last executing test programs: 3.613259432s ago: executing program 1 (id=3849): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x20000, 0x0, 0x2c, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.857680962s ago: executing program 1 (id=3860): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xffffffffffffff7f}, "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", "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"}) 2.506579043s ago: executing program 1 (id=3865): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f27, 0x9, 0x1, 0x16, 0x5, 0x5, 0x8, 0x3, 0xa, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xca9f, 0x0, 0x20001e58, 0xb, 0xe66, 0x3, 0x8, 0x4085, 0x0, 0xfffffff8]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000180)={0x9a, 0x6, 0x5ae6fefe, 0xf}) 2.427380786s ago: executing program 3 (id=3867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.266567968s ago: executing program 3 (id=3870): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x100) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) 2.188952432s ago: executing program 3 (id=3872): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ptrace$cont(0x18, 0x0, 0x10000000000005, 0x6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902640002010000000904000001020d0000052406000105200000000d240f010012000000000000000624ab"], 0x0) 1.721368346s ago: executing program 1 (id=3878): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={r2, 0xfffffff9, 0x10}, &(0x7f0000000400)=0xc) 1.616253012s ago: executing program 1 (id=3880): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x6c0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x4, 0x0, 0x0) 1.250367412s ago: executing program 2 (id=3883): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x7ff, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) 1.214677545s ago: executing program 2 (id=3884): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) 1.174485211s ago: executing program 1 (id=3885): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff00090000000905", @ANYRES16=r0], 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 1.090511317s ago: executing program 2 (id=3886): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 973.43087ms ago: executing program 4 (id=3888): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) write$binfmt_elf32(r1, &(0x7f0000001e80)=ANY=[], 0x38) fcntl$setpipe(r0, 0x407, 0x8001a0) splice(r0, 0x0, r2, 0x0, 0x200002, 0x0) 940.380582ms ago: executing program 2 (id=3889): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 901.264863ms ago: executing program 4 (id=3890): io_setup(0x2, &(0x7f0000000000)=0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000080)={0x21800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 889.90757ms ago: executing program 0 (id=3891): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0) close(r0) 840.495584ms ago: executing program 3 (id=3892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 821.154307ms ago: executing program 2 (id=3893): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0)={0x3c}, 0x8) listen(r0, 0x100101) accept4(r0, 0x0, 0x0, 0x80800) 768.539392ms ago: executing program 0 (id=3894): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080)) 659.868209ms ago: executing program 2 (id=3895): mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 588.758231ms ago: executing program 0 (id=3896): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0xfffc, 0x0, 0x0, 0x400}, 0xfffffffc, [0x0, 0x10000000, 0x0, 0x2, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffc0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x58, 0x0, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0x3, 0x3, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x10008, 0x2008, 0x0, 0x0, 0x2000, 0x0, 0xe0a4, 0x6, 0x400, 0x20009], [0xb4e0, 0x0, 0x10, 0x8, 0x3, 0xf, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x40000005, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7e0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400], [0x0, 0x20000007, 0x20000000, 0x1, 0x2, 0x6e3a, 0x2, 0xfffffff9, 0x0, 0x10000, 0x0, 0x200, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x77d, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x8000000, 0x3, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x2], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1225, 0x0, 0x0, 0x0, 0x200, 0x5, 0xfffffffe, 0x4, 0xffffffd, 0x200, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4, 0x9, 0x0, 0x0, 0x8000]}, 0x45c) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x603}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 557.980354ms ago: executing program 4 (id=3897): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 473.358557ms ago: executing program 4 (id=3898): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'rdma'}]}, 0x6) 334.578827ms ago: executing program 0 (id=3899): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r1}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r1}}}], 0x28}, 0x4008) 314.890515ms ago: executing program 4 (id=3900): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0xf8, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xcc, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0xb4, 0x5, {0x9, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0xfff9, 0x100, [{0x4009, 0x7, 0x40, 0x80}, {0x2, 0xd033, 0x57, 0x8000}, {0x3, 0xde5, 0x1, 0xbd}, {0x7, 0x7fff, 0x0, 0x40}, {0x8, 0xfffffffd, 0xfffffffa, 0x51}, {0x5, 0x9, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x6, 0x8, 0x2, 0x1}, {0xaa4, 0x406, 0x2, 0x127c}, {0x2, 0x4f, 0x5a2, 0xa2fa}]}}]}}]}, 0xf8}}, 0x24040084) 206.506841ms ago: executing program 0 (id=3901): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$midi(r1, &(0x7f00000001c0)=""/147, 0x93) 126.4623ms ago: executing program 4 (id=3902): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x8041) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @local, 0x9}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 69.449858ms ago: executing program 3 (id=3903): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) 58.508838ms ago: executing program 0 (id=3904): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @win={{0x4, 0x6, 0x803, 0x5}, 0x6, 0x0, &(0x7f00000005c0)={{0x10, 0x4, 0x10, 0x9}, &(0x7f0000000580)={{0x316f, 0x3, 0x6, 0x3}, &(0x7f0000000540)={{0x824, 0x7038, 0x2, 0x5}}}}, 0x573, 0x0, 0x91}}) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x3f, 0x822f01) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) fcntl$setstatus(r1, 0x4, 0x42400) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 0s ago: executing program 3 (id=3905): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x0, 0x24, 0x4, "28cdfc32"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): or [ 203.736414][ T977] usb 3-1: 0:2 : does not exist [ 203.738643][ T24] input: HID 07c0:1125 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:07C0:1125.0025/input/input42 [ 203.766501][T11767] netlink: 'syz.3.2604': attribute type 4 has an invalid length. [ 203.818006][ T24] vrc2 0003:07C0:1125.0025: input,hidraw0: USB HID v0.01 Joystick [HID 07c0:1125] on usb-dummy_hcd.1-1/input0 [ 203.846393][T11771] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2606'. [ 204.002175][ T5921] usb 2-1: USB disconnect, device number 28 [ 204.044317][T11783] tipc: Started in network mode [ 204.049295][T11783] tipc: Node identity ac14140f, cluster identity 4711 [ 204.060141][T11783] tipc: New replicast peer: 255.255.255.255 [ 204.066751][T11783] tipc: Enabled bearer , priority 10 [ 204.141093][ T977] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 204.170854][ T977] usb 3-1: USB disconnect, device number 29 [ 204.560479][ T5894] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 204.581208][T11807] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2622'. [ 204.718354][T11813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.726854][T11813] bond0: (slave bond1): Enslaving as an active interface with an up link [ 204.750515][ T5894] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 204.768890][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.809039][ T5894] usb 1-1: config 0 has no interface number 0 [ 204.847677][ T5894] usb 1-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 204.865737][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.890913][ T5894] usb 1-1: config 0 descriptor?? [ 204.919457][ T5894] usb 1-1: bad CDC descriptors [ 205.126488][ T5894] usb 1-1: USB disconnect, device number 29 [ 205.182130][ T5844] tipc: Node number set to 2886997007 [ 205.530901][ T5844] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 205.692002][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 205.711347][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 205.724354][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 205.736826][ T5844] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 205.752828][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.778855][ T5844] usb 5-1: config 0 descriptor?? [ 205.786254][T11870] erspan0: entered promiscuous mode [ 205.795927][ T5844] em28xx 5-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 205.814741][ T5844] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 206.024966][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 206.024982][ T30] audit: type=1400 audit(1754534186.247:809): avc: denied { connect } for pid=11876 comm="syz.3.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.084594][ T5844] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 206.100685][ T5844] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 206.107946][ T5844] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 206.120729][ T5844] em28xx 5-1:0.0: No AC97 audio processor [ 206.136020][ T5844] usb 5-1: USB disconnect, device number 31 [ 206.151915][ T5844] em28xx 5-1:0.0: Disconnecting em28xx [ 206.169853][ T5844] em28xx 5-1:0.0: Freeing device [ 206.387410][T11891] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11891 comm=syz.0.2662 [ 206.465767][ T30] audit: type=1400 audit(1754534186.687:810): avc: denied { create } for pid=11895 comm="syz.3.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 206.467304][T11893] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.750454][ T5958] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 206.888613][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2673'. [ 206.901132][T11917] veth0_to_team: entered promiscuous mode [ 206.906929][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 206.912117][T11917] veth0_to_team: entered allmulticast mode [ 206.919344][ T5958] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 206.927787][ T5958] usb 1-1: config 0 has no interface number 0 [ 206.940424][ T5958] usb 1-1: config 0 interface 184 has no altsetting 0 [ 206.959693][ T5958] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 206.969140][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.990600][ T5958] usb 1-1: Product: syz [ 206.994797][ T5958] usb 1-1: Manufacturer: syz [ 207.005205][ T5958] usb 1-1: SerialNumber: syz [ 207.011929][ T5958] usb 1-1: config 0 descriptor?? [ 207.018931][ T5958] smsc75xx v1.0.0 [ 207.119467][T11923] SELinux: failed to load policy [ 207.229547][T11932] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2681'. [ 207.238831][T11932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2681'. [ 207.290540][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 207.297107][ T5851] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 207.443426][T11945] netlink: 'syz.3.2687': attribute type 8 has an invalid length. [ 207.629092][ T5958] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 207.640246][ T5958] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 207.649940][ T5958] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 207.660630][ T5958] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 207.671180][ T5958] usb 1-1: USB disconnect, device number 30 [ 207.959704][ T30] audit: type=1400 audit(1754534188.177:811): avc: denied { map } for pid=11953 comm="syz.2.2691" path="socket:[38277]" dev="sockfs" ino=38277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 208.012663][ T5894] kernel read not supported for file /dsp1 (pid: 5894 comm: kworker/1:4) [ 208.400404][ T5894] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 208.560486][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 208.568773][ T5894] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 208.590557][ T5958] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 208.599466][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.600475][ T977] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 208.620941][ T5894] usb 5-1: config 0 descriptor?? [ 208.635087][ T5894] as10x_usb: device has been detected [ 208.641961][ T5894] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 208.669545][ T5894] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 208.684084][ T5894] as10x_usb: error during firmware upload part1 [ 208.690860][ T5894] Registered device nBox DVB-T Dongle [ 208.774847][ T977] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 208.799728][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.813376][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.826259][ T5958] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 208.835463][ T5894] usb 5-1: USB disconnect, device number 32 [ 208.837661][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.849774][T11996] netlink: 'syz.2.2711': attribute type 14 has an invalid length. [ 208.858150][ T977] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 208.867324][ T5958] usb 1-1: Product: syz [ 208.877213][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.885774][ T5958] usb 1-1: Manufacturer: syz [ 208.887732][ T5894] Unregistered device nBox DVB-T Dongle [ 208.890591][ T5958] usb 1-1: SerialNumber: syz [ 208.892387][ T5958] usb 1-1: config 0 descriptor?? [ 208.917165][ T977] usb 2-1: config 0 descriptor?? [ 208.923488][ T5894] as10x_usb: device has been disconnected [ 208.934252][ T5958] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 209.368153][ T977] sony 0003:054C:024B.0026: unexpected long global item [ 209.378780][ T977] sony 0003:054C:024B.0026: parse failed [ 209.384607][ T977] sony 0003:054C:024B.0026: probe with driver sony failed with error -22 [ 209.410853][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 209.470527][ T5922] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 209.544118][ T5958] gspca_sunplus: reg_r err -71 [ 209.549108][ T5958] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 209.559958][ T5958] usb 1-1: USB disconnect, device number 31 [ 209.570505][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 209.583531][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.596338][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 209.605871][ T24] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 209.608603][ T977] usb 2-1: USB disconnect, device number 29 [ 209.617770][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 209.634546][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 209.647692][ T24] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 209.659120][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.659290][ T5922] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.683352][ T5922] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.696009][ T5922] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 209.699523][ T24] hub 4-1:1.0: bad descriptor, ignoring hub [ 209.706169][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 209.719389][ T5922] usb 3-1: SerialNumber: syz [ 209.725786][ T24] hub 4-1:1.0: probe with driver hub failed with error -5 [ 209.736271][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 209.741526][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 209.746895][ T24] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 209.936599][ T5922] usb 3-1: 0:2 : does not exist [ 209.954292][ T5922] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 209.965753][ T5922] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 209.988746][ T5922] usb 3-1: USB disconnect, device number 30 [ 210.060646][ T5894] usb 4-1: USB disconnect, device number 22 [ 210.251295][T12050] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2737'. [ 210.265866][T12050] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2737'. [ 210.277380][T12050] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2737'. [ 210.287831][ T30] audit: type=1400 audit(1754534190.507:812): avc: denied { read } for pid=12051 comm="syz.4.2738" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 210.311568][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.339394][ T30] audit: type=1400 audit(1754534190.537:813): avc: denied { open } for pid=12051 comm="syz.4.2738" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 210.367214][ T30] audit: type=1400 audit(1754534190.537:814): avc: denied { ioctl } for pid=12051 comm="syz.4.2738" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 210.392870][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.450698][ T5922] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 210.518826][ T30] audit: type=1400 audit(1754534190.737:815): avc: denied { read } for pid=12062 comm="syz.3.2743" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.545886][T12065] vxcan1: entered allmulticast mode [ 210.553197][T12065] vxcan1: left allmulticast mode [ 210.630434][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 210.638296][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.660638][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.676210][ T5922] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 210.695576][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.714776][ T5922] usb 1-1: config 0 descriptor?? [ 210.874490][T12091] batadv_slave_1: entered promiscuous mode [ 210.883227][T12090] batadv_slave_1: left promiscuous mode [ 211.128114][ T30] audit: type=1400 audit(1754534191.347:816): avc: denied { audit_write } for pid=12103 comm="syz.2.2761" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 211.163900][ T5922] ft260 0003:0403:6030.0027: item fetching failed at offset 0/2 [ 211.172261][ T5922] ft260 0003:0403:6030.0027: failed to parse HID [ 211.178684][ T5922] ft260 0003:0403:6030.0027: probe with driver ft260 failed with error -22 [ 211.776544][ T30] audit: type=1400 audit(1754534191.997:817): avc: denied { recv } for pid=5843 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.166 dest=54970 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 211.850892][T12142] input: syz1 as /devices/virtual/input/input43 [ 211.931862][ T5922] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 211.950606][ T5958] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 212.080625][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 212.089522][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.101489][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.112875][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 212.122781][ T5922] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 212.132671][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.147454][ T5958] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 212.155841][ T5958] usb 5-1: config 0 has no interface number 0 [ 212.169794][ T5922] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 212.183692][ T5958] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 212.194274][ T5922] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 212.204578][ T5958] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.216226][ T5922] usb 2-1: Manufacturer: syz [ 212.226209][ T5922] usb 2-1: config 0 descriptor?? [ 212.236264][ T5958] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 212.247737][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.256414][ T5958] usb 5-1: Product: syz [ 212.266280][ T5958] usb 5-1: Manufacturer: syz [ 212.271590][ T5958] usb 5-1: SerialNumber: syz [ 212.278592][ T5958] usb 5-1: config 0 descriptor?? [ 212.287593][T12134] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 212.297128][ T5958] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 212.311570][ T5958] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 212.480547][ T5894] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 212.514340][ T30] audit: type=1400 audit(1754534192.737:818): avc: denied { write } for pid=12179 comm="syz.2.2798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 212.643494][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.654582][ T5894] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 212.663851][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.673852][ T5894] usb 4-1: config 0 descriptor?? [ 212.704785][ T5958] usb 5-1: USB disconnect, device number 33 [ 212.715122][ T5958] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 212.726239][ T5958] cyberjack 5-1:0.69: device disconnected [ 212.840552][ T5922] rc_core: IR keymap rc-hauppauge not found [ 212.846501][ T5922] Registered IR keymap rc-empty [ 212.853068][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.880609][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.910996][ T5922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 212.923755][ T5922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input44 [ 212.937563][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.960509][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.983265][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.010626][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.040433][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.061271][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.080455][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.094512][ T5894] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 213.106077][ T5894] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0028/input/input45 [ 213.111299][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.140487][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.161072][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.178270][ T5894] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 213.192472][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.212562][ T5894] usb 1-1: USB disconnect, device number 32 [ 213.214337][ T5922] mceusb 2-1:0.0: Registered ᠁ with mce emulator interface version 40 [ 213.241986][ T5922] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 213.265967][ T5922] usb 2-1: USB disconnect, device number 30 [ 213.292774][T12188] tun0: tun_chr_ioctl cmd 1074025675 [ 213.315877][T12188] tun0: persist disabled [ 213.424099][T12195] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2803'. [ 213.437795][T12195] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 213.441265][T12197] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2804'. [ 213.446617][T12195] openvswitch: netlink: Duplicate key (type 0). [ 213.565891][T12204] input: syz0 as /devices/virtual/input/input46 [ 213.579690][ T5922] usb 4-1: USB disconnect, device number 23 [ 213.860388][ T30] audit: type=1400 audit(1754534194.077:819): avc: denied { bind } for pid=12223 comm="syz.1.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 213.944980][T12231] netlink: 'syz.1.2820': attribute type 14 has an invalid length. [ 214.057328][T12242] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2824'. [ 214.276513][T12260] netlink: 'syz.0.2832': attribute type 13 has an invalid length. [ 214.282782][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2833'. [ 214.377558][T12260] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.430257][T12260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.442974][T12260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.470563][ T5894] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 214.522731][ T7441] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.532726][ T7441] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.551805][ T7441] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.566321][ T7441] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.630872][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 214.641133][ T5922] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 214.647649][ T5894] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 214.673923][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.685930][ T5894] usb 4-1: config 0 descriptor?? [ 214.705324][T12277] comedi comedi3: multiq3: I/O port conflict (0x3,16) [ 214.804370][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 214.838420][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.860383][ T5922] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 214.879622][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.898614][ T5922] usb 5-1: config 0 descriptor?? [ 214.906248][ T5894] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 214.925481][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 214.945802][ T5894] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 214.955419][ T5894] usb 4-1: media controller created [ 214.983778][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.115103][ T5894] az6027: usb out operation failed. (-71) [ 215.125441][ T5894] az6027: usb out operation failed. (-71) [ 215.141289][ T5958] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 215.145393][ T5894] stb0899_attach: Driver disabled by Kconfig [ 215.185470][ T5894] az6027: no front-end attached [ 215.185470][ T5894] [ 215.204707][ T5894] az6027: usb out operation failed. (-71) [ 215.223319][ T5894] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 215.247533][ T5894] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input47 [ 215.291859][ T5894] dvb-usb: schedule remote query interval to 400 msecs. [ 215.298843][ T5894] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 215.320911][ T5894] usb 4-1: USB disconnect, device number 24 [ 215.322173][ T5958] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 215.340300][ T5922] hid-u2fzero 0003:10C4:8ACF.0029: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 215.360462][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.377550][ T5922] hid-u2fzero 0003:10C4:8ACF.0029: U2F Zero LED initialised [ 215.389946][ T5894] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 215.390368][ T5958] usb 2-1: Product: syz [ 215.405352][ T5922] hid-u2fzero 0003:10C4:8ACF.0029: U2F Zero RNG initialised [ 215.432519][ T5958] usb 2-1: Manufacturer: syz [ 215.447344][ T5958] usb 2-1: SerialNumber: syz [ 215.461149][ T5958] usb 2-1: config 0 descriptor?? [ 215.524336][ T5922] usb 5-1: USB disconnect, device number 34 [ 215.673959][ T5958] usb 2-1: ignoring: probably an ADSL modem [ 215.730378][ T5844] kernel write not supported for file /sequencer (pid: 5844 comm: kworker/1:3) [ 215.780389][ T977] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 215.950547][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 215.962002][ T977] usb 1-1: unable to get BOS descriptor or descriptor too short [ 215.985442][ T977] usb 1-1: string descriptor 0 read error: -22 [ 215.993457][ T977] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 216.010516][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.076332][ T5958] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 216.235877][ T977] asix 1-1:7.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 216.329014][ T5958] usb 2-1: USB disconnect, device number 31 [ 216.594692][ T30] audit: type=1400 audit(1754534196.817:820): avc: denied { ioctl } for pid=12348 comm="syz.4.2873" path="socket:[40086]" dev="sockfs" ino=40086 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 216.657655][ T30] audit: type=1400 audit(1754534196.877:821): avc: denied { read } for pid=12352 comm="syz.4.2874" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 216.681910][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.691180][ T30] audit: type=1400 audit(1754534196.877:822): avc: denied { open } for pid=12352 comm="syz.4.2874" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 216.715842][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.724973][ T30] audit: type=1400 audit(1754534196.947:823): avc: denied { ioctl } for pid=12352 comm="syz.4.2874" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 216.751103][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.849111][ T977] asix 1-1:7.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 216.894291][ T977] asix 1-1:7.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 216.899512][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2876'. [ 216.942682][ T30] audit: type=1400 audit(1754534197.157:824): avc: denied { connect } for pid=12359 comm="syz.1.2877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 216.944862][T12358] macsec1: entered allmulticast mode [ 216.976599][T12358] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 216.987811][T12358] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 217.087904][ T977] asix 1-1:7.0 eth1: register 'asix' at usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet, b6:d7:e2:a0:0f:f9 [ 217.123170][ T977] usb 1-1: USB disconnect, device number 33 [ 217.129613][ T977] asix 1-1:7.0 eth1: unregister 'asix' usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet [ 217.430570][ T5958] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 217.590404][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 217.599078][ T5958] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.609328][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.621221][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 217.634355][ T5958] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 217.644030][ T5958] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.663019][ T5958] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 217.676078][ T5958] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 217.685046][ T5958] usb 4-1: Manufacturer: syz [ 217.691634][ T5958] usb 4-1: config 0 descriptor?? [ 217.718644][ T30] audit: type=1400 audit(1754534197.937:825): avc: denied { create } for pid=12417 comm="syz.0.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 217.792991][ T30] audit: type=1400 audit(1754534198.007:826): avc: denied { read } for pid=12417 comm="syz.0.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 217.909683][T12375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.943798][T12375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.072532][ T5958] rc_core: IR keymap rc-hauppauge not found [ 218.090552][ T5958] Registered IR keymap rc-empty [ 218.095500][ T5958] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.130538][ T5958] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.141536][T12442] tipc: Started in network mode [ 218.146766][T12442] tipc: Node identity ac14140c, cluster identity 4711 [ 218.156690][ T5958] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 218.169309][T12442] tipc: New replicast peer: 255.255.255.255 [ 218.177053][ T5958] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input48 [ 218.199067][T12442] tipc: Enabled bearer , priority 10 [ 218.212923][ T5958] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.258747][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2910'. [ 218.260676][ T5958] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.301103][ T5958] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.353987][T12445] tipc: Disabling bearer [ 218.452999][ T5958] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.470409][ T5958] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.492878][T12457] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12457 comm=syz.0.2918 [ 218.510568][ T5958] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.530416][ T5958] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.550570][ T5958] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.570498][ T5958] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.593988][ T5958] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.631471][ T5958] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 218.639473][ T5958] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 218.640422][ T5894] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 218.668398][ T5958] usb 4-1: USB disconnect, device number 25 [ 218.676627][ T977] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 218.772995][ T30] audit: type=1400 audit(1754534198.997:827): avc: denied { append } for pid=12466 comm="syz.0.2923" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 218.796223][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.808320][ T30] audit: type=1400 audit(1754534199.027:828): avc: denied { write } for pid=12466 comm="syz.0.2923" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 218.831426][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.837732][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 218.844983][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.856080][ T5894] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 218.867043][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.875382][ T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.888604][ T5894] usb 3-1: config 0 descriptor?? [ 218.895815][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 218.920977][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 218.937775][ T977] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 218.963346][ T977] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 218.978227][ T977] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 218.992500][ T977] usb 5-1: Manufacturer: syz [ 219.009189][ T977] usb 5-1: config 0 descriptor?? [ 219.233931][T12455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.243557][T12455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.317455][ T5894] mcp2221 0003:04D8:00DD.002A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 219.344852][ T977] rc_core: IR keymap rc-hauppauge not found [ 219.363389][ T977] Registered IR keymap rc-empty [ 219.369006][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 219.402763][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 219.433519][ T977] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 219.465277][ T977] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input49 [ 219.498363][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 219.540677][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 219.600838][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 219.603750][ T30] audit: type=1400 audit(1754534199.817:829): avc: denied { search } for pid=12496 comm="syz.3.2936" name="/" dev="configfs" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 219.629593][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.630686][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 219.690426][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 219.711111][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 219.731144][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 219.751514][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 219.773150][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 219.802281][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 219.822208][ T5958] usb 3-1: USB disconnect, device number 31 [ 219.840658][ T977] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 219.861685][ T977] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 219.882951][ T977] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 219.912469][ T977] usb 5-1: USB disconnect, device number 35 [ 220.320501][ T5894] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 220.448258][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2960'. [ 220.490515][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 220.499699][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0 [ 220.514490][ T5894] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 220.529020][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.559295][ T5894] usb 2-1: Product: syz [ 220.580402][ T5894] usb 2-1: Manufacturer: syz [ 220.585016][ T5894] usb 2-1: SerialNumber: syz [ 220.609130][T12556] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2962'. [ 220.621629][ T5894] usb 2-1: config 0 descriptor?? [ 220.633744][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2963'. [ 220.855334][ T977] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 220.881295][T12574] input: syz0 as /devices/virtual/input/input50 [ 221.007391][T12582] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2974'. [ 221.020910][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.051836][ T5894] gs_usb 2-1:0.0: Configuring for 122 interfaces [ 221.054710][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.064607][ T5894] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 221.087280][ T977] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 221.090708][ T5894] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 221.109328][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.139557][ T977] usb 3-1: config 0 descriptor?? [ 221.152488][T12588] SELinux: failed to load policy [ 221.285579][ T5921] usb 2-1: USB disconnect, device number 32 [ 221.460466][ T5894] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 221.510559][ T5958] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 221.612078][ T5894] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 221.621242][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.631961][ T5894] usb 4-1: config 0 descriptor?? [ 221.638302][ T5894] cp210x 4-1:0.0: cp210x converter detected [ 221.662242][ T5958] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.672479][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 221.683516][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 221.694514][ T5958] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 221.708508][ T5958] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 221.717749][ T5958] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 221.725821][ T5958] usb 1-1: Manufacturer: syz [ 221.732885][ T5958] usb 1-1: config 0 descriptor?? [ 221.768547][ T977] usb 3-1: language id specifier not provided by device, defaulting to English [ 221.971117][ T977] uclogic 0003:256C:006D.002B: failed retrieving Huion firmware version: -71 [ 221.985865][ T977] uclogic 0003:256C:006D.002B: failed probing parameters: -71 [ 221.993522][ T977] uclogic 0003:256C:006D.002B: probe with driver uclogic failed with error -71 [ 222.010069][ T977] usb 3-1: USB disconnect, device number 32 [ 222.016157][ T5958] rc_core: IR keymap rc-hauppauge not found [ 222.025804][ T5958] Registered IR keymap rc-empty [ 222.034022][ T5958] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 222.052747][ T5894] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 222.064737][ T5958] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 222.086175][ T5894] usb 4-1: cp210x converter now attached to ttyUSB0 [ 222.101078][ T5958] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 222.121953][ T5958] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input51 [ 222.158077][ T5958] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 222.190861][ T5958] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 222.211175][ T5958] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 222.240620][ T5958] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 222.280639][ T5958] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 222.299503][ T5894] usb 4-1: USB disconnect, device number 26 [ 222.300614][ T5958] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 222.318346][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 222.342052][ T5958] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 222.368882][ T5894] cp210x 4-1:0.0: device disconnected [ 222.371542][ T5958] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 222.420655][ T5958] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 222.440647][ T5958] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 222.461774][ T5958] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 222.480400][ T5958] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 222.500185][ T5958] usb 1-1: USB disconnect, device number 34 [ 222.587112][T12632] netlink: 'syz.4.2996': attribute type 2 has an invalid length. [ 222.595032][T12632] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2996'. [ 222.678530][T12638] netlink: 'syz.2.2999': attribute type 1 has an invalid length. [ 222.707089][T12638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.766021][T12642] ieee802154 phy1 wpan1: encryption failed: -22 [ 223.030045][T12658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.220580][ T5958] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 223.382766][ T5958] usb 5-1: Using ep0 maxpacket: 16 [ 223.391643][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.417442][ T5958] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 223.446791][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.476561][ T5958] usb 5-1: config 0 descriptor?? [ 223.568889][T12684] netlink: 'syz.0.3019': attribute type 2 has an invalid length. [ 223.589652][T12686] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3021'. [ 223.614812][T12686] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3021'. [ 223.623401][T12684] k*]: entered promiscuous mode [ 223.915375][ T5958] mcp2221 0003:04D8:00DD.002C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 223.973379][ T5894] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 224.075574][T12708] netlink: 'syz.0.3031': attribute type 1 has an invalid length. [ 224.140466][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 224.158525][ T5894] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 224.171201][ T7465] af_packet: tpacket_rcv: packet too big, clamped from 66 to 4294967286. macoff=82 [ 224.190640][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.224130][T12716] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 224.227196][ T5894] pvrusb2: Hardware description: Terratec Grabster AV400 [ 224.254740][ T5894] pvrusb2: ********** [ 224.258763][ T5894] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 224.273042][ T5894] pvrusb2: Important functionality might not be entirely working. [ 224.284393][ T5894] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 224.296068][ T5894] pvrusb2: ********** [ 224.349764][ T5844] usb 5-1: USB disconnect, device number 36 [ 224.430915][ T2337] pvrusb2: Invalid write control endpoint [ 224.509842][ T2337] pvrusb2: Invalid write control endpoint [ 224.520339][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 224.538047][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 224.557387][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 224.590349][ T2337] pvrusb2: Device being rendered inoperable [ 224.606473][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 224.625330][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 224.641045][ T2337] pvrusb2: Attached sub-driver cx25840 [ 224.656807][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 224.675448][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 224.768230][ T5844] usb 2-1: USB disconnect, device number 33 [ 225.160439][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 225.331685][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 225.352552][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 225.373684][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.392416][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.409471][ T24] usb 3-1: Product: syz [ 225.417146][ T24] usb 3-1: Manufacturer: syz [ 225.426971][ T24] usb 3-1: SerialNumber: syz [ 225.643835][ T24] cdc_ncm 3-1:1.0: bind() failure [ 225.664232][ T24] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 225.681080][ T24] cdc_ncm 3-1:1.1: bind() failure [ 225.695561][ T24] usb 3-1: USB disconnect, device number 33 [ 226.426558][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 226.426572][ T30] audit: type=1400 audit(1754534206.647:834): avc: denied { write } for pid=12787 comm="syz.2.3068" path="socket:[42321]" dev="sockfs" ino=42321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 226.563568][T12797] netlink: 'syz.4.3070': attribute type 1 has an invalid length. [ 226.588018][T12797] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3070'. [ 226.655805][ T30] audit: type=1400 audit(1754534206.877:835): avc: denied { setattr } for pid=12800 comm="syz.3.3072" name="/" dev="configfs" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 226.824239][ T30] audit: type=1326 audit(1754534207.047:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3ad8eb69 code=0x7ffc0000 [ 226.943669][ T30] audit: type=1326 audit(1754534207.047:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3ad8eb69 code=0x7ffc0000 [ 227.030446][ T30] audit: type=1326 audit(1754534207.077:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc3ad8eb69 code=0x7ffc0000 [ 227.073706][ T30] audit: type=1326 audit(1754534207.077:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3ad8eb69 code=0x7ffc0000 [ 227.128477][ T30] audit: type=1326 audit(1754534207.077:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3ad8eb69 code=0x7ffc0000 [ 227.180216][ T30] audit: type=1326 audit(1754534207.097:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc3ad8eb69 code=0x7ffc0000 [ 227.240410][ T30] audit: type=1326 audit(1754534207.097:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3ad8eb69 code=0x7ffc0000 [ 227.275771][ T30] audit: type=1326 audit(1754534207.097:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3ad8eb69 code=0x7ffc0000 [ 228.000523][ T5958] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 228.152496][ T5958] usb 5-1: Using ep0 maxpacket: 16 [ 228.174760][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.196459][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.210817][ T24] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 228.261953][ T5958] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 228.290835][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.333730][ T5958] usb 5-1: config 0 descriptor?? [ 228.371713][ T24] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 228.381424][ T24] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 228.390020][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 228.407802][ T24] usb 2-1: config 1 has no interface number 0 [ 228.419485][ T24] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 228.431252][ T24] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 228.456661][ T24] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 228.500453][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.552345][ T24] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 228.764722][ T5958] apple 0003:05AC:024B.002D: fixing up MacBook JIS keyboard report descriptor [ 228.780854][ T5958] apple 0003:05AC:024B.002D: unknown main item tag 0x6 [ 228.789706][ T5958] apple 0003:05AC:024B.002D: ignoring exceeding usage max [ 228.798314][ T5958] apple 0003:05AC:024B.002D: invalid report_size 16640 [ 228.818522][ T5958] apple 0003:05AC:024B.002D: item 0 2 1 7 parsing failed [ 228.838826][ T5958] apple 0003:05AC:024B.002D: parse failed [ 228.848451][ T5958] apple 0003:05AC:024B.002D: probe with driver apple failed with error -22 [ 229.000237][ T5958] usb 5-1: USB disconnect, device number 37 [ 229.010550][ T5894] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 229.028897][T12917] netlink: 183676 bytes leftover after parsing attributes in process `syz.3.3122'. [ 229.039344][T12917] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 229.048979][T12917] openvswitch: netlink: Key type 31 is not supported [ 229.096499][ T24] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 229.171245][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 229.177992][ T5894] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 229.187343][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.203162][ T5894] usb 3-1: config 0 descriptor?? [ 229.316684][ T24] usb 2-1: USB disconnect, device number 34 [ 229.327901][ T24] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 229.417433][ T5894] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 229.437350][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 229.451087][ T5894] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 229.459973][ T5894] usb 3-1: media controller created [ 229.483404][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.506638][T12940] netlink: 'syz.3.3132': attribute type 4 has an invalid length. [ 229.523435][T12940] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3132'. [ 229.620250][ T5894] az6027: usb out operation failed. (-71) [ 229.631793][ T5894] az6027: usb out operation failed. (-71) [ 229.647688][ T5894] stb0899_attach: Driver disabled by Kconfig [ 229.657788][ T5894] az6027: no front-end attached [ 229.657788][ T5894] [ 229.667925][ T5894] az6027: usb out operation failed. (-71) [ 229.685749][ T5894] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 229.701562][ T5894] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input52 [ 229.715118][ T5894] dvb-usb: schedule remote query interval to 400 msecs. [ 229.722984][ T5894] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 229.731710][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3137'. [ 229.745422][ T5894] usb 3-1: USB disconnect, device number 34 [ 229.786481][ T5894] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 229.824591][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3140'. [ 229.835607][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3140'. [ 229.910481][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 230.016816][T12969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.063699][T12972] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 230.102951][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 230.111684][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 230.132660][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.150364][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 230.166017][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 230.175117][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.191413][ T24] usb 4-1: config 0 descriptor?? [ 230.638138][ T24] apple 0003:05AC:026C.002E: unknown main item tag 0x0 [ 230.674014][ T24] apple 0003:05AC:026C.002E: unknown main item tag 0x0 [ 230.681944][ T24] apple 0003:05AC:026C.002E: unknown main item tag 0x0 [ 230.689347][ T24] apple 0003:05AC:026C.002E: unknown main item tag 0x0 [ 230.700767][ T24] apple 0003:05AC:026C.002E: unknown main item tag 0x0 [ 230.708233][ T24] apple 0003:05AC:026C.002E: unknown main item tag 0x0 [ 230.736866][ T24] apple 0003:05AC:026C.002E: unknown main item tag 0x0 [ 230.753067][T13007] input: syz1 as /devices/virtual/input/input53 [ 230.762704][ T24] apple 0003:05AC:026C.002E: hidraw0: USB HID v10.00 Device [HID 05ac:026c] on usb-dummy_hcd.3-1/input0 [ 230.926880][ T24] usb 4-1: USB disconnect, device number 27 [ 231.320611][ T977] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 231.482045][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.508477][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.527566][ T977] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 231.544065][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.574530][ T977] usb 3-1: config 0 descriptor?? [ 231.840953][ T24] kernel read not supported for file /dsp1 (pid: 24 comm: kworker/1:0) [ 231.979955][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 231.979969][ T30] audit: type=1400 audit(1754534212.197:848): avc: denied { mount } for pid=13089 comm="syz.1.3203" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 232.013916][ T977] keytouch 0003:0926:3333.002F: fixing up Keytouch IEC report descriptor [ 232.024051][ T30] audit: type=1400 audit(1754534212.237:849): avc: denied { mounton } for pid=13089 comm="syz.1.3203" path="/564/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 232.024681][T13090] overlayfs: failed to clone upperpath [ 232.052004][ T977] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.002F/input/input54 [ 232.107714][ T30] audit: type=1400 audit(1754534212.327:850): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 232.146716][ T977] keytouch 0003:0926:3333.002F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 232.149997][T13094] netlink: 'syz.3.3205': attribute type 1 has an invalid length. [ 232.177467][T13094] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3205'. [ 232.188568][T13094] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3205'. [ 232.289820][ T30] audit: type=1400 audit(1754534212.507:851): avc: denied { map } for pid=13101 comm="syz.4.3209" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 232.436859][ T30] audit: type=1400 audit(1754534212.657:852): avc: denied { getopt } for pid=13111 comm="syz.1.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 232.460169][ T977] usb 3-1: USB disconnect, device number 35 [ 232.565561][ T30] audit: type=1400 audit(1754534212.787:853): avc: denied { setcheckreqprot } for pid=13121 comm="syz.3.3219" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 233.144503][T13152] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.244907][T13152] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.335414][T13152] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.400133][T13169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.410662][ T977] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 233.459168][T13152] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.556085][ T7476] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.571376][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 233.589645][ T7476] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.592744][ T977] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.613554][ T7476] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.614132][ T977] usb 3-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.630418][ T7476] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.633501][ T977] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.698691][ T977] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 233.717834][ T977] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 233.733981][ T977] usb 3-1: config 0 interface 0 has no altsetting 0 [ 233.741828][ T977] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 233.798197][ T30] audit: type=1400 audit(1754534214.017:854): avc: denied { ioctl } for pid=13185 comm="syz.3.3249" path="socket:[43943]" dev="sockfs" ino=43943 ioctlcmd=0x42d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 233.801665][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.837968][ T30] audit: type=1400 audit(1754534214.047:855): avc: denied { accept } for pid=13185 comm="syz.3.3249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 233.915177][ T977] usb 3-1: config 0 descriptor?? [ 233.926162][T13193] bond0: entered promiscuous mode [ 233.932679][T13193] bond_slave_0: entered promiscuous mode [ 233.940192][ T30] audit: type=1400 audit(1754534214.157:856): avc: denied { mount } for pid=13195 comm="syz.3.3254" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 233.959399][T13193] bond_slave_1: entered promiscuous mode [ 233.962436][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.976058][T13193] batadv0: entered promiscuous mode [ 233.985001][T13193] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 234.005521][T13193] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 234.330479][ T977] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 234.338379][ T977] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 234.350439][ T977] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 234.365518][ T977] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 234.373910][ T977] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 234.387115][ T977] hid-thrustmaster 0003:044F:B65D.0030: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 234.400283][ T977] hid-thrustmaster 0003:044F:B65D.0030: setup data couldn't be sent [ 234.426443][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3264'. [ 234.516214][T13223] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[13223] [ 234.522650][T13222] overlayfs: missing 'workdir' [ 234.549119][ C0] hid-thrustmaster 0003:044F:B65D.0030: URB to get model id failed with error -71 [ 234.558758][ T5921] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 234.566416][ T977] usb 3-1: USB disconnect, device number 36 [ 234.658138][ T30] audit: type=1400 audit(1754534214.867:857): avc: denied { connect } for pid=13226 comm="syz.4.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 234.730595][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 234.737115][ T5921] usb 2-1: config 0 interface 0 has no altsetting 0 [ 234.747888][ T5921] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 234.757945][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.771391][ T5921] usb 2-1: Product: syz [ 234.776655][ T5921] usb 2-1: Manufacturer: syz [ 234.787602][ T5921] usb 2-1: SerialNumber: syz [ 234.795030][ T5921] usb 2-1: config 0 descriptor?? [ 234.813938][T13239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3275'. [ 234.825318][T13239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3275'. [ 234.874263][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3276'. [ 234.950235][T13247] sctp: [Deprecated]: syz.3.3279 (pid 13247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.950235][T13247] Use struct sctp_sack_info instead [ 235.222810][ T5921] gs_usb 2-1:0.0: Couldn't get device config: (err=-71) [ 235.242977][ T5921] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 235.264919][ T5921] usb 2-1: USB disconnect, device number 35 [ 235.576416][T13286] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3297'. [ 235.651578][ T977] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 235.712691][T13296] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3303'. [ 235.724122][T13296] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3303'. [ 235.804121][ T977] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.817929][ T977] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.831758][ T977] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.843150][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.852279][ T977] usb 3-1: Product: syz [ 235.856814][ T977] usb 3-1: Manufacturer: syz [ 235.894016][ T977] usb 3-1: SerialNumber: syz [ 236.107310][T13315] input: syz1 as /devices/virtual/input/input55 [ 236.336930][ C1] sd 0:0:1:0: [sda] tag#6453 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 236.347387][ C1] sd 0:0:1:0: [sda] tag#6453 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 236.371693][ T977] usb 3-1: cannot find UAC_HEADER [ 236.415261][ T977] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 236.421373][T13329] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 236.437543][ T54] IPVS: starting estimator thread 0... [ 236.542783][T13333] IPVS: using max 40 ests per chain, 96000 per kthread [ 236.585846][T13342] sp0: Synchronizing with TNC [ 236.597449][T13342] sp0: Found TNC [ 236.623378][ T977] usb 3-1: USB disconnect, device number 37 [ 236.801308][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 236.960859][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 236.967961][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 236.987234][ T10] usb 4-1: config 0 has no interface number 0 [ 237.003062][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.024737][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 237.036334][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 237.047030][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.065181][ T10] usb 4-1: Product: syz [ 237.069420][ T10] usb 4-1: Manufacturer: syz [ 237.074823][ T10] usb 4-1: SerialNumber: syz [ 237.401676][T13370] 9p: Unknown uid 00000000004294967295 [ 237.822340][ T10] usb 4-1: config 0 descriptor?? [ 238.010526][ T5844] kernel read not supported for file /dsp1 (pid: 5844 comm: kworker/1:3) [ 238.126328][T13358] syz.4.3332 (13358): drop_caches: 1 [ 238.127126][T13360] syz.4.3332 (13360): drop_caches: 1 [ 238.280834][ T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 238.440493][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 238.451331][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.471996][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.484175][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 238.500412][ T10] appletouch 4-1:0.85: Geyser mode initialized. [ 238.501080][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.519308][ T10] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input56 [ 238.525699][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 238.537211][ T24] usb 1-1: SerialNumber: syz [ 238.553842][ T24] hub 1-1:1.0: bad descriptor, ignoring hub [ 238.563079][ T24] hub 1-1:1.0: probe with driver hub failed with error -5 [ 238.571614][ T24] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 238.639888][T13408] netlink: 'syz.4.3353': attribute type 29 has an invalid length. [ 238.651430][T13408] netlink: 'syz.4.3353': attribute type 29 has an invalid length. [ 238.661036][T13408] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3353'. [ 238.726780][ T24] usb 4-1: USB disconnect, device number 28 [ 238.760082][ T24] appletouch 4-1:0.85: input: appletouch disconnected [ 238.842021][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 238.842036][ T30] audit: type=1400 audit(1754534219.067:862): avc: denied { mount } for pid=13413 comm="syz.4.3356" name="/" dev="autofs" ino=44955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 238.894333][ T30] audit: type=1400 audit(1754534219.117:863): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 238.935487][T13420] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3359'. [ 238.951393][ T54] usb 1-1: USB disconnect, device number 35 [ 239.052800][T13428] kvm: user requested TSC rate below hardware speed [ 239.072323][T13430] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 239.072323][T13426] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 239.436857][T13448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3371'. [ 239.448491][T13448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3371'. [ 239.458263][T13448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3371'. [ 239.470711][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 239.480625][T13448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3371'. [ 239.625039][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 239.635100][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.635131][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.635153][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 239.635182][ T10] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 239.635204][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.642579][ T10] usb 3-1: config 0 descriptor?? [ 239.927789][T13461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.081643][ T10] cougar 0003:060B:500A.0031: usage count exceeds max: fixing up report descriptor [ 240.083549][ T10] cougar 0003:060B:500A.0031: unexpected long global item [ 240.085200][ T10] cougar 0003:060B:500A.0031: parse failed [ 240.085271][ T10] cougar 0003:060B:500A.0031: probe with driver cougar failed with error -22 [ 240.283589][T13468] loop6: detected capacity change from 0 to 2560 [ 240.284003][T13468] buffer_io_error: 22 callbacks suppressed [ 240.284015][T13468] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.286169][T13468] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.293943][ T10] usb 3-1: USB disconnect, device number 38 [ 240.311536][T13468] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.341423][T13468] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.341507][T13468] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.341597][T13468] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.341684][T13468] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.341762][T13468] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.341813][T13468] ldm_validate_partition_table(): Disk read failed. [ 240.341845][T13468] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.341924][T13468] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.342103][T13468] Dev loop6: unable to read RDB block 0 [ 240.344276][T13468] loop6: unable to read partition table [ 240.419641][T13468] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 240.653052][T13490] tipc: Enabling of bearer rejected, failed to enable media [ 241.052908][ T30] audit: type=1400 audit(1754534221.277:864): avc: denied { connect } for pid=13516 comm="syz.3.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 241.100632][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 241.270467][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 241.296435][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.325766][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 241.338749][ T10] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 241.347918][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.357253][ T10] usb 2-1: config 0 descriptor?? [ 241.414440][T13527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3407'. [ 241.574829][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 241.659198][T13534] block device autoloading is deprecated and will be removed. [ 241.736958][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 241.747294][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 241.776204][ T24] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 241.781948][ T10] nintendo 0003:057E:2019.0032: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 241.798478][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.807490][ T24] usb 4-1: Product: syz [ 241.813725][ T24] usb 4-1: Manufacturer: syz [ 241.818365][ T24] usb 4-1: SerialNumber: syz [ 241.837397][ T24] usb 4-1: config 0 descriptor?? [ 241.844658][T13525] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 241.859884][ T30] audit: type=1400 audit(1754534222.067:865): avc: denied { name_bind } for pid=13542 comm="syz.0.3414" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 241.890087][T13525] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 242.114275][T13525] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 242.124482][T13525] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 242.178832][ T10] nintendo 0003:057E:2019.0032: Failed to get joycon info; ret=-71 [ 242.187076][ T10] nintendo 0003:057E:2019.0032: Failed to retrieve controller info; ret=-71 [ 242.205383][ T10] nintendo 0003:057E:2019.0032: Failed to initialize controller; ret=-71 [ 242.233454][ T10] nintendo 0003:057E:2019.0032: probe - fail = -71 [ 242.253625][ T10] nintendo 0003:057E:2019.0032: probe with driver nintendo failed with error -71 [ 242.278310][ T10] usb 2-1: USB disconnect, device number 36 [ 242.291919][ T30] audit: type=1400 audit(1754534222.517:866): avc: denied { accept } for pid=13555 comm="syz.0.3419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.545114][ T24] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 242.745039][T13579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3430'. [ 242.754121][T13579] netlink: 'syz.4.3430': attribute type 7 has an invalid length. [ 242.765356][T13579] netlink: 'syz.4.3430': attribute type 8 has an invalid length. [ 242.782999][T13579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3430'. [ 242.799044][T13579] gretap0: entered promiscuous mode [ 242.806783][T13579] gretap0: left promiscuous mode [ 242.857082][T13585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3433'. [ 242.867595][T13585] IPVS: Error connecting to the multicast addr [ 242.946109][ T24] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 242.957398][ T24] usb 4-1: USB disconnect, device number 29 [ 243.030433][ T5958] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 243.117401][ T30] audit: type=1400 audit(1754534223.337:867): avc: denied { append } for pid=13598 comm="syz.4.3440" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 243.117506][T13599] random: crng reseeded on system resumption [ 243.140592][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.180415][ T5958] usb 3-1: Using ep0 maxpacket: 16 [ 243.189452][ T5958] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 243.198758][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.206845][ T5958] usb 3-1: Product: syz [ 243.211553][ T5958] usb 3-1: Manufacturer: syz [ 243.216361][ T5958] usb 3-1: SerialNumber: syz [ 243.225531][ T5958] usb 3-1: config 0 descriptor?? [ 243.233181][ T5958] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 243.238064][T13602] Bluetooth: hci5: Frame reassembly failed (-84) [ 243.246940][ T7473] Bluetooth: hci5: Frame reassembly failed (-84) [ 243.441645][ T5958] gspca_sn9c2028: read1 error -32 [ 243.449046][ T5958] gspca_sn9c2028: read1 error -32 [ 243.646119][ T30] audit: type=1400 audit(1754534223.867:868): avc: denied { accept } for pid=13623 comm="syz.0.3451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 243.687212][ T5958] usb 3-1: USB disconnect, device number 39 [ 243.740500][ T5894] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 243.890574][ T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 243.910362][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 243.916700][ T5894] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 243.925440][ T5894] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.935509][ T5894] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.946655][ T5894] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.955717][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.963874][ T5894] usb 4-1: Product: syz [ 243.968026][ T5894] usb 4-1: Manufacturer: syz [ 243.972874][ T5894] usb 4-1: SerialNumber: syz [ 244.053461][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 244.062565][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.072851][ T24] usb 1-1: config 0 descriptor?? [ 244.355882][T13635] netlink: 'syz.1.3456': attribute type 10 has an invalid length. [ 244.370195][T13635] dummy0: entered promiscuous mode [ 244.375832][T13635] dummy0: entered allmulticast mode [ 244.383764][T13635] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 244.393329][ T5894] usb 4-1: 0:2 : does not exist [ 244.487758][ T24] ath6kl: Unsupported hardware version: 0x0 [ 244.503009][ T24] ath6kl: Failed to init ath6kl core: -22 [ 244.517455][ T24] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 244.532629][T13643] input: syz1 as /devices/virtual/input/input57 [ 244.697120][ T54] usb 1-1: USB disconnect, device number 36 [ 244.880464][ T24] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 245.000571][ T5894] usb 4-1: USB disconnect, device number 30 [ 245.030414][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 245.036628][ T24] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 245.044839][ T24] usb 3-1: config 0 has no interface number 0 [ 245.051122][ T24] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 245.061273][ T24] usb 3-1: config 0 interface 196 has no altsetting 0 [ 245.069693][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 245.080046][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.088034][ T24] usb 3-1: Product: syz [ 245.092210][ T24] usb 3-1: Manufacturer: syz [ 245.096789][ T24] usb 3-1: SerialNumber: syz [ 245.104410][ T24] usb 3-1: config 0 descriptor?? [ 245.109989][T13648] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.290640][ T5851] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 245.293321][ T50] Bluetooth: hci5: command 0xfc11 tx timeout [ 245.637226][T13672] syzkaller1: entered promiscuous mode [ 245.642873][T13672] syzkaller1: entered allmulticast mode [ 245.783229][ T24] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 245.826635][ T24] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 245.856209][ T24] usb 3-1: USB disconnect, device number 40 [ 245.914427][T13681] netlink: 'syz.0.3476': attribute type 11 has an invalid length. [ 245.951435][ T24] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 246.720642][ T977] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 246.900396][ T977] usb 1-1: Using ep0 maxpacket: 32 [ 246.908287][ T977] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 246.920402][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.949110][ T977] usb 1-1: config 0 descriptor?? [ 247.195026][ T977] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 247.204049][ T977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 247.221109][ T977] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 247.231656][ T977] usb 1-1: media controller created [ 247.263341][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.298187][T13735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3500'. [ 247.307502][T13735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3500'. [ 247.316462][T13735] netlink: 50 bytes leftover after parsing attributes in process `syz.4.3500'. [ 247.380954][ T5958] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 247.404333][ T977] az6027: usb out operation failed. (-71) [ 247.412521][ T977] az6027: usb out operation failed. (-71) [ 247.418243][ T977] stb0899_attach: Driver disabled by Kconfig [ 247.424808][ T977] az6027: no front-end attached [ 247.424808][ T977] [ 247.436285][ T977] az6027: usb out operation failed. (-71) [ 247.442255][ T977] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 247.453510][ T977] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input58 [ 247.472854][ T977] dvb-usb: schedule remote query interval to 400 msecs. [ 247.480246][ T977] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 247.493288][ T977] usb 1-1: USB disconnect, device number 37 [ 247.540416][ T5958] usb 2-1: Using ep0 maxpacket: 8 [ 247.552104][ T5958] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.573509][ T5958] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.584389][ T977] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 247.601643][ T5958] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.617055][ T5958] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.630559][ T5958] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 247.639585][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.744466][ T30] audit: type=1326 audit(1754534227.967:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.2.3509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7654d8eb69 code=0x0 [ 247.859636][ T5958] usb 2-1: GET_CAPABILITIES returned 0 [ 247.865447][ T5958] usbtmc 2-1:16.0: can't read capabilities [ 247.970578][ T5894] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 247.985849][ T30] audit: type=1400 audit(1754534228.207:870): avc: denied { mounton } for pid=13763 comm="syz.3.3513" path="/735/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 248.117790][ T24] usb 2-1: USB disconnect, device number 37 [ 248.127433][ T30] audit: type=1400 audit(1754534228.347:871): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 248.180887][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 248.216772][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.229783][ T5894] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 248.239611][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.253009][ T5894] usb 5-1: config 0 descriptor?? [ 248.263121][ T5894] hub 5-1:0.0: USB hub found [ 248.315589][ T24] IPVS: starting estimator thread 0... [ 248.315677][T13772] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 248.424286][T13774] IPVS: using max 44 ests per chain, 105600 per kthread [ 248.465255][ T5894] hub 5-1:0.0: 1 port detected [ 248.491814][T13776] syz.0.3518 (13776): drop_caches: 1 [ 248.572126][T13776] syz.0.3518 (13776): drop_caches: 1 [ 248.572812][T13778] syz.0.3518 (13778): drop_caches: 1 [ 248.990698][ T5844] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 249.151430][ T5844] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.161685][ T5844] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 249.174276][ T5844] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.183387][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.191438][ T5844] usb 3-1: Product: syz [ 249.195660][ T5844] usb 3-1: Manufacturer: syz [ 249.200256][ T5844] usb 3-1: SerialNumber: syz [ 249.281785][ T10] usb 5-1: USB disconnect, device number 38 [ 249.283221][ T5894] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 249.880139][T13797] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 249.906120][T13802] binder: 13801:13802 ioctl c0306201 200000002800 returned -14 [ 250.215852][ T5844] cdc_ncm 3-1:1.0: bind() failure [ 250.224899][ T5844] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 250.234203][ T5844] usb 3-1: USB disconnect, device number 41 [ 250.782394][T13815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3532'. [ 250.811826][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 250.812977][T13782] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 251.696048][T13782] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.702161][T13782] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.708156][T13782] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 251.714193][T13782] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.720162][T13782] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 251.728258][T13782] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 251.843088][T13825] openvswitch: netlink: IPv4 tun info is not correct [ 251.970849][ T5844] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 251.988679][ T5894] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 252.031606][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 252.143494][ T5844] usb 5-1: Using ep0 maxpacket: 32 [ 252.151842][ T5844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.162314][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 252.174486][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 252.183967][ T5844] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 252.200376][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.209635][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.230699][ T5894] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 252.244859][ T5844] usb 5-1: Product: syz [ 252.249027][ T5844] usb 5-1: Manufacturer: syz [ 252.253767][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.266280][ T5844] usb 5-1: SerialNumber: syz [ 252.272584][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.288056][ T5844] usb 5-1: config 0 descriptor?? [ 252.293630][ T5894] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 252.303181][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.311600][ T24] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 252.322101][ T5844] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 252.331339][ T5894] usb 3-1: Product: syz [ 252.335769][ T5894] usb 3-1: Manufacturer: syz [ 252.340415][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.348640][ T5894] usb 3-1: SerialNumber: syz [ 252.355632][ T24] usb 1-1: config 0 descriptor?? [ 252.527314][ T5844] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 252.539276][ T5844] quatech2 5-1:0.0: probe with driver quatech2 failed with error -8 [ 252.565765][ T5894] usb 3-1: Limiting number of CPorts to U8_MAX [ 252.590116][ T5894] usb 3-1: Not enough endpoints found in device, aborting! [ 252.755910][ T5844] usb 5-1: USB disconnect, device number 39 [ 252.769881][ T5958] usb 3-1: USB disconnect, device number 42 [ 252.784702][ T24] hid-udraw 0003:20D6:CB17.0033: item fetching failed at offset 5/7 [ 252.794693][ T24] hid-udraw 0003:20D6:CB17.0033: parse failed [ 252.801187][ T24] hid-udraw 0003:20D6:CB17.0033: probe with driver hid-udraw failed with error -22 [ 252.890768][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 253.005830][ T5958] usb 1-1: USB disconnect, device number 38 [ 253.227573][T13859] macsec2: entered promiscuous mode [ 253.234477][T13859] ip6gretap0: entered promiscuous mode [ 253.240124][T13859] macsec2: entered allmulticast mode [ 253.245618][T13859] ip6gretap0: entered allmulticast mode [ 253.770806][ T5851] Bluetooth: hci3: command 0x0405 tx timeout [ 253.776921][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 253.783149][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 253.820776][ T5958] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 253.980422][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 253.988197][ T5958] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 254.004581][ T5958] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 254.015909][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 254.025064][ T5958] usb 1-1: Product: syz [ 254.029311][ T5958] usb 1-1: Manufacturer: syz [ 254.036571][ T5958] usb 1-1: SerialNumber: syz [ 254.044128][ T5958] usb 1-1: config 0 descriptor?? [ 254.049746][T13872] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 254.059384][ T5958] hub 1-1:0.0: bad descriptor, ignoring hub [ 254.068805][ T5958] hub 1-1:0.0: probe with driver hub failed with error -5 [ 254.279363][T13899] geneve1: entered promiscuous mode [ 254.288504][T13899] geneve1: left promiscuous mode [ 254.367538][T13905] netlink: 'syz.3.3570': attribute type 4 has an invalid length. [ 254.400577][ T5844] usb 1-1: USB disconnect, device number 39 [ 254.646181][T13921] syz.1.3576 (13921): drop_caches: 1 [ 254.675955][T13921] syz.1.3576 (13921): drop_caches: 1 [ 254.696795][T13925] syz.1.3576 (13925): drop_caches: 1 [ 254.740609][ T5958] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 254.840593][ T5844] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 254.910711][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 254.935600][ T5958] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 254.955237][ T5958] usb 1-1: string descriptor 0 read error: -22 [ 254.971129][ T5958] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 254.986304][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 255.004550][ T5958] usb 1-1: config 0 descriptor?? [ 255.011052][T13872] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 255.019169][ T5958] hub 1-1:0.0: bad descriptor, ignoring hub [ 255.028423][ T5958] hub 1-1:0.0: probe with driver hub failed with error -5 [ 255.041842][ T5844] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 255.049937][ T5844] usb 5-1: config 0 has no interface number 0 [ 255.056158][ T5844] usb 5-1: config 0 interface 98 has no altsetting 0 [ 255.064933][ T5844] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 255.083710][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.094954][ T5844] usb 5-1: Product: syz [ 255.099142][ T5844] usb 5-1: Manufacturer: syz [ 255.107018][ T5844] usb 5-1: SerialNumber: syz [ 255.121117][ T5844] usb 5-1: config 0 descriptor?? [ 255.140517][ T5894] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 255.209777][ T30] audit: type=1400 audit(1754534235.427:872): avc: denied { ioctl } for pid=13943 comm="syz.2.3586" path="socket:[48317]" dev="sockfs" ino=48317 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 255.238746][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.248016][T13944] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 255.264735][ T30] audit: type=1400 audit(1754534235.487:873): avc: denied { firmware_load } for pid=13943 comm="syz.2.3586" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 255.265055][T13944] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 255.322231][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.332240][ T5894] usb 4-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 255.341538][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.351858][ T5844] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 255.365146][ T5894] usb 4-1: config 0 descriptor?? [ 255.390582][ T24] usb 1-1: USB disconnect, device number 40 [ 255.779489][ T5894] thrustmaster 0003:044F:B300.0034: global environment stack underflow [ 255.787863][ T5894] thrustmaster 0003:044F:B300.0034: item 0 4 1 11 parsing failed [ 255.796243][ T5894] thrustmaster 0003:044F:B300.0034: parse failed [ 255.802727][ T5894] thrustmaster 0003:044F:B300.0034: probe with driver thrustmaster failed with error -22 [ 255.851618][ T5851] Bluetooth: hci3: command 0x0405 tx timeout [ 255.991701][ T24] usb 4-1: USB disconnect, device number 31 [ 256.052388][T13948] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 256.054029][T13947] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 256.058605][T13948] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 256.067225][T13947] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 256.071086][T13948] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 256.087484][T13947] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 256.094061][T13947] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 256.105195][T13947] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 256.111287][T13947] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 256.117026][T13948] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 256.119684][T13947] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 256.131071][T13947] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 256.144269][T13947] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 256.151583][T13947] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 256.273985][T13964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3594'. [ 256.462114][ T5844] usb 5-1: reset high-speed USB device number 40 using dummy_hcd [ 256.504884][ T24] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 256.517931][ T24] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 256.526369][ T24] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 256.535758][ T24] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 256.544719][ T24] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 256.553800][ T24] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 256.562862][ T24] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 256.574403][ T24] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 256.582886][ T24] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 256.591990][ T24] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 256.605504][ T24] hid-generic 0002:0004:0009.0035: hidraw0: HID v0.04 Device [syz0] on syz0 [ 256.722350][T13984] mkiss: ax0: crc mode is auto. [ 256.857716][ T5844] usb 5-1: failed to restore interface 98 altsetting 4 (error=-71) [ 256.870629][ T5844] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 256.882527][ T5844] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 256.892308][ T5894] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 256.906571][ T5894] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 256.916884][ T5844] usb 5-1: USB disconnect, device number 40 [ 257.142978][ T5958] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 257.304013][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 257.319351][ T5958] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 257.349122][ T5958] usb 1-1: config 0 has no interface number 0 [ 257.357352][ T5958] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 257.372266][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.381266][ T5958] usb 1-1: Product: syz [ 257.385425][ T5958] usb 1-1: Manufacturer: syz [ 257.390010][ T5958] usb 1-1: SerialNumber: syz [ 257.405429][ T5958] usb 1-1: config 0 descriptor?? [ 257.418164][ T5958] smsc95xx v2.0.0 [ 258.237916][ T5958] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 258.401338][ T5844] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 258.441312][ T5958] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 258.455091][T14059] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 258.465052][ T5958] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 258.473784][T14059] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 258.491372][ T5958] usb 1-1: USB disconnect, device number 41 [ 258.574132][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 258.594842][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 258.623611][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 252, setting to 64 [ 258.671254][ T5844] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 258.687546][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.706701][ T5844] usb 5-1: config 0 descriptor?? [ 258.713072][T14041] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 258.735392][ T5844] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input59 [ 258.754442][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.762204][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.769491][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.776797][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.785297][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.792608][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.799908][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.807205][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.817366][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.825909][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.833962][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.841627][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.849061][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.856685][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.864261][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.871816][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.879259][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.890356][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.898072][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.905798][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.915523][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.923364][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.930892][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.938290][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.945731][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.953193][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.960670][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.968134][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.975627][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.983136][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.990621][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 258.997956][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.009151][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.018217][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.025769][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.029182][ T5202] usb 5-1: control msg error: -71 [ 259.036706][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.046067][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.053798][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.061253][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.070368][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.077529][ C0] usb 5-1: pegasus_irq - usb_submit_urb failed with result -1 [ 259.097036][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.104515][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.111795][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.119077][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.126394][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.134068][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.141377][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.148678][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.155951][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.163255][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.166412][ T5202] usb 5-1: control msg error: -71 [ 259.170535][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.182569][ C1] usb 5-1: pegasus_irq - usb_submit_urb failed with result -1 [ 259.190281][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.201524][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.208841][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 259.212593][ T5844] usb 5-1: USB disconnect, device number 41 [ 259.215942][ C0] usb 5-1: pegasus_irq - usb_submit_urb failed with result -19 [ 259.237013][ T5202] usb 5-1: control msg error: -19 [ 259.245077][ T30] audit: type=1400 audit(1754534239.467:874): avc: denied { connect } for pid=14080 comm="syz.0.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 259.298165][ T30] audit: type=1400 audit(1754534239.467:875): avc: denied { write } for pid=14080 comm="syz.0.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 259.318384][ T30] audit: type=1400 audit(1754534239.467:876): avc: denied { read } for pid=14080 comm="syz.0.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 259.496669][ T30] audit: type=1400 audit(1754534239.717:877): avc: denied { mounton } for pid=14101 comm="syz.3.3651" path="/proc/1678/task" dev="proc" ino=49495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 259.628861][ T30] audit: type=1400 audit(1754534239.847:878): avc: denied { write } for pid=14109 comm="syz.2.3654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 259.890549][ T5958] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 259.923732][T14124] block nbd3: NBD_DISCONNECT [ 259.940933][T14124] block nbd3: Send disconnect failed -22 [ 259.957340][T14122] block nbd3: Disconnected due to user request. [ 259.967812][T14122] block nbd3: shutting down sockets [ 260.060430][ T5958] usb 1-1: Using ep0 maxpacket: 8 [ 260.069028][ T5958] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 260.098631][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.119769][ T5958] usb 1-1: Product: syz [ 260.127825][ T5958] usb 1-1: Manufacturer: syz [ 260.137949][ T5958] usb 1-1: SerialNumber: syz [ 260.152508][ T5958] usb 1-1: config 0 descriptor?? [ 260.168383][ T5958] gspca_main: sq905-2.14.0 probing 2770:9120 [ 260.197109][ T5844] kernel write not supported for file /1427/sched (pid: 5844 comm: kworker/1:3) [ 260.240523][ T977] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 260.400381][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 260.412913][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.431024][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.444011][ T977] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 260.460690][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.492707][ T977] usb 3-1: config 0 descriptor?? [ 260.774848][T14171] syzkaller1: entered promiscuous mode [ 260.780503][T14171] syzkaller1: entered allmulticast mode [ 260.926458][ T977] savu 0003:1E7D:2D5A.0036: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 261.181501][ T10] usb 3-1: USB disconnect, device number 43 [ 261.196675][ T5958] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 261.204599][ T5958] sq905 1-1:0.0: probe with driver sq905 failed with error -71 [ 261.213908][ T5958] usb 1-1: USB disconnect, device number 42 [ 261.260422][ T977] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 261.420450][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 261.427148][ T977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.437538][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.448520][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 261.459097][ T977] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 261.468933][ T977] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.490824][ T977] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 261.499933][ T977] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 261.507978][ T977] usb 4-1: Manufacturer: syz [ 261.518002][ T977] usb 4-1: config 0 descriptor?? [ 261.801154][ T977] rc_core: IR keymap rc-hauppauge not found [ 261.807079][ T977] Registered IR keymap rc-empty [ 261.821272][ T977] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 261.852851][ T977] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 261.872148][ T977] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 261.885358][ T977] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input60 [ 261.902059][ T977] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 261.915251][T14203] UHID_CREATE from different security context by process 1294 (syz.0.3694), this is not allowed. [ 261.926580][ T977] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 261.951199][ T977] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 261.971017][ T977] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.001590][ T977] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.020554][ T977] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.042315][ T977] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.060472][ T977] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.080412][ T977] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.100924][ T977] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.121998][ T977] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 262.130018][ T977] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 262.186446][ T977] usb 4-1: USB disconnect, device number 32 [ 262.240541][ T5958] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 262.390410][ T5958] usb 3-1: Using ep0 maxpacket: 16 [ 262.398637][ T5958] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 262.407811][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 262.416476][ T5958] usb 3-1: Product: syz [ 262.420689][ T5958] usb 3-1: Manufacturer: syz [ 262.425266][ T5958] usb 3-1: SerialNumber: syz [ 262.431142][ T5958] usb 3-1: config 0 descriptor?? [ 262.641280][ T5844] usb 3-1: USB disconnect, device number 44 [ 262.778413][T14214] netlink: 'syz.3.3700': attribute type 23 has an invalid length. [ 262.871323][ T30] audit: type=1326 audit(1754534243.097:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.3.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481518eb69 code=0x7ffc0000 [ 262.929301][ T30] audit: type=1326 audit(1754534243.097:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.3.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481518eb69 code=0x7ffc0000 [ 262.958613][ T30] audit: type=1326 audit(1754534243.127:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.3.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f481518eb69 code=0x7ffc0000 [ 262.985257][ T30] audit: type=1326 audit(1754534243.127:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.3.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481518eb69 code=0x7ffc0000 [ 262.989933][T14225] netlink: 'syz.3.3705': attribute type 3 has an invalid length. [ 263.008620][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.020054][ T30] audit: type=1326 audit(1754534243.127:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.3.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481518eb69 code=0x7ffc0000 [ 263.320509][T14244] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3712'. [ 263.514115][ T977] hid_parser_main: 7 callbacks suppressed [ 263.514128][ T977] hid-generic 0002:0004:0009.0037: unknown main item tag 0x0 [ 263.527266][ T977] hid-generic 0002:0004:0009.0037: unknown main item tag 0x0 [ 263.534804][ T977] hid-generic 0002:0004:0009.0037: unknown main item tag 0x0 [ 263.542192][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 263.542222][ T977] hid-generic 0002:0004:0009.0037: unknown main item tag 0x0 [ 263.542242][ T977] hid-generic 0002:0004:0009.0037: unknown main item tag 0x0 [ 263.548672][ T5851] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 263.555959][ T977] hid-generic 0002:0004:0009.0037: unknown main item tag 0x0 [ 263.555980][ T977] hid-generic 0002:0004:0009.0037: unknown main item tag 0x0 [ 263.555998][ T977] hid-generic 0002:0004:0009.0037: unknown main item tag 0x0 [ 263.556017][ T977] hid-generic 0002:0004:0009.0037: unknown main item tag 0x0 [ 263.556034][ T977] hid-generic 0002:0004:0009.0037: unknown main item tag 0x0 [ 263.558335][ T977] hid-generic 0002:0004:0009.0037: hidraw0: HID v0.04 Device [syz0] on syz0 [ 264.003149][T14282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3728'. [ 264.140465][ T5844] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 264.217936][ T24] hid-generic 0002:0004:0009.0038: hidraw0: HID v0.04 Device [syz0] on syz0 [ 264.293314][T14302] ALSA: seq fatal error: cannot create timer (-22) [ 264.314619][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 264.322527][ T5844] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 264.337112][ T5844] usb 1-1: config 1 has no interface number 0 [ 264.350373][ T5844] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 264.370555][ T5844] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 264.384828][ T5844] usb 1-1: config 1 interface 105 has no altsetting 0 [ 264.393863][ T5844] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 264.403148][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.412408][ T5844] usb 1-1: Product: syz [ 264.416643][ T5844] usb 1-1: Manufacturer: syz [ 264.422631][ T5844] usb 1-1: SerialNumber: syz [ 264.438345][T14274] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 264.445803][T14274] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 264.646737][ T30] audit: type=1326 audit(1754534244.867:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14317 comm="syz.4.3744" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc3ad8eb69 code=0x0 [ 264.884531][T14274] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 264.893549][T14274] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 264.960524][ T977] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 265.110633][ T5958] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 265.121562][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 265.132531][ T977] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 265.145377][ T977] usb 3-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 265.154434][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.164017][ T977] usb 3-1: config 0 descriptor?? [ 265.169477][T14324] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 265.260392][ T5958] usb 4-1: Using ep0 maxpacket: 8 [ 265.266912][ T5958] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 265.278301][ T5958] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 265.288721][ T5958] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 265.297001][ T5958] usb 4-1: Product: syz [ 265.301220][ T5958] usb 4-1: Manufacturer: syz [ 265.305834][ T5958] usb 4-1: SerialNumber: syz [ 265.311279][ T5922] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 265.480406][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 265.487979][ T5922] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 265.501870][ T5922] usb 2-1: config 0 has no interface number 0 [ 265.510205][ T5922] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 265.521020][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.521898][ T5844] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 265.529037][ T5922] usb 2-1: Product: syz [ 265.546647][ T5844] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 265.557435][ T5958] usb 4-1: Invalid connection information received from device [ 265.568012][ T5922] usb 2-1: Manufacturer: syz [ 265.572781][ T5922] usb 2-1: SerialNumber: syz [ 265.586100][ T5844] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8a:b5:d6:8a:02:8b [ 265.591102][ T5922] usb 2-1: config 0 descriptor?? [ 265.601462][ T5844] usb 1-1: USB disconnect, device number 43 [ 265.609270][ T977] apple 0003:05AC:0264.0039: unbalanced collection at end of report description [ 265.611124][ T5844] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 265.632362][ T5922] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 265.639184][ T977] apple 0003:05AC:0264.0039: parse failed [ 265.649435][ T977] apple 0003:05AC:0264.0039: probe with driver apple failed with error -22 [ 265.673070][ T5844] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 265.682914][ T5844] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 265.695396][ T5844] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 265.762028][ T54] usb 4-1: USB disconnect, device number 33 [ 265.826996][ T24] usb 3-1: USB disconnect, device number 45 [ 266.443316][ T24] kernel read not supported for file /sequencer (pid: 24 comm: kworker/1:0) [ 266.451654][ T5922] gspca_spca1528: reg_w err -71 [ 266.483815][ T5922] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 266.498998][ T5922] usb 2-1: USB disconnect, device number 38 [ 266.544115][ T30] audit: type=1400 audit(1754534246.767:885): avc: denied { write } for pid=14392 comm="syz.2.3777" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 266.618588][T14397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.760636][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 266.918357][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 266.947408][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 266.964672][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 266.975794][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.990598][T14389] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 267.000514][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 267.048689][T14419] syz.4.3790 (14419): /proc/14418/oom_adj is deprecated, please use /proc/14418/oom_score_adj instead. [ 267.290836][T14431] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14431 comm=syz.0.3794 [ 267.309701][ T54] usb 4-1: USB disconnect, device number 34 [ 267.720521][T14464] dvmrp0: entered allmulticast mode [ 268.440875][ T54] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 268.610452][ T54] usb 1-1: Using ep0 maxpacket: 16 [ 268.617189][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.629553][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.639617][ T54] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 268.649677][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.659884][ T54] usb 1-1: config 0 descriptor?? [ 268.913904][T14512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.074332][ T54] hid_parser_main: 24 callbacks suppressed [ 269.074352][ T54] hid-multitouch 0003:1FD2:6007.003A: unknown main item tag 0x6 [ 269.102549][ T54] hid-multitouch 0003:1FD2:6007.003A: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 269.134663][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3835'. [ 269.162480][ T30] audit: type=1326 audit(1754534249.387:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.3.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481518eb69 code=0x7ffc0000 [ 269.187573][ T30] audit: type=1326 audit(1754534249.387:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.3.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481518eb69 code=0x7ffc0000 [ 269.215113][ T30] audit: type=1326 audit(1754534249.417:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.3.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f481518eb69 code=0x7ffc0000 [ 269.250548][ T30] audit: type=1326 audit(1754534249.417:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.3.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481518eb69 code=0x7ffc0000 [ 269.273927][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.287878][ T30] audit: type=1326 audit(1754534249.417:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.3.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481518eb69 code=0x7ffc0000 [ 269.311261][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.342357][ T30] audit: type=1326 audit(1754534249.417:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.3.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f481518eb69 code=0x7ffc0000 [ 269.356543][ T5958] usb 1-1: USB disconnect, device number 44 [ 269.368782][ T30] audit: type=1326 audit(1754534249.417:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.3.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481518eb69 code=0x7ffc0000 [ 269.395290][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.404362][ T30] audit: type=1326 audit(1754534249.417:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.3.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f481518eb69 code=0x7ffc0000 [ 269.427723][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.437242][ T30] audit: type=1326 audit(1754534249.437:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.3.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481518eb69 code=0x7ffc0000 [ 269.460610][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.471832][ T30] audit: type=1326 audit(1754534249.437:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.3.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481518eb69 code=0x7ffc0000 [ 269.495193][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.850466][ T50] Bluetooth: hci5: command 0xfc11 tx timeout [ 269.854127][ T5851] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 270.243487][T14555] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3850'. [ 270.356269][T14559] syzkaller1: entered promiscuous mode [ 270.368489][T14559] syzkaller1: entered allmulticast mode [ 270.462909][T14563] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 270.770376][ T5922] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 270.933550][ T5922] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 270.949745][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.976638][ T5922] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 270.987395][ T5922] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 270.996564][ T5922] usb 3-1: Manufacturer: syz [ 271.005431][ T5922] usb 3-1: config 0 descriptor?? [ 271.113935][ T5922] rc_core: IR keymap rc-hauppauge not found [ 271.122086][ T5922] Registered IR keymap rc-empty [ 271.130138][ T5922] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 271.171370][ T5922] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input61 [ 271.236235][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 271.297356][ T5922] usb 3-1: USB disconnect, device number 46 [ 271.372943][T14598] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 271.761821][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 271.910411][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 271.917128][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.931945][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 271.944835][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.962435][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.972961][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.986630][ T24] usb 4-1: Product: syz [ 271.994198][ T24] usb 4-1: Manufacturer: syz [ 272.002411][ T24] usb 4-1: SerialNumber: syz [ 272.017784][ T24] cdc_ncm 4-1:1.0: skipping garbage [ 272.024191][ T24] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 272.036844][ T24] cdc_ncm 4-1:1.0: bind() failure [ 272.211991][T14628] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3882'. [ 272.255766][ T24] usb 4-1: USB disconnect, device number 35 [ 272.473437][T14628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.483655][T14628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.517965][T14628] bond0 (unregistering): (slave bond1): Releasing backup interface [ 272.534350][T14628] bond0 (unregistering): Released all slaves [ 272.635215][T14638] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 272.709801][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3887'. [ 272.810576][ T54] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 273.017753][ T54] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 273.049355][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 273.066299][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 273.101962][ T54] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 273.122157][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.145205][ T54] usb 2-1: Product: syz [ 273.149376][ T54] usb 2-1: Manufacturer: syz [ 273.170364][ T54] usb 2-1: SerialNumber: syz [ 273.183919][ T54] usb 2-1: config 0 descriptor?? [ 273.206104][ T54] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 273.483407][ T54] usb 2-1: USB disconnect, device number 39 [ 273.664278][T14680] [ 273.666624][T14680] ===================================================== [ 273.673538][T14680] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 273.680967][T14680] 6.16.0-syzkaller-11364-g3c4a063b1f8a #0 Not tainted [ 273.687700][T14680] ----------------------------------------------------- [ 273.694602][T14680] syz.0.3904/14680 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 273.702298][T14680] ffff888056a147f8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 273.710979][T14680] [ 273.710979][T14680] and this task is already holding: [ 273.718316][T14680] ffff88802b9a9230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 273.727948][T14680] which would create a new lock dependency: [ 273.733806][T14680] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 273.741714][T14680] [ 273.741714][T14680] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 273.751148][T14680] (&dev->event_lock#2){..-.}-{3:3} [ 273.751171][T14680] [ 273.751171][T14680] ... which became SOFTIRQ-irq-safe at: [ 273.764016][T14680] lock_acquire+0x179/0x350 [ 273.768594][T14680] _raw_spin_lock_irqsave+0x3a/0x60 [ 273.773954][T14680] input_inject_event+0x9f/0x3b0 [ 273.778964][T14680] led_set_brightness+0x217/0x290 [ 273.784049][T14680] led_trigger_event+0xda/0x270 [ 273.788965][T14680] kbd_bh+0x21b/0x300 [ 273.793015][T14680] tasklet_action_common+0x284/0x400 [ 273.798365][T14680] handle_softirqs+0x216/0x8e0 [ 273.803199][T14680] run_ksoftirqd+0x3a/0x60 [ 273.807788][T14680] smpboot_thread_fn+0x3f7/0xae0 [ 273.812792][T14680] kthread+0x3c5/0x780 [ 273.816927][T14680] ret_from_fork+0x5d7/0x6f0 [ 273.821589][T14680] ret_from_fork_asm+0x1a/0x30 [ 273.826442][T14680] [ 273.826442][T14680] to a SOFTIRQ-irq-unsafe lock: [ 273.833430][T14680] (tasklist_lock){.+.+}-{3:3} [ 273.833449][T14680] [ 273.833449][T14680] ... which became SOFTIRQ-irq-unsafe at: [ 273.846028][T14680] ... [ 273.846033][T14680] lock_acquire+0x179/0x350 [ 273.853162][T14680] _raw_read_lock+0x5f/0x70 [ 273.857731][T14680] __do_wait+0x105/0x890 [ 273.862042][T14680] do_wait+0x21e/0x5a0 [ 273.866179][T14680] kernel_wait+0x9f/0x160 [ 273.870576][T14680] call_usermodehelper_exec_work+0xf1/0x170 [ 273.876548][T14680] process_one_work+0x9cc/0x1b70 [ 273.881565][T14680] worker_thread+0x6c8/0xf10 [ 273.886218][T14680] kthread+0x3c5/0x780 [ 273.890360][T14680] ret_from_fork+0x5d7/0x6f0 [ 273.895017][T14680] ret_from_fork_asm+0x1a/0x30 [ 273.899844][T14680] [ 273.899844][T14680] other info that might help us debug this: [ 273.899844][T14680] [ 273.910054][T14680] Chain exists of: [ 273.910054][T14680] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 273.910054][T14680] [ 273.922978][T14680] Possible interrupt unsafe locking scenario: [ 273.922978][T14680] [ 273.931269][T14680] CPU0 CPU1 [ 273.936608][T14680] ---- ---- [ 273.941943][T14680] lock(tasklist_lock); [ 273.946162][T14680] local_irq_disable(); [ 273.952887][T14680] lock(&dev->event_lock#2); [ 273.960060][T14680] lock(&new->fa_lock); [ 273.966797][T14680] [ 273.970226][T14680] lock(&dev->event_lock#2); [ 273.975055][T14680] [ 273.975055][T14680] *** DEADLOCK *** [ 273.975055][T14680] [ 273.983172][T14680] 6 locks held by syz.0.3904/14680: [ 273.988340][T14680] #0: ffff88802b9af118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 273.997451][T14680] #1: ffff88802b9a9230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 274.007522][T14680] #2: ffffffff8e5c1120 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 274.017152][T14680] #3: ffffffff8e5c1120 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 274.026693][T14680] #4: ffffffff8e5c1120 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x32/0xa30 [ 274.036762][T14680] #5: ffffffff8e5c1120 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 274.045786][T14680] [ 274.045786][T14680] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 274.056160][T14680] -> (&dev->event_lock#2){..-.}-{3:3} { [ 274.061696][T14680] IN-SOFTIRQ-W at: [ 274.065650][T14680] lock_acquire+0x179/0x350 [ 274.071786][T14680] _raw_spin_lock_irqsave+0x3a/0x60 [ 274.078613][T14680] input_inject_event+0x9f/0x3b0 [ 274.085177][T14680] led_set_brightness+0x217/0x290 [ 274.091840][T14680] led_trigger_event+0xda/0x270 [ 274.098322][T14680] kbd_bh+0x21b/0x300 [ 274.103936][T14680] tasklet_action_common+0x284/0x400 [ 274.110852][T14680] handle_softirqs+0x216/0x8e0 [ 274.117245][T14680] run_ksoftirqd+0x3a/0x60 [ 274.123289][T14680] smpboot_thread_fn+0x3f7/0xae0 [ 274.129855][T14680] kthread+0x3c5/0x780 [ 274.135548][T14680] ret_from_fork+0x5d7/0x6f0 [ 274.141762][T14680] ret_from_fork_asm+0x1a/0x30 [ 274.148153][T14680] INITIAL USE at: [ 274.152021][T14680] lock_acquire+0x179/0x350 [ 274.158068][T14680] _raw_spin_lock_irqsave+0x3a/0x60 [ 274.164806][T14680] input_inject_event+0x9f/0x3b0 [ 274.171285][T14680] led_set_brightness+0x217/0x290 [ 274.177846][T14680] kbd_led_trigger_activate+0xcb/0x110 [ 274.184849][T14680] led_trigger_set+0x59a/0xc50 [ 274.191151][T14680] led_trigger_set_default+0x1e0/0x2e0 [ 274.198150][T14680] led_classdev_register_ext+0x7b8/0xa10 [ 274.205331][T14680] input_leds_connect+0x552/0x8e0 [ 274.211902][T14680] input_attach_handler.isra.0+0x184/0x260 [ 274.219247][T14680] input_register_device+0xab9/0x1180 [ 274.226158][T14680] atkbd_connect+0x5f8/0xa40 [ 274.232292][T14680] serio_driver_probe+0x7f/0xd0 [ 274.238682][T14680] really_probe+0x241/0xa90 [ 274.244769][T14680] __driver_probe_device+0x1de/0x440 [ 274.251611][T14680] driver_probe_device+0x4c/0x1b0 [ 274.258188][T14680] __driver_attach+0x283/0x580 [ 274.264497][T14680] bus_for_each_dev+0x13e/0x1d0 [ 274.270890][T14680] serio_handle_event+0x335/0xc30 [ 274.277453][T14680] process_one_work+0x9cc/0x1b70 [ 274.283934][T14680] worker_thread+0x6c8/0xf10 [ 274.290065][T14680] kthread+0x3c5/0x780 [ 274.295690][T14680] ret_from_fork+0x5d7/0x6f0 [ 274.301824][T14680] ret_from_fork_asm+0x1a/0x30 [ 274.308133][T14680] } [ 274.310608][T14680] ... key at: [] __key.7+0x0/0x40 [ 274.317701][T14680] [ 274.317701][T14680] the dependencies between the lock to be acquired [ 274.317710][T14680] and SOFTIRQ-irq-unsafe lock: [ 274.331179][T14680] -> (tasklist_lock){.+.+}-{3:3} { [ 274.336458][T14680] HARDIRQ-ON-R at: [ 274.340595][T14680] lock_acquire+0x179/0x350 [ 274.347085][T14680] _raw_read_lock+0x5f/0x70 [ 274.353571][T14680] __do_wait+0x105/0x890 [ 274.359801][T14680] do_wait+0x21e/0x5a0 [ 274.365859][T14680] kernel_wait+0x9f/0x160 [ 274.372166][T14680] call_usermodehelper_exec_work+0xf1/0x170 [ 274.380039][T14680] process_one_work+0x9cc/0x1b70 [ 274.386956][T14680] worker_thread+0x6c8/0xf10 [ 274.393524][T14680] kthread+0x3c5/0x780 [ 274.399566][T14680] ret_from_fork+0x5d7/0x6f0 [ 274.406130][T14680] ret_from_fork_asm+0x1a/0x30 [ 274.412886][T14680] SOFTIRQ-ON-R at: [ 274.417017][T14680] lock_acquire+0x179/0x350 [ 274.423502][T14680] _raw_read_lock+0x5f/0x70 [ 274.429981][T14680] __do_wait+0x105/0x890 [ 274.436203][T14680] do_wait+0x21e/0x5a0 [ 274.442254][T14680] kernel_wait+0x9f/0x160 [ 274.448554][T14680] call_usermodehelper_exec_work+0xf1/0x170 [ 274.456419][T14680] process_one_work+0x9cc/0x1b70 [ 274.463331][T14680] worker_thread+0x6c8/0xf10 [ 274.469892][T14680] kthread+0x3c5/0x780 [ 274.475934][T14680] ret_from_fork+0x5d7/0x6f0 [ 274.482497][T14680] ret_from_fork_asm+0x1a/0x30 [ 274.489239][T14680] INITIAL USE at: [ 274.493279][T14680] lock_acquire+0x179/0x350 [ 274.499680][T14680] _raw_write_lock_irq+0x36/0x50 [ 274.506525][T14680] copy_process+0x4caf/0x7690 [ 274.513101][T14680] kernel_clone+0xfc/0x930 [ 274.519416][T14680] user_mode_thread+0xc7/0x110 [ 274.526073][T14680] rest_init+0x23/0x2b0 [ 274.532121][T14680] start_kernel+0x3ee/0x4d0 [ 274.538516][T14680] x86_64_start_reservations+0x18/0x30 [ 274.545864][T14680] x86_64_start_kernel+0x130/0x190 [ 274.552862][T14680] common_startup_64+0x13e/0x148 [ 274.559688][T14680] INITIAL READ USE at: [ 274.564165][T14680] lock_acquire+0x179/0x350 [ 274.570996][T14680] _raw_read_lock+0x5f/0x70 [ 274.577824][T14680] __do_wait+0x105/0x890 [ 274.584393][T14680] do_wait+0x21e/0x5a0 [ 274.590798][T14680] kernel_wait+0x9f/0x160 [ 274.597462][T14680] call_usermodehelper_exec_work+0xf1/0x170 [ 274.605692][T14680] process_one_work+0x9cc/0x1b70 [ 274.612952][T14680] worker_thread+0x6c8/0xf10 [ 274.619860][T14680] kthread+0x3c5/0x780 [ 274.626248][T14680] ret_from_fork+0x5d7/0x6f0 [ 274.633157][T14680] ret_from_fork_asm+0x1a/0x30 [ 274.640246][T14680] } [ 274.642891][T14680] ... key at: [] tasklist_lock+0x18/0x40 [ 274.650766][T14680] ... acquired at: [ 274.654716][T14680] _raw_read_lock+0x5f/0x70 [ 274.659372][T14680] send_sigio+0xb8/0x3e0 [ 274.663769][T14680] dnotify_handle_event+0x15e/0x2b0 [ 274.669120][T14680] fsnotify_handle_inode_event.isra.0+0x1df/0x3f0 [ 274.675682][T14680] fsnotify+0x13d6/0x1dc0 [ 274.680158][T14680] path_openat+0x1b50/0x2cb0 [ 274.684896][T14680] do_filp_open+0x20b/0x470 [ 274.689555][T14680] do_sys_openat2+0x11b/0x1d0 [ 274.694385][T14680] __x64_sys_openat+0x174/0x210 [ 274.699388][T14680] do_syscall_64+0xcd/0x4c0 [ 274.704069][T14680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.710111][T14680] [ 274.712413][T14680] -> (&f_owner->lock){....}-{3:3} { [ 274.717686][T14680] INITIAL USE at: [ 274.721640][T14680] lock_acquire+0x179/0x350 [ 274.727862][T14680] _raw_write_lock_irq+0x36/0x50 [ 274.734516][T14680] __f_setown+0x61/0x3c0 [ 274.740479][T14680] fcntl_dirnotify+0x7b1/0xb60 [ 274.746957][T14680] do_fcntl+0xe62/0x15a0 [ 274.752917][T14680] __x64_sys_fcntl+0x163/0x200 [ 274.759395][T14680] do_syscall_64+0xcd/0x4c0 [ 274.765616][T14680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.773220][T14680] INITIAL READ USE at: [ 274.777614][T14680] lock_acquire+0x179/0x350 [ 274.784291][T14680] _raw_read_lock_irq+0x67/0x80 [ 274.791292][T14680] f_getown+0x57/0x300 [ 274.797509][T14680] sock_ioctl+0x1f2/0x6b0 [ 274.803987][T14680] __x64_sys_ioctl+0x18e/0x210 [ 274.810903][T14680] do_syscall_64+0xcd/0x4c0 [ 274.817556][T14680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.825595][T14680] } [ 274.828153][T14680] ... key at: [] __key.1+0x0/0x40 [ 274.835325][T14680] ... acquired at: [ 274.839188][T14680] _raw_read_lock_irqsave+0x74/0x90 [ 274.844542][T14680] send_sigio+0x31/0x3e0 [ 274.848937][T14680] kill_fasync+0x214/0x510 [ 274.853505][T14680] sock_wake_async+0x132/0x160 [ 274.858425][T14680] mptcp_close_wake_up+0x2eb/0x600 [ 274.863686][T14680] __mptcp_close_ssk+0xd54/0x14d0 [ 274.868862][T14680] mptcp_destroy_common+0x65a/0xaf0 [ 274.874213][T14680] mptcp_disconnect+0x228/0x870 [ 274.879220][T14680] inet_shutdown+0x26f/0x440 [ 274.883962][T14680] __sys_shutdown+0x116/0x1b0 [ 274.888791][T14680] __x64_sys_shutdown+0x53/0x80 [ 274.893794][T14680] do_syscall_64+0xcd/0x4c0 [ 274.898449][T14680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.904490][T14680] [ 274.906790][T14680] -> (&new->fa_lock){....}-{3:3} { [ 274.911890][T14680] INITIAL USE at: [ 274.915758][T14680] lock_acquire+0x179/0x350 [ 274.921806][T14680] _raw_write_lock_irq+0x36/0x50 [ 274.928284][T14680] fasync_remove_entry+0xb2/0x1e0 [ 274.934850][T14680] fasync_helper+0xaf/0xd0 [ 274.940809][T14680] lease_modify+0x232/0x500 [ 274.946859][T14680] locks_remove_file+0x29e/0x5c0 [ 274.953337][T14680] __fput+0x351/0xb70 [ 274.958861][T14680] task_work_run+0x150/0x240 [ 274.964989][T14680] exit_to_user_mode_loop+0xeb/0x110 [ 274.971821][T14680] do_syscall_64+0x3f6/0x4c0 [ 274.977976][T14680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.985411][T14680] INITIAL READ USE at: [ 274.989716][T14680] lock_acquire+0x179/0x350 [ 274.996203][T14680] _raw_read_lock_irqsave+0x74/0x90 [ 275.003444][T14680] kill_fasync+0x138/0x510 [ 275.009940][T14680] pipe_release+0x1a7/0x320 [ 275.016421][T14680] __fput+0x402/0xb70 [ 275.022381][T14680] fput_close_sync+0x118/0x210 [ 275.029212][T14680] __x64_sys_close+0x8b/0x120 [ 275.035870][T14680] do_syscall_64+0xcd/0x4c0 [ 275.042350][T14680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.050219][T14680] } [ 275.052695][T14680] ... key at: [] __key.0+0x0/0x40 [ 275.059785][T14680] ... acquired at: [ 275.063564][T14680] lock_acquire+0x179/0x350 [ 275.068224][T14680] _raw_read_lock_irqsave+0x74/0x90 [ 275.073577][T14680] kill_fasync+0x138/0x510 [ 275.078165][T14680] mousedev_notify_readers+0x6d8/0xa30 [ 275.083782][T14680] mousedev_event+0x84e/0x1490 [ 275.088703][T14680] input_handle_events_default+0x119/0x1b0 [ 275.094679][T14680] input_pass_values+0x74e/0x880 [ 275.099766][T14680] input_handle_event+0xf00/0x14d0 [ 275.105027][T14680] input_inject_event+0x1e8/0x3b0 [ 275.110201][T14680] evdev_write+0x457/0x750 [ 275.114773][T14680] vfs_write+0x2a0/0x1150 [ 275.119265][T14680] ksys_write+0x1f8/0x250 [ 275.123744][T14680] do_syscall_64+0xcd/0x4c0 [ 275.128402][T14680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.134444][T14680] [ 275.136752][T14680] [ 275.136752][T14680] stack backtrace: [ 275.142626][T14680] CPU: 1 UID: 0 PID: 14680 Comm: syz.0.3904 Not tainted 6.16.0-syzkaller-11364-g3c4a063b1f8a #0 PREEMPT(full) [ 275.142646][T14680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.142654][T14680] Call Trace: [ 275.142661][T14680] [ 275.142667][T14680] dump_stack_lvl+0x116/0x1f0 [ 275.142690][T14680] check_irq_usage+0x7dc/0x920 [ 275.142713][T14680] ? check_path.constprop.0+0x24/0x50 [ 275.142734][T14680] ? __lock_acquire+0x12bc/0x1ce0 [ 275.142753][T14680] __lock_acquire+0x12bc/0x1ce0 [ 275.142776][T14680] lock_acquire+0x179/0x350 [ 275.142795][T14680] ? kill_fasync+0x138/0x510 [ 275.142815][T14680] _raw_read_lock_irqsave+0x74/0x90 [ 275.142834][T14680] ? kill_fasync+0x138/0x510 [ 275.142851][T14680] kill_fasync+0x138/0x510 [ 275.142869][T14680] mousedev_notify_readers+0x6d8/0xa30 [ 275.142894][T14680] mousedev_event+0x84e/0x1490 [ 275.142914][T14680] ? __pfx_mousedev_event+0x10/0x10 [ 275.142934][T14680] ? lock_acquire+0x179/0x350 [ 275.142953][T14680] input_handle_events_default+0x119/0x1b0 [ 275.142975][T14680] input_pass_values+0x74e/0x880 [ 275.142990][T14680] input_handle_event+0xf00/0x14d0 [ 275.143003][T14680] ? _copy_from_user+0x59/0xd0 [ 275.143019][T14680] input_inject_event+0x1e8/0x3b0 [ 275.143034][T14680] evdev_write+0x457/0x750 [ 275.143050][T14680] ? __pfx_evdev_write+0x10/0x10 [ 275.143065][T14680] ? bpf_lsm_file_permission+0x9/0x10 [ 275.143082][T14680] ? security_file_permission+0x71/0x210 [ 275.143100][T14680] ? rw_verify_area+0xcf/0x6c0 [ 275.143120][T14680] ? __pfx_evdev_write+0x10/0x10 [ 275.143133][T14680] vfs_write+0x2a0/0x1150 [ 275.143147][T14680] ? __pfx_vfs_write+0x10/0x10 [ 275.143159][T14680] ? find_held_lock+0x2b/0x80 [ 275.143174][T14680] ? __fget_files+0x204/0x3c0 [ 275.143188][T14680] ? __fget_files+0x20e/0x3c0 [ 275.143204][T14680] ksys_write+0x1f8/0x250 [ 275.143216][T14680] ? __pfx_ksys_write+0x10/0x10 [ 275.143231][T14680] do_syscall_64+0xcd/0x4c0 [ 275.143255][T14680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.143268][T14680] RIP: 0033:0x7f4a9c78eb69 [ 275.143280][T14680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.143293][T14680] RSP: 002b:00007f4a9d6c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 275.143306][T14680] RAX: ffffffffffffffda RBX: 00007f4a9c9b5fa0 RCX: 00007f4a9c78eb69 [ 275.143315][T14680] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000003 [ 275.143323][T14680] RBP: 00007f4a9c811df1 R08: 0000000000000000 R09: 0000000000000000 [ 275.143331][T14680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.143339][T14680] R13: 0000000000000000 R14: 00007f4a9c9b5fa0 R15: 00007ffde617dd98 [ 275.143351][T14680] [ 275.411630][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.730340][ T5958] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 275.880388][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 275.886780][ T5958] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 275.894860][ T5958] usb 4-1: config 0 has no interface number 0 [ 275.902316][ T5958] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 275.911392][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.919352][ T5958] usb 4-1: Product: syz [ 275.923517][ T5958] usb 4-1: Manufacturer: syz [ 275.928096][ T5958] usb 4-1: SerialNumber: syz [ 275.933341][ T5958] usb 4-1: config 0 descriptor?? [ 275.939175][ T5958] smsc95xx v2.0.0 [ 276.344357][ T5958] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 276.355121][ T5958] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 276.766100][ T5958] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 276.776962][ T5958] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 276.786973][ T5958] usb 4-1: USB disconnect, device number 36