last executing test programs: 5.543390805s ago: executing program 1 (id=1825): r0 = msgget(0x0, 0x4a) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x20842, 0x4) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x1846, 0x4000, 0x802, 0x2b1, 0x0, r1}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r6, &(0x7f0000001900)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f000001a900)=0x80000000000003) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f000001a940), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f000001a980)={0x7, {0xfffffff7, 0x7, 0x8, 0xd21b}, {0xfe5, 0x4, 0x101, 0x1ff}, {0x9, 0x9a9f}}) msgctl$MSG_INFO(r0, 0xc, &(0x7f00000001c0)=""/81) fanotify_init(0x200, 0x0) msgrcv(r0, &(0x7f00000008c0)={0x0, ""/4096}, 0x1008, 0x1, 0x1000) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='btrfs\x00', 0x0, &(0x7f0000000300)='discard') r8 = io_uring_setup(0x9ab, &(0x7f0000000340)={0x0, 0x4ace, 0x4000, 0x2, 0x282}) r9 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x1, 0x80000ff, 0x0, r8}, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r10, r11, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 4.778789046s ago: executing program 1 (id=1827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000240)={0xbc, 0x0, 0x8}) 4.009803536s ago: executing program 3 (id=1834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d300000000000000500190001000000080015000600ffff0500180001"], 0x44}}, 0x0) 3.812539347s ago: executing program 3 (id=1837): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0xc, &(0x7f0000003040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000030c0)={0x11, 0x14, &(0x7f0000003180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000072"], &(0x7f0000003200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000003240)={r1}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x143102) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f00000004c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000500)='source', &(0x7f0000002dc0)='c:::\x00', 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002e00)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002ec0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000002fc0)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x40, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = getpgid(0xffffffffffffffff) getpgrp(r7) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x3}}, './file1/file0\x00'}) sendmsg(r8, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000040)="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", 0xff}, {&(0x7f0000000140)="9452a0f76bbd35f48e2bc02cec5bccac4fc904d363ba281c5ad93a", 0x1b}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="0e183c6136838a9922e7c6380889daa5d45283ff8cae6f248fd7abf7639de867fef86935432c2d5ed2299208646b21288ac06038591c697edf5564d4498f30b7a7fde544621a78b17b810e96532d98d7776b82e76d30121ae4641dcfa7151efef6f0b3cb98f78ffaff197b41217413dd30fb166a746e17909bbf3a8ae509aaa7e63899504858301a1ba0db7cc656a92706843d369615975864015d70582d55e402e924fa42cab5331ac4220f75a00ac716cf3165bbfa8c01e810341542e300", 0xbf}, {&(0x7f0000001840)="896b191b702f1d62985b5acf832eb0669e0c7c4ca183e7f288b8649c0be96119bf41a4bf630998d5cd9781930e9821f72bb6a55ea6809e6abf13fd2caa466e0de70e933761ec16441d932a10", 0x4c}, {&(0x7f00000018c0)="73b6b898094d0e690ded0392fb", 0xd}, {&(0x7f0000001900)="bc9a15fb6f506723b37a64a71cb7dfa91000203d37c4314d55a2d055c4b3d1558d77586a4ab79b0b20f6453a413f945b141dca927955e8ac54eab6e15197fb315ea462457ec1efd470af421a47d329e2c0c80e72f9dfdb969b88bea0338d193f2e35a8e6dc2eaadf485152b969e7db50c8370c0b5145b6fdccedd0ff5fe943cebc8156bbc885ca6232a6120f4932aa7361852a63e198cb19f4e7e6b09aa2680f13b702f8af52", 0xa6}, {&(0x7f00000019c0)="ecb46188152b123e1c73f24a50648cea83ed1d0dd28e696b48b4730b348690", 0x1f}, {&(0x7f0000001a00)="21fea6440237f03028b0bad61979501a4f40217c773c149c96bc8715b074f893be17b690f5b777b39f41b2bdce61cae50b93882e5b05c3680844e165772ee12b27f265c6ce684c6026ed1f53b4680dd5d062f1950c97986290ea73513e1aa85c2587a5292aa907b0f510a5788caeb38ccecb014ead9875544e1d1278d0728cf240bbf66c4db55d3111b5a350c67f6813e003afd2214bf50c3aa058b20428a4ec2ac15b17da9f678ec5505b0e00441c9ae1ea208ed9350c99278402c0370c6340fd983661ae50a3ef87cde26a2e7f014e282d48299b262d1d22f2db97e49435085ac478d364267e2c710f40edb1b0aad1bd0b2ffc63ab8f65cb23646b0567664a43c735d813a6a2deca0b639987ee0ffbed77e2a82e263132fadde3d49a3c89c6bb5a07374ca8a1d09722bd6f26e5893b77bf3334dd7e2291cf1070d01f67bd25b58ec23994fa123fb4aac7c857ffe745c733dbc6df8daaf11f89f6b82881ff8e68dffa128c374d3dc0366b11bbfd2ea688cfce133611b89be757fdbbbda941de9c85f10ec263500d5d9b2c7c85be761fed7a529c29e7ca59a0621cc70440e30f2f97e258e2226b3243ffd1a508a7f9f9b1de93b1a552f8d1d87cec662ef68957db217e7ca3f6009f137c6dae1521c24491959368bf53b3e86e48bcb6dbdec21c96fc562be964349f1702cd71336c53d53be8deb70299ce6508a0ba1f360203633aa4e77fc49bb89ab610d96238f23866a92d0b039495fd5da650d5c6cc2e001e452021550ab351941393a8fcc8812239605ec3174b04ab9a7fe914338f1299ebc38cea4573f9f215db1f74fdbaa354db33871d2ba5dcaf854be9305866fac008446e77defdcfbed3a1d9601031789c4fcf895c714fa1d4e4f9474b1b86b490ecbd3f60c3caaec557dc9a14cc1d878f4d7225b44c1485cb59523f01a3ab67e99e11534120057547f046bfb5d0301115b472202ceeef7a84fb1db7500fc0b0041e815607bd5bac02ede17df57815e2825822dc6f2b15184b4fbc26f43d20a21403ff8802e01e1d84c59d1298833543f1a21f45ce7876de706e3f6fb4d29ad8597e9797ffb857692893b563aebb64539ce44d5b33c0b5d135e01fb8d1106e9b3336fee08fb9543885842a89bb0446ce7c294c8d49bd7c37d07387ee2b8d91fe897dfed831273dc9301caabfd7c5e339e357f7f2894ef1035fbe38408b796421ee98a2686031d147bb7a91ae83b84676f5ae802617a5042f01b9b084aefa4cba3e58aad6c1a91af1716b07b6b7720010ef07abf1743d42ed3f94684c6a3433daac44dc345f494626c58003190759a292adb1d1ed1920aeb066677a3c77dd522fa07e936c33b8253db7453288c90b0cee578ded4f6a3dce1347ea45df39b22257c11fde14eb318f6626a8ebe8a27afb97c1027e52242bc8e8772427b9d99cc31853203a019db19be211b46d1115bd7a93d10a5c2a48a40b503a0010a1caddb2edaa7806ccd8d6b7b671485c8c66e73231e0c4cb91494f0c0820f3cce73f96e208ea1226a3b93222b0d6e775555f5efae4d4c565dc8f33c10b2e38bc65df0dc7e69c1efcde724ee9aa9d15cf12a2c36c9d8797c6ad6cf5c7cfa562ca66754fe647943bcea17c215855c3154c5981777c6ff49fb66eed0cadc68bf0551ce946859afcb2949636e83735031ab3dc4924d887b5dfccfa5f0425f5ac106a34726e53639bf12048cc17f06d830841da4ca956ee7f6f08f0de825afa22b18d7ea450c09dda15cc4e1235eb936b238459ab563ab1a53345926000b75bc078e7ec8c4de2e535d355bf732aa010d8bde4dc8a09aed9cdc54166f08d2b1fde2e6bbd20d56e7eb1536163e7a3500d3d1c7e051ae0c03446cd5575f8edef02062e6e51c987894634df4dcd72676d91cdbe05656a74dad3aa0a57f51b2f10921f16572a27f93653626b5c6595e79de99fe49c6b20436064cbea7a2f9e28201e8abdcda022105f9fd386785567c02d4c53cfeb856bbb1d6370e0c8175ff85828c94b0377e6127506ecf277e8952bd5dee336b02ce1cd7f69f2f3a51ee427eb96f33c5a3e56ae46c62058482c2b314ce1703dbfededb8e449111b1737edd046f226338defd4996395472945c999f874cb65296844f0a560afa58606408c55232a27d370ee8ede31e6f58167a4dba7277ddbc492ef462fdf8f9606c16fe021db077753fa5cbadc394e576131751f16cbe36410b634c92dc3c50b9fa2cca1b6b697f882fbb8b83c37815424e141a7885415aaf11711ccc51e4a48b23272f93a4fe4b5f478df022e8d2df4e40cf5a6b71121468d276ce8a18d085ebe96a509a037d7e9b0856748d3310addd1b7520655df9166e649348754413f649f17c1a474c94d4020b72b1c4dc308759683814a82a82f103fa063d6e1f749cb52cf071b56370416a09b9039a9b41c87eed2186cced189acc24efd02c24bce5ee606b422f300f1443aa4343cd3ff7984dfbd935945260a07738d0e6751085834fd9733d647bf00bbba45528b753f5c623a1d3d28c38a2645dbafb9136666e7c6c27cc7a9019dd38d45f8045e9a927b80b64e8d86d18f5f10b92d470511cbb8bd605110f87910ed94f18e5b8489cb9edad7edb5018c4a22bb7cdca70ef2eddcb59ab642415fe3148d92dea35eaeaa531d9d72a59c9a4a28a29ad102e9b0075bf2364bfc82d1d6ef50b24b484156203e5bbf227e4859ae75f368b69f47080778d73247b040f557e5c0d53813bc119b751fb16d89281205960c468622a0f6216e12cd8b9fb15b14c846686ac85d0d355ab528b764eeb840d6e8b30bbcd49a0e7f07021e70408cec5b467a63710d62621f54d63c6e754f4054c130c00fef5a366f5a4df71d8cb26ef0560beb7321dc57f54bace52d5eac25a2366ce6271f0bdf325007580264145a7d63a01a05685a2d87400eefa8f9f5e30d114d33e6bc42e3a39698ee3b5ecdc3b5939da902e069a612e20329eb096c447517fd367f00e5397025e118790a25b772f52b6b6b8540d9e35e1d3e92e968dcbed81f8224d23e3e415adf0c52c778a2c17b9cf78cdf22ff5fbc24ab6b124db43b0007e61476051b2bddfe8bc334fff1a6f8ef206edb7e8a5c9cb973ef38940b02d6d7e605d8db5be328512366c478f6bb8b842588502e2315531fc23256c37d5b556dd4526aea1693184bcec10426902a876e1a538f06a4eb51bf5424c6201d534290afebc64fa1c6be6c97e1e23e9d8074785bdd5db363ac06decf429f35e17e2ff76fc155192623471ab3018495b03c42d2fc20d1d42867202220c4d0369d0640b19d1cc8b4288b6e46c2119bfae62748b68270babbbc6883532c478084d8cb2920ac1053e8c2db107937ff32c86c00305d4fc1f540429baa421e413d954bfd4da4e47ed2ec279fa5dae5e893873c6a04d123e0be64b9bef8a86c932356d7b27ba9e3fc9daadbbcbf0e34a3e4233b492d8e626b9e41a4f603cbb38d4f7e21ac23d4962f61c95b40f653fbb44e1ba99995b57b44b3832f79809af7c0000ea198565c860e395889164b9e1b44032db2cd0da0b616a88b2971533ac9171ab39b84923d0d625c977e7c1e986f951a1e05de287ba36bfc61c4c0782bf6c0f3e8d4a9c6fa9afbd37e217679927e819db3fd27e799c0ccce8a73db4cff7ea2bac46c98ef4e8fd1bbe0532f693e936050bc92e380a323ab7f2ad37d61aab43760db4ea75709c671caf12b16b67a71b8faee742ed71494cdedaade0d87f6a796ab576ba36d17856fccd47293a3024482559712af9d67aa4dd9ff7368ae9482dede76954eb737b8e023a2085057e6e3ca60e70c6a4f24abc46643bdbdc0e9f93d0f29985247630d6251d8b2c9d71b45bdb207f017d78e401c6f3aacb95d35e5e41d2ada82b817d94d83f1c489588dedbe38a2d01d354de9653138b7453bf6092e92b869b2d4f4b52d1cc3b6066fdffdfd160c599374b3abe9e0e7f41a359188a72a2621dcb50e807c475744ed129b91ba39e9a4602dec83eb29f79475953bc4d5441a0f5295bbeb2ab7e51d8c261ac083c84aeef3070aa21fd760cba5eebe635a806e0fd573308ee9fa20f091e9f98b9776fe5cc320b3e623252e9d32f586bc10eddb6da42546d5e9e713ce25273af82b2b5c93ae756a385643f43b93b6c3c714b9f29e53603b847301018ae1ae70a61dd8c49edd0539a8729cdf0b8ba4832e644f38b3368afc34feac281ecd37f7e92b067c2ac9af962502a393735d0cf55c8252fe053ebcbc0d120997da5194431e786c5a94df54dcf797b23db0bd31c520111510544bc6184a86100cf577536f9aee51cd0296413760536ec0bab9d2236c4d7c38b97c680ae20db33c27ea6e3146d6c3d4bfb691305334ff76d1c588095c92c9db82fabdb4fbbc43b20edf13b180c802f7e81df34cd294b5e05671c6ef31db3664cf8131146cfeb655dce93e5e537e79864c3850179b8a4abfe169bde0ba7f7f4ba723bebbafbaa247a417c573075ac4eb03543de513a4735aee1a25a5ddb2f098f583fc053bf3379724a4d2492417d14cd51ff683e6039dd47eec8c63a807f9266cf6e6cbab7263c7f6c105153b2853c3678a4a1eca21a98a36a6c4de8d9583711f97e03405f2d61626165f5178b11a65ada3a66609e6127cff88e61621fcef01a84c160cbd1a3abb8e07a4158f80f8227aa46f72dcb0c9cdcab5604cada918ea1f49fa4e9ab12c218991d417e01f556d4f900ba82752475ff68520531563009d5678cd6b7ed725c4002a5275c8953499f8b747a61a2cf4fbf849d61ddf12816caabd11a879ee586ce7c650c4ed48e88ff74334ddfe4de5aa70127bc6057ea59a620247d193e2e28facf3044f9af36924abd50f41a6d9b236bc39538a494c74d33d99102910ca8991e61435e529a5fddf8cfc8d9e241253033c136236a4a586e121494f856de0248e6568e618fa1e0555ea8ca9cdefd0a001faeb48c2252904c1678cd02007b13478b05de0bc0ab9f1161f9501188b48e712a9dcda266531a3b8b80ede2ad90ae89c5eaef88d34fac08ddeae85be7f59f94546328ad279deb9ab5804a1a47089d9e89b01ad4978b42542b3cfdf1f513d449f7e96863199331e5bac0b4d19bb30ea21b18ac83ecc82be957cab55c5033114d68231ef7286dea589e5bfd0912c2b39ea724cb9700c31e08302ebf471fce8ae1225b9eabd126a80a10c604e17eab1890d95de43c19cc8526450f4329a059359b35434fd61e163ceeb1e688a0bfeea8cc016cfead3534c435df030e5e2bdc6abe003ad0466c15f09cc60bd11fa9dda672fed7a71b6b41d2bd3197260eb0fb8a005f72348a0977a6aac78a847588792174518bf5f501ce9140815a572e3c57b0b2392d603be6efa52e69a1c9a3c0bc2e00bb67b26fe3e377e79d7af92c52e77de6689ea11a1942e212d83c57a3131e221f0074c47c6fbcda22036a3236bc61a140f8e5fe03bdefb2545da9404e51228536bb6dee7fee2b399ccfe527256ffcdadeaaa98a1e93abb8367e193b812df3deca2dd26477ef37f001f2e5531ad42f6f8039fd399671a241c00cdfd3a8f23280938a3fad1cadd68d8d0321809756a32118092b63159259d66a9dd1e5fb0722b5859dea7aac6f616fdc7a3660ea438f3e58409ededcae6d4b8ed1a02d95fd1153393a75372f2aea9ef0110959a10488385d8426841773459b88ed56043f4cdf2474cf9fc72e394009e158188eaee3139c8d37e6b4aa89c91bd52a126cf83ae4f0df138c7bc2c636cdadee328babe4f5fc61c", 0xffc}, {&(0x7f0000002a00)="9fc32634ffa5520544cf6f020cc099840bb92d926a01d2e3", 0x18}], 0xa, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"], 0x250}, 0x4000) chdir(&(0x7f00000006c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x2) 3.767221958s ago: executing program 4 (id=1838): mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x41b}}}, 0x7) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) 3.230709322s ago: executing program 0 (id=1839): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c40)=r0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000005c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000cc0)={0x3, 0xc, 0x3, 0xa}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 3.230088193s ago: executing program 1 (id=1840): syz_open_dev$usbmon(&(0x7f0000000400), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x8000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 3.197785178s ago: executing program 3 (id=1841): r0 = syz_open_dev$media(&(0x7f0000000b40), 0x3, 0x20000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, &(0x7f00000001c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f00000004c0)={r1}) 3.046538552s ago: executing program 2 (id=1842): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x38, 0x0, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff31000000330020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473ce0", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020afc000700000028bdc16bafccdf2505001a"], 0x38}}, 0x40408c0) 3.03203024s ago: executing program 0 (id=1843): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e23, @multicast2}, 0x10) 3.018522754s ago: executing program 4 (id=1844): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x240880c0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2d) r4 = dup(0xffffffffffffffff) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000400)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000480)={'vlan0\x00', @remote}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r5, 0xc0805841, &(0x7f00000004c0)={0x6a09, 0x800, 0x4, 0x7, 0x2}) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000540)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x101042, 0x0) r7 = mmap$IORING_OFF_CQ_RING(0x7fffffffc000, 0x2dc1, 0x300000f, 0x12, r6, 0x8000000) munmap$IORING_OFF_SQ_RING(r7, 0x1) munmap$IORING_OFF_CQ_RING(r7, 0x2f51) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000005c0)={'bond0\x00', 0x2000}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000001) syz_emit_ethernet(0x172, &(0x7f0000000280)={@local, @local, @val={@void}, {@ipv6={0x86dd, @udp={0x8, 0x6, "8de996", 0x138, 0x11, 0x1, @remote, @local, {[@srh={0x6, 0x6, 0x4, 0x3, 0x1, 0x40, 0x5, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}]}, @hopopts={0x2f, 0x18, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @generic={0xfb, 0x53, "0c19316bfd6e54c8bfd79a5f09878d22ce4853ebab140c7f462cb050c1a116f4c41caf27a3e91708a6123d9866cbe9ae66ee555bd931c58c121150b58c5e54a1b64b55ef544506821994670178f3d55deb5cb2"}, @generic={0x7, 0x49, "42f81707c9ea0341d3aec7a85c6d81eb14975caef61a4f9a6f41ceef2513c739233ccc286f6297199a38505cfa7b6309e662077fcec05b2afb2c0a42d7c1fadfbcb2906c812afe3c73"}]}, @srh={0x87, 0x0, 0x4, 0x0, 0xe1, 0x28, 0x175}], {0x4e24, 0x4e20, 0x28, 0x0, @gue={{0x1, 0x1, 0x2, 0x3, 0x0, @void}, "8e525b941fb0fc2489eb7eb236d0beef2fbd69f136124ce49e7c8daf"}}}}}}}, 0x0) 2.980093308s ago: executing program 3 (id=1845): r0 = syz_io_uring_setup(0x59e9, &(0x7f0000000740)={0x0, 0xae17, 0x40000, 0x3, 0x20000317}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0, 0x8, 0x2, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000340)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xf, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x2, 0x333, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1af}}}, 0x0) 2.91249874s ago: executing program 2 (id=1846): move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.898569848s ago: executing program 0 (id=1847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.786591424s ago: executing program 3 (id=1848): r0 = msgget(0x0, 0x4a) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x20842, 0x4) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x1846, 0x4000, 0x802, 0x2b1, 0x0, r1}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r6, &(0x7f0000001900)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f000001a900)=0x80000000000003) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f000001a940), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f000001a980)={0x7, {0xfffffff7, 0x7, 0x8, 0xd21b}, {0xfe5, 0x4, 0x101, 0x1ff}, {0x9, 0x9a9f}}) msgctl$MSG_INFO(r0, 0xc, &(0x7f00000001c0)=""/81) fanotify_init(0x200, 0x0) msgrcv(r0, &(0x7f00000008c0)={0x0, ""/4096}, 0x1008, 0x1, 0x1000) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='btrfs\x00', 0x0, &(0x7f0000000300)='discard') r8 = io_uring_setup(0x9ab, &(0x7f0000000340)={0x0, 0x4ace, 0x4000, 0x2, 0x282}) r9 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x1, 0x80000ff, 0x0, r8}, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r10, r11, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2.730091446s ago: executing program 0 (id=1849): socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_open_dev$sndctrl(0x0, 0x458, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000340)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x90}}, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0xb8}}, 0x0) sendmsg$nl_netfilter(r4, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000440)='/dev/comedi2\x00', 0x20000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='sys_mnt\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='lzo', 0x3) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000600)={'dt2814\x00', [0x2003, 0x20, 0x8, 0x20000001, 0x25, 0x0, 0x400, 0x200002, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff3, 0x400001, 0x6, 0x8, 0x2, 0x7f, 0xffffffff, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x0, 0x3, 0x6, 0x4006, 0x8000, 0x3]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101}) 2.700734837s ago: executing program 4 (id=1850): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000005, r1, 0x4}, 0x38) 1.695325181s ago: executing program 3 (id=1851): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x8, @local, 0xdc}, 0x1c) 1.656503197s ago: executing program 2 (id=1852): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0xffffffff, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000004c0)=@IORING_OP_SEND_ZC={0x2f, 0x8, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x20000015, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.643234666s ago: executing program 1 (id=1853): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000001c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000200)=ANY=[], 0xa) 1.580735655s ago: executing program 4 (id=1854): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x251da000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000640)=0x4, 0x4) 1.579693931s ago: executing program 0 (id=1855): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 1.451982994s ago: executing program 1 (id=1856): r0 = msgget(0x0, 0x4a) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x20842, 0x4) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x1846, 0x4000, 0x802, 0x2b1, 0x0, r1}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r6, &(0x7f0000001900)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f000001a900)=0x80000000000003) r7 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f000001a980)={0x7, {0xfffffff7, 0x7, 0x8, 0xd21b}, {0xfe5, 0x4, 0x101, 0x1ff}, {0x9, 0x9a9f}}) msgctl$MSG_INFO(r0, 0xc, &(0x7f00000001c0)=""/81) fanotify_init(0x200, 0x0) msgrcv(r0, &(0x7f00000008c0)={0x0, ""/4096}, 0x1008, 0x1, 0x1000) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='btrfs\x00', 0x0, &(0x7f0000000300)='discard') r8 = io_uring_setup(0x9ab, &(0x7f0000000340)={0x0, 0x4ace, 0x4000, 0x2, 0x282}) r9 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x1, 0x80000ff, 0x0, r8}, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r10, r11, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 1.451666062s ago: executing program 2 (id=1857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000002000000a003000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 1.438057608s ago: executing program 4 (id=1858): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x240880c0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2d) r4 = dup(0xffffffffffffffff) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000400)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000480)={'vlan0\x00', @remote}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r5, 0xc0805841, &(0x7f00000004c0)={0x6a09, 0x800, 0x4, 0x7, 0x2}) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000540)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x101042, 0x0) r7 = mmap$IORING_OFF_CQ_RING(0x7fffffffc000, 0x2dc1, 0x300000f, 0x12, r6, 0x8000000) munmap$IORING_OFF_SQ_RING(r7, 0x1) munmap$IORING_OFF_CQ_RING(r7, 0x2f51) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000005c0)={'bond0\x00', 0x2000}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000001) syz_emit_ethernet(0x162, &(0x7f0000000280)={@local, @local, @val={@void}, {@ipv6={0x86dd, @udp={0x8, 0x6, "8de996", 0x128, 0x11, 0x1, @remote, @local, {[@srh={0x6, 0x6, 0x4, 0x3, 0x1, 0x40, 0x5, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}]}, @hopopts={0x2f, 0x16, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @generic={0xfb, 0x3f, "0c19316bfd6e54c8bfd79a5f09878d22ce4853ebab140c7f462cb050c1a116f4c41caf27a3e91708a6123d9866cbe9ae66ee555bd931c58c121150b58c5e54"}, @generic={0x7, 0x4d, "42f81707c9ea0341d3aec7a85c6d81eb14975caef61a4f9a6f41ceef2513c739233ccc286f6297199a38505cfa7b6309e662077fcec05b2afb2c0a42d7c1fadfbcb2906c812afe3c736692d3e3"}]}, @srh={0x87, 0x0, 0x4, 0x0, 0xe1, 0x28, 0x175}], {0x4e24, 0x4e20, 0x28, 0x0, @gue={{0x1, 0x1, 0x2, 0x3, 0x0, @void}, "8e525b941fb0fc2489eb7eb236d0beef2fbd69f136124ce49e7c8daf"}}}}}}}, 0x0) 346.318229ms ago: executing program 1 (id=1859): setns(0xc9, 0x0) capset(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat(0xffffffffffffff9c, 0x0, 0x1451c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=""/4096, 0x1000}, {0x0}], 0x2}}], 0x1, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001a00)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001a80)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000001ac0), 0x0, 0x0) read$msr(r4, &(0x7f0000001b00)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x880, 0x0) fcntl$getown(r0, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=@filename='mtd0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r5 = open(&(0x7f00000003c0)='./file1\x00', 0x4827e, 0x20) mkdirat(r1, &(0x7f0000000000)='./file0/file2\x00', 0x22) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@metacopy_on}]}) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c00001f000601020000000000000000000000080c000a8008000140000000010900060073797a3100000000"], 0x2c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x38, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 228.957353ms ago: executing program 2 (id=1860): r0 = openat$comedi(0xffffff9c, &(0x7f0000000ec0)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000f00)={'c6xdigio\x00', [0x3c4, 0x4, 0x2, 0xa, 0x401, 0x0, 0xfffffffc, 0x40, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffab, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x6, 0x200, 0x2a14, 0x9, 0x4, 0x29, 0x7, 0xe, 0x4]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000fc0)={0x4000000, 0x34, 0x0, 0x1, 0x80000000}) 196.966277ms ago: executing program 0 (id=1861): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4a, &(0x7f0000000dc0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, @local, {[], {{0x3a00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 24.56245ms ago: executing program 2 (id=1862): r0 = msgget(0x0, 0x4a) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x20842, 0x4) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x1846, 0x4000, 0x802, 0x2b1, 0x0, r1}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r6, &(0x7f0000001900)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f000001a900)=0x80000000000003) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f000001a940), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f000001a980)={0x7, {0xfffffff7, 0x7, 0x8, 0xd21b}, {0xfe5, 0x4, 0x101, 0x1ff}, {0x9, 0x9a9f}}) msgctl$MSG_INFO(r0, 0xc, &(0x7f00000001c0)=""/81) fanotify_init(0x200, 0x0) msgrcv(r0, &(0x7f00000008c0)={0x0, ""/4096}, 0x1008, 0x1, 0x1000) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='btrfs\x00', 0x0, &(0x7f0000000300)='discard') r8 = io_uring_setup(0x9ab, &(0x7f0000000340)={0x0, 0x4ace, 0x4000, 0x2, 0x282}) r9 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x1, 0x80000ff, 0x0, r8}, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r10, r11, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 0s ago: executing program 4 (id=1863): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x401, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x41, 0x0, 0x400, 0x0, 0x0, @by_dev={r1}, [@cache={0x0, 0x2410, 0x0, 0x88, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x1}, 0x20, '64', 0x20, '1 passthrough', 0x20, 'smq 0'}}]}) kernel console output (not intermixed with test programs): ound! [ 430.044018][ T8459] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 430.142865][ T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 430.277323][ T24] usb 3-1: USB disconnect, device number 8 [ 430.287637][ T8449] udevd[8449]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.430030][ T29] audit: type=1400 audit(1793329308.908:776): avc: denied { setopt } for pid=8468 comm="syz.4.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 432.520348][ T8477] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 432.565466][ T8482] netlink: 'syz.4.621': attribute type 1 has an invalid length. [ 434.862508][ T8497] can0: slcan on ttyS3. [ 434.914974][ T5634] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 434.942014][ T8497] can0 (unregistered): slcan off ttyS3. [ 436.526005][ T29] audit: type=1400 audit(1793329314.988:777): avc: denied { ioctl } for pid=8512 comm="syz.3.632" path="socket:[17476]" dev="sockfs" ino=17476 ioctlcmd=0x8937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 436.845132][ T8515] jffs2: notice: (8515) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 436.972037][ T29] audit: type=1400 audit(1793329315.428:778): avc: denied { write } for pid=8508 comm="syz.0.631" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 437.011543][ T8523] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 440.160326][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.181180][ T5634] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 440.251427][ T8536] can0: slcan on ttyS3. [ 440.599473][ T8537] can0 (unregistered): slcan off ttyS3. [ 441.337324][ T8527] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 441.765522][ T988] libceph: connect (1)[c::]:6789 error -101 [ 441.765646][ T988] libceph: mon0 (1)[c::]:6789 connect error [ 441.783910][ T8534] ceph: No mds server is up or the cluster is laggy [ 442.289436][ T988] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 442.301139][ T29] audit: type=1400 audit(1793329320.778:779): avc: denied { read write } for pid=8569 comm="syz.0.646" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 442.301172][ T29] audit: type=1400 audit(1793329320.778:780): avc: denied { open } for pid=8569 comm="syz.0.646" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 442.366737][ T29] audit: type=1400 audit(1793329320.838:781): avc: denied { ioctl } for pid=8569 comm="syz.0.646" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 442.440512][ T988] usb 2-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 442.441307][ T988] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.441332][ T988] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 442.441346][ T988] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 442.441359][ T988] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.441382][ T988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.577010][ T8579] openvswitch: netlink: nsh attribute has 100 unknown bytes. [ 442.973239][ T8576] jffs2: notice: (8576) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 443.001776][ T29] audit: type=1400 audit(1793329321.478:782): avc: denied { write } for pid=8572 comm="syz.2.647" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 443.066380][ T988] usb 2-1: USB disconnect, device number 14 [ 443.120527][ T29] audit: type=1400 audit(1793329321.598:783): avc: denied { getopt } for pid=8584 comm="syz.0.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 445.581393][ T8591] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 446.869582][ T8596] ceph: No mds server is up or the cluster is laggy [ 446.983864][ T29] audit: type=1400 audit(1793329325.458:784): avc: denied { connect } for pid=8608 comm="syz.3.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 447.020916][ T8612] Illegal XDP return value 8 on prog (id 85) dev N/A, expect packet loss! [ 448.212124][ T29] audit: type=1400 audit(1793329326.688:785): avc: denied { create } for pid=8619 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 448.987440][ T8623] can0: slcan on ttyS3. [ 449.015441][ T29] audit: type=1400 audit(1793329327.488:786): avc: denied { setopt } for pid=8619 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 449.040557][ T5634] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 449.060645][ T8623] can0 (unregistered): slcan off ttyS3. [ 449.410085][ T44] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 449.998985][ T44] usb 3-1: New USB device found: idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 450.361509][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.364476][ T44] usb 3-1: config 0 descriptor?? [ 450.390948][ T44] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 450.706953][ T29] audit: type=1400 audit(1793329329.178:787): avc: denied { read } for pid=8635 comm="syz.3.667" name="event2" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 450.800941][ T29] audit: type=1400 audit(1793329329.278:788): avc: denied { create } for pid=8637 comm="syz.4.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 450.825122][ T44] gp8psk: usb out operation failed. [ 450.825139][ T44] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 450.825159][ T44] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 450.859717][ T44] usb 3-1: USB disconnect, device number 9 [ 450.897804][ T29] audit: type=1400 audit(1793329329.368:789): avc: denied { write } for pid=8637 comm="syz.4.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 452.264775][ T8645] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 452.333038][ T8651] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 452.333053][ T8651] netlink: 96 bytes leftover after parsing attributes in process `syz.2.672'. [ 454.340035][ T8663] can0: slcan on ttyS3. [ 454.350283][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 454.392029][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 454.420234][ T8663] can0 (unregistered): slcan off ttyS3. [ 454.501149][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 454.501178][ T24] usb 3-1: New USB device found: idVendor=2b73, idProduct=001b, bcdDevice=0.40 [ 454.523464][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.525089][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.525104][ T24] usb 3-1: Product: syz [ 454.525113][ T24] usb 3-1: Manufacturer: syz [ 454.525122][ T24] usb 3-1: SerialNumber: syz [ 454.645902][ T29] audit: type=1400 audit(1793329333.118:790): avc: denied { connect } for pid=8667 comm="syz.1.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 454.779847][ T8651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.780130][ T8651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.227526][ T8674] kvm: pic: non byte write [ 456.588362][ T24] usb 3-1: unknown interface protocol 0x1, assuming v1 [ 456.588379][ T24] usb 3-1: cannot find UAC_HEADER [ 457.946231][ T44] libceph: connect (1)[c::]:6789 error -101 [ 457.946344][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 458.798972][ T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 459.094169][ T44] libceph: connect (1)[c::]:6789 error -101 [ 459.094283][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 459.114387][ T24] usb 3-1: USB disconnect, device number 10 [ 459.212448][ T8628] udevd[8628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.273387][ T8685] ceph: No mds server is up or the cluster is laggy [ 459.344854][ T8698] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 459.753539][ T29] audit: type=1400 audit(1793329338.228:791): avc: denied { getopt } for pid=8703 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 460.861281][ T8715] jffs2: notice: (8715) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 460.864045][ T29] audit: type=1400 audit(1793329339.338:792): avc: denied { write } for pid=8706 comm="syz.1.688" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.674447][ T8718] can0: slcan on ttyS3. [ 461.727074][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 461.861710][ T8718] can0 (unregistered): slcan off ttyS3. [ 463.031313][ T8714] ceph: No mds server is up or the cluster is laggy [ 463.083954][ T8728] netlink: 'syz.1.694': attribute type 1 has an invalid length. [ 463.083970][ T8728] netlink: 96 bytes leftover after parsing attributes in process `syz.1.694'. [ 463.368398][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 464.149443][ T8738] can0: slcan on ttyS3. [ 464.202013][ T5634] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 464.295753][ T8738] can0 (unregistered): slcan off ttyS3. [ 464.332423][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 464.332453][ T24] usb 2-1: New USB device found: idVendor=2b73, idProduct=001b, bcdDevice=0.40 [ 464.333209][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.334717][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.334732][ T24] usb 2-1: Product: syz [ 464.334741][ T24] usb 2-1: Manufacturer: syz [ 464.334750][ T24] usb 2-1: SerialNumber: syz [ 465.115630][ T8741] can0: slcan on ttyS3. [ 465.170270][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 465.230112][ T8741] can0 (unregistered): slcan off ttyS3. [ 465.344953][ T8745] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 466.714426][ T8728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.714688][ T8728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.724264][ T8770] jffs2: notice: (8770) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 467.777854][ T29] audit: type=1400 audit(1793329346.248:793): avc: denied { write } for pid=8763 comm="syz.3.706" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.130767][ T8769] ceph: No mds server is up or the cluster is laggy [ 469.908605][ T8777] virtio_blk virtio3: 1/0/0 default/read/poll queues [ 469.946050][ T24] usb 2-1: unknown interface protocol 0x1, assuming v1 [ 469.946097][ T24] usb 2-1: cannot find UAC_HEADER [ 470.019581][ T8777] virtio_blk virtio3: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 470.101080][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 470.143077][ T24] usb 2-1: USB disconnect, device number 15 [ 470.163451][ T8798] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 470.242436][ T8628] udevd[8628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.837000][ T29] audit: type=1400 audit(1793329349.308:794): avc: denied { getopt } for pid=8805 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 470.866226][ T29] audit: type=1400 audit(1793329349.338:795): avc: denied { connect } for pid=8806 comm="syz.4.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 471.960392][ T8816] can0: slcan on ttyS3. [ 472.014314][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 472.020297][ T8816] can0 (unregistered): slcan off ttyS3. [ 472.029418][ T988] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 472.245481][ T988] usb 2-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 472.312809][ T8819] jffs2: notice: (8819) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 472.342000][ T988] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.342100][ T988] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 472.359808][ T988] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 472.359824][ T988] usb 2-1: Product: syz [ 472.359832][ T988] usb 2-1: Manufacturer: syz [ 472.402046][ T988] uvcvideo 2-1:1.0: Found multiple Units with ID 1 [ 472.505357][ T29] audit: type=1400 audit(1793329350.978:796): avc: denied { write } for pid=8809 comm="syz.4.722" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 472.615870][ T988] uvcvideo 2-1:1.0: Found UVC 71.01 device syz (225a:e1d4) [ 472.615939][ T988] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 473.985369][ T988] usb 2-1: USB disconnect, device number 16 [ 474.005717][ T8832] ceph: No mds server is up or the cluster is laggy [ 475.135077][ T8837] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 476.432940][ T8850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.733'. [ 476.433032][ T8850] bond_slave_0: entered allmulticast mode [ 476.531175][ T8855] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 476.792462][ T29] audit: type=1400 audit(1793329355.268:797): avc: denied { setopt } for pid=8863 comm="syz.2.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 476.823722][ T8866] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 477.590421][ T8868] can0: slcan on ttyS3. [ 477.643212][ T5634] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 477.671933][ T8868] can0 (unregistered): slcan off ttyS3. [ 477.714507][ T29] audit: type=1400 audit(1793329356.188:798): avc: denied { bind } for pid=8870 comm="syz.1.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 478.815911][ T8886] netlink: 172 bytes leftover after parsing attributes in process `syz.4.745'. [ 478.815927][ T8886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.745'. [ 479.610383][ T8881] can0: slcan on ttyS3. [ 479.613933][ T5634] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 479.663002][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 479.700271][ T8881] can0 (unregistered): slcan off ttyS3. [ 479.724629][ T8891] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 479.760263][ T8893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.748'. [ 480.816103][ T8902] can0: slcan on ttyS3. [ 480.868115][ T5634] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 480.901020][ T8902] can0 (unregistered): slcan off ttyS3. [ 480.948137][ T29] audit: type=1400 audit(1793329359.418:799): avc: denied { setopt } for pid=8907 comm="syz.3.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 481.066226][ T8910] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 483.390167][ T8920] ceph: No mds server is up or the cluster is laggy [ 484.433494][ T8937] can0: slcan on ttyS3. [ 484.486113][ T5634] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 484.519448][ T8937] can0 (unregistered): slcan off ttyS3. [ 485.451618][ T5634] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 485.656469][ T8948] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 486.460973][ T8949] can0: slcan on ttyS3. [ 486.512975][ T5634] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 486.540319][ T8949] can0 (unregistered): slcan off ttyS3. [ 487.514133][ T8959] can0: slcan on ttyS3. [ 487.567025][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 487.579671][ T8959] can0 (unregistered): slcan off ttyS3. [ 489.264058][ T8958] ceph: No mds server is up or the cluster is laggy [ 490.327092][ T8968] ceph: No mds server is up or the cluster is laggy [ 491.934585][ T8974] ceph: No mds server is up or the cluster is laggy [ 493.320807][ T8995] can0: slcan on ttyS3. [ 493.373011][ T5634] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 493.400588][ T8995] can0 (unregistered): slcan off ttyS3. [ 495.163538][ T9024] netlink: 'syz.0.793': attribute type 1 has an invalid length. [ 497.966276][ T9046] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 498.901122][ T9058] can0: slcan on ttyS3. [ 499.023200][ T5634] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 499.056750][ T29] audit: type=1400 audit(1793329377.528:800): avc: denied { ioctl } for pid=9048 comm="syz.4.804" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19241 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 499.213247][ T9058] can0 (unregistered): slcan off ttyS3. [ 499.846698][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 501.310596][ T29] audit: type=1400 audit(1793329379.788:801): avc: denied { mount } for pid=9048 comm="syz.4.804" name="/" dev="configfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 501.439619][ T29] audit: type=1400 audit(1793329379.918:802): avc: denied { search } for pid=9048 comm="syz.4.804" name="/" dev="configfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 501.439653][ T29] audit: type=1400 audit(1793329379.918:803): avc: denied { search } for pid=9048 comm="syz.4.804" name="usb_gadget" dev="configfs" ino=3351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 501.439676][ T29] audit: type=1400 audit(1793329379.918:804): avc: denied { search } for pid=9048 comm="syz.4.804" name="g1" dev="configfs" ino=8895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 501.439699][ T29] audit: type=1400 audit(1793329379.918:805): avc: denied { search } for pid=9048 comm="syz.4.804" name="functions" dev="configfs" ino=8896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 501.441574][ T29] audit: type=1400 audit(1793329379.918:806): avc: denied { search } for pid=9048 comm="syz.4.804" name="/" dev="configfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 501.441607][ T29] audit: type=1400 audit(1793329379.918:807): avc: denied { search } for pid=9048 comm="syz.4.804" name="usb_gadget" dev="configfs" ino=3351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 501.441630][ T29] audit: type=1400 audit(1793329379.918:808): avc: denied { search } for pid=9048 comm="syz.4.804" name="g1" dev="configfs" ino=8895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 501.441653][ T29] audit: type=1400 audit(1793329379.918:809): avc: denied { search } for pid=9048 comm="syz.4.804" name="functions" dev="configfs" ino=8896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 501.623936][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.498475][ T9095] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 505.295659][ T9108] can0: slcan on ttyS3. [ 505.348060][ T5634] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 506.369432][ T9108] can0 (unregistered): slcan off ttyS3. [ 506.526993][ T9110] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 506.829826][ T44] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 507.419777][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 507.436756][ T44] usb 2-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 507.771186][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.771248][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 507.828236][ T9121] ceph: No mds server is up or the cluster is laggy [ 507.828403][ T44] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 507.828418][ T44] usb 2-1: Product: syz [ 507.828427][ T44] usb 2-1: Manufacturer: syz [ 507.828435][ T44] usb 2-1: SerialNumber: syz [ 507.862250][ T44] usb 2-1: config 0 descriptor?? [ 507.882394][ T44] hub 2-1:0.0: bad descriptor, ignoring hub [ 507.882411][ T44] hub 2-1:0.0: probe with driver hub failed with error -5 [ 509.335234][ T988] usb 2-1: USB disconnect, device number 17 [ 510.406310][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 510.406322][ T29] audit: type=1400 audit(1793329388.878:817): avc: denied { read } for pid=9137 comm="syz.4.828" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 510.415663][ T29] audit: type=1400 audit(1793329388.898:818): avc: denied { open } for pid=9137 comm="syz.4.828" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 510.500988][ T29] audit: type=1400 audit(1793329388.958:819): avc: denied { create } for pid=9140 comm="syz.2.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 510.534962][ T29] audit: type=1400 audit(1793329389.008:820): avc: denied { getopt } for pid=9140 comm="syz.2.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 510.776576][ T29] audit: type=1400 audit(1793329389.248:821): avc: denied { write } for pid=9155 comm="syz.3.837" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 510.817714][ T29] audit: type=1400 audit(1793329389.288:822): avc: denied { ioctl } for pid=9155 comm="syz.3.837" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x40383d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 510.858357][ T9159] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 513.170666][ T9161] ceph: No mds server is up or the cluster is laggy [ 516.901321][ T9213] can0: slcan on ttyS3. [ 516.954084][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 517.901884][ T9213] can0 (unregistered): slcan off ttyS3. [ 518.133426][ T9203] kvm: pic: non byte write [ 518.175067][ T9211] ceph: No mds server is up or the cluster is laggy [ 519.756222][ T29] audit: type=1400 audit(1793329398.228:823): avc: denied { getopt } for pid=9231 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 519.842522][ T9232] ceph: No mds server is up or the cluster is laggy [ 519.904577][ T9239] capability: warning: `syz.3.863' uses deprecated v2 capabilities in a way that may be insecure [ 521.230747][ T9256] openvswitch: netlink: IP tunnel dst address not specified [ 521.336850][ T9259] netlink: 32 bytes leftover after parsing attributes in process `syz.2.871'. [ 523.707233][ T9282] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 524.655075][ T9287] jffs2: notice: (9287) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 524.684464][ T29] audit: type=1400 audit(1793329403.158:824): avc: denied { write } for pid=9279 comm="syz.4.878" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 526.451708][ T29] audit: type=1400 audit(1793329404.928:825): avc: denied { getopt } for pid=9310 comm="syz.2.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 527.239891][ T9312] can0: slcan on ttyS3. [ 527.292517][ T5634] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 527.310034][ T9312] can0 (unregistered): slcan off ttyS3. [ 528.650019][ T9320] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 530.719032][ T9335] can0: slcan on ttyS3. [ 530.772017][ T5634] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 530.979830][ T9335] can0 (unregistered): slcan off ttyS3. [ 531.022697][ T9337] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 531.533188][ T9342] kvm: pic: non byte write [ 531.661459][ T9353] netlink: 'syz.2.899': attribute type 1 has an invalid length. [ 531.661479][ T9353] netlink: 96 bytes leftover after parsing attributes in process `syz.2.899'. [ 531.937032][ T988] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 532.140353][ T9355] ceph: No mds server is up or the cluster is laggy [ 532.896855][ T988] usb 3-1: unable to get BOS descriptor or descriptor too short [ 532.896885][ T988] usb 3-1: New USB device found: idVendor=2b73, idProduct=001b, bcdDevice=0.40 [ 532.898314][ T988] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.930818][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.930835][ T988] usb 3-1: Product: syz [ 532.930844][ T988] usb 3-1: Manufacturer: syz [ 532.930852][ T988] usb 3-1: SerialNumber: syz [ 533.035187][ T9362] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 533.191023][ T9353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.191286][ T9353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.599821][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 533.754097][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 533.754175][ T24] usb 1-1: New USB device found: idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 533.755002][ T24] usb 1-1: config 160 has an invalid interface number: 168 but max is 0 [ 533.755046][ T24] usb 1-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 533.755058][ T24] usb 1-1: config 160 has no interface number 0 [ 533.755080][ T24] usb 1-1: config 160 interface 168 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 32 [ 533.755094][ T24] usb 1-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 533.755108][ T24] usb 1-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 533.755121][ T24] usb 1-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 533.755134][ T24] usb 1-1: config 160 interface 168 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 533.755191][ T24] usb 1-1: config 160 interface 168 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 533.755204][ T24] usb 1-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 533.755218][ T24] usb 1-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 533.755232][ T24] usb 1-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 533.755246][ T24] usb 1-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid wMaxPacketSize 0 [ 533.755258][ T24] usb 1-1: config 160 interface 168 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 533.755273][ T24] usb 1-1: config 160 interface 168 has no altsetting 0 [ 533.909984][ T24] usb 1-1: string descriptor 0 read error: -22 [ 533.910100][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.979650][ T9365] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 533.979780][ T9365] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 533.980095][ T9365] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 533.981445][ T24] io_edgeport 1-1:160.168: EPiC device converter detected [ 533.981684][ T24] usb 1-1: detected [ 534.197638][ T9386] netlink: 72 bytes leftover after parsing attributes in process `syz.1.907'. [ 534.223340][ T24] usb 1-1: edge_startup - Error -90 submitting control urb [ 534.223614][ T24] io_edgeport 1-1:160.168: probe with driver io_edgeport failed with error -90 [ 535.323025][ T24] usb 1-1: USB disconnect, device number 11 [ 535.375166][ T9391] can0: slcan on ttyS3. [ 535.433824][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 535.463430][ T988] usb 3-1: unknown interface protocol 0x1, assuming v1 [ 535.463448][ T988] usb 3-1: cannot find UAC_HEADER [ 535.513994][ T9391] can0 (unregistered): slcan off ttyS3. [ 535.654967][ T988] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 535.780505][ T988] usb 3-1: USB disconnect, device number 11 [ 535.816334][ T9404] jffs2: notice: (9404) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 536.635927][ T9406] can0: slcan on ttyS3. [ 536.687922][ T5634] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 536.725800][ T9314] udevd[9314]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.730942][ T9406] can0 (unregistered): slcan off ttyS3. [ 536.778397][ T29] audit: type=1400 audit(1793329415.248:826): avc: denied { write } for pid=9398 comm="syz.2.911" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 538.406249][ T9426] netlink: 'syz.1.921': attribute type 1 has an invalid length. [ 538.406267][ T9426] netlink: 96 bytes leftover after parsing attributes in process `syz.1.921'. [ 539.178222][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 539.449888][ T988] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 539.604744][ T988] usb 2-1: unable to get BOS descriptor or descriptor too short [ 539.604773][ T988] usb 2-1: New USB device found: idVendor=2b73, idProduct=001b, bcdDevice=0.40 [ 539.605520][ T988] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.644856][ T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.644873][ T988] usb 2-1: Product: syz [ 539.644882][ T988] usb 2-1: Manufacturer: syz [ 539.644890][ T988] usb 2-1: SerialNumber: syz [ 539.888996][ T9426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.901563][ T9426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.355369][ T9444] netlink: 80 bytes leftover after parsing attributes in process `syz.3.927'. [ 540.560917][ T29] audit: type=1400 audit(1793329419.038:827): avc: denied { write } for pid=9453 comm="syz.4.932" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 540.722075][ T29] audit: type=1400 audit(1793329419.198:828): avc: denied { append } for pid=9457 comm="syz.4.934" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 540.763071][ T9458] dlm: no locking on control device [ 542.380235][ T9466] jffs2: notice: (9466) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 542.384210][ T988] usb 2-1: unknown interface protocol 0x1, assuming v1 [ 542.384225][ T988] usb 2-1: cannot find UAC_HEADER [ 542.837979][ T29] audit: type=1400 audit(1793329421.308:829): avc: denied { write } for pid=9461 comm="syz.4.936" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 543.716601][ T988] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 543.765033][ T988] usb 2-1: USB disconnect, device number 18 [ 543.902037][ T9314] udevd[9314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 543.951772][ T9482] ceph: No mds server is up or the cluster is laggy [ 544.270966][ T9396] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 545.083005][ T9499] can0: slcan on ttyS3. [ 545.121458][ T9499] can0 (unregistered): slcan off ttyS3. [ 545.123590][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 545.150716][ T9501] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 545.162188][ T9396] usb 5-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 545.163776][ T9396] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.163792][ T9396] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 545.165044][ T9396] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 545.165061][ T9396] usb 5-1: Product: syz [ 545.165070][ T9396] usb 5-1: Manufacturer: syz [ 545.297067][ T29] audit: type=1400 audit(1793329423.768:830): avc: denied { read } for pid=9503 comm="syz.1.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 546.619204][ T9396] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 546.619248][ T9396] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 546.808563][ T9506] ceph: No mds server is up or the cluster is laggy [ 546.824122][ T9396] usb 5-1: USB disconnect, device number 4 [ 547.080712][ T9519] set match dimension is over the limit! [ 548.295583][ T29] audit: type=1400 audit(1793329426.768:831): avc: denied { getopt } for pid=9529 comm="syz.0.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 548.353730][ T29] audit: type=1400 audit(1793329426.828:832): avc: denied { connect } for pid=9534 comm="syz.4.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 548.429348][ T9538] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 549.468785][ T9543] can0: slcan on ttyS3. [ 549.471217][ T5634] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 549.520954][ T5634] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 549.550629][ T9543] can0 (unregistered): slcan off ttyS3. [ 551.074162][ T9549] ceph: No mds server is up or the cluster is laggy [ 553.766923][ T9396] libceph: connect (1)[c::]:6789 error -101 [ 553.767035][ T9396] libceph: mon0 (1)[c::]:6789 connect error [ 553.791559][ T9576] ceph: No mds server is up or the cluster is laggy [ 553.882080][ T29] audit: type=1400 audit(1793329432.358:833): avc: denied { ioctl } for pid=9580 comm="syz.0.974" path="socket:[20843]" dev="sockfs" ino=20843 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 554.233765][ T9590] can0: slcan on ttyS3. [ 554.286513][ T5634] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 554.290073][ T9590] can0 (unregistered): slcan off ttyS3. [ 555.769839][ T9599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.981'. [ 556.007676][ T9608] netlink: 'syz.2.984': attribute type 1 has an invalid length. [ 556.007692][ T9608] netlink: 96 bytes leftover after parsing attributes in process `syz.2.984'. [ 556.120618][ T9610] dlm: no locking on control device [ 556.248062][ T9612] ceph: No mds server is up or the cluster is laggy [ 556.283030][ T988] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 556.392155][ T29] audit: type=1400 audit(1793329434.868:834): avc: denied { setcurrent } for pid=9623 comm="syz.3.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 556.443768][ T29] audit: type=1401 audit(1793329434.918:835): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 556.470332][ T988] usb 3-1: unable to get BOS descriptor or descriptor too short [ 556.470369][ T988] usb 3-1: New USB device found: idVendor=2b73, idProduct=001b, bcdDevice=0.40 [ 556.471672][ T988] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.477107][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.477124][ T988] usb 3-1: Product: syz [ 556.477133][ T988] usb 3-1: Manufacturer: syz [ 556.477141][ T988] usb 3-1: SerialNumber: syz [ 557.033723][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.034033][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.237928][ T9636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.995'. [ 559.315981][ T988] usb 3-1: unknown interface protocol 0x1, assuming v1 [ 559.315998][ T988] usb 3-1: cannot find UAC_HEADER [ 559.794452][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.996'. [ 559.810351][ T29] audit: type=1400 audit(1793329438.288:836): avc: denied { append } for pid=9646 comm="syz.3.998" name="video0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 559.861905][ T988] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 559.914184][ T29] audit: type=1400 audit(1793329438.388:837): avc: denied { nlmsg_read } for pid=9650 comm="syz.1.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 559.916382][ T988] usb 3-1: USB disconnect, device number 12 [ 560.044135][ T9314] udevd[9314]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 561.319750][ T24] libceph: connect (1)[c::]:6789 error -101 [ 561.319865][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 561.328487][ T29] audit: type=1400 audit(1793329439.798:838): avc: denied { ioctl } for pid=9663 comm="syz.4.1003" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 561.373388][ T9659] ceph: No mds server is up or the cluster is laggy [ 561.424289][ T9660] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 561.556202][ T9673] netlink: 'syz.4.1006': attribute type 1 has an invalid length. [ 561.556219][ T9673] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1006'. [ 561.623004][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 561.824120][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 562.368455][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 562.368485][ T24] usb 5-1: New USB device found: idVendor=2b73, idProduct=001b, bcdDevice=0.40 [ 562.612446][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.813131][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.813150][ T24] usb 5-1: Product: syz [ 562.813159][ T24] usb 5-1: Manufacturer: syz [ 562.813167][ T24] usb 5-1: SerialNumber: syz [ 563.043892][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.155682][ T9687] can0: slcan on ttyS3. [ 563.208702][ T5634] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 563.294702][ T9687] can0 (unregistered): slcan off ttyS3. [ 563.329326][ T29] audit: type=1400 audit(1793329441.798:839): avc: denied { read } for pid=9690 comm="syz.2.1013" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 563.365565][ T9673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.365830][ T9673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.498347][ T29] audit: type=1400 audit(1793329441.968:840): avc: denied { ioctl } for pid=9690 comm="syz.2.1013" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 ioctlcmd=0x50009405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 564.740413][ T9696] can0: slcan on ttyS3. [ 564.793141][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 564.812474][ T9696] can0 (unregistered): slcan off ttyS3. [ 564.890739][ T24] usb 5-1: unknown interface protocol 0x1, assuming v1 [ 564.890755][ T24] usb 5-1: cannot find UAC_HEADER [ 565.045719][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 565.078558][ T24] usb 5-1: USB disconnect, device number 5 [ 565.156927][ T9314] udevd[9314]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.720892][ T9711] jffs2: notice: (9711) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 566.924674][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e788. [ 566.924701][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e744. [ 566.924711][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e700. [ 566.924721][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e6bc. [ 566.924731][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e678. [ 566.924740][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e634. [ 566.924750][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e5f0. [ 566.924759][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e5ac. [ 566.924768][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e568. [ 566.924790][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e524. [ 566.924800][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e4e0. [ 566.924809][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e49c. [ 566.924818][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e458. [ 566.924828][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e414. [ 566.924837][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e3d0. [ 566.924847][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e38c. [ 566.924856][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e348. [ 566.924865][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e304. [ 566.924875][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e2c0. [ 566.924884][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e27c. [ 566.924893][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e238. [ 566.924902][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e1f4. [ 566.924912][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e1b0. [ 566.924921][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e16c. [ 566.924930][ T9713] jffs2: notice: (9713) jffs2_get_inode_nodes: Wrong magic bitmask 0x0000 in node header at 0x01e00c. [ 566.924950][ T9713] jffs2: warning: (9713) jffs2_do_read_inode_internal: no data nodes found for ino #2 [ 566.924971][ T9713] jffs2: Returned error for crccheck of ino #2. Expect badness... [ 567.275165][ T9718] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 568.563861][ T9738] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1028'. [ 568.830817][ T9750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1036'. [ 569.207294][ T9752] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb508 instead [ 569.207610][ T9752] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x0980 instead [ 569.207621][ T9752] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x2000 instead [ 569.207630][ T9752] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001548: 0xfeff instead [ 569.214203][ T9752] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 569.214214][ T9752] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 569.314111][ T29] audit: type=1400 audit(1793329447.788:841): avc: denied { setopt } for pid=9754 comm="syz.4.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 570.643255][ T9774] usb usb9: usbfs: process 9774 (syz.2.1046) did not claim interface 0 before use [ 571.040848][ T9775] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb508 instead [ 571.041143][ T9775] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x0980 instead [ 571.041154][ T9775] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x2000 instead [ 571.041162][ T9775] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001548: 0xfeff instead [ 571.047691][ T9775] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 571.047703][ T9775] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 574.282639][ T9809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1058'. [ 574.805369][ T9836] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1069'. [ 574.807084][ T9837] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1070'. [ 574.807114][ T9837] openvswitch: netlink: Missing key (keys=40, expected=100) [ 576.907127][ T9851] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 576.907144][ T9851] overlayfs: missing 'lowerdir' [ 576.942494][ T9855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1076'. [ 577.139941][ T9862] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 577.512705][ T9866] can0: slcan on ttyS3. [ 577.566150][ T5634] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 577.579484][ T9866] can0 (unregistered): slcan off ttyS3. [ 577.604399][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'. [ 577.604415][ T9869] netlink: 5740 bytes leftover after parsing attributes in process `syz.2.1082'. [ 577.604432][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'. [ 578.140739][ T9876] ceph: No mds server is up or the cluster is laggy [ 578.644815][ T9887] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb508 instead [ 578.645124][ T9887] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x0980 instead [ 578.645134][ T9887] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x2000 instead [ 578.645144][ T9887] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001548: 0xfeff instead [ 578.750784][ T9887] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 578.750795][ T9887] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 578.786852][ T29] audit: type=1400 audit(1793329457.258:842): avc: denied { create } for pid=9888 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 578.820882][ T29] audit: type=1400 audit(1793329457.298:843): avc: denied { getopt } for pid=9888 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 578.868210][ T9891] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1091'. [ 579.755872][ T9900] openvswitch: netlink: Message has 1 unknown bytes. [ 579.755894][ T9900] openvswitch: netlink: Actions may not be safe on all matching packets [ 580.287109][ T9905] openvswitch: netlink: ct_state flags ffffffff unsupported [ 580.325174][ T9901] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 580.600259][ T29] audit: type=1400 audit(1793329459.078:844): avc: denied { setopt } for pid=9916 comm="syz.3.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 580.640439][ T9918] can0: slcan on ttyS3. [ 580.695484][ T9918] can0 (unregistered): slcan off ttyS3. [ 580.697674][ T5634] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 580.724779][ T9921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=9921 comm=syz.1.1100 [ 582.345188][ T9928] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 582.353856][ T29] audit: type=1400 audit(1793329460.828:845): avc: denied { write } for pid=9936 comm="syz.0.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 582.392567][ T9940] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1107'. [ 582.444819][ T988] libceph: connect (1)[c::]:6789 error -101 [ 582.444925][ T988] libceph: mon0 (1)[c::]:6789 connect error [ 582.467361][ T9934] ceph: No mds server is up or the cluster is laggy [ 582.504358][ T9946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1108'. [ 582.575401][ T9951] netlink: 'syz.0.1109': attribute type 1 has an invalid length. [ 583.529335][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 583.852960][ T24] usb 4-1: New USB device found: idVendor=15a4, idProduct=9035, bcdDevice=2.00 [ 583.855022][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.855052][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 583.855075][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.076807][ T9969] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 584.155990][ T24] usb 4-1: dvb_usb_v2: 2nd usb_bulk_msg() failed=-22 [ 584.156050][ T24] dvb_usb_af9035 4-1:1.0: probe with driver dvb_usb_af9035 failed with error -22 [ 584.230050][ T29] audit: type=1400 audit(1793329462.708:846): avc: denied { bind } for pid=9973 comm="syz.1.1119" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 584.230592][ T29] audit: type=1400 audit(1793329462.708:847): avc: denied { name_bind } for pid=9973 comm="syz.1.1119" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 584.230621][ T29] audit: type=1400 audit(1793329462.708:848): avc: denied { node_bind } for pid=9973 comm="syz.1.1119" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 584.397255][ T24] usb 4-1: USB disconnect, device number 16 [ 584.497687][ T9982] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1122'. [ 584.613773][ T9985] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1123'. [ 585.895492][ T9994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1125'. [ 586.072121][ T29] audit: type=1400 audit(1793329464.548:849): avc: denied { create } for pid=9998 comm="syz.4.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 586.114047][ T29] audit: type=1400 audit(1793329464.588:850): avc: denied { connect } for pid=9998 comm="syz.4.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 586.217835][T10004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1130'. [ 586.592349][T10022] can0: slcan on ttyS3. [ 586.645518][ T5634] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 586.670088][T10022] can0 (unregistered): slcan off ttyS3. [ 587.533131][ T5634] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 587.647587][T10037] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1141'. [ 587.919344][T10040] can0: slcan on ttyS3. [ 587.973537][T10040] can0 (unregistered): slcan off ttyS3. [ 587.976042][ T5634] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 588.112078][T10044] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 589.436217][T10062] can0: slcan on ttyS3. [ 589.490891][T10062] can0 (unregistered): slcan off ttyS3. [ 589.492392][ T5634] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 590.770917][T10069] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 591.239163][ T5788] libceph: connect (1)[c::]:6789 error -101 [ 591.239293][ T5788] libceph: mon0 (1)[c::]:6789 connect error [ 591.256849][T10079] ceph: No mds server is up or the cluster is laggy [ 592.049750][ T988] libceph: connect (1)[c::]:6789 error -101 [ 592.049909][ T988] libceph: mon0 (1)[c::]:6789 connect error [ 592.976036][T10091] can0: slcan on ttyS3. [ 593.028463][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 593.055166][T10091] can0 (unregistered): slcan off ttyS3. [ 593.151263][T10096] netlink: 'syz.4.1163': attribute type 9 has an invalid length. [ 593.449189][ T988] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 593.612240][ T988] usb 2-1: New USB device found: idVendor=0867, idProduct=9812, bcdDevice=1.00 [ 593.693509][ T988] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 593.693531][ T988] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 593.693544][ T988] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 593.693558][ T988] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 593.693571][ T988] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 594.313779][ T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.313798][ T988] usb 2-1: Product: syz [ 594.313807][ T988] usb 2-1: Manufacturer: syz [ 594.313815][ T988] usb 2-1: SerialNumber: syz [ 594.704576][T10098] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 594.704651][T10098] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 594.704705][T10098] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 594.704772][T10098] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 595.021516][ T29] audit: type=1400 audit(1793329473.498:851): avc: denied { setopt } for pid=10114 comm="syz.3.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 595.024632][T10117] netlink: 'syz.4.1170': attribute type 8 has an invalid length. [ 595.096069][T10107] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 595.176440][ T988] comedi comedi4: unable to reset configuration [ 595.176460][ T988] dt9812 2-1:1.0: driver 'dt9812' failed to auto-configure device. [ 595.209289][ T988] dt9812 2-1:1.0: probe with driver dt9812 failed with error -71 [ 595.402440][ T988] usb 2-1: USB disconnect, device number 19 [ 595.682270][T10145] netlink: 'syz.0.1184': attribute type 10 has an invalid length. [ 595.736504][T10145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 595.752774][T10145] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 595.780398][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 597.590153][ T29] audit: type=1400 audit(1793329476.068:852): avc: denied { accept } for pid=10188 comm="syz.0.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 597.943201][T10197] ubi: bad wear-leveling threshold 813332851 [ 597.972950][T10198] program syz.0.1208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 597.990998][T10193] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 598.015520][ T29] audit: type=1400 audit(1793329476.488:853): avc: denied { read append } for pid=10199 comm="syz.4.1209" name="cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 598.017324][ T29] audit: type=1400 audit(1793329476.488:854): avc: denied { open } for pid=10199 comm="syz.4.1209" path="/dev/cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 598.162280][ T29] audit: type=1400 audit(1793329476.638:855): avc: denied { append } for pid=10201 comm="syz.1.1210" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 598.229453][T10204] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 598.444054][ T29] audit: type=1400 audit(1793329476.918:856): avc: denied { write } for pid=10214 comm="syz.1.1217" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 598.858640][T10221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb508 instead [ 598.858940][T10221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x0980 instead [ 598.885492][T10221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x2000 instead [ 598.885508][T10221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001548: 0xfeff instead [ 598.983933][T10221] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 598.983944][T10221] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 599.018435][T10224] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1219'. [ 600.212108][ T24] libceph: connect (1)[c::]:6789 error -101 [ 600.212211][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 600.320494][ T29] audit: type=1400 audit(1793329478.798:857): avc: denied { create } for pid=10240 comm="syz.4.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 600.409977][ T29] audit: type=1400 audit(1793329478.888:858): avc: denied { write } for pid=10240 comm="syz.4.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 600.410722][T10228] ceph: No mds server is up or the cluster is laggy [ 600.555184][T10244] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 601.426633][T10271] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb508 instead [ 601.426972][T10271] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x0980 instead [ 601.426983][T10271] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x2000 instead [ 601.426993][T10271] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001548: 0xfeff instead [ 601.433576][T10271] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 601.433589][T10271] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 601.629008][ T29] audit: type=1400 audit(1793329480.098:859): avc: denied { write } for pid=10280 comm="syz.2.1240" name="cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 601.695285][ T29] audit: type=1400 audit(1793329480.168:860): avc: denied { setopt } for pid=10281 comm="syz.3.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 602.212930][ T5723] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 602.251686][T10292] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 602.991578][ T5723] usb 1-1: New USB device found: idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 603.348662][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 603.348682][ T5723] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 603.348702][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 603.387562][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.387579][ T5723] usb 1-1: Product: syz [ 603.387587][ T5723] usb 1-1: Manufacturer: syz [ 603.387596][ T5723] usb 1-1: SerialNumber: syz [ 603.418749][ T5723] usb 1-1: config 0 descriptor?? [ 603.425239][ T5723] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 603.921836][ T5723] usb 1-1: USB disconnect, device number 12 [ 603.955188][T10306] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb508 instead [ 603.955531][T10306] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x0980 instead [ 603.955544][T10306] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x2000 instead [ 603.955553][T10306] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001548: 0xfeff instead [ 603.962218][T10306] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 603.962230][T10306] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 604.174424][ T29] audit: type=1400 audit(1793329482.648:861): avc: denied { append } for pid=10313 comm="syz.3.1252" name="sg0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 604.220081][T10314] program syz.3.1252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 604.542496][T10316] can0: slcan on ttyS3. [ 604.595563][ T5634] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 604.601419][T10316] can0 (unregistered): slcan off ttyS3. [ 604.660319][T10321] CacheFiles: Empty directory specified [ 604.804045][T10325] fuse: Bad value for 'fd' [ 604.816952][ T29] audit: type=1400 audit(1793329483.288:862): avc: denied { read } for pid=10327 comm="syz.4.1258" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 604.840746][ T29] audit: type=1400 audit(1793329483.318:863): avc: denied { open } for pid=10327 comm="syz.4.1258" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 604.885611][ T29] audit: type=1400 audit(1793329483.358:864): avc: denied { write } for pid=10327 comm="syz.4.1258" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 605.230701][ T29] audit: type=1400 audit(1793329483.708:865): avc: denied { accept } for pid=10337 comm="syz.3.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 605.953409][T10364] can0: slcan on ttyS3. [ 606.007054][ T5634] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 606.439302][T10364] can0 (unregistered): slcan off ttyS3. [ 607.425854][T10378] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1280'. [ 607.704450][T10386] netlink: 868 bytes leftover after parsing attributes in process `syz.3.1283'. [ 607.852416][T10387] can0: slcan on ttyS3. [ 607.972841][T10398] netlink: 'syz.0.1288': attribute type 11 has an invalid length. [ 607.972859][T10398] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1288'. [ 608.011439][T10387] can0 (unregistered): slcan off ttyS3. [ 608.061098][ T5634] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 608.246858][ T29] audit: type=1400 audit(1793329486.718:866): avc: denied { ioctl } for pid=10401 comm="syz.1.1290" path="socket:[23658]" dev="sockfs" ino=23658 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 609.509782][T10410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1293'. [ 610.985893][T10423] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1297'. [ 611.980350][ T988] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 612.197652][ T988] usb 3-1: New USB device found: idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 612.225728][ T988] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.225757][ T988] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 612.225773][ T988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 612.225788][ T988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 612.225801][ T988] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 612.362308][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 612.362326][ T988] usb 3-1: Product: syz [ 612.362335][ T988] usb 3-1: Manufacturer: syz [ 612.362344][ T988] usb 3-1: SerialNumber: syz [ 612.419620][ T988] usb 3-1: config 0 descriptor?? [ 612.497913][T10432] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 612.647318][ T988] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 612.647336][ T988] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 612.875002][ T988] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 612.875032][ T988] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 612.875183][ T988] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 612.915870][ T988] usb 3-1: USB disconnect, device number 13 [ 614.406654][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1304'. [ 614.406674][T10441] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1304'. [ 614.406684][T10441] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1304'. [ 614.563512][T10445] netlink: 'syz.4.1306': attribute type 1 has an invalid length. [ 614.563528][T10445] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1306'. [ 614.608602][ T29] audit: type=1400 audit(1793329493.078:867): avc: denied { bind } for pid=10447 comm="syz.0.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 614.608656][T10450] Unsupported ieee802154 address type: 0 [ 614.682363][T10453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1309'. [ 614.995019][T10457] can0: slcan on ttyS3. [ 615.030677][T10457] can0 (unregistered): slcan off ttyS3. [ 615.032801][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 615.067382][T10304] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 615.766182][T10304] usb 5-1: unable to get BOS descriptor or descriptor too short [ 615.766219][T10304] usb 5-1: New USB device found: idVendor=2b73, idProduct=001b, bcdDevice=0.40 [ 615.825928][T10304] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.519901][T10304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.519932][T10304] usb 5-1: Product: syz [ 616.519941][T10304] usb 5-1: Manufacturer: syz [ 616.519950][T10304] usb 5-1: SerialNumber: syz [ 616.812162][T10464] can0: slcan on ttyS3. [ 616.824911][T10445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.825175][T10445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.970544][T10464] can0 (unregistered): slcan off ttyS3. [ 616.987784][ T5634] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 617.200532][T10469] netlink: 'syz.2.1314': attribute type 1 has an invalid length. [ 618.421812][T10304] usb 5-1: unknown interface protocol 0x1, assuming v1 [ 618.421829][T10304] usb 5-1: cannot find UAC_HEADER [ 618.542823][T10484] netlink: 'syz.4.1319': attribute type 3 has an invalid length. [ 618.578774][T10304] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 618.627980][T10304] usb 5-1: USB disconnect, device number 6 [ 618.702053][T10310] udevd[10310]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.223499][T10498] can0: slcan on ttyS3. [ 619.260207][T10498] can0 (unregistered): slcan off ttyS3. [ 619.262745][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 620.488228][T10507] ceph: No mds server is up or the cluster is laggy [ 621.771598][ T5634] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 621.831787][T10536] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1341'. [ 622.288823][T10542] ceph: No mds server is up or the cluster is laggy [ 622.336668][ T29] audit: type=1400 audit(1793329500.818:868): avc: denied { setopt } for pid=10550 comm="syz.1.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 622.687399][ T29] audit: type=1400 audit(1793329501.158:869): avc: denied { load_policy } for pid=10564 comm="syz.1.1353" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 622.728401][T10567] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 622.728599][T10567] SELinux: failed to load policy [ 622.831154][T10572] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1357'. [ 623.972275][T10585] netlink: 'syz.3.1362': attribute type 1 has an invalid length. [ 624.947219][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.754707][T10589] can0: slcan on ttyS3. [ 625.806984][ T5634] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 625.841971][T10589] can0 (unregistered): slcan off ttyS3. [ 625.949875][ T988] libceph: connect (1)[c::]:6789 error -101 [ 625.949992][ T988] libceph: mon0 (1)[c::]:6789 connect error [ 625.978472][T10595] ceph: No mds server is up or the cluster is laggy [ 626.533210][T10614] openvswitch: netlink: Message has 4 unknown bytes. [ 626.533231][T10614] openvswitch: netlink: Actions may not be safe on all matching packets [ 628.076892][T10627] ceph: No mds server is up or the cluster is laggy [ 628.335385][T10651] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb508 instead [ 628.335684][T10651] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x0980 instead [ 628.335694][T10651] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x2000 instead [ 628.335702][T10651] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001548: 0xfeff instead [ 628.342819][T10651] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 628.342830][T10651] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 628.472585][T10656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1389'. [ 628.489220][T10650] ceph: No mds server is up or the cluster is laggy [ 628.638439][T10659] can0: slcan on ttyS3. [ 628.691499][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 628.710179][T10659] can0 (unregistered): slcan off ttyS3. [ 628.968527][T10673] ceph: No mds server is up or the cluster is laggy [ 630.986337][T10690] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1403'. [ 632.248019][T10703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1408'. [ 632.353844][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1409'. [ 632.353874][T10706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1409'. [ 633.240353][T10304] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 633.570019][T10304] usb 5-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 633.570777][T10304] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 633.570792][T10304] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.570802][T10304] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 633.570825][T10304] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.570841][T10304] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.572015][T10304] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 633.572028][T10304] usb 5-1: Product: syz [ 633.572037][T10304] usb 5-1: Manufacturer: syz [ 633.663339][T10304] cdc_wdm 5-1:1.0: skipping garbage [ 633.663352][T10304] cdc_wdm 5-1:1.0: skipping garbage [ 633.681103][T10304] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 633.681116][T10304] cdc_wdm 5-1:1.0: Unknown control protocol [ 633.915546][T10709] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 633.915649][ T29] audit: type=1400 audit(1793329512.388:870): avc: denied { read write } for pid=10708 comm="syz.4.1411" name="cdc-wdm0" dev="devtmpfs" ino=2995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 633.915680][ T29] audit: type=1400 audit(1793329512.388:871): avc: denied { open } for pid=10708 comm="syz.4.1411" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 633.981591][T10304] usb 5-1: USB disconnect, device number 7 [ 634.137433][T10720] can0: slcan on ttyS3. [ 634.265997][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 634.291686][T10721] can0 (unregistered): slcan off ttyS3. [ 634.587648][T10730] Bluetooth: hci0: unexpected subevent 0x0a length: 3 < 30 [ 636.646850][T10730] Bluetooth: hci0: command 0x0c1a tx timeout [ 638.720406][T10730] Bluetooth: hci0: command 0x0c1a tx timeout [ 639.513722][ T29] audit: type=1400 audit(1793329517.988:872): avc: denied { write } for pid=10725 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.554416][T10752] ceph: No mds server is up or the cluster is laggy [ 639.578440][T10752] overlayfs: failed to resolve './file1/file0': -2 [ 639.845924][T10762] netlink: 'syz.0.1422': attribute type 32 has an invalid length. [ 639.901109][ T29] audit: type=1400 audit(1793329518.378:873): avc: denied { write } for pid=10760 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.948208][T10780] can0: slcan on ttyS3. [ 642.001045][ T5634] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 642.479774][T10780] can0 (unregistered): slcan off ttyS3. [ 642.541129][T10776] ceph: No mds server is up or the cluster is laggy [ 642.580406][T10779] overlayfs: overlapping lowerdir path [ 642.915893][T10792] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 643.183465][ T29] audit: type=1400 audit(1793329521.658:874): avc: denied { write } for pid=10767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.497239][ T29] audit: type=1400 audit(1793329521.968:875): avc: denied { write } for pid=10822 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.531143][ T29] audit: type=1400 audit(1793329522.008:876): avc: denied { write } for pid=10829 comm="syz.4.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 646.309011][T10852] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 646.332309][ T29] audit: type=1400 audit(1793329524.808:877): avc: denied { write } for pid=10853 comm="syz.2.1448" name="file0" dev="tmpfs" ino=1596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 646.332623][ T29] audit: type=1400 audit(1793329524.808:878): avc: denied { open } for pid=10853 comm="syz.2.1448" path="/272/file0" dev="tmpfs" ino=1596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 646.440922][ T988] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 646.691273][ T988] usb 2-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 646.976542][ T988] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.285928][ T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.285946][ T988] usb 2-1: Product: syz [ 647.285955][ T988] usb 2-1: Manufacturer: syz [ 647.285964][ T988] usb 2-1: SerialNumber: syz [ 647.800479][ T24] libceph: connect (1)[c::]:6789 error -101 [ 647.809003][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 647.823368][T10858] ceph: No mds server is up or the cluster is laggy [ 647.984935][ T988] usb 2-1: Invalid number of CPorts: 0 [ 647.984964][ T988] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -22 [ 649.277803][ T24] usb 2-1: USB disconnect, device number 20 [ 649.301624][ T29] audit: type=1400 audit(1793329527.778:879): avc: denied { module_load } for pid=10874 comm="syz.2.1456" path="/!selinuxw" dev="mqueue" ino=25088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 649.301965][T10878] kernel read not supported for file /!selinuxw (pid: 10878 comm: syz.2.1456) [ 650.655229][T10879] : entered promiscuous mode [ 650.809043][T10892] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 651.922617][ T24] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 652.362250][ T24] usb 1-1: New USB device found: idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 652.792081][ T24] usb 1-1: config index 0 descriptor too short (expected 27632, got 27) [ 652.792100][ T24] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 652.792112][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.792123][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 652.792135][ T24] usb 1-1: config 1 has no interface number 0 [ 652.792159][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.226483][T10908] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1468'. [ 653.246037][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 653.465150][ T24] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 653.465336][ T24] snd_usb_pod 1-1:1.1: invalid control EP [ 653.465344][ T24] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 653.465467][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 653.465786][ T24] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 653.530110][T10918] netlink: 'syz.2.1473': attribute type 10 has an invalid length. [ 653.530128][T10918] openvswitch: netlink: Flow key attr not present in new flow. [ 653.711415][ T24] usb 1-1: USB disconnect, device number 13 [ 653.864730][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1480'. [ 653.927522][T10938] netlink: 'syz.2.1482': attribute type 11 has an invalid length. [ 654.002960][ T29] audit: type=1400 audit(1793329532.478:880): avc: denied { accept } for pid=10939 comm="syz.3.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 654.068505][ T29] audit: type=1400 audit(1793329532.538:881): avc: denied { read write } for pid=10943 comm="syz.2.1485" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 654.068539][ T29] audit: type=1400 audit(1793329532.538:882): avc: denied { open } for pid=10943 comm="syz.2.1485" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 654.298580][T10946] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 654.556468][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1494'. [ 654.702484][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1499'. [ 655.821079][T10993] can0: slcan on ttyS3. [ 655.860281][T10993] can0 (unregistered): slcan off ttyS3. [ 655.863151][ T5634] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 655.937378][ T5634] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 657.457915][T11003] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb508 instead [ 657.458249][T11003] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x0980 instead [ 657.458260][T11003] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x2000 instead [ 657.458270][T11003] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001548: 0xfeff instead [ 657.569782][T11003] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 657.569793][T11003] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 657.601816][T11005] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 658.867368][T11009] ceph: No mds server is up or the cluster is laggy [ 658.883774][T11012] overlayfs: failed to resolve './file1/file0': -2 [ 658.980298][T11025] netlink: 'syz.4.1516': attribute type 4 has an invalid length. [ 659.500269][T11027] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb508 instead [ 659.500578][T11027] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x0980 instead [ 659.500588][T11027] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x2000 instead [ 659.500596][T11027] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001548: 0xfeff instead [ 659.507134][T11027] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 659.507146][T11027] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 659.663416][ T29] audit: type=1400 audit(1793329538.138:883): avc: denied { write } for pid=11040 comm="syz.3.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 660.207590][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 660.544230][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 660.626994][T11047] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb508 instead [ 660.627290][T11047] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x0980 instead [ 660.627300][T11047] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x2000 instead [ 660.627309][T11047] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001548: 0xfeff instead [ 660.634060][T11047] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 660.634071][T11047] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 660.665284][ T24] usb 5-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 660.954108][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.954130][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.954152][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.152825][ T24] usb 5-1: config 0 descriptor?? [ 661.340182][ T24] hub 5-1:0.0: USB hub found [ 661.558219][T11056] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 661.580529][ T24] hub 5-1:0.0: 1 port detected [ 661.642698][T11062] SELinux: Context is not valid (left unmapped). [ 661.652471][ T29] audit: type=1400 audit(1793329540.128:884): avc: denied { relabelto } for pid=11060 comm="syz.3.1530" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 661.657466][ T29] audit: type=1400 audit(1793329540.128:885): avc: denied { associate } for pid=11060 comm="syz.3.1530" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1849 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 661.751432][ T29] audit: type=1400 audit(1793329540.228:886): avc: denied { unlink } for pid=5618 comm="syz-executor" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 661.795452][ T24] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 661.822030][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 661.822107][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 661.847331][ T24] usb 5-1: USB disconnect, device number 8 [ 662.318755][T11080] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb508 instead [ 662.339020][T11076] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 662.348870][T11080] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x0980 instead [ 662.348886][T11080] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x2000 instead [ 662.348896][T11080] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001548: 0xfeff instead [ 662.422144][T11080] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 662.422156][T11080] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 662.496827][T11079] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 662.647406][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1542'. [ 662.647435][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1542'. [ 662.865461][T11108] random: crng reseeded on system resumption [ 662.906938][ T29] audit: type=1400 audit(1793329541.378:887): avc: denied { ioctl } for pid=11106 comm="syz.1.1549" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x80083313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 663.386320][T11117] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb508 instead [ 663.386617][T11117] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x0980 instead [ 663.386626][T11117] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x2000 instead [ 663.386635][T11117] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001548: 0xfeff instead [ 663.394073][T11117] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 663.394085][T11117] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 663.438567][ T29] audit: type=1400 audit(1793329541.918:888): avc: denied { setopt } for pid=11120 comm="syz.1.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 663.592870][T11131] random: crng reseeded on system resumption [ 663.630518][T11132] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 663.768275][T11139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1562'. [ 663.866437][T11144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1564'. [ 666.956254][T11171] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb508 instead [ 666.956551][T11171] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x0980 instead [ 666.956561][T11171] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x2000 instead [ 666.956570][T11171] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001548: 0xfeff instead [ 666.964817][T11171] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 666.964830][T11171] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 667.127839][T11179] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 667.157672][ T29] audit: type=1400 audit(1793329545.628:889): avc: denied { ioctl } for pid=11186 comm="syz.2.1581" path="socket:[26122]" dev="sockfs" ino=26122 ioctlcmd=0xc0305615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 667.245435][ T29] audit: type=1400 audit(1793329545.718:890): avc: denied { bind } for pid=11189 comm="syz.0.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 667.619570][T11198] can0: slcan on ttyS3. [ 667.731315][ T5634] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 667.800544][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 669.424692][T11198] can0 (unregistered): slcan off ttyS3. [ 669.444133][T11211] ceph: No mds server is up or the cluster is laggy [ 669.474558][T11212] overlayfs: overlapping lowerdir path [ 671.253667][T11242] netlink: 'syz.1.1599': attribute type 2 has an invalid length. [ 671.253684][T11242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1599'. [ 671.347957][ T5634] Bluetooth: hci1: connection err: -111 [ 671.456431][ T29] audit: type=1400 audit(1793329549.928:891): avc: denied { write } for pid=11220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 671.736670][ T29] audit: type=1400 audit(1793329550.208:892): avc: denied { write } for pid=11253 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.765050][T11264] can0: slcan on ttyS3. [ 672.817034][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 673.531576][T11264] can0 (unregistered): slcan off ttyS3. [ 674.103910][ T29] audit: type=1400 audit(1793329552.578:893): avc: denied { setopt } for pid=11276 comm="syz.4.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 674.387693][T11292] can0: slcan on ttyS3. [ 674.433375][ T29] audit: type=1400 audit(1793329552.908:894): avc: denied { accept } for pid=11287 comm="syz.3.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 674.460131][ T5634] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 674.479353][T11292] can0 (unregistered): slcan off ttyS3. [ 674.712700][ T29] audit: type=1400 audit(1793329553.188:895): avc: denied { write } for pid=11263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.154408][ T29] audit: type=1400 audit(1793329553.628:896): avc: denied { write } for pid=11304 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.097837][ T5634] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 676.338431][T11306] can0: slcan on ttyS3. [ 676.448936][T11316] can0 (unregistered): slcan off ttyS3. [ 676.458277][ T5634] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 679.073264][T11346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1629'. [ 679.175323][T11354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.639351][T10304] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 680.667831][T11372] can0: slcan on ttyS3. [ 680.723655][ T5634] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 680.740015][T11372] can0 (unregistered): slcan off ttyS3. [ 680.789897][T10304] usb 4-1: New USB device found: idVendor=0596, idProduct=0001, bcdDevice=5.f5 [ 680.790737][T10304] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 680.790753][T10304] usb 4-1: config 0 has no interface number 0 [ 680.790775][T10304] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 680.790790][T10304] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 680.812971][T10304] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 680.812990][T10304] usb 4-1: Manufacturer: syz [ 680.812998][T10304] usb 4-1: SerialNumber: syz [ 680.873447][T10304] usb 4-1: config 0 descriptor?? [ 681.652368][T10304] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 681.652516][T10304] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 681.808856][T10304] usb 4-1: USB disconnect, device number 17 [ 682.229339][ T24] libceph: connect (1)[c::]:6789 error -101 [ 682.229454][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 682.256131][T11377] ceph: No mds server is up or the cluster is laggy [ 682.258399][T11378] overlayfs: failed to resolve './file1/file0': -2 [ 682.803112][ T29] audit: type=1400 audit(1793329561.278:897): avc: denied { write } for pid=11392 comm="syz.2.1644" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 682.838172][ T24] kernel read not supported for file /mdstat (pid: 24 comm: kworker/1:0) [ 682.860165][T11391] can0: slcan on ttyS3. [ 682.996685][ T5634] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 683.039463][T11396] can0 (unregistered): slcan off ttyS3. [ 683.440659][T10304] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 683.467435][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1650'. [ 683.467483][T11414] IPv6: Can't replace route, no match found [ 683.606585][T10304] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 683.608068][T10304] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.608095][T10304] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 683.608108][T10304] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 683.608121][T10304] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.608143][T10304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.318719][T11431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1655'. [ 685.418260][ T29] audit: type=1400 audit(1793329563.888:898): avc: denied { write } for pid=11403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.448409][T10304] gud 1-1:1.0: Failed to add properties (error=-71) [ 685.448431][T10304] gud 1-1:1.0: probe with driver gud failed with error -71 [ 685.525647][T10304] usb 1-1: USB disconnect, device number 14 [ 685.767103][ T29] audit: type=1400 audit(1793329564.238:899): avc: denied { write } for pid=11440 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.819713][ T29] audit: type=1400 audit(1793329564.298:900): avc: denied { read } for pid=11442 comm="syz.4.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 685.920583][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.063110][T11454] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 686.138753][T11454] can0: slcan on ttyS3. [ 686.261330][ T29] audit: type=1400 audit(1793329564.738:901): avc: denied { read write } for pid=11458 comm="syz.0.1662" name="md0" dev="tmpfs" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 686.261363][ T29] audit: type=1400 audit(1793329564.738:902): avc: denied { open } for pid=11458 comm="syz.0.1662" path="/352/md0" dev="tmpfs" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 686.353556][ T5634] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 686.366637][T11454] can0 (unregistered): slcan off ttyS3. [ 686.400990][T11467] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0 [ 686.401267][T11468] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 1 [ 686.401674][T11469] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 2 [ 686.404831][T11470] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 3 [ 687.692000][ T29] audit: type=1400 audit(1793329566.168:903): avc: denied { bind } for pid=11478 comm="syz.2.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 687.694926][T11471] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 687.868197][T11487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1669'. [ 688.534244][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 688.729403][ T24] usb 5-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40 [ 688.857057][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.857780][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 688.959866][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.959884][ T24] usb 5-1: Product: syz [ 688.959892][ T24] usb 5-1: Manufacturer: syz [ 688.959900][ T24] usb 5-1: SerialNumber: syz [ 689.010349][ T24] usb 5-1: 0:2 : does not exist [ 689.033887][ T29] audit: type=1400 audit(1793329567.508:904): avc: denied { write } for pid=11449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.338372][T10304] usb 5-1: USB disconnect, device number 9 [ 689.412471][ T29] audit: type=1400 audit(1793329567.888:905): avc: denied { write } for pid=11503 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.574836][T11508] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1674'. [ 689.591376][T11508] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1674'. [ 690.063117][ T29] audit: type=1400 audit(1793329568.538:906): avc: denied { connect } for pid=11522 comm="syz.0.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 690.540552][T11527] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb508 instead [ 690.540902][T11527] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x0980 instead [ 690.540913][T11527] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x2000 instead [ 690.540928][T11527] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001548: 0xfeff instead [ 690.547419][T11527] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 690.547433][T11527] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 690.668419][ T29] audit: type=1400 audit(1793329569.138:907): avc: denied { ioctl } for pid=11532 comm="syz.3.1686" path="socket:[27100]" dev="sockfs" ino=27100 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 691.456105][ T29] audit: type=1400 audit(1793329569.928:908): avc: denied { remount } for pid=11536 comm="syz.3.1688" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 692.255711][T11558] raw_sendmsg: syz.3.1695 forgot to set AF_INET. Fix it! [ 692.322661][T11541] device-mapper: table: 248:2: start=1 not aligned to h/w logical block size 4096 of ram3 [ 692.322684][T11541] device-mapper: core: Cannot calculate initial queue limits [ 692.322691][T11541] device-mapper: ioctl: unable to set up device queue for new table. [ 692.669186][T10304] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 692.699442][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 693.399925][T10304] usb 4-1: Using ep0 maxpacket: 32 [ 693.405511][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 693.416841][ T24] usb 3-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 693.416982][T10304] usb 4-1: New USB device found: idVendor=1e7d, idProduct=2d5a, bcdDevice=0.00 [ 693.417807][T10304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.417824][T10304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.417845][T10304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.420311][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.420339][ T24] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.420356][ T24] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.420368][ T24] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 693.420403][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 693.420422][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.441938][T10304] usb 4-1: config 0 descriptor?? [ 693.495872][ T24] usb 3-1: config 0 descriptor?? [ 694.219246][ T24] logitech-djreceiver 0003:046D:C53A.0001: unknown main item tag 0x0 [ 694.219280][ T24] logitech-djreceiver 0003:046D:C53A.0001: unknown main item tag 0x0 [ 694.219296][ T24] logitech-djreceiver 0003:046D:C53A.0001: unknown main item tag 0x0 [ 694.219310][ T24] logitech-djreceiver 0003:046D:C53A.0001: unknown main item tag 0x0 [ 694.219325][ T24] logitech-djreceiver 0003:046D:C53A.0001: unknown main item tag 0x0 [ 694.219339][ T24] logitech-djreceiver 0003:046D:C53A.0001: unknown main item tag 0x0 [ 694.219354][ T24] logitech-djreceiver 0003:046D:C53A.0001: unknown main item tag 0x0 [ 694.219368][ T24] logitech-djreceiver 0003:046D:C53A.0001: unknown main item tag 0x0 [ 694.219382][ T24] logitech-djreceiver 0003:046D:C53A.0001: unknown main item tag 0x0 [ 694.219397][ T24] logitech-djreceiver 0003:046D:C53A.0001: unknown main item tag 0x0 [ 694.329778][T10304] savu 0003:1E7D:2D5A.0002: unbalanced collection at end of report description [ 694.330116][T10304] savu 0003:1E7D:2D5A.0002: parse failed [ 694.330153][T10304] savu 0003:1E7D:2D5A.0002: probe with driver savu failed with error -22 [ 694.413989][ T5723] usb 3-1: USB disconnect, device number 14 [ 694.449922][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 694.549040][T10304] usb 4-1: USB disconnect, device number 18 [ 694.602137][T11586] device-mapper: ioctl: Target spec extends beyond end of parameters [ 694.602148][T11586] device-mapper: ioctl: unable to find target [ 694.612597][ T24] usb 5-1: New USB device found: idVendor=04d8, idProduct=c002, bcdDevice=0.00 [ 694.636001][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.636020][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.636042][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.034847][T11596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1710'. [ 695.107533][ T24] hid-picolcd 0003:04D8:C002.0003: unbalanced collection at end of report description [ 695.127566][ T24] hid-picolcd 0003:04D8:C002.0003: device report parse failed [ 695.127627][ T24] hid-picolcd 0003:04D8:C002.0003: probe with driver hid-picolcd failed with error -22 [ 695.257742][ T29] audit: type=1400 audit(1793329573.728:909): avc: denied { write } for pid=11602 comm="syz.3.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 695.281668][T11603] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.351792][ T24] usb 5-1: USB disconnect, device number 10 [ 695.430186][T11605] device-mapper: table: 248:4: ram2 too small for target: start=128, len=12288, dev_size=8192 [ 695.430206][T11605] device-mapper: core: Cannot calculate initial queue limits [ 695.430211][T11605] device-mapper: ioctl: unable to set up device queue for new table. [ 695.840286][ T29] audit: type=1400 audit(1793329574.318:910): avc: denied { connect } for pid=11627 comm="syz.1.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 695.949167][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 696.099276][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 696.100412][ T24] usb 1-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 696.102827][ T24] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 696.102844][ T24] usb 1-1: config 0 has no interface number 0 [ 696.104346][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.104361][ T24] usb 1-1: Product: syz [ 696.104369][ T24] usb 1-1: Manufacturer: syz [ 696.104377][ T24] usb 1-1: SerialNumber: syz [ 696.107679][ T24] usb 1-1: config 0 descriptor?? [ 696.178161][ T24] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 696.259282][T10304] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 696.299483][ T5723] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 696.335052][ T29] audit: type=1400 audit(1793329574.808:911): avc: denied { wake_alarm } for pid=11645 comm="syz.3.1730" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 696.397103][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 696.409146][T10304] usb 5-1: Using ep0 maxpacket: 16 [ 696.416992][T10304] usb 5-1: New USB device found: idVendor=056a, idProduct=5200, bcdDevice=0.00 [ 696.429601][T10304] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.429622][T10304] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.429636][T10304] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 696.429651][T10304] usb 5-1: config 0 interface 0 has no altsetting 0 [ 696.429670][T10304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.464808][T10304] usb 5-1: config 0 descriptor?? [ 696.465483][ T5723] usb 2-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00 [ 696.480026][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 696.528718][ T5723] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.528747][ T5723] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 696.528771][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.802330][ T5723] rtsx_usb 2-1:1.0: probe with driver rtsx_usb failed with error -71 [ 696.818870][ T5723] usb 2-1: USB disconnect, device number 21 [ 696.828729][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 696.843311][ T44] usb 1-1: USB disconnect, device number 15 [ 696.875849][ T44] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 696.898856][ T44] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 696.915133][ T44] quatech2 1-1:0.51: device disconnected [ 696.932342][T10304] wacom 0003:056A:5200.0004: Unknown device_type for 'HID 056a:5200'. Ignoring. [ 697.079581][ T988] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 697.098561][ T44] usb 5-1: USB disconnect, device number 11 [ 697.105432][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 697.229160][ T988] usb 3-1: Using ep0 maxpacket: 32 [ 697.229690][ T988] usb 3-1: New USB device found: idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 697.230563][ T988] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 697.232406][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.232420][ T988] usb 3-1: Product: syz [ 697.232428][ T988] usb 3-1: Manufacturer: syz [ 697.232437][ T988] usb 3-1: SerialNumber: syz [ 697.234512][ T988] usb 3-1: config 0 descriptor?? [ 697.237721][ T988] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 697.301659][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 697.305079][ T24] usb 4-1: New USB device found: idVendor=1e7d, idProduct=2db4, bcdDevice=0.00 [ 697.306906][ T988] dvb-usb: bulk message failed: -22 (2/0) [ 697.308041][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.308060][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.308082][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.344027][ T24] usb 4-1: config 0 descriptor?? [ 697.399052][ T988] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 697.399785][ T988] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 697.399816][ T988] usb 3-1: media controller created [ 697.463771][T11650] dvb-usb: bulk message failed: -22 (4/0) [ 697.463791][T11650] cxusb: i2c read failed [ 697.506887][ T988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 697.558897][ T988] usb 3-1: selecting invalid altsetting 7 [ 697.558917][ T988] cxusb: set interface failed [ 697.558924][ T988] dvb-usb: bulk message failed: -22 (1/0) [ 697.588161][T11656] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 697.670236][ T988] DVB: Unable to find symbol lgdt330x_attach() [ 697.670250][ T988] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 697.703092][T11659] tmpfs: strict_encoding option without encoding is forbidden [ 697.811494][ T988] rc_core: IR keymap rc-dvico-portable not found [ 697.811507][ T988] Registered IR keymap rc-empty [ 697.863202][ T988] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 697.869446][ T988] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input14 [ 697.881572][ T24] konepure 0003:1E7D:2DB4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 697.943605][ T29] audit: type=1400 audit(1793329576.418:912): avc: denied { read } for pid=4971 comm="acpid" name="event4" dev="devtmpfs" ino=3050 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 697.943637][ T29] audit: type=1400 audit(1793329576.418:913): avc: denied { open } for pid=4971 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3050 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 697.943660][ T29] audit: type=1400 audit(1793329576.418:914): avc: denied { ioctl } for pid=4971 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3050 ioctlcmd=0x80604520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 698.075798][ T988] dvb-usb: schedule remote query interval to 100 msecs. [ 698.075816][ T988] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 698.131643][ T988] usb 3-1: USB disconnect, device number 15 [ 698.178708][ T24] usb 4-1: USB disconnect, device number 19 [ 698.291351][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 698.291369][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 698.291377][T11673] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 698.346117][T11667] fido_id[11667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 698.465105][ T988] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 698.852567][T11677] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb508 instead [ 698.852869][T11677] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x0980 instead [ 698.852878][T11677] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x2000 instead [ 698.852887][T11677] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001548: 0xfeff instead [ 698.859467][T11677] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 698.859478][T11677] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 698.928349][T11683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1745'. [ 700.262957][T11692] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 700.846858][ T988] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 701.229204][ T988] usb 1-1: New USB device found: idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 701.664944][ T988] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 701.664964][ T988] usb 1-1: Product: syz [ 701.664973][ T988] usb 1-1: Manufacturer: syz [ 701.664981][ T988] usb 1-1: SerialNumber: syz [ 701.790361][ T5634] Bluetooth: Frame is too long (len 10, expected len 4) [ 701.845583][ T988] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 701.886156][T11710] ceph: No mds server is up or the cluster is laggy [ 702.149021][ T29] audit: type=1800 audit(1793329580.618:915): pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1762" name="bus" dev="tmpfs" ino=2098 res=0 errno=-22 [ 702.218304][T11733] Bluetooth: MGMT ver 1.23 [ 702.306738][ T988] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 702.357095][ T988] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 702.629924][ T988] usb 1-1: USB disconnect, device number 16 [ 702.634071][T11734] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb508 instead [ 702.634387][T11734] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x0980 instead [ 702.634397][T11734] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x2000 instead [ 702.634406][T11734] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001548: 0xfeff instead [ 702.641074][T11734] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 702.641086][T11734] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 702.641481][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout [ 703.917121][T11736] can0: slcan on ttyS3. [ 704.037958][T11745] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 704.719163][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout [ 704.833497][ T44] libceph: connect (1)[c::]:6789 error -101 [ 704.833612][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 705.319918][T11757] ceph: No mds server is up or the cluster is laggy [ 705.582071][ T44] libceph: connect (1)[c::]:6789 error -101 [ 705.582202][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 706.080510][T11767] overlayfs: overlapping lowerdir path [ 706.091863][ T44] libceph: connect (1)[c::]:6789 error -101 [ 706.102254][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 706.796180][T11789] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb508 instead [ 706.796488][T11789] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x0980 instead [ 706.796501][T11789] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x2000 instead [ 706.796510][T11789] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001548: 0xfeff instead [ 706.803275][T11789] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 706.803288][T11789] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 706.913367][T11794] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb508 instead [ 706.913664][T11794] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x0980 instead [ 706.913674][T11794] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x2000 instead [ 706.913683][T11794] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001548: 0xfeff instead [ 707.030092][ T29] audit: type=1400 audit(1793329585.508:916): avc: denied { write } for pid=11752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.095269][T11794] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 707.095281][T11794] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 707.139249][ T29] audit: type=1400 audit(1793329585.618:917): avc: denied { read } for pid=11800 comm="syz.0.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 707.253419][T11731] can0 (unregistered): slcan off ttyS3. [ 707.384254][ T29] audit: type=1400 audit(1793329585.848:918): avc: denied { write } for pid=11803 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.557248][ T29] audit: type=1400 audit(1793329586.028:919): avc: denied { ioctl } for pid=11811 comm="syz.0.1784" path="/384/file2" dev="tmpfs" ino=2188 ioctlcmd=0x4c03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 708.838048][T11821] can0: slcan on ttyS3. [ 708.882928][T11821] can0 (unregistered): slcan off ttyS3. [ 708.886029][T10730] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 709.187983][T11829] can0: slcan on ttyS3. [ 709.245015][T10730] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 710.292100][T11829] can0 (unregistered): slcan off ttyS3. [ 710.514658][T11826] ceph: No mds server is up or the cluster is laggy [ 710.528325][T11828] overlayfs: overlapping lowerdir path [ 710.587152][ T29] audit: type=1400 audit(1793329589.058:920): avc: denied { write } for pid=11839 comm="syz.3.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 710.928574][ T29] audit: type=1400 audit(1793329589.398:921): avc: denied { write } for pid=11815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.052449][T11858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1796'. [ 711.268534][ T29] audit: type=1400 audit(1793329589.738:922): avc: denied { write } for pid=11863 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.477622][ T29] audit: type=1400 audit(1793329589.948:923): avc: denied { shutdown } for pid=11872 comm="syz.4.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 711.500980][ T44] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 711.659870][ T44] usb 3-1: New USB device found: idVendor=05ac, idProduct=027a, bcdDevice=0.00 [ 711.676301][ T44] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.676327][ T44] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 711.676343][ T44] usb 3-1: config 0 interface 0 has no altsetting 0 [ 711.676368][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.729283][ T44] usb 3-1: config 0 descriptor?? [ 712.138701][T11895] usb usb1: usbfs: process 11895 (syz.1.1811) did not claim interface 0 before use [ 712.181415][ T44] apple 0003:05AC:027A.0006: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 712.187408][ T44] input: HID 05ac:027a as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:027A.0006/input/input15 [ 713.075841][T11902] can0: slcan on ttyS3. [ 713.132954][T10730] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 713.134813][ T44] apple 0003:05AC:027A.0006: input,hidraw0: USB HID v0.00 Joystick [HID 05ac:027a] on usb-dummy_hcd.2-1/input0 [ 713.176726][T11902] can0 (unregistered): slcan off ttyS3. [ 713.221562][ T44] usb 3-1: USB disconnect, device number 16 [ 713.438678][T11906] fido_id[11906]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 714.030573][ T44] libceph: connect (1)[c::]:6789 error -101 [ 714.030697][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 714.081312][T11914] ceph: No mds server is up or the cluster is laggy [ 715.477866][T11924] ALSA: mixer_oss: invalid OSS volume 'VOLUmE' [ 715.958341][ T44] libceph: connect (1)[c::]:6789 error -101 [ 715.958456][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 715.991529][T11927] ceph: No mds server is up or the cluster is laggy [ 715.992352][T11930] overlayfs: failed to resolve './file1/file0': -2 [ 717.199228][ T988] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 717.244292][T11956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1833'. [ 717.349506][ T988] usb 3-1: Using ep0 maxpacket: 32 [ 717.357791][ T988] usb 3-1: New USB device found: idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 717.369932][ T988] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 717.369951][ T988] usb 3-1: config 0 has no interface number 0 [ 717.369972][ T988] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 717.369985][ T988] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 717.370020][ T988] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 717.370035][ T988] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 717.370049][ T988] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 717.455210][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.455227][ T988] usb 3-1: Product: syz [ 717.455236][ T988] usb 3-1: Manufacturer: syz [ 717.455245][ T988] usb 3-1: SerialNumber: syz [ 717.482290][ T988] usb 3-1: config 0 descriptor?? [ 717.487777][T11947] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 717.511242][ T988] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input16 [ 717.931010][ T44] usb 3-1: USB disconnect, device number 17 [ 717.982737][T10730] Bluetooth: hci1: unexpected event for opcode 0x041b [ 717.991264][T11966] device-mapper: multipath: bio-based multipath doesn't allow hardware handler args [ 717.991587][T11966] device-mapper: multipath round-robin: repeat_count > 1 is deprecated, using 1 instead [ 718.315010][T11967] ceph: No mds server is up or the cluster is laggy [ 718.452346][ T29] audit: type=1400 audit(1793329596.928:924): avc: denied { read } for pid=11976 comm="syz.1.1840" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 718.452380][ T29] audit: type=1400 audit(1793329596.928:925): avc: denied { open } for pid=11976 comm="syz.1.1840" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 718.511120][ T29] audit: type=1400 audit(1793329596.988:926): avc: denied { write } for pid=11976 comm="syz.1.1840" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 718.682806][T11987] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1844'. [ 720.148187][ T29] audit: type=1400 audit(1793329598.618:927): avc: denied { connect } for pid=12015 comm="syz.0.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 720.206862][ T29] audit: type=1400 audit(1793329598.678:928): avc: denied { write } for pid=12015 comm="syz.0.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 721.286878][T12023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1858'. [ 721.546695][T12032] xt_hashlimit: size too large, truncated to 1048576 [ 722.352948][T10730] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 722.352998][T10730] Bluetooth: hci1: Injecting HCI hardware error event [ 722.356415][T10730] Bluetooth: hci1: hardware error 0x00 [ 722.797058][T12037] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 722.810749][T12037] ================================================================== [ 722.810763][T12037] BUG: KASAN: null-ptr-deref in dm_kcopyd_client_destroy+0xa5/0x420 [ 722.810782][T12037] Read of size 4 at addr 0000000000000174 by task syz.4.1863/12037 [ 722.810792][T12037] [ 722.810805][T12037] CPU: 1 UID: 0 PID: 12037 Comm: syz.4.1863 Tainted: G L syzkaller #0 PREEMPT(full) [ 722.810822][T12037] Tainted: [L]=SOFTLOCKUP [ 722.810827][T12037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 722.810839][T12037] Call Trace: [ 722.810843][T12037] [ 722.810850][T12037] dump_stack_lvl+0x100/0x190 [ 722.810869][T12037] kasan_report+0xdf/0x1c0 [ 722.810884][T12037] ? dm_kcopyd_client_destroy+0xa5/0x420 [ 722.810897][T12037] kasan_check_range+0x10f/0x1e0 [ 722.810910][T12037] dm_kcopyd_client_destroy+0xa5/0x420 [ 722.810921][T12037] ? kfree+0x22b/0x6d0 [ 722.810934][T12037] ? __pfx_dm_kcopyd_client_destroy+0x10/0x10 [ 722.810946][T12037] ? vfree+0x12f/0x850 [ 722.810955][T12037] ? mempool_exit+0x120/0x1c0 [ 722.810965][T12037] ? cache_ctr+0x1d73/0x3a80 [ 722.810978][T12037] ? __vmalloc_node_noprof+0xad/0xf0 [ 722.810990][T12037] __destroy+0x191/0x3c0 [ 722.811001][T12037] cache_ctr+0x2f7c/0x3a80 [ 722.811017][T12037] ? __pfx_cache_ctr+0x10/0x10 [ 722.811029][T12037] ? kfree+0x1e5/0x6d0 [ 722.811041][T12037] ? skip_spaces+0xee/0x130 [ 722.811054][T12037] ? dm_split_args+0x441/0x570 [ 722.811067][T12037] dm_table_add_target+0x58b/0xee0 [ 722.811078][T12037] ? __pfx_dm_table_add_target+0x10/0x10 [ 722.811090][T12037] ? dm_table_create+0x2d3/0x3d0 [ 722.811101][T12037] table_load+0x3b9/0x7b0 [ 722.811117][T12037] ? __pfx_table_load+0x10/0x10 [ 722.811131][T12037] ? __might_fault+0xc5/0x140 [ 722.811143][T12037] ? __might_fault+0xc5/0x140 [ 722.811157][T12037] ctl_ioctl+0x4d2/0xcc0 [ 722.811170][T12037] ? __pfx_table_load+0x10/0x10 [ 722.811185][T12037] ? __pfx_ctl_ioctl+0x10/0x10 [ 722.811213][T12037] ? selinux_file_ioctl+0x1e0/0x290 [ 722.811234][T12037] dm_ctl_ioctl+0x22/0x30 [ 722.811248][T12037] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 722.811263][T12037] __x64_sys_ioctl+0x18e/0x210 [ 722.811282][T12037] do_syscall_64+0x123/0x790 [ 722.811294][T12037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.811306][T12037] RIP: 0033:0x7f10aaf9f559 [ 722.811316][T12037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.811327][T12037] RSP: 002b:00007f10abea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 722.811343][T12037] RAX: ffffffffffffffda RBX: 00007f10ab225fa0 RCX: 00007f10aaf9f559 [ 722.811351][T12037] RDX: 00002000000004c0 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 722.811359][T12037] RBP: 00007f10ab036b20 R08: 0000000000000000 R09: 0000000000000000 [ 722.811366][T12037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 722.811373][T12037] R13: 00007f10ab226038 R14: 00007f10ab225fa0 R15: 00007ffd23361ea8 [ 722.811384][T12037] [ 722.811388][T12037] ================================================================== [ 722.811398][T12037] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 723.124851][T12037] CPU: 1 UID: 0 PID: 12037 Comm: syz.4.1863 Tainted: G L syzkaller #0 PREEMPT(full) [ 723.135849][T12037] Tainted: [L]=SOFTLOCKUP [ 723.140162][T12037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 723.150194][T12037] Call Trace: [ 723.153450][T12037] [ 723.156359][T12037] dump_stack_lvl+0x100/0x190 [ 723.161019][T12037] vpanic+0x2dc/0x6f8 [ 723.164974][T12037] panic+0xd1/0xe0 [ 723.168668][T12037] ? __pfx_panic+0x10/0x10 [ 723.173057][T12037] ? dm_kcopyd_client_destroy+0xa5/0x420 [ 723.178665][T12037] check_panic_on_warn.cold+0x19/0x34 [ 723.184023][T12037] end_report.part.0+0x3a/0x90 [ 723.188769][T12037] kasan_report.cold+0xe/0x18 [ 723.193442][T12037] ? dm_kcopyd_client_destroy+0xa5/0x420 [ 723.199068][T12037] kasan_check_range+0x10f/0x1e0 [ 723.203981][T12037] dm_kcopyd_client_destroy+0xa5/0x420 [ 723.209415][T12037] ? kfree+0x22b/0x6d0 [ 723.213458][T12037] ? __pfx_dm_kcopyd_client_destroy+0x10/0x10 [ 723.219498][T12037] ? vfree+0x12f/0x850 [ 723.223539][T12037] ? mempool_exit+0x120/0x1c0 [ 723.228196][T12037] ? cache_ctr+0x1d73/0x3a80 [ 723.232763][T12037] ? __vmalloc_node_noprof+0xad/0xf0 [ 723.238021][T12037] __destroy+0x191/0x3c0 [ 723.242235][T12037] cache_ctr+0x2f7c/0x3a80 [ 723.246643][T12037] ? __pfx_cache_ctr+0x10/0x10 [ 723.251381][T12037] ? kfree+0x1e5/0x6d0 [ 723.255429][T12037] ? skip_spaces+0xee/0x130 [ 723.259907][T12037] ? dm_split_args+0x441/0x570 [ 723.264644][T12037] dm_table_add_target+0x58b/0xee0 [ 723.269742][T12037] ? __pfx_dm_table_add_target+0x10/0x10 [ 723.275346][T12037] ? dm_table_create+0x2d3/0x3d0 [ 723.280257][T12037] table_load+0x3b9/0x7b0 [ 723.284588][T12037] ? __pfx_table_load+0x10/0x10 [ 723.289424][T12037] ? __might_fault+0xc5/0x140 [ 723.294091][T12037] ? __might_fault+0xc5/0x140 [ 723.298742][T12037] ctl_ioctl+0x4d2/0xcc0 [ 723.302961][T12037] ? __pfx_table_load+0x10/0x10 [ 723.307788][T12037] ? __pfx_ctl_ioctl+0x10/0x10 [ 723.312535][T12037] ? selinux_file_ioctl+0x1e0/0x290 [ 723.317726][T12037] dm_ctl_ioctl+0x22/0x30 [ 723.322033][T12037] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 723.327033][T12037] __x64_sys_ioctl+0x18e/0x210 [ 723.331794][T12037] do_syscall_64+0x123/0x790 [ 723.336361][T12037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.342230][T12037] RIP: 0033:0x7f10aaf9f559 [ 723.346622][T12037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.366200][T12037] RSP: 002b:00007f10abea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 723.374601][T12037] RAX: ffffffffffffffda RBX: 00007f10ab225fa0 RCX: 00007f10aaf9f559 [ 723.382546][T12037] RDX: 00002000000004c0 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 723.390513][T12037] RBP: 00007f10ab036b20 R08: 0000000000000000 R09: 0000000000000000 [ 723.398483][T12037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.406446][T12037] R13: 00007f10ab226038 R14: 00007f10ab225fa0 R15: 00007ffd23361ea8 [ 723.414416][T12037] [ 723.417678][T12037] Kernel Offset: disabled [ 723.422010][T12037] Rebooting in 86400 seconds..