last executing test programs: 6.560258555s ago: executing program 0 (id=1969): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x20e00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 6.448253452s ago: executing program 0 (id=1970): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) finit_module(r0, 0x0, 0x1) 6.387509721s ago: executing program 0 (id=1971): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000080)=0x4) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 6.386878917s ago: executing program 0 (id=1972): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x408, 0x3001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, 0xfffffffffffffffe) 3.325485274s ago: executing program 0 (id=2020): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 2.466007687s ago: executing program 2 (id=2036): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [], "9d0bc89d05100000"}}}}}}}, 0x0) 2.344004044s ago: executing program 2 (id=2040): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) 2.228370572s ago: executing program 2 (id=2042): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRES32], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40045b0a, &(0x7f0000000000)={0xfffffff7, 0x100, 0x4, 0xff, 0x1, 0x100}) 2.067731221s ago: executing program 1 (id=2043): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r0, &(0x7f0000004440)=""/4096, 0x1000) 1.707531482s ago: executing program 1 (id=2046): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a008000", @ANYRES32, @ANYBLOB="f9ffffff080002000b000000140001feff000000000000000000ffff00000000140001"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.598969169s ago: executing program 3 (id=2048): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}}, 0x0) 1.568836358s ago: executing program 1 (id=2049): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x6c, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x8, 0x20000003, 0x5, 0x3, 0x100, 0x7, 0x5, 0xdce, 0x5, 0xa, 0x18, 0x1d, 0x0, 0xffff8004, 0x9}}]}}]}, 0x170}}, 0x24040004) 1.480088758s ago: executing program 3 (id=2050): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.431535383s ago: executing program 1 (id=2051): r0 = fanotify_init(0x1, 0x80000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x40001010, r1, 0x0) fanotify_mark(r0, 0x7e, 0x8000022, r1, 0x0) 1.357257779s ago: executing program 3 (id=2052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x3, 0x100}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1.286233825s ago: executing program 1 (id=2053): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 1.284281523s ago: executing program 3 (id=2054): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 1.113027718s ago: executing program 4 (id=2056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xe1, 0x0, 0x1}]}) 1.05326115s ago: executing program 1 (id=2057): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000340)=""/170, 0xaa) 871.777455ms ago: executing program 4 (id=2058): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf2564010101000000000000000000000000ff020000000000000000000000000001000400004e210002000000a021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000039e80000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000700000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 684.276896ms ago: executing program 4 (id=2059): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001100)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x405, 0xd, 0x10000001, 0x1000000004, 0x100000001]}, &(0x7f0000000080)=0x78) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 650.964798ms ago: executing program 3 (id=2060): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x80}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u'], 0x17, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 547.995828ms ago: executing program 4 (id=2061): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)={0x3c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x117}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x24040044) 524.950252ms ago: executing program 2 (id=2062): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x1013c1) 480.01733ms ago: executing program 3 (id=2063): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x0) 384.498499ms ago: executing program 2 (id=2064): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000640)=0x653, 0x4) sendto$inet6(r0, &(0x7f0000000240)="c4", 0xfffffffffffffedf, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) 251.946316ms ago: executing program 4 (id=2065): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xe}, {0x0, 0xfff3}, {0xb, 0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x2c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0xfffffffffffffd37, 0x5, [{0x2f8c, 0x7, 0x3, 0x2cc}, {0x4, 0x7, 0x41, 0x6}, {0x0, 0x2, 0xd, 0x468}]}}, @TCA_BPF_POLICE={0x0, 0x2, [@TCA_POLICE_RESULT={0x0, 0x5, 0x401}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x2, 0xcee, 0xc, 0x8, 0x2, 0x7fffffff, 0xfd3, 0x3, 0x3, 0xfffffff8, 0xcb, 0x1, 0xff, 0x2, 0x9, 0x9, 0x1, 0x2, 0x7, 0x4, 0x7, 0x6, 0x8c0, 0x5e1ca0f3, 0x1, 0x80000001, 0xf, 0x4, 0x48, 0x1, 0x71bd, 0x5, 0x0, 0x7ff, 0xa, 0x8, 0x4, 0x1, 0xe, 0x2, 0x3, 0x7f, 0x1, 0xe40b, 0x8, 0x51d19dc6, 0x1, 0x7f, 0x7f, 0x7, 0x80000001, 0x4, 0x0, 0x4, 0xa19a, 0x2, 0x0, 0x10000, 0x5, 0x8, 0x3cd343f7, 0x9, 0x1800000, 0x7, 0xffff, 0x35fd, 0x6, 0xe, 0x7, 0x1, 0xd5, 0x9, 0x7, 0xba76, 0x377, 0x101, 0x80, 0x4, 0x5, 0x2, 0x8000, 0x1ff, 0x7, 0x8, 0x8, 0x7ff, 0x8, 0x1000, 0x5, 0xc, 0x4, 0x8, 0x4, 0xa, 0x6, 0xbe, 0x3ff, 0x6, 0x8, 0x1, 0x8, 0x5, 0x8, 0x3, 0x0, 0x7, 0x8, 0x2, 0xffffffff, 0x40, 0x1, 0x1, 0x6, 0x8, 0xf, 0xc947, 0x8000, 0x400, 0x2eb, 0x0, 0x5, 0x4, 0x7, 0x8, 0xf, 0x1f3, 0x0, 0x1, 0xfffff10b, 0x7, 0x4, 0x4, 0x429, 0x1, 0x2, 0x4, 0x4, 0xffff90d4, 0x10, 0xc6000000, 0x0, 0x90b, 0x80, 0x7fff, 0x3, 0x5, 0x0, 0x28000, 0x7e28, 0x5, 0x7, 0x5ca, 0x6, 0xa1, 0x1, 0xa00, 0xa955, 0x0, 0xfffff800, 0x3, 0x1ff, 0x6, 0x4, 0xa, 0xbf, 0xd2, 0x0, 0xda, 0x7fff, 0x2, 0x4, 0xfffff28d, 0x30000, 0x7fff, 0x8001, 0xe, 0x7, 0x10001, 0x800, 0x6, 0x3, 0x0, 0x3, 0x401, 0x16d, 0x0, 0xeb8, 0x7b60, 0x401, 0xe0, 0x8, 0x2, 0x0, 0x200, 0x3, 0x2, 0x5, 0xf47, 0x86, 0x80000000, 0x8001, 0x7, 0xfffffff7, 0x6, 0xf94, 0xffffffff, 0x1000, 0x8, 0x6, 0x5, 0xa7, 0xe7bb, 0x2ac2, 0x7, 0x2, 0x9, 0x2, 0x5, 0x2ae7, 0xfffffffe, 0x8, 0x4, 0x5, 0x7, 0x7, 0x2, 0x2, 0x5, 0x3, 0xba3d, 0xe, 0x5, 0x2, 0x4, 0x9, 0x2, 0x2, 0x6, 0x8, 0x5, 0x7, 0x0, 0x8, 0x10000, 0x2, 0x10001, 0x103, 0x101, 0x1, 0x9, 0x1, 0xa, 0x7, 0x3, 0xffff0000, 0x80]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 169.677162ms ago: executing program 0 (id=2066): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000140)={0x24, r2, 0x8808916c5f45b02d, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x400a}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4068010) 134.428011ms ago: executing program 2 (id=2067): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) 0s ago: executing program 4 (id=2068): syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x4f4c82, 0x5c, 0x8}, 0x18) kernel console output (not intermixed with test programs): T30] audit: type=1400 audit(1781391077.206:434): avc: denied { create } for pid=7879 comm="syz.0.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 130.597201][ T7882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.604376][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 130.604530][ T30] audit: type=1400 audit(1781391077.246:435): avc: denied { write } for pid=7879 comm="syz.0.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 130.651378][ T5714] usb 2-1: string descriptor 0 read error: -71 [ 130.676591][ T7882] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 130.697395][ T5714] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 130.714979][ T5714] letsketch 0003:6161:4D15.0006: probe with driver letsketch failed with error -32 [ 130.722140][ T30] audit: type=1400 audit(1781391077.376:436): avc: denied { read } for pid=7885 comm="syz.0.882" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 130.750298][ T5714] usb 2-1: USB disconnect, device number 8 [ 130.765767][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 130.795608][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 130.804981][ T30] audit: type=1400 audit(1781391077.406:437): avc: denied { open } for pid=7885 comm="syz.0.882" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 130.841374][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 130.855355][ T10] usb 5-1: can't read configurations, error -71 [ 130.882862][ T7892] netlink: 'syz.2.885': attribute type 12 has an invalid length. [ 130.912805][ T7892] netlink: 120 bytes leftover after parsing attributes in process `syz.2.885'. [ 131.266389][ T5714] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 131.416043][ T7912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.427186][ T5714] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.444407][ T5714] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.470813][ T5714] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.479153][ T5714] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 131.489731][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.503369][ T5714] usb 3-1: config 0 descriptor?? [ 131.540514][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.895'. [ 131.654085][ T7917] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.668160][ T7920] netlink: 'syz.4.896': attribute type 16 has an invalid length. [ 131.678365][ T7917] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.687646][ T7920] netlink: 'syz.4.896': attribute type 17 has an invalid length. [ 131.752544][ T806] hsr0 speed is unknown, defaulting to 1000 [ 131.760276][ T806] syz1: Port: 1 Link DOWN [ 131.822645][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.829831][ T7920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.862377][ T7920] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.869562][ T7920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.941378][ T5714] smartjoyplus 0003:6666:8804.0007: unknown main item tag 0x0 [ 131.957374][ T5714] smartjoyplus 0003:6666:8804.0007: item fetching failed at offset 2/5 [ 131.966364][ T5714] smartjoyplus 0003:6666:8804.0007: parse failed [ 131.972969][ T5746] hsr0 speed is unknown, defaulting to 1000 [ 131.981297][ T5746] syz1: Port: 1 Link ACTIVE [ 131.986190][ T5714] smartjoyplus 0003:6666:8804.0007: probe with driver smartjoyplus failed with error -22 [ 132.159117][ T5735] usb 3-1: USB disconnect, device number 13 [ 133.305514][ T5631] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 133.644247][ T5714] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 133.660022][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.928'. [ 133.809959][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.830873][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.848309][ T5714] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 133.866973][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.889038][ T5714] usb 4-1: config 0 descriptor?? [ 134.309882][ T5714] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 134.317682][ T5714] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 134.326433][ T5714] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 134.333827][ T5714] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 134.342812][ T5714] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 134.362736][ T5631] block nbd0: Receive control failed (result -32) [ 134.363040][ T5621] block nbd0: Receive control failed (result -32) [ 134.380920][ T5714] cm6533_jd 0003:0D8C:0022.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 134.504272][ T5746] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 134.517801][ T5735] usb 4-1: USB disconnect, device number 15 [ 134.666027][ T5746] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.678352][ T5746] usb 3-1: config 0 interface 0 has no altsetting 0 [ 134.687937][ T5746] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 134.697477][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.706882][ T5746] usb 3-1: Product: syz [ 134.711125][ T5746] usb 3-1: Manufacturer: syz [ 134.716039][ T5746] usb 3-1: SerialNumber: syz [ 134.723983][ T5746] usb 3-1: config 0 descriptor?? [ 134.739420][ T5746] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 134.761390][ T5746] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.786005][ T5746] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 134.801386][ T5746] usb 3-1: media controller created [ 134.818138][ T5746] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.831896][ T30] audit: type=1800 audit(1781391081.496:438): pid=8025 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.942" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=18254 res=0 errno=0 [ 134.946715][ T5746] DVB: Unable to find symbol tda10046_attach() [ 134.952948][ T5746] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 134.962601][ T5746] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 135.090124][ T8038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.948'. [ 135.232596][ T30] audit: type=1400 audit(1781391081.886:439): avc: denied { getopt } for pid=8045 comm="syz.1.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.422800][ T30] audit: type=1400 audit(1781391082.076:440): avc: denied { mounton } for pid=8055 comm="syz.4.957" path="/236/file0" dev="tmpfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.478116][ T30] audit: type=1400 audit(1781391082.116:441): avc: denied { mount } for pid=8055 comm="syz.4.957" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 135.501093][ T30] audit: type=1400 audit(1781391082.156:442): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 135.582977][ T5746] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 135.600273][ T5746] usb 3-1: USB disconnect, device number 14 [ 135.620229][ T8061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.659824][ T8061] bond0: (slave bond1): Enslaving as an active interface with an up link [ 136.866124][ T30] audit: type=1400 audit(1781391083.526:443): avc: denied { create } for pid=8109 comm="syz.3.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.892907][ T30] audit: type=1400 audit(1781391083.546:444): avc: denied { connect } for pid=8109 comm="syz.3.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.915342][ T30] audit: type=1400 audit(1781391083.546:445): avc: denied { read } for pid=8109 comm="syz.3.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.939217][ T30] audit: type=1400 audit(1781391083.596:446): avc: denied { write } for pid=8109 comm="syz.3.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.050842][ T8121] sctp: [Deprecated]: syz.4.985 (pid 8121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.050842][ T8121] Use struct sctp_sack_info instead [ 137.131236][ T30] audit: type=1400 audit(1781391083.786:447): avc: denied { read } for pid=8124 comm="syz.4.987" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 137.244222][ T5735] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 137.408823][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.425235][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.436177][ T5735] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 137.445501][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.458516][ T5735] usb 4-1: config 0 descriptor?? [ 137.686877][ T8117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.699059][ T8117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.917960][ T5735] hid (null): unknown global tag 0xc [ 137.923702][ T5735] hid (null): bogus close delimiter [ 137.930443][ T5735] hid (null): invalid report_count 32155 [ 137.941538][ T5735] hid (null): unknown global tag 0xd [ 137.961230][ T5735] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 137.972332][ T5735] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 137.982136][ T5735] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 137.985458][ T8157] netlink: 'syz.4.1002': attribute type 4 has an invalid length. [ 137.989570][ T5735] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 138.003830][ T5735] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 138.018654][ T5735] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 138.026742][ T5735] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 138.033719][ T5735] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 138.042029][ T5735] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 138.050877][ T5735] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 138.063760][ T5735] asus 0003:0B05:1ABE.0009: unknown global tag 0xc [ 138.078801][ T5735] asus 0003:0B05:1ABE.0009: item 0 2 1 12 parsing failed [ 138.087733][ T5735] asus 0003:0B05:1ABE.0009: Asus hid parse failed: -22 [ 138.095619][ T5735] asus 0003:0B05:1ABE.0009: probe with driver asus failed with error -22 [ 138.104606][ T5746] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 138.185513][ T805] usb 4-1: USB disconnect, device number 16 [ 138.276414][ T5746] usb 3-1: Using ep0 maxpacket: 16 [ 138.283406][ T5746] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.303199][ T5746] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.313607][ T5746] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.331154][ T5746] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 138.348288][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.368210][ T5746] usb 3-1: config 0 descriptor?? [ 138.724280][ T806] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 138.785252][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1013'. [ 138.801644][ T5746] hid (null): global environment stack underflow [ 138.809590][ T5746] hid (null): unknown global tag 0xd [ 138.816794][ T5746] hid (null): unknown global tag 0xe [ 138.822117][ T5746] hid (null): bogus close delimiter [ 138.876266][ T806] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.887917][ T806] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 138.903201][ T806] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.912525][ T806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 138.920861][ T5714] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 138.927714][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'. [ 138.929140][ T806] usb 5-1: SerialNumber: syz [ 138.952865][ T806] hub 5-1:1.0: bad descriptor, ignoring hub [ 138.961383][ T806] hub 5-1:1.0: probe with driver hub failed with error -5 [ 138.969459][ T806] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 139.030641][ T5707] usb 3-1: USB disconnect, device number 15 [ 139.084228][ T5714] usb 2-1: Using ep0 maxpacket: 8 [ 139.093652][ T5714] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 139.105947][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.114575][ T5714] usb 2-1: Product: syz [ 139.118786][ T5714] usb 2-1: Manufacturer: syz [ 139.123415][ T5714] usb 2-1: SerialNumber: syz [ 139.133225][ T5714] usb 2-1: config 0 descriptor?? [ 139.143016][ T5714] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 139.162733][ T806] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 139.171262][ T5714] dvb-usb: bulk message failed: -22 (2/0) [ 139.212659][ T806] usb 5-1: USB disconnect, device number 12 [ 139.222161][ T5714] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.250334][ T5714] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 139.285195][ T5714] usb 2-1: media controller created [ 139.313176][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.331121][ T8203] loop5: detected capacity change from 0 to 7 [ 139.340476][ T8203] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.354918][ T8203] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.363550][ T5714] cxusb: set interface failed [ 139.364392][ T8203] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.368700][ T5714] dvb-usb: bulk message failed: -22 (1/0) [ 139.377608][ T8203] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.391001][ T8203] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.411305][ T5714] DVB: Unable to find symbol mt352_attach() [ 139.418509][ T5714] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 139.420241][ T8203] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.437964][ T8203] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.445998][ T8203] ldm_validate_partition_table(): Disk read failed. [ 139.453786][ T8203] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.463023][ T8203] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.471411][ T8203] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.479473][ T8203] Dev loop5: unable to read RDB block 0 [ 139.485636][ T8203] loop5: unable to read partition table [ 139.491401][ T8203] loop5: partition table beyond EOD, truncated [ 139.497736][ T8203] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 139.517175][ T5714] rc_core: IR keymap rc-dvico-portable not found [ 139.523644][ T5714] Registered IR keymap rc-empty [ 139.531894][ T5714] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 139.557945][ T5714] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input14 [ 139.582466][ T5714] dvb-usb: schedule remote query interval to 100 msecs. [ 139.604226][ T5714] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 139.629641][ T5714] usb 2-1: USB disconnect, device number 9 [ 139.721164][ T8212] trusted_key: encrypted_key: keylen parameter is missing [ 139.808813][ T5714] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 139.973674][ T8226] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.050473][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 140.050490][ T30] audit: type=1400 audit(1781391086.706:452): avc: denied { write } for pid=805 comm="kworker/0:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19798 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 140.166891][ T30] audit: type=1400 audit(1781391086.816:453): avc: denied { mount } for pid=8233 comm="syz.3.1039" name="/" dev="configfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 140.208474][ T30] audit: type=1400 audit(1781391086.856:454): avc: denied { map } for pid=8237 comm="syz.1.1038" path="socket:[19810]" dev="sockfs" ino=19810 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.281472][ T30] audit: type=1400 audit(1781391086.856:455): avc: denied { read accept } for pid=8237 comm="syz.1.1038" path="socket:[19810]" dev="sockfs" ino=19810 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.312360][ T30] audit: type=1400 audit(1781391086.866:456): avc: denied { append } for pid=8236 comm="syz.4.1040" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 140.345757][ T30] audit: type=1400 audit(1781391087.006:457): avc: denied { open } for pid=8244 comm="syz.1.1043" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 140.374046][ T30] audit: type=1400 audit(1781391087.026:458): avc: denied { ioctl } for pid=8244 comm="syz.1.1043" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 140.663580][ T30] audit: type=1400 audit(1781391087.316:459): avc: denied { attach_queue } for pid=8259 comm="syz.2.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 140.683504][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1051'. [ 140.904449][ T5707] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 140.934426][ T30] audit: type=1400 audit(1781391087.596:460): avc: denied { write } for pid=8279 comm="syz.0.1060" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 141.044265][ T5714] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 141.064357][ T5707] usb 4-1: Using ep0 maxpacket: 8 [ 141.071839][ T5707] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 141.083572][ T5707] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 141.093638][ T5707] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.103750][ T5707] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.117611][ T5707] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.128650][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.205656][ T806] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 141.222239][ T5714] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.237100][ T5714] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 141.258929][ T30] audit: type=1326 audit(1781391087.916:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.1.1064" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda9439ce59 code=0x0 [ 141.264606][ T5714] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 141.295836][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.308339][ T8274] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 141.318971][ T5714] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 141.346275][ T5707] usb 4-1: GET_CAPABILITIES returned 0 [ 141.358441][ T5707] usbtmc 4-1:16.0: can't read capabilities [ 141.374274][ T806] usb 3-1: Using ep0 maxpacket: 32 [ 141.388886][ T806] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 141.413382][ T806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.431292][ T806] usb 3-1: config 0 descriptor?? [ 141.443226][ T806] gspca_main: sq930x-2.14.0 probing 041e:403c [ 141.569540][ T5714] usb 4-1: USB disconnect, device number 17 [ 141.569588][ T10] usb 5-1: USB disconnect, device number 13 [ 142.284387][ T806] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 142.354552][ T806] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 142.379047][ T806] usb 3-1: USB disconnect, device number 16 [ 142.471949][ T8319] hugetlbfs: syz.4.1079 (8319): Using mlock ulimits for SHM_HUGETLB is obsolete [ 142.546108][ T8324] bond2: ARP target 9.0.0.0 is already present [ 142.552423][ T8324] bond2: option arp_ip_target: invalid value (9) [ 142.560154][ T8324] bond2 (unregistering): Released all slaves [ 142.699347][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 142.712192][ T8331] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1083'. [ 143.518546][ T8368] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1101'. [ 144.207502][ T8397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1113'. [ 144.217832][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1113'. [ 144.736051][ T5631] Bluetooth: hci5: command 0x1003 tx timeout [ 144.737279][ T5621] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 145.094054][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 145.094069][ T30] audit: type=1400 audit(1781391091.746:466): avc: denied { append } for pid=8426 comm="syz.1.1126" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 146.134106][ T145] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.161456][ T30] audit: type=1400 audit(1781391092.816:467): avc: denied { ioctl } for pid=8454 comm="syz.2.1139" path="socket:[21023]" dev="sockfs" ino=21023 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.204430][ T145] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.224182][ T145] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.232977][ T145] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.830437][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1154'. [ 147.334813][ T30] audit: type=1400 audit(1781391093.986:468): avc: denied { read } for pid=8520 comm="syz.1.1168" path="socket:[20315]" dev="sockfs" ino=20315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.442348][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1173'. [ 147.508520][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1173'. [ 147.542390][ T8533] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1174'. [ 147.982640][ T8551] batadv_slave_0: Caught tx_queue_len zero misconfig [ 148.196504][ T30] audit: type=1326 audit(1781391094.856:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8552 comm="syz.2.1183" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551759ce59 code=0x7fc00000 [ 148.468115][ T8566] netlink: 'syz.4.1188': attribute type 7 has an invalid length. [ 148.498216][ T8568] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1189'. [ 148.921148][ T30] audit: type=1326 audit(1781391095.576:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8552 comm="syz.2.1183" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f551759ce59 code=0x7fc00000 [ 149.278339][ T5735] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 149.444182][ T5735] usb 3-1: Using ep0 maxpacket: 32 [ 149.465370][ T5735] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 149.485657][ T5735] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 149.507885][ T5735] usb 3-1: config 0 interface 0 has no altsetting 0 [ 149.524102][ T5735] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 149.544059][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.564615][ T5735] usb 3-1: Product: syz [ 149.572921][ T5735] usb 3-1: Manufacturer: syz [ 149.579115][ T5735] usb 3-1: SerialNumber: syz [ 149.606973][ T5735] usb 3-1: config 0 descriptor?? [ 150.042660][ T5735] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 150.234250][ T805] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 150.274335][ T806] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 150.404605][ T805] usb 4-1: Using ep0 maxpacket: 32 [ 150.416362][ T805] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 150.424568][ T806] usb 5-1: Using ep0 maxpacket: 8 [ 150.440769][ T806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.450239][ T805] usb 4-1: config 0 has no interface number 0 [ 150.454223][ T806] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 150.466989][ T5735] usb 3-1: USB disconnect, device number 17 [ 150.485367][ T805] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 150.502829][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.504373][ T806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 150.519398][ T805] usb 4-1: Product: syz [ 150.526257][ T805] usb 4-1: Manufacturer: syz [ 150.532300][ T805] usb 4-1: SerialNumber: syz [ 150.537128][ T806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 150.548487][ T806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 150.565833][ T805] usb 4-1: config 0 descriptor?? [ 150.570882][ T806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33025, setting to 1024 [ 150.583320][ T806] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.596299][ T805] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 150.625328][ T8629] syz_tun: entered allmulticast mode [ 150.632484][ T8628] syz_tun: left allmulticast mode [ 150.641638][ T806] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 150.651443][ T806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.659573][ T806] usb 5-1: Product: syz [ 150.663880][ T806] usb 5-1: Manufacturer: syz [ 150.668814][ T806] usb 5-1: SerialNumber: syz [ 150.685506][ T806] usb 5-1: config 0 descriptor?? [ 150.693855][ T8625] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 150.807359][ T805] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 150.822072][ T805] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 151.205979][ T8644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.228249][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 151.231011][ T5707] usb 4-1: USB disconnect, device number 18 [ 151.272282][ T5707] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 151.301045][ T5707] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 151.344677][ T5707] quatech2 4-1:0.51: device disconnected [ 151.401385][ T8653] netlink: 'syz.0.1227': attribute type 63 has an invalid length. [ 151.432535][ T8653] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.718852][ T30] audit: type=1400 audit(1781391098.376:471): avc: denied { map } for pid=8663 comm="syz.4.1233" path="socket:[21529]" dev="sockfs" ino=21529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.833076][ T8672] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1237'. [ 151.862115][ T8672] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 151.927082][ T30] audit: type=1400 audit(1781391098.586:472): avc: denied { read } for pid=8678 comm="syz.4.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.064693][ T806] rc_core: IR keymap rc-snapstream-firefly not found [ 152.074317][ T806] Registered IR keymap rc-empty [ 152.088871][ T806] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 152.117755][ T805] hid_parser_main: 116 callbacks suppressed [ 152.117777][ T805] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 152.132583][ T806] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 152.147859][ T805] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 152.173435][ T805] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 152.195165][ T805] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 152.215184][ T805] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 152.219985][ T806] input: syz syz mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 152.238640][ T805] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 152.257331][ T805] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 152.278614][ T805] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 152.294267][ T805] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 152.303714][ T806] usb 5-1: USB disconnect, device number 14 [ 152.309817][ C1] ati_remote 5-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 152.322567][ T805] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 152.421424][ T805] hid-generic 0103:0004:0000.000B: hidraw0: HID v0.05 Device [syz0] on syz1 [ 152.475203][ T8695] fido_id[8695]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 152.476517][ T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 152.649668][ T10] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 152.662039][ T10] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 152.681747][ T10] usb 2-1: config 150 has no interface number 0 [ 152.692636][ T10] usb 2-1: config 150 interface 204 has no altsetting 0 [ 152.701674][ T10] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 152.716710][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.732030][ T10] usb 2-1: Product: syz [ 152.741137][ T10] usb 2-1: Manufacturer: syz [ 152.750212][ T10] usb 2-1: SerialNumber: syz [ 152.982476][ T10] xr_serial 2-1:150.204: skipping garbage [ 152.988656][ T10] xr_serial 2-1:150.204: xr_serial converter detected [ 153.254205][ T805] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 153.284228][ T5728] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 153.404256][ T805] usb 4-1: Using ep0 maxpacket: 32 [ 153.411327][ T805] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92 [ 153.426364][ T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.444973][ T805] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 153.459507][ T5728] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 153.469603][ T5728] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 153.481253][ T5728] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.495971][ T5728] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 153.507563][ T5728] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 153.520267][ T5728] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 153.525290][ T30] audit: type=1400 audit(1781391100.186:473): avc: denied { write } for pid=8716 comm="syz.2.1256" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 153.528204][ T5728] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 153.569150][ T5728] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.583229][ T10] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 153.589664][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 153.598530][ T5728] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 153.616434][ T10] usb 2-1: USB disconnect, device number 10 [ 153.624159][ T5728] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 153.638399][ T10] xr_serial 2-1:150.204: device disconnected [ 153.650631][ T5728] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 153.661136][ T5728] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 153.681010][ T5728] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.713941][ T5728] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 153.726842][ T5728] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 153.741496][ T5728] usb 5-1: string descriptor 0 read error: -22 [ 153.749386][ T5728] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 153.761561][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.782867][ T5728] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 153.850098][ T8713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.861421][ T8713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.871175][ T805] gspca_nw80x: reg_r err -71 [ 153.876716][ T805] nw80x 4-1:16.0: probe with driver nw80x failed with error -71 [ 153.887687][ T805] usb 4-1: USB disconnect, device number 19 [ 154.207619][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.390999][ T8741] input: syz0 as /devices/virtual/input/input18 [ 154.535823][ T8748] hsr0 speed is unknown, defaulting to 1000 [ 155.048831][ T8769] hsr0 speed is unknown, defaulting to 1000 [ 155.184221][ T5707] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 155.228926][ T8777] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1282'. [ 155.280478][ T805] IPVS: starting estimator thread 0... [ 155.289783][ T8779] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 155.351726][ T5707] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 155.371375][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.379656][ T8780] IPVS: using max 48 ests per chain, 115200 per kthread [ 155.403564][ T5707] usb 2-1: Product: syz [ 155.414277][ T5707] usb 2-1: Manufacturer: syz [ 155.434274][ T5707] usb 2-1: SerialNumber: syz [ 155.475471][ T5707] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 155.500124][ T806] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 155.759207][ T8789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1287'. [ 155.761706][ T30] audit: type=1400 audit(1781391102.416:474): avc: denied { read } for pid=8790 comm="syz.0.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 155.828032][ T30] audit: type=1400 audit(1781391102.486:475): avc: denied { setopt } for pid=8790 comm="syz.0.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 155.991046][ T5707] usb 2-1: USB disconnect, device number 11 [ 156.097001][ T805] usb 5-1: USB disconnect, device number 15 [ 156.178300][ T30] audit: type=1400 audit(1781391102.836:476): avc: denied { cmd } for pid=8805 comm="syz.4.1295" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 156.264232][ T5728] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 156.284805][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 156.417431][ T5728] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 156.427030][ T5728] usb 4-1: config 0 has no interface number 0 [ 156.433690][ T5728] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.444879][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 156.451921][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.463194][ T10] usb 3-1: config 0 has no interface number 0 [ 156.469604][ T5728] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 156.480823][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.489361][ T5728] usb 4-1: Product: syz [ 156.494110][ T5728] usb 4-1: Manufacturer: syz [ 156.497363][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 156.512262][ T5728] usb 4-1: SerialNumber: syz [ 156.518436][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.527870][ T5728] usb 4-1: config 0 descriptor?? [ 156.532869][ T10] usb 3-1: Product: syz [ 156.542068][ T5728] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 156.549817][ T10] usb 3-1: Manufacturer: syz [ 156.557140][ T10] usb 3-1: SerialNumber: syz [ 156.564835][ T10] usb 3-1: config 0 descriptor?? [ 156.574250][ T806] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 156.579290][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 156.597887][ T10] usb 3-1: selecting invalid altsetting 1 [ 156.603758][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 156.604279][ T806] ath9k_htc: Failed to initialize the device [ 156.616813][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 156.648014][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 156.648022][ T5707] usb 2-1: ath9k_htc: USB layer deinitialized [ 156.669832][ T10] usb 3-1: media controller created [ 156.686861][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.777212][ T5714] usb 4-1: USB disconnect, device number 20 [ 156.788999][ T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 156.798495][ T5714] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 156.807523][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 156.831191][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 156.900702][ T10] usb 3-1: USB disconnect, device number 18 [ 157.010843][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'. [ 157.203512][ T30] audit: type=1400 audit(1781391103.856:477): avc: denied { load_policy } for pid=8834 comm="syz.4.1309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 157.212618][ T8835] SELinux: failed to load policy [ 157.315166][ T806] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 157.464217][ T806] usb 2-1: Using ep0 maxpacket: 8 [ 157.475151][ T806] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.495240][ T806] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.507596][ T806] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.526709][ T806] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.540970][ T806] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.551123][ T8851] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 157.551123][ T8851] The task syz.3.1315 (8851) triggered the difference, watch for misbehavior. [ 157.570075][ T806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.798501][ T806] usb 2-1: GET_CAPABILITIES returned 0 [ 157.812422][ T806] usbtmc 2-1:16.0: can't read capabilities [ 157.824369][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 157.984308][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 157.992497][ T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 158.006299][ T806] usb 2-1: USB disconnect, device number 12 [ 158.012074][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.036614][ T10] usb 5-1: config 0 descriptor?? [ 158.132885][ T30] audit: type=1400 audit(1781391104.786:478): avc: denied { getopt } for pid=8862 comm="syz.2.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.142494][ T8863] 9p: Unknown uid 00000000004294967295 [ 158.248973][ T30] audit: type=1400 audit(1781391104.906:479): avc: denied { read append } for pid=8866 comm="syz.2.1323" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 158.278559][ T30] audit: type=1400 audit(1781391104.906:480): avc: denied { open } for pid=8866 comm="syz.2.1323" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 158.278761][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 158.319209][ T8867] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 158.322298][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.336518][ T8867] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 158.340033][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 158.350327][ T10] usb 5-1: media controller created [ 158.365629][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.374102][ T8867] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 158.388155][ T8867] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.394403][ T8867] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 158.403488][ T8867] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 158.420510][ T8867] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.426994][ T8867] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 158.434992][ T8867] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.441370][ T8867] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 158.450132][ T8867] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 158.459049][ T8867] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 158.465144][ T8867] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 158.473165][ T8867] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 158.506519][ T10] az6027: usb out operation failed. (-71) [ 158.527086][ T10] az6027: usb out operation failed. (-71) [ 158.544395][ T10] stb0899_attach: Driver disabled by Kconfig [ 158.555843][ T10] az6027: no front-end attached [ 158.555843][ T10] [ 158.571643][ T10] az6027: usb out operation failed. (-71) [ 158.584487][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 158.600475][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 158.628264][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 158.635424][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 158.653490][ T10] usb 5-1: USB disconnect, device number 16 [ 158.715796][ T30] audit: type=1400 audit(1781391105.376:481): avc: denied { bind } for pid=8877 comm="syz.3.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.763253][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 159.019087][ T8895] wg1: Caught tx_queue_len zero misconfig [ 159.081834][ T30] audit: type=1400 audit(1781391105.736:482): avc: denied { create } for pid=8889 comm="syz.1.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 159.107138][ T806] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 159.169450][ T30] audit: type=1400 audit(1781391105.826:483): avc: denied { write } for pid=8889 comm="syz.1.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 159.284411][ T806] usb 3-1: Using ep0 maxpacket: 8 [ 159.297417][ T806] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.317814][ T806] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 159.331704][ T806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.355099][ T806] usb 3-1: config 0 descriptor?? [ 159.389956][ T806] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 159.474378][ T5746] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 159.565922][ T806] gspca_vc032x: reg_r err -32 [ 159.587128][ T806] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 159.624019][ T806] usb 3-1: USB disconnect, device number 19 [ 159.643986][ T5746] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 159.665628][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.688574][ T5746] usb 4-1: Product: syz [ 159.697295][ T5746] usb 4-1: Manufacturer: syz [ 159.708455][ T5746] usb 4-1: SerialNumber: syz [ 159.746402][ T5746] usb 4-1: config 0 descriptor?? [ 159.774807][ T5746] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 160.335372][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.361913][ T30] audit: type=1400 audit(1781391107.016:484): avc: denied { create } for pid=8933 comm="syz.2.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 160.385808][ T30] audit: type=1400 audit(1781391107.046:485): avc: denied { connect } for pid=8933 comm="syz.2.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 160.414377][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.438061][ T30] audit: type=1400 audit(1781391107.096:486): avc: denied { read } for pid=8933 comm="syz.2.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 160.494345][ T5621] Bluetooth: hci4: command 0x0c1a tx timeout [ 160.494659][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 160.507013][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.583184][ T5746] gspca_stk1135: reg_w 0x5 err -71 [ 160.605067][ T5746] gspca_stk1135: serial bus timeout: status=0x00 [ 160.631500][ T5746] gspca_stk1135: Sensor write failed [ 160.647661][ T5746] gspca_stk1135: serial bus timeout: status=0x00 [ 160.659899][ T5746] gspca_stk1135: Sensor write failed [ 160.671445][ T5746] gspca_stk1135: serial bus timeout: status=0x00 [ 160.695965][ T5746] gspca_stk1135: Sensor read failed [ 160.706283][ T5746] gspca_stk1135: serial bus timeout: status=0x00 [ 160.714246][ T5746] gspca_stk1135: Sensor read failed [ 160.719519][ T5746] gspca_stk1135: Detected sensor type unknown (0x0) [ 160.727027][ T5746] gspca_stk1135: serial bus timeout: status=0x00 [ 160.738070][ T5746] gspca_stk1135: Sensor read failed [ 160.745586][ T5746] gspca_stk1135: serial bus timeout: status=0x00 [ 160.752396][ T5746] gspca_stk1135: Sensor read failed [ 160.759620][ T5746] gspca_stk1135: serial bus timeout: status=0x00 [ 160.766215][ T5746] gspca_stk1135: Sensor write failed [ 160.771616][ T5746] gspca_stk1135: serial bus timeout: status=0x00 [ 160.778264][ T5746] gspca_stk1135: Sensor write failed [ 160.788426][ T5746] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 160.806779][ T5746] usb 4-1: USB disconnect, device number 21 [ 161.070916][ T8958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1364'. [ 161.140143][ T8964] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1367'. [ 161.440578][ T8981] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.535344][ T806] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 161.585829][ T8992] misc userio: Invalid payload size [ 161.607031][ T8992] misc userio: The device must be registered before sending interrupts [ 161.715922][ T806] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.747924][ T806] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 161.766185][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.783117][ T806] usb 4-1: config 0 descriptor?? [ 161.914504][ T9004] hsr0 speed is unknown, defaulting to 1000 [ 162.174248][ T5799] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 162.229429][ T806] ath6kl: Unsupported hardware version: 0x0 [ 162.237150][ T806] ath6kl: Failed to init ath6kl core: -22 [ 162.243422][ T806] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 162.334249][ T5799] usb 5-1: Using ep0 maxpacket: 8 [ 162.342380][ T5799] usb 5-1: config 0 has no interfaces? [ 162.357854][ T5799] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 162.369602][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.379406][ T5799] usb 5-1: Product: syz [ 162.385051][ T5746] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 162.392834][ T5799] usb 5-1: Manufacturer: syz [ 162.397504][ T5799] usb 5-1: SerialNumber: syz [ 162.405148][ T5799] usb 5-1: config 0 descriptor?? [ 162.414495][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 162.446756][ T5799] usb 4-1: USB disconnect, device number 22 [ 162.494891][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.544218][ T5746] usb 2-1: Using ep0 maxpacket: 32 [ 162.551110][ T5746] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 162.560619][ T5746] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.571456][ T5746] usb 2-1: config 0 has no interface number 0 [ 162.577716][ T5631] Bluetooth: hci4: command 0x0c1a tx timeout [ 162.585969][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.592133][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 162.598280][ T5746] usb 2-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.628660][ T5746] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 162.643135][ T5799] usb 5-1: USB disconnect, device number 17 [ 162.650091][ T5746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.669804][ T5746] usb 2-1: Product: syz [ 162.674007][ T5746] usb 2-1: Manufacturer: syz [ 162.678893][ T5746] usb 2-1: SerialNumber: syz [ 162.687768][ T5746] usb 2-1: config 0 descriptor?? [ 162.700437][ T5746] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input20 [ 162.754243][ T806] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 162.915055][ T5728] usb 2-1: USB disconnect, device number 13 [ 162.928274][ T806] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 162.945956][ T806] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 162.954372][ T806] usb 3-1: Product: syz [ 162.958670][ T806] usb 3-1: Manufacturer: syz [ 162.963686][ T806] usb 3-1: SerialNumber: syz [ 162.970921][ T806] usb 3-1: config 0 descriptor?? [ 163.238184][ T5728] usb 3-1: USB disconnect, device number 20 [ 163.450396][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 163.450607][ T30] audit: type=1400 audit(1781391110.106:493): avc: denied { ioctl } for pid=9044 comm="syz.3.1400" path="socket:[23412]" dev="sockfs" ino=23412 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 163.797065][ T9065] Bluetooth: MGMT ver 1.23 [ 163.801637][ T9065] Bluetooth: hci1: too big key_count value 40763 [ 164.114197][ T5728] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 164.267411][ T5728] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.277530][ T5728] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 164.287274][ T5728] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.302807][ T5728] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 164.312018][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 164.320223][ T5728] usb 2-1: Product: syz [ 164.324519][ T5728] usb 2-1: Manufacturer: syz [ 164.329125][ T5728] usb 2-1: SerialNumber: syz [ 164.495270][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.543075][ T5728] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 164.584416][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.654191][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.660295][ T5631] Bluetooth: hci4: command 0x0c1a tx timeout [ 164.749022][ T30] audit: type=1400 audit(1781391111.406:494): avc: denied { read write } for pid=9068 comm="syz.1.1411" name="lp0" dev="devtmpfs" ino=4010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 164.773172][ T30] audit: type=1400 audit(1781391111.406:495): avc: denied { open } for pid=9068 comm="syz.1.1411" path="/dev/usb/lp0" dev="devtmpfs" ino=4010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 164.819357][ T806] usb 2-1: USB disconnect, device number 14 [ 164.840398][ T806] usblp0: removed [ 165.166616][ T30] audit: type=1400 audit(1781391111.826:496): avc: denied { setopt } for pid=9106 comm="syz.4.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.241887][ T30] audit: type=1400 audit(1781391111.896:497): avc: denied { bind } for pid=9110 comm="syz.4.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 165.329105][ T30] audit: type=1400 audit(1781391111.986:498): avc: denied { recv } for pid=5612 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.136 dest=43100 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 165.545021][ T805] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 165.709176][ T805] usb 4-1: config 0 has no interfaces? [ 165.723571][ T805] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 165.733889][ T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.745879][ T805] usb 4-1: config 0 descriptor?? [ 165.979864][ T805] usb 4-1: USB disconnect, device number 23 [ 166.065076][ T9152] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1446'. [ 166.121849][ T9155] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 166.163587][ T9158] loop5: detected capacity change from 0 to 7 [ 166.212374][ T9158] Dev loop5: unable to read RDB block 7 [ 166.229082][ T9158] loop5: AHDI p1 [ 166.232751][ T9158] loop5: partition table partially beyond EOD, truncated [ 166.261713][ T9162] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1452'. [ 166.370175][ T9166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1454'. [ 166.386076][ T9166] smc: net device veth1_to_team applied user defined pnetid [ 166.829932][ T30] audit: type=1400 audit(1781391113.486:499): avc: denied { write } for pid=9191 comm="syz.4.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 166.984347][ T5746] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 167.056049][ T5631] Bluetooth: hci4: command 0x0c1a tx timeout [ 167.078875][ T9203] SELinux: Context system_u:object_r:hald_var_lib_t:s0 is not valid (left unmapped). [ 167.091701][ T30] audit: type=1400 audit(1781391113.756:500): avc: denied { relabelto } for pid=9200 comm="syz.3.1469" name="file0" dev="tmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 167.154226][ T5746] usb 3-1: Using ep0 maxpacket: 16 [ 167.162916][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.174176][ T30] audit: type=1400 audit(1781391113.756:501): avc: denied { associate } for pid=9200 comm="syz.3.1469" name="file0" dev="tmpfs" ino=1278 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_var_lib_t:s0" [ 167.192610][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.216738][ T30] audit: type=1400 audit(1781391113.876:502): avc: denied { rmdir } for pid=5617 comm="syz-executor" name="file0" dev="tmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 167.246425][ T5746] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 167.294300][ T5746] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 167.313378][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.348544][ T5746] usb 3-1: config 0 descriptor?? [ 167.709399][ T9228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1481'. [ 167.731647][ T9228] sch_fq: defrate 0 ignored. [ 167.792817][ T5746] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 167.816420][ T5746] hid_parser_main: 14 callbacks suppressed [ 167.816441][ T5746] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 167.844520][ T806] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 167.866695][ T5746] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 167.895890][ T5746] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 167.903392][ T5746] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 167.910905][ T5746] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 167.918302][ T5746] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 167.926368][ T5746] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 167.934044][ T5746] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 167.941717][ T5746] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 167.949303][ T5746] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 167.995250][ T5746] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 168.017386][ T5746] microsoft 0003:045E:07DA.000C: no inputs found [ 168.032081][ T5746] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 168.042477][ T806] usb 5-1: Using ep0 maxpacket: 8 [ 168.049498][ T806] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 168.058299][ T806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.080807][ T806] usb 5-1: config 0 has no interface number 0 [ 168.087815][ T806] usb 5-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 168.118153][ T806] usb 5-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 168.135867][ T806] usb 5-1: config 0 interface 239 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.151693][ T806] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 168.161054][ T806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.169680][ T806] usb 5-1: Product: syz [ 168.173927][ T806] usb 5-1: Manufacturer: syz [ 168.205057][ T806] usb 5-1: SerialNumber: syz [ 168.220892][ T806] usb 5-1: config 0 descriptor?? [ 168.238450][ T9221] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 168.291276][ T5799] usb 3-1: USB disconnect, device number 21 [ 168.453104][ T806] ath6kl: Failed to submit usb control message: -71 [ 168.464642][ T806] ath6kl: unable to send the bmi data to the device: -71 [ 168.472128][ T806] ath6kl: Unable to send get target info: -71 [ 168.481842][ T806] ath6kl: Failed to init ath6kl core: -71 [ 168.489510][ T806] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 168.512423][ T806] usb 5-1: USB disconnect, device number 18 [ 168.658285][ T9269] loop4: detected capacity change from 0 to 7 [ 168.668198][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.677415][ C1] buffer_io_error: 9 callbacks suppressed [ 168.677429][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.692497][ T5799] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 168.702394][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.711710][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.721459][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.730997][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.739792][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.749030][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.758920][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.768154][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.777189][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.786361][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.796595][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.805781][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.813620][ T9269] ldm_validate_partition_table(): Disk read failed. [ 168.821167][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.830348][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.839359][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.848524][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.858170][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.867386][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.881598][ T9269] Dev loop4: unable to read RDB block 0 [ 168.891601][ T5799] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.893977][ T9269] loop4: unable to read partition table [ 168.911260][ T9269] loop4: partition table beyond EOD, truncated [ 168.911316][ T5799] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 168.919115][ T9269] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 168.932389][ T5799] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 168.973383][ T5799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.982030][ T5799] usb 2-1: Product: syz [ 168.987041][ T5799] usb 2-1: Manufacturer: syz [ 168.991685][ T5799] usb 2-1: SerialNumber: syz [ 169.016660][ T5799] usb 2-1: config 0 descriptor?? [ 169.178464][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 169.178479][ T30] audit: type=1400 audit(1781391115.836:505): avc: denied { bind } for pid=9287 comm="syz.2.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.206806][ T30] audit: type=1400 audit(1781391115.866:506): avc: denied { egress } for pid=5728 comm="kworker/0:5" saddr=fe80::1b daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 169.246348][ T9257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.255152][ T9257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.263104][ T30] audit: type=1400 audit(1781391115.866:507): avc: denied { sendto } for pid=5728 comm="kworker/0:5" saddr=fe80::1b daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 169.294871][ T5622] Bluetooth: hci4: Unknown advertising packet type: 0x53 [ 169.294917][ T5622] Bluetooth: hci4: Malformed LE Event: 0x0d [ 169.295992][ T5799] usb 2-1: USB disconnect, device number 15 [ 169.434069][ T30] audit: type=1400 audit(1781391116.086:508): avc: denied { map } for pid=9296 comm="syz.4.1509" path="/dev/video0" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 169.568042][ T9303] bond_slave_1: Caught tx_queue_len zero misconfig [ 169.700979][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'. [ 169.710202][ T9311] team_slave_1: Caught tx_queue_len zero misconfig [ 169.744227][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 169.803460][ T9315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1518'. [ 169.904175][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 169.918343][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 169.947510][ T10] usb 5-1: config 0 has no interface number 0 [ 169.960832][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 169.979451][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.995768][ T9323] hsr0 speed is unknown, defaulting to 1000 [ 169.997275][ T10] usb 5-1: Product: syz [ 170.007683][ T9324] veth1_macvtap: left promiscuous mode [ 170.013471][ T9324] macsec0: entered allmulticast mode [ 170.018792][ T10] usb 5-1: Manufacturer: syz [ 170.018811][ T10] usb 5-1: SerialNumber: syz [ 170.035319][ T10] usb 5-1: config 0 descriptor?? [ 170.048769][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 170.071131][ T9324] veth1_macvtap: entered promiscuous mode [ 170.078063][ T9324] veth1_macvtap: entered allmulticast mode [ 170.084481][ T9324] macsec0: left allmulticast mode [ 170.089629][ T9324] veth1_macvtap: left allmulticast mode [ 170.210021][ T30] audit: type=1400 audit(1781391116.866:509): avc: denied { setopt } for pid=9333 comm="syz.1.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.241163][ T30] audit: type=1400 audit(1781391116.896:510): avc: denied { append } for pid=9335 comm="syz.0.1527" name="demux0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 170.276966][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 170.295349][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 170.611667][ T9351] netlink: 'syz.2.1534': attribute type 14 has an invalid length. [ 170.686748][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 170.696489][ T10] usb 5-1: USB disconnect, device number 19 [ 170.719567][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 170.746767][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 170.759197][ T10] quatech2 5-1:0.51: device disconnected [ 170.961530][ T9371] Bluetooth: MGMT ver 1.23 [ 171.034572][ T5714] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 171.193462][ T30] audit: type=1400 audit(1781391117.846:511): avc: denied { connect } for pid=9384 comm="syz.0.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 171.195527][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 171.247720][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.251004][ T30] audit: type=1400 audit(1781391117.886:512): avc: denied { write } for pid=9384 comm="syz.0.1550" path="socket:[25077]" dev="sockfs" ino=25077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 171.258779][ T5714] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 171.294089][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.306090][ T5714] usb 3-1: config 0 descriptor?? [ 171.406024][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1551'. [ 171.432544][ T9387] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.500804][ T30] audit: type=1400 audit(1781391118.156:513): avc: denied { bind } for pid=9397 comm="syz.3.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 171.641274][ T9406] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 171.772137][ T5714] isku 0003:1E7D:319C.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 172.246550][ T10] usb 3-1: USB disconnect, device number 22 [ 172.576800][ T9441] fuse: Bad value for 'fd' [ 172.658703][ T9447] netlink: 'syz.4.1577': attribute type 1 has an invalid length. [ 172.892336][ T30] audit: type=1400 audit(1781391119.546:514): avc: denied { mount } for pid=9460 comm="syz.2.1584" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 173.036412][ T9471] : renamed from vlan0 (while UP) [ 173.170080][ T9483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1595'. [ 173.229113][ T9478] netlink: set zone limit has 4 unknown bytes [ 173.303350][ T9485] SELinux: failed to load policy [ 174.239671][ T9532] ALSA: mixer_oss: invalid OSS volume '' [ 174.284697][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 174.464229][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 174.488153][ T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 174.506546][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.524497][ T10] usb 4-1: Product: syz [ 174.540555][ T10] usb 4-1: Manufacturer: syz [ 174.553423][ T10] usb 4-1: SerialNumber: syz [ 174.569829][ T10] usb 4-1: config 0 descriptor?? [ 174.599706][ T10] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 174.622768][ T10] pctv452e: pctv452e_power_ctrl: 1 [ 174.622768][ T10] [ 174.624387][ T5714] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 174.641148][ T10] usb 4-1: selecting invalid altsetting 3 [ 174.650975][ T10] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 174.650975][ T10] [ 174.677005][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 174.698499][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 174.718961][ T10] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 174.744257][ T10] usb 4-1: media controller created [ 174.756578][ T10] dvb-usb: bulk message failed: -22 (8/0) [ 174.775925][ T10] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 174.797113][ T10] dvb-usb: MAC address reading failed. [ 174.797798][ T5714] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.827876][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.830248][ T5714] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 174.852040][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 174.889458][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 174.905714][ T5714] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 174.918092][ T10] DVB: Unable to find symbol stb0899_attach() [ 174.941817][ T10] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 174.945748][ T5714] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 174.981418][ T9554] hsr0 speed is unknown, defaulting to 1000 [ 174.991421][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 175.026064][ T5714] usb 5-1: Product: syz [ 175.035140][ T5714] usb 5-1: Manufacturer: syz [ 175.044223][ T5714] usb 5-1: SerialNumber: syz [ 175.059177][ T5714] usb 5-1: config 0 descriptor?? [ 175.082328][ T10] rc_core: IR keymap rc-tt-1500 not found [ 175.094497][ T10] Registered IR keymap rc-empty [ 175.109355][ T10] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 175.156376][ T10] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input21 [ 175.181291][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 175.197274][ T10] pctv452e: pctv452e_power_ctrl: 0 [ 175.197274][ T10] [ 175.225372][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 175.262979][ T10] usb 4-1: USB disconnect, device number 24 [ 175.274593][ T5714] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 175.291673][ T5714] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 175.319088][ T5728] dvb-usb: bulk message failed: -22 (4/0) [ 175.355387][ T5728] dvb-usb: error -22 while querying for an remote control event. [ 175.481168][ T5714] radio-si470x 5-1:0.0: software version 167, hardware version 100 [ 175.510686][ T5714] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 175.516229][ T9577] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1638'. [ 175.566425][ T9577] netlink: 'syz.2.1638': attribute type 1 has an invalid length. [ 175.580166][ T9577] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1638'. [ 175.624100][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 175.683990][ T5714] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 175.720365][ T5714] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 175.743989][ T5714] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 175.772959][ T5714] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 175.819876][ T5714] usb 5-1: USB disconnect, device number 20 [ 175.839679][ T9590] lo: Caught tx_queue_len zero misconfig [ 175.869724][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 175.869745][ T30] audit: type=1400 audit(1781391122.526:518): avc: denied { setopt } for pid=9591 comm="syz.2.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 175.974474][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 176.135429][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 176.156715][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 176.170953][ T10] usb 4-1: config 179 has no interface number 0 [ 176.180373][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 176.191760][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 176.205850][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 176.217883][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 176.230349][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 176.262298][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 176.276821][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.289864][ T9581] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 176.333977][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'. [ 176.627008][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input22 [ 176.752157][ T5746] usb 4-1: USB disconnect, device number 25 [ 176.752184][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 176.766644][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 177.024406][ T5714] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 177.185804][ T5714] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 177.202257][ T30] audit: type=1400 audit(1781391123.856:519): avc: denied { listen } for pid=9640 comm="syz.1.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 177.204079][ T5714] usb 5-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 177.235531][ T5714] usb 5-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.249482][ T5714] usb 5-1: config 220 interface 1 altsetting 5 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 177.276369][ T5714] usb 5-1: config 220 interface 1 altsetting 5 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 177.305877][ T5714] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 177.337563][ T5714] usb 5-1: config 220 interface 0 has no altsetting 0 [ 177.357909][ T5714] usb 5-1: config 220 interface 1 has no altsetting 0 [ 177.380760][ T5714] usb 5-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 177.402012][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.424971][ T5714] usb 5-1: Product: syz [ 177.434648][ T5714] usb 5-1: Manufacturer: syz [ 177.445832][ T5714] usb 5-1: SerialNumber: syz [ 177.684650][ T5714] usb 5-1: selecting invalid altsetting 0 [ 177.700093][ T5714] uvcvideo 5-1:220.0: probe with driver uvcvideo failed with error -22 [ 177.734098][ T5714] usb 5-1: selecting invalid altsetting 0 [ 177.748831][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1678'. [ 177.754405][ T5714] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 177.790516][ T5714] usb 5-1: USB disconnect, device number 21 [ 177.910571][ T9678] netlink: 'syz.3.1683': attribute type 1 has an invalid length. [ 177.973489][ T145] Bluetooth: hci5: Frame reassembly failed (-84) [ 177.988686][ T9681] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 178.085017][ T5746] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 178.234273][ T5746] usb 2-1: Using ep0 maxpacket: 8 [ 178.242509][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.272494][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.284567][ T5746] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.294607][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 178.297884][ T5746] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 178.314689][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.333049][ T5746] usb 2-1: config 0 descriptor?? [ 178.465902][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.477769][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 178.488475][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.503361][ T10] usb 4-1: config 0 descriptor?? [ 178.735869][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 178.753373][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 178.762095][ T5746] kye 0003:0458:4018.000E: item fetching failed at offset 3/5 [ 178.773590][ T10] usb 4-1: USB disconnect, device number 26 [ 178.793981][ T5746] kye 0003:0458:4018.000E: parse failed [ 178.802599][ T5746] kye 0003:0458:4018.000E: probe with driver kye failed with error -22 [ 178.848499][ T9704] Failed to get privilege flags for destination (handle=0x2:0x0) [ 178.956714][ T5746] usb 2-1: USB disconnect, device number 16 [ 179.777131][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 179.795701][ T30] audit: type=1400 audit(1781391382.462:520): avc: denied { node_bind } for pid=9749 comm="syz.1.1716" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 179.804238][ T5746] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 179.868069][ T9752] hsr0 speed is unknown, defaulting to 1000 [ 179.944242][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 179.956913][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 179.966643][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.975193][ T10] usb 4-1: Product: syz [ 179.979823][ T10] usb 4-1: Manufacturer: syz [ 179.984315][ T5746] usb 5-1: Using ep0 maxpacket: 32 [ 179.984909][ T10] usb 4-1: SerialNumber: syz [ 180.003253][ T10] usb 4-1: config 0 descriptor?? [ 180.008768][ T5746] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.011716][ T10] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 180.024455][ T5631] Bluetooth: hci5: command 0x1003 tx timeout [ 180.030040][ T5622] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 180.068825][ T5746] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.097654][ T5746] usb 5-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 180.118007][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.172738][ T5746] usb 5-1: config 0 descriptor?? [ 180.448615][ T10] usb 4-1: clie_3_5_startup: get interface number bad return length: 0 [ 180.458507][ T5728] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 180.469495][ T10] visor 4-1:0.0: probe with driver visor failed with error -5 [ 180.569897][ T9776] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1728'. [ 180.610365][ T5746] uclogic 0003:28BD:0074.000F: interface is invalid, ignoring [ 180.629478][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.643353][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.654026][ T5728] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 180.675816][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.687007][ T5728] usb 2-1: config 0 descriptor?? [ 180.693696][ T5746] usb 4-1: USB disconnect, device number 27 [ 180.833764][ T5799] usb 5-1: USB disconnect, device number 22 [ 181.099855][ T5728] hid (null): usage index exceeded [ 181.108380][ T5728] hid_parser_main: 10 callbacks suppressed [ 181.108400][ T5728] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 181.121639][ T5728] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 181.128551][ T5728] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 181.135436][ T5728] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 181.142505][ T5728] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 181.149352][ T5728] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 181.156212][ T5728] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 181.162969][ T5728] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 181.169834][ T5728] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 181.176749][ T5728] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 181.183959][ T5728] asus 0003:0B05:1ABE.0010: ignoring exceeding usage max [ 181.192416][ T5728] asus 0003:0B05:1ABE.0010: unexpected long global item [ 181.199842][ T5728] asus 0003:0B05:1ABE.0010: Asus hid parse failed: -22 [ 181.206913][ T5728] asus 0003:0B05:1ABE.0010: probe with driver asus failed with error -22 [ 181.322590][ T10] usb 2-1: USB disconnect, device number 17 [ 181.443060][ T9783] hsr0 speed is unknown, defaulting to 1000 [ 181.477368][ T9788] xt_hashlimit: size too large, truncated to 1048576 [ 181.899638][ T9802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1737'. [ 181.934738][ T30] audit: type=1400 audit(1781391384.592:521): avc: denied { read write } for pid=9803 comm="syz.3.1738" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 181.975428][ T30] audit: type=1400 audit(1781391384.592:522): avc: denied { open } for pid=9803 comm="syz.3.1738" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 182.262897][ T9822] batadv_slave_0: entered promiscuous mode [ 182.296302][ T9821] batadv_slave_0: left promiscuous mode [ 182.303972][ T9826] veth1_macvtap: left promiscuous mode [ 182.326684][ T9826] macsec0: entered promiscuous mode [ 182.334455][ T5799] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 182.372007][ T9829] veth1_macvtap: entered promiscuous mode [ 182.387758][ T9829] macsec0: left promiscuous mode [ 182.486623][ T9835] batadv_slave_0: Caught tx_queue_len zero misconfig [ 182.503310][ T5799] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.533464][ T5799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.558213][ T5799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.573369][ T5799] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 182.584106][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.609379][ T5799] usb 5-1: config 0 descriptor?? [ 182.628368][ T30] audit: type=1326 audit(1781391385.292:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9843 comm="syz.0.1757" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cdb9ce59 code=0x7ffc0000 [ 182.678973][ T9844] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 182.686077][ T9844] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.715577][ T30] audit: type=1326 audit(1781391385.322:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9843 comm="syz.0.1757" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cdb9ce59 code=0x7ffc0000 [ 182.749024][ T9848] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 182.755564][ T9848] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.771875][ T9844] vhci_hcd vhci_hcd.0: Device attached [ 182.778139][ T30] audit: type=1326 audit(1781391385.322:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9843 comm="syz.0.1757" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cdb9ce59 code=0x7ffc0000 [ 182.781494][ T9854] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 182.810973][ T9854] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 182.821088][ T9848] vhci_hcd vhci_hcd.0: Device attached [ 182.834226][ T30] audit: type=1326 audit(1781391385.322:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9843 comm="syz.0.1757" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cdb9ce59 code=0x7ffc0000 [ 182.880856][ T9844] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(5) [ 182.882653][ T9854] vhci_hcd vhci_hcd.0: Device attached [ 182.887382][ T9844] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 182.888385][ T30] audit: type=1326 audit(1781391385.322:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9843 comm="syz.0.1757" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa4cdb9ce59 code=0x7ffc0000 [ 182.930532][ T9844] vhci_hcd vhci_hcd.0: Device attached [ 182.959072][ T30] audit: type=1326 audit(1781391385.322:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9843 comm="syz.0.1757" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cdb9ce59 code=0x7ffc0000 [ 182.989800][ T30] audit: type=1326 audit(1781391385.332:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9843 comm="syz.0.1757" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cdb9ce59 code=0x7ffc0000 [ 183.016273][ T5728] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 183.027273][ T9849] vhci_hcd: connection reset by peer [ 183.027361][ T9856] vhci_hcd: connection closed [ 183.033247][ T9850] vhci_hcd: connection closed [ 183.040268][ T5799] hid (null): report_id 0 is invalid [ 183.041677][ T9862] vhci_hcd: connection closed [ 183.055258][ T30] audit: type=1326 audit(1781391385.332:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9843 comm="syz.0.1757" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cdb9ce59 code=0x7ffc0000 [ 183.071259][ T5799] magicmouse 0003:05AC:0324.0011: report_id 0 is invalid [ 183.086498][ T145] vhci_hcd vhci_hcd.1: stop threads [ 183.100639][ T145] vhci_hcd vhci_hcd.1: release socket [ 183.107352][ T145] vhci_hcd vhci_hcd.1: disconnect device [ 183.126547][ T145] vhci_hcd vhci_hcd.1: stop threads [ 183.132176][ T5799] magicmouse 0003:05AC:0324.0011: item 0 0 1 8 parsing failed [ 183.150897][ T145] vhci_hcd vhci_hcd.1: release socket [ 183.152442][ T5799] magicmouse 0003:05AC:0324.0011: magicmouse hid parse failed [ 183.161993][ T145] vhci_hcd vhci_hcd.1: disconnect device [ 183.182121][ T145] vhci_hcd vhci_hcd.1: stop threads [ 183.185502][ T5799] magicmouse 0003:05AC:0324.0011: probe with driver magicmouse failed with error -22 [ 183.196935][ T145] vhci_hcd vhci_hcd.1: release socket [ 183.204754][ T145] vhci_hcd vhci_hcd.1: disconnect device [ 183.216601][ T145] vhci_hcd vhci_hcd.1: stop threads [ 183.232084][ T145] vhci_hcd vhci_hcd.1: release socket [ 183.239742][ T145] vhci_hcd vhci_hcd.1: disconnect device [ 183.258431][ T5799] usb 5-1: USB disconnect, device number 23 [ 183.769276][ T9883] input: syz0 as /devices/virtual/input/input23 [ 185.953418][ T9893] hsr0 speed is unknown, defaulting to 1000 [ 186.320453][ T9908] bond_slave_1: Caught tx_queue_len zero misconfig [ 186.506634][ T9920] Attempt to restore checkpoint with obsolete wellknown handles [ 186.874273][ T5714] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 186.965134][ T9940] hsr0 speed is unknown, defaulting to 1000 [ 187.025856][ T5714] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.046576][ T5714] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 187.074921][ T5714] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.089555][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.102844][ T5714] usb 3-1: Product: syz [ 187.108252][ T5714] usb 3-1: Manufacturer: syz [ 187.125952][ T5714] usb 3-1: SerialNumber: syz [ 187.362980][ T9929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.392594][ T9929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.435209][ T5714] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 187.465412][ T9955] fuse: Invalid rootmode [ 187.470346][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1799'. [ 187.471592][ T5714] usb 3-1: USB disconnect, device number 23 [ 187.553074][ T9954] gretap0: entered promiscuous mode [ 187.579666][ T9954] macvlan2: entered allmulticast mode [ 187.585311][ T9954] gretap0: entered allmulticast mode [ 188.004276][ T5714] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 188.121746][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1812'. [ 188.131687][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 188.153238][ T9981] ipvlan2: entered allmulticast mode [ 188.154679][ T5714] usb 3-1: Using ep0 maxpacket: 8 [ 188.165645][ T5714] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 188.173908][ T5714] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 188.174257][ T5728] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 188.184359][ T5714] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.202300][ T5714] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.212256][ T5714] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 188.222680][ T5714] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.235402][ T5714] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 188.244555][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.286263][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.304066][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 188.318279][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 188.330570][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.344187][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.353295][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.365629][ T10] usb 2-1: config 0 descriptor?? [ 188.371424][ T9971] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 188.444975][ T805] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 188.474430][ T5714] usb 3-1: usb_control_msg returned -71 [ 188.488604][ T5714] usbtmc 3-1:16.0: can't read capabilities [ 188.515673][ T5714] usb 3-1: USB disconnect, device number 24 [ 188.604203][ T805] usb 4-1: Using ep0 maxpacket: 8 [ 188.614167][ T805] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 188.632906][ T805] usb 4-1: config 0 has no interface number 1 [ 188.639255][ T805] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 188.651410][ T805] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 188.672516][ T805] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 188.688758][ T805] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 188.700673][ T805] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.714030][ T805] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.725912][ T805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 1024 [ 188.745333][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.751693][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.760007][ T805] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 188.773021][ T805] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 188.782191][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.790824][ T805] usb 4-1: Product: syz [ 188.795174][ T805] usb 4-1: Manufacturer: syz [ 188.801437][ T805] usb 4-1: SerialNumber: syz [ 188.808248][ T10] hid_parser_main: 133 callbacks suppressed [ 188.808269][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 188.827474][ T805] usb 4-1: config 0 descriptor?? [ 188.836824][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 188.846107][ T9983] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 188.863847][ T805] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.872089][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 188.879663][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 188.891153][ T805] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.898255][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 188.909278][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 188.919771][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 188.928671][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 188.948332][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 188.966405][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 189.007804][ T10] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 189.052964][ T10] usb 2-1: USB disconnect, device number 18 [ 189.207893][ T805] usb 4-1: USB disconnect, device number 28 [ 189.216742][T10001] fido_id[10001]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 190.023665][ T5714] kernel write not supported for file [eventfd] (pid: 5714 comm: kworker/1:4) [ 190.032761][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 190.032777][ T30] audit: type=1400 audit(1781391392.682:545): avc: denied { mounton } for pid=10045 comm="syz.1.1840" path="/396/file0" dev="tmpfs" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 190.124417][ T5799] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 190.143279][T10049] veth0_to_bond: Caught tx_queue_len zero misconfig [ 190.241621][ T30] audit: type=1400 audit(1781391392.902:546): avc: denied { ioctl } for pid=10054 comm="syz.1.1845" path="socket:[27740]" dev="sockfs" ino=27740 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 190.291124][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1844'. [ 190.297112][ T5799] usb 5-1: Using ep0 maxpacket: 8 [ 190.308971][T10056] lo speed is unknown, defaulting to 1000 [ 190.319247][ T5799] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 190.333789][T10056] lo speed is unknown, defaulting to 1000 [ 190.342188][ T5799] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 190.354910][T10056] lo speed is unknown, defaulting to 1000 [ 190.362894][ T5799] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.380774][ T5799] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.425591][ T5799] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.446917][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.543603][T10071] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1852'. [ 190.625436][ T5714] lo speed is unknown, defaulting to 1000 [ 190.631654][T10056] infiniband sz1: set active [ 190.636912][T10056] infiniband sz1: added lo [ 190.661076][T10056] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 190.676308][T10056] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 190.681287][ T5799] usb 5-1: GET_CAPABILITIES returned 0 [ 190.693593][T10056] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 190.699637][ T5799] usbtmc 5-1:16.0: can't read capabilities [ 190.750247][T10056] RDS/IB: sz1: added [ 190.754790][T10056] smc: adding ib device sz1 with port count 1 [ 190.761085][T10056] smc: ib device sz1 port 1 has no pnetid [ 190.769529][ T805] lo speed is unknown, defaulting to 1000 [ 190.778206][T10056] lo speed is unknown, defaulting to 1000 [ 190.834194][ T5728] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 190.875759][T10056] lo speed is unknown, defaulting to 1000 [ 190.944853][ T805] usb 5-1: USB disconnect, device number 24 [ 190.984373][ T5728] usb 4-1: Using ep0 maxpacket: 16 [ 190.993436][ T5728] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 191.003012][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.014794][ T5728] usb 4-1: Product: syz [ 191.018987][ T5728] usb 4-1: Manufacturer: syz [ 191.024463][ T5728] usb 4-1: SerialNumber: syz [ 191.028336][T10056] lo speed is unknown, defaulting to 1000 [ 191.036160][ T5728] usb 4-1: config 0 descriptor?? [ 191.050467][ T5728] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 191.153247][T10056] lo speed is unknown, defaulting to 1000 [ 191.278816][T10056] lo speed is unknown, defaulting to 1000 [ 191.417109][ T5622] Bluetooth: hci0: unexpected event for opcode 0x0405 [ 191.532121][ T30] audit: type=1400 audit(1781391394.192:547): avc: denied { shutdown } for pid=10085 comm="syz.4.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 191.704801][ T5799] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 191.851987][ T5728] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 191.865807][ T5799] usb 3-1: Using ep0 maxpacket: 8 [ 191.878243][ T5728] usb 4-1: USB disconnect, device number 29 [ 191.883857][ T5799] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 191.922672][ T5799] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 191.954155][ T5799] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.965954][ T5799] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.994488][ T5799] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.014513][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.232350][ T5799] usb 3-1: GET_CAPABILITIES returned 0 [ 192.244164][ T5799] usbtmc 3-1:16.0: can't read capabilities [ 192.457072][ T10] usb 3-1: USB disconnect, device number 25 [ 192.628945][T10109] netlink: 'syz.3.1870': attribute type 7 has an invalid length. [ 192.675432][ T145] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.693374][ T145] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.713300][ T145] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.725216][ T145] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.830361][ T30] audit: type=1400 audit(1781391395.492:548): avc: denied { write } for pid=10114 comm="syz.4.1872" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 193.068971][ T30] audit: type=1400 audit(1781391395.732:549): avc: denied { map } for pid=10126 comm="syz.2.1880" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 193.154576][ T30] audit: type=1400 audit(1781391395.822:550): avc: denied { remount } for pid=10131 comm="syz.1.1882" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 193.239289][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1884'. [ 193.261599][T10139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1885'. [ 193.270746][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1884'. [ 193.285198][T10137] netlink: 'syz.4.1884': attribute type 13 has an invalid length. [ 193.296100][T10139] ipvlan2: entered allmulticast mode [ 193.301419][T10139] syz_tun: entered allmulticast mode [ 193.314423][T10137] netlink: 'syz.4.1884': attribute type 11 has an invalid length. [ 193.482942][ T30] audit: type=1400 audit(1781391396.142:551): avc: denied { ioctl } for pid=10150 comm="syz.4.1891" path="socket:[27880]" dev="sockfs" ino=27880 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 193.678220][ T30] audit: type=1400 audit(1781391396.342:552): avc: denied { mount } for pid=10159 comm="syz.3.1896" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 193.838791][T10171] netlink: 'syz.3.1900': attribute type 10 has an invalid length. [ 193.922360][T10177] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1900'. [ 193.938432][T10171] team0: Device dummy0 failed to register rx_handler [ 194.287718][T10193] blkio.reset_stats is deprecated [ 194.306094][T10198] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1913'. [ 194.389064][T10201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1914'. [ 194.644487][ T5746] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 194.834320][ T5746] usb 5-1: Using ep0 maxpacket: 8 [ 194.843163][ T5746] usb 5-1: config 0 interface 0 has no altsetting 0 [ 194.857915][ T5746] usb 5-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 194.878579][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.904327][ T5746] usb 5-1: config 0 descriptor?? [ 194.931432][ T5746] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input24 [ 194.984636][ T5728] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 195.051877][ T10] hid_parser_main: 5 callbacks suppressed [ 195.051896][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 195.107188][ T10] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.137936][ T4968] bcm5974 5-1:0.0: could not read from device [ 195.155538][ T5728] usb 4-1: Using ep0 maxpacket: 8 [ 195.176114][ T5728] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 195.181826][ T5746] usb 5-1: USB disconnect, device number 25 [ 195.195437][ T4968] bcm5974 5-1:0.0: could not read from device [ 195.208475][ T5728] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 195.231999][ T5606] bcm5974 5-1:0.0: could not read from device [ 195.285983][ T5728] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 195.310649][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.335561][ T5606] udevd[5606]: Error opening device "/dev/input/event4": No such device [ 195.349734][ T5728] usb 4-1: Product: syz [ 195.360289][ T5728] usb 4-1: Manufacturer: syz [ 195.365127][ T5606] udevd[5606]: Unable to EVIOCGABS device "/dev/input/event4" [ 195.382771][ T5728] usb 4-1: SerialNumber: syz [ 195.389161][ T5606] udevd[5606]: Unable to EVIOCGABS device "/dev/input/event4" [ 195.404589][ T5606] udevd[5606]: Unable to EVIOCGABS device "/dev/input/event4" [ 195.425340][ T5606] udevd[5606]: Unable to EVIOCGABS device "/dev/input/event4" [ 195.660661][ T5746] usb 4-1: USB disconnect, device number 30 [ 195.829823][T10216] syz.2.1920 (10216): drop_caches: 2 [ 195.919603][T10213] syz.2.1920 (10213): drop_caches: 2 [ 195.920756][ T30] audit: type=1400 audit(1781391398.582:553): avc: denied { read } for pid=10241 comm="syz.4.1931" name="/" dev="configfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.979163][ T30] audit: type=1400 audit(1781391398.582:554): avc: denied { open } for pid=10241 comm="syz.4.1931" path="/455/file0" dev="configfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.038738][ T30] audit: type=1400 audit(1781391398.702:555): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 196.114227][ T5714] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 196.129382][ T30] audit: type=1400 audit(1781391398.792:556): avc: denied { map } for pid=10251 comm="syz.0.1935" path="/dev/sg0" dev="devtmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 196.181142][ T30] audit: type=1400 audit(1781391398.822:557): avc: denied { execute } for pid=10251 comm="syz.0.1935" path="/dev/sg0" dev="devtmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 196.287340][ T5714] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 196.296013][ T5714] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 196.307223][ T30] audit: type=1400 audit(1781391398.972:558): avc: denied { listen } for pid=10258 comm="syz.4.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 196.326913][ T5714] usb 2-1: config 0 interface 0 has no altsetting 0 [ 196.348002][ T5714] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 196.362387][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 196.371057][ T5714] usb 2-1: Product: syz [ 196.375600][ T5714] usb 2-1: Manufacturer: syz [ 196.380228][ T5714] usb 2-1: SerialNumber: syz [ 196.387726][ T5714] usb 2-1: config 0 descriptor?? [ 196.395340][ T5714] hub 2-1:0.0: bad descriptor, ignoring hub [ 196.405705][ T5714] hub 2-1:0.0: probe with driver hub failed with error -5 [ 196.432222][ T5714] usb 2-1: selecting invalid altsetting 0 [ 196.536732][T10273] lo: Caught tx_queue_len zero misconfig [ 196.547509][T10273] netem: change failed [ 197.208771][ T30] audit: type=1400 audit(1781391399.872:559): avc: denied { getopt } for pid=10306 comm="syz.0.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 197.238345][ T5799] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 197.406440][ T5799] usb 3-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.423882][ T5799] usb 3-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.434305][ T5799] usb 3-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.447657][ T5799] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.456017][ T5799] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 197.467617][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.479676][ T5799] usb 3-1: config 0 descriptor?? [ 197.498321][ T10] usb 2-1: USB disconnect, device number 19 [ 197.544221][ T5728] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 197.714223][ T5728] usb 4-1: Using ep0 maxpacket: 32 [ 197.721160][ T5728] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 197.733355][ T5728] usb 4-1: config 0 interface 0 has no altsetting 0 [ 197.741407][ T5728] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 197.750586][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.761186][ T5728] usb 4-1: config 0 descriptor?? [ 197.904779][ T5799] gt683r_led 0003:1770:FF00.0014: unknown main item tag 0x0 [ 197.914714][ T5799] gt683r_led 0003:1770:FF00.0014: unknown main item tag 0x0 [ 197.922058][ T5799] gt683r_led 0003:1770:FF00.0014: unknown main item tag 0x0 [ 197.929895][ T5799] gt683r_led 0003:1770:FF00.0014: unknown main item tag 0x0 [ 197.937546][ T5799] gt683r_led 0003:1770:FF00.0014: unknown main item tag 0x0 [ 197.945313][ T5799] gt683r_led 0003:1770:FF00.0014: unknown main item tag 0x0 [ 197.952655][ T5799] gt683r_led 0003:1770:FF00.0014: unknown main item tag 0x7 [ 197.960494][ T5799] gt683r_led 0003:1770:FF00.0014: unknown global tag 0xd [ 197.967631][ T5799] gt683r_led 0003:1770:FF00.0014: item 0 2 1 13 parsing failed [ 197.978108][ T5799] gt683r_led 0003:1770:FF00.0014: hid parsing failed [ 197.985666][ T5799] gt683r_led 0003:1770:FF00.0014: probe with driver gt683r_led failed with error -22 [ 198.123554][ T5714] usb 3-1: USB disconnect, device number 26 [ 198.215629][ T5728] corsair-cpro 0003:1B1C:0C10.0015: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 198.404370][ T5799] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 198.555549][ T5799] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.565839][ T5799] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 198.576790][ T5799] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 198.582542][ T5728] corsair-cpro 0003:1B1C:0C10.0015: probe with driver corsair-cpro failed with error -71 [ 198.586149][ T5799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.606174][ T5799] usb 2-1: Product: syz [ 198.610437][ T5799] usb 2-1: Manufacturer: syz [ 198.613603][ T5728] usb 4-1: USB disconnect, device number 31 [ 198.615430][ T5799] usb 2-1: SerialNumber: syz [ 198.632258][ T5799] usb 2-1: config 0 descriptor?? [ 198.774912][ T5622] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 198.858046][ T5728] usb 2-1: USB disconnect, device number 20 [ 199.314793][ T5714] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 199.443160][ T30] audit: type=1400 audit(1781391402.102:560): avc: denied { setopt } for pid=10365 comm="syz.3.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 199.504982][ T5714] usb 3-1: Using ep0 maxpacket: 8 [ 199.511715][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.530757][ T5714] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 199.554195][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.577144][ T5714] usb 3-1: config 0 descriptor?? [ 199.755033][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1996'. [ 200.009548][ T5714] kye 0003:0458:4018.0016: unknown main item tag 0x0 [ 200.034206][ T5714] kye 0003:0458:4018.0016: unknown main item tag 0x0 [ 200.056907][ T5714] kye 0003:0458:4018.0016: hidraw0: USB HID v0.02 Device [HID 0458:4018] on usb-dummy_hcd.2-1/input0 [ 200.261988][ T5714] usb 3-1: USB disconnect, device number 27 [ 200.334713][T10410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.888625][T10440] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2021'. [ 201.546016][ T30] audit: type=1400 audit(1781391404.212:561): avc: denied { write } for pid=10466 comm="syz.3.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 201.634503][ T5728] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 201.654337][ T30] audit: type=1400 audit(1781391404.322:562): avc: denied { mount } for pid=10472 comm="syz.3.2037" name="/" dev="hugetlbfs" ino=29833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 201.709485][ T30] audit: type=1400 audit(1781391404.372:563): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 201.818057][ T5728] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 201.841804][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2041'. [ 201.846020][ T5728] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 201.889375][ T5728] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 201.914892][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.934649][T10460] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 201.955206][ T5728] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.067395][ T30] audit: type=1326 audit(1781391404.732:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.1.2043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9439ce59 code=0x7ffc0000 [ 202.126937][ T30] audit: type=1326 audit(1781391404.732:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.1.2043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9439ce59 code=0x7ffc0000 [ 202.164976][ T30] audit: type=1326 audit(1781391404.732:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.1.2043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9439ce59 code=0x7ffc0000 [ 202.165714][ T5799] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 202.214876][ T30] audit: type=1326 audit(1781391404.732:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.1.2043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9439ce59 code=0x7ffc0000 [ 202.245286][ T30] audit: type=1326 audit(1781391404.762:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.1.2043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fda9439ce59 code=0x7ffc0000 [ 202.272726][ T30] audit: type=1326 audit(1781391404.772:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.1.2043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9439ce59 code=0x7ffc0000 [ 202.302094][ T805] usb 5-1: USB disconnect, device number 26 [ 202.322400][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2045'. [ 202.338605][ T30] audit: type=1326 audit(1781391404.772:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.1.2043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9439ce59 code=0x7ffc0000 [ 202.379107][T10494] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2045'. [ 202.454663][ T5799] usb 3-1: Using ep0 maxpacket: 8 [ 202.461215][ T5799] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 202.470843][ T5799] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 202.490920][ T5799] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 202.512557][ T5799] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 202.532693][T10500] netlink: 'syz.3.2048': attribute type 15 has an invalid length. [ 202.534350][ T5799] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 202.564771][ T5799] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.583097][ T5799] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.593481][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.704490][T10504] PID 10504 killed due to inadequate hugepage pool [ 202.813025][ T5799] usb 3-1: GET_CAPABILITIES returned 0 [ 202.823832][ T5799] usbtmc 3-1:16.0: can't read capabilities [ 202.826476][ T5622] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 202.840115][ T5622] Bluetooth: hci3: Injecting HCI hardware error event [ 202.849392][ T5622] Bluetooth: hci3: hardware error 0x00 [ 203.028024][ T10] usb 3-1: USB disconnect, device number 28 [ 203.351838][T10524] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 203.530398][T10531] trusted_key: encrypted_key: keyword 'uew' not recognized [ 203.654610][T10533] nbd1: detected capacity change from 0 to 127 [ 203.688016][ T5631] block nbd1: Receive control failed (result -32) [ 203.690078][ T8918] block nbd1: Send control failed (result -32) [ 203.708642][ T8918] block nbd1: Request send failed, requeueing [ 203.727552][ T25] block nbd1: Dead connection, failed to find a fallback [ 203.735205][ T25] block nbd1: shutting down sockets [ 203.742044][ T25] blk_print_req_error: 10 callbacks suppressed [ 203.742060][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.750619][T10537] overlayfs: failed to clone lowerpath [ 203.761156][ T25] buffer_io_error: 10 callbacks suppressed [ 203.761171][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 203.781002][ T8918] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.791321][ T8918] Buffer I/O error on dev nbd1, logical block 1, async page read [ 203.800063][ T8918] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.809468][ T8918] Buffer I/O error on dev nbd1, logical block 2, async page read [ 203.817449][ T8918] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.827278][ T8918] Buffer I/O error on dev nbd1, logical block 3, async page read [ 203.835950][ T8918] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.845628][ T8918] Buffer I/O error on dev nbd1, logical block 0, async page read [ 203.855630][ T8918] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.865043][ T8918] Buffer I/O error on dev nbd1, logical block 1, async page read [ 203.872933][ T8918] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.882529][ T8918] Buffer I/O error on dev nbd1, logical block 2, async page read [ 203.890559][ T8918] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.899913][ T8918] Buffer I/O error on dev nbd1, logical block 3, async page read [ 203.908538][ T8918] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.917843][ T8918] Buffer I/O error on dev nbd1, logical block 0, async page read [ 203.926816][ T8918] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.938571][ T8918] Buffer I/O error on dev nbd1, logical block 1, async page read [ 203.949066][ T8918] ldm_validate_partition_table(): Disk read failed. [ 203.959573][ T8918] Dev nbd1: unable to read RDB block 0 [ 203.976773][ T8918] nbd1: unable to read partition table [ 203.982532][T10542] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2065'. [ 204.015726][ T8918] ldm_validate_partition_table(): Disk read failed. [ 204.063127][ T8918] Dev nbd1: unable to read RDB block 0 [ 204.063713][T10546] [ 204.071153][T10546] ====================================================== [ 204.078177][T10546] WARNING: possible circular locking dependency detected [ 204.085192][T10546] syzkaller #0 Tainted: G L [ 204.091583][T10546] ------------------------------------------------------ [ 204.098584][T10546] syz.2.2067/10546 is trying to acquire lock: [ 204.104634][T10546] ffff888034d949a0 (reservation_ww_class_mutex){+.+.}-{4:4}, at: drm_gem_shmem_mmap+0xc1/0x500 [ 204.114977][T10546] [ 204.114977][T10546] but task is already holding lock: [ 204.122318][T10546] ffff88807e2e27f8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 204.131276][T10546] [ 204.131276][T10546] which lock already depends on the new lock. [ 204.131276][T10546] [ 204.141660][T10546] [ 204.141660][T10546] the existing dependency chain (in reverse order) is: [ 204.150671][T10546] [ 204.150671][T10546] -> #8 (&mm->mmap_lock){++++}-{4:4}: [ 204.158210][T10546] __might_fault+0xde/0x140 [ 204.163245][T10546] _copy_from_user+0x29/0xd0 [ 204.168341][T10546] csum_and_copy_from_iter_full+0x21a/0x1fd0 [ 204.174830][T10546] ip_generic_getfrag+0x172/0x270 [ 204.180375][T10546] raw6_getfrag+0x235/0x2a0 [ 204.185387][T10546] __ip6_append_data+0x4058/0x4bf0 [ 204.191014][T10546] ip6_append_data+0x10b/0x410 [ 204.196302][T10546] rawv6_sendmsg+0x169c/0x4420 [ 204.201572][T10546] inet_sendmsg+0x11c/0x140 [ 204.206673][T10546] ____sys_sendmsg+0x98d/0xb70 [ 204.211942][T10546] ___sys_sendmsg+0x190/0x1e0 [ 204.217122][T10546] __sys_sendmsg+0x170/0x220 [ 204.222219][T10546] do_syscall_64+0x115/0x870 [ 204.227315][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.233709][T10546] [ 204.233709][T10546] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 204.241422][T10546] lock_sock_nested+0x41/0xf0 [ 204.246605][T10546] inet_shutdown+0x67/0x410 [ 204.251614][T10546] nbd_mark_nsock_dead+0xae/0x5c0 [ 204.257143][T10546] sock_shutdown+0x16b/0x200 [ 204.262251][T10546] nbd_config_put+0x1eb/0x750 [ 204.267432][T10546] nbd_genl_connect+0xaf8/0x1a40 [ 204.272889][T10546] genl_family_rcv_msg_doit+0x214/0x300 [ 204.278940][T10546] genl_rcv_msg+0x560/0x800 [ 204.284040][T10546] netlink_rcv_skb+0x159/0x420 [ 204.289309][T10546] genl_rcv+0x28/0x40 [ 204.293796][T10546] netlink_unicast+0x585/0x850 [ 204.299149][T10546] netlink_sendmsg+0x8b0/0xda0 [ 204.304431][T10546] ____sys_sendmsg+0x9e1/0xb70 [ 204.309699][T10546] ___sys_sendmsg+0x190/0x1e0 [ 204.314884][T10546] __sys_sendmsg+0x170/0x220 [ 204.319982][T10546] do_syscall_64+0x115/0x870 [ 204.325117][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.331529][T10546] [ 204.331529][T10546] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 204.339154][T10546] __mutex_lock+0x1a4/0x1b10 [ 204.344252][T10546] nbd_queue_rq+0x428/0x1080 [ 204.349352][T10546] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 204.355411][T10546] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 204.362265][T10546] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 204.368769][T10546] blk_mq_run_hw_queue+0x23c/0x670 [ 204.374386][T10546] blk_mq_dispatch_list+0x51d/0x1360 [ 204.380195][T10546] blk_mq_flush_plug_list+0x130/0x600 [ 204.386073][T10546] __blk_flush_plug+0x2c4/0x4b0 [ 204.391443][T10546] __submit_bio+0x584/0x6c0 [ 204.396450][T10546] submit_bio_noacct_nocheck+0x543/0xbf0 [ 204.402694][T10546] submit_bio_noacct+0xd18/0x2000 [ 204.408221][T10546] submit_bh_wbc+0x681/0x890 [ 204.413323][T10546] block_read_full_folio+0x264/0x8e0 [ 204.419109][T10546] filemap_read_folio+0xfc/0x3b0 [ 204.424642][T10546] do_read_cache_folio+0x2d7/0x6b0 [ 204.430263][T10546] read_part_sector+0xd1/0x370 [ 204.435547][T10546] adfspart_check_ICS+0x91/0x7d0 [ 204.440994][T10546] bdev_disk_changed+0x7a3/0x1250 [ 204.446526][T10546] blkdev_get_whole+0x187/0x290 [ 204.451897][T10546] bdev_open+0x2c7/0xe40 [ 204.456647][T10546] blkdev_open+0x34e/0x4f0 [ 204.461567][T10546] do_dentry_open+0x6ab/0x14d0 [ 204.466833][T10546] vfs_open+0x82/0x3f0 [ 204.471408][T10546] path_openat+0x208c/0x31a0 [ 204.476511][T10546] do_file_open+0x20e/0x430 [ 204.481526][T10546] do_sys_openat2+0x10d/0x1e0 [ 204.486728][T10546] __x64_sys_openat+0x12d/0x210 [ 204.492100][T10546] do_syscall_64+0x115/0x870 [ 204.497200][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.503597][T10546] [ 204.503597][T10546] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 204.510785][T10546] __mutex_lock+0x1a4/0x1b10 [ 204.515888][T10546] nbd_queue_rq+0xba/0x1080 [ 204.520922][T10546] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 204.526993][T10546] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 204.533841][T10546] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 204.540332][T10546] blk_mq_run_hw_queue+0x23c/0x670 [ 204.545965][T10546] blk_mq_dispatch_list+0x51d/0x1360 [ 204.551777][T10546] blk_mq_flush_plug_list+0x130/0x600 [ 204.557673][T10546] __blk_flush_plug+0x2c4/0x4b0 [ 204.563031][T10546] __submit_bio+0x584/0x6c0 [ 204.568038][T10546] submit_bio_noacct_nocheck+0x543/0xbf0 [ 204.574177][T10546] submit_bio_noacct+0xd18/0x2000 [ 204.579724][T10546] submit_bh_wbc+0x681/0x890 [ 204.584838][T10546] block_read_full_folio+0x264/0x8e0 [ 204.590636][T10546] filemap_read_folio+0xfc/0x3b0 [ 204.596082][T10546] do_read_cache_folio+0x2d7/0x6b0 [ 204.601705][T10546] read_part_sector+0xd1/0x370 [ 204.606972][T10546] adfspart_check_ICS+0x91/0x7d0 [ 204.612413][T10546] bdev_disk_changed+0x7a3/0x1250 [ 204.617938][T10546] blkdev_get_whole+0x187/0x290 [ 204.623292][T10546] bdev_open+0x2c7/0xe40 [ 204.628052][T10546] blkdev_open+0x34e/0x4f0 [ 204.632982][T10546] do_dentry_open+0x6ab/0x14d0 [ 204.638247][T10546] vfs_open+0x82/0x3f0 [ 204.642829][T10546] path_openat+0x208c/0x31a0 [ 204.647925][T10546] do_file_open+0x20e/0x430 [ 204.652929][T10546] do_sys_openat2+0x10d/0x1e0 [ 204.658113][T10546] __x64_sys_openat+0x12d/0x210 [ 204.663469][T10546] do_syscall_64+0x115/0x870 [ 204.668580][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.675081][T10546] [ 204.675081][T10546] -> #4 (set->srcu){.+.+}-{0:0}: [ 204.682207][T10546] __synchronize_srcu+0xa2/0x300 [ 204.687653][T10546] blk_mq_quiesce_queue+0x149/0x1c0 [ 204.693355][T10546] elevator_switch+0x17b/0x7e0 [ 204.698618][T10546] elevator_change+0x352/0x530 [ 204.703885][T10546] elevator_set_default+0x29e/0x360 [ 204.709592][T10546] blk_register_queue+0x48e/0x630 [ 204.715116][T10546] __add_disk+0x73f/0xe40 [ 204.719952][T10546] add_disk_fwnode+0x118/0x5c0 [ 204.725213][T10546] nbd_dev_add+0x77a/0xb10 [ 204.730144][T10546] nbd_init+0x291/0x2b0 [ 204.734811][T10546] do_one_initcall+0x121/0x750 [ 204.740088][T10546] kernel_init_freeable+0x6ea/0x7b0 [ 204.745787][T10546] kernel_init+0x1f/0x1e0 [ 204.750616][T10546] ret_from_fork+0x72b/0xd50 [ 204.755707][T10546] ret_from_fork_asm+0x1a/0x30 [ 204.760981][T10546] [ 204.760981][T10546] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 204.768780][T10546] __mutex_lock+0x1a4/0x1b10 [ 204.773873][T10546] elevator_change+0x1bc/0x530 [ 204.779139][T10546] elevator_set_none+0x92/0xf0 [ 204.784406][T10546] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 204.790722][T10546] nbd_start_device+0x1a6/0xbd0 [ 204.796079][T10546] nbd_genl_connect+0xff2/0x1a40 [ 204.801526][T10546] genl_family_rcv_msg_doit+0x214/0x300 [ 204.807578][T10546] genl_rcv_msg+0x560/0x800 [ 204.812584][T10546] netlink_rcv_skb+0x159/0x420 [ 204.817854][T10546] genl_rcv+0x28/0x40 [ 204.822337][T10546] netlink_unicast+0x585/0x850 [ 204.827599][T10546] netlink_sendmsg+0x8b0/0xda0 [ 204.832963][T10546] ____sys_sendmsg+0x9e1/0xb70 [ 204.838226][T10546] ___sys_sendmsg+0x190/0x1e0 [ 204.843404][T10546] __sys_sendmsg+0x170/0x220 [ 204.848502][T10546] do_syscall_64+0x115/0x870 [ 204.853613][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.860007][T10546] [ 204.860007][T10546] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 204.868588][T10546] blk_alloc_queue+0x610/0x790 [ 204.873855][T10546] blk_mq_alloc_queue+0x174/0x290 [ 204.879387][T10546] __blk_mq_alloc_disk+0x29/0x120 [ 204.884918][T10546] nbd_dev_add+0x492/0xb10 [ 204.889850][T10546] nbd_init+0x291/0x2b0 [ 204.894510][T10546] do_one_initcall+0x121/0x750 [ 204.899778][T10546] kernel_init_freeable+0x6ea/0x7b0 [ 204.905475][T10546] kernel_init+0x1f/0x1e0 [ 204.910306][T10546] ret_from_fork+0x72b/0xd50 [ 204.915409][T10546] ret_from_fork_asm+0x1a/0x30 [ 204.920697][T10546] [ 204.920697][T10546] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 204.927880][T10546] fs_reclaim_acquire+0xc4/0x100 [ 204.933316][T10546] dma_resv_lockdep+0x3c8/0x5d0 [ 204.938666][T10546] do_one_initcall+0x121/0x750 [ 204.943947][T10546] kernel_init_freeable+0x6ea/0x7b0 [ 204.949644][T10546] kernel_init+0x1f/0x1e0 [ 204.954470][T10546] ret_from_fork+0x72b/0xd50 [ 204.959561][T10546] ret_from_fork_asm+0x1a/0x30 [ 204.964843][T10546] [ 204.964843][T10546] -> #0 (reservation_ww_class_mutex){+.+.}-{4:4}: [ 204.973415][T10546] __lock_acquire+0x14b8/0x2630 [ 204.978775][T10546] lock_acquire+0x1b1/0x370 [ 204.983790][T10546] __ww_mutex_lock.constprop.0+0x216/0x40c0 [ 204.990186][T10546] ww_mutex_lock+0x37/0x160 [ 204.995192][T10546] drm_gem_shmem_mmap+0xc1/0x500 [ 205.000634][T10546] drm_gem_mmap_obj+0x1b5/0x520 [ 205.005999][T10546] drm_gem_mmap+0x103/0x1e0 [ 205.011005][T10546] __mmap_region+0x13e1/0x2dd0 [ 205.016275][T10546] mmap_region+0x35d/0x620 [ 205.021288][T10546] do_mmap+0xc63/0x12f0 [ 205.025956][T10546] vm_mmap_pgoff+0x29e/0x470 [ 205.031053][T10546] ksys_mmap_pgoff+0x3cb/0x610 [ 205.036316][T10546] __x64_sys_mmap+0x125/0x190 [ 205.041492][T10546] do_syscall_64+0x115/0x870 [ 205.046587][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.052984][T10546] [ 205.052984][T10546] other info that might help us debug this: [ 205.052984][T10546] [ 205.063186][T10546] Chain exists of: [ 205.063186][T10546] reservation_ww_class_mutex --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 205.063186][T10546] [ 205.077154][T10546] Possible unsafe locking scenario: [ 205.077154][T10546] [ 205.084577][T10546] CPU0 CPU1 [ 205.089917][T10546] ---- ---- [ 205.095259][T10546] lock(&mm->mmap_lock); [ 205.099570][T10546] lock(sk_lock-AF_INET6); [ 205.106587][T10546] lock(&mm->mmap_lock); [ 205.113427][T10546] lock(reservation_ww_class_mutex); [ 205.118788][T10546] [ 205.118788][T10546] *** DEADLOCK *** [ 205.118788][T10546] [ 205.126912][T10546] 1 lock held by syz.2.2067/10546: [ 205.131994][T10546] #0: ffff88807e2e27f8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 205.141383][T10546] [ 205.141383][T10546] stack backtrace: [ 205.147252][T10546] CPU: 0 UID: 0 PID: 10546 Comm: syz.2.2067 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.147273][T10546] Tainted: [L]=SOFTLOCKUP [ 205.147278][T10546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 205.147287][T10546] Call Trace: [ 205.147291][T10546] [ 205.147296][T10546] dump_stack_lvl+0x100/0x190 [ 205.147314][T10546] print_circular_bug.cold+0x178/0x1c7 [ 205.147337][T10546] check_noncircular+0x146/0x160 [ 205.147356][T10546] __lock_acquire+0x14b8/0x2630 [ 205.147376][T10546] lock_acquire+0x1b1/0x370 [ 205.147391][T10546] ? drm_gem_shmem_mmap+0xc1/0x500 [ 205.147411][T10546] ? __pfx___might_resched+0x10/0x10 [ 205.147430][T10546] ? kasan_save_stack+0x30/0x50 [ 205.147449][T10546] __ww_mutex_lock.constprop.0+0x216/0x40c0 [ 205.147471][T10546] ? drm_gem_shmem_mmap+0xc1/0x500 [ 205.147488][T10546] ? __lock_acquire+0x4a5/0x2630 [ 205.147504][T10546] ? drm_gem_shmem_mmap+0xc1/0x500 [ 205.147521][T10546] ? __lock_acquire+0x4a5/0x2630 [ 205.147536][T10546] ? mas_wr_walk_descend+0x506/0xac0 [ 205.147552][T10546] ? __pfx___ww_mutex_lock.constprop.0+0x10/0x10 [ 205.147572][T10546] ? lock_acquire+0x1b1/0x370 [ 205.147591][T10546] ? __pfx___might_resched+0x10/0x10 [ 205.147611][T10546] ? ww_mutex_lock+0x37/0x160 [ 205.147628][T10546] ww_mutex_lock+0x37/0x160 [ 205.147646][T10546] drm_gem_shmem_mmap+0xc1/0x500 [ 205.147663][T10546] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 205.147682][T10546] drm_gem_mmap_obj+0x1b5/0x520 [ 205.147704][T10546] drm_gem_mmap+0x103/0x1e0 [ 205.147724][T10546] __mmap_region+0x13e1/0x2dd0 [ 205.147745][T10546] ? __pfx___mmap_region+0x10/0x10 [ 205.147767][T10546] ? is_bpf_text_address+0x8a/0x1a0 [ 205.147788][T10546] ? __kasan_check_byte+0x13/0x50 [ 205.147802][T10546] ? is_bpf_text_address+0x8a/0x1a0 [ 205.147818][T10546] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 205.147832][T10546] ? rcu_is_watching+0x12/0xc0 [ 205.147852][T10546] ? is_bpf_text_address+0x8a/0x1a0 [ 205.147868][T10546] ? lock_release+0x245/0x310 [ 205.147883][T10546] ? bpf_ksym_find+0x128/0x1c0 [ 205.147902][T10546] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 205.147925][T10546] ? check_noncircular+0x97/0x160 [ 205.147950][T10546] ? do_raw_read_unlock+0x3f/0x70 [ 205.147969][T10546] ? _raw_read_unlock+0x28/0x50 [ 205.147985][T10546] ? drm_vma_node_is_allowed+0xd4/0x110 [ 205.148002][T10546] mmap_region+0x35d/0x620 [ 205.148023][T10546] ? __pfx_mmap_region+0x10/0x10 [ 205.148044][T10546] ? drm_gem_get_unmapped_area+0x17b/0x220 [ 205.148064][T10546] ? __pfx_shmem_get_unmapped_area+0x10/0x10 [ 205.148084][T10546] ? selinux_mmap_addr+0x2b/0x110 [ 205.148103][T10546] ? bpf_lsm_mmap_addr+0x9/0x30 [ 205.148124][T10546] ? security_mmap_addr+0x71/0x1e0 [ 205.148145][T10546] ? __get_unmapped_area+0x255/0x3e0 [ 205.148162][T10546] do_mmap+0xc63/0x12f0 [ 205.148178][T10546] ? __pfx_do_mmap+0x10/0x10 [ 205.148193][T10546] ? __pfx_down_write_killable+0x10/0x10 [ 205.148215][T10546] vm_mmap_pgoff+0x29e/0x470 [ 205.148233][T10546] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 205.148248][T10546] ? __fget_files+0x215/0x3d0 [ 205.148268][T10546] ? __fget_files+0x21f/0x3d0 [ 205.148285][T10546] ksys_mmap_pgoff+0x3cb/0x610 [ 205.148301][T10546] ? __x64_sys_futex+0x358/0x4d0 [ 205.148320][T10546] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 205.148335][T10546] ? xfd_validate_state+0x129/0x190 [ 205.148351][T10546] ? selinux_file_ioctl+0xb6/0x290 [ 205.148372][T10546] __x64_sys_mmap+0x125/0x190 [ 205.148390][T10546] do_syscall_64+0x115/0x870 [ 205.148408][T10546] ? clear_bhb_loop+0x40/0x90 [ 205.148423][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.148442][T10546] RIP: 0033:0x7f551759ce59 [ 205.148454][T10546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.148468][T10546] RSP: 002b:00007f551853f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 205.148482][T10546] RAX: ffffffffffffffda RBX: 00007f5517815fa0 RCX: 00007f551759ce59 [ 205.148491][T10546] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 205.148500][T10546] RBP: 00007f5517632d6f R08: 0000000000000003 R09: 0000000100000000 [ 205.148508][T10546] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 205.148516][T10546] R13: 00007f5517816038 R14: 00007f5517815fa0 R15: 00007ffd72e1c628 [ 205.148530][T10546] [ 205.573027][ T8918] nbd1: unable to read partition table [ 205.747192][ T5622] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 205.765145][ T5799] kernel write not supported for file /radio3 (pid: 5799 comm: kworker/1:7) [ 206.259121][ T5799] kernel read not supported for file /dsp (pid: 5799 comm: kworker/1:7)