last executing test programs: 52.442014432s ago: executing program 4 (id=930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 52.363218544s ago: executing program 4 (id=931): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x9, 0x12) 52.363082383s ago: executing program 4 (id=932): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_io_uring_setup(0x3490, &(0x7f00000035c0)={0x0, 0x10, 0x10100, 0x0, 0x6}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000600)=@hci}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) 52.329478886s ago: executing program 4 (id=933): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 52.280565531s ago: executing program 4 (id=935): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file7\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 52.007140267s ago: executing program 4 (id=940): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_PROTOCOL={0x5}]}}}]}, 0x48}}, 0x0) 51.903764447s ago: executing program 32 (id=940): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_PROTOCOL={0x5}]}}}]}, 0x48}}, 0x0) 2.635211907s ago: executing program 2 (id=1895): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x400, 0x3, 0x0, 0x10000, 0x16, "0f0087fa00"}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000002c0)=0xffff) 2.557810156s ago: executing program 2 (id=1898): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) unshare(0x62040200) 2.41014806s ago: executing program 2 (id=1902): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r1, 0x0) setreuid(0x0, r1) 2.347646689s ago: executing program 2 (id=1905): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) 1.711980865s ago: executing program 2 (id=1916): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='fib6_table_lookup\x00', r0, 0x0, 0x800000000cada}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}], 0x1, 0x0) 1.591754626s ago: executing program 2 (id=1918): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r1, 0x4b2f, 0x7) 1.410953101s ago: executing program 0 (id=1922): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xe0, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 1.299200501s ago: executing program 0 (id=1923): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r0, 0x1) 821.84646ms ago: executing program 3 (id=1927): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, 0x0}) 751.175125ms ago: executing program 1 (id=1928): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8814, &(0x7f0000000000)={0x11, 0x888e, r2, 0x1, 0x1, 0x6, @local}, 0x14) 749.331111ms ago: executing program 1 (id=1929): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0x100000, 0x16000, 0xfdffffff}) 749.03465ms ago: executing program 3 (id=1930): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000003240)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207", 0x31, 0x6d91fb6106d8d10c, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) 709.033521ms ago: executing program 3 (id=1931): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000073000040"]) 664.948307ms ago: executing program 5 (id=1932): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r1}, 0x10, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="010000008be0a917f35912a900000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 622.476854ms ago: executing program 5 (id=1933): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001700)={r2, 0x6474311b}, &(0x7f0000000140)=0x8) 610.095182ms ago: executing program 1 (id=1934): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5, 0x1, 0x3, 0x2, 0x3, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 565.575369ms ago: executing program 3 (id=1935): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401002400128009000100626f6e6400000000140002800500010006000000080003000000000008000a00", @ANYRES32=r2], 0x4c}}, 0x0) 511.796284ms ago: executing program 1 (id=1936): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000304006c000500190107000000080026006c09000056033300"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) 442.26099ms ago: executing program 5 (id=1937): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 374.076219ms ago: executing program 0 (id=1938): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e26, 0x0, @empty}, 0x1c) 323.128489ms ago: executing program 5 (id=1939): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r1, 0x0, 0x0, 0xce2c, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 240.789664ms ago: executing program 0 (id=1940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="25003300d0000000080211000001080211000000505050505050d00003"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 199.396221ms ago: executing program 1 (id=1941): unshare(0x22020600) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'i'}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fd"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 109.147542ms ago: executing program 5 (id=1942): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000300)={0x7, &(0x7f00000002c0)=[{0xffff, 0x6, 0xe8, 0x5}, {0x3ff, 0x9, 0xe9, 0x8}, {0x1, 0x80, 0x6, 0x8}, {0x5, 0x42, 0x0, 0x5}, {0xba, 0xe, 0x59, 0x8001}, {0x7, 0x9, 0xbd, 0x7fffffff}, {0x4, 0x83, 0x9, 0x200}]}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000300)}, 0x20) 108.976689ms ago: executing program 0 (id=1943): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x7, 0x3}}]}}}]}, 0x60}}, 0x0) 107.795076ms ago: executing program 3 (id=1944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x652}, 0x18) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) 67.678537ms ago: executing program 1 (id=1945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000000000005010040"]) 40.420718ms ago: executing program 5 (id=1946): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x480d4}, 0x804) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 20.329182ms ago: executing program 3 (id=1947): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x101600, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 0s ago: executing program 0 (id=1948): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x65a, 0x0, 0x2) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010300a6ff0540cdabeecdb905000000010902220001000000000904000001010351000905f6fefffffff000072501"], 0x0) kernel console output (not intermixed with test programs): number 0 [ 94.706670][ T5857] usb 3-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 94.719335][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.727878][ T5857] usb 3-1: Product: syz [ 94.732049][ T5857] usb 3-1: Manufacturer: syz [ 94.739802][ T5857] usb 3-1: SerialNumber: syz [ 94.749152][ T9] usb 2-1: USB disconnect, device number 5 [ 94.764357][ T5857] usb 3-1: config 0 descriptor?? [ 94.790829][ T5857] io_ti 3-1:0.215: required endpoints missing [ 94.854565][ T5825] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input12 [ 95.031466][ T5857] usb 3-1: USB disconnect, device number 7 [ 95.083530][ T5825] usb 4-1: USB disconnect, device number 5 [ 95.089384][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 95.089443][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 95.119439][ T5825] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 95.192254][ T7040] netlink: 36 bytes leftover after parsing attributes in process `syz.4.435'. [ 95.206120][ T7040] netlink: 36 bytes leftover after parsing attributes in process `syz.4.435'. [ 95.215250][ T7040] netlink: 36 bytes leftover after parsing attributes in process `syz.4.435'. [ 95.247272][ T7040] netlink: 36 bytes leftover after parsing attributes in process `syz.4.435'. [ 95.256786][ T7040] netlink: 36 bytes leftover after parsing attributes in process `syz.4.435'. [ 95.268860][ T7040] netlink: 36 bytes leftover after parsing attributes in process `syz.4.435'. [ 95.333670][ T872] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 95.342684][ T872] ath9k_htc: Failed to initialize the device [ 95.349778][ T7040] netlink: 36 bytes leftover after parsing attributes in process `syz.4.435'. [ 95.350281][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 95.361317][ T7040] netlink: 36 bytes leftover after parsing attributes in process `syz.4.435'. [ 95.443396][ T7040] netlink: 36 bytes leftover after parsing attributes in process `syz.4.435'. [ 95.702866][ T5857] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 95.761214][ T7064] loop6: detected capacity change from 0 to 524287999 [ 95.785678][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.794896][ C0] buffer_io_error: 4 callbacks suppressed [ 95.794909][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.820157][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.829364][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.837489][ T7064] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.862787][ T7064] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.876203][ T7065] SELinux: ebitmap: truncated map [ 95.886047][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 95.894717][ T5857] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 95.907491][ T58] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 95.914494][ T7064] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.922787][ T5857] usb 1-1: config 0 has no interface number 0 [ 95.935866][ T5857] usb 1-1: config 0 interface 184 has no altsetting 0 [ 95.955018][ T5857] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 95.964336][ T7065] SELinux: failed to load policy [ 95.964350][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.982559][ T7064] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.999516][ T5857] usb 1-1: Product: syz [ 96.003924][ T5857] usb 1-1: Manufacturer: syz [ 96.008519][ T5857] usb 1-1: SerialNumber: syz [ 96.017703][ T5857] usb 1-1: config 0 descriptor?? [ 96.025810][ T7064] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.036481][ T5857] smsc75xx v1.0.0 [ 96.040137][ T5857] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 96.052959][ T7064] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.058105][ T5857] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 96.065339][ T7064] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.078300][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 96.079830][ T58] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 96.096303][ T58] usb 3-1: config 0 has no interface number 0 [ 96.106077][ T7064] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.132907][ T58] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 96.143664][ T7064] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.151543][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.161199][ T7064] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.161866][ T58] usb 3-1: Product: syz [ 96.174453][ T58] usb 3-1: Manufacturer: syz [ 96.177231][ T7064] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.194282][ T7064] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.202334][ T7064] ldm_validate_partition_table(): Disk read failed. [ 96.202410][ T58] usb 3-1: SerialNumber: syz [ 96.240524][ T58] usb 3-1: config 0 descriptor?? [ 96.253569][ T58] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 96.306029][ T7064] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.317582][ T5857] usb 1-1: USB disconnect, device number 8 [ 96.329767][ T7064] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.354968][ T7064] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.370552][ T7064] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.379242][ T7064] Dev loop6: unable to read RDB block 0 [ 96.397821][ T7064] loop6: unable to read partition table [ 96.404225][ T7064] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 96.470086][ T58] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 96.526198][ T58] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 96.642548][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 96.693817][ T53] Bluetooth: hci1: command 0x0405 tx timeout [ 96.778844][ T7097] bridge_slave_0: left allmulticast mode [ 96.787829][ T7097] bridge_slave_0: left promiscuous mode [ 96.796107][ T7097] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.810580][ T7097] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 96.838989][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.867353][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.890026][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 96.906764][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.915998][ T9] usb 4-1: SerialNumber: syz [ 96.946728][ T7100] netlink: 368 bytes leftover after parsing attributes in process `syz.4.460'. [ 96.977695][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 96.978985][ T872] usb 3-1: USB disconnect, device number 8 [ 97.019001][ T872] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 97.048071][ T872] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 97.071295][ T872] quatech2 3-1:0.51: device disconnected [ 97.138020][ T9] usb 4-1: 0:2 : does not exist [ 97.170123][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 97.170138][ T30] audit: type=1400 audit(1744490832.092:387): avc: denied { bind } for pid=7111 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.208237][ T9] usb 4-1: USB disconnect, device number 6 [ 97.530056][ T7129] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 97.543481][ T7129] batman_adv: batadv0: Adding interface: ip6gretap1 [ 97.550311][ T7129] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.593674][ T7129] batman_adv: batadv0: Interface activated: ip6gretap1 [ 97.610761][ T7131] vxcan1: entered allmulticast mode [ 97.616792][ T7132] vxcan1: left allmulticast mode [ 98.394904][ T5857] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 98.422770][ T872] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 98.459350][ T7193] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 98.478702][ T7193] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 98.554586][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 98.565412][ T5857] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 98.574149][ T7199] sctp: [Deprecated]: syz.4.504 (pid 7199) Use of int in max_burst socket option. [ 98.574149][ T7199] Use struct sctp_assoc_value instead [ 98.586919][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.604946][ T872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.626221][ T5857] usb 1-1: config 0 descriptor?? [ 98.637210][ T872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.640635][ T5857] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 98.684070][ T872] usb 4-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 98.706824][ T872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.710845][ T30] audit: type=1400 audit(1744490833.632:388): avc: denied { create } for pid=7200 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.753328][ T872] usb 4-1: config 0 descriptor?? [ 98.805335][ T30] audit: type=1400 audit(1744490833.732:389): avc: denied { map } for pid=7202 comm="syz.1.507" path="socket:[14345]" dev="sockfs" ino=14345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 99.175323][ T872] hid-generic 0003:05AC:4262.0003: unbalanced delimiter at end of report description [ 99.216525][ T872] hid-generic 0003:05AC:4262.0003: probe with driver hid-generic failed with error -22 [ 99.441088][ T58] usb 4-1: USB disconnect, device number 7 [ 99.483078][ T5857] gspca_nw80x: reg_r err -71 [ 99.492714][ T5857] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 99.520100][ T5857] usb 1-1: USB disconnect, device number 9 [ 99.561288][ T7235] vivid-000: disconnect [ 99.570622][ T7232] vivid-000: reconnect [ 99.879786][ T7251] loop4: detected capacity change from 0 to 7 [ 99.889049][ T7251] Dev loop4: unable to read RDB block 7 [ 99.897731][ T30] audit: type=1400 audit(1744490834.822:390): avc: denied { accept } for pid=7253 comm="syz.1.527" path="/83/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 99.900996][ T7251] loop4: unable to read partition table [ 99.926362][ T7251] loop4: partition table beyond EOD, truncated [ 99.941088][ T7251] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 100.274541][ T7273] __nla_validate_parse: 3 callbacks suppressed [ 100.274557][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 100.376593][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 100.378909][ T30] audit: type=1400 audit(1744490835.302:391): avc: denied { nlmsg_read } for pid=7274 comm="syz.4.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.453734][ T7281] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 100.463750][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 100.479584][ T30] audit: type=1400 audit(1744490835.402:392): avc: denied { bind } for pid=7280 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 100.500042][ T30] audit: type=1400 audit(1744490835.402:393): avc: denied { name_bind } for pid=7280 comm="syz.4.540" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 100.522223][ T30] audit: type=1400 audit(1744490835.402:394): avc: denied { node_bind } for pid=7280 comm="syz.4.540" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 100.542817][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.555380][ T30] audit: type=1400 audit(1744490835.402:395): avc: denied { setopt } for pid=7280 comm="syz.4.540" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 100.575732][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.618304][ T30] audit: type=1400 audit(1744490835.512:396): avc: denied { ioctl } for pid=7283 comm="syz.1.541" path="socket:[14539]" dev="sockfs" ino=14539 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 100.642852][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.650157][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 100.659306][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.671333][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 100.681257][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.697123][ T9] usb 4-1: Product: syz [ 100.701373][ T9] usb 4-1: Manufacturer: syz [ 100.710748][ T9] usb 4-1: SerialNumber: syz [ 100.719128][ T9] usb 4-1: config 0 descriptor?? [ 100.843753][ T58] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 100.933175][ T5831] Bluetooth: hci3: command 0x206a tx timeout [ 100.934236][ T53] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 100.952068][ T7306] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 100.952068][ T7306] The task syz.2.549 (7306) triggered the difference, watch for misbehavior. [ 101.002581][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 101.009280][ T58] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 101.018125][ T58] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 101.025397][ T58] usb 1-1: config 0 has no interface number 0 [ 101.034469][ T58] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 101.043746][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.051781][ T58] usb 1-1: Product: syz [ 101.058740][ T58] usb 1-1: Manufacturer: syz [ 101.067541][ T58] usb 1-1: SerialNumber: syz [ 101.074853][ T58] usb 1-1: config 0 descriptor?? [ 101.086975][ T58] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 101.094998][ T58] usb 1-1: No valid video chain found. [ 101.153920][ T9] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 101.284070][ T7312] netlink: 14 bytes leftover after parsing attributes in process `syz.1.553'. [ 101.289463][ T5825] usb 1-1: USB disconnect, device number 10 [ 101.356491][ T9] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 101.369747][ T9] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 101.568170][ T5857] usb 4-1: USB disconnect, device number 8 [ 101.662749][ T58] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 101.754367][ T7322] netem: incorrect ge model size [ 101.759628][ T7322] netem: change failed [ 101.815010][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 101.835993][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.847796][ T58] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 101.865388][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.878073][ T58] usb 5-1: config 0 descriptor?? [ 101.890975][ T7328] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 102.174153][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 102.174170][ T30] audit: type=1400 audit(1744490837.102:405): avc: denied { setopt } for pid=7334 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.237840][ T30] audit: type=1326 audit(1744490837.162:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7314 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95718d169 code=0x7fc00000 [ 102.261094][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.313601][ T58] nintendo 0003:057E:2019.0004: hidraw0: USB HID v80.03 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 102.357978][ T30] audit: type=1400 audit(1744490837.282:407): avc: denied { connect } for pid=7339 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.377359][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.403648][ T58] nintendo 0003:057E:2019.0004: Failed to get joycon info; ret=-38 [ 102.441868][ T58] nintendo 0003:057E:2019.0004: Failed to retrieve controller info; ret=-38 [ 102.456340][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.567'. [ 102.471017][ T58] nintendo 0003:057E:2019.0004: Failed to initialize controller; ret=-38 [ 102.501611][ T58] nintendo 0003:057E:2019.0004: probe - fail = -38 [ 102.523218][ T58] nintendo 0003:057E:2019.0004: probe with driver nintendo failed with error -38 [ 102.540661][ T58] usb 5-1: USB disconnect, device number 6 [ 102.624112][ T1149] af_packet: tpacket_rcv: packet too big, clamped from 66 to 4294967286. macoff=82 [ 102.738855][ T7356] capability: warning: `syz.3.572' uses deprecated v2 capabilities in a way that may be insecure [ 102.800751][ T30] audit: type=1400 audit(1744490837.722:408): avc: denied { bind } for pid=7351 comm="syz.1.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.868358][ T30] audit: type=1400 audit(1744490837.772:409): avc: denied { getopt } for pid=7357 comm="syz.2.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.079926][ T7371] sp0: Synchronizing with TNC [ 103.244606][ T7381] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 103.592769][ T5857] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.752750][ T5857] usb 2-1: Using ep0 maxpacket: 8 [ 103.765269][ T5857] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.792722][ T5857] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.805199][ T30] audit: type=1400 audit(1744490838.732:410): avc: denied { write } for pid=7404 comm="syz.4.597" name="mdstat" dev="proc" ino=4026532011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 103.828052][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.828338][ T5857] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.828363][ T5857] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.828388][ T5857] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.828419][ T5857] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 103.828438][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.968040][ T5857] usb 2-1: config 0 descriptor?? [ 104.367350][ T9] kernel read not supported for file /dsp (pid: 9 comm: kworker/0:0) [ 104.396054][ T5857] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 104.417126][ T5857] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 104.423406][ T30] audit: type=1400 audit(1744490839.342:411): avc: denied { name_bind } for pid=7428 comm="syz.3.606" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 104.432594][ T5857] logitech 0003:046D:CA04.0005: item fetching failed at offset 2/5 [ 104.538772][ T5857] logitech 0003:046D:CA04.0005: parse failed [ 104.559520][ T5857] logitech 0003:046D:CA04.0005: probe with driver logitech failed with error -22 [ 104.636880][ T5857] usb 2-1: USB disconnect, device number 6 [ 104.868149][ T30] audit: type=1400 audit(1744490839.792:412): avc: denied { ioctl } for pid=7439 comm="syz.3.610" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.081957][ T7448] kvm: kvm [7447]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x16 [ 105.266359][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 105.391288][ T30] audit: type=1400 audit(1744490840.312:413): avc: denied { append } for pid=7463 comm="syz.4.619" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 105.445467][ T30] audit: type=1400 audit(1744490840.342:414): avc: denied { map } for pid=7463 comm="syz.4.619" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 106.132639][ T5831] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 106.132685][ T5835] Bluetooth: hci2: command 0x206a tx timeout [ 106.359457][ T7509] syz.2.641 uses obsolete (PF_INET,SOCK_PACKET) [ 106.708697][ T7533] delete_channel: no stack [ 106.728401][ T7532] delete_channel: no stack [ 106.803928][ T872] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 106.914548][ T5857] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 106.975426][ T872] usb 2-1: Using ep0 maxpacket: 16 [ 106.996949][ T872] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 107.006759][ T872] usb 2-1: config 0 has no interface number 0 [ 107.032537][ T872] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 107.052531][ T872] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 107.065330][ T872] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 107.087286][ T872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.096388][ T5857] usb 1-1: config index 0 descriptor too short (expected 4114, got 18) [ 107.098044][ T872] usb 2-1: Product: syz [ 107.108891][ T872] usb 2-1: Manufacturer: syz [ 107.119472][ T5857] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 107.120076][ T872] usb 2-1: SerialNumber: syz [ 107.156835][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.159631][ T872] usb 2-1: config 0 descriptor?? [ 107.173849][ T5857] usb 1-1: Product: syz [ 107.178648][ T5857] usb 1-1: Manufacturer: syz [ 107.183865][ T5857] usb 1-1: SerialNumber: syz [ 107.195425][ T5857] usb 1-1: config 0 descriptor?? [ 107.213006][ T7522] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.220265][ T7522] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.246456][ T7553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 107.255550][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 107.256348][ T53] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 107.262862][ T7553] netlink: 32 bytes leftover after parsing attributes in process `syz.2.662'. [ 107.375863][ T7555] kvm: apic: phys broadcast and lowest prio [ 107.377567][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 107.377580][ T30] audit: type=1400 audit(1744490842.302:422): avc: denied { setopt } for pid=7556 comm="syz.2.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.463473][ T7522] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.471057][ T7522] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.812036][ T5857] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 107.978906][ T30] audit: type=1400 audit(1744490842.902:423): avc: denied { append } for pid=7585 comm="syz.4.675" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.024889][ T5857] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 108.041330][ T30] audit: type=1400 audit(1744490842.932:424): avc: denied { map } for pid=7585 comm="syz.4.675" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.064130][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.074887][ T5857] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 108.095045][ T5857] asix 1-1:0.0: probe with driver asix failed with error -71 [ 108.113042][ T872] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 108.121450][ T5857] usb 1-1: USB disconnect, device number 11 [ 108.133823][ T30] audit: type=1400 audit(1744490842.932:425): avc: denied { execute } for pid=7585 comm="syz.4.675" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.158074][ T872] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 108.179629][ T872] asix 2-1:0.251: probe with driver asix failed with error -71 [ 108.209504][ T7593] sctp: [Deprecated]: syz.4.677 (pid 7593) Use of int in max_burst socket option deprecated. [ 108.209504][ T7593] Use struct sctp_assoc_value instead [ 108.211437][ T872] usb 2-1: USB disconnect, device number 7 [ 108.575136][ T30] audit: type=1400 audit(1744490843.502:426): avc: denied { name_bind } for pid=7610 comm="syz.3.685" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 108.596532][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.667071][ T7613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.687'. [ 108.686381][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.688'. [ 108.798282][ C0] hrtimer: interrupt took 12762 ns [ 108.895175][ T30] audit: type=1400 audit(1744490843.812:427): avc: denied { read write } for pid=7625 comm="syz.1.693" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.980363][ T30] audit: type=1400 audit(1744490843.812:428): avc: denied { open } for pid=7625 comm="syz.1.693" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.062767][ T30] audit: type=1400 audit(1744490843.822:429): avc: denied { ioctl } for pid=7625 comm="syz.1.693" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.382981][ T1203] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 109.455240][ T7658] netlink: 'syz.3.708': attribute type 21 has an invalid length. [ 109.464221][ T7658] netlink: 'syz.3.708': attribute type 6 has an invalid length. [ 109.474924][ T7658] netlink: 132 bytes leftover after parsing attributes in process `syz.3.708'. [ 109.475380][ T7660] overlay: filesystem on ./file1 not supported [ 109.483991][ T30] audit: type=1400 audit(1744490844.402:430): avc: denied { mounton } for pid=7659 comm="syz.1.709" path="/117/file0/bus" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 109.516313][ T7658] netlink: 'syz.3.708': attribute type 21 has an invalid length. [ 109.524226][ T7658] netlink: 'syz.3.708': attribute type 6 has an invalid length. [ 109.532423][ T7658] netlink: 132 bytes leftover after parsing attributes in process `syz.3.708'. [ 109.557156][ T7658] Zero length message leads to an empty skb [ 109.566513][ T30] audit: type=1400 audit(1744490844.492:431): avc: denied { unmount } for pid=6003 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 109.576693][ T1203] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 109.603268][ T1203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.641823][ T1203] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 109.661037][ T1203] usb 3-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 109.671348][ T1203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.682384][ T1203] usb 3-1: config 0 descriptor?? [ 110.098105][ T1203] hid (null): report_id 0 is invalid [ 110.119729][ T1203] nzxt-smart2 0003:1E71:2019.0006: unknown main item tag 0x0 [ 110.137365][ T1203] nzxt-smart2 0003:1E71:2019.0006: report_id 0 is invalid [ 110.152586][ T1203] nzxt-smart2 0003:1E71:2019.0006: item 0 0 1 8 parsing failed [ 110.171000][ T1203] nzxt-smart2 0003:1E71:2019.0006: probe with driver nzxt-smart2 failed with error -22 [ 110.379806][ T5902] usb 3-1: USB disconnect, device number 9 [ 110.826286][ T7702] sctp: [Deprecated]: syz.0.727 (pid 7702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.826286][ T7702] Use struct sctp_sack_info instead [ 111.370775][ T7731] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 111.410209][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.219276][ T7780] mmap: syz.3.762 (7780) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.262599][ T7782] netem: incorrect gi model size [ 112.271101][ T7782] netem: change failed [ 112.483699][ T7798] loop6: detected capacity change from 0 to 524287999 [ 112.583607][ T30] kauditd_printk_skb: 147 callbacks suppressed [ 112.583624][ T30] audit: type=1400 audit(1744490847.512:579): avc: denied { ioctl } for pid=7800 comm="syz.3.772" path="socket:[16796]" dev="sockfs" ino=16796 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.586320][ T7802] : renamed from bond0 (while UP) [ 112.615668][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.786579][ T30] audit: type=1326 audit(1744490847.712:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645558d169 code=0x7ffc0000 [ 112.823475][ T30] audit: type=1326 audit(1744490847.732:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645558d169 code=0x7ffc0000 [ 112.913360][ T30] audit: type=1326 audit(1744490847.732:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f645558d169 code=0x7ffc0000 [ 112.974107][ T30] audit: type=1326 audit(1744490847.732:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645558d169 code=0x7ffc0000 [ 113.012422][ T30] audit: type=1326 audit(1744490847.732:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645558d169 code=0x7ffc0000 [ 113.063687][ T7823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.782'. [ 113.175207][ T7832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.212595][ T1203] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 113.334224][ T5902] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 113.372516][ T1203] usb 5-1: Using ep0 maxpacket: 16 [ 113.379715][ T1203] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.392582][ T872] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 113.394802][ T1203] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.422102][ T1203] usb 5-1: config 0 interface 0 has no altsetting 0 [ 113.431892][ T1203] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 113.447493][ T1203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.465275][ T1203] usb 5-1: config 0 descriptor?? [ 113.498488][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 113.511005][ T5902] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 113.514210][ T7852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.522538][ T5902] usb 2-1: config 0 has no interface number 0 [ 113.539331][ T5902] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.553418][ T5902] usb 2-1: config 0 interface 85 has no altsetting 0 [ 113.563965][ T872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.590120][ T872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.598422][ T5902] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 113.613652][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.621941][ T872] usb 3-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 113.630384][ T5902] usb 2-1: Product: syz [ 113.637491][ T872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.637706][ T5902] usb 2-1: Manufacturer: syz [ 113.647662][ T872] usb 3-1: config 0 descriptor?? [ 113.669864][ T5902] usb 2-1: SerialNumber: syz [ 113.685655][ T5902] usb 2-1: config 0 descriptor?? [ 113.829045][ T30] audit: type=1804 audit(1744490848.752:585): pid=7868 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm=6C2586CE36DB0CCF197CC94F7FCE8F name="/newroot/133/file0" dev="tmpfs" ino=694 res=1 errno=0 [ 113.897835][ T1203] cougar 0003:060B:500A.0007: unexpected long global item [ 113.913578][ T1203] cougar 0003:060B:500A.0007: parse failed [ 113.919854][ T1203] cougar 0003:060B:500A.0007: probe with driver cougar failed with error -22 [ 114.128248][ T1203] usb 5-1: USB disconnect, device number 7 [ 114.129642][ T872] logitech-hidpp-device 0003:046D:C343.0008: item 0 1 0 9 parsing failed [ 114.146961][ T872] logitech-hidpp-device 0003:046D:C343.0008: hidpp_probe:parse failed [ 114.155557][ T872] logitech-hidpp-device 0003:046D:C343.0008: probe with driver logitech-hidpp-device failed with error -22 [ 114.369130][ T872] usb 3-1: USB disconnect, device number 10 [ 114.472749][ T5902] appletouch 2-1:0.85: Geyser mode initialized. [ 114.479907][ T5902] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input13 [ 114.495280][ C1] appletouch 2-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 114.717947][ T872] usb 2-1: USB disconnect, device number 8 [ 114.763733][ T872] appletouch 2-1:0.85: input: appletouch disconnected [ 114.829002][ T7891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.812'. [ 114.839567][ T7891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.812'. [ 114.896917][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.813'. [ 114.905972][ T7893] nbd: illegal input index -488837 [ 115.223052][ T5902] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 115.345237][ T7919] Bluetooth: MGMT ver 1.23 [ 115.413351][ T5902] usb 4-1: unable to get BOS descriptor or descriptor too short [ 115.441588][ T5902] usb 4-1: no configurations [ 115.446500][ T5902] usb 4-1: can't read configurations, error -22 [ 115.725928][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.834'. [ 115.765482][ T7937] netlink: 596 bytes leftover after parsing attributes in process `syz.0.835'. [ 115.767505][ T7933] bridge0: port 1(vlan2) entered blocking state [ 115.790869][ T7933] bridge0: port 1(vlan2) entered disabled state [ 115.798091][ T7933] vlan2: entered allmulticast mode [ 115.803619][ T7933] bridge0: entered allmulticast mode [ 115.823932][ T7933] vlan2: left allmulticast mode [ 115.829225][ T7933] bridge0: left allmulticast mode [ 115.876078][ T30] audit: type=1400 audit(1744490850.802:586): avc: denied { bind } for pid=7938 comm="syz.1.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.946960][ T30] audit: type=1400 audit(1744490850.802:587): avc: denied { connect } for pid=7938 comm="syz.1.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.456557][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.468237][ T7961] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.475461][ T7961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.510885][ T7964] netlink: 'syz.4.847': attribute type 11 has an invalid length. [ 116.520634][ T7964] netlink: 36 bytes leftover after parsing attributes in process `syz.4.847'. [ 116.897328][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 117.052944][ T5902] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 117.232651][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 117.244167][ T5902] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 117.252293][ T5902] usb 1-1: config 0 has no interface number 0 [ 117.281691][ T5902] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 117.292804][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.313985][ T5902] usb 1-1: Product: syz [ 117.323736][ T5902] usb 1-1: Manufacturer: syz [ 117.328373][ T5902] usb 1-1: SerialNumber: syz [ 117.358639][ T8003] netlink: 'syz.2.866': attribute type 11 has an invalid length. [ 117.362562][ T5902] usb 1-1: config 0 descriptor?? [ 117.382657][ T8003] netlink: 32 bytes leftover after parsing attributes in process `syz.2.866'. [ 117.390804][ T5902] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 117.497551][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.872'. [ 117.618521][ T5902] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 117.647436][ T5902] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 117.749080][ T8026] input: syz0 as /devices/virtual/input/input14 [ 117.755567][ T30] audit: type=1400 audit(1744490852.682:588): avc: denied { setopt } for pid=8027 comm="syz.3.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.948271][ T30] audit: type=1400 audit(1744490852.872:589): avc: denied { kexec_image_load } for pid=8012 comm="syz.4.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 118.071520][ T30] audit: type=1400 audit(1744490852.992:590): avc: denied { write } for pid=8037 comm="syz.1.881" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 118.099850][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 118.108666][ T5902] usb 1-1: USB disconnect, device number 12 [ 118.123055][ T5902] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 118.131261][ T8042] netlink: 60 bytes leftover after parsing attributes in process `syz.4.883'. [ 118.136786][ T5902] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 118.155653][ T5902] quatech2 1-1:0.51: device disconnected [ 118.160597][ T8042] unsupported nlmsg_type 40 [ 118.225653][ T8046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.290245][ T8050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.305804][ T8050] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 118.410667][ T8056] netlink: 64 bytes leftover after parsing attributes in process `syz.4.890'. [ 118.486217][ T8058] SELinux: failed to load policy [ 118.520092][ T8060] 9p: Unknown access argument c: -22 [ 118.643806][ T1203] kernel read not supported for file /dsp1 (pid: 1203 comm: kworker/1:2) [ 118.812693][ T5902] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 118.910818][ T8086] netlink: 666 bytes leftover after parsing attributes in process `syz.3.905'. [ 118.999571][ T5902] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 119.013947][ T5902] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 119.033032][ T5902] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 119.048924][ T5902] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 119.061011][ T5902] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 119.097005][ T5902] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.106433][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.115221][ T5902] usb 3-1: Product: syz [ 119.119517][ T5902] usb 3-1: Manufacturer: syz [ 119.130089][ T5902] cdc_wdm 3-1:1.0: skipping garbage [ 119.136020][ T5902] cdc_wdm 3-1:1.0: skipping garbage [ 119.146620][ T5902] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 119.152707][ T5902] cdc_wdm 3-1:1.0: Unknown control protocol [ 119.322639][ T1203] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 119.333493][ T872] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 119.343039][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 119.494959][ T1203] usb 1-1: Using ep0 maxpacket: 8 [ 119.502923][ T872] usb 2-1: Using ep0 maxpacket: 8 [ 119.505398][ T1203] usb 1-1: config 0 has no interfaces? [ 119.508045][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 119.520817][ T1203] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 119.528603][ T872] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 119.533802][ T1203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.543096][ T872] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 119.548768][ T5902] usb 3-1: USB disconnect, device number 11 [ 119.557991][ T872] usb 2-1: Product: syz [ 119.562551][ T1203] usb 1-1: Product: syz [ 119.566335][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.574516][ T1203] usb 1-1: Manufacturer: syz [ 119.584503][ T872] usb 2-1: Manufacturer: syz [ 119.590281][ T872] usb 2-1: SerialNumber: syz [ 119.595973][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.605735][ T1203] usb 1-1: SerialNumber: syz [ 119.607688][ T1203] usb 1-1: config 0 descriptor?? [ 119.614449][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 119.624277][ T872] usb 2-1: config 0 descriptor?? [ 119.632159][ T872] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 119.639030][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 119.648418][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.660004][ T9] usb 4-1: config 0 descriptor?? [ 119.874125][ T5902] usb 1-1: USB disconnect, device number 13 [ 120.120022][ T30] audit: type=1400 audit(1744490855.042:591): avc: denied { append } for pid=8145 comm="syz.2.934" name="event3" dev="devtmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 120.143157][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.249671][ T872] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 120.347741][ T9] usb 4-1: USB disconnect, device number 11 [ 120.501957][ T5902] usb 2-1: USB disconnect, device number 9 [ 120.826797][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.835954][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.844908][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.864741][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.872401][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.301576][ T8170] chnl_net:caif_netlink_parms(): no params data found [ 121.372903][ T8196] block nbd0: server does not support multiple connections per device. [ 121.395143][ T8196] block nbd0: shutting down sockets [ 121.439609][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.461599][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.483671][ T872] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 121.488302][ T8170] bridge_slave_0: entered allmulticast mode [ 121.514210][ T8170] bridge_slave_0: entered promiscuous mode [ 121.523641][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.530390][ T30] audit: type=1400 audit(1744490856.452:592): avc: denied { block_suspend } for pid=8210 comm="syz.3.963" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.530777][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.559848][ T8170] bridge_slave_1: entered allmulticast mode [ 121.567054][ T8170] bridge_slave_1: entered promiscuous mode [ 121.653898][ T872] usb 1-1: Using ep0 maxpacket: 32 [ 121.666714][ T8170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.680449][ T872] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 121.698339][ T872] usb 1-1: config 0 has no interface number 0 [ 121.709452][ T8170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.720865][ T872] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 121.739839][ T872] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.772103][ T872] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 121.785124][ T8222] netlink: 152 bytes leftover after parsing attributes in process `syz.1.969'. [ 121.805337][ T872] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 121.815194][ T872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.821846][ T8170] team0: Port device team_slave_0 added [ 121.830797][ T8222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.969'. [ 121.842684][ T872] usb 1-1: Product: syz [ 121.847463][ T872] usb 1-1: Manufacturer: syz [ 121.852092][ T872] usb 1-1: SerialNumber: syz [ 121.859295][ T8170] team0: Port device team_slave_1 added [ 121.870684][ T872] usb 1-1: config 0 descriptor?? [ 121.880750][ T8189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.899230][ T872] ums-sddr09 1-1:0.20: USB Mass Storage device detected [ 121.951952][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.970559][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.996510][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.004092][ T8170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.016560][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.023815][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.029438][ T872] ums-sddr09 1-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 122.055398][ T8170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.123230][ T872] usb 1-1: USB disconnect, device number 14 [ 122.137241][ T8170] hsr_slave_0: entered promiscuous mode [ 122.161472][ T8170] hsr_slave_1: entered promiscuous mode [ 122.170096][ T8238] netlink: 'syz.3.976': attribute type 10 has an invalid length. [ 122.178539][ T8170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.191135][ T8238] netlink: 152 bytes leftover after parsing attributes in process `syz.3.976'. [ 122.200537][ T8170] Cannot create hsr debugfs directory [ 122.565080][ T8170] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.577252][ T8170] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.589100][ T8170] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.600666][ T8170] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.829244][ T8170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.864047][ T8170] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.890187][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.897390][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.933025][ T53] Bluetooth: hci0: command tx timeout [ 122.942132][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.949322][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.978709][ T8170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.993566][ T8170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.026687][ T30] audit: type=1400 audit(1744490857.942:593): avc: denied { create } for pid=8259 comm="syz.1.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 123.092079][ T30] audit: type=1400 audit(1744490857.982:594): avc: denied { bind } for pid=8259 comm="syz.1.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 123.295178][ T8170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.307355][ T30] audit: type=1400 audit(1744490858.232:595): avc: denied { getopt } for pid=8270 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.649871][ T8288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8288 comm=syz.3.993 [ 123.719167][ T8170] veth0_vlan: entered promiscuous mode [ 123.754111][ T8170] veth1_vlan: entered promiscuous mode [ 123.808156][ T8170] veth0_macvtap: entered promiscuous mode [ 123.834030][ T8170] veth1_macvtap: entered promiscuous mode [ 123.863498][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.890586][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.901279][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.930564][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.942580][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.962850][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.981419][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.002764][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.022587][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.022674][ T5902] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 124.042722][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.054896][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.110350][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.128604][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.142891][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.153430][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.166516][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.178222][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.195097][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.208798][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'. [ 124.221482][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.231425][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 124.239579][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.252221][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.259600][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.272176][ T8170] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.281870][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 124.295271][ T8170] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.304033][ T5902] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 124.319428][ T8170] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.328205][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.336542][ T8170] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.347302][ T5902] usb 4-1: config 0 descriptor?? [ 124.461242][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.472969][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.518510][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.528117][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.550163][ T30] audit: type=1400 audit(1744490859.472:596): avc: denied { mounton } for pid=8170 comm="syz-executor" path="/root/syzkaller.cC7PUW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 124.576801][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.678496][ T8313] mkiss: ax0: crc mode is auto. [ 124.818723][ T5902] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000A/input/input16 [ 124.896518][ T53] Bluetooth: hci0: unknown advertising packet type: 0xe1 [ 124.896568][ T53] Bluetooth: hci0: unknown advertising packet type: 0x1a [ 124.905301][ T53] Bluetooth: hci0: Dropping invalid advertising data [ 124.920715][ T53] Bluetooth: hci0: Malformed LE Event: 0x02 [ 124.926262][ T5902] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000A/input/input17 [ 125.012538][ T53] Bluetooth: hci0: command tx timeout [ 125.315560][ T5902] kye 0003:0458:5011.000A: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 125.529222][ T8338] batman_adv: batadv0: Adding interface: gretap1 [ 125.566614][ T8338] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 125.625694][ T30] audit: type=1400 audit(1744490860.542:597): avc: denied { write } for pid=8340 comm="syz.0.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.662572][ T5825] usb 4-1: USB disconnect, device number 12 [ 126.085579][ T30] audit: type=1400 audit(1744490861.012:598): avc: denied { map } for pid=8355 comm="syz.5.1023" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 126.108807][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.630323][ T30] audit: type=1400 audit(1744490861.552:599): avc: denied { write } for pid=8374 comm="syz.1.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.634606][ T8373] kernel read not supported for file /eth0 (pid: 8373 comm: syz.2.1030) [ 126.722591][ T30] audit: type=1800 audit(1744490861.642:600): pid=8373 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1030" name="eth0" dev="mqueue" ino=20492 res=0 errno=0 [ 127.067073][ T8389] netlink: 'syz.3.1038': attribute type 4 has an invalid length. [ 127.092644][ T53] Bluetooth: hci0: command tx timeout [ 127.185252][ T5870] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 127.262827][ T5902] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 127.355487][ T5870] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 127.382495][ T5870] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 127.422601][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 127.427840][ T5870] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 127.451634][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0 [ 127.470904][ T5902] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 127.482421][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.502625][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.514710][ T8383] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 127.524102][ T5902] usb 6-1: config 0 descriptor?? [ 127.553638][ T5870] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.828174][ T5825] usb 3-1: USB disconnect, device number 12 [ 127.850707][ T30] audit: type=1400 audit(1744490862.772:601): avc: denied { setopt } for pid=8412 comm="syz.1.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 127.872175][ T8412] delete_channel: no stack [ 127.963731][ T5902] hid (null): unknown global tag 0xd [ 127.985268][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1052'. [ 128.024058][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1053'. [ 128.076608][ T8426] trusted_key: encrypted_key: keyword 'up>J0n' not recognized [ 128.217487][ T5902] usb 6-1: USB disconnect, device number 2 [ 128.398663][ T30] audit: type=1400 audit(1744490863.322:602): avc: denied { read } for pid=8440 comm="syz.1.1062" laddr=fe80::13 lport=48706 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.432331][ T8442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.028603][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 129.037833][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'. [ 129.053262][ T5902] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 129.178156][ T53] Bluetooth: hci0: command tx timeout [ 129.243789][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.279934][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.308701][ T5902] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 129.322576][ T30] audit: type=1400 audit(1744490864.242:603): avc: denied { mount } for pid=8477 comm="syz.5.1077" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 129.362631][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.386745][ T5902] usb 4-1: config 0 descriptor?? [ 129.666713][ T30] audit: type=1400 audit(1744490864.582:604): avc: denied { create } for pid=8499 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 129.692115][ T30] audit: type=1400 audit(1744490864.592:605): avc: denied { ioctl } for pid=8499 comm="syz.2.1087" path="socket:[20768]" dev="sockfs" ino=20768 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 129.742534][ T5825] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 129.821100][ T5902] hid-steam 0003:28DE:1142.000C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 129.905961][ T5825] usb 1-1: Using ep0 maxpacket: 32 [ 129.923971][ T5825] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 129.932090][ T5825] usb 1-1: config 0 has no interface number 0 [ 129.932531][ T5902] hid-steam 0003:28DE:1142.000C: Steam wireless receiver connected [ 129.938382][ T5825] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.957299][ T5825] usb 1-1: config 0 interface 85 has no altsetting 0 [ 129.968948][ T5825] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 129.978804][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.992773][ T5825] usb 1-1: Product: syz [ 129.997295][ T5825] usb 1-1: Manufacturer: syz [ 130.003005][ T5825] usb 1-1: SerialNumber: syz [ 130.022858][ T5825] usb 1-1: config 0 descriptor?? [ 130.027184][ T5902] hid-steam 0003:28DE:1142.000D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 130.086267][ T5902] usb 4-1: USB disconnect, device number 13 [ 130.111980][ T5902] hid-steam 0003:28DE:1142.000C: Steam wireless receiver disconnected [ 130.323277][ T30] audit: type=1400 audit(1744490865.242:606): avc: denied { execute } for pid=8519 comm="syz.2.1096" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 130.763177][ T8533] loop6: detected capacity change from 0 to 524287999 [ 130.779033][ T8533] buffer_io_error: 7 callbacks suppressed [ 130.779050][ T8533] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.788301][ T8535] loop8: detected capacity change from 0 to 1 [ 130.801585][ T8535] Dev loop8: unable to read RDB block 1 [ 130.816298][ T5825] appletouch 1-1:0.85: Geyser mode initialized. [ 130.817155][ T8533] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.824638][ T8535] loop8: unable to read partition table [ 130.833084][ T8533] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.844161][ T5825] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input18 [ 130.860625][ T8533] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.871009][ C1] appletouch 1-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 130.882696][ T8535] loop8: partition table beyond EOD, truncated [ 130.892423][ T8535] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 130.903995][ T8533] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.911957][ T8533] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.920817][ T8533] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.932166][ T8533] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.947918][ T8533] ldm_validate_partition_table(): Disk read failed. [ 130.962107][ T8533] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.982056][ T8533] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.013057][ T8533] Dev loop6: unable to read RDB block 0 [ 131.019003][ T8533] loop6: unable to read partition table [ 131.047136][ T8539] ldm_validate_partition_table(): Disk read failed. [ 131.059216][ T8539] Dev loop6: unable to read RDB block 0 [ 131.067155][ T8533] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 131.084454][ T5870] usb 1-1: USB disconnect, device number 15 [ 131.101459][ T5870] appletouch 1-1:0.85: input: appletouch disconnected [ 131.123586][ T8539] loop6: unable to read partition table [ 131.129483][ T8539] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 131.271769][ T8554] Bluetooth: MGMT ver 1.23 [ 131.392550][ T872] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 131.552558][ T872] usb 3-1: Using ep0 maxpacket: 8 [ 131.586285][ T872] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 131.599266][ T872] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 131.609351][ T872] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.620277][ T872] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.633360][ T872] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.642589][ T872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.836197][ T8576] netlink: 'syz.1.1117': attribute type 10 has an invalid length. [ 131.847923][ T8576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1117'. [ 131.866837][ T8576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.878153][ T872] usb 3-1: GET_CAPABILITIES returned 0 [ 131.887428][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.894303][ T872] usbtmc 3-1:16.0: can't read capabilities [ 131.907096][ T8576] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 132.082866][ T5870] usb 3-1: USB disconnect, device number 13 [ 132.456179][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.462750][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.695396][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1140'. [ 132.739383][ T8623] bridge_slave_1: left allmulticast mode [ 132.758584][ T8623] bridge_slave_1: left promiscuous mode [ 132.772880][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.791762][ T30] audit: type=1400 audit(1744490867.712:607): avc: denied { map } for pid=8628 comm="syz.0.1143" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 132.830344][ T8623] bridge_slave_0: left allmulticast mode [ 132.840694][ T8623] bridge_slave_0: left promiscuous mode [ 132.848232][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.205498][ T8643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.659841][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1161'. [ 133.742598][ T5825] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 133.851943][ T30] audit: type=1400 audit(1744490868.772:608): avc: denied { write } for pid=8681 comm="syz.5.1165" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 133.894189][ T5831] Bluetooth: hci2: command 0x206a tx timeout [ 133.922220][ T30] audit: type=1400 audit(1744490868.842:609): avc: denied { mounton } for pid=8685 comm="syz.2.1168" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 133.952565][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.976280][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.986217][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.999310][ T5825] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.009712][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.019901][ T5825] usb 4-1: config 0 descriptor?? [ 134.260765][ T30] audit: type=1400 audit(1744490869.182:610): avc: denied { getattr } for pid=8697 comm="syz.5.1173" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 134.285455][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.467127][ T5825] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.482367][ T5825] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.505792][ T5825] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.536244][ T5825] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.545398][ T5825] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.569131][ T5825] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.589448][ T5825] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.606281][ T5825] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.615273][ T5825] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.645793][ T5825] plantronics 0003:047F:FFFF.000E: unbalanced collection at end of report description [ 134.668968][ T5825] plantronics 0003:047F:FFFF.000E: parse failed [ 134.688367][ T5825] plantronics 0003:047F:FFFF.000E: probe with driver plantronics failed with error -22 [ 134.701317][ T5825] usb 4-1: USB disconnect, device number 14 [ 134.892208][ T30] audit: type=1400 audit(1744490869.812:611): avc: denied { setopt } for pid=8720 comm="syz.5.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.917094][ T58] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 134.949690][ T30] audit: type=1400 audit(1744490869.872:612): avc: denied { write } for pid=5825 comm="kworker/0:3" path="socket:[21194]" dev="sockfs" ino=21194 scontext=system_u:system_r:kernel_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 134.998212][ T30] audit: type=1400 audit(1744490869.872:613): avc: denied { getopt } for pid=8724 comm="syz.5.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.074929][ T8731] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 135.081580][ T8731] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 135.094380][ T8731] vhci_hcd vhci_hcd.0: Device attached [ 135.104534][ T8734] vhci_hcd: connection closed [ 135.105844][ T6093] vhci_hcd: stop threads [ 135.114937][ T58] usb 2-1: Using ep0 maxpacket: 16 [ 135.123291][ T6093] vhci_hcd: release socket [ 135.127996][ T6093] vhci_hcd: disconnect device [ 135.133983][ T58] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.147729][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 135.155520][ T58] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 135.165356][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.177040][ T58] usb 2-1: config 0 descriptor?? [ 135.292688][ T5902] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 135.361137][ T8750] overlayfs: failed to resolve '/9}PF_xKk)".' j [ 135.361137][ T8750] 8yATAo)r(5LLOeO'&~': -2 [ 135.419809][ T30] audit: type=1400 audit(1744490870.342:614): avc: denied { create } for pid=8753 comm="syz.3.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 135.444682][ T8755] delete_channel: no stack [ 135.446050][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 135.466233][ T5902] usb 6-1: config 0 has an invalid interface number: 241 but max is 0 [ 135.482695][ T30] audit: type=1400 audit(1744490870.372:615): avc: denied { getopt } for pid=8755 comm="syz.2.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 135.482810][ T5902] usb 6-1: config 0 has no interface number 0 [ 135.502051][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.508653][ T30] audit: type=1400 audit(1744490870.372:616): avc: denied { write } for pid=8753 comm="syz.3.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 135.549655][ T5902] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=97.be [ 135.559241][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.571703][ T5902] usb 6-1: config 0 descriptor?? [ 135.581040][ T5902] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 135.600774][ T58] hid (null): global environment stack underflow [ 135.784287][ T5902] gspca_sunplus: reg_w_riv err -71 [ 135.789691][ T5902] sunplus 6-1:0.241: probe with driver sunplus failed with error -71 [ 135.789991][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1208'. [ 135.811502][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1208'. [ 135.829951][ T58] usb 2-1: USB disconnect, device number 10 [ 135.836276][ T5902] usb 6-1: USB disconnect, device number 3 [ 136.145164][ T8786] sp0: Synchronizing with TNC [ 136.160632][ T8786] sp0: Found TNC [ 136.345332][ T5831] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 136.588355][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1230'. [ 136.617440][ T8824] capability: warning: `syz.5.1231' uses 32-bit capabilities (legacy support in use) [ 136.633054][ T30] audit: type=1326 audit(1744490871.562:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8823 comm="syz.0.1233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6b158d169 code=0x0 [ 136.667277][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1230'. [ 136.787874][ T5825] kernel write not supported for file /vcs (pid: 5825 comm: kworker/0:3) [ 136.952619][ T872] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 137.111268][ T872] usb 6-1: config 0 has no interfaces? [ 137.116788][ T872] usb 6-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 137.126834][ T872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.136800][ T872] usb 6-1: config 0 descriptor?? [ 137.239574][ T8857] IPv6: NLM_F_CREATE should be specified when creating new route [ 137.354032][ T8830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.372721][ T8830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.402230][ T872] usb 6-1: USB disconnect, device number 4 [ 137.571999][ T8874] openvswitch: netlink: IPv4 tunnel dst address is zero [ 137.877119][ T8884] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 137.902543][ T872] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 138.073441][ T872] usb 6-1: Using ep0 maxpacket: 8 [ 138.092041][ T872] usb 6-1: config index 0 descriptor too short (expected 72, got 36) [ 138.132637][ T872] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 138.215542][ T872] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 138.240921][ T872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.254829][ T872] usb 6-1: Product: syz [ 138.274454][ T872] usb 6-1: Manufacturer: syz [ 138.296200][ T872] usb 6-1: SerialNumber: syz [ 138.478538][ T8904] macsec1: entered promiscuous mode [ 138.608381][ T872] usb 6-1: USB disconnect, device number 5 [ 138.800523][ T8928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1281'. [ 138.810997][ T8928] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1281'. [ 138.822127][ T8928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1281'. [ 138.831112][ T8928] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1281'. [ 139.002590][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 139.164049][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.178935][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.188775][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.202025][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 139.211063][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.220345][ T10] usb 2-1: config 0 descriptor?? [ 139.234618][ T58] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 139.392535][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 139.399232][ T58] usb 4-1: config 0 has an invalid interface number: 74 but max is 1 [ 139.407572][ T58] usb 4-1: config 0 has no interface number 1 [ 139.416635][ T58] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 139.428880][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.437861][ T58] usb 4-1: Product: syz [ 139.442036][ T58] usb 4-1: Manufacturer: syz [ 139.446779][ T58] usb 4-1: SerialNumber: syz [ 139.453106][ T58] usb 4-1: config 0 descriptor?? [ 139.472260][ T58] snd-usb-audio 4-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 139.636985][ T10] kye 0003:0458:5015.0010: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 139.649034][ T10] kye 0003:0458:5015.0010: unknown main item tag 0x0 [ 139.657001][ T10] kye 0003:0458:5015.0010: unknown main item tag 0x0 [ 139.663778][ T10] kye 0003:0458:5015.0010: unknown main item tag 0x0 [ 139.670471][ T10] kye 0003:0458:5015.0010: unknown main item tag 0x0 [ 139.677396][ T10] kye 0003:0458:5015.0010: unknown main item tag 0x0 [ 139.684160][ T10] kye 0003:0458:5015.0010: unknown main item tag 0x0 [ 139.690884][ T10] kye 0003:0458:5015.0010: unknown main item tag 0x0 [ 139.694826][ T58] usb 4-1: USB disconnect, device number 15 [ 139.699343][ T10] kye 0003:0458:5015.0010: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 139.714496][ T10] kye 0003:0458:5015.0010: tablet-enabling feature report not found [ 139.722809][ T10] kye 0003:0458:5015.0010: tablet enabling failed [ 139.868373][ T5870] usb 2-1: USB disconnect, device number 11 [ 139.900581][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 139.900596][ T30] audit: type=1400 audit(1744490874.822:624): avc: denied { name_connect } for pid=8961 comm="syz.2.1297" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 139.958826][ T8962] syz.2.1297 (8962) used greatest stack depth: 20408 bytes left [ 140.025875][ T30] audit: type=1400 audit(1744490874.952:625): avc: denied { read } for pid=8964 comm="syz.0.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.086406][ T30] audit: type=1400 audit(1744490875.002:626): avc: denied { setopt } for pid=8964 comm="syz.0.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.488940][ T30] audit: type=1400 audit(1744490875.412:627): avc: denied { listen } for pid=8986 comm="syz.1.1308" lport=53252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.544009][ T30] audit: type=1400 audit(1744490875.462:628): avc: denied { accept } for pid=8986 comm="syz.1.1308" lport=53252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.712527][ T5870] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 140.855344][ T872] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 140.862567][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 140.877521][ T5870] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 140.886654][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.894992][ T5870] usb 1-1: Product: syz [ 140.899585][ T5870] usb 1-1: Manufacturer: syz [ 140.905820][ T5870] usb 1-1: SerialNumber: syz [ 140.920601][ T5870] usb 1-1: config 0 descriptor?? [ 140.927176][ T5870] gspca_main: se401-2.14.0 probing 047d:5003 [ 141.043563][ T872] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 141.061293][ T872] usb 4-1: config 0 interface 0 has no altsetting 0 [ 141.068774][ T872] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 141.079414][ T872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.089583][ T872] usb 4-1: config 0 descriptor?? [ 141.097027][ T8985] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 141.248032][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1318'. [ 141.538862][ T872] waterforce 0003:1044:7A4D.0011: unknown main item tag 0x0 [ 141.546825][ T872] waterforce 0003:1044:7A4D.0011: unknown main item tag 0x0 [ 141.549896][ T5870] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 141.569904][ T872] waterforce 0003:1044:7A4D.0011: unknown main item tag 0x0 [ 141.579624][ T872] waterforce 0003:1044:7A4D.0011: unknown main item tag 0x0 [ 141.588449][ T872] waterforce 0003:1044:7A4D.0011: unknown main item tag 0x0 [ 141.598180][ T30] audit: type=1400 audit(1744490876.522:629): avc: denied { rename } for pid=9026 comm="syz.1.1325" name="file1" dev="tmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 141.620612][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.637203][ T872] waterforce 0003:1044:7A4D.0011: hidraw0: USB HID v0.05 Device [HID 1044:7a4d] on usb-dummy_hcd.3-1/input0 [ 141.727749][ T872] waterforce 0003:1044:7A4D.0011: fw version request failed with -38 [ 141.765592][ T872] usb 4-1: USB disconnect, device number 16 [ 141.784238][ T5870] usb 1-1: USB disconnect, device number 16 [ 142.084123][ T5831] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 142.189283][ T30] audit: type=1400 audit(1744490877.112:630): avc: denied { read } for pid=9042 comm="syz.5.1333" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.243165][ T5902] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 142.252708][ T30] audit: type=1400 audit(1744490877.162:631): avc: denied { watch } for pid=9046 comm="syz.5.1335" path="/66" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 142.274341][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.295665][ T30] audit: type=1400 audit(1744490877.222:632): avc: denied { getopt } for pid=9048 comm="syz.5.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.344271][ T9051] block device autoloading is deprecated and will be removed. [ 142.393893][ T9051] bio_check_eod: 2 callbacks suppressed [ 142.393908][ T9051] syz.2.1337: attempt to access beyond end of device [ 142.393908][ T9051] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 142.435242][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 142.442801][ T5902] usb 2-1: unable to get BOS descriptor or descriptor too short [ 142.451566][ T5902] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 142.460351][ T5902] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 142.479725][ T5902] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 142.494307][ T5902] usb 2-1: config 128 has no interface number 0 [ 142.511333][ T5902] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 142.529794][ T5902] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.549442][ T5902] usb 2-1: config 128 interface 127 has no altsetting 0 [ 142.559195][ T30] audit: type=1400 audit(1744490877.482:633): avc: denied { audit_read } for pid=9061 comm="syz.5.1342" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 142.592922][ T5902] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 142.611399][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.625057][ T5902] usb 2-1: Product: syz [ 142.629226][ T5902] usb 2-1: Manufacturer: syz [ 142.661602][ T5902] usb 2-1: SerialNumber: syz [ 142.694461][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 142.758950][ T872] kernel write not supported for file /input/mouse0 (pid: 872 comm: kworker/0:2) [ 142.873880][ T10] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 142.901804][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.908714][ T5902] usb 2-1: USB disconnect, device number 12 [ 142.919298][ T10] usb 1-1: config 0 descriptor?? [ 143.075373][ T6093] tipc: Subscription rejected, illegal request [ 143.140129][ T10] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0e [ 143.156119][ T10] hackrf 1-1:0.0: Could not detect board [ 143.178154][ T10] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 143.210752][ T10] usb 1-1: USB disconnect, device number 17 [ 143.242670][ T5831] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 143.350422][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 143.933172][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1375'. [ 144.468437][ T9159] CIFS: VFS: Malformed UNC in devname [ 144.585137][ T9168] netlink: 'syz.1.1391': attribute type 13 has an invalid length. [ 144.651070][ T9168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.035257][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 145.035270][ T30] audit: type=1400 audit(1744490879.962:644): avc: denied { write } for pid=9176 comm="syz.2.1396" path="socket:[22164]" dev="sockfs" ino=22164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 145.122530][ T5902] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 145.277144][ T30] audit: type=1400 audit(1744490880.202:645): avc: denied { setopt } for pid=9184 comm="syz.2.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.294017][ T5902] usb 4-1: unable to get BOS descriptor or descriptor too short [ 145.313379][ T5902] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 145.322351][ T5902] usb 4-1: can't read configurations, error -71 [ 145.439650][ T30] audit: type=1326 audit(1744490880.362:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9196 comm="syz.2.1406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe07dd8d169 code=0x0 [ 145.592580][ T58] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 145.744645][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.756048][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.766374][ T58] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 145.775694][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.786695][ T58] usb 2-1: config 0 descriptor?? [ 145.813469][ T53] Bluetooth: hci5: command 0x1003 tx timeout [ 145.819733][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 145.825354][ T30] audit: type=1326 audit(1744490880.752:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a018d169 code=0x7ffc0000 [ 145.918313][ T30] audit: type=1326 audit(1744490880.752:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a018d169 code=0x7ffc0000 [ 145.941610][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.968643][ T30] audit: type=1326 audit(1744490880.782:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30a018d169 code=0x7ffc0000 [ 145.991948][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.008817][ T9220] netlink: 82 bytes leftover after parsing attributes in process `syz.0.1416'. [ 146.011124][ T30] audit: type=1326 audit(1744490880.782:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a018d169 code=0x7ffc0000 [ 146.041131][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.052385][ T30] audit: type=1326 audit(1744490880.782:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a018d169 code=0x7ffc0000 [ 146.075725][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.091224][ T30] audit: type=1326 audit(1744490880.782:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30a018d169 code=0x7ffc0000 [ 146.120751][ T30] audit: type=1326 audit(1744490880.782:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a018d169 code=0x7ffc0000 [ 146.432938][ T9234] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 146.455218][ T9234] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 146.650808][ T58] uclogic 0003:256C:006D.0012: failed retrieving Huion firmware version: -71 [ 146.680239][ T58] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 146.698382][ T58] uclogic 0003:256C:006D.0012: probe with driver uclogic failed with error -71 [ 146.728871][ T58] usb 2-1: USB disconnect, device number 13 [ 146.735528][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1431'. [ 146.794078][ T9256] input: syz0 as /devices/virtual/input/input21 [ 146.954771][ T9268] netlink: 'syz.5.1438': attribute type 13 has an invalid length. [ 147.042005][ T9273] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 147.048566][ T9273] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 147.058601][ T9268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.058698][ T9273] vhci_hcd vhci_hcd.0: Device attached [ 147.096709][ T9274] vhci_hcd: connection closed [ 147.096941][ T1136] vhci_hcd: stop threads [ 147.113302][ T1136] vhci_hcd: release socket [ 147.122964][ T1136] vhci_hcd: disconnect device [ 147.259893][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'. [ 147.284400][ T9286] IPVS: Error joining to the multicast group [ 147.605430][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1458'. [ 147.636368][ T9311] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 147.651752][ T9311] macsec1: entered allmulticast mode [ 147.676141][ T9311] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 147.716150][ T9311] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 147.733162][ T9311] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 148.243653][ T5870] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 148.412672][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 148.428104][ T5870] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.439218][ T5902] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 149.175005][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.182145][ T5870] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 149.192023][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.223202][ T5870] usb 4-1: config 0 descriptor?? [ 149.322538][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 149.349863][ T5902] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 149.359060][ T5902] usb 1-1: config 0 has no interface number 0 [ 149.378626][ T5902] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 149.392655][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.412828][ T5902] usb 1-1: Product: syz [ 149.417021][ T5902] usb 1-1: Manufacturer: syz [ 149.421644][ T5902] usb 1-1: SerialNumber: syz [ 149.443327][ T5902] usb 1-1: config 0 descriptor?? [ 149.450842][ T5902] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 149.638706][ T5870] razer 0003:1532:011B.0013: collection stack underflow [ 149.646243][ T5870] razer 0003:1532:011B.0013: item 0 0 0 12 parsing failed [ 149.656166][ T5870] razer 0003:1532:011B.0013: probe with driver razer failed with error -22 [ 149.679808][ T5902] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 149.692252][ T5902] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 149.840715][ T5902] usb 4-1: USB disconnect, device number 19 [ 150.113244][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 150.122202][ T5902] usb 1-1: USB disconnect, device number 18 [ 150.141898][ T5902] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 150.180763][ T5902] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 150.202108][ T5902] quatech2 1-1:0.51: device disconnected [ 150.624788][ T5902] kernel write not supported for file /sg0 (pid: 5902 comm: kworker/1:7) [ 150.713928][ T9432] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 150.903408][ T9447] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 150.931263][ T9450] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1514'. [ 151.203718][ T9470] netlink: 'syz.2.1521': attribute type 6 has an invalid length. [ 151.572993][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 151.604650][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 151.604667][ T30] audit: type=1400 audit(1744490886.532:671): avc: denied { module_request } for pid=9495 comm="syz.1.1533" kmod="ip_set_hash:" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 151.750329][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 151.755620][ T9507] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 151.779812][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 151.800261][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 151.813023][ T30] audit: type=1400 audit(1744490886.742:672): avc: denied { write } for pid=9508 comm="syz.3.1538" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 151.841122][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.861915][ T9515] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9515 comm=syz.2.1541 [ 151.882890][ T9477] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.894224][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.074592][ T9529] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.081976][ T9529] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.191937][ T1203] usb 1-1: USB disconnect, device number 19 [ 152.920838][ T30] audit: type=1400 audit(1744490887.842:673): avc: denied { write } for pid=9576 comm="syz.3.1569" path="socket:[25339]" dev="sockfs" ino=25339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 152.921990][ T9576] delete_channel: no stack [ 153.131410][ T9583] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 153.199539][ T9591] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 153.288418][ T9599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.297206][ T9599] batadv_slave_0: entered promiscuous mode [ 153.412562][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 153.493173][ T6093] wlan1: Trigger new scan to find an IBSS to join [ 153.584069][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 153.593806][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 153.601921][ T10] usb 2-1: config 0 has no interface number 0 [ 153.616567][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 153.630280][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.649402][ T10] usb 2-1: Product: syz [ 153.668782][ T10] usb 2-1: Manufacturer: syz [ 153.681594][ T10] usb 2-1: SerialNumber: syz [ 153.691628][ T10] usb 2-1: config 0 descriptor?? [ 153.709485][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 153.814212][ T9629] rtc_cmos 00:00: Alarms can be up to one day in the future [ 153.819481][ T1203] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 153.853826][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1594'. [ 153.918658][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 153.955580][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 153.984644][ T1203] usb 3-1: Using ep0 maxpacket: 32 [ 153.996758][ T1203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.021418][ T30] audit: type=1400 audit(1744490888.942:674): avc: denied { mount } for pid=9640 comm="syz.0.1599" name="/" dev="hugetlbfs" ino=24433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 154.026918][ T5825] rtc_cmos 00:00: Alarms can be up to one day in the future [ 154.048451][ T1203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.056482][ T5825] rtc_cmos 00:00: Alarms can be up to one day in the future [ 154.087939][ T1203] usb 3-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 154.098906][ T30] audit: type=1400 audit(1744490888.982:675): avc: denied { create } for pid=9640 comm="syz.0.1599" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 154.101423][ T5825] rtc_cmos 00:00: Alarms can be up to one day in the future [ 154.119397][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.123199][ T1203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.161585][ T1203] usb 3-1: config 0 descriptor?? [ 154.192820][ T5825] rtc_cmos 00:00: Alarms can be up to one day in the future [ 154.220237][ T5825] rtc rtc0: __rtc_set_alarm: err=-22 [ 154.341893][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 154.343411][ T5870] usb 2-1: USB disconnect, device number 14 [ 154.376414][ T5870] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 154.398728][ T5870] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 154.420295][ T5870] quatech2 2-1:0.51: device disconnected [ 154.597317][ T1203] apple 0003:05AC:029C.0014: hidraw0: USB HID v0.00 Device [HID 05ac:029c] on usb-dummy_hcd.2-1/input0 [ 154.841574][ T10] usb 3-1: USB disconnect, device number 14 [ 155.133996][ T9681] input: syz0 as /devices/virtual/input/input23 [ 155.493642][ T2983] wlan1: Trigger new scan to find an IBSS to join [ 155.518733][ T9665] syz.0.1610 (9665): drop_caches: 2 [ 155.538246][ T30] audit: type=1400 audit(1744490890.462:676): avc: denied { create } for pid=9694 comm="syz.1.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 155.567843][ T30] audit: type=1400 audit(1744490890.472:677): avc: denied { write } for pid=9694 comm="syz.1.1624" path="socket:[25586]" dev="sockfs" ino=25586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 155.592029][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.600778][ T30] audit: type=1400 audit(1744490890.472:678): avc: denied { nlmsg_read } for pid=9694 comm="syz.1.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 155.621607][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.662737][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 155.812642][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 155.823948][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 155.833312][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.854568][ T9] usb 4-1: config 0 descriptor?? [ 155.977106][ T30] audit: type=1400 audit(1744490890.902:679): avc: denied { map } for pid=9716 comm="syz.1.1634" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 156.294942][ T9] koneplus 0003:1E7D:2E22.0015: item fetching failed at offset 1/5 [ 156.312617][ T9] koneplus 0003:1E7D:2E22.0015: parse failed [ 156.318672][ T9] koneplus 0003:1E7D:2E22.0015: probe with driver koneplus failed with error -22 [ 156.511671][ T1203] usb 4-1: USB disconnect, device number 20 [ 156.537088][ T2983] wlan1: Trigger new scan to find an IBSS to join [ 156.592070][ T9737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.785451][ T30] audit: type=1400 audit(1744490891.712:680): avc: denied { create } for pid=9752 comm="syz.2.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 156.805009][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.819162][ T30] audit: type=1400 audit(1744490891.732:681): avc: denied { ioctl } for pid=9752 comm="syz.2.1650" path="socket:[26704]" dev="sockfs" ino=26704 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 157.071940][ T30] audit: type=1326 audit(1744490891.992:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.3.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a018d169 code=0x7ffc0000 [ 157.099223][ T30] audit: type=1326 audit(1744490891.992:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.3.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a018d169 code=0x7ffc0000 [ 157.122503][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.133256][ T30] audit: type=1326 audit(1744490892.022:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.3.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f30a018d169 code=0x7ffc0000 [ 157.157953][ T30] audit: type=1326 audit(1744490892.022:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.3.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a018d169 code=0x7ffc0000 [ 157.188364][ T30] audit: type=1326 audit(1744490892.022:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.3.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f30a018d169 code=0x7ffc0000 [ 157.216691][ T30] audit: type=1326 audit(1744490892.022:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.3.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a018d169 code=0x7ffc0000 [ 157.241736][ T30] audit: type=1326 audit(1744490892.022:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.3.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a018d169 code=0x7ffc0000 [ 157.743225][ T5870] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 157.912615][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 157.942239][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 157.963504][ T5870] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 158.007389][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.033393][ T5870] usb 6-1: config 0 descriptor?? [ 158.052152][ T5870] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input24 [ 158.247581][ T5181] bcm5974 6-1:0.0: could not read from device [ 158.258613][ T5870] bcm5974 6-1:0.0: could not read from device [ 158.292617][ T5181] bcm5974 6-1:0.0: could not read from device [ 158.340337][ T5870] input: failed to attach handler mousedev to device input24, error: -5 [ 158.357564][ T30] audit: type=1400 audit(1744490893.282:689): avc: denied { mounton } for pid=9818 comm="syz.0.1678" path="/272/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 158.386946][ T5870] usb 6-1: USB disconnect, device number 6 [ 158.391550][ T5181] bcm5974 6-1:0.0: could not read from device [ 158.454233][ T1149] wlan1: Trigger new scan to find an IBSS to join [ 158.857905][ T9805] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 159.134647][ T1203] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 159.216433][ T9864] kvm: kvm [9863]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008e) [ 159.306437][ T1203] usb 1-1: Using ep0 maxpacket: 32 [ 159.317000][ T1203] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.348008][ T1203] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.367584][ T1203] usb 1-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 159.377248][ T1203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.399272][ T1203] usb 1-1: config 0 descriptor?? [ 159.493203][ T1149] wlan1: Creating new IBSS network, BSSID 5a:85:96:d6:ad:d5 [ 159.512355][ T9875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.832412][ T1203] apple 0003:05AC:029C.0016: hidraw0: USB HID v0.00 Device [HID 05ac:029c] on usb-dummy_hcd.0-1/input0 [ 159.852722][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 160.014641][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.029742][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.039633][ T10] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 160.052196][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.063251][ T10] usb 3-1: config 0 descriptor?? [ 160.070785][ T1203] usb 1-1: USB disconnect, device number 20 [ 160.263310][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1718'. [ 160.461370][ T9920] bridge_slave_0: entered promiscuous mode [ 160.496194][ T10] elan 0003:04F3:0755.0017: failed to start in urb: -90 [ 160.535707][ T10] elan 0003:04F3:0755.0017: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 160.734391][ T5870] usb 3-1: USB disconnect, device number 15 [ 161.122321][ T9965] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 161.212688][ T10] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 161.374411][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.388263][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 161.397641][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 161.414787][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 84, setting to 8 [ 161.428276][ T10] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 161.439443][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.468460][ T9955] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 161.489464][ T10] hub 6-1:1.0: bad descriptor, ignoring hub [ 161.496235][ T6093] wlan1: Trigger new scan to find an IBSS to join [ 161.502595][ T10] hub 6-1:1.0: probe with driver hub failed with error -5 [ 161.517297][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 161.530741][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 161.544301][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 161.558146][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 161.791050][ T9981] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 161.833259][ T10] usb 6-1: USB disconnect, device number 7 [ 162.204002][ T10] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 162.381160][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.401181][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.434758][T10018] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 162.438307][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.458197][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 162.458211][ T30] audit: type=1400 audit(1744490897.382:696): avc: denied { mount } for pid=10017 comm="syz.0.1764" name="/" dev="rpc_pipefs" ino=26345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 162.499079][ T1149] wlan1: Creating new IBSS network, BSSID d2:00:d5:ce:0b:c0 [ 162.511289][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 84, setting to 8 [ 162.524502][ T10] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 162.538875][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.554318][ T9955] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 162.563697][ T10] hub 6-1:1.0: bad descriptor, ignoring hub [ 162.569629][ T10] hub 6-1:1.0: probe with driver hub failed with error -5 [ 162.579249][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 162.588936][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 162.598453][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 162.605148][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 162.912728][ T5825] usb 6-1: USB disconnect, device number 8 [ 162.942512][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 162.976785][T10041] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 163.099268][ T10] usb 1-1: config 6 has an invalid interface number: 108 but max is 0 [ 163.112240][ T10] usb 1-1: config 6 has no interface number 0 [ 163.137575][ T10] usb 1-1: config 6 interface 108 has no altsetting 0 [ 163.165934][ T10] usb 1-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=d2.1d [ 163.182517][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.201496][ T10] usb 1-1: Product: syz [ 163.211591][ T10] usb 1-1: Manufacturer: syz [ 163.221948][ T10] usb 1-1: SerialNumber: syz [ 163.339733][ T30] audit: type=1400 audit(1744490898.262:697): avc: denied { append } for pid=10051 comm="syz.3.1779" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 163.455994][ T10] mos7840 1-1:6.108: required endpoints missing [ 163.462796][ T5870] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 163.475158][ T10] usb 1-1: USB disconnect, device number 21 [ 163.624851][ T5870] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 163.642579][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.658124][ T5870] usb 2-1: config 0 descriptor?? [ 163.665646][ T5870] cp210x 2-1:0.0: cp210x converter detected [ 163.878453][ T5870] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 163.886057][ T5870] cp210x 2-1:0.0: querying part number failed [ 163.896900][ T5870] usb 2-1: cp210x converter now attached to ttyUSB0 [ 163.905184][ T5870] usb 2-1: USB disconnect, device number 15 [ 163.914774][ T5870] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 163.922885][ T5870] cp210x 2-1:0.0: device disconnected [ 163.990148][ T30] audit: type=1400 audit(1744490898.912:698): avc: denied { ioctl } for pid=10074 comm="syz.0.1786" path="socket:[27497]" dev="sockfs" ino=27497 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 164.032544][ T5825] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 164.206827][ T5825] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 164.217166][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.225464][ T5825] usb 3-1: Product: syz [ 164.229754][ T5825] usb 3-1: Manufacturer: syz [ 164.234622][ T5825] usb 3-1: SerialNumber: syz [ 164.243416][ T5825] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 164.260814][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 164.332555][ T5870] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 164.494570][ T5870] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 164.515399][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.544585][ T5870] usb 2-1: config 0 descriptor?? [ 164.554101][ T5870] cp210x 2-1:0.0: cp210x converter detected [ 164.676401][ T5902] usb 3-1: USB disconnect, device number 16 [ 164.740470][ T30] audit: type=1326 audit(1744490899.662:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10092 comm="syz.5.1796" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f700538d169 code=0x0 [ 164.845227][T10100] input input25: cannot allocate more than FF_MAX_EFFECTS effects [ 164.973230][ T5870] usb 2-1: cp210x converter now attached to ttyUSB0 [ 164.996200][ T5870] usb 2-1: USB disconnect, device number 16 [ 165.024684][ T5870] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 165.042977][ T5870] cp210x 2-1:0.0: device disconnected [ 165.345860][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 165.356000][ T10] ath9k_htc: Failed to initialize the device [ 165.372720][ T5902] usb 3-1: ath9k_htc: USB layer deinitialized [ 165.772794][T10143] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 166.072593][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 166.153098][ T30] audit: type=1400 audit(1744490901.082:700): avc: denied { ioctl } for pid=10166 comm="syz.1.1829" path="socket:[27749]" dev="sockfs" ino=27749 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 166.246123][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 166.283678][ T10] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 166.293625][ T10] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 166.302296][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 166.311457][ T10] usb 4-1: config 1 has no interface number 0 [ 166.343094][ T10] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.357285][ T10] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 166.366791][ T30] audit: type=1400 audit(1744490901.292:701): avc: denied { read write } for pid=10172 comm="syz.2.1831" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 166.380291][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 166.411984][ T30] audit: type=1400 audit(1744490901.322:702): avc: denied { open } for pid=10172 comm="syz.2.1831" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 166.421110][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.435537][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.456289][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 166.485527][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1832'. [ 166.658018][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 166.727539][T10188] netlink: 65019 bytes leftover after parsing attributes in process `syz.5.1838'. [ 167.100493][ T10] usb 4-1: USB disconnect, device number 21 [ 167.115749][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 167.455723][ T872] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 167.613327][ T872] usb 1-1: Using ep0 maxpacket: 32 [ 167.638900][ T872] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 167.652803][ T872] usb 1-1: config 0 has no interface number 0 [ 167.661717][T10218] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1849'. [ 167.673169][ T872] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 167.689242][ T872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.701542][ T872] usb 1-1: Product: syz [ 167.706445][ T872] usb 1-1: Manufacturer: syz [ 167.706534][T10220] netlink: 'syz.3.1850': attribute type 1 has an invalid length. [ 167.711098][ T872] usb 1-1: SerialNumber: syz [ 167.729279][ T872] usb 1-1: config 0 descriptor?? [ 167.736840][ T872] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 167.738583][T10220] netlink: 'syz.3.1850': attribute type 2 has an invalid length. [ 167.829149][T10226] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.836641][T10226] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.946051][ T872] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 167.962188][ T872] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 168.181956][T10209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.191449][T10209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.257941][T10244] vxcan1: tx address claim with dlc 0 [ 168.338266][T10247] netlink: 'syz.1.1862': attribute type 2 has an invalid length. [ 168.347159][T10247] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1862'. [ 168.363504][ T30] audit: type=1400 audit(1744490903.272:703): avc: denied { open } for pid=10248 comm="syz.3.1863" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 168.422197][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 168.423274][ T5870] usb 1-1: USB disconnect, device number 22 [ 168.453672][ T5870] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 168.484795][ T5870] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 168.516211][ T5870] quatech2 1-1:0.51: device disconnected [ 168.529518][ T30] audit: type=1400 audit(1744490903.452:704): avc: denied { wake_alarm } for pid=10252 comm="syz.3.1865" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.826069][T10267] sg_read: process 879 (syz.2.1870) changed security contexts after opening file descriptor, this is not allowed. [ 168.834004][T10263] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 169.049002][T10274] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 169.123324][T10276] dccp_invalid_packet: P.Data Offset(4) too small [ 169.189414][T10280] QAT: failed to copy from user. [ 169.289056][ T30] audit: type=1400 audit(1744490904.212:705): avc: denied { create } for pid=10284 comm="syz.5.1879" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 169.444878][T10293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1883'. [ 169.725511][T10313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1893'. [ 169.786255][T10315] syz_tun: default FDB implementation only supports local addresses [ 171.075801][ T5870] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 171.232542][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 171.240398][ T5870] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 171.252256][ T5870] usb 3-1: config 0 has no interface number 0 [ 171.261749][ T5870] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 171.273940][ T5870] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 171.286459][ T5870] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 171.295848][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 171.308342][ T5870] usb 3-1: Product: syz [ 171.312937][ T5870] usb 3-1: SerialNumber: syz [ 171.320053][ T5870] usb 3-1: config 0 descriptor?? [ 171.332185][ T5870] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 171.342139][ T5870] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input26 [ 171.571574][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 171.791100][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 171.799992][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 171.807971][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 171.815199][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 171.815579][ T5870] usb 3-1: USB disconnect, device number 17 [ 171.822148][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 171.881778][ T5870] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 171.918503][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1936'. [ 171.966525][ T30] audit: type=1326 audit(1744490906.892:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.5.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700538d169 code=0x7ffc0000 [ 171.989916][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.006708][T10407] bond0 (unregistering): Released all slaves [ 172.017951][ T30] audit: type=1326 audit(1744490906.922:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.5.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f700538d169 code=0x7ffc0000 [ 172.041370][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.048162][ T30] audit: type=1326 audit(1744490906.922:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.5.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700538d169 code=0x7ffc0000 [ 172.074892][ T30] audit: type=1326 audit(1744490906.922:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.5.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700538d169 code=0x7ffc0000 [ 172.100175][ T30] audit: type=1326 audit(1744490906.922:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.5.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f700538d169 code=0x7ffc0000 [ 172.123668][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.142969][ T30] audit: type=1326 audit(1744490906.922:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.5.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700538d169 code=0x7ffc0000 [ 172.190785][ T30] audit: type=1326 audit(1744490906.932:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.5.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700538d169 code=0x7ffc0000 [ 172.409901][T10432] sp0: Synchronizing with TNC [ 172.418476][ T36] [ 172.420813][ T36] ===================================================== [ 172.427724][ T36] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 172.435160][ T36] 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 Not tainted [ 172.442245][ T36] ----------------------------------------------------- [ 172.449162][ T36] kworker/u8:2/36 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 172.456768][ T36] ffffffff8f576098 (disc_data_lock#3){.+.+}-{3:3}, at: sp_get+0x18/0xf0 [ 172.465092][ T36] [ 172.465092][ T36] and this task is already holding: [ 172.472432][ T36] ffffffff9ae25ff8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 172.481095][ T36] which would create a new lock dependency: [ 172.486950][ T36] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#3){.+.+}-{3:3} [ 172.494746][ T36] [ 172.494746][ T36] but this new dependency connects a HARDIRQ-irq-safe lock: [ 172.504160][ T36] (&port_lock_key){-.-.}-{3:3} [ 172.504174][ T36] [ 172.504174][ T36] ... which became HARDIRQ-irq-safe at: [ 172.516658][ T36] lock_acquire+0x179/0x350 [ 172.521319][ T36] _raw_spin_lock_irqsave+0x3a/0x60 [ 172.526580][ T36] serial8250_handle_irq+0x95/0xcb0 [ 172.531849][ T36] serial8250_default_handle_irq+0x9a/0x210 [ 172.537809][ T36] serial8250_interrupt+0x103/0x210 [ 172.543065][ T36] __handle_irq_event_percpu+0x229/0x7d0 [ 172.548771][ T36] handle_irq_event+0xab/0x1e0 [ 172.553593][ T36] handle_edge_irq+0x263/0xd10 [ 172.558415][ T36] __common_interrupt+0xdf/0x250 [ 172.563407][ T36] common_interrupt+0xba/0xe0 [ 172.568139][ T36] asm_common_interrupt+0x26/0x40 [ 172.573235][ T36] _raw_spin_unlock_irqrestore+0x31/0x80 [ 172.578943][ T36] uart_write+0x2a4/0xb30 [ 172.583344][ T36] n_tty_write+0x40f/0x1160 [ 172.587921][ T36] file_tty_write.constprop.0+0x4ff/0x9b0 [ 172.593803][ T36] redirected_tty_write+0xd4/0x150 [ 172.599012][ T36] vfs_write+0x5ba/0x1180 [ 172.603400][ T36] ksys_write+0x12a/0x240 [ 172.607802][ T36] do_syscall_64+0xcd/0x260 [ 172.612389][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.618342][ T36] [ 172.618342][ T36] to a HARDIRQ-irq-unsafe lock: [ 172.625328][ T36] (disc_data_lock#3){.+.+}-{3:3} [ 172.625347][ T36] [ 172.625347][ T36] ... which became HARDIRQ-irq-unsafe at: [ 172.638182][ T36] ... [ 172.638186][ T36] lock_acquire+0x179/0x350 [ 172.645313][ T36] _raw_read_lock+0x5f/0x70 [ 172.649887][ T36] sp_get+0x18/0xf0 [ 172.653780][ T36] sixpack_receive_buf+0x59/0x1c90 [ 172.658962][ T36] tty_ioctl+0x57d/0x1610 [ 172.663354][ T36] __x64_sys_ioctl+0x190/0x200 [ 172.668179][ T36] do_syscall_64+0xcd/0x260 [ 172.672747][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.678708][ T36] [ 172.678708][ T36] other info that might help us debug this: [ 172.678708][ T36] [ 172.688905][ T36] Possible interrupt unsafe locking scenario: [ 172.688905][ T36] [ 172.697202][ T36] CPU0 CPU1 [ 172.702537][ T36] ---- ---- [ 172.707882][ T36] lock(disc_data_lock#3); [ 172.712358][ T36] local_irq_disable(); [ 172.719080][ T36] lock(&port_lock_key); [ 172.725898][ T36] lock(disc_data_lock#3); [ 172.732891][ T36] [ 172.736314][ T36] lock(&port_lock_key); [ 172.740784][ T36] [ 172.740784][ T36] *** DEADLOCK *** [ 172.740784][ T36] [ 172.748895][ T36] 6 locks held by kworker/u8:2/36: [ 172.753969][ T36] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 172.765064][ T36] #1: ffffc90000ad7d18 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 172.776072][ T36] #2: ffff888025bb8ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x34/0x780 [ 172.785086][ T36] #3: ffff8880291790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 172.794357][ T36] #4: ffffffff9ae25ff8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 172.803459][ T36] #5: ffff8880291790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 172.812728][ T36] [ 172.812728][ T36] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 172.823099][ T36] -> (&port_lock_key){-.-.}-{3:3} { [ 172.828274][ T36] IN-HARDIRQ-W at: [ 172.832234][ T36] lock_acquire+0x179/0x350 [ 172.838371][ T36] _raw_spin_lock_irqsave+0x3a/0x60 [ 172.845203][ T36] serial8250_handle_irq+0x95/0xcb0 [ 172.852026][ T36] serial8250_default_handle_irq+0x9a/0x210 [ 172.859540][ T36] serial8250_interrupt+0x103/0x210 [ 172.866362][ T36] __handle_irq_event_percpu+0x229/0x7d0 [ 172.873614][ T36] handle_irq_event+0xab/0x1e0 [ 172.879996][ T36] handle_edge_irq+0x263/0xd10 [ 172.886380][ T36] __common_interrupt+0xdf/0x250 [ 172.892937][ T36] common_interrupt+0xba/0xe0 [ 172.899234][ T36] asm_common_interrupt+0x26/0x40 [ 172.905880][ T36] _raw_spin_unlock_irqrestore+0x31/0x80 [ 172.913133][ T36] uart_write+0x2a4/0xb30 [ 172.919088][ T36] n_tty_write+0x40f/0x1160 [ 172.925212][ T36] file_tty_write.constprop.0+0x4ff/0x9b0 [ 172.932565][ T36] redirected_tty_write+0xd4/0x150 [ 172.939301][ T36] vfs_write+0x5ba/0x1180 [ 172.945251][ T36] ksys_write+0x12a/0x240 [ 172.951216][ T36] do_syscall_64+0xcd/0x260 [ 172.957360][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.964882][ T36] IN-SOFTIRQ-W at: [ 172.968834][ T36] lock_acquire+0x179/0x350 [ 172.974969][ T36] _raw_spin_lock_irqsave+0x3a/0x60 [ 172.981789][ T36] serial8250_handle_irq+0x95/0xcb0 [ 172.988624][ T36] serial8250_default_handle_irq+0x9a/0x210 [ 172.996150][ T36] serial8250_interrupt+0x103/0x210 [ 173.002986][ T36] __handle_irq_event_percpu+0x229/0x7d0 [ 173.010249][ T36] handle_irq_event+0xab/0x1e0 [ 173.016636][ T36] handle_edge_irq+0x263/0xd10 [ 173.023030][ T36] __common_interrupt+0xdf/0x250 [ 173.029600][ T36] common_interrupt+0x61/0xe0 [ 173.035896][ T36] asm_common_interrupt+0x26/0x40 [ 173.042553][ T36] handle_softirqs+0x1dd/0x8e0 [ 173.048950][ T36] __irq_exit_rcu+0x109/0x170 [ 173.055261][ T36] irq_exit_rcu+0x9/0x30 [ 173.061128][ T36] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 173.068391][ T36] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 173.075991][ T36] console_flush_all+0x9a2/0xc60 [ 173.082548][ T36] console_unlock+0xd8/0x210 [ 173.088775][ T36] vprintk_emit+0x418/0x6d0 [ 173.094918][ T36] _printk+0xc7/0x100 [ 173.100517][ T36] kauditd_hold_skb+0x205/0x250 [ 173.106995][ T36] kauditd_send_queue+0x236/0x290 [ 173.113641][ T36] kauditd_thread+0x623/0xa70 [ 173.119954][ T36] kthread+0x3c2/0x780 [ 173.125646][ T36] ret_from_fork+0x45/0x80 [ 173.131693][ T36] ret_from_fork_asm+0x1a/0x30 [ 173.138083][ T36] INITIAL USE at: [ 173.141947][ T36] lock_acquire+0x179/0x350 [ 173.147982][ T36] _raw_spin_lock_irqsave+0x3a/0x60 [ 173.154715][ T36] serial8250_do_set_termios+0x310/0x1710 [ 173.161991][ T36] serial8250_set_termios+0x6e/0x80 [ 173.168721][ T36] uart_set_options+0x31a/0x5f0 [ 173.175105][ T36] serial8250_console_setup+0x189/0x450 [ 173.182184][ T36] univ8250_console_setup+0x1eb/0x2e0 [ 173.189089][ T36] try_enable_preferred_console+0x2fd/0x530 [ 173.196531][ T36] register_console+0x3ab/0x11b0 [ 173.203014][ T36] univ8250_console_init+0x5f/0x90 [ 173.209662][ T36] console_init+0x14f/0x680 [ 173.215703][ T36] start_kernel+0x29f/0x4d0 [ 173.221743][ T36] x86_64_start_reservations+0x18/0x30 [ 173.228745][ T36] x86_64_start_kernel+0xb0/0xc0 [ 173.235231][ T36] common_startup_64+0x13e/0x148 [ 173.241715][ T36] } [ 173.244182][ T36] ... key at: [] port_lock_key+0x0/0x40 [ 173.251785][ T36] [ 173.251785][ T36] the dependencies between the lock to be acquired [ 173.251790][ T36] and HARDIRQ-irq-unsafe lock: [ 173.265257][ T36] -> (disc_data_lock#3){.+.+}-{3:3} { [ 173.270621][ T36] HARDIRQ-ON-R at: [ 173.274573][ T36] lock_acquire+0x179/0x350 [ 173.280694][ T36] _raw_read_lock+0x5f/0x70 [ 173.286818][ T36] sp_get+0x18/0xf0 [ 173.292246][ T36] sixpack_receive_buf+0x59/0x1c90 [ 173.298990][ T36] tty_ioctl+0x57d/0x1610 [ 173.304946][ T36] __x64_sys_ioctl+0x190/0x200 [ 173.311333][ T36] do_syscall_64+0xcd/0x260 [ 173.317458][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.324971][ T36] SOFTIRQ-ON-R at: [ 173.328919][ T36] lock_acquire+0x179/0x350 [ 173.335041][ T36] _raw_read_lock+0x5f/0x70 [ 173.341164][ T36] sp_get+0x18/0xf0 [ 173.346591][ T36] sixpack_receive_buf+0x59/0x1c90 [ 173.353321][ T36] tty_ioctl+0x57d/0x1610 [ 173.359273][ T36] __x64_sys_ioctl+0x190/0x200 [ 173.365658][ T36] do_syscall_64+0xcd/0x260 [ 173.371785][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.379296][ T36] INITIAL USE at: [ 173.383157][ T36] lock_acquire+0x179/0x350 [ 173.389191][ T36] _raw_write_lock_irq+0x36/0x50 [ 173.395661][ T36] sixpack_close+0x1e/0x2f0 [ 173.401696][ T36] tty_ldisc_close+0x111/0x1a0 [ 173.407992][ T36] tty_ldisc_kill+0x8e/0x150 [ 173.414116][ T36] tty_ldisc_release+0x109/0x2e0 [ 173.420589][ T36] tty_release_struct+0x23/0xe0 [ 173.426975][ T36] tty_release+0xe2d/0x1430 [ 173.433014][ T36] __fput+0x3ff/0xb70 [ 173.438529][ T36] task_work_run+0x14d/0x240 [ 173.444653][ T36] syscall_exit_to_user_mode+0x27b/0x2a0 [ 173.451820][ T36] do_syscall_64+0xda/0x260 [ 173.457862][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.465287][ T36] INITIAL READ USE at: [ 173.469595][ T36] lock_acquire+0x179/0x350 [ 173.476063][ T36] _raw_read_lock+0x5f/0x70 [ 173.482536][ T36] sp_get+0x18/0xf0 [ 173.488312][ T36] sixpack_receive_buf+0x59/0x1c90 [ 173.495392][ T36] tty_ioctl+0x57d/0x1610 [ 173.501691][ T36] __x64_sys_ioctl+0x190/0x200 [ 173.508424][ T36] do_syscall_64+0xcd/0x260 [ 173.514897][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.522755][ T36] } [ 173.525224][ T36] ... key at: [] disc_data_lock+0x18/0xfe0 [ 173.533086][ T36] ... acquired at: [ 173.536859][ T36] lock_acquire+0x179/0x350 [ 173.541504][ T36] _raw_read_lock+0x5f/0x70 [ 173.546151][ T36] sp_get+0x18/0xf0 [ 173.550106][ T36] sixpack_write_wakeup+0x20/0x390 [ 173.555362][ T36] tty_wakeup+0xe5/0x120 [ 173.559748][ T36] tty_port_default_wakeup+0x2a/0x40 [ 173.565173][ T36] serial8250_tx_chars+0x68e/0x860 [ 173.570439][ T36] __start_tx+0x3e9/0x4a0 [ 173.574912][ T36] serial8250_start_tx+0x368/0x530 [ 173.580177][ T36] __uart_start+0x292/0x4c0 [ 173.584827][ T36] uart_write+0x218/0xb30 [ 173.589317][ T36] sixpack_receive_buf+0x3d0/0x1c90 [ 173.594660][ T36] tty_ldisc_receive_buf+0x157/0x1a0 [ 173.600105][ T36] tty_port_default_receive_buf+0x70/0xb0 [ 173.605973][ T36] flush_to_ldisc+0x268/0x780 [ 173.610794][ T36] process_one_work+0x9cc/0x1b70 [ 173.615875][ T36] worker_thread+0x6c8/0xf10 [ 173.620608][ T36] kthread+0x3c2/0x780 [ 173.624831][ T36] ret_from_fork+0x45/0x80 [ 173.629392][ T36] ret_from_fork_asm+0x1a/0x30 [ 173.634302][ T36] [ 173.636596][ T36] [ 173.636596][ T36] stack backtrace: [ 173.642454][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 173.642467][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.642475][ T36] Workqueue: events_unbound flush_to_ldisc [ 173.642490][ T36] Call Trace: [ 173.642495][ T36] [ 173.642500][ T36] dump_stack_lvl+0x116/0x1f0 [ 173.642515][ T36] check_irq_usage+0x7dc/0x920 [ 173.642533][ T36] ? check_path.constprop.0+0x24/0x50 [ 173.642548][ T36] ? __lock_acquire+0x1189/0x1ba0 [ 173.642557][ T36] __lock_acquire+0x1189/0x1ba0 [ 173.642566][ T36] ? lock_acquire+0x179/0x350 [ 173.642575][ T36] lock_acquire+0x179/0x350 [ 173.642584][ T36] ? sp_get+0x18/0xf0 [ 173.642595][ T36] ? ldsem_down_read_trylock+0x11a/0x180 [ 173.642605][ T36] ? ldsem_down_read_trylock+0x120/0x180 [ 173.642616][ T36] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 173.642628][ T36] _raw_read_lock+0x5f/0x70 [ 173.642639][ T36] ? sp_get+0x18/0xf0 [ 173.642649][ T36] sp_get+0x18/0xf0 [ 173.642660][ T36] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 173.642672][ T36] sixpack_write_wakeup+0x20/0x390 [ 173.642684][ T36] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 173.642696][ T36] tty_wakeup+0xe5/0x120 [ 173.642708][ T36] tty_port_default_wakeup+0x2a/0x40 [ 173.642717][ T36] serial8250_tx_chars+0x68e/0x860 [ 173.642728][ T36] __start_tx+0x3e9/0x4a0 [ 173.642737][ T36] serial8250_start_tx+0x368/0x530 [ 173.642747][ T36] __uart_start+0x292/0x4c0 [ 173.642759][ T36] uart_write+0x218/0xb30 [ 173.642774][ T36] sixpack_receive_buf+0x3d0/0x1c90 [ 173.642788][ T36] ? ldsem_down_read_trylock+0x120/0x180 [ 173.642798][ T36] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 173.642809][ T36] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 173.642821][ T36] tty_ldisc_receive_buf+0x157/0x1a0 [ 173.642836][ T36] tty_port_default_receive_buf+0x70/0xb0 [ 173.642854][ T36] flush_to_ldisc+0x268/0x780 [ 173.642869][ T36] ? rcu_is_watching+0x12/0xc0 [ 173.642883][ T36] process_one_work+0x9cc/0x1b70 [ 173.642896][ T36] ? __pfx_process_one_work+0x10/0x10 [ 173.642909][ T36] ? assign_work+0x1a0/0x250 [ 173.642919][ T36] worker_thread+0x6c8/0xf10 [ 173.642931][ T36] ? __kthread_parkme+0x19e/0x250 [ 173.642946][ T36] ? __pfx_worker_thread+0x10/0x10 [ 173.642957][ T36] kthread+0x3c2/0x780 [ 173.642966][ T36] ? __pfx_kthread+0x10/0x10 [ 173.642975][ T36] ? __pfx_kthread+0x10/0x10 [ 173.642984][ T36] ? __pfx_kthread+0x10/0x10 [ 173.642993][ T36] ? __pfx_kthread+0x10/0x10 [ 173.643002][ T36] ? rcu_is_watching+0x12/0xc0 [ 173.643014][ T36] ? __pfx_kthread+0x10/0x10 [ 173.643024][ T36] ret_from_fork+0x45/0x80 [ 173.643033][ T36] ? __pfx_kthread+0x10/0x10 [ 173.643043][ T36] ret_from_fork_asm+0x1a/0x30 [ 173.643060][ T36] [ 173.643180][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.919578][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.053731][ T5870] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 174.213692][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 174.225216][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 174.236429][ T5870] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 174.246611][ T5870] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 174.256090][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.264824][ T5870] usb 1-1: config 0 descriptor?? [ 174.270172][T10430] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 174.280434][ T5870] gspca_main: spca561-2.14.0 probing abcd:cdee [ 174.484084][ T5870] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 174.492395][ T5870] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.499457][ T5870] usb 1-1: MIDIStreaming interface descriptor not found [ 174.511819][ T5870] usb 1-1: USB disconnect, device number 23 [ 180.612762][ T5136] Bluetooth: hci2: command 0x206a tx timeout [ 180.614093][ T53] Bluetooth: hci3: command 0x206a tx timeout