last executing test programs: 5m31.905558333s ago: executing program 4 (id=3222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2a00}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m31.656611487s ago: executing program 4 (id=3227): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m31.581074044s ago: executing program 4 (id=3228): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 5m31.350541091s ago: executing program 4 (id=3231): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 5m31.261145433s ago: executing program 4 (id=3233): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\xff\xff\x00\x00\x00\x00\x00\x81\xaa2\xe2\xbc\x01\x13\xb72\x0f\x99\x17\xeb\x18\xc0\xb3}\x8aX\x96d\xf5\xc3\x80\x99Y\x00\x00\x00\x00\x00\x00\x00\x00va\x83\xcc\xb7\xcb\a\xdf\xa6-\xb6>\xb6\xbaGW\x03\x9d\x14\x90\xd1\xdfM\x00\x9f\x05\xd4C\xb8\xdc\xdbO\x05\xc3\xea\xff\x16K\xac\x11\x81#\x01\xd6\xd3\xda\xc6MO\x1b\x89\xa2SdJJ\xb1\xbd\x9a\xbc\xf3\xa1\x16\x0e~;\xab\xbbS(\xde\xb9_\xb4\xaa\xf8\xb2\xa4\xfe\xa6\xebh\xda\x9e\xdbh/\xf6\xcbd\x8a\x1b\a\x8f\x18e\xc2\x03\x00\xbd\x81W#\xb5Nx\x88h\xe9w\x04\r\x80\x84\x00\xaa\xec\x9d)\xd9\xed\xc6*\x13\x87\"\xe4\x17\xd5[V\xd4\xc7I#\x81\bt\x88\x87v*\xd7\xdfK\xb8\xe5w\aO\xae}\x834yX\tAo3\x85\t\n\x1d\x17\x88\x84\x80Uu\xa7A\x1fF\xe7\xab\xf1\xd3\x18\xb9\x1f\xde:_b\x99t\x02\x85\xb8\xfc\xf6U!\x92\xdb\xfdD\xd0\xc4-\xfd\x12\xf7o\x8c\xd22X\x04))]9\x15I\x85\x02O\x1d*\xc7<\xad\xcf\xb6\x9f\x05\xf58L`\x1d\x8c\xac', 0x5) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x0) 5m30.469927733s ago: executing program 4 (id=3246): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000100), 0x8, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 5m30.290323404s ago: executing program 32 (id=3246): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000100), 0x8, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 51.005772323s ago: executing program 0 (id=6748): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000006c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000180)="cb753c3230145fd6a230d6add0362870579065bf3b4fcddd79a7749c549d86c3994ce3741ff73409ffa80c93aae2c48b7d7bdc98d980c9213b605f", 0x3b}, {0x0}], 0x2) 50.510493707s ago: executing program 0 (id=6756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 50.319511551s ago: executing program 0 (id=6759): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) 49.941756365s ago: executing program 0 (id=6763): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2b5b093, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 49.753673934s ago: executing program 0 (id=6765): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 49.245910572s ago: executing program 0 (id=6769): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r2, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x40010) 49.000324944s ago: executing program 33 (id=6769): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r2, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x40010) 38.863067113s ago: executing program 6 (id=6771): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1300000065ffff"], 0x13) 31.934481098s ago: executing program 6 (id=6771): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1300000065ffff"], 0x13) 23.612131185s ago: executing program 6 (id=6771): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1300000065ffff"], 0x13) 15.807732993s ago: executing program 6 (id=6771): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1300000065ffff"], 0x13) 7.719883878s ago: executing program 6 (id=6771): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1300000065ffff"], 0x13) 3.236246788s ago: executing program 3 (id=7198): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="74000500", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf252500000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a000070000000800a0000100000008009f000600000008009f002acc2a21080035000500000004000a0024006e8004000200040001000400020004000200040001000400020004000100040001"], 0x74}, 0x1, 0x0, 0x0, 0x24040850}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 3.199636585s ago: executing program 5 (id=7199): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3}) 3.013698758s ago: executing program 5 (id=7202): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) 2.910426337s ago: executing program 2 (id=7204): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_mtu(r2, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) 2.818300551s ago: executing program 2 (id=7205): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) 2.763765708s ago: executing program 5 (id=7206): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xfffff000, 0x2000, &(0x7f00007f3000/0x2000)=nil}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x12712, 0x0, 0x1000, 0x2000, &(0x7f0000002000/0x2000)=nil}) 2.453393056s ago: executing program 2 (id=7209): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x1) unshare(0x20040400) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x0, r1}) 2.411631619s ago: executing program 5 (id=7210): syz_ublk_setup_io_uring(0x74ac, &(0x7f00000000c0)={0x0, 0x6786, 0x2000, 0x0, 0x80e3}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000002c0)) open$dir(0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x7, &(0x7f00000002c0)="d10d0000", 0x4) 2.27247613s ago: executing program 5 (id=7211): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, 0x0) 2.249324746s ago: executing program 2 (id=7212): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 2.016370299s ago: executing program 2 (id=7214): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9, 0x0, 0xd}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x800, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) 1.865907278s ago: executing program 2 (id=7215): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) madvise(&(0x7f0000201000/0x2000)=nil, 0x2000, 0x9) 1.776157638s ago: executing program 1 (id=7216): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0xf000, 0x0) 1.576654141s ago: executing program 1 (id=7217): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 1.317368858s ago: executing program 1 (id=7218): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c02, 0x1313}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000c0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x884) 1.019511026s ago: executing program 5 (id=7219): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 909.267444ms ago: executing program 3 (id=7220): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000094000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) 737.958453ms ago: executing program 3 (id=7221): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x80000000}]}, 0x58}, 0x1, 0x7}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 540.569644ms ago: executing program 1 (id=7222): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x8cff}}, './file1\x00'}) 466.584299ms ago: executing program 3 (id=7223): r0 = openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 312.668785ms ago: executing program 1 (id=7224): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x2c, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 200.569059ms ago: executing program 3 (id=7225): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x4, 0x80801) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r1}) 53.948527ms ago: executing program 3 (id=7226): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.controllers\x00', 0x5000000, 0x0) read$usbfs(r2, &(0x7f0000000d80)=""/4096, 0x1000) 0s ago: executing program 1 (id=7227): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) kernel console output (not intermixed with test programs): ioctl 4018620d 0 returned -22 [ 493.538488][T20414] xt_hashlimit: size too large, truncated to 1048576 [ 493.567742][ T11] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 493.740177][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 493.751324][ T11] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 493.771104][ T11] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 493.781920][ T11] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 493.792463][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 493.830176][ T11] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 493.845122][ T11] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 493.864353][ T11] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 493.873887][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.875436][T20422] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6216'. [ 493.905823][ T11] usb 4-1: config 0 descriptor?? [ 493.906238][T20422] openvswitch: netlink: Message has 512 unknown bytes. [ 494.129617][ T11] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 494.300273][T13631] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 494.329442][ T11] usb 4-1: USB disconnect, device number 70 [ 494.357874][ T11] usblp0: removed [ 494.463667][T13631] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 494.503802][T13631] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.531486][T13631] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 494.542618][T13631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.554656][T13631] usb 6-1: config 0 descriptor?? [ 494.984246][T13631] kovaplus 0003:1E7D:2D50.004A: unknown main item tag 0x0 [ 495.003092][T13631] kovaplus 0003:1E7D:2D50.004A: unknown main item tag 0x0 [ 495.027481][T13631] kovaplus 0003:1E7D:2D50.004A: unknown main item tag 0x0 [ 495.044281][T13631] kovaplus 0003:1E7D:2D50.004A: unknown main item tag 0x0 [ 495.051971][T13631] kovaplus 0003:1E7D:2D50.004A: unknown main item tag 0x0 [ 495.059207][T13631] kovaplus 0003:1E7D:2D50.004A: unknown main item tag 0x0 [ 495.069492][T13631] kovaplus 0003:1E7D:2D50.004A: unknown main item tag 0x0 [ 495.077048][T13631] kovaplus 0003:1E7D:2D50.004A: unknown main item tag 0x0 [ 495.093385][T13631] kovaplus 0003:1E7D:2D50.004A: unknown main item tag 0x0 [ 495.109196][T13631] kovaplus 0003:1E7D:2D50.004A: unknown main item tag 0x0 [ 495.142892][T13631] kovaplus 0003:1E7D:2D50.004A: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 495.476284][T13631] kovaplus 0003:1E7D:2D50.004A: couldn't init struct kovaplus_device [ 495.511014][T13631] kovaplus 0003:1E7D:2D50.004A: couldn't install mouse [ 495.571359][T13631] kovaplus 0003:1E7D:2D50.004A: probe with driver kovaplus failed with error -71 [ 495.623614][T13631] usb 6-1: USB disconnect, device number 44 [ 496.168652][T20461] lo speed is unknown, defaulting to 1000 [ 496.257048][T20483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.728771][T20461] lo speed is unknown, defaulting to 1000 [ 496.760995][ T42] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 496.939610][ T42] usb 6-1: unable to get BOS descriptor or descriptor too short [ 496.970606][ T42] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 496.997850][ T42] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 497.015957][ T42] usb 6-1: string descriptor 0 read error: -22 [ 497.030760][ T42] usb 6-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 497.050463][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.196669][T20505] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 497.240667][T20505] CPU: 1 UID: 0 PID: 20505 Comm: syz.1.6249 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.240701][T20505] Tainted: [L]=SOFTLOCKUP [ 497.240708][T20505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 497.240727][T20505] Call Trace: [ 497.240735][T20505] [ 497.240744][T20505] dump_stack_lvl+0x100/0x190 [ 497.240774][T20505] sysfs_warn_dup.cold+0x1c/0x28 [ 497.240805][T20505] sysfs_create_dir_ns+0x24b/0x2b0 [ 497.240837][T20505] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 497.240867][T20505] ? find_held_lock+0x2b/0x80 [ 497.240898][T20505] ? kobject_add_internal+0x25f/0x930 [ 497.240923][T20505] ? kobject_add_internal+0x25f/0x930 [ 497.240949][T20505] ? class_dir_child_ns_type+0xd/0x60 [ 497.240974][T20505] kobject_add_internal+0x2c8/0x930 [ 497.241001][T20505] kobject_add+0x16a/0x1e0 [ 497.241022][T20505] ? __pfx_kobject_add+0x10/0x10 [ 497.241045][T20505] ? get_device_parent+0x1b3/0x4c0 [ 497.241070][T20505] ? kobject_put+0xb9/0x640 [ 497.241097][T20505] device_add+0x294/0x1970 [ 497.241124][T20505] ? lockdep_init_map_type+0x5c/0x250 [ 497.241151][T20505] ? __pfx_device_add+0x10/0x10 [ 497.241178][T20505] ? lockdep_init_map_type+0x5c/0x250 [ 497.241204][T20505] ? __init_waitqueue_head+0xca/0x150 [ 497.241240][T20505] tty_register_device_attr+0x388/0x7f0 [ 497.241265][T20505] ? lockdep_init_map_type+0x5c/0x250 [ 497.241299][T20505] ? __pfx_tty_register_device_attr+0x10/0x10 [ 497.241331][T20505] ? tty_port_init+0x156/0x1c0 [ 497.241355][T20505] gsm_activate_mux+0x155/0x2a0 [ 497.241379][T20505] gsmld_ioctl+0xbbc/0x15c0 [ 497.241415][T20505] ? __pfx_gsmld_ioctl+0x10/0x10 [ 497.241446][T20505] ? __ldsem_down_read_nested+0xf3/0x890 [ 497.241486][T20505] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 497.241525][T20505] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 497.241554][T20505] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 497.241589][T20505] ? __pfx_gsmld_ioctl+0x10/0x10 [ 497.241614][T20505] tty_ioctl+0x11b4/0x1640 [ 497.241639][T20505] ? __pfx_tty_ioctl+0x10/0x10 [ 497.241662][T20505] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 497.241703][T20505] ? __fget_files+0x215/0x3d0 [ 497.241738][T20505] ? hook_file_ioctl_common+0x140/0x440 [ 497.241780][T20505] ? selinux_file_ioctl+0x13b/0x290 [ 497.241810][T20505] ? selinux_file_ioctl+0xb6/0x290 [ 497.241842][T20505] ? __pfx_tty_ioctl+0x10/0x10 [ 497.241867][T20505] __x64_sys_ioctl+0x18e/0x210 [ 497.241897][T20505] do_syscall_64+0x115/0x870 [ 497.241927][T20505] ? clear_bhb_loop+0x40/0x90 [ 497.241953][T20505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.241976][T20505] RIP: 0033:0x7f4cf719de59 [ 497.242001][T20505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.242023][T20505] RSP: 002b:00007f4cf7fdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.242045][T20505] RAX: ffffffffffffffda RBX: 00007f4cf7426090 RCX: 00007f4cf719de59 [ 497.242060][T20505] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 497.242074][T20505] RBP: 00007f4cf7233e6f R08: 0000000000000000 R09: 0000000000000000 [ 497.242088][T20505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.242100][T20505] R13: 00007f4cf7426128 R14: 00007f4cf7426090 R15: 00007fff22202768 [ 497.242126][T20505] [ 497.600377][T20505] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 497.603285][T20461] could not set up IPv6 listen sock [ 498.059114][ T42] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 498.084889][ T42] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 498.101086][ T42] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 498.111002][ T42] usb 6-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 498.273752][ T42] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 498.319016][ T42] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 498.385308][ T42] usb 6-1: USB disconnect, device number 45 [ 498.510883][T20522] serio: Serial port ptm1 [ 499.023399][ T5595] udevd[5595]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.509219][T20539] SELinux: invalid class [ 499.579748][T20539] SELinux: failed to load policy [ 499.843411][T20553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6271'. [ 500.520252][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 500.621736][ T5776] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 500.792744][ T5776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 500.817967][ T5776] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 500.843996][ T5776] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 500.853538][ T5776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.865103][ T5776] usb 6-1: config 0 descriptor?? [ 501.025222][T20610] Failed to initialize the IGMP autojoin socket (err -2) [ 501.172365][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.283295][ T5776] hid_parser_main: 222 callbacks suppressed [ 501.283311][ T5776] aquacomputer_d5next 0003:0C70:F00B.004B: unknown main item tag 0x0 [ 501.299686][ T5776] aquacomputer_d5next 0003:0C70:F00B.004B: unknown main item tag 0x0 [ 501.312780][ T5776] aquacomputer_d5next 0003:0C70:F00B.004B: unknown main item tag 0x0 [ 501.324403][ T5776] aquacomputer_d5next 0003:0C70:F00B.004B: unknown main item tag 0x0 [ 501.339211][ T5776] aquacomputer_d5next 0003:0C70:F00B.004B: unknown main item tag 0x0 [ 501.348425][ T5776] aquacomputer_d5next 0003:0C70:F00B.004B: unknown main item tag 0x0 [ 501.356689][ T5776] aquacomputer_d5next 0003:0C70:F00B.004B: unknown main item tag 0x0 [ 501.366109][ T5776] aquacomputer_d5next 0003:0C70:F00B.004B: unknown main item tag 0x0 [ 501.374331][ T5776] aquacomputer_d5next 0003:0C70:F00B.004B: unknown main item tag 0x0 [ 501.383338][ T5776] aquacomputer_d5next 0003:0C70:F00B.004B: unknown main item tag 0x0 [ 501.396834][ T5776] aquacomputer_d5next 0003:0C70:F00B.004B: hidraw0: USB HID v0.20 Device [HID 0c70:f00b] on usb-dummy_hcd.5-1/input0 [ 501.511635][ T5776] usb 6-1: USB disconnect, device number 46 [ 501.711073][ T42] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 501.885136][ T42] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 501.896408][ T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.910365][ T42] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 501.919712][ T42] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.933465][ T42] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 501.943122][ T42] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 501.951238][ T42] usb 2-1: Product: syz [ 501.955579][ T42] usb 2-1: Manufacturer: syz [ 501.984287][ T42] cdc_wdm 2-1:1.0: skipping garbage [ 502.000118][ T42] cdc_wdm 2-1:1.0: skipping garbage [ 502.005255][T20629] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 502.015859][ T42] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 502.030864][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 502.030880][ T29] audit: type=1400 audit(1783170154.801:1648): avc: denied { search } for pid=20628 comm="syz.3.6305" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 502.070479][T20629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 502.074132][ T42] cdc_wdm 2-1:1.0: Unknown control protocol [ 502.092473][T20629] audit: audit_lost=73 audit_rate_limit=0 audit_backlog_limit=64 [ 502.109712][ T29] audit: type=1400 audit(1783170154.801:1649): avc: denied { search } for pid=20628 comm="syz.3.6305" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 502.113355][T20629] audit: backlog limit exceeded [ 502.152401][T20629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 502.161064][T20629] audit: audit_lost=74 audit_rate_limit=0 audit_backlog_limit=64 [ 502.169002][T20629] audit: backlog limit exceeded [ 502.174481][ T29] audit: type=1400 audit(1783170154.801:1650): avc: denied { search } for pid=20628 comm="syz.3.6305" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 502.175884][T20629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 502.710221][ T11] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 502.870192][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 502.881715][ T11] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 502.893720][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.904020][ T11] usb 4-1: config 0 descriptor?? [ 503.122393][ T11] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 503.134079][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 503.144596][ T11] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 503.152954][ T11] usb 4-1: media controller created [ 503.176879][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 503.332343][ T11] az6027: usb out operation failed. (-71) [ 503.339723][ T11] az6027: usb out operation failed. (-71) [ 503.347227][ T11] stb0899_attach: Driver disabled by Kconfig [ 503.353644][ T11] az6027: no front-end attached [ 503.353644][ T11] [ 503.361348][ T11] az6027: usb out operation failed. (-71) [ 503.367271][ T11] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 503.382428][ T11] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input55 [ 503.417089][ T11] dvb-usb: schedule remote query interval to 400 msecs. [ 503.437822][ T11] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 503.468516][ T11] usb 4-1: USB disconnect, device number 71 [ 503.555134][ T11] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 503.611332][T20650] netlink: 116 bytes leftover after parsing attributes in process `syz.5.6314'. [ 503.920279][ T5718] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 504.092562][ T5718] usb 6-1: Using ep0 maxpacket: 16 [ 504.104832][ T5718] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.127551][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 504.153032][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 504.182488][ T5718] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 504.196640][ T5718] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 504.212734][ T5718] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 504.222579][ T5718] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 504.230690][ T5718] usb 6-1: Manufacturer: syz [ 504.248740][ T5718] usb 6-1: config 0 descriptor?? [ 504.451203][ T5710] usb 2-1: USB disconnect, device number 57 [ 504.484487][T20663] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 504.601942][ T5718] rc_core: IR keymap rc-hauppauge not found [ 504.616825][ T5718] Registered IR keymap rc-empty [ 504.631489][ T5718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 504.645362][T20669] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6323'. [ 504.670184][ T5718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 504.700864][ T5718] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 504.730398][ T5718] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input56 [ 504.773496][ T5718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 504.801706][ T5718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 504.840370][ T5718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 504.870278][ T5718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 504.890332][ T5718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 504.921778][ T5718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 504.960494][ T5718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 504.990671][ T5718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 505.020734][ T5718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 505.060284][ T5718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 505.098561][ T5718] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 505.120558][ T5718] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 505.142643][ T5718] usb 6-1: USB disconnect, device number 47 [ 505.224898][T20689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 507.150237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 507.225278][T20739] netlink: 'syz.2.6350': attribute type 1 has an invalid length. [ 508.323440][ T5718] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 508.520137][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 508.582535][ T5718] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 508.619644][ T5718] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 508.661432][ T5718] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 508.679621][T20769] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6364'. [ 508.699053][ T5718] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.746502][ T5718] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 508.802783][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.862417][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 508.862435][ T29] audit: type=1400 audit(1783170161.641:1913): avc: denied { allowed } for pid=20775 comm="syz.1.6367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 509.132871][ T5718] usb 4-1: GET_CAPABILITIES returned 0 [ 509.143800][ T5718] usbtmc 4-1:16.0: can't read capabilities [ 509.277647][ T29] audit: type=1400 audit(1783170162.051:1914): avc: denied { read write } for pid=20779 comm="syz.2.6369" name="video0" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 509.386138][ T29] audit: type=1400 audit(1783170162.051:1915): avc: denied { open } for pid=20779 comm="syz.2.6369" path="/dev/video0" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 509.419412][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 509.465088][ T5710] usb 4-1: USB disconnect, device number 72 [ 509.505295][ T29] audit: type=1400 audit(1783170162.051:1916): avc: denied { ioctl } for pid=20779 comm="syz.2.6369" path="/dev/video0" dev="devtmpfs" ino=933 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 510.100199][ T5776] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 510.260362][ T5776] usb 6-1: Using ep0 maxpacket: 8 [ 510.293342][ T5776] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 510.311619][ T5776] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 510.334685][ T5776] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 510.357126][ T5776] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.409613][ T5776] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 510.429174][ T5776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.669751][ T5776] usb 6-1: GET_CAPABILITIES returned 0 [ 510.691732][ T5776] usbtmc 6-1:16.0: can't read capabilities [ 510.988361][T13631] usb 6-1: USB disconnect, device number 48 [ 511.599676][ T29] audit: type=1400 audit(1783170164.371:1917): avc: denied { watch watch_reads } for pid=20848 comm="syz.0.6395" path="/proc/2485/net/netlink" dev="proc" ino=4026532970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 511.928026][T20864] nft_compat: unsupported protocol 5 [ 512.230362][ T5710] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 512.278649][T13631] kernel read not supported for file /dsp1 (pid: 13631 comm: kworker/1:7) [ 512.395317][T20890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6411'. [ 512.419608][T20891] loop6: detected capacity change from 0 to 2640 [ 512.424906][ T5710] usb 3-1: Using ep0 maxpacket: 16 [ 512.433808][ T5710] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 512.447899][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.451443][T20891] buffer_io_error: 10 callbacks suppressed [ 512.451459][T20891] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.482999][ T5710] usb 3-1: config 0 descriptor?? [ 512.514647][T20891] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.521536][ T5710] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 512.586210][T20895] loop6: detected capacity change from 2640 to 524288000 [ 512.611594][T20891] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.634848][T20891] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.646969][T20891] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.657185][T20891] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.679501][T20891] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.698991][T20891] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.710216][T20891] ldm_validate_partition_table(): Disk read failed. [ 512.717469][T20891] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.726035][T20891] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.745477][T20891] Dev loop6: unable to read RDB block 0 [ 512.752376][T20891] loop6: unable to read partition table [ 512.766132][T20891] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 513.260171][ T11] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 513.416047][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.433579][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 513.445768][ T29] audit: type=1400 audit(1783170166.211:1918): avc: denied { map } for pid=20923 comm="syz.3.6427" path="/dev/sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 513.470920][ T29] audit: type=1400 audit(1783170166.211:1919): avc: denied { execute } for pid=20923 comm="syz.3.6427" path="/dev/sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 513.496515][ T11] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 513.506431][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 513.514535][ T11] usb 2-1: SerialNumber: syz [ 513.522625][ T5710] gspca_sonixj: reg_w1 err -71 [ 513.550343][ T5710] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 513.561754][ T5710] usb 3-1: USB disconnect, device number 64 [ 513.741223][ T11] usb 2-1: 0:2 : does not exist [ 513.815429][T20935] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6432'. [ 513.834406][ T11] usb 2-1: USB disconnect, device number 58 [ 513.924796][T14327] udevd[14327]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 514.037142][T20940] binder: 20939:20940 ioctl c0306201 2000000006c0 returned -14 [ 514.496337][ T11] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 514.660505][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 514.695504][ T11] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 514.716463][ T11] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 514.757841][ T11] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 514.793304][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 514.820886][ T11] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 514.852357][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.871761][ T11] usb 3-1: Product: syz [ 514.881859][ T11] usb 3-1: Manufacturer: syz [ 514.891529][ T11] usb 3-1: SerialNumber: syz [ 514.904216][ T11] usb 3-1: config 0 descriptor?? [ 515.147110][ T11] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input57 [ 515.507085][ T11] usb 3-1: USB disconnect, device number 65 [ 515.520021][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6446'. [ 516.123800][ T29] audit: type=1400 audit(1783170168.901:1920): avc: denied { map } for pid=20983 comm="syz.2.6453" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 516.310852][ T5776] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 516.390268][T13631] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 516.485330][ T5776] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 516.524933][ T5776] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.565277][T13631] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 516.574127][ T5776] usb 6-1: Product: syz [ 516.584643][ T5776] usb 6-1: Manufacturer: syz [ 516.593215][T13631] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.606853][ T5776] usb 6-1: SerialNumber: syz [ 516.631082][T13631] usb 2-1: config 0 has no interface number 0 [ 516.637436][ T5776] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 516.666688][T13631] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 516.666800][ T42] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 516.687509][T13631] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 516.718073][T13631] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.763503][T13631] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 516.787057][T13631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.796442][T13631] usb 2-1: Product: syz [ 516.801115][T13631] usb 2-1: Manufacturer: syz [ 516.805772][T13631] usb 2-1: SerialNumber: syz [ 516.831389][T13631] usb 2-1: config 0 descriptor?? [ 516.884299][ T11] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 517.055652][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 517.073550][ T11] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.084470][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.097444][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 517.108642][ T11] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 517.119910][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 517.135146][ T11] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 517.144821][ T11] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 517.153199][ T11] usb 3-1: Manufacturer: syz [ 517.160298][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 517.170202][ T11] usb 3-1: config 0 descriptor?? [ 517.286376][ T29] audit: type=1400 audit(1783170170.061:1921): avc: denied { watch } for pid=21025 comm="syz.3.6470" path="/1293/file5" dev="tmpfs" ino=6566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 517.309623][ T5710] usb 6-1: USB disconnect, device number 49 [ 517.326225][ T804] usb 2-1: USB disconnect, device number 59 [ 517.329276][ T29] audit: type=1400 audit(1783170170.061:1922): avc: denied { watch_sb } for pid=21025 comm="syz.3.6470" path="/1293/file5" dev="tmpfs" ino=6566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 517.379444][ T29] audit: type=1400 audit(1783170170.061:1923): avc: denied { watch_mount } for pid=21025 comm="syz.3.6470" path="/1293/file5" dev="tmpfs" ino=6566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 517.467770][ T11] rc_core: IR keymap rc-hauppauge not found [ 517.476362][ T11] Registered IR keymap rc-empty [ 517.485326][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 517.530572][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 517.551095][ T11] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 517.566149][ T11] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input59 [ 517.586501][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 517.610374][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 517.630375][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 517.650401][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 517.670849][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 517.690280][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 517.710598][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 517.743490][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 517.770420][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 517.804838][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 517.833426][ T11] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 517.876009][ T11] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 517.898991][ T11] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 517.958170][ T11] usb 3-1: USB disconnect, device number 66 [ 517.976640][ T42] usb 6-1: Service connection timeout for: 256 [ 517.989549][ T42] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 518.010563][ T42] ath9k_htc: Failed to initialize the device [ 518.024508][ T5710] usb 6-1: ath9k_htc: USB layer deinitialized [ 518.229882][ T29] audit: type=1400 audit(1783170171.001:1924): avc: denied { wake_alarm } for pid=21053 comm="syz.0.6481" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 518.380264][ T5710] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 518.527597][T21069] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 518.545048][ T5710] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 518.555948][T21069] CPU: 1 UID: 0 PID: 21069 Comm: syz.3.6485 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.555985][T21069] Tainted: [L]=SOFTLOCKUP [ 518.555994][T21069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 518.556008][T21069] Call Trace: [ 518.556016][T21069] [ 518.556025][T21069] dump_stack_lvl+0x100/0x190 [ 518.556058][T21069] sysfs_warn_dup.cold+0x1c/0x28 [ 518.556094][T21069] sysfs_create_dir_ns+0x24b/0x2b0 [ 518.556133][T21069] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 518.556166][T21069] ? find_held_lock+0x2b/0x80 [ 518.556198][T21069] ? kobject_add_internal+0x25f/0x930 [ 518.556223][T21069] ? kobject_add_internal+0x25f/0x930 [ 518.556250][T21069] ? class_dir_child_ns_type+0xd/0x60 [ 518.556280][T21069] kobject_add_internal+0x2c8/0x930 [ 518.556310][T21069] kobject_add+0x16a/0x1e0 [ 518.556334][T21069] ? __pfx_kobject_add+0x10/0x10 [ 518.556360][T21069] ? get_device_parent+0x1b3/0x4c0 [ 518.556385][T21069] ? kobject_put+0xb9/0x640 [ 518.556416][T21069] device_add+0x294/0x1970 [ 518.556444][T21069] ? lockdep_init_map_type+0x5c/0x250 [ 518.556471][T21069] ? __pfx_device_add+0x10/0x10 [ 518.556496][T21069] ? lockdep_init_map_type+0x5c/0x250 [ 518.556522][T21069] ? __init_waitqueue_head+0xca/0x150 [ 518.556558][T21069] tty_register_device_attr+0x388/0x7f0 [ 518.556585][T21069] ? lockdep_init_map_type+0x5c/0x250 [ 518.556612][T21069] ? __pfx_tty_register_device_attr+0x10/0x10 [ 518.556642][T21069] ? tty_port_init+0x156/0x1c0 [ 518.556669][T21069] gsm_activate_mux+0x155/0x2a0 [ 518.556695][T21069] gsmld_ioctl+0xbbc/0x15c0 [ 518.556730][T21069] ? __pfx_gsmld_ioctl+0x10/0x10 [ 518.556761][T21069] ? __ldsem_down_read_nested+0xf3/0x890 [ 518.556794][T21069] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 518.556829][T21069] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 518.556856][T21069] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 518.556890][T21069] ? __pfx_gsmld_ioctl+0x10/0x10 [ 518.556916][T21069] tty_ioctl+0x11b4/0x1640 [ 518.556940][T21069] ? __pfx_tty_ioctl+0x10/0x10 [ 518.556963][T21069] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 518.557004][T21069] ? __fget_files+0x215/0x3d0 [ 518.557036][T21069] ? hook_file_ioctl_common+0x140/0x440 [ 518.557078][T21069] ? selinux_file_ioctl+0x13b/0x290 [ 518.557108][T21069] ? selinux_file_ioctl+0xb6/0x290 [ 518.557146][T21069] ? __pfx_tty_ioctl+0x10/0x10 [ 518.557171][T21069] __x64_sys_ioctl+0x18e/0x210 [ 518.557205][T21069] do_syscall_64+0x115/0x870 [ 518.557235][T21069] ? clear_bhb_loop+0x40/0x90 [ 518.557264][T21069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.557288][T21069] RIP: 0033:0x7f087a79de59 [ 518.557306][T21069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.557329][T21069] RSP: 002b:00007f08789f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.557352][T21069] RAX: ffffffffffffffda RBX: 00007f087aa26090 RCX: 00007f087a79de59 [ 518.557367][T21069] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 518.557383][T21069] RBP: 00007f087a833e6f R08: 0000000000000000 R09: 0000000000000000 [ 518.557398][T21069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.557411][T21069] R13: 00007f087aa26128 R14: 00007f087aa26090 R15: 00007fff515ae7e8 [ 518.557437][T21069] [ 518.557481][T21069] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 518.576900][ T5710] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 518.937063][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.952462][ T5710] usb 6-1: Product: syz [ 518.983325][ T5710] usb 6-1: Manufacturer: syz [ 518.987986][ T5710] usb 6-1: SerialNumber: syz [ 519.113645][ T5710] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 519.543653][T21045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.555668][ T5710] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 519.561752][T21045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.567989][ T5710] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 519.587526][ T5710] usb 6-1: media controller created [ 519.604498][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 519.688187][ T5710] usb 6-1: USB disconnect, device number 50 [ 520.010531][T21105] Bluetooth: hci0: load_link_keys: too big key_count value 16128 [ 520.450285][ T42] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 520.554822][T21130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6513'. [ 520.621642][ T42] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 520.636040][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 520.643817][ T42] usb 3-1: New USB device found, idVendor=046d, idProduct=c70a, bcdDevice= 0.00 [ 520.662793][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.694316][ T42] usb 3-1: config 0 descriptor?? [ 520.713165][T21115] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 520.920365][ T11] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 521.082097][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 521.091883][ T11] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.103978][ T11] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.110830][T21155] netlink: 'syz.1.6525': attribute type 13 has an invalid length. [ 521.114310][ T11] usb 6-1: config 0 interface 0 has no altsetting 0 [ 521.128706][ T11] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 521.138769][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.151481][ T42] hid_parser_main: 28 callbacks suppressed [ 521.151506][ T42] logitech-djreceiver 0003:046D:C70A.004C: unknown main item tag 0x3 [ 521.157207][ T11] usb 6-1: config 0 descriptor?? [ 521.159514][ T42] logitech-djreceiver 0003:046D:C70A.004C: unknown main item tag 0x0 [ 521.211769][ T42] logitech-djreceiver 0003:046D:C70A.004C: unknown main item tag 0x0 [ 521.229854][ T42] logitech-djreceiver 0003:046D:C70A.004C: unknown main item tag 0x0 [ 521.249561][ T42] logitech-djreceiver 0003:046D:C70A.004C: unknown main item tag 0x0 [ 521.273957][ T42] logitech-djreceiver 0003:046D:C70A.004C: unknown main item tag 0x0 [ 521.285909][ T42] logitech-djreceiver 0003:046D:C70A.004C: unknown main item tag 0x0 [ 521.294629][ T42] logitech-djreceiver 0003:046D:C70A.004C: unknown main item tag 0x0 [ 521.306293][ T42] logitech-djreceiver 0003:046D:C70A.004C: unknown main item tag 0x0 [ 521.315480][ T5776] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 521.324271][ T42] logitech-djreceiver 0003:046D:C70A.004C: unknown main item tag 0x0 [ 521.391571][ T42] usb 3-1: USB disconnect, device number 67 [ 521.455406][T21161] bond0: entered promiscuous mode [ 521.463014][T21161] bond_slave_0: entered promiscuous mode [ 521.468950][T21161] bond_slave_1: entered promiscuous mode [ 521.477139][T21161] bond0: left promiscuous mode [ 521.482423][T21161] bond_slave_0: left promiscuous mode [ 521.488085][T21161] bond_slave_1: left promiscuous mode [ 521.516447][ T29] audit: type=1400 audit(1783170174.291:1925): avc: denied { mount } for pid=21164 comm="syz.1.6529" name="/" dev="autofs" ino=78007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 521.545641][ T29] audit: type=1400 audit(1783170174.321:1926): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 521.603660][T21136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.627790][T21136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.656085][ T11] hid (null): report_id 0 is invalid [ 521.703866][ T11] cougar 0003:060B:500A.004D: report_id 0 is invalid [ 521.718549][ T11] cougar 0003:060B:500A.004D: item 0 0 1 8 parsing failed [ 521.741069][ T11] cougar 0003:060B:500A.004D: parse failed [ 521.758201][ T11] cougar 0003:060B:500A.004D: probe with driver cougar failed with error -22 [ 521.848042][T21178] netlink: 'syz.3.6535': attribute type 1 has an invalid length. [ 521.860639][T21178] netlink: 'syz.3.6535': attribute type 2 has an invalid length. [ 521.874377][ T5710] usb 6-1: USB disconnect, device number 51 [ 522.016883][ T29] audit: type=1400 audit(1783170174.791:1927): avc: denied { create } for pid=21184 comm="syz.2.6539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 522.047314][ T42] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 522.083539][ T29] audit: type=1400 audit(1783170174.851:1928): avc: denied { sys_admin } for pid=21184 comm="syz.2.6539" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 522.300235][ T5710] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 522.463388][ T5710] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 522.479030][ T5710] usb 4-1: config 0 has no interface number 0 [ 522.500471][ T5710] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 25955, setting to 64 [ 522.524651][ T5710] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 522.540372][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 522.558608][ T5710] usb 4-1: Manufacturer: syz [ 522.568720][ T5710] usb 4-1: SerialNumber: syz [ 522.581386][ T5710] usb 4-1: config 0 descriptor?? [ 522.592588][T21187] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 522.834295][T21211] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 522.841147][T21211] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 522.847601][T21211] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 522.854351][T21211] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 522.990210][ T42] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 523.018755][ T5710] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 523.044565][ T5710] usb 4-1: USB disconnect, device number 73 [ 523.150259][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 523.162037][ T42] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 523.182432][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 523.198735][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 523.217362][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 523.240274][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 523.266436][ T42] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 523.281278][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.300494][ T42] usb 2-1: Product: syz [ 523.304720][ T42] usb 2-1: Manufacturer: syz [ 523.309297][ T42] usb 2-1: SerialNumber: syz [ 523.325919][ T42] usb 2-1: config 0 descriptor?? [ 523.510267][ T5710] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 523.661804][ T5710] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 523.677517][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.695255][ T5710] usb 3-1: config 0 descriptor?? [ 523.704609][ T5710] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 523.757594][ T42] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 523.781995][ T42] input input61: Device does not respond to id packet M [ 523.791469][ T42] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 523.810261][ T42] input input61: Device does not respond to id packet P [ 523.818260][ T42] input input61: Device does not respond to id packet B [ 524.022558][ T42] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 524.040483][ T42] input input61: Device does not respond to id packet N [ 524.048236][ T42] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 524.060501][ T42] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 524.078898][ T42] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 524.092342][ T42] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 524.113847][ T5710] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 524.126035][ T42] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input61 [ 524.176917][ T42] usb 2-1: USB disconnect, device number 60 [ 524.524002][ T5710] gspca_cpia1: usb_control_msg 02, error -71 [ 524.536727][ T5710] gspca_cpia1: usb_control_msg 05, error -71 [ 524.553692][ T5710] cpia1 3-1:0.0: unexpected systemstate: 00 [ 524.584554][ T5710] usb 3-1: USB disconnect, device number 68 [ 524.811711][T21257] input: syz1 as /devices/virtual/input/input62 [ 524.840446][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 524.920619][ T5619] Bluetooth: hci3: command 0x0406 tx timeout [ 524.922114][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 524.926777][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout [ 524.977014][T21260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 524.986119][T21261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6572'. [ 525.022618][T21261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6572'. [ 525.440339][ T29] audit: type=1400 audit(1783170178.221:1929): avc: denied { read } for pid=21280 comm="syz.0.6581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 526.760302][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 527.150247][ T42] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 527.323046][ T42] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 527.342033][ T42] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 527.369486][ T42] usb 2-1: config 150 has no interface number 0 [ 527.387598][ T42] usb 2-1: config 150 interface 204 has no altsetting 0 [ 527.416471][ T42] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 527.426340][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.435096][ T42] usb 2-1: Product: syz [ 527.439637][ T42] usb 2-1: Manufacturer: syz [ 527.445688][ T42] usb 2-1: SerialNumber: syz [ 527.723207][ T42] xr_serial 2-1:150.204: skipping garbage [ 527.736197][ T42] xr_serial 2-1:150.204: xr_serial converter detected [ 527.843134][ T5710] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 528.011880][ T5710] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 528.022493][ T11] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 528.030256][ T5710] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 528.042400][ T5710] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 528.058265][ T5710] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 528.068795][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 528.079363][ T5710] usb 4-1: Product: syz [ 528.083841][ T5710] usb 4-1: Manufacturer: syz [ 528.088525][ T5710] usb 4-1: SerialNumber: syz [ 528.100158][ T804] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 528.190852][ T11] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 528.199542][ T11] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 528.209680][ T11] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 528.220944][ T11] usb 6-1: config 0 interface 0 has no altsetting 0 [ 528.228649][ T11] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 528.237718][ T11] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 528.248867][ T11] usb 6-1: config 0 interface 0 has no altsetting 0 [ 528.256712][ T11] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 528.265737][ T11] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 528.276884][ T804] usb 3-1: Using ep0 maxpacket: 16 [ 528.282105][ T11] usb 6-1: config 0 interface 0 has no altsetting 0 [ 528.289936][ T11] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 528.300582][ T11] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 528.313205][ T804] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 528.324234][ T11] usb 6-1: config 0 interface 0 has no altsetting 0 [ 528.331944][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.343425][ T5710] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 528.354948][ T11] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 528.372254][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.382206][ T11] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 528.393236][ T804] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 528.406365][ T11] usb 6-1: config 0 interface 0 has no altsetting 0 [ 528.414015][ T804] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 528.423275][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.431910][ T11] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 528.442286][ T11] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 528.454184][ T804] usb 3-1: config 0 descriptor?? [ 528.459358][ T11] usb 6-1: config 0 interface 0 has no altsetting 0 [ 528.470044][ T11] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 528.479890][ T11] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 528.490876][ T11] usb 6-1: config 0 interface 0 has no altsetting 0 [ 528.498482][ T11] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 528.507626][ T11] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 528.518744][ T11] usb 6-1: config 0 interface 0 has no altsetting 0 [ 528.527798][ T11] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 528.537037][ T11] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 528.545483][ T11] usb 6-1: Product: syz [ 528.549673][ T11] usb 6-1: Manufacturer: syz [ 528.554405][ T11] usb 6-1: SerialNumber: syz [ 528.565220][ T11] usb 6-1: config 0 descriptor?? [ 528.573388][ T5710] usb 4-1: USB disconnect, device number 74 [ 528.583753][ T5710] usblp0: removed [ 528.612611][ T11] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 528.704526][ T42] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 528.714828][ T42] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 528.738545][ T42] usb 2-1: USB disconnect, device number 61 [ 528.750706][ T42] xr_serial 2-1:150.204: device disconnected [ 528.819004][ T5710] usb 6-1: USB disconnect, device number 52 [ 528.843463][ T5710] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 528.905767][ T804] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.004E/input/input63 [ 528.914437][T21373] tipc: Started in network mode [ 528.926489][T21373] tipc: Node identity ac1414aa, cluster identity 6 [ 528.935100][T21373] tipc: Enabling of bearer rejected, failed to enable media [ 528.993415][ T804] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.004E/input/input64 [ 529.098471][T21380] evm: overlay not supported [ 529.151414][ T804] kye 0003:0458:5013.004E: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 529.208164][ T804] usb 3-1: USB disconnect, device number 69 [ 529.325905][T21382] fido_id[21382]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 529.571489][ T29] audit: type=1326 audit(1783170438.356:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21396 comm="syz.0.6631" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33b439de59 code=0x0 [ 529.746766][ T29] audit: type=1400 audit(1783170438.526:1931): avc: denied { sqpoll } for pid=21405 comm="syz.2.6634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 530.180980][ T29] audit: type=1400 audit(1783170438.966:1932): avc: denied { watch watch_reads } for pid=21414 comm="syz.3.6638" path="pipe:[79595]" dev="pipefs" ino=79595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 530.198505][ T804] kernel read not supported for file /video9 (pid: 804 comm: kworker/0:2) [ 530.629347][T21429] loop5: detected capacity change from 0 to 7 [ 530.639565][T21429] Dev loop5: unable to read RDB block 7 [ 530.645739][T21429] loop5: unable to read partition table [ 530.681066][T21429] loop5: partition table beyond EOD, truncated [ 530.713699][ C1] blk_print_req_error: 10 callbacks suppressed [ 530.713719][ C1] operation not supported error, dev loop5, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 2 [ 530.732214][T21429] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 530.772868][T21433] Failed to initialize the IGMP autojoin socket (err -2) [ 530.978574][T21441] random: crng reseeded on system resumption [ 531.021814][T21438] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 532.280322][ T42] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 532.371193][ T5776] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 532.480638][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 532.509533][ T42] usb 6-1: New USB device found, idVendor=0c45, idProduct=6100, bcdDevice=c4.6d [ 532.535843][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.559291][ T42] usb 6-1: Product: syz [ 532.568164][ T5776] usb 3-1: Using ep0 maxpacket: 32 [ 532.584075][ T42] usb 6-1: Manufacturer: syz [ 532.595483][ T42] usb 6-1: SerialNumber: syz [ 532.606508][ T5776] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 532.621506][ T42] usb 6-1: config 0 descriptor?? [ 532.641584][ T5776] usb 3-1: config 0 has no interface number 0 [ 532.656127][ T42] gspca_main: sonixj-2.14.0 probing 0c45:6100 [ 532.682697][ T5776] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 532.709490][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.733535][ T5776] usb 3-1: Product: syz [ 532.748732][ T5776] usb 3-1: Manufacturer: syz [ 532.768683][ T5776] usb 3-1: SerialNumber: syz [ 532.822738][ T5776] usb 3-1: config 0 descriptor?? [ 533.467693][T21507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.687383][T13631] usb 6-1: USB disconnect, device number 53 [ 533.737198][T21516] : renamed from bond0 (while UP) [ 533.889139][ T29] audit: type=1400 audit(1783170442.666:1933): avc: denied { ioctl } for pid=21519 comm="syz.1.6681" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 533.923067][ T5776] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 533.937864][ T5776] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 533.949633][ T5776] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 533.965967][ T5776] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 533.981971][ T5776] usb 3-1: USB disconnect, device number 70 [ 535.312077][T21566] loop9: detected capacity change from 0 to 255852544 [ 535.407233][T21569] Invalid logical block size (4) [ 535.890673][ T804] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 535.912182][ T29] audit: type=1400 audit(1783170444.696:1934): avc: denied { read } for pid=21585 comm="syz.1.6710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 536.057246][ T804] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 536.072433][ T804] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 536.083939][ T804] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 536.096274][ T804] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 536.100193][ T5776] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 536.109148][ T804] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 536.126165][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.136019][ T804] usb 3-1: Product: syz [ 536.141288][ T804] usb 3-1: Manufacturer: syz [ 536.145919][ T804] usb 3-1: SerialNumber: syz [ 536.155066][T21582] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 536.170842][ T804] cdc_mbim 3-1:1.0: skipping garbage [ 536.274013][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.293900][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.305329][ T5776] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 536.314908][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.328995][ T5776] usb 4-1: config 0 descriptor?? [ 536.383799][T21582] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 536.393885][T21582] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 536.406636][T21597] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.6715'. [ 536.763435][ T5776] hid_parser_main: 232 callbacks suppressed [ 536.763459][ T5776] cypress 0003:04B4:07B1.004F: unknown main item tag 0x0 [ 536.781034][ T5776] cypress 0003:04B4:07B1.004F: item fetching failed at offset 6/41 [ 536.789610][ T5776] cypress 0003:04B4:07B1.004F: parse failed [ 536.796402][ T5776] cypress 0003:04B4:07B1.004F: probe with driver cypress failed with error -22 [ 537.012572][ T5710] usb 4-1: USB disconnect, device number 75 [ 537.026426][T21582] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 537.054795][T21582] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 537.074212][ T804] cdc_mbim 3-1:1.0: setting tx_max = 32 [ 537.102033][ T804] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 537.134578][ T804] wwan wwan0: port wwan0mbim0 attached [ 537.164445][ T804] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, e6:94:e7:98:18:bf [ 537.410698][ T5776] usb 3-1: USB disconnect, device number 71 [ 537.435478][ T5776] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 537.576402][ T5776] wwan wwan0: port wwan0mbim0 disconnected [ 538.093616][ T29] audit: type=1400 audit(1783170446.876:1936): avc: denied { write } for pid=21626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.165174][ T29] audit: type=1400 audit(1783170446.846:1935): avc: denied { setattr } for pid=21660 comm="syz.2.6741" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 538.375824][ T29] audit: type=1400 audit(1783170447.156:1937): avc: denied { write } for pid=21669 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.501103][ T5776] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 538.521513][ T5776] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 538.579792][ T5776] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz0] on syz0 [ 538.730376][T13631] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 538.776683][T21691] fido_id[21691]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 538.829342][T21700] netlink: 'syz.5.6755': attribute type 29 has an invalid length. [ 538.833304][T21696] netlink: 'syz.3.6753': attribute type 32 has an invalid length. [ 538.858504][T21700] netlink: 596 bytes leftover after parsing attributes in process `syz.5.6755'. [ 538.920275][T13631] usb 2-1: Using ep0 maxpacket: 32 [ 538.939723][T13631] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.988683][T13631] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.041700][T13631] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 539.056720][T21709] Failed to initialize the IGMP autojoin socket (err -2) [ 539.076603][T13631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.111364][T13631] usb 2-1: config 0 descriptor?? [ 539.192699][T21709] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6758'. [ 539.239086][T21709] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.248221][T21709] bridge0: port 2(bridge_slave_1) entered listening state [ 539.352413][ T29] audit: type=1400 audit(1783170448.126:1938): avc: denied { write } for pid=21686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.537018][T21709] ipvlan2: left promiscuous mode [ 539.589695][T13631] ft260 0003:0403:6030.0051: unknown main item tag 0x0 [ 539.622185][ T29] audit: type=1400 audit(1783170448.396:1939): avc: denied { write } for pid=21731 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.657621][T13631] ft260 0003:0403:6030.0051: unknown main item tag 0x0 [ 539.788912][T13631] ft260 0003:0403:6030.0051: chip code: 0000 0000 [ 539.992146][T13631] ft260 0003:0403:6030.0051: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 540.199210][T13631] ft260 0003:0403:6030.0051: failed to retrieve status: -71, no wakeup [ 540.232515][T13631] ft260 0003:0403:6030.0051: failed to retrieve status: -71 [ 540.253966][T13631] ft260 0003:0403:6030.0051: failed to reset I2C controller: -71 [ 540.333351][T13631] usb 2-1: USB disconnect, device number 62 [ 540.541708][T21749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6774'. [ 540.551781][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 540.561946][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 540.578701][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 540.594164][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 540.618739][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 541.000310][T13631] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 541.185236][T13631] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 541.224622][T13631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.255236][T13631] usb 4-1: Product: syz [ 541.261749][T13631] usb 4-1: Manufacturer: syz [ 541.267210][T13631] usb 4-1: SerialNumber: syz [ 541.298956][T13631] usb 4-1: config 0 descriptor?? [ 541.479999][T21751] Failed to initialize the IGMP autojoin socket (err -2) [ 541.519898][T21786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.401466][ T29] audit: type=1400 audit(1783170451.186:1940): avc: denied { write } for pid=21798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.476258][T13631] usb 4-1: f81604_read: reg: 100f failed: -EPROTO [ 542.541786][T13631] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 542.567622][T13631] usb 4-1: USB disconnect, device number 76 [ 542.625993][T13631] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 542.668038][ T29] audit: type=1400 audit(1783170451.446:1941): avc: denied { write } for pid=21820 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.699058][ T50] Bluetooth: hci2: command tx timeout [ 542.823048][T13631] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 542.853471][T21827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 543.286114][ T29] audit: type=1326 audit(1783170452.066:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.1.6802" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf719de59 code=0x7ffc0000 [ 543.315940][T21751] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.339867][T21751] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.349070][T21751] bridge_slave_0: entered allmulticast mode [ 543.368773][ T29] audit: type=1326 audit(1783170452.066:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.1.6802" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf719de59 code=0x7ffc0000 [ 543.390480][T21751] bridge_slave_0: entered promiscuous mode [ 543.421071][ T29] audit: type=1326 audit(1783170452.076:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.1.6802" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf719de59 code=0x7ffc0000 [ 543.449756][ T29] audit: type=1326 audit(1783170452.076:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.1.6802" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf719de59 code=0x7ffc0000 [ 543.482395][ T29] audit: type=1326 audit(1783170452.076:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.1.6802" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4cf719de59 code=0x7ffc0000 [ 543.484069][T21751] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.511370][ T29] audit: type=1326 audit(1783170452.076:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.1.6802" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf719de59 code=0x7ffc0000 [ 543.555905][ T29] audit: type=1326 audit(1783170452.076:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.1.6802" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf719de59 code=0x7ffc0000 [ 543.599048][T21751] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.609217][T21854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6804'. [ 543.625878][ T29] audit: type=1326 audit(1783170452.076:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21845 comm="syz.1.6802" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf719de59 code=0x7ffc0000 [ 543.657449][T21751] bridge_slave_1: entered allmulticast mode [ 543.668892][T21751] bridge_slave_1: entered promiscuous mode [ 543.679696][T21854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6804'. [ 543.885066][T21751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.960266][T21751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.986884][T21869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6808'. [ 544.046243][T21751] smc: adding net device veth1_to_team with user defined pnetid S [ 544.125929][T21869] hsr_slave_0: left promiscuous mode [ 544.152927][T21869] hsr_slave_1: left promiscuous mode [ 544.298965][T21751] team0: Port device team_slave_0 added [ 544.369485][T21751] team0: Port device team_slave_1 added [ 544.437150][T21882] Failed to initialize the IGMP autojoin socket (err -2) [ 544.472286][T21751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.500112][T21751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.560227][T21751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.575845][T21751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.592066][T21751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.650590][T21751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.768398][ T50] Bluetooth: hci2: command tx timeout [ 545.001219][T21751] hsr_slave_0: entered promiscuous mode [ 545.014096][T21751] hsr_slave_1: entered promiscuous mode [ 545.040439][T21751] debugfs: 'hsr0' already exists in 'hsr' [ 545.055653][T21751] Cannot create hsr debugfs directory [ 545.075490][T21900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6820'. [ 545.520652][ T804] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 545.703623][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.745081][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.778172][ T804] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 545.815525][ T804] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 545.837248][ T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.857579][ T804] usb 6-1: config 0 descriptor?? [ 546.169206][T21751] netdevsim netdevsim6 netdevsim0: renamed from eth5 [ 546.196232][T21751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.215175][T21751] netdevsim netdevsim6 netdevsim1: renamed from eth6 [ 546.239617][T21751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.258373][T21751] netdevsim netdevsim6 netdevsim2: renamed from eth7 [ 546.290372][T21751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.305489][T21751] netdevsim netdevsim6 netdevsim3: renamed from eth8 [ 546.374382][T21751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 546.378374][ T804] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 546.841634][ T50] Bluetooth: hci2: command tx timeout [ 546.898933][T21751] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.947356][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.954581][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.019748][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.026915][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.453318][ T5710] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 547.622499][ T5710] usb 3-1: Using ep0 maxpacket: 16 [ 547.638090][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.665852][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.689965][ T5710] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 547.710793][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.740198][ T5794] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 547.754690][ T5710] usb 3-1: config 0 descriptor?? [ 547.925800][ T5794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 547.945932][ T5794] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 547.979838][ T5794] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 548.005220][ T5794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.035344][ T5794] usb 2-1: config 0 descriptor?? [ 548.054402][T21940] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 548.158478][T21751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.208116][ T5710] corsair 0003:1B1C:1B02.0053: hidraw1: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 548.408396][ T5710] corsair 0003:1B1C:1B02.0053: Failed to get K90 initial state (error -71). [ 548.468063][ T5710] usb 3-1: USB disconnect, device number 72 [ 548.502443][ T5794] logitech 0003:046D:C29C.0054: unknown main item tag 0x2 [ 548.519492][ T5794] logitech 0003:046D:C29C.0054: unknown main item tag 0x4 [ 548.520287][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 548.527323][T21968] sg_write: process 2967 (syz.3.6840) changed security contexts after opening file descriptor, this is not allowed. [ 548.552384][ T5794] logitech 0003:046D:C29C.0054: reserved main item tag 0xd [ 548.571347][ T5794] logitech 0003:046D:C29C.0054: unknown main item tag 0x1 [ 548.581839][ T5794] logitech 0003:046D:C29C.0054: unknown main item tag 0x3 [ 548.645239][ T5794] logitech 0003:046D:C29C.0054: unknown main item tag 0x1 [ 548.683325][ T804] usb 6-1: USB disconnect, device number 54 [ 548.703989][ T5794] logitech 0003:046D:C29C.0054: hidraw1: USB HID v80.09 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 548.920726][ T50] Bluetooth: hci2: command tx timeout [ 548.946619][ T5794] logitech 0003:046D:C29C.0054: no inputs found [ 548.983480][ T5794] usb 2-1: USB disconnect, device number 63 [ 549.058787][T21751] veth0_vlan: entered promiscuous mode [ 549.109088][T21751] veth1_vlan: entered promiscuous mode [ 549.244066][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 549.244082][ T29] audit: type=1400 audit(1783170458.026:2208): avc: denied { accept } for pid=21979 comm="syz.2.6844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 549.322943][T21751] veth0_macvtap: entered promiscuous mode [ 549.376904][T21751] veth1_macvtap: entered promiscuous mode [ 549.507332][T21751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.569587][T21751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.605992][T21751] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 549.669699][T21751] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 549.737292][T21751] wireguard: wg0: Could not create IPv4 socket [ 549.753547][T21751] wireguard: wg1: Could not create IPv4 socket [ 549.785556][T21751] wireguard: wg2: Could not create IPv4 socket [ 549.946363][ T29] audit: type=1400 audit(1783170714.722:2209): avc: denied { ioctl } for pid=22006 comm="syz.5.6851" path="socket:[83539]" dev="sockfs" ino=83539 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 550.046495][T22009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6852'. [ 550.088024][T22009] bridge_slave_1: left allmulticast mode [ 550.105359][T22009] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.148226][T22009] bridge_slave_0: left allmulticast mode [ 550.158162][T22009] bridge_slave_0: left promiscuous mode [ 550.165196][T22009] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.245175][ T29] audit: type=1400 audit(1783170715.022:2210): avc: denied { write } for pid=21989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.369825][ T29] audit: type=1400 audit(1783170715.142:2211): avc: denied { write } for pid=22019 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.878757][T22037] binder: 22034:22037 ioctl c0306201 0 returned -14 [ 551.065099][ T29] audit: type=1400 audit(1783170715.842:2212): avc: denied { write } for pid=22025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.094398][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 551.112054][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 551.121578][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 551.129774][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 551.137499][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 551.324329][ T29] audit: type=1400 audit(1783170716.102:2213): avc: denied { write } for pid=22058 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.593159][T22048] Failed to initialize the IGMP autojoin socket (err -2) [ 551.986988][ T29] audit: type=1400 audit(1783170716.762:2214): avc: denied { append } for pid=22086 comm="syz.2.6867" name="frontend0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 552.088247][ T29] audit: type=1400 audit(1783170716.822:2215): avc: denied { write } for pid=22069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.265782][ T29] audit: type=1400 audit(1783170717.042:2216): avc: denied { write } for pid=22095 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.280604][ T5619] Bluetooth: hci2: command 0x1003 tx timeout [ 552.299945][ T50] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 552.812640][T22116] Failed to initialize the IGMP autojoin socket (err -2) [ 553.145695][T22128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.241892][ T50] Bluetooth: hci5: command tx timeout [ 553.384745][ T29] audit: type=1400 audit(1783170718.162:2217): avc: denied { write } for pid=22106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.683087][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6883'. [ 553.975642][T22048] netdevsim netdevsim6 netdevsim0: renamed from eth5 [ 554.009944][T22048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 554.018232][T22048] netdevsim netdevsim6 netdevsim1: renamed from eth6 [ 554.064384][T22048] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 554.100022][T22048] netdevsim netdevsim6 netdevsim2: renamed from eth7 [ 554.119240][T22158] random: crng reseeded on system resumption [ 554.139760][T22048] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 554.166351][T22048] netdevsim netdevsim6 netdevsim3: renamed from eth8 [ 554.201602][T22048] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 554.282848][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 554.587695][ T804] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 554.628681][ T804] hid-generic 0000:0000:0000.0055: hidraw0: HID v0.00 Device [syz1] on syz0 [ 554.699397][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 554.699412][ T29] audit: type=1400 audit(1783170719.472:2219): avc: denied { write } for pid=22151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.027603][ T29] audit: type=1400 audit(1783170719.802:2220): avc: denied { write } for pid=22196 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.321962][ T50] Bluetooth: hci5: command tx timeout [ 556.011454][ T5776] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 556.137098][ T29] audit: type=1400 audit(1783170720.912:2221): avc: denied { write } for pid=22210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.192401][ T5776] usb 6-1: Using ep0 maxpacket: 16 [ 556.211079][ T5776] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 556.241403][ T5776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 556.273519][ T5776] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 556.300235][ T5776] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.317925][ T5776] usb 6-1: Product: syz [ 556.319954][T22048] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 556.330102][ T5776] usb 6-1: Manufacturer: syz [ 556.364729][T22048] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 556.373909][ T29] audit: type=1400 audit(1783170721.142:2222): avc: denied { write } for pid=22260 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.404349][T22048] wireguard: wg0: Could not create IPv4 socket [ 556.404965][ T5776] usb 6-1: SerialNumber: syz [ 556.427998][ T5776] usb 6-1: config 0 descriptor?? [ 556.435948][T22048] wireguard: wg1: Could not create IPv4 socket [ 556.458631][ T5776] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 556.463882][T22048] wireguard: wg2: Could not create IPv4 socket [ 556.480032][ T5776] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 557.083183][ T5776] em28xx 6-1:0.0: unknown em28xx chip ID (129) [ 557.224698][T22285] overlayfs: failed lookup in lower (newroot/1398, name='bus', err=-40): overlapping layers [ 557.302444][ T5776] em28xx 6-1:0.0: Config register raw data: 0x71 [ 557.322675][ T5776] em28xx 6-1:0.0: I2S Audio (5 sample rate(s)) [ 557.338223][ T5776] em28xx 6-1:0.0: No AC97 audio processor [ 557.387803][ T29] audit: type=1400 audit(1783170722.162:2223): avc: denied { write } for pid=22268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.518458][ T5776] usb 6-1: USB disconnect, device number 55 [ 557.702045][ T29] audit: type=1400 audit(1783170722.482:2224): avc: denied { write } for pid=22300 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.285559][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 558.304873][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 558.314453][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 558.323740][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 558.331928][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 558.535273][ T29] audit: type=1400 audit(1783170723.312:2225): avc: denied { write } for pid=22304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.805372][ T29] audit: type=1400 audit(1783170723.582:2226): avc: denied { write } for pid=22343 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 559.109588][T22355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.217714][T22317] Failed to initialize the IGMP autojoin socket (err -2) [ 559.410249][ T804] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 559.594521][ T804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 559.622564][ T804] usb 3-1: not running at top speed; connect to a high speed hub [ 559.655857][ T804] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 559.678428][ T804] usb 3-1: config 1 interface 0 has no altsetting 0 [ 559.704092][ T804] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40 [ 559.723714][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.737178][ T804] usb 3-1: Product: syz [ 559.742537][ T804] usb 3-1: Manufacturer: syz [ 559.747169][ T804] usb 3-1: SerialNumber: syz [ 559.899838][ T29] audit: type=1400 audit(1783170724.672:2227): avc: denied { write } for pid=22357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 560.135084][ T29] audit: type=1400 audit(1783170724.912:2228): avc: denied { write } for pid=22382 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 560.180301][T22381] Failed to initialize the IGMP autojoin socket (err -2) [ 560.438498][ T804] usbhid 3-1:1.0: can't add hid device: -71 [ 560.446991][ T5619] Bluetooth: hci2: command tx timeout [ 560.471812][ T804] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 560.497687][ T804] usb 3-1: USB disconnect, device number 73 [ 560.997890][ T29] audit: type=1400 audit(1783170725.772:2229): avc: denied { write } for pid=22395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.246101][ T29] audit: type=1400 audit(1783170726.022:2230): avc: denied { write } for pid=22431 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.772378][T22317] netdevsim netdevsim6 netdevsim0: renamed from eth5 [ 561.827498][T22317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 561.835667][T22317] netdevsim netdevsim6 netdevsim1: renamed from eth6 [ 561.859192][T22317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 561.879407][T22317] netdevsim netdevsim6 netdevsim2: renamed from eth7 [ 561.926717][T22317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 561.952475][T22317] netdevsim netdevsim6 netdevsim3: renamed from eth8 [ 561.975527][T22317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 562.148649][T22472] serio: Serial port ptm0 [ 562.221935][ T29] audit: type=1400 audit(1783170726.992:2231): avc: denied { write } for pid=22443 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 562.312398][T22485] netlink: 'syz.3.6970': attribute type 29 has an invalid length. [ 562.326381][T22485] netlink: 548 bytes leftover after parsing attributes in process `syz.3.6970'. [ 562.404228][ T29] audit: type=1400 audit(1783170727.182:2232): avc: denied { write } for pid=22482 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 562.524587][ T5619] Bluetooth: hci2: command tx timeout [ 562.603814][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.796075][T22509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6978'. [ 562.831660][T22509] netlink: 'syz.2.6978': attribute type 10 has an invalid length. [ 562.864643][T22509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6978'. [ 562.924227][T22513] input: syz1 as /devices/virtual/input/input65 [ 562.944674][T22509] geneve2: entered promiscuous mode [ 562.961196][T22509] geneve2: entered allmulticast mode [ 563.239892][T22519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.289087][T22519] team0: Port device bond0 added [ 563.348367][ T29] audit: type=1400 audit(1783170728.122:2233): avc: denied { write } for pid=22510 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.565021][ T29] audit: type=1400 audit(1783170728.342:2234): avc: denied { write } for pid=22547 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.895840][ T29] audit: type=1400 audit(1783170728.672:2235): avc: denied { create } for pid=22566 comm="syz.1.6992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 564.057977][T22317] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 564.081377][T22317] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 564.118129][T22317] wireguard: wg0: Could not create IPv4 socket [ 564.133873][T22317] wireguard: wg1: Could not create IPv4 socket [ 564.144826][T22317] wireguard: wg2: Could not create IPv4 socket [ 564.153499][ T29] audit: type=1400 audit(1783170728.932:2236): avc: denied { write } for pid=22561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.190155][ T804] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 564.364220][ T804] usb 2-1: Using ep0 maxpacket: 16 [ 564.379153][ T804] usb 2-1: unable to get BOS descriptor or descriptor too short [ 564.439627][ T804] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.474433][ T804] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 564.518397][ T804] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 564.562104][ T804] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 564.587772][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.620978][ T804] usb 2-1: Product: syz [ 564.636383][ T804] usb 2-1: Manufacturer: syz [ 564.650015][ T804] usb 2-1: SerialNumber: syz [ 564.897400][ T804] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 564.915265][ T804] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 565.206780][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 565.206813][ T29] audit: type=1400 audit(1783170729.982:2239): avc: denied { write } for pid=22593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.419074][ T29] audit: type=1400 audit(1783170730.192:2240): avc: denied { write } for pid=22624 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.462114][T22630] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7004'. [ 565.471258][ T804] usb 2-1: USB disconnect, device number 64 [ 565.538206][T14327] udevd[14327]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.157895][ T29] audit: type=1400 audit(1783170730.932:2241): avc: denied { write } for pid=22638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.448805][ T29] audit: type=1400 audit(1783170731.222:2242): avc: denied { write } for pid=22663 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.534737][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 566.558890][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 566.569056][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 566.581980][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 566.593534][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 567.449062][T22667] Failed to initialize the IGMP autojoin socket (err -2) [ 567.596066][T22710] netlink: 83 bytes leftover after parsing attributes in process `syz.1.7022'. [ 567.840206][ T29] audit: type=1400 audit(1783170732.612:2243): avc: denied { write } for pid=22677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.112549][ T29] audit: type=1326 audit(1783170732.892:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22724 comm="syz.2.7027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91baf9de59 code=0x7fc00000 [ 568.222003][ T29] audit: type=1400 audit(1783170732.892:2245): avc: denied { write } for pid=22730 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.258995][T22739] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7032'. [ 568.681677][ T50] Bluetooth: hci2: command tx timeout [ 568.739923][ T11] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 568.767031][ T29] audit: type=1326 audit(1783170733.542:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22724 comm="syz.2.7027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91baf9de59 code=0x7fc00000 [ 568.860251][ T804] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 568.900188][ T11] usb 6-1: Using ep0 maxpacket: 8 [ 568.913786][ T11] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 568.939949][ T11] usb 6-1: config 0 has no interface number 0 [ 568.952864][ T11] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 568.988909][ T11] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 569.014449][ T11] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 569.025756][ T804] usb 4-1: Using ep0 maxpacket: 16 [ 569.037718][ T29] audit: type=1400 audit(1783170733.792:2247): avc: denied { write } for pid=22752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.073240][ T804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.083869][ T11] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 569.103549][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.124740][ T11] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 569.136579][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.157950][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.169500][ T804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 569.185107][ T11] usb 6-1: config 0 descriptor?? [ 569.190312][ T804] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 569.204151][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.212669][ T11] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 569.256992][ T804] usb 4-1: config 0 descriptor?? [ 569.293942][ T29] audit: type=1400 audit(1783170734.072:2248): avc: denied { write } for pid=22777 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.641970][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.649267][ C1] bridge0: topology change detected, propagating [ 569.707348][ T804] nintendo 0003:057E:2019.0056: unknown main item tag 0x0 [ 569.754446][ T804] nintendo 0003:057E:2019.0056: unknown main item tag 0x0 [ 569.795296][ T804] nintendo 0003:057E:2019.0056: unknown main item tag 0x0 [ 569.845602][ T804] nintendo 0003:057E:2019.0056: unknown main item tag 0x0 [ 569.903012][ T804] nintendo 0003:057E:2019.0056: unknown main item tag 0x0 [ 569.937810][ T804] nintendo 0003:057E:2019.0056: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 570.016307][T22667] netdevsim netdevsim6 netdevsim0: renamed from eth5 [ 570.042241][ T804] nintendo 0003:057E:2019.0056: Failed to get joycon info; ret=-38 [ 570.053294][T22667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.078587][T22667] netdevsim netdevsim6 netdevsim1: renamed from eth6 [ 570.094441][ T804] nintendo 0003:057E:2019.0056: Failed to retrieve controller info; ret=-38 [ 570.118022][ T804] nintendo 0003:057E:2019.0056: Failed to initialize controller; ret=-38 [ 570.147084][T22667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.175891][T22667] netdevsim netdevsim6 netdevsim2: renamed from eth7 [ 570.189361][ T804] nintendo 0003:057E:2019.0056: probe - fail = -38 [ 570.209216][ T804] nintendo 0003:057E:2019.0056: probe with driver nintendo failed with error -38 [ 570.219756][T22667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 570.245348][T22667] netdevsim netdevsim6 netdevsim3: renamed from eth8 [ 570.245804][ T804] usb 4-1: USB disconnect, device number 77 [ 570.278557][ T29] audit: type=1400 audit(1783170735.052:2249): avc: denied { write } for pid=22786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.329331][T22667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 570.464673][ T29] audit: type=1400 audit(1783170735.232:2250): avc: denied { write } for pid=22808 comm="syz.2.7052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 570.536901][ T29] audit: type=1400 audit(1783170735.272:2251): avc: denied { read } for pid=22808 comm="syz.2.7052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 570.601398][ T29] audit: type=1400 audit(1783170735.282:2252): avc: denied { write } for pid=22807 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.764199][ T50] Bluetooth: hci2: command tx timeout [ 570.920496][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 570.926821][T22763] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 571.476722][ T29] audit: type=1400 audit(1783170736.252:2253): avc: denied { write } for pid=22821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.487262][ T804] usb 6-1: USB disconnect, device number 56 [ 571.569388][ T804] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 571.664669][T22763] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 571.678549][T22763] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 571.698703][T22763] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 571.714075][ T29] audit: type=1400 audit(1783170736.492:2254): avc: denied { write } for pid=22851 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.718530][T22763] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 571.857563][T22763] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 572.138967][T22667] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 572.195947][T22667] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 572.243067][T22667] wireguard: wg0: Could not create IPv4 socket [ 572.277856][T22667] wireguard: wg1: Could not create IPv4 socket [ 572.307653][T22667] wireguard: wg2: Could not create IPv4 socket [ 572.801218][ T29] audit: type=1400 audit(1783170737.572:2255): avc: denied { write } for pid=22866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 573.000797][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 573.108357][ T29] audit: type=1400 audit(1783170737.882:2256): avc: denied { write } for pid=22906 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 573.720470][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 573.990985][ T29] audit: type=1400 audit(1783170738.772:2257): avc: denied { write } for pid=22922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 574.052697][ T29] audit: type=1400 audit(1783170738.832:2258): avc: denied { write } for pid=22937 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 574.570736][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 574.594188][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 574.609219][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 574.621812][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 574.629369][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 574.840196][ T5703] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 574.840653][ T5776] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 575.001503][ T5703] usb 4-1: Using ep0 maxpacket: 8 [ 575.025146][ T5703] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 575.049179][ T5776] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.052155][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.087143][ T5776] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 575.109597][ T5703] usb 4-1: Product: syz [ 575.115363][ T5776] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 575.126424][ T5703] usb 4-1: Manufacturer: syz [ 575.146328][ T5703] usb 4-1: SerialNumber: syz [ 575.152924][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 575.175858][ T5703] usb 4-1: config 0 descriptor?? [ 575.182872][ T5776] usb 2-1: SerialNumber: syz [ 575.194781][T22963] Failed to initialize the IGMP autojoin socket (err -2) [ 575.202810][ T5776] usb 2-1: config 0 descriptor?? [ 575.214317][T22990] loop2: detected capacity change from 0 to 7 [ 575.245797][T22990] Dev loop2: unable to read RDB block 7 [ 575.256232][T22990] loop2: AHDI p1 p2 p3 [ 575.264932][T22990] loop2: partition table partially beyond EOD, truncated [ 575.289030][T22990] loop2: p1 start 1601398130 is beyond EOD, truncated [ 575.303774][T22990] loop2: p2 start 1702059890 is beyond EOD, truncated [ 575.342911][T22995] Dev loop2: unable to read RDB block 7 [ 575.349710][T22995] loop2: AHDI p1 p2 p3 [ 575.367020][T22995] loop2: partition table partially beyond EOD, truncated [ 575.379479][T22995] loop2: p1 start 1601398130 is beyond EOD, truncated [ 575.398304][T22995] loop2: p2 start 1702059890 is beyond EOD, truncated [ 575.421552][ T5703] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 575.443171][ T4976] Dev loop2: unable to read RDB block 7 [ 575.460199][ T4976] loop2: AHDI p1 p2 p3 [ 575.462534][ T5703] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 575.465974][ T4976] loop2: partition table partially beyond EOD, truncated [ 575.509475][ T4976] loop2: p1 start 1601398130 is beyond EOD, truncated [ 575.519729][ T5703] usb 4-1: USB disconnect, device number 78 [ 575.525876][ T4976] loop2: p2 start 1702059890 is beyond EOD, truncated [ 575.623139][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 575.623157][ T29] audit: type=1400 audit(1783170740.402:2261): avc: denied { write } for pid=22977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.671121][ T5776] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 575.752827][ T804] usb 2-1: USB disconnect, device number 65 [ 575.853718][ T5776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 575.886285][ T5776] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 575.926745][ T5776] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 575.928446][ T29] audit: type=1400 audit(1783170740.702:2262): avc: denied { write } for pid=23007 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.971435][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.995039][ T5776] usb 3-1: config 0 descriptor?? [ 576.392180][ T5794] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 576.428184][ T5776] megaworld 0003:07B5:0312.0057: unknown main item tag 0x0 [ 576.453706][ T5776] megaworld 0003:07B5:0312.0057: unknown main item tag 0x0 [ 576.477010][ T5776] megaworld 0003:07B5:0312.0057: unknown main item tag 0x0 [ 576.519939][ T5776] megaworld 0003:07B5:0312.0057: unknown main item tag 0x0 [ 576.541751][ T5776] megaworld 0003:07B5:0312.0057: unknown main item tag 0x0 [ 576.562944][ T5776] megaworld 0003:07B5:0312.0057: unknown main item tag 0x0 [ 576.571559][ T5776] megaworld 0003:07B5:0312.0057: unexpected long global item [ 576.579547][ T5794] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 576.589068][ T5794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.598305][ T5776] megaworld 0003:07B5:0312.0057: parse failed [ 576.607382][ T5794] usb 4-1: config 0 descriptor?? [ 576.616331][ T5776] megaworld 0003:07B5:0312.0057: probe with driver megaworld failed with error -22 [ 576.634796][ T5794] cp210x 4-1:0.0: cp210x converter detected [ 576.649682][ T5776] usb 3-1: USB disconnect, device number 74 [ 576.681252][ T5619] Bluetooth: hci2: command tx timeout [ 576.827632][ T29] audit: type=1400 audit(1783170741.602:2263): avc: denied { write } for pid=23014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.063083][ T5794] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 577.086949][ T29] audit: type=1400 audit(1783170741.862:2264): avc: denied { write } for pid=23037 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.345098][ T5794] usb 4-1: cp210x converter now attached to ttyUSB0 [ 577.553023][ T5776] usb 4-1: USB disconnect, device number 79 [ 577.583255][ T5776] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 577.625222][ T5776] cp210x 4-1:0.0: device disconnected [ 577.680395][ T5794] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 577.745549][T22963] netdevsim netdevsim6 netdevsim0: renamed from eth5 [ 577.792091][T22963] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 577.806547][T22963] netdevsim netdevsim6 netdevsim1: renamed from eth6 [ 577.842361][ T5794] usb 3-1: Using ep0 maxpacket: 16 [ 577.849307][T22963] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 577.884422][ T5794] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 577.897773][T22963] netdevsim netdevsim6 netdevsim2: renamed from eth7 [ 577.912900][ T5794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 577.929505][T22963] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 577.942662][T22963] netdevsim netdevsim6 netdevsim3: renamed from eth8 [ 577.951612][ T5794] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 577.979000][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.991263][T22963] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 578.020898][ T5794] usb 3-1: Product: syz [ 578.038550][ T5794] usb 3-1: Manufacturer: syz [ 578.062133][ T5794] usb 3-1: SerialNumber: syz [ 578.090551][ T5794] usb 3-1: config 0 descriptor?? [ 578.126122][ T5794] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 578.164554][ T5794] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 578.198218][ T29] audit: type=1400 audit(1783170742.972:2265): avc: denied { write } for pid=23050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.448808][ T29] audit: type=1400 audit(1783170743.222:2266): avc: denied { write } for pid=23087 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.747919][ T5794] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 578.760566][ T5619] Bluetooth: hci2: command tx timeout [ 578.763924][ T5794] em28xx 3-1:0.0: Config register raw data: 0x41 [ 578.909396][T23109] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7124'. [ 579.054599][ T5794] usb 3-1: USB disconnect, device number 75 [ 579.076171][ T5794] em28xx 3-1:0.0: Disconnecting em28xx [ 579.115118][ T5794] em28xx 3-1:0.0: Freeing device [ 579.486841][ T29] audit: type=1400 audit(1783170744.262:2267): avc: denied { write } for pid=23104 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.666004][ T29] audit: type=1400 audit(1783170744.432:2268): avc: denied { write } for pid=23141 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.843247][T22963] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 579.891663][T22963] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 579.926044][T22963] wireguard: wg0: Could not create IPv4 socket [ 579.934191][ T5703] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 579.947777][T22963] wireguard: wg1: Could not create IPv4 socket [ 579.968525][T22963] wireguard: wg2: Could not create IPv4 socket [ 580.102314][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.138537][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.157565][ T5703] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 580.187773][ T5703] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 580.209695][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.239607][ T5703] usb 3-1: config 0 descriptor?? [ 580.636233][ T29] audit: type=1400 audit(1783170745.412:2269): avc: denied { write } for pid=23151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.756094][ T5703] plantronics 0003:047F:FFFF.0058: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 580.846458][ T29] audit: type=1400 audit(1783170745.622:2270): avc: denied { write } for pid=23186 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 581.597425][ T29] audit: type=1400 audit(1783170746.372:2271): avc: denied { write } for pid=23200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 581.874525][ T29] audit: type=1400 audit(1783170746.652:2272): avc: denied { write } for pid=23228 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.247773][ T29] audit: type=1400 audit(1783170747.022:2273): avc: denied { write } for pid=23233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.299926][ T29] audit: type=1400 audit(1783170747.072:2274): avc: denied { write } for pid=23244 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.536541][ T29] audit: type=1400 audit(1783170747.312:2275): avc: denied { write } for pid=23247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.766098][ T29] audit: type=1400 audit(1783170747.542:2276): avc: denied { write } for pid=23266 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.814901][ T804] usb 3-1: USB disconnect, device number 76 [ 582.951799][ T29] audit: type=1400 audit(1783170747.732:2277): avc: denied { mounton } for pid=23276 comm="syz.5.7164" path="/817/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 582.986836][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 583.007839][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 583.018514][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 583.029986][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 583.044546][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 583.195300][T23277] ./file0: Can't open blockdev [ 583.706150][T23304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.856964][T23278] Failed to initialize the IGMP autojoin socket (err -2) [ 583.898676][ T29] audit: type=1400 audit(1783170748.672:2278): avc: denied { write } for pid=23285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.190363][ T5703] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 584.372567][ T5703] usb 2-1: Using ep0 maxpacket: 32 [ 584.396909][ T5703] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 584.433460][ T5703] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 584.474647][ T5703] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 584.505038][ T5703] usb 2-1: config 1 has no interface number 0 [ 584.529464][ T5703] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 584.573298][ T5703] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 584.594926][T23339] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7178'. [ 584.599695][ T5703] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 584.632515][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.722391][ T5703] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 584.915363][ T5703] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 585.160604][ T50] Bluetooth: hci2: command tx timeout [ 585.446075][ T5703] usb 2-1: USB disconnect, device number 66 [ 585.474025][ T5703] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 586.382861][T23278] netdevsim netdevsim6 netdevsim0: renamed from eth5 [ 586.391693][ T42] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 586.456524][T23278] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 586.486423][T23278] netdevsim netdevsim6 netdevsim1: renamed from eth6 [ 586.527423][T23278] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 586.553481][T23278] netdevsim netdevsim6 netdevsim2: renamed from eth7 [ 586.575087][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 586.575102][ T29] audit: type=1400 audit(1783170751.352:2283): avc: denied { mount } for pid=23416 comm="syz.2.7205" name="/" dev="ramfs" ino=91771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 586.577778][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 586.641120][T23278] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 586.651394][T23278] netdevsim netdevsim6 netdevsim3: renamed from eth8 [ 586.665577][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 586.696468][T23278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 586.708369][ T42] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 586.750746][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 586.803505][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 586.845749][ T42] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 586.869038][ T29] audit: type=1400 audit(1783170751.642:2284): avc: denied { write } for pid=23392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.882058][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.967646][ T42] usb 4-1: Product: syz [ 586.985069][ T42] usb 4-1: Manufacturer: syz [ 586.997347][ T42] usb 4-1: SerialNumber: syz [ 587.022882][ T42] usb 4-1: config 0 descriptor?? [ 587.045805][T23397] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 587.170891][ T29] audit: type=1400 audit(1783170751.942:2285): avc: denied { write } for pid=23436 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.196676][ T5794] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 587.240985][ T50] Bluetooth: hci2: command tx timeout [ 587.243770][ T5794] hid-generic 0000:0000:0000.0059: hidraw0: HID v0.00 Device [syz1] on syz0 [ 587.283197][ T42] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 587.357140][ T42] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input66 [ 587.784413][ C1] powermate: config urb returned -71 [ 587.787507][ T5703] usb 4-1: USB disconnect, device number 80 [ 587.789789][ C1] powermate: usb_submit_urb(config) failed [ 587.796077][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 588.344579][T23477] vcan1: entered promiscuous mode [ 588.360540][T23477] vcan1: entered allmulticast mode [ 588.476329][ T29] audit: type=1400 audit(1783170753.252:2286): avc: denied { write } for pid=23458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.581628][ T29] audit: type=1400 audit(1783170753.362:2287): avc: denied { write } for pid=23487 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.885693][ T29] audit: type=1400 audit(1783170753.662:2288): avc: denied { read } for pid=23494 comm="syz.1.7222" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 588.954210][ T29] audit: type=1400 audit(1783170753.662:2289): avc: denied { open } for pid=23494 comm="syz.1.7222" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 589.011383][T23278] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 589.027663][T23457] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807a646000 pfn:0x7a646 [ 589.054089][ T29] audit: type=1400 audit(1783170753.702:2290): avc: denied { ioctl } for pid=23494 comm="syz.1.7222" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 589.062071][T23457] memcg:ffff888027bb5f80 [ 589.110146][T23502] nbd: nbd1 already in use [ 589.110583][T23278] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 589.119274][T23502] block nbd1: NBD_DISCONNECT [ 589.153782][T23502] block nbd1: Send disconnect failed -32 [ 589.158577][T23457] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 589.181886][T23278] wireguard: wg0: Could not create IPv4 socket [ 589.185740][T23502] block nbd1: shutting down sockets [ 589.192988][T23457] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 589.222727][T23278] wireguard: wg1: Could not create IPv4 socket [ 589.252994][T23457] raw: ffff88807a646000 0000000000000000 00000001ffffffff ffff888027bb5f80 [ 589.267604][T23278] wireguard: wg2: Could not create IPv4 socket [ 589.294769][T23457] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 589.320973][ T50] Bluetooth: hci2: command tx timeout [ 589.339655][T23457] page_owner tracks the page as allocated [ 589.346056][T23457] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 23457, tgid 23452 (syz.2.7215), ts 589027625394, free_ts 588860811816 [ 589.369829][ T29] audit: type=1400 audit(1783170754.132:2291): avc: denied { read } for pid=4958 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 589.377285][T23457] post_alloc_hook+0xfd/0x120 [ 589.398881][ T29] audit: type=1400 audit(1783170754.132:2292): avc: denied { search } for pid=4958 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 589.449567][T23457] get_page_from_freelist+0xf48/0x3530 [ 589.475959][T23457] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 589.487216][T23457] alloc_pages_mpol+0x1fb/0x540 [ 589.500155][T23457] folio_alloc_noprof+0x22/0x250 [ 589.510575][T23457] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 589.525053][T23457] filemap_alloc_folio_noprof+0x5e/0x80 [ 589.537162][T23457] page_cache_ra_order+0x539/0xed0 [ 589.548766][T23457] filemap_fault+0x1943/0x3130 [ 589.560054][T23457] __do_fault+0x10b/0x440 [ 589.569843][T23457] do_fault+0xa99/0x1750 [ 589.580150][T23457] __handle_mm_fault+0x187d/0x2a00 [ 589.590361][T23457] handle_mm_fault+0x37b/0xa30 [ 589.600322][T23457] __get_user_pages+0x1178/0x32a0 [ 589.612006][T23457] populate_vma_page_range+0x267/0x3f0 [ 589.623852][T23457] __mm_populate+0x107/0x3a0 [ 589.633510][T23457] page last free pid 23 tgid 23 stack trace: [ 589.646898][T23457] __free_frozen_pages+0x79f/0x1090 [ 589.658040][T23457] tlb_remove_table_rcu+0x2cf/0x380 [ 589.670657][T23457] rcu_core+0x5a2/0x10d0 [ 589.676531][T23457] handle_softirqs+0x1ea/0x9b0 [ 589.687306][T23457] run_ksoftirqd+0x38/0x60 [ 589.693813][T23457] smpboot_thread_fn+0x3d3/0xaa0 [ 589.708250][T23457] kthread+0x370/0x450 [ 589.713010][T23457] ret_from_fork+0x72b/0xd50 [ 589.717646][T23457] ret_from_fork_asm+0x1a/0x30 [ 589.723511][T23457] ------------[ cut here ]------------ [ 589.728979][T23457] kernel BUG at mm/filemap.c:858! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 589.761278][T23457] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 589.767708][T23457] CPU: 1 UID: 0 PID: 23457 Comm: syz.2.7215 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.778643][T23457] Tainted: [L]=SOFTLOCKUP [ 589.782963][T23457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 589.793016][T23457] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 589.799009][T23457] Code: 4b c1 ff 48 c7 c6 a0 93 dd 8b 4c 89 ef e8 c6 ea 12 00 90 0f 0b e8 de 4b c1 ff 48 c7 c6 00 94 dd 8b 4c 89 ef e8 af ea 12 00 90 <0f> 0b e8 c7 4b c1 ff 48 c7 c6 80 94 dd 8b 4c 89 ef e8 98 ea 12 00 [ 589.818606][T23457] RSP: 0018:ffffc90003a573f8 EFLAGS: 00010246 [ 589.824665][T23457] RAX: 0000000000080000 RBX: 0000000000112c00 RCX: ffffc90010b1a000 [ 589.832629][T23457] RDX: 0000000000080000 RSI: ffffffff825b7008 RDI: ffff8880304d2a04 [ 589.840586][T23457] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 589.848543][T23457] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 589.856506][T23457] R13: ffffea0001e99180 R14: 000000000002c928 R15: 0000000000000000 [ 589.864462][T23457] FS: 00007f91b91d56c0(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 589.873378][T23457] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 589.879963][T23457] CR2: 0000555578348a48 CR3: 0000000081aeb000 CR4: 00000000003526f0 [ 589.887919][T23457] Call Trace: [ 589.891175][T23457] [ 589.894093][T23457] ? __pfx___filemap_add_folio+0x10/0x10 [ 589.899721][T23457] filemap_add_folio+0x1d3/0x630 [ 589.904646][T23457] ? __lock_acquire+0x49f/0x1a40 [ 589.909570][T23457] ? __pfx_filemap_add_folio+0x10/0x10 [ 589.915017][T23457] ? __pfx___css_rstat_updated+0x10/0x10 [ 589.920638][T23457] page_cache_ra_order+0x602/0xed0 [ 589.925742][T23457] filemap_fault+0x1943/0x3130 [ 589.930501][T23457] ? __pfx_filemap_fault+0x10/0x10 [ 589.935602][T23457] ? find_held_lock+0x2b/0x80 [ 589.940266][T23457] __do_fault+0x10b/0x440 [ 589.944578][T23457] do_fault+0xa99/0x1750 [ 589.948807][T23457] __handle_mm_fault+0x187d/0x2a00 [ 589.953907][T23457] ? mt_find+0x45e/0x8e0 [ 589.958129][T23457] ? __pfx___handle_mm_fault+0x10/0x10 [ 589.963577][T23457] ? __pfx_mt_find+0x10/0x10 [ 589.968157][T23457] handle_mm_fault+0x37b/0xa30 [ 589.972909][T23457] __get_user_pages+0x1178/0x32a0 [ 589.977928][T23457] ? __pfx___get_user_pages+0x10/0x10 [ 589.983287][T23457] populate_vma_page_range+0x267/0x3f0 [ 589.988731][T23457] ? __pfx_populate_vma_page_range+0x10/0x10 [ 589.994697][T23457] ? __pfx_find_vma_intersection+0x10/0x10 [ 590.000488][T23457] ? do_mmap+0x93f/0x12f0 [ 590.004807][T23457] __mm_populate+0x107/0x3a0 [ 590.009384][T23457] ? __pfx___mm_populate+0x10/0x10 [ 590.014484][T23457] ? up_write+0x2e5/0x5c0 [ 590.018800][T23457] vm_mmap_pgoff+0x37f/0x470 [ 590.023374][T23457] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 590.028468][T23457] ? __fget_files+0x215/0x3d0 [ 590.033136][T23457] ? __fget_files+0x21f/0x3d0 [ 590.037804][T23457] ksys_mmap_pgoff+0x3cb/0x610 [ 590.042550][T23457] ? kcov_ioctl+0x17a/0x750 [ 590.047034][T23457] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 590.052302][T23457] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 590.058098][T23457] __x64_sys_mmap+0x125/0x190 [ 590.062767][T23457] do_syscall_64+0x115/0x870 [ 590.067346][T23457] ? clear_bhb_loop+0x40/0x90 [ 590.072010][T23457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.077887][T23457] RIP: 0033:0x7f91baf9de59 [ 590.082283][T23457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.101871][T23457] RSP: 002b:00007f91b91d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 590.110266][T23457] RAX: ffffffffffffffda RBX: 00007f91bb226090 RCX: 00007f91baf9de59 [ 590.118218][T23457] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 590.126169][T23457] RBP: 00007f91bb033e6f R08: 0000000000000004 R09: 000000002c93a000 [ 590.134122][T23457] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 590.142071][T23457] R13: 00007f91bb226128 R14: 00007f91bb226090 R15: 00007ffe8fa03ac8 [ 590.150030][T23457] [ 590.153035][T23457] Modules linked in: [ 590.157538][T23457] ---[ end trace 0000000000000000 ]--- [ 590.203214][T23457] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 590.214513][T23457] Code: 4b c1 ff 48 c7 c6 a0 93 dd 8b 4c 89 ef e8 c6 ea 12 00 90 0f 0b e8 de 4b c1 ff 48 c7 c6 00 94 dd 8b 4c 89 ef e8 af ea 12 00 90 <0f> 0b e8 c7 4b c1 ff 48 c7 c6 80 94 dd 8b 4c 89 ef e8 98 ea 12 00 [ 590.251662][T23457] RSP: 0018:ffffc90003a573f8 EFLAGS: 00010246 [ 590.321151][T23457] RAX: 0000000000080000 RBX: 0000000000112c00 RCX: ffffc90010b1a000 [ 590.359575][T23457] RDX: 0000000000080000 RSI: ffffffff825b7008 RDI: ffff8880304d2a04 [ 590.380741][T23457] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 590.399318][T23457] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 590.423700][T23457] R13: ffffea0001e99180 R14: 000000000002c928 R15: 0000000000000000 [ 590.440840][T23457] FS: 00007f91b91d56c0(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 590.475900][T23457] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 590.501878][T23457] CR2: 00007ffd5a387e98 CR3: 0000000081aeb000 CR4: 00000000003526f0 [ 590.521502][T23457] Kernel panic - not syncing: Fatal exception [ 590.527910][T23457] Kernel Offset: disabled [ 590.532218][T23457] Rebooting in 86400 seconds..