40 [ 217.712964][ T11] [ 217.712964][ T11] the dependencies between the lock to be acquired [ 217.712969][ T11] and HARDIRQ-irq-unsafe lock: [ 217.726419][ T11] -> (disc_data_lock#2){.?.+}-{3:3} { [ 217.731777][ T11] IN-HARDIRQ-R at: [ 217.735726][ T11] lock_acquire.part.0+0x11b/0x380 [ 217.742457][ T11] _raw_read_lock+0x3a/0x70 [ 217.748576][ T11] sp_get+0x18/0xf0 [ 217.754007][ T11] sixpack_write_wakeup+0x20/0x390 [ 217.760738][ T11] tty_wakeup+0xe5/0x120 [ 217.766595][ T11] tty_port_default_wakeup+0x2a/0x40 [ 217.773499][ T11] serial8250_tx_chars+0x68e/0x860 [ 217.780232][ T11] serial8250_handle_irq+0x74c/0xc80 [ 217.787148][ T11] serial8250_default_handle_irq+0x9a/0x210 [ 217.794662][ T11] serial8250_interrupt+0x103/0x210 [ 217.801491][ T11] __handle_irq_event_percpu+0x229/0x7d0 [ 217.808741][ T11] handle_irq_event+0xab/0x1e0 [ 217.815119][ T11] handle_edge_irq+0x263/0xd10 [ 217.821510][ T11] __common_interrupt+0xdf/0x250 [ 217.828067][ T11] common_interrupt+0xba/0xe0 [ 217.834362][ T11] asm_common_interrupt+0x26/0x40 [ 217.841018][ T11] const_folio_flags.constprop.0+0x25/0x70 [ 217.848444][ T11] filemap_free_folio+0x7e/0x1e0 [ 217.855003][ T11] truncate_inode_folio+0x49/0x70 [ 217.861646][ T11] shmem_undo_range+0x36e/0x1170 [ 217.868202][ T11] shmem_evict_inode+0x3a3/0xba0 [ 217.874758][ T11] evict+0x409/0x960 [ 217.880269][ T11] iput+0x52a/0x890 [ 217.885696][ T11] do_unlinkat+0x5c3/0x760 [ 217.891727][ T11] __x64_sys_unlink+0xc5/0x110 [ 217.898105][ T11] do_syscall_64+0xcd/0x250 [ 217.904224][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.911738][ T11] HARDIRQ-ON-R at: [ 217.915684][ T11] lock_acquire.part.0+0x11b/0x380 [ 217.922416][ T11] _raw_read_lock+0x5f/0x70 [ 217.928537][ T11] sp_get+0x18/0xf0 [ 217.933995][ T11] sixpack_ioctl+0x74/0x430 [ 217.940135][ T11] tty_ioctl+0x6ee/0x15d0 [ 217.946095][ T11] __x64_sys_ioctl+0x190/0x200 [ 217.952499][ T11] do_syscall_64+0xcd/0x250 [ 217.958624][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.966138][ T11] SOFTIRQ-ON-R at: [ 217.970087][ T11] lock_acquire.part.0+0x11b/0x380 [ 217.976821][ T11] _raw_read_lock+0x5f/0x70 [ 217.982951][ T11] sp_get+0x18/0xf0 [ 217.988383][ T11] sixpack_ioctl+0x74/0x430 [ 217.994522][ T11] tty_ioctl+0x6ee/0x15d0 [ 218.000483][ T11] __x64_sys_ioctl+0x190/0x200 [ 218.006893][ T11] do_syscall_64+0xcd/0x250 [ 218.013032][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.020546][ T11] INITIAL USE at: [ 218.024409][ T11] lock_acquire.part.0+0x11b/0x380 [ 218.031055][ T11] _raw_write_lock_irq+0x36/0x50 [ 218.037524][ T11] sixpack_close+0x1e/0x2f0 [ 218.043561][ T11] tty_ldisc_close+0x111/0x1a0 [ 218.049858][ T11] tty_ldisc_kill+0x8e/0x150 [ 218.055979][ T11] tty_ldisc_release+0x17b/0x2a0 [ 218.062447][ T11] tty_release_struct+0x23/0xe0 [ 218.068829][ T11] tty_release+0xe25/0x1410 [ 218.074865][ T11] __fput+0x3ff/0xb70 [ 218.080381][ T11] task_work_run+0x14e/0x250 [ 218.086506][ T11] syscall_exit_to_user_mode+0x27b/0x2a0 [ 218.093671][ T11] do_syscall_64+0xda/0x250 [ 218.099706][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.107143][ T11] INITIAL READ USE at: [ 218.111449][ T11] lock_acquire.part.0+0x11b/0x380 [ 218.118532][ T11] _raw_read_lock+0x5f/0x70 [ 218.125004][ T11] sp_get+0x18/0xf0 [ 218.130781][ T11] sixpack_ioctl+0x74/0x430 [ 218.137250][ T11] tty_ioctl+0x6ee/0x15d0 [ 218.143550][ T11] __x64_sys_ioctl+0x190/0x200 [ 218.150282][ T11] do_syscall_64+0xcd/0x250 [ 218.156750][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.164610][ T11] } [ 218.167078][ T11] ... key at: [] disc_data_lock+0x18/0xfe0 [ 218.174943][ T11] ... acquired at: [ 218.178714][ T11] lock_acquire.part.0+0x11b/0x380 [ 218.183971][ T11] _raw_read_lock+0x5f/0x70 [ 218.188617][ T11] sp_get+0x18/0xf0 [ 218.192572][ T11] sixpack_write_wakeup+0x20/0x390 [ 218.197830][ T11] tty_wakeup+0xe5/0x120 [ 218.202213][ T11] tty_port_default_wakeup+0x2a/0x40 [ 218.207643][ T11] serial8250_tx_chars+0x68e/0x860 [ 218.212911][ T11] __start_tx+0x3e9/0x4a0 [ 218.217382][ T11] serial8250_start_tx+0x368/0x530 [ 218.222637][ T11] __uart_start+0x292/0x4c0 [ 218.227287][ T11] uart_write+0x218/0xb30 [ 218.231759][ T11] sixpack_receive_buf+0x3d7/0x1c80 [ 218.237100][ T11] tty_ldisc_receive_buf+0x153/0x190 [ 218.242526][ T11] tty_port_default_receive_buf+0x70/0xb0 [ 218.248393][ T11] flush_to_ldisc+0x264/0x780 [ 218.253213][ T11] process_one_work+0x9c5/0x1ba0 [ 218.258294][ T11] worker_thread+0x6c8/0xf00 [ 218.263026][ T11] kthread+0x3af/0x750 [ 218.267237][ T11] ret_from_fork+0x45/0x80 [ 218.271797][ T11] ret_from_fork_asm+0x1a/0x30 [ 218.276705][ T11] [ 218.278997][ T11] [ 218.278997][ T11] stack backtrace: [ 218.284859][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 218.284873][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 218.284880][ T11] Workqueue: events_unbound flush_to_ldisc [ 218.284893][ T11] Call Trace: [ 218.284898][ T11] [ 218.284907][ T11] dump_stack_lvl+0x116/0x1f0 [ 218.284921][ T11] check_irq_usage+0xf22/0x1290 [ 218.284935][ T11] ? stack_trace_save+0x95/0xd0 [ 218.284948][ T11] ? __pfx_check_irq_usage+0x10/0x10 [ 218.284961][ T11] ? hlock_conflict+0x58/0x200 [ 218.284973][ T11] ? __bfs+0x2fa/0x670 [ 218.284983][ T11] ? __pfx_hlock_conflict+0x10/0x10 [ 218.285000][ T11] ? lockdep_lock+0xc6/0x200 [ 218.285010][ T11] ? __pfx_lockdep_lock+0x10/0x10 [ 218.285021][ T11] ? __lock_acquire+0x24b4/0x3c40 [ 218.285034][ T11] __lock_acquire+0x24b4/0x3c40 [ 218.285050][ T11] ? __pfx___lock_acquire+0x10/0x10 [ 218.285064][ T11] ? lock_acquire.part.0+0x11b/0x380 [ 218.285078][ T11] lock_acquire.part.0+0x11b/0x380 [ 218.285091][ T11] ? sp_get+0x18/0xf0 [ 218.285105][ T11] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 218.285118][ T11] ? rcu_is_watching+0x12/0xc0 [ 218.285129][ T11] ? trace_lock_acquire+0x14e/0x1f0 [ 218.285140][ T11] ? sp_get+0x18/0xf0 [ 218.285152][ T11] ? lock_acquire+0x2f/0xb0 [ 218.285165][ T11] ? sp_get+0x18/0xf0 [ 218.285177][ T11] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 218.285191][ T11] _raw_read_lock+0x5f/0x70 [ 218.285201][ T11] ? sp_get+0x18/0xf0 [ 218.285213][ T11] sp_get+0x18/0xf0 [ 218.285226][ T11] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 218.285239][ T11] sixpack_write_wakeup+0x20/0x390 [ 218.285253][ T11] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 218.285267][ T11] tty_wakeup+0xe5/0x120 [ 218.285277][ T11] tty_port_default_wakeup+0x2a/0x40 [ 218.285289][ T11] serial8250_tx_chars+0x68e/0x860 [ 218.285305][ T11] __start_tx+0x3e9/0x4a0 [ 218.285317][ T11] serial8250_start_tx+0x368/0x530 [ 218.285330][ T11] __uart_start+0x292/0x4c0 [ 218.285346][ T11] uart_write+0x218/0xb30 [ 218.285359][ T11] sixpack_receive_buf+0x3d7/0x1c80 [ 218.285374][ T11] ? ldsem_down_read_trylock+0x121/0x180 [ 218.285388][ T11] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 218.285402][ T11] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 218.285416][ T11] tty_ldisc_receive_buf+0x153/0x190 [ 218.285427][ T11] tty_port_default_receive_buf+0x70/0xb0 [ 218.285440][ T11] flush_to_ldisc+0x264/0x780 [ 218.285451][ T11] ? lock_acquire+0x2f/0xb0 [ 218.285464][ T11] ? process_one_work+0x921/0x1ba0 [ 218.285477][ T11] process_one_work+0x9c5/0x1ba0 [ 218.285492][ T11] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 218.285506][ T11] ? __pfx_process_one_work+0x10/0x10 [ 218.285520][ T11] ? assign_work+0x1a0/0x250 [ 218.285532][ T11] worker_thread+0x6c8/0xf00 [ 218.285548][ T11] ? __pfx_worker_thread+0x10/0x10 [ 218.285564][ T11] kthread+0x3af/0x750 [ 218.285576][ T11] ? __pfx_kthread+0x10/0x10 [ 218.285587][ T11] ? lock_acquire+0x2f/0xb0 [ 218.285601][ T11] ? __pfx_kthread+0x10/0x10 [ 218.285612][ T11] ret_from_fork+0x45/0x80 [ 218.285625][ T11] ? __pfx_kthread+0x10/0x10 [ 218.285637][ T11] ret_from_fork_asm+0x1a/0x30 [ 218.285650][ T11] [ 218.285875][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.603135][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.860917][ T3531] wlan1: Trigger new scan to find an IBSS to join [ 221.819924][ T3531] wlan1: Trigger new scan to find an IBSS to join [ 222.750626][ T3567] wlan1: Creating new IBSS network, BSSID ca:79:0b:19:32:02