last executing test programs: 4.361775866s ago: executing program 0 (id=935): r0 = fsopen(&(0x7f0000000bc0)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000380)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) 4.273556045s ago: executing program 0 (id=937): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 4.212942598s ago: executing program 0 (id=939): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0xd114, 0x10000, 0x0, 0x125}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 4.200391597s ago: executing program 0 (id=941): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) 3.896765381s ago: executing program 0 (id=950): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r2}, 0xc) 3.817079702s ago: executing program 0 (id=952): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000080)='X', 0x1}], 0x1) pwrite64(r0, &(0x7f0000000040)='F', 0x1, 0x4) 2.966026531s ago: executing program 1 (id=969): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x109d02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0000100, 0x0, 0x80}]}) 2.857234033s ago: executing program 1 (id=974): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf25030000000c00040003000000000000000c00080001000000000000000c00020007000000000000000c00050008010000000000000c00060000000000000000000c00020072af000000000000280007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c000180fffffeff", @ANYRES32, @ANYBLOB="080001"], 0x8c}, 0x1, 0x0, 0x0, 0x24060801}, 0x0) 2.826887198s ago: executing program 1 (id=979): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f0000000400), 0x40, 0x8000) syz_usb_disconnect(r0) close(0x4) 2.367180617s ago: executing program 3 (id=988): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000001200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 2.146144874s ago: executing program 3 (id=989): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000080)='7', 0x1) 1.407965489s ago: executing program 1 (id=997): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) io_uring_setup(0x37cc, &(0x7f0000000040)={0x0, 0x2a11, 0x1c080, 0xa, 0x20002f7}) 1.346303936s ago: executing program 1 (id=999): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0x20}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfa}, 0x2) 871.694022ms ago: executing program 3 (id=1009): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 823.690037ms ago: executing program 3 (id=1011): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 750.921829ms ago: executing program 3 (id=1012): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x4238000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 596.469695ms ago: executing program 2 (id=1015): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 589.40241ms ago: executing program 3 (id=1016): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x202) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) 497.240604ms ago: executing program 2 (id=1017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) 496.927371ms ago: executing program 2 (id=1018): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xfffffffc, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000500)={{0x80, 0x9}, 'port0\x00', 0x57, 0x40800, 0x9, 0x10, 0x0, 0x800, 0x8, 0x0, 0x3, 0x7f}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x80, 0x2}, 'port0\x00', 0x80, 0x100816, 0x4, 0x9, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) 428.383486ms ago: executing program 2 (id=1019): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x4, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 428.167211ms ago: executing program 2 (id=1020): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dbdbfb, {0x2, 0x0, 0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_getnexthop={0x18, 0x6a, 0x605, 0x70fd2c, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 338.350118ms ago: executing program 2 (id=1021): r0 = io_uring_setup(0x5513, &(0x7f0000000100)={0x0, 0x857, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002280)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_enter(r0, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) 0s ago: executing program 1 (id=1022): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000300)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) kernel console output (not intermixed with test programs): [ 44.181853][ T42] audit: type=1400 audit(1784912158.338:116): avc: denied { write } for pid=5646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.227408][ T42] audit: type=1400 audit(1784912158.388:117): avc: denied { write } for pid=5649 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.758042][ T42] audit: type=1400 audit(1784912158.918:118): avc: denied { write } for pid=5652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.831294][ T42] audit: type=1400 audit(1784912158.978:119): avc: denied { write } for pid=5655 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.910282][ T42] audit: type=1400 audit(1784912159.068:120): avc: denied { write } for pid=5658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:58156' (ED25519) to the list of known hosts. [ 49.308225][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 49.308238][ T42] audit: type=1400 audit(1784912163.468:141): avc: denied { mounton } for pid=5717 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 49.318415][ T42] audit: type=1400 audit(1784912163.478:142): avc: denied { mount } for pid=5717 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.321291][ T5717] cgroup: Unknown subsys name 'net' [ 49.332327][ T42] audit: type=1400 audit(1784912163.498:143): avc: denied { unmount } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.527810][ T5717] cgroup: Unknown subsys name 'cpuset' [ 49.535080][ T5717] cgroup: Unknown subsys name 'rlimit' [ 49.713746][ T42] audit: type=1400 audit(1784912163.878:144): avc: denied { setattr } for pid=5717 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.723534][ T42] audit: type=1400 audit(1784912163.878:145): avc: denied { create } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.732800][ T42] audit: type=1400 audit(1784912163.878:146): avc: denied { write } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.741658][ T42] audit: type=1400 audit(1784912163.878:147): avc: denied { read } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.750200][ T42] audit: type=1400 audit(1784912163.888:148): avc: denied { mounton } for pid=5717 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.761367][ T42] audit: type=1400 audit(1784912163.888:149): avc: denied { mount } for pid=5717 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.771165][ T42] audit: type=1400 audit(1784912163.898:150): avc: denied { read } for pid=5448 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.788507][ T5724] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 50.570174][ T5717] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.921712][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 54.921723][ T42] audit: type=1400 audit(1784912169.078:158): avc: denied { execmem } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.044835][ T42] audit: type=1400 audit(1784912169.208:159): avc: denied { create } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.050768][ T42] audit: type=1400 audit(1784912169.208:160): avc: denied { read write } for pid=5734 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.057709][ T42] audit: type=1400 audit(1784912169.208:161): avc: denied { read write } for pid=5735 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.068661][ T5741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.070371][ T42] audit: type=1400 audit(1784912169.208:162): avc: denied { open } for pid=5734 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.072200][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.075385][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.078692][ T42] audit: type=1400 audit(1784912169.218:163): avc: denied { ioctl } for pid=5736 comm="syz-executor" path="socket:[3862]" dev="sockfs" ino=3862 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.082234][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.082249][ T5741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.082976][ T5741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.088830][ T5743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.089137][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.089624][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.090626][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.092117][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.092581][ T5751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.092879][ T5751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.093048][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.093601][ T5743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.094062][ T5743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.094305][ T5743] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.096255][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.102027][ T42] audit: type=1400 audit(1784912169.258:164): avc: denied { read } for pid=5746 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.114634][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.115480][ T42] audit: type=1400 audit(1784912169.268:165): avc: denied { open } for pid=5736 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.117263][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.119287][ T42] audit: type=1400 audit(1784912169.268:166): avc: denied { mounton } for pid=5736 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.152346][ T42] audit: type=1400 audit(1784912169.278:167): avc: denied { module_request } for pid=5736 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 55.729537][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.732210][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.734681][ T5735] bridge_slave_0: entered allmulticast mode [ 55.738445][ T5735] bridge_slave_0: entered promiscuous mode [ 55.776835][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.779694][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.782908][ T5735] bridge_slave_1: entered allmulticast mode [ 55.786665][ T5735] bridge_slave_1: entered promiscuous mode [ 55.837989][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.868101][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.876912][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.879983][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.884153][ T5734] bridge_slave_0: entered allmulticast mode [ 55.887438][ T5734] bridge_slave_0: entered promiscuous mode [ 55.891381][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.893808][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.896097][ T5734] bridge_slave_1: entered allmulticast mode [ 55.898830][ T5734] bridge_slave_1: entered promiscuous mode [ 55.973063][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.975869][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.978329][ T5736] bridge_slave_0: entered allmulticast mode [ 55.980972][ T5736] bridge_slave_0: entered promiscuous mode [ 55.985655][ T5735] team0: Port device team_slave_0 added [ 55.989997][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.998090][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.036023][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.038529][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.041035][ T5736] bridge_slave_1: entered allmulticast mode [ 56.044126][ T5736] bridge_slave_1: entered promiscuous mode [ 56.053626][ T5735] team0: Port device team_slave_1 added [ 56.082378][ T5734] team0: Port device team_slave_0 added [ 56.085444][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.087892][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.090350][ T5746] bridge_slave_0: entered allmulticast mode [ 56.094678][ T5746] bridge_slave_0: entered promiscuous mode [ 56.105337][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.108475][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.119709][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.126743][ T5734] team0: Port device team_slave_1 added [ 56.128811][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.131301][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.133798][ T5746] bridge_slave_1: entered allmulticast mode [ 56.136996][ T5746] bridge_slave_1: entered promiscuous mode [ 56.147172][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.151729][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.154790][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.165293][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.193827][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.212740][ T5736] team0: Port device team_slave_0 added [ 56.223448][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.229470][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.233965][ T5736] team0: Port device team_slave_1 added [ 56.236139][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.238524][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.246716][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.260936][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.263396][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.271732][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.326725][ T5735] hsr_slave_0: entered promiscuous mode [ 56.330746][ T5735] hsr_slave_1: entered promiscuous mode [ 56.335922][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.338973][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.349710][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.355563][ T5746] team0: Port device team_slave_0 added [ 56.359343][ T5746] team0: Port device team_slave_1 added [ 56.362447][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.365422][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.376248][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.428437][ T5734] hsr_slave_0: entered promiscuous mode [ 56.431757][ T5734] hsr_slave_1: entered promiscuous mode [ 56.434787][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 56.437330][ T5734] Cannot create hsr debugfs directory [ 56.490276][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.493162][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.503164][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.508913][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.511656][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.522615][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.614418][ T5736] hsr_slave_0: entered promiscuous mode [ 56.617479][ T5736] hsr_slave_1: entered promiscuous mode [ 56.620339][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 56.622982][ T5736] Cannot create hsr debugfs directory [ 56.687813][ T5746] hsr_slave_0: entered promiscuous mode [ 56.690820][ T5746] hsr_slave_1: entered promiscuous mode [ 56.694385][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 56.696940][ T5746] Cannot create hsr debugfs directory [ 56.985460][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.992958][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.996539][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.002335][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.006537][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.011059][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.014389][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.018673][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.082976][ T5734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.087776][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.091933][ T5734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.096798][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.100094][ T5734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.106377][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.110073][ T5734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.116399][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.173476][ T5737] Bluetooth: hci0: command tx timeout [ 57.173480][ T64] Bluetooth: hci2: command tx timeout [ 57.174053][ T64] Bluetooth: hci3: command tx timeout [ 57.175991][ T5737] Bluetooth: hci1: command tx timeout [ 57.186577][ T5736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.195672][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.199394][ T5736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.206527][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.211797][ T5736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.218762][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.222658][ T5736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.227413][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.314980][ T5746] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.321013][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.331753][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.347828][ T5746] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.355717][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.359799][ T5746] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.366156][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.370459][ T5746] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.377048][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.429636][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.443352][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.454597][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.457310][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.468410][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.470486][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.495959][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.505413][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.529829][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.539363][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.542551][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.549292][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.552439][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.565617][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.568738][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.587483][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.590591][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.621854][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.662606][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.677591][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.680613][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.689566][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.692652][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.898807][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.945201][ T5735] veth0_vlan: entered promiscuous mode [ 57.957534][ T5735] veth1_vlan: entered promiscuous mode [ 57.982259][ T5735] veth0_macvtap: entered promiscuous mode [ 57.987964][ T5735] veth1_macvtap: entered promiscuous mode [ 57.993593][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.004627][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.009178][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.037679][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.049334][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.069638][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.081314][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.086373][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.105806][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.110213][ T5736] veth0_vlan: entered promiscuous mode [ 58.130688][ T5736] veth1_vlan: entered promiscuous mode [ 58.155331][ T5734] veth0_vlan: entered promiscuous mode [ 58.159485][ T5746] veth0_vlan: entered promiscuous mode [ 58.178150][ T5746] veth1_vlan: entered promiscuous mode [ 58.206179][ T5734] veth1_vlan: entered promiscuous mode [ 58.226328][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.230462][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.247445][ T5736] veth0_macvtap: entered promiscuous mode [ 58.273949][ T5736] veth1_macvtap: entered promiscuous mode [ 58.284292][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.287675][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.290097][ T5734] veth0_macvtap: entered promiscuous mode [ 58.309341][ T5734] veth1_macvtap: entered promiscuous mode [ 58.318597][ T5746] veth0_macvtap: entered promiscuous mode [ 58.326725][ T5746] veth1_macvtap: entered promiscuous mode [ 58.340427][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.355424][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.355863][ T5735] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.360998][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.382214][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.387625][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.401340][ T5812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.405275][ T5812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.415792][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.420404][ T5812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.424433][ T5812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.439194][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.444201][ T5812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.456008][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.467311][ T5812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.515368][ T5812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.521856][ T5812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.535850][ T5812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.539021][ T5812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.551589][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.555033][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.575045][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.577772][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.608616][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.616566][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.637644][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.644945][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.710184][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.718659][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.769360][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.776715][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.252338][ T5737] Bluetooth: hci3: command tx timeout [ 59.253532][ T5747] Bluetooth: hci0: command tx timeout [ 59.254560][ T5737] Bluetooth: hci2: command tx timeout [ 59.258406][ T64] Bluetooth: hci1: command tx timeout [ 59.271914][ T5935] openvswitch: netlink: IP tunnel TTL not specified. [ 59.275699][ T5935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 59.507571][ T5951] Bluetooth: MGMT ver 1.23 [ 59.510024][ T5951] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 59.712551][ T3268] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.715905][ T5961] process 'syz.0.33' launched './file1' with NULL argv: empty string added [ 59.803196][ T5970] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.37'. [ 59.808376][ T5970] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.37'. [ 59.892615][ T3268] usb 8-1: Using ep0 maxpacket: 8 [ 59.904993][ T3268] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 59.909529][ T3268] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.918130][ T3268] usb 8-1: Product: syz [ 59.919963][ T3268] usb 8-1: Manufacturer: syz [ 59.921903][ T3268] usb 8-1: SerialNumber: syz [ 59.931928][ T3268] usb 8-1: config 0 descriptor?? [ 59.954571][ T3268] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 59.960191][ T3268] dvb-usb: bulk message failed: -22 (2/0) [ 59.963230][ T3268] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 59.970036][ T3268] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 59.976048][ T3268] usb 8-1: media controller created [ 59.996431][ T3268] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 59.998049][ T42] kauditd_printk_skb: 75 callbacks suppressed [ 59.998065][ T42] audit: type=1400 audit(1784912174.158:243): avc: denied { create } for pid=5984 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.012916][ T3268] dvb-usb: bulk message failed: -22 (1/0) [ 60.013040][ T42] audit: type=1400 audit(1784912174.158:244): avc: denied { bind } for pid=5984 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.018116][ T3268] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 60.031388][ T5988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.45'. [ 60.043084][ T3268] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input5 [ 60.053479][ T3268] dvb-usb: schedule remote query interval to 50 msecs. [ 60.056527][ T3268] dvb-usb: bulk message failed: -22 (2/0) [ 60.060718][ T3268] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 60.113086][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 60.121002][ T5883] dvb-usb: error while querying for an remote control event. [ 60.158773][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.165824][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.177559][ T42] audit: type=1400 audit(1784912174.338:245): avc: denied { read } for pid=5947 comm="syz.3.30" name="event4" dev="devtmpfs" ino=2846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.186762][ T42] audit: type=1400 audit(1784912174.338:246): avc: denied { open } for pid=5947 comm="syz.3.30" path="/dev/input/event4" dev="devtmpfs" ino=2846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.193509][ T5883] usb 8-1: USB disconnect, device number 2 [ 60.196964][ T42] audit: type=1400 audit(1784912174.338:247): avc: denied { ioctl } for pid=5947 comm="syz.3.30" path="/dev/input/event4" dev="devtmpfs" ino=2846 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.211529][ T5842] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.223776][ T42] audit: type=1400 audit(1784912174.388:248): avc: denied { append } for pid=5998 comm="syz.2.50" name="pmem0" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.264077][ T5883] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 60.342221][ T42] audit: type=1400 audit(1784912174.498:249): avc: denied { read } for pid=6004 comm="syz.2.53" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 60.351900][ T42] audit: type=1400 audit(1784912174.498:250): avc: denied { open } for pid=6004 comm="syz.2.53" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 60.361628][ T42] audit: type=1400 audit(1784912174.508:251): avc: denied { map } for pid=6004 comm="syz.2.53" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 60.371637][ T42] audit: type=1400 audit(1784912174.508:252): avc: denied { execute } for pid=6004 comm="syz.2.53" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 60.383538][ T5842] usb 6-1: Using ep0 maxpacket: 8 [ 60.395168][ T5842] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 60.398964][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.399709][ T6011] bridge0: port 3(syz_tun) entered blocking state [ 60.407715][ T5842] pvrusb2: Hardware description: Terratec Grabster AV400 [ 60.407804][ T6011] bridge0: port 3(syz_tun) entered disabled state [ 60.410047][ T5842] pvrusb2: ********** [ 60.410054][ T5842] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 60.410061][ T5842] pvrusb2: Important functionality might not be entirely working. [ 60.410065][ T5842] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 60.410070][ T5842] pvrusb2: ********** [ 60.430880][ T6011] syz_tun: entered allmulticast mode [ 60.436348][ T6011] syz_tun: entered promiscuous mode [ 60.439208][ T6011] bridge0: port 3(syz_tun) entered blocking state [ 60.442744][ T6011] bridge0: port 3(syz_tun) entered forwarding state [ 60.619811][ T2517] pvrusb2: Invalid write control endpoint [ 60.665477][ T2517] pvrusb2: Invalid write control endpoint [ 60.668889][ T2517] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 60.678080][ T2517] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 60.682654][ T2517] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 60.686588][ T2517] pvrusb2: Device being rendered inoperable [ 60.690537][ T2517] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 60.695566][ T2517] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 60.700678][ T2517] pvrusb2: Attached sub-driver cx25840 [ 60.702855][ T2517] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 60.707458][ T2517] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 60.817396][ T5981] pvrusb2: Attempted to execute control transfer when device not ok [ 60.824570][ T5842] usb 6-1: USB disconnect, device number 2 [ 60.868274][ T6041] Bluetooth: MGMT ver 1.23 [ 61.113132][ T5813] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.282840][ T5813] usb 5-1: unable to get BOS descriptor or descriptor too short [ 61.286673][ T5813] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 61.289795][ T5813] usb 5-1: can't read configurations, error -71 [ 61.333646][ T5747] Bluetooth: hci3: command tx timeout [ 61.336550][ T5744] Bluetooth: hci1: command tx timeout [ 61.336608][ T5737] Bluetooth: hci0: command tx timeout [ 61.338949][ T64] Bluetooth: hci2: command tx timeout [ 61.782406][ T847] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.932093][ T847] usb 6-1: Using ep0 maxpacket: 32 [ 61.938278][ T847] usb 6-1: unable to get BOS descriptor or descriptor too short [ 61.947597][ T847] usb 6-1: string descriptor 0 read error: -22 [ 61.951333][ T847] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 61.955789][ T847] usb 6-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 61.963506][ T847] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 61.966713][ T847] dw2102: su3000_power_ctrl: 1, initialized 0 [ 61.969219][ T847] dvb-usb: bulk message failed: -22 (2/0) [ 61.975358][ T847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 61.980300][ T847] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 61.984829][ T847] usb 6-1: media controller created [ 61.987804][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 61.990585][ T847] dw2102: i2c transfer failed. [ 61.992921][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 61.994698][ T847] dw2102: i2c transfer failed. [ 61.996803][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 61.998594][ T847] dw2102: i2c transfer failed. [ 62.000134][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 62.002314][ T847] dw2102: i2c transfer failed. [ 62.003842][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 62.005753][ T847] dw2102: i2c transfer failed. [ 62.007347][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 62.009124][ T847] dw2102: i2c transfer failed. [ 62.010684][ T847] dvb-usb: MAC address: 02:02:02:02:02:02 [ 62.019263][ T847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 62.035187][ T847] dvb-usb: bulk message failed: -22 (3/0) [ 62.037480][ T847] dw2102: command 0x0e transfer failed. [ 62.039488][ T847] dvb-usb: bulk message failed: -22 (3/0) [ 62.042346][ T847] dw2102: command 0x0e transfer failed. [ 62.211582][ T6136] IPv6: NLM_F_CREATE should be specified when creating new route [ 62.352173][ T847] dvb-usb: bulk message failed: -22 (3/0) [ 62.354611][ T847] dw2102: command 0x0e transfer failed. [ 62.356786][ T847] dvb-usb: bulk message failed: -22 (3/0) [ 62.359199][ T847] dw2102: command 0x0e transfer failed. [ 62.361365][ T847] dvb-usb: bulk message failed: -22 (1/0) [ 62.365132][ T847] dw2102: command 0x51 transfer failed. [ 62.369802][ T6093] dvb-usb: bulk message failed: -22 (4/0) [ 62.373581][ T6093] dw2102: i2c transfer failed. [ 62.396839][ T847] DVB: Unable to find symbol ds3000_attach() [ 62.399398][ T847] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 62.462131][ T847] rc_core: IR keymap rc-su3000 not found [ 62.464554][ T847] Registered IR keymap rc-empty [ 62.469283][ T847] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 62.483309][ T847] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input6 [ 62.500554][ T847] dvb-usb: schedule remote query interval to 150 msecs. [ 62.506379][ T847] dw2102: su3000_power_ctrl: 0, initialized 1 [ 62.508973][ T847] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 62.515671][ T847] usb 6-1: USB disconnect, device number 3 [ 62.578769][ T847] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 62.657686][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 62.674322][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 62.719974][ T6178] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.135'. [ 62.725322][ T6178] openvswitch: netlink: Message has 512 unknown bytes. [ 62.725668][ T6177] overlayfs: workdir and upperdir must reside under the same mount [ 62.753329][ T5821] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 62.830027][ T6184] usb 1-1: USB disconnect, device number 2 [ 62.912147][ T5821] usb 7-1: Using ep0 maxpacket: 16 [ 62.918228][ T5821] usb 7-1: config 0 has no interfaces? [ 62.920093][ T5821] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 62.925675][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.938541][ T5821] usb 7-1: config 0 descriptor?? [ 62.948587][ T6190] warning: `syz.3.141' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 63.095519][ T6202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.147208][ T5088] usb 7-1: USB disconnect, device number 2 [ 63.199724][ T6202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.274033][ T6202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.358665][ T6211] loop3: detected capacity change from 0 to 7 [ 63.375388][ T6202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.378271][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.384326][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 63.388025][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.392122][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 63.395801][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.399245][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 63.402790][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.407077][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 63.410294][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.412912][ T64] Bluetooth: hci0: command tx timeout [ 63.414382][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 63.420058][ T64] Bluetooth: hci2: command tx timeout [ 63.420227][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.422540][ T5737] Bluetooth: hci1: command tx timeout [ 63.422558][ T5747] Bluetooth: hci3: command tx timeout [ 63.426470][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 63.433935][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.437651][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 63.440854][ T6211] ldm_validate_partition_table(): Disk read failed. [ 63.443990][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.447827][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 63.451276][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.454742][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 63.457799][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.461513][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 63.464677][ T6211] Dev loop3: unable to read RDB block 0 [ 63.468617][ T6211] loop3: unable to read partition table [ 63.471349][ T6211] loop3: partition table beyond EOD, truncated [ 63.475936][ T5812] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.476250][ T6211] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 63.497043][ T5812] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.508026][ T5812] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.530198][ T5812] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.878999][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 63.883185][ T6242] netlink: 'syz.2.161': attribute type 30 has an invalid length. [ 63.919413][ T5812] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.923357][ T5812] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.926946][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 63.926982][ T6242] netlink: 'syz.2.161': attribute type 30 has an invalid length. [ 63.931798][ T5812] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.939006][ T5812] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.947565][ T6242] Zero length message leads to an empty skb [ 64.131646][ T6264] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 64.139291][ T6264] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 64.294726][ T5821] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 64.420853][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 64.427797][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 64.444995][ T5821] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 64.450371][ T5821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 64.455908][ T5821] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 64.459837][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 64.465480][ T5821] usb 5-1: Product: syz [ 64.467266][ T5821] usb 5-1: Manufacturer: syz [ 64.469410][ T5821] usb 5-1: SerialNumber: syz [ 64.478968][ T5821] usb 5-1: config 0 descriptor?? [ 64.484953][ T6257] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.499240][ T5821] usb 5-1: selecting invalid altsetting 0 [ 64.694288][ T80] wlan1: Trigger new scan to find an IBSS to join [ 64.712877][ T1490] usb 5-1: USB disconnect, device number 4 [ 65.424045][ T42] kauditd_printk_skb: 65 callbacks suppressed [ 65.424056][ T42] audit: type=1400 audit(1784912179.588:318): avc: denied { remount } for pid=6328 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 65.441632][ T42] audit: type=1400 audit(1784912179.598:319): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 65.616708][ T6345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.211'. [ 65.686544][ T6352] netlink: 'syz.2.214': attribute type 3 has an invalid length. [ 65.689301][ T6352] netlink: 64 bytes leftover after parsing attributes in process `syz.2.214'. [ 65.918911][ T6356] xt_hashlimit: size too large, truncated to 1048576 [ 65.964583][ T6369] erspan0: entered promiscuous mode [ 66.021116][ T42] audit: type=1400 audit(1784912180.178:320): avc: denied { bind } for pid=6371 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.032327][ T42] audit: type=1400 audit(1784912180.198:321): avc: denied { write } for pid=6371 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.038841][ T42] audit: type=1400 audit(1784912180.198:322): avc: denied { read } for pid=6371 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.109000][ T42] audit: type=1400 audit(1784912180.268:323): avc: denied { setopt } for pid=6373 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.360026][ T42] audit: type=1400 audit(1784912180.518:324): avc: denied { create } for pid=6383 comm="syz.1.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 66.367579][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 66.373014][ T42] audit: type=1400 audit(1784912180.528:325): avc: denied { write } for pid=6383 comm="syz.1.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 66.427437][ T42] audit: type=1400 audit(1784912180.588:326): avc: denied { connect } for pid=6385 comm="syz.0.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.440806][ T42] audit: type=1400 audit(1784912180.588:327): avc: denied { read } for pid=6385 comm="syz.0.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.540491][ T6400] netlink: 104 bytes leftover after parsing attributes in process `syz.2.235'. [ 66.594549][ T6405] batman_adv: batadv0: Adding interface: macvtap1 [ 66.597348][ T6405] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.611206][ T6405] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 67.243035][ T6457] netlink: 64 bytes leftover after parsing attributes in process `syz.3.262'. [ 67.317188][ T6464] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 67.770764][ T6472] blkio.reset_stats is deprecated [ 67.822696][ T1089] wlan1: Trigger new scan to find an IBSS to join [ 68.260070][ T6487] input: syz0 as /devices/virtual/input/input8 [ 68.673430][ T6528] openvswitch: netlink: Actions may not be safe on all matching packets [ 68.948892][ T6547] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 69.157053][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 69.161029][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'. [ 69.647460][ T6585] netlink: 'syz.2.322': attribute type 83 has an invalid length. [ 69.709175][ T6560] syz.3.310 (6560): drop_caches: 1 [ 69.712043][ T6559] syz.3.310 (6559): drop_caches: 1 [ 69.792060][ T6559] syz.3.310 (6559): drop_caches: 1 [ 69.894913][ T5737] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 69.894954][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 70.045120][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.338'. [ 70.132667][ T6631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.342'. [ 70.141448][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.198686][ T6643] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 70.304345][ T6655] openvswitch: netlink: Missing key (keys=40, expected=100) [ 70.683121][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 70.683134][ T42] audit: type=1400 audit(1784912184.838:381): avc: denied { open } for pid=6688 comm="syz.0.371" path="/dev/ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 70.698327][ T6685] bond1: invalid ARP target 0.0.0.0 specified for addition [ 70.699776][ T42] audit: type=1400 audit(1784912184.848:382): avc: denied { ioctl } for pid=6688 comm="syz.0.371" path="/dev/ptyq4" dev="devtmpfs" ino=131 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 70.701347][ T6685] bond1: option arp_ip_target: invalid value (0) [ 70.710978][ T1089] wlan1: Creating new IBSS network, BSSID 42:ac:8a:a5:a1:bc [ 70.726347][ T6685] bond1 (unregistering): Released all slaves [ 71.337189][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.341114][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.603492][ T6691] block nbd0: server does not support multiple connections per device. [ 71.610589][ T6698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.375'. [ 71.615167][ T6691] block nbd0: shutting down sockets [ 71.753501][ T42] audit: type=1400 audit(1784912185.908:383): avc: denied { connect } for pid=6713 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.770012][ T42] audit: type=1400 audit(1784912185.928:384): avc: denied { shutdown } for pid=6713 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.826738][ T6725] loop9: detected capacity change from 0 to 524287999 [ 71.833879][ T6725] buffer_io_error: 10 callbacks suppressed [ 71.833894][ T6725] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.838113][ T6725] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.841093][ T6725] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.843629][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.846184][ T6725] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.849084][ T6725] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.851671][ T6725] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.855413][ T6725] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.863430][ T6725] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.865995][ T6725] ldm_validate_partition_table(): Disk read failed. [ 71.868859][ T6725] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.871365][ T6725] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.875746][ T6725] Dev loop9: unable to read RDB block 0 [ 71.878932][ T6725] loop9: unable to read partition table [ 71.881283][ T6725] loop_reread_partitions: partition scan of loop9 (3 x) failed (rc=-5) [ 71.934164][ T42] audit: type=1400 audit(1784912186.088:385): avc: denied { connect } for pid=6735 comm="syz.3.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.026522][ T42] audit: type=1400 audit(1784912186.188:386): avc: denied { write } for pid=6746 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.052236][ T6750] loop4: detected capacity change from 0 to 7 [ 72.095996][ T1308] blk_print_req_error: 10 callbacks suppressed [ 72.096012][ T1308] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.108226][ T6750] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.114822][ T6750] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.120917][ T6750] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.131191][ T6750] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.138413][ T6750] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.143627][ T6750] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.147669][ T6750] ldm_validate_partition_table(): Disk read failed. [ 72.150583][ T6750] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.154747][ T6750] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.158906][ T6750] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.163485][ T6750] Dev loop4: unable to read RDB block 0 [ 72.166317][ T6750] loop4: unable to read partition table [ 72.171166][ T6750] loop4: partition table beyond EOD, truncated [ 72.176292][ T6750] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 72.191911][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 72.206017][ T6764] gretap0: entered promiscuous mode [ 72.212114][ T6764] macvlan2: entered allmulticast mode [ 72.215372][ T6764] gretap0: entered allmulticast mode [ 72.248324][ T42] audit: type=1400 audit(1784912186.408:387): avc: denied { ioctl } for pid=6766 comm="syz.0.408" path="socket:[15882]" dev="sockfs" ino=15882 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.424156][ T6785] netlink: 'syz.0.416': attribute type 27 has an invalid length. [ 72.446655][ T6785] bond0: (slave bond_slave_1): Releasing backup interface [ 72.639502][ T42] audit: type=1400 audit(1784912186.798:388): avc: denied { write } for pid=6796 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.692609][ T42] audit: type=1400 audit(1784912186.848:389): avc: denied { listen } for pid=6796 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.699466][ T42] audit: type=1400 audit(1784912186.858:390): avc: denied { accept } for pid=6796 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.850614][ T6810] loop9: detected capacity change from 0 to 255852544 [ 72.906264][ T6810] Invalid logical block size (4) [ 73.443000][ T6829] Bluetooth: hci4: Frame reassembly failed (-84) [ 73.448050][ T1089] Bluetooth: hci4: Frame reassembly failed (-84) [ 73.949166][ T6863] netlink: 'syz.0.454': attribute type 1 has an invalid length. [ 73.952128][ T6863] netlink: 192 bytes leftover after parsing attributes in process `syz.0.454'. [ 73.956624][ T6863] netlink: 'syz.0.454': attribute type 1 has an invalid length. [ 73.959310][ T6863] netlink: 29 bytes leftover after parsing attributes in process `syz.0.454'. [ 73.993102][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 74.188050][ T6885] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 74.190964][ T1089] Bluetooth: hci5: Frame reassembly failed (-84) [ 74.272132][ T5842] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 74.442152][ T5842] usb 7-1: Using ep0 maxpacket: 8 [ 74.445619][ T5842] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 74.448867][ T5842] usb 7-1: config 179 has no interface number 0 [ 74.451273][ T5842] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 74.456016][ T5842] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 74.460284][ T5842] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 74.464668][ T5842] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 74.468934][ T5842] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 74.475116][ T5842] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 74.478606][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.484630][ T6872] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 74.831646][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 74.901828][ T5842] usb 7-1: USB disconnect, device number 3 [ 75.023499][ T6917] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 75.026458][ T6917] netlink: 84 bytes leftover after parsing attributes in process `syz.0.481'. [ 75.030182][ T6917] netlink: 'syz.0.481': attribute type 2 has an invalid length. [ 75.034185][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 75.493830][ T5747] Bluetooth: hci4: command 0xfc11 tx timeout [ 75.494610][ T5737] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 75.739375][ T6964] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 75.752251][ T6958] capability: warning: `syz.2.500' uses deprecated v2 capabilities in a way that may be insecure [ 75.889454][ T6978] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 75.918473][ T6982] overlayfs: upper fs does not support file handles, falling back to index=off. [ 75.923827][ T6982] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 76.146147][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 76.146158][ T42] audit: type=1400 audit(1784912190.308:411): avc: denied { map } for pid=7000 comm="syz.2.520" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 76.155268][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.521'. [ 76.212447][ T5737] Bluetooth: hci5: command 0x1003 tx timeout [ 76.217967][ T64] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 76.327329][ T42] audit: type=1400 audit(1784912190.488:412): avc: denied { create } for pid=7016 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 76.333570][ T42] audit: type=1400 audit(1784912190.498:413): avc: denied { getopt } for pid=7016 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 76.333924][ T7017] 9p: Invalid gid '0x00000000ffffffff' [ 76.348613][ T42] audit: type=1400 audit(1784912190.508:414): avc: denied { ioctl } for pid=7018 comm="syz.3.530" path="socket:[14912]" dev="sockfs" ino=14912 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.393787][ T7025] binder: binder_mmap: 7023 200000000000-200000200000 bad vm_flags failed -1 [ 76.395871][ T42] audit: type=1400 audit(1784912190.558:415): avc: denied { validate_trans } for pid=7022 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 76.445969][ T42] audit: type=1400 audit(1784912190.608:416): avc: denied { setopt } for pid=7031 comm="syz.2.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 76.454305][ T42] audit: type=1400 audit(1784912190.608:417): avc: denied { read } for pid=7031 comm="syz.2.536" path="socket:[16301]" dev="sockfs" ino=16301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 76.684144][ T42] audit: type=1400 audit(1784912190.848:418): avc: denied { getopt } for pid=7060 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.690810][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.550'. [ 76.710521][ T7064] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 76.930800][ T42] audit: type=1400 audit(1784912191.088:419): avc: denied { getopt } for pid=7081 comm="syz.0.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.998561][ T42] audit: type=1400 audit(1784912191.158:420): avc: denied { create } for pid=7085 comm="syz.0.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.093383][ T7099] netlink: 32 bytes leftover after parsing attributes in process `syz.0.566'. [ 77.136200][ T7104] IPv6: NLM_F_CREATE should be specified when creating new route [ 77.140695][ T7104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.145745][ T7104] IPv6: NLM_F_CREATE should be set when creating new route [ 77.150814][ T7104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.449011][ T7131] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.475947][ T7135] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 77.479255][ T7135] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.580826][ T7143] TCP: TCP_TX_DELAY enabled [ 78.051085][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 78.117193][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.602'. [ 78.374159][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.390489][ T7191] input: syz1 as /devices/virtual/input/input9 [ 78.571909][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 78.574934][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 78.590346][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 78.594835][ T5812] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.606970][ T5812] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.627895][ T5812] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.635512][ T5812] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.962451][ T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 78.987605][ T7240] mmap: syz.0.632 (7240) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.093130][ T64] Bluetooth: hci3: command tx timeout [ 79.114250][ T7248] netlink: 'syz.0.636': attribute type 2 has an invalid length. [ 79.117514][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.636'. [ 79.125908][ T34] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.130614][ T34] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 79.135111][ T34] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.138938][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.147136][ T7220] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 79.153427][ T34] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 79.228830][ T7254] can0: slcan on ttyS3. [ 79.332901][ T7254] can0 (unregistered): slcan off ttyS3. [ 79.488697][ T5886] usb 7-1: USB disconnect, device number 4 [ 79.512073][ T847] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 79.663426][ T847] usb 6-1: Using ep0 maxpacket: 32 [ 79.667570][ T847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 79.672058][ T847] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.676789][ T847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 79.681275][ T847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 79.688505][ T847] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 79.692426][ T847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.695677][ T847] usb 6-1: Product: syz [ 79.697786][ T847] usb 6-1: Manufacturer: syz [ 79.699728][ T847] usb 6-1: SerialNumber: syz [ 79.704074][ T847] usb 6-1: config 0 descriptor?? [ 79.707092][ T7258] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 79.714061][ T847] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input10 [ 79.723282][ C0] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 79.732177][ T1089] wlan1: Trigger new scan to find an IBSS to join [ 79.744159][ C0] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 79.852193][ T5088] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 79.922329][ T847] usb 6-1: USB disconnect, device number 4 [ 79.922404][ C0] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 80.022166][ T5088] usb 5-1: Using ep0 maxpacket: 32 [ 80.024294][ T7286] openvswitch: netlink: Missing valid actions attribute. [ 80.025523][ T5088] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 80.027311][ T7286] openvswitch: netlink: Actions may not be safe on all matching packets [ 80.029966][ T5088] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 80.036681][ T5088] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 80.040627][ T5088] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 80.045571][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.056178][ T5088] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 80.062522][ T5088] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 80.065176][ T5088] usb 5-1: Product: syz [ 80.066752][ T5088] usb 5-1: Manufacturer: syz [ 80.068202][ T5088] usb 5-1: SerialNumber: syz [ 80.073067][ T5088] usb 5-1: config 0 descriptor?? [ 80.077620][ T5088] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 80.086881][ T5088] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 80.340834][ T5821] usb 5-1: USB disconnect, device number 5 [ 80.340896][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 80.343863][ T7282] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 80.349874][ T5821] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 80.802178][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 80.915177][ T7327] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 80.972182][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 80.976334][ T34] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 80.979783][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 80.984366][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 80.988566][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 80.993490][ T34] usb 8-1: config 16 interface qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 80.997752][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.003484][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 81.007305][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.178040][ T7342] capability: warning: `syz.0.679' uses 32-bit capabilities (legacy support in use) [ 81.220667][ T34] usb 8-1: GET_CAPABILITIES returned 0 [ 81.223170][ T34] usbtmc 8-1:16.0: can't read capabilities [ 81.274020][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 81.274031][ T42] audit: type=1400 audit(1784912195.438:436): avc: denied { setopt } for pid=7349 comm="syz.0.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.306977][ T42] audit: type=1400 audit(1784912195.468:437): avc: denied { bind } for pid=7351 comm="syz.2.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.352608][ T7356] GUP no longer grows the stack in syz.2.684 (7356): 200000007000-20000000a000 (200000004000) [ 81.359169][ T7356] CPU: 0 UID: 0 PID: 7356 Comm: syz.2.684 Not tainted syzkaller #0 PREEMPT(full) [ 81.359202][ T7356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.359212][ T7356] Call Trace: [ 81.359219][ T7356] [ 81.359227][ T7356] dump_stack_lvl+0x100/0x190 [ 81.359254][ T7356] gup_vma_lookup.cold+0x83/0x96 [ 81.359279][ T7356] __get_user_pages+0x241/0x32a0 [ 81.359310][ T7356] ? down_read_killable+0x35e/0x520 [ 81.359334][ T7356] ? __pfx___get_user_pages+0x10/0x10 [ 81.359356][ T7356] ? __lock_acquire+0x49f/0x1a40 [ 81.359385][ T7356] __gup_longterm_locked+0x87d/0x16f0 [ 81.359417][ T7356] ? __pfx___gup_longterm_locked+0x10/0x10 [ 81.359442][ T7356] ? lock_acquire+0x1b9/0x370 [ 81.359472][ T7356] gup_fast_fallback+0x16dc/0x2790 [ 81.359513][ T7356] ? __pfx_gup_fast_fallback+0x10/0x10 [ 81.359539][ T7356] ? __lock_acquire+0x49f/0x1a40 [ 81.359561][ T7356] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 81.359585][ T7356] ? lockdep_hardirqs_on+0x78/0x100 [ 81.359607][ T7356] get_user_pages_fast+0xa7/0xf0 [ 81.359629][ T7356] ? __pfx_get_user_pages_fast+0x10/0x10 [ 81.359660][ T7356] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 81.359686][ T7356] ? __mutex_lock+0x26d/0x1bd0 [ 81.359705][ T7356] ? pipe_lock+0x69/0x80 [ 81.359724][ T7356] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 81.359749][ T7356] ? __pfx___mutex_lock+0x10/0x10 [ 81.359769][ T7356] ? import_ubuf+0x1b6/0x220 [ 81.359797][ T7356] iov_iter_get_pages2+0xa3/0x100 [ 81.359820][ T7356] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 81.359842][ T7356] ? wait_for_space+0x2ca/0x3b0 [ 81.359865][ T7356] __do_sys_vmsplice+0x7dd/0x13c0 [ 81.359897][ T7356] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 81.359924][ T7356] ? __pfx_futex_wait+0x10/0x10 [ 81.359984][ T7356] ? do_syscall_64+0x115/0x870 [ 81.360001][ T7356] do_syscall_64+0x115/0x870 [ 81.360019][ T7356] ? clear_bhb_loop+0x40/0x90 [ 81.360040][ T7356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.360056][ T7356] RIP: 0033:0x7fa12099de99 [ 81.360072][ T7356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.360088][ T7356] RSP: 002b:00007fa1217e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 81.360105][ T7356] RAX: ffffffffffffffda RBX: 00007fa120c25fa0 RCX: 00007fa12099de99 [ 81.360115][ T7356] RDX: 0000000000000001 RSI: 00002000000013c0 RDI: 0000000000000004 [ 81.360125][ T7356] RBP: 00007fa120a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 81.360136][ T7356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.360147][ T7356] R13: 00007fa120c26038 R14: 00007fa120c25fa0 R15: 00007ffef6d7a1e8 [ 81.360174][ T7356] [ 81.470306][ T34] usb 8-1: USB disconnect, device number 3 [ 81.571600][ T7360] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.591133][ T2321] cfg80211: failed to load regulatory.db [ 81.755656][ T42] audit: type=1400 audit(1784912195.918:438): avc: denied { read write } for pid=7378 comm="syz.1.694" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.767360][ T42] audit: type=1400 audit(1784912195.918:439): avc: denied { open } for pid=7378 comm="syz.1.694" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.789343][ T10] hid-generic 0005:0010:10000.0002: unknown main item tag 0x0 [ 81.794001][ T10] hid-generic 0005:0010:10000.0002: unknown main item tag 0x0 [ 81.797768][ T10] hid-generic 0005:0010:10000.0002: unknown main item tag 0x0 [ 81.802881][ T10] hid-generic 0005:0010:10000.0002: unknown main item tag 0x0 [ 81.806411][ T10] hid-generic 0005:0010:10000.0002: unknown main item tag 0x0 [ 81.809644][ T10] hid-generic 0005:0010:10000.0002: unknown main item tag 0x0 [ 81.813680][ T10] hid-generic 0005:0010:10000.0002: unknown main item tag 0x0 [ 81.817449][ T10] hid-generic 0005:0010:10000.0002: unknown main item tag 0x0 [ 81.820612][ T10] hid-generic 0005:0010:10000.0002: unknown main item tag 0x0 [ 81.824501][ T10] hid-generic 0005:0010:10000.0002: unknown main item tag 0x0 [ 81.836098][ T10] hid-generic 0005:0010:10000.0002: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on syz0 [ 82.043739][ T5821] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 82.201580][ T5821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 82.206348][ T5821] usb 6-1: no configurations [ 82.207847][ T5821] usb 6-1: can't read configurations, error -22 [ 82.293161][ T2321] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 82.443325][ T2321] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.447372][ T2321] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 82.450910][ T2321] usb 8-1: config 0 interface 0 has no altsetting 0 [ 82.456225][ T2321] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.459844][ T2321] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 82.463727][ T2321] usb 8-1: Product: syz [ 82.465393][ T2321] usb 8-1: Manufacturer: syz [ 82.467263][ T2321] usb 8-1: SerialNumber: syz [ 82.471055][ T2321] usb 8-1: config 0 descriptor?? [ 82.475782][ T2321] usb 8-1: selecting invalid altsetting 0 [ 82.532171][ T5088] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 82.679894][ T2321] usb 8-1: USB disconnect, device number 4 [ 82.700874][ T5088] usb 5-1: unable to get BOS descriptor or descriptor too short [ 82.710048][ T5088] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 82.715805][ T5088] usb 5-1: can't read configurations, error -71 [ 82.742537][ T7398] kvm: kvm [7397]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000019) = 0x1 [ 82.860529][ T42] audit: type=1400 audit(1784912197.018:440): avc: denied { read } for pid=7410 comm="syz.1.709" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.862830][ T37] wlan1: Trigger new scan to find an IBSS to join [ 82.875165][ T42] audit: type=1400 audit(1784912197.028:441): avc: denied { ioctl } for pid=7410 comm="syz.1.709" path="/dev/rtc0" dev="devtmpfs" ino=945 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.909268][ T7408] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 82.919521][ T42] audit: type=1400 audit(1784912197.078:442): avc: denied { checkpoint_restore } for pid=7414 comm="syz.1.710" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.957963][ T7417] team0: No ports can be present during mode change [ 83.014818][ T42] audit: type=1400 audit(1784912197.178:443): avc: denied { prog_run } for pid=7422 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.215358][ T42] audit: type=1400 audit(1784912197.378:444): avc: denied { shutdown } for pid=7442 comm="syz.2.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.325856][ T7456] netlink: 'syz.3.732': attribute type 11 has an invalid length. [ 83.389891][ T42] audit: type=1400 audit(1784912197.548:445): avc: denied { map_create } for pid=7464 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.497100][ T7477] bond1: ARP target 9.0.0.0 is already present [ 83.498443][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.743'. [ 83.499101][ T7477] bond1: option arp_ip_target: invalid value (9) [ 83.507506][ T7477] bond1 (unregistering): Released all slaves [ 83.544460][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.743'. [ 83.674961][ T7493] overlayfs: invalid origin (0000) [ 83.758866][ T7500] netlink: 36 bytes leftover after parsing attributes in process `syz.3.752'. [ 83.822736][ T1490] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 83.826999][ T1165] wlan1: Creating new IBSS network, BSSID 82:63:3b:18:11:b6 [ 83.981900][ T1490] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 83.985441][ T1490] usb 6-1: can't read configurations, error -71 [ 84.242111][ T847] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 84.392113][ T847] usb 8-1: Using ep0 maxpacket: 8 [ 84.395211][ T847] usb 8-1: config 0 has no interfaces? [ 84.398857][ T847] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 84.403304][ T847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.406680][ T847] usb 8-1: Product: syz [ 84.408895][ T847] usb 8-1: Manufacturer: syz [ 84.410846][ T847] usb 8-1: SerialNumber: syz [ 84.417924][ T847] usb 8-1: config 0 descriptor?? [ 84.423597][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 84.427251][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 84.430800][ T7519] netlink: 'syz.2.757': attribute type 15 has an invalid length. [ 84.434704][ T7519] netlink: 'syz.2.757': attribute type 18 has an invalid length. [ 84.456350][ T7521] macvlan2: entered promiscuous mode [ 84.660769][ T10] usb 8-1: USB disconnect, device number 5 [ 84.847098][ T7546] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 84.860184][ T1089] Bluetooth: hci4: Frame reassembly failed (-84) [ 85.407726][ T7561] loop5: detected capacity change from 0 to 2640 [ 85.411527][ T7561] buffer_io_error: 22 callbacks suppressed [ 85.411541][ T7561] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.417909][ T7561] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.420965][ T7561] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.425428][ T7561] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.428490][ T7561] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.431761][ T7561] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.436697][ T7561] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.439802][ T7561] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.443180][ T7561] ldm_validate_partition_table(): Disk read failed. [ 85.445789][ T7561] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.448706][ T7561] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.451223][ T7561] Dev loop5: unable to read RDB block 0 [ 85.453580][ T7561] loop5: unable to read partition table [ 85.455527][ T7561] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 85.594382][ T7571] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 86.547319][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 86.547335][ T42] audit: type=1400 audit(1784912456.703:456): avc: denied { ioctl } for pid=7632 comm="syz.2.810" path="socket:[18821]" dev="sockfs" ino=18821 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.562895][ T7635] netlink: 20 bytes leftover after parsing attributes in process `syz.1.811'. [ 86.576717][ T7631] nbd0: detected capacity change from 0 to 87 [ 86.586771][ T7515] block nbd0: Wrong magic (0x25609513) [ 86.591463][ T7513] block nbd0: Wrong magic (0x0) [ 86.595835][ T65] block nbd0: Receive control failed (result -32) [ 86.596992][ T7516] block nbd0: Receive control failed (result -32) [ 86.596994][ T7514] block nbd0: Receive control failed (result -32) [ 86.605360][ T7637] sctp: [Deprecated]: syz.2.812 (pid 7637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.605360][ T7637] Use struct sctp_sack_info instead [ 86.902147][ T2321] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 86.912790][ T50] e1000 0000:00:06.0 eth0: Reset adapter [ 86.936794][ T42] audit: type=1400 audit(1784912457.093:457): avc: denied { search } for pid=7656 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.946202][ T5737] Bluetooth: hci4: command 0x1003 tx timeout [ 86.947426][ T42] audit: type=1400 audit(1784912457.093:458): avc: denied { search } for pid=7656 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.950315][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 86.961109][ T42] audit: type=1400 audit(1784912457.093:459): avc: denied { search } for pid=7656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.971200][ T42] audit: type=1400 audit(1784912457.093:460): avc: denied { search } for pid=7656 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.985532][ T42] audit: type=1400 audit(1784912457.093:461): avc: denied { read } for pid=7657 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.997165][ T42] audit: type=1400 audit(1784912457.093:462): avc: denied { read open } for pid=7657 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.009711][ T42] audit: type=1400 audit(1784912457.093:463): avc: denied { getattr } for pid=7657 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.013661][ T7662] loop5: detected capacity change from 0 to 2640 [ 87.021902][ T42] audit: type=1400 audit(1784912457.103:464): avc: denied { write } for pid=7656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.025762][ T7662] ldm_validate_partition_table(): Disk read failed. [ 87.031760][ T42] audit: type=1400 audit(1784912457.103:465): avc: denied { add_name } for pid=7656 comm="dhcpcd-run-hook" name="resolv.conf.eth0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.033245][ T7662] Dev loop5: unable to read RDB block 0 [ 87.033338][ T7662] loop5: unable to read partition table [ 87.035726][ T7662] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 87.072597][ T2321] usb 6-1: Using ep0 maxpacket: 8 [ 87.078529][ T7666] misc userio: Begin command sent, but we're already running [ 87.078682][ T2321] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 87.086962][ T2321] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.091096][ T2321] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.095719][ T2321] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.100096][ T2321] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.107183][ T2321] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.110964][ T2321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.184226][ T5088] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 87.325837][ T2321] usb 6-1: GET_CAPABILITIES returned 0 [ 87.331013][ T2321] usbtmc 6-1:16.0: can't read capabilities [ 87.333396][ T5088] usb 8-1: Using ep0 maxpacket: 8 [ 87.339180][ T5088] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 87.344883][ T5088] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.370071][ T5088] pvrusb2: Hardware description: Terratec Grabster AV400 [ 87.378987][ T5088] pvrusb2: ********** [ 87.380735][ T5088] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 87.385466][ T5088] pvrusb2: Important functionality might not be entirely working. [ 87.388652][ T5088] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 87.393305][ T5088] pvrusb2: ********** [ 87.529912][ T41] usb 6-1: USB disconnect, device number 9 [ 87.564972][ T2517] pvrusb2: Invalid write control endpoint [ 87.598799][ T2517] pvrusb2: Invalid write control endpoint [ 87.602159][ T2517] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 87.605911][ T2517] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 87.608920][ T2517] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 87.613473][ T2517] pvrusb2: Device being rendered inoperable [ 87.617318][ T2517] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 87.620314][ T2517] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 87.627566][ T2517] pvrusb2: Attached sub-driver cx25840 [ 87.629825][ T2517] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 87.634136][ T2517] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 87.766405][ T7659] pvrusb2: Attempted to execute control transfer when device not ok [ 87.770757][ T50] usb 8-1: USB disconnect, device number 6 [ 89.173330][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 90.934264][ T5110] block nbd0: Connection timed out, retrying (0/5 alive) [ 90.939797][ T5110] block nbd0: Connection timed out, retrying (0/5 alive) [ 90.942789][ T5110] block nbd0: Connection timed out, retrying (0/5 alive) [ 90.945607][ T5110] block nbd0: Connection timed out, retrying (0/5 alive) [ 90.949113][ T5110] block nbd0: Dead connection, failed to find a fallback [ 91.972814][ T5110] block nbd0: shutting down sockets [ 91.974791][ T5110] blk_print_req_error: 5 callbacks suppressed [ 91.974802][ T5110] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 91.979935][ T5110] buffer_io_error: 32 callbacks suppressed [ 91.979945][ T5110] Buffer I/O error on dev nbd0, logical block 3, async page read [ 91.984459][ T5110] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 91.987497][ T5110] Buffer I/O error on dev nbd0, logical block 2, async page read [ 91.989872][ T5110] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 91.993769][ T5110] Buffer I/O error on dev nbd0, logical block 1, async page read [ 91.996208][ T5110] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 91.999088][ T5110] Buffer I/O error on dev nbd0, logical block 0, async page read [ 92.005999][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.006158][ T5108] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.006745][ T5108] Buffer I/O error on dev nbd0, logical block 1, async page read [ 92.007599][ T5108] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.008582][ T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.008600][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 92.012412][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 92.016182][ T5108] Buffer I/O error on dev nbd0, logical block 2, async page read [ 92.042605][ T5108] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 92.046642][ T5108] Buffer I/O error on dev nbd0, logical block 0, async page read [ 92.049964][ T5108] Buffer I/O error on dev nbd0, logical block 1, async page read [ 92.053759][ T1308] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.058790][ T5996] ldm_validate_partition_table(): Disk read failed. [ 92.062792][ T5996] Dev nbd0: unable to read RDB block 0 [ 92.066062][ T5996] nbd0: unable to read partition table [ 92.075960][ T5996] ldm_validate_partition_table(): Disk read failed. [ 92.079632][ T5996] Dev nbd0: unable to read RDB block 0 [ 92.082809][ T5996] nbd0: unable to read partition table [ 94.008075][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 94.008091][ T42] audit: type=1400 audit(1784912464.163:476): avc: denied { write } for pid=7691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.064631][ T42] audit: type=1400 audit(1784912464.223:477): avc: denied { write } for pid=7694 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.494969][ T42] audit: type=1400 audit(1784912466.653:478): avc: denied { write } for pid=7699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.552187][ T42] audit: type=1400 audit(1784912466.703:479): avc: denied { write } for pid=7702 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.260135][ T42] audit: type=1400 audit(1784912467.413:480): avc: denied { name_connect } for pid=7710 comm="syz.2.829" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 98.846346][ T80] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 104.076983][ T42] audit: type=1400 audit(1784912474.233:481): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 104.138383][ T42] audit: type=1400 audit(1784912474.293:482): avc: denied { unlink } for pid=7731 comm="syz.0.838" name="#9" dev="tmpfs" ino=1161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.207792][ T42] audit: type=1400 audit(1784912474.363:483): avc: denied { read write } for pid=7743 comm="syz.3.842" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 104.218325][ T42] audit: type=1400 audit(1784912474.363:484): avc: denied { open } for pid=7743 comm="syz.3.842" path="/dev/ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 104.231921][ T42] audit: type=1400 audit(1784912474.363:485): avc: denied { ioctl } for pid=7743 comm="syz.3.842" path="/dev/ppp" dev="devtmpfs" ino=731 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 104.334502][ T42] audit: type=1400 audit(1784912474.493:486): avc: denied { mount } for pid=7754 comm="syz.1.847" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 104.360521][ T42] audit: type=1400 audit(1784912474.513:487): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 104.439111][ T42] audit: type=1400 audit(1784912474.593:488): avc: denied { mount } for pid=7763 comm="syz.1.851" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 104.534699][ T7774] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.677884][ T42] audit: type=1400 audit(1784912474.833:489): avc: denied { ioctl } for pid=7778 comm="syz.1.858" path="socket:[17402]" dev="sockfs" ino=17402 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.744500][ T42] audit: type=1400 audit(1784912474.903:490): avc: denied { write } for pid=7782 comm="syz.1.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.842632][ T7786] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.895648][ T7788] Bluetooth: hci1: too big key_count value 4608 [ 105.154920][ T7805] netlink: 36 bytes leftover after parsing attributes in process `syz.2.870'. [ 105.243495][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 105.400761][ T7813] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 105.405532][ T10] usb 8-1: too many configurations: 42, using maximum allowed: 8 [ 105.413872][ T7813] bond1 (unregistering): Released all slaves [ 105.421468][ T10] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 105.425436][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.428119][ T10] usb 8-1: Product: syz [ 105.429526][ T10] usb 8-1: Manufacturer: syz [ 105.431016][ T10] usb 8-1: SerialNumber: syz [ 105.445461][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 105.448706][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.874'. [ 105.564584][ T5883] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 105.648717][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 105.655227][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 105.659671][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 105.669042][ T10] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 105.678373][ T10] usb 8-1: USB disconnect, device number 7 [ 105.735963][ T5883] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 105.735982][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.735992][ T5883] usb 6-1: Product: syz [ 105.735999][ T5883] usb 6-1: Manufacturer: syz [ 105.736007][ T5883] usb 6-1: SerialNumber: syz [ 105.983469][ T5883] rtl8150 6-1:1.0: couldn't reset the device [ 105.989901][ T5883] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 105.997564][ T5883] usb 6-1: USB disconnect, device number 10 [ 106.043531][ T7845] block nbd2: Cannot use ioctl interface on a netlink controlled device. [ 106.049923][ T7845] block nbd2: Cannot use ioctl interface on a netlink controlled device. [ 106.143271][ T7852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.890'. [ 106.146790][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'. [ 106.255653][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'. [ 106.769954][ T7900] MPI: mpi too large (16392 bits) [ 106.853070][ T61] wlan1: Trigger new scan to find an IBSS to join [ 107.339903][ T7955] macvlan0: entered promiscuous mode [ 107.346007][ T7955] netlink: 'syz.0.933': attribute type 1 has an invalid length. [ 107.348615][ T7955] netlink: 'syz.0.933': attribute type 2 has an invalid length. [ 107.397704][ T7960] ======================================================= [ 107.397704][ T7960] WARNING: The mand mount option has been deprecated and [ 107.397704][ T7960] and is ignored by this kernel. Remove the mand [ 107.397704][ T7960] option from the mount to silence this warning. [ 107.397704][ T7960] ======================================================= [ 107.504483][ T7970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.940'. [ 107.507227][ T7970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.940'. [ 107.624225][ T29] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 107.783507][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 107.787312][ T29] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 107.790696][ T29] usb 8-1: config 179 has no interface number 0 [ 107.793630][ T29] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 107.798046][ T29] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 107.803432][ T29] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 107.807827][ T29] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 107.815151][ T29] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 107.823158][ T29] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 107.836548][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.845273][ T7959] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 108.000544][ T8002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.081236][ T29] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input12 [ 108.152211][ T5088] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 108.261659][ T29] usb 8-1: USB disconnect, device number 8 [ 108.264209][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 108.264246][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 108.315626][ T5088] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 108.318610][ T5088] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 108.324288][ T5088] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.329172][ T5088] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 108.338238][ T5088] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 108.345663][ T5088] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 108.348994][ T5088] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 108.353664][ T5088] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.358456][ T5088] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 108.363236][ T5088] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 108.369235][ T5088] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 108.372746][ T5088] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 108.383175][ T5088] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.387946][ T5088] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 108.392698][ T5088] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 108.400129][ T5088] usb 5-1: string descriptor 0 read error: -22 [ 108.403218][ T5088] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 108.406846][ T5088] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.425301][ T5088] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 108.536872][ T8020] openvswitch: netlink: IP tunnel dst address not specified [ 108.540060][ T8020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.585962][ T8022] netlink: 44 bytes leftover after parsing attributes in process `syz.2.965'. [ 108.617004][ T64] Bluetooth: hci1: unexpected subevent 0x06 length: 18 > 10 [ 108.783540][ T64] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 108.791235][ T64] Bluetooth: hci1: Injecting HCI hardware error event [ 108.796092][ T64] Bluetooth: hci1: hardware error 0x00 [ 108.869003][ T8045] block nbd0: reconnected socket [ 108.882336][ T7611] block nbd0: Receive control failed (result -32) [ 109.164081][ T29] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 109.275871][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 109.275882][ T42] audit: type=1400 audit(1784912479.433:509): avc: denied { bind } for pid=8066 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.322101][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 109.324778][ T29] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 109.327156][ T29] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 109.330677][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 109.334400][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 109.337778][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.341584][ T29] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 109.344503][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.348160][ T29] usb 6-1: config 0 descriptor?? [ 109.350249][ T8051] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.356697][ T29] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input13 [ 109.561215][ T29] usb 6-1: USB disconnect, device number 11 [ 109.823816][ T41] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 109.829943][ T42] audit: type=1400 audit(1784912479.983:510): avc: denied { watch } for pid=8078 comm="syz.2.991" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 109.840067][ T42] audit: type=1400 audit(1784912479.983:511): avc: denied { watch_sb watch_reads } for pid=8078 comm="syz.2.991" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 109.972918][ T41] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 109.977554][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.981578][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.986493][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 109.990656][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.994281][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.998513][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 110.002325][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.006097][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.010829][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 110.014738][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.018290][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.022570][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 110.026265][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.029930][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.034421][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 110.038653][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.042306][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.046563][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 110.050242][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.054350][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.058547][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 110.062346][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.065822][ T41] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.069999][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 110.075134][ T41] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 110.078827][ T41] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 110.082177][ T41] usb 8-1: Product: syz [ 110.083802][ T41] usb 8-1: Manufacturer: syz [ 110.085729][ T41] usb 8-1: SerialNumber: syz [ 110.092938][ T41] usb 8-1: config 0 descriptor?? [ 110.103947][ T41] yurex 8-1:0.0: USB YUREX device now attached to Yurex #1 [ 110.208576][ T42] audit: type=1400 audit(1784912480.363:512): avc: denied { ioctl } for pid=8084 comm="syz.2.994" path="socket:[20932]" dev="sockfs" ino=20932 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.254182][ T8087] netlink: 'syz.2.995': attribute type 16 has an invalid length. [ 110.257615][ T8087] netlink: 'syz.2.995': attribute type 3 has an invalid length. [ 110.260112][ T8087] netlink: 'syz.2.995': attribute type 1 has an invalid length. [ 110.263582][ T8087] netlink: 112 bytes leftover after parsing attributes in process `syz.2.995'. [ 110.322973][ T41] usb 8-1: USB disconnect, device number 9 [ 110.338127][ T41] yurex 8-1:0.0: USB YUREX #1 now disconnected [ 110.534959][ T42] audit: type=1400 audit(1784912480.693:513): avc: denied { listen } for pid=8098 comm="syz.2.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 110.846262][ T42] audit: type=1400 audit(1784912481.003:514): avc: denied { mounton } for pid=8112 comm="syz.2.1008" path="/308/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 110.863835][ T64] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 110.876614][ T8115] overlayfs: missing 'workdir' [ 111.155981][ T42] audit: type=1400 audit(1784912481.313:515): avc: denied { write } for pid=8129 comm="syz.3.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.166198][ T42] audit: type=1400 audit(1784912481.323:516): avc: denied { read } for pid=8129 comm="syz.3.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.359168][ T42] audit: type=1400 audit(1784912481.513:517): avc: denied { sqpoll } for pid=8141 comm="syz.2.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 111.712774][ T42] audit: type=1400 audit(1784912481.873:518): avc: denied { read append } for pid=8145 comm="syz.1.1022" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 111.733129][ T37] wlan1: Trigger new scan to find an IBSS to join [ 111.786629][ T8146] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.791744][ T8146] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.798961][ T8146] [ 111.799995][ T8146] ====================================================== [ 111.802728][ T8146] WARNING: possible circular locking dependency detected [ 111.805450][ T8146] syzkaller #0 Not tainted [ 111.807414][ T8146] ------------------------------------------------------ [ 111.810248][ T8146] syz.1.1022/8146 is trying to acquire lock: [ 111.812742][ T8146] ffff88801d2a6180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 111.816849][ T8146] [ 111.816849][ T8146] but task is already holding lock: [ 111.819697][ T8146] ffff88801d2a62a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 111.823856][ T8146] [ 111.823856][ T8146] which lock already depends on the new lock. [ 111.823856][ T8146] [ 111.827769][ T8146] [ 111.827769][ T8146] the existing dependency chain (in reverse order) is: [ 111.831286][ T8146] [ 111.831286][ T8146] -> #9 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 111.834601][ T8146] lock_acquire+0x1b9/0x370 [ 111.836568][ T8146] down_read+0x99/0x4c0 [ 111.838441][ T8146] kernfs_remove_by_name_ns+0x49/0x120 [ 111.840873][ T8146] remove_files+0x96/0x1c0 [ 111.842834][ T8146] sysfs_remove_group+0x8b/0x1b0 [ 111.844894][ T8146] sysfs_remove_groups+0x60/0xb0 [ 111.846990][ T8146] __kobject_del+0x89/0x220 [ 111.848925][ T8146] kobject_del+0x3f/0x60 [ 111.850781][ T8146] free_desc+0x299/0x330 [ 111.852811][ T8146] irq_free_descs+0x84/0xc0 [ 111.854936][ T8146] irq_domain_free_irqs+0x46a/0x5c0 [ 111.857288][ T8146] mp_unmap_irq+0xf8/0x130 [ 111.859335][ T8146] acpi_unregister_gsi_ioapic+0x40/0x60 [ 111.861766][ T8146] acpi_unregister_gsi+0x25/0x40 [ 111.863601][ T8146] acpi_pci_irq_disable+0x275/0x360 [ 111.865295][ T8146] pcibios_disable_device+0x89/0xb0 [ 111.867128][ T8146] do_pci_disable_device+0x9f/0x100 [ 111.868821][ T8146] pci_disable_device+0x130/0x270 [ 111.870439][ T8146] quirk_usb_early_handoff+0x24b/0x1360 [ 111.872330][ T8146] pci_fixup_device+0x334/0x4d0 [ 111.874353][ T8146] pci_apply_final_quirks+0x115/0x3e0 [ 111.876198][ T8146] do_one_initcall+0x11d/0x700 [ 111.877795][ T8146] kernel_init_freeable+0x6ea/0x7b0 [ 111.879495][ T8146] kernel_init+0x1f/0x1e0 [ 111.881570][ T8146] ret_from_fork+0x72b/0xd50 [ 111.883698][ T8146] ret_from_fork_asm+0x1a/0x30 [ 111.886104][ T8146] [ 111.886104][ T8146] -> #8 (sparse_irq_lock){+.+.}-{4:4}: [ 111.889162][ T8146] lock_acquire+0x1b9/0x370 [ 111.890921][ T8146] __mutex_lock+0x1a4/0x1bd0 [ 111.892484][ T8146] cpuhp_bringup_ap+0x63/0x10e0 [ 111.894001][ T8146] cpuhp_invoke_callback+0x3b4/0x9a0 [ 111.895756][ T8146] __cpuhp_invoke_callback_range+0x158/0x1d0 [ 111.897802][ T8146] _cpu_up+0x3f6/0x960 [ 111.899249][ T8146] cpu_up+0x1ba/0x230 [ 111.900681][ T8146] cpuhp_bringup_mask+0xf8/0x180 [ 111.902363][ T8146] bringup_nonboot_cpus+0xec/0x1b0 [ 111.904044][ T8146] smp_init+0x32/0x150 [ 111.905447][ T8146] kernel_init_freeable+0x44b/0x7b0 [ 111.907195][ T8146] kernel_init+0x1f/0x1e0 [ 111.908652][ T8146] ret_from_fork+0x72b/0xd50 [ 111.910249][ T8146] ret_from_fork_asm+0x1a/0x30 [ 111.912278][ T8146] [ 111.912278][ T8146] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 111.914610][ T8146] lock_acquire+0x1b9/0x370 [ 111.916149][ T8146] cpus_read_lock+0x42/0x170 [ 111.917755][ T8146] static_key_slow_inc+0x12/0x30 [ 111.919379][ T8146] nbd_genl_reconfigure+0xd82/0x1a00 [ 111.921183][ T8146] genl_family_rcv_msg_doit+0x214/0x300 [ 111.923565][ T8146] genl_rcv_msg+0x560/0x800 [ 111.925572][ T8146] netlink_rcv_skb+0x159/0x420 [ 111.927712][ T8146] genl_rcv+0x28/0x40 [ 111.929538][ T8146] netlink_unicast+0x585/0x850 [ 111.931578][ T8146] netlink_sendmsg+0x8b0/0xda0 [ 111.933552][ T8146] ____sys_sendmsg+0xa4d/0xbe0 [ 111.935525][ T8146] ___sys_sendmsg+0x190/0x1e0 [ 111.937533][ T8146] __sys_sendmsg+0x160/0x210 [ 111.939511][ T8146] do_syscall_64+0x115/0x870 [ 111.941481][ T8146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.943847][ T8146] [ 111.943847][ T8146] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 111.946796][ T8146] lock_acquire+0x1b9/0x370 [ 111.948857][ T8146] __mutex_lock+0x1a4/0x1bd0 [ 111.950792][ T8146] nbd_queue_rq+0x428/0x1080 [ 111.952786][ T8146] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 111.955094][ T8146] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 111.957699][ T8146] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 111.960152][ T8146] blk_mq_run_work_fn+0x135/0x380 [ 111.962243][ T8146] process_one_work+0xa23/0x1940 [ 111.964298][ T8146] worker_thread+0x5ef/0xe50 [ 111.966247][ T8146] kthread+0x370/0x450 [ 111.968036][ T8146] ret_from_fork+0x72b/0xd50 [ 111.969882][ T8146] ret_from_fork_asm+0x1a/0x30 [ 111.971824][ T8146] [ 111.971824][ T8146] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 111.974120][ T8146] lock_acquire+0x1b9/0x370 [ 111.975710][ T8146] __mutex_lock+0x1a4/0x1bd0 [ 111.977342][ T8146] nbd_queue_rq+0xba/0x1080 [ 111.978858][ T8146] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 111.980697][ T8146] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 111.982811][ T8146] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 111.984764][ T8146] blk_mq_run_work_fn+0x135/0x380 [ 111.986419][ T8146] process_one_work+0xa23/0x1940 [ 111.988059][ T8146] worker_thread+0x5ef/0xe50 [ 111.989632][ T8146] kthread+0x370/0x450 [ 111.991084][ T8146] ret_from_fork+0x72b/0xd50 [ 111.992682][ T8146] ret_from_fork_asm+0x1a/0x30 [ 111.994337][ T8146] [ 111.994337][ T8146] -> #4 (set->srcu){.+.+}-{0:0}: [ 111.996503][ T8146] lock_sync+0x9d/0x110 [ 111.997830][ T8146] __synchronize_srcu+0xa2/0x300 [ 111.999314][ T8146] blk_mq_quiesce_queue+0x149/0x1c0 [ 112.000879][ T8146] elevator_switch+0x17b/0x7e0 [ 112.002394][ T8146] elevator_change+0x352/0x530 [ 112.003932][ T8146] elevator_set_default+0x29e/0x360 [ 112.005622][ T8146] blk_register_queue+0x48e/0x630 [ 112.007286][ T8146] __add_disk+0x73f/0xe40 [ 112.008808][ T8146] add_disk_fwnode+0x118/0x480 [ 112.010734][ T8146] nbd_dev_add+0x77a/0xb10 [ 112.012559][ T8146] nbd_init+0x291/0x2b0 [ 112.014250][ T8146] do_one_initcall+0x11d/0x700 [ 112.016146][ T8146] kernel_init_freeable+0x6ea/0x7b0 [ 112.018258][ T8146] kernel_init+0x1f/0x1e0 [ 112.020148][ T8146] ret_from_fork+0x72b/0xd50 [ 112.022132][ T8146] ret_from_fork_asm+0x1a/0x30 [ 112.023978][ T8146] [ 112.023978][ T8146] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 112.026810][ T8146] lock_acquire+0x1b9/0x370 [ 112.028698][ T8146] __mutex_lock+0x1a4/0x1bd0 [ 112.030630][ T8146] elevator_change+0x1bc/0x530 [ 112.032667][ T8146] elevator_set_none+0x92/0xf0 [ 112.034626][ T8146] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 112.036841][ T8146] nbd_start_device+0x1a6/0xbd0 [ 112.038496][ T8146] nbd_genl_connect+0xff2/0x1a40 [ 112.040191][ T8146] genl_family_rcv_msg_doit+0x214/0x300 [ 112.042089][ T8146] genl_rcv_msg+0x560/0x800 [ 112.043648][ T8146] netlink_rcv_skb+0x159/0x420 [ 112.045277][ T8146] genl_rcv+0x28/0x40 [ 112.046946][ T8146] netlink_unicast+0x585/0x850 [ 112.048763][ T8146] netlink_sendmsg+0x8b0/0xda0 [ 112.050587][ T8146] ____sys_sendmsg+0xa4d/0xbe0 [ 112.052435][ T8146] ___sys_sendmsg+0x190/0x1e0 [ 112.054325][ T8146] __sys_sendmsg+0x160/0x210 [ 112.056101][ T8146] do_syscall_64+0x115/0x870 [ 112.057923][ T8146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.060191][ T8146] [ 112.060191][ T8146] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 112.063302][ T8146] lock_acquire+0x1b9/0x370 [ 112.065215][ T8146] blk_alloc_queue+0x610/0x790 [ 112.067103][ T8146] blk_mq_alloc_queue+0x174/0x290 [ 112.068918][ T8146] __blk_mq_alloc_disk+0x29/0x120 [ 112.070527][ T8146] nbd_dev_add+0x492/0xb10 [ 112.072016][ T8146] nbd_init+0x291/0x2b0 [ 112.073459][ T8146] do_one_initcall+0x11d/0x700 [ 112.075073][ T8146] kernel_init_freeable+0x6ea/0x7b0 [ 112.076815][ T8146] kernel_init+0x1f/0x1e0 [ 112.078344][ T8146] ret_from_fork+0x72b/0xd50 [ 112.079914][ T8146] ret_from_fork_asm+0x1a/0x30 [ 112.081524][ T8146] [ 112.081524][ T8146] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 112.083711][ T8146] lock_acquire+0x1b9/0x370 [ 112.085264][ T8146] fs_reclaim_acquire+0xc4/0x100 [ 112.086925][ T8146] kmem_cache_alloc_lru_noprof+0x5f/0x6a0 [ 112.088851][ T8146] alloc_inode+0x183/0x250 [ 112.090408][ T8146] iget_locked+0x1d9/0x6d0 [ 112.091936][ T8146] kernfs_get_inode+0x46/0x470 [ 112.093567][ T8146] kernfs_get_tree+0x63e/0xbb0 [ 112.095198][ T8146] vfs_get_tree+0x92/0x320 [ 112.096760][ T8146] path_mount+0x7d0/0x23d0 [ 112.098272][ T8146] __x64_sys_mount+0x293/0x310 [ 112.099838][ T8146] do_syscall_64+0x115/0x870 [ 112.101460][ T8146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.103382][ T8146] [ 112.103382][ T8146] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 112.105796][ T8146] check_prev_add+0xeb/0xe60 [ 112.107411][ T8146] __lock_acquire+0x136c/0x1a40 [ 112.108989][ T8146] lock_acquire+0x1b9/0x370 [ 112.110373][ T8146] down_write+0x8b/0x1f0 [ 112.111883][ T8146] kernfs_remove_by_name_ns+0x51/0x120 [ 112.113924][ T8146] sysfs_unmerge_group+0xe7/0x170 [ 112.115862][ T8146] dpm_sysfs_remove+0x68/0xb0 [ 112.117634][ T8146] device_del+0x180/0x9b0 [ 112.119158][ T8146] device_unregister+0x1d/0xe0 [ 112.121047][ T8146] hci_conn_del_sysfs+0xb9/0x1a0 [ 112.123087][ T8146] hci_conn_del+0x506/0x1180 [ 112.124925][ T8146] hci_abort_conn_sync+0x7d9/0xb20 [ 112.126973][ T8146] hci_disconnect_all_sync.constprop.0.isra.0+0x155/0x430 [ 112.129753][ T8146] hci_suspend_sync+0x8b7/0xa70 [ 112.131688][ T8146] hci_suspend_dev+0x31d/0x540 [ 112.133600][ T8146] hci_suspend_notifier+0x21e/0x330 [ 112.135468][ T8146] notifier_call_chain+0x99/0x3f0 [ 112.137356][ T8146] blocking_notifier_call_chain_robust+0xc8/0x160 [ 112.139763][ T8146] pm_notifier_call_chain_robust+0x27/0x60 [ 112.142330][ T8146] snapshot_open+0x189/0x2b0 [ 112.144126][ T8146] misc_open+0x26d/0x450 [ 112.145785][ T8146] chrdev_open+0x234/0x6a0 [ 112.147618][ T8146] do_dentry_open+0x6ab/0x14d0 [ 112.149496][ T8146] vfs_open+0x82/0x3f0 [ 112.151186][ T8146] path_openat+0x2873/0x4280 [ 112.152878][ T8146] do_file_open+0x20e/0x430 [ 112.154479][ T8146] do_sys_openat2+0x10f/0x1e0 [ 112.156108][ T8146] __x64_sys_openat+0x12d/0x210 [ 112.157812][ T8146] do_syscall_64+0x115/0x870 [ 112.159670][ T8146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.162017][ T8146] [ 112.162017][ T8146] other info that might help us debug this: [ 112.162017][ T8146] [ 112.165395][ T8146] Chain exists of: [ 112.165395][ T8146] &root->kernfs_rwsem --> sparse_irq_lock --> &root->kernfs_supers_rwsem [ 112.165395][ T8146] [ 112.170432][ T8146] Possible unsafe locking scenario: [ 112.170432][ T8146] [ 112.173016][ T8146] CPU0 CPU1 [ 112.175018][ T8146] ---- ---- [ 112.176747][ T8146] rlock(&root->kernfs_supers_rwsem); [ 112.178434][ T8146] lock(sparse_irq_lock); [ 112.180567][ T8146] lock(&root->kernfs_supers_rwsem); [ 112.182958][ T8146] lock(&root->kernfs_rwsem); [ 112.184409][ T8146] [ 112.184409][ T8146] *** DEADLOCK *** [ 112.184409][ T8146] [ 112.186814][ T8146] 6 locks held by syz.1.1022/8146: [ 112.188314][ T8146] #0: ffffffff8f9c3e80 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 112.190854][ T8146] #1: ffffffff8ea9fc80 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x56/0x70 [ 112.193914][ T8146] #2: ffffffff8eaea068 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160 [ 112.197372][ T8146] #3: ffff8880342dcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_suspend_dev+0x315/0x540 [ 112.200294][ T8146] #4: ffff8880342dc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 112.203220][ T8146] #5: ffff88801d2a62a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 112.206654][ T8146] [ 112.206654][ T8146] stack backtrace: [ 112.208393][ T8146] CPU: 2 UID: 0 PID: 8146 Comm: syz.1.1022 Not tainted syzkaller #0 PREEMPT(full) [ 112.208407][ T8146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.208413][ T8146] Call Trace: [ 112.208418][ T8146] [ 112.208422][ T8146] dump_stack_lvl+0x100/0x190 [ 112.208436][ T8146] print_circular_bug.cold+0x178/0x1c7 [ 112.208453][ T8146] check_noncircular+0x146/0x160 [ 112.208467][ T8146] check_prev_add+0xeb/0xe60 [ 112.208480][ T8146] __lock_acquire+0x136c/0x1a40 [ 112.208494][ T8146] lock_acquire+0x1b9/0x370 [ 112.208506][ T8146] ? kernfs_remove_by_name_ns+0x51/0x120 [ 112.208519][ T8146] ? __pfx___might_resched+0x10/0x10 [ 112.208533][ T8146] down_write+0x8b/0x1f0 [ 112.208545][ T8146] ? kernfs_remove_by_name_ns+0x51/0x120 [ 112.208562][ T8146] ? __pfx_down_write+0x10/0x10 [ 112.208575][ T8146] kernfs_remove_by_name_ns+0x51/0x120 [ 112.208589][ T8146] sysfs_unmerge_group+0xe7/0x170 [ 112.208601][ T8146] dpm_sysfs_remove+0x68/0xb0 [ 112.208616][ T8146] device_del+0x180/0x9b0 [ 112.208629][ T8146] ? __pfx_device_del+0x10/0x10 [ 112.208640][ T8146] ? __pfx_device_find_child+0x10/0x10 [ 112.208650][ T8146] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 112.208663][ T8146] device_unregister+0x1d/0xe0 [ 112.208675][ T8146] hci_conn_del_sysfs+0xb9/0x1a0 [ 112.208688][ T8146] hci_conn_del+0x506/0x1180 [ 112.208701][ T8146] hci_abort_conn_sync+0x7d9/0xb20 [ 112.208716][ T8146] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 112.208730][ T8146] ? find_held_lock+0x2b/0x80 [ 112.208749][ T8146] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 112.208764][ T8146] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 112.208781][ T8146] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 112.208796][ T8146] hci_disconnect_all_sync.constprop.0.isra.0+0x155/0x430 [ 112.208812][ T8146] ? __pfx_hci_disconnect_all_sync.constprop.0.isra.0+0x10/0x10 [ 112.208828][ T8146] ? __hci_cmd_sync_status_sk+0xe4/0x190 [ 112.208843][ T8146] hci_suspend_sync+0x8b7/0xa70 [ 112.208859][ T8146] ? __pfx_hci_suspend_sync+0x10/0x10 [ 112.208875][ T8146] ? mgmt_pending_find+0x13e/0x1a0 [ 112.208886][ T8146] hci_suspend_dev+0x31d/0x540 [ 112.208897][ T8146] ? __pfx_hci_suspend_dev+0x10/0x10 [ 112.208908][ T8146] ? kobject_get+0xbb/0x150 [ 112.208920][ T8146] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.208933][ T8146] hci_suspend_notifier+0x21e/0x330 [ 112.208945][ T8146] notifier_call_chain+0x99/0x3f0 [ 112.208956][ T8146] blocking_notifier_call_chain_robust+0xc8/0x160 [ 112.208967][ T8146] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 112.208978][ T8146] ? pin_hibernation_swap_type+0x145/0x1a0 [ 112.208993][ T8146] ? do_raw_spin_unlock+0x145/0x1e0 [ 112.209009][ T8146] pm_notifier_call_chain_robust+0x27/0x60 [ 112.209022][ T8146] snapshot_open+0x189/0x2b0 [ 112.209033][ T8146] ? __pfx_snapshot_open+0x10/0x10 [ 112.209044][ T8146] misc_open+0x26d/0x450 [ 112.209060][ T8146] ? __pfx_misc_open+0x10/0x10 [ 112.209075][ T8146] chrdev_open+0x234/0x6a0 [ 112.209085][ T8146] ? __pfx_chrdev_open+0x10/0x10 [ 112.209096][ T8146] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 112.209110][ T8146] do_dentry_open+0x6ab/0x14d0 [ 112.209119][ T8146] ? __pfx_chrdev_open+0x10/0x10 [ 112.209131][ T8146] vfs_open+0x82/0x3f0 [ 112.209143][ T8146] path_openat+0x2873/0x4280 [ 112.209156][ T8146] ? __pfx_path_openat+0x10/0x10 [ 112.209168][ T8146] do_file_open+0x20e/0x430 [ 112.209179][ T8146] ? __pfx_do_file_open+0x10/0x10 [ 112.209193][ T8146] ? alloc_fd+0x471/0x7a0 [ 112.209204][ T8146] ? do_getname+0x191/0x390 [ 112.209217][ T8146] do_sys_openat2+0x10f/0x1e0 [ 112.209230][ T8146] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.209243][ T8146] ? do_raw_spin_lock+0x128/0x260 [ 112.209257][ T8146] ? find_held_lock+0x2b/0x80 [ 112.209273][ T8146] __x64_sys_openat+0x12d/0x210 [ 112.209286][ T8146] ? __pfx___x64_sys_openat+0x10/0x10 [ 112.209301][ T8146] do_syscall_64+0x115/0x870 [ 112.209312][ T8146] ? clear_bhb_loop+0x40/0x90 [ 112.209324][ T8146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.209335][ T8146] RIP: 0033:0x7f5f6219de99 [ 112.209344][ T8146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.209354][ T8146] RSP: 002b:00007f5f63073028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.209364][ T8146] RAX: ffffffffffffffda RBX: 00007f5f62425fa0 RCX: 00007f5f6219de99 [ 112.209371][ T8146] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 112.209377][ T8146] RBP: 00007f5f62233eaf R08: 0000000000000000 R09: 0000000000000000 [ 112.209383][ T8146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.209389][ T8146] R13: 00007f5f62426038 R14: 00007f5f62425fa0 R15: 00007ffe943b9fc8 [ 112.209399][ T8146] [ 112.358915][ T8146] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.362775][ T8146] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.364692][ T8146] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.367611][ T8146] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.370760][ T8146] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.372903][ T8146] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.375563][ T8146] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.652513][ T61] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 112.774132][ T34] usb 5-1: USB disconnect, device number 8 [ 113.812273][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.372262][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.372453][ T5737] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.892425][ T5737] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.452145][ T5737] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.452365][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.972213][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.532167][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.532288][ T5737] Bluetooth: hci2: command 0x0c1a tx timeout