last executing test programs: 1.221255451s ago: executing program 0 (id=2535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x29}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x18) 1.174243708s ago: executing program 0 (id=2537): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcd, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 1.160187834s ago: executing program 0 (id=2539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000400)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20080100}, 0x8) 1.099608427s ago: executing program 0 (id=2541): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {}, [{0x2, 0x1, 0xee00}], {0x4, 0x4}, [], {}, {0x20, 0x5}}, 0x2c, 0x1) 1.036947681s ago: executing program 1 (id=2543): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1.035158508s ago: executing program 1 (id=2545): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000840060000b10800064000000fff0500050002"], 0x60}}, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006b", 0xc, 0xffffffffffffffff) 958.913444ms ago: executing program 1 (id=2547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r2], 0x2c}}, 0x4000000) 958.516688ms ago: executing program 1 (id=2549): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x71bdab, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x81e}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x4}]}}]}, 0x40}}, 0x0) 878.68339ms ago: executing program 1 (id=2550): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0x6, 0x1, &(0x7f0000000000)="c6", 0x9, 0x5, 0x15c2, 0x40, 0x43, 0x0, 0x7, 'syz0\x00'}) 770.354575ms ago: executing program 2 (id=2555): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) 768.840728ms ago: executing program 3 (id=2556): setresuid(0x0, 0xee01, 0x0) r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f00000003c0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x65, 0x10}, 0xb, 0x8000, 0xb0f0, 0x2, 0x0, 0x0, 0x6}) shmctl$SHM_UNLOCK(r0, 0xc) 701.863037ms ago: executing program 2 (id=2557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x20000050) 701.700611ms ago: executing program 3 (id=2558): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00') 640.513172ms ago: executing program 2 (id=2559): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x34, r2, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) 640.056122ms ago: executing program 3 (id=2560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cc, 0x325) 639.454524ms ago: executing program 2 (id=2561): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r1, 0x25, 0x16, @val=@tcx={@void, @value=r2}}, 0x1c) 560.067535ms ago: executing program 2 (id=2562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}]}, 0x28}}, 0x0) 559.960842ms ago: executing program 3 (id=2563): creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x166) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x44fc1) 559.876575ms ago: executing program 2 (id=2564): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) recvmsg(r0, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x2020) sendmsg$inet(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x80) 481.412938ms ago: executing program 3 (id=2565): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x177) 481.252838ms ago: executing program 3 (id=2566): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b23, 0x0) 273.429531ms ago: executing program 0 (id=2567): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 161.750899ms ago: executing program 0 (id=2568): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)={0x54, r3, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x4) 0s ago: executing program 1 (id=2569): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) kernel console output (not intermixed with test programs): 773][ T6651] pcmio48 [ 62.956010][ T6651] onyx-mm-dio [ 62.957369][ T6651] comedi: valid board names for pcl711 driver are: [ 62.960386][ T6651] pcl711 [ 62.961778][ T6651] pcl711b [ 62.963069][ T6651] acl8112hg [ 62.964653][ T6651] acl8112dg [ 62.965917][ T6651] comedi: valid board names for amplc_pc263 driver are: [ 62.968598][ T6651] pc263 [ 62.969758][ T6651] comedi: valid board names for amplc_pc236 driver are: [ 62.972473][ T6651] pc36at [ 62.973923][ T6651] comedi: valid board names for amplc_dio200 driver are: [ 62.976890][ T6651] pc212e [ 62.978188][ T6651] pc214e [ 62.979451][ T6651] pc215e [ 62.980720][ T6651] pc218e [ 62.981975][ T6651] pc272e [ 62.983296][ T6651] comedi: valid board names for comedi_parport driver are: [ 62.986765][ T6651] comedi_parport [ 62.988347][ T6651] comedi: valid board names for comedi_test driver are: [ 62.991235][ T6651] comedi_test [ 62.992723][ T6651] comedi: valid board names for comedi_bond driver are: [ 62.995790][ T6651] comedi_bond [ 63.056706][ T6677] netlink: 14 bytes leftover after parsing attributes in process `syz.0.362'. [ 63.065216][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 63.155596][ T6687] netlink: 36 bytes leftover after parsing attributes in process `syz.3.367'. [ 63.240893][ T6698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.372'. [ 63.306809][ T6709] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 63.654996][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 63.655013][ T42] audit: type=1400 audit(1784912087.629:358): avc: denied { load_policy } for pid=6744 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 63.683744][ T6745] SELinux: ebitmap: truncated map [ 63.685480][ T6745] SELinux: invalid class [ 63.708084][ T6745] SELinux: failed to load policy [ 63.731874][ T6751] netlink: 88 bytes leftover after parsing attributes in process `syz.3.397'. [ 63.787034][ T6757] tap0: tun_chr_ioctl cmd 1074025675 [ 63.789358][ T6757] tap0: persist disabled [ 63.964345][ T42] audit: type=1400 audit(1784912087.949:359): avc: denied { lock } for pid=6765 comm="syz.3.404" path="socket:[14683]" dev="sockfs" ino=14683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.006615][ T42] audit: type=1400 audit(1784912087.989:360): avc: denied { bind } for pid=6769 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.114325][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 64.115771][ T42] audit: type=1400 audit(1784912088.089:361): avc: denied { ioctl } for pid=6775 comm="syz.0.410" path="socket:[15513]" dev="sockfs" ino=15513 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.257808][ T42] audit: type=1400 audit(1784912088.239:362): avc: denied { read } for pid=6790 comm="syz.3.416" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.263400][ T6791] binder: 6790:6791 ioctl c018620c 200000000040 returned -22 [ 64.264825][ T42] audit: type=1400 audit(1784912088.239:363): avc: denied { open } for pid=6790 comm="syz.3.416" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.275576][ T42] audit: type=1400 audit(1784912088.239:364): avc: denied { ioctl } for pid=6790 comm="syz.3.416" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.328975][ T42] audit: type=1400 audit(1784912088.309:365): avc: denied { ioctl } for pid=6798 comm="syz.0.420" path="socket:[15544]" dev="sockfs" ino=15544 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.468355][ T65] block nbd1: Receive control failed (result -32) [ 64.554009][ T42] audit: type=1400 audit(1784912088.529:366): avc: denied { append } for pid=6831 comm="syz.0.436" name="demux0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 64.556025][ T6828] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 64.565182][ T6828] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 64.798835][ T42] audit: type=1400 audit(1784912088.779:367): avc: denied { mount } for pid=6860 comm="syz.1.451" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.204432][ T29] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 65.345359][ T6888] hugetlbfs: syz.2.463 (6888): Using mlock ulimits for SHM_HUGETLB is obsolete [ 65.367104][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 65.372502][ T29] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 65.378930][ T29] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 65.381933][ T29] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 65.385224][ T29] usb 6-1: Product: syz [ 65.386577][ T29] usb 6-1: Manufacturer: syz [ 65.388195][ T29] usb 6-1: SerialNumber: syz [ 65.394933][ T29] usb 6-1: config 0 descriptor?? [ 65.398029][ T6877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 65.401424][ T29] hub 6-1:0.0: bad descriptor, ignoring hub [ 65.404233][ T29] hub 6-1:0.0: probe with driver hub failed with error -5 [ 65.598464][ T5815] Process accounting resumed [ 65.714056][ T5815] usb 6-1: USB disconnect, device number 5 [ 65.736552][ T6912] netlink: 'syz.2.473': attribute type 1 has an invalid length. [ 65.739969][ T6912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.473'. [ 66.008831][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'. [ 66.014197][ T6930] block nbd0: reconnected socket [ 66.015698][ T5741] Bluetooth: hci0: Malformed HCI Event [ 66.018451][ T65] block nbd0: Receive control failed (result -32) [ 66.185789][ T6949] can0: slcan on ptm0. [ 66.738264][ T7013] netlink: 27 bytes leftover after parsing attributes in process `syz.3.516'. [ 66.800001][ T6944] can0 (unregistered): slcan off ptm0. [ 66.968456][ T7042] loop8: detected capacity change from 0 to 7 [ 66.975084][ C0] blk_print_req_error: 93 callbacks suppressed [ 66.975102][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.981022][ C0] buffer_io_error: 138 callbacks suppressed [ 66.981035][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 66.998045][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.001052][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 67.009504][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.012552][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 67.019622][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.023418][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 67.026509][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.029993][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 67.035901][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.039379][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 67.042788][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.046486][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 67.048973][ T7042] ldm_validate_partition_table(): Disk read failed. [ 67.056108][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.059684][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 67.062856][ T7050] block nbd1: NBD_DISCONNECT [ 67.064666][ T7050] block nbd1: Send disconnect failed -32 [ 67.068954][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.072818][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 67.074829][ T7050] block nbd1: shutting down sockets [ 67.077094][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.082212][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 67.088177][ T7042] Dev loop8: unable to read RDB block 0 [ 67.092748][ T7042] loop8: unable to read partition table [ 67.096143][ T7042] loop8: partition table beyond EOD, truncated [ 67.098709][ T7042] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 67.160482][ T7061] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 67.166571][ T7061] syzkaller1: linktype set to 776 [ 67.176604][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'. [ 67.218416][ T5814] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.227297][ T5814] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.234967][ T5814] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.243636][ T5814] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.877680][ T7144] ipvlan2: entered allmulticast mode [ 67.879402][ T7144] batadv_slave_1: entered allmulticast mode [ 67.883459][ T7144] batman_adv: batadv0: Adding interface: ipvlan2 [ 67.886087][ T7144] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.894613][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.897942][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.901042][ T7144] batman_adv: batadv0: Interface activated: ipvlan2 [ 67.915064][ T7148] syz.1.579 uses obsolete (PF_INET,SOCK_PACKET) [ 68.195897][ T7181] capability: warning: `syz.0.594' uses deprecated v2 capabilities in a way that may be insecure [ 68.483829][ T5886] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 68.633787][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 68.637412][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 68.643232][ T5886] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 68.646225][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.649026][ T5886] usb 5-1: Product: syz [ 68.650842][ T5886] usb 5-1: Manufacturer: syz [ 68.652862][ T5886] usb 5-1: SerialNumber: syz [ 68.657114][ T5886] usb 5-1: config 0 descriptor?? [ 68.661407][ T5886] hub 5-1:0.0: bad descriptor, ignoring hub [ 68.663325][ T5886] hub 5-1:0.0: probe with driver hub failed with error -5 [ 68.668214][ T5886] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 68.676107][ T5741] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 68.680974][ T5741] Bluetooth: hci2: Injecting HCI hardware error event [ 68.684671][ T42] kauditd_printk_skb: 68 callbacks suppressed [ 68.684682][ T42] audit: type=1400 audit(1784912348.673:436): avc: denied { write } for pid=7198 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.687662][ T5741] Bluetooth: hci2: hardware error 0x00 [ 68.731213][ T5449] veth1_vlan: left promiscuous mode [ 68.734678][ T5886] e1000 0000:00:06.0 eth0: Reset adapter [ 68.844212][ T5886] e1000 0000:00:06.0 eth0: Reset adapter [ 68.852985][ T7209] mmap: syz.2.603 (7209) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 68.886082][ T42] audit: type=1400 audit(1784912348.873:437): avc: denied { write } for pid=7210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.930459][ T60] usb 5-1: USB disconnect, device number 4 [ 68.955985][ T42] audit: type=1400 audit(1784912348.933:438): avc: denied { write } for pid=7216 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.990677][ T5449] veth1_vlan: entered promiscuous mode [ 69.059182][ T42] audit: type=1400 audit(1784912605.045:439): avc: denied { write } for pid=7224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.099091][ T42] audit: type=1400 audit(1784912605.085:440): avc: denied { write } for pid=7227 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.201791][ T42] audit: type=1400 audit(1784912605.185:441): avc: denied { write } for pid=7230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.243119][ T42] audit: type=1400 audit(1784912605.225:442): avc: denied { write } for pid=7233 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.585467][ T42] audit: type=1400 audit(1784912605.575:443): avc: denied { write } for pid=7238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.645408][ T42] audit: type=1400 audit(1784912605.635:444): avc: denied { write } for pid=7241 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.749051][ T42] audit: type=1400 audit(1784912605.735:445): avc: denied { write } for pid=7243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.763677][ T5741] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 70.994851][ T60] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 71.078134][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.080968][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.947463][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 74.947479][ T42] audit: type=1400 audit(1784912610.936:449): avc: denied { write } for pid=7262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.994168][ T42] audit: type=1400 audit(1784912610.986:450): avc: denied { write } for pid=7265 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.209592][ T150] cfg80211: failed to load regulatory.db [ 77.076603][ T42] audit: type=1400 audit(1784912613.066:451): avc: denied { write } for pid=7273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.128574][ T42] audit: type=1400 audit(1784912613.116:452): avc: denied { write } for pid=7276 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.904350][ T42] audit: type=1400 audit(1784912614.886:453): avc: denied { setopt } for pid=7280 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 78.915561][ T42] audit: type=1400 audit(1784912614.906:454): avc: denied { set_context_mgr } for pid=7295 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 78.985984][ T42] audit: type=1400 audit(1784912614.976:455): avc: denied { setopt } for pid=7307 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.041584][ T7314] erspan0: entered promiscuous mode [ 79.138485][ T42] audit: type=1400 audit(1784912615.126:456): avc: denied { sqpoll } for pid=7328 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.197221][ T42] audit: type=1400 audit(1784912615.186:457): avc: denied { execute } for pid=7331 comm="syz.3.626" path="/dev/audio1" dev="devtmpfs" ino=1322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 79.208474][ T7336] hpfs: Bad magic ... probably not HPFS [ 79.214905][ T7336] hpfs: Bad magic ... probably not HPFS [ 79.457231][ T42] audit: type=1400 audit(1784912615.446:458): avc: denied { write } for pid=7359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.995160][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 79.995175][ T42] audit: type=1400 audit(1784912615.986:462): avc: denied { mounton } for pid=7405 comm="syz.3.655" path="/" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 80.031073][ T42] audit: type=1400 audit(1784912616.016:463): avc: denied { unmount } for pid=5747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 80.085377][ T42] audit: type=1400 audit(1784912616.076:464): avc: denied { ioctl } for pid=7412 comm="syz.2.658" path="socket:[16879]" dev="sockfs" ino=16879 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.095595][ T7413] batadv_slave_1: entered promiscuous mode [ 80.099190][ T7412] batadv_slave_1: left promiscuous mode [ 80.103201][ T42] audit: type=1400 audit(1784912616.086:465): avc: denied { setopt } for pid=7412 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.177914][ T42] audit: type=1400 audit(1784912616.166:466): avc: denied { wake_alarm } for pid=7416 comm="syz.2.660" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.247642][ T7421] syz.0.661 (7421) used greatest stack depth: 18456 bytes left [ 80.309968][ T7426] __nla_validate_parse: 5 callbacks suppressed [ 80.309980][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 80.321344][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.664'. [ 80.462606][ T42] audit: type=1400 audit(1784912616.456:467): avc: denied { create } for pid=7439 comm="syz.0.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.470822][ T42] audit: type=1400 audit(1784912616.456:468): avc: denied { read } for pid=7439 comm="syz.0.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.526462][ T42] audit: type=1400 audit(1784912616.516:469): avc: denied { setopt } for pid=7439 comm="syz.0.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.546561][ T42] audit: type=1400 audit(1784912616.516:470): avc: denied { write } for pid=7439 comm="syz.0.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.550467][ T7400] syz.1.650 (7400): drop_caches: 1 [ 80.575828][ T7396] syz.1.650 (7396): drop_caches: 1 [ 80.611842][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'. [ 80.625240][ T7396] syz.1.650 (7396): drop_caches: 1 [ 80.758377][ T7466] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 81.062234][ T5886] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 81.170180][ T42] audit: type=1400 audit(1784912617.157:471): avc: denied { connect } for pid=7489 comm="syz.3.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.234942][ T5886] usb 7-1: Using ep0 maxpacket: 8 [ 81.241941][ T5886] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 81.246097][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.249468][ T5886] usb 7-1: Product: syz [ 81.251243][ T5886] usb 7-1: Manufacturer: syz [ 81.254814][ T5886] usb 7-1: SerialNumber: syz [ 81.258689][ T5886] usb 7-1: config 0 descriptor?? [ 81.262985][ T5886] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 81.266010][ T5886] dvb-usb: bulk message failed: -22 (2/0) [ 81.273916][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 81.282608][ T5886] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 81.285915][ T5886] usb 7-1: media controller created [ 81.293218][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.303919][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 81.305316][ T7498] kvm: kvm [7497]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 81.306788][ T5886] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 81.318364][ T5886] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input7 [ 81.326426][ T5886] dvb-usb: schedule remote query interval to 50 msecs. [ 81.328948][ T5886] dvb-usb: bulk message failed: -22 (2/0) [ 81.330997][ T5886] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 81.393895][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 81.397594][ T5886] dvb-usb: error while querying for an remote control event. [ 81.452134][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 81.454406][ T5886] dvb-usb: error while querying for an remote control event. [ 81.465146][ T7473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.473234][ T7473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.491946][ T5886] usb 7-1: USB disconnect, device number 4 [ 81.511739][ T7461] Can't find ip_set type [ 81.511845][ T7455] Can't find ip_set type [ 81.523937][ T5886] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 81.789732][ T7536] Bluetooth: MGMT ver 1.23 [ 81.791442][ T7536] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 82.354164][ T7588] openvswitch: netlink: IP tunnel TTL not specified. [ 82.360286][ T7588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.439030][ T7600] netlink: 'syz.1.734': attribute type 11 has an invalid length. [ 82.469545][ T7603] openvswitch: netlink: Actions may not be safe on all matching packets [ 83.341940][ T5816] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 83.491931][ T5816] usb 6-1: Using ep0 maxpacket: 8 [ 83.495423][ T5816] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 83.498328][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.509548][ T5816] pvrusb2: Hardware description: Terratec Grabster AV400 [ 83.511714][ T5816] pvrusb2: ********** [ 83.513036][ T5816] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 83.516184][ T5816] pvrusb2: Important functionality might not be entirely working. [ 83.518504][ T5816] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 83.522026][ T5816] pvrusb2: ********** [ 83.641948][ T5886] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 83.710040][ T2520] pvrusb2: Invalid write control endpoint [ 83.742483][ T2520] pvrusb2: Invalid write control endpoint [ 83.746374][ T2520] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 83.750345][ T2520] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 83.756642][ T2520] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 83.760980][ T2520] pvrusb2: Device being rendered inoperable [ 83.765725][ T2520] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 83.770070][ T2520] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 83.777148][ T2520] pvrusb2: Attached sub-driver cx25840 [ 83.779350][ T2520] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 83.784396][ T2520] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 83.802181][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 83.805642][ T5886] usb 5-1: config 0 has no interfaces? [ 83.807542][ T5886] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 83.810434][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.817679][ T5886] usb 5-1: config 0 descriptor?? [ 83.910879][ T5816] usb 6-1: USB disconnect, device number 6 [ 84.022943][ T5886] usb 5-1: USB disconnect, device number 5 [ 84.975079][ T7758] input: syz0 as /devices/virtual/input/input8 [ 85.047483][ T7766] pimreg: tun_chr_ioctl cmd 1074025672 [ 85.055949][ T7766] pimreg: ignored: set checksum enabled [ 85.134506][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 85.134518][ T42] audit: type=1400 audit(1784912621.127:507): avc: denied { read } for pid=7777 comm="syz.2.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.466265][ T42] audit: type=1400 audit(1784912621.457:508): avc: denied { create } for pid=7802 comm="syz.1.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 85.704726][ T7815] blkio.reset_stats is deprecated [ 85.854793][ T42] audit: type=1400 audit(1784912621.837:509): avc: denied { write } for pid=7821 comm="syz.1.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 86.145354][ T42] audit: type=1400 audit(1784912622.137:510): avc: denied { read } for pid=7841 comm="syz.3.848" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.155564][ T42] audit: type=1400 audit(1784912622.137:511): avc: denied { open } for pid=7841 comm="syz.3.848" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.164692][ T42] audit: type=1400 audit(1784912622.137:512): avc: denied { write } for pid=7841 comm="syz.3.848" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.173617][ T42] audit: type=1400 audit(1784912622.137:513): avc: denied { ioctl } for pid=7841 comm="syz.3.848" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.279494][ T7851] use of bytesused == 0 is deprecated and will be removed in the future, [ 86.283844][ T7851] use the actual size instead. [ 86.882854][ T7870] xt_hashlimit: size too large, truncated to 1048576 [ 87.013728][ T7882] Bluetooth: hci4: Frame reassembly failed (-84) [ 87.075409][ T7887] netlink: 'syz.1.868': attribute type 3 has an invalid length. [ 87.078927][ T7887] netlink: 64 bytes leftover after parsing attributes in process `syz.1.868'. [ 87.205714][ T7904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.875'. [ 87.344157][ T7923] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 87.347049][ T7923] syzkaller1: group set to 0 [ 87.378394][ T42] audit: type=1400 audit(1784912623.357:514): avc: denied { setopt } for pid=7928 comm="syz.0.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.397889][ T42] audit: type=1400 audit(1784912623.377:515): avc: denied { mount } for pid=7930 comm="syz.1.889" name="/" dev="ramfs" ino=20922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 87.417388][ T42] audit: type=1400 audit(1784912623.397:516): avc: denied { bind } for pid=7932 comm="syz.0.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.131634][ T5816] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 88.291667][ T5816] usb 6-1: Using ep0 maxpacket: 16 [ 88.301313][ T5816] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 88.304919][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.310368][ T5816] usb 6-1: Product: syz [ 88.312285][ T5816] usb 6-1: Manufacturer: syz [ 88.314976][ T5816] usb 6-1: SerialNumber: syz [ 88.552247][ T5816] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 88.560317][ T5816] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 88.565519][ T5816] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 88.574247][ T5816] usb 6-1: media controller created [ 88.587403][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.657947][ T7993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.812091][ T5816] zl10353_read_register: readreg error (reg=127, ret==-110) [ 88.843859][ T5816] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 88.850829][ T5816] usb 6-1: USB disconnect, device number 7 [ 88.879697][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 88.883572][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'. [ 88.895418][ T5844] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.899245][ T5844] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.904868][ T5844] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.908580][ T5844] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.071555][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 89.071772][ T5741] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 89.613251][ T8031] SELinux: failed to load policy [ 89.641477][ T5816] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.801808][ T5816] usb 5-1: Using ep0 maxpacket: 8 [ 89.806701][ T5816] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.810623][ T5816] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.814436][ T5816] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.818369][ T5816] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.823983][ T5816] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.827641][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.891484][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 90.039791][ T5816] usb 5-1: GET_CAPABILITIES returned 0 [ 90.042499][ T5816] usbtmc 5-1:16.0: can't read capabilities [ 90.052272][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 90.059437][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 90.062225][ T24] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 90.065923][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 90.069607][ T24] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.074171][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 90.077704][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 90.081315][ T24] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 90.086451][ T24] usb 7-1: config 168 interface 0 has no altsetting 0 [ 90.090132][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 90.093310][ T24] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 90.097248][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 90.101136][ T24] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.105037][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 90.109076][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 90.113938][ T24] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 90.118454][ T24] usb 7-1: config 168 interface 0 has no altsetting 0 [ 90.122272][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 90.125070][ T24] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 90.129068][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 90.133224][ T24] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.136555][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 90.139580][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 90.142588][ T24] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 90.146113][ T24] usb 7-1: config 168 interface 0 has no altsetting 0 [ 90.150168][ T24] usb 7-1: string descriptor 0 read error: -22 [ 90.152016][ T24] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 90.154449][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.160212][ T24] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 90.243718][ T24] usb 5-1: USB disconnect, device number 6 [ 90.363887][ T29] usb 7-1: USB disconnect, device number 5 [ 90.752538][ T8055] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 90.757375][ T8055] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 90.788603][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.945'. [ 90.857915][ T8061] netlink: 56 bytes leftover after parsing attributes in process `syz.0.947'. [ 90.905102][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 90.905115][ T42] audit: type=1400 audit(1784912626.888:520): avc: denied { block_suspend } for pid=8065 comm="syz.0.949" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.020243][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 91.030073][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 91.126624][ T8091] netlink: 16 bytes leftover after parsing attributes in process `syz.2.959'. [ 91.931423][ T5843] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 92.100905][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 92.105438][ T5843] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 92.108194][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.110604][ T5843] usb 5-1: Product: syz [ 92.112416][ T5843] usb 5-1: Manufacturer: syz [ 92.113996][ T5843] usb 5-1: SerialNumber: syz [ 92.159469][ T8128] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 92.162590][ T8128] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 92.211308][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.977'. [ 92.267590][ T8135] netlink: 56 bytes leftover after parsing attributes in process `syz.2.979'. [ 92.325328][ T5843] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 92.330370][ T5843] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 92.333905][ T5843] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 92.336568][ T5843] usb 5-1: media controller created [ 92.342945][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.572888][ T5843] zl10353_read_register: readreg error (reg=127, ret==-110) [ 92.596447][ T5843] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 92.602215][ T5843] usb 5-1: USB disconnect, device number 7 [ 93.361323][ T8182] nbd1: detected capacity change from 0 to 63 [ 93.372046][ T65] block nbd1: Receive control failed (result -104) [ 93.567676][ T8215] IPv6: sit1: Disabled Multicast RS [ 93.569706][ T8215] sit1: entered allmulticast mode [ 93.726645][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 93.729536][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 93.749903][ T8231] netlink: 'syz.0.1024': attribute type 12 has an invalid length. [ 93.755713][ T8231] netlink: 'syz.0.1024': attribute type 29 has an invalid length. [ 93.758937][ T8231] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1024'. [ 93.762887][ T8231] netlink: 'syz.0.1024': attribute type 3 has an invalid length. [ 93.767175][ T8231] netlink: 'syz.0.1024': attribute type 2 has an invalid length. [ 93.770913][ T8231] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1024'. [ 94.060211][ T8262] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 94.167976][ T89] Bluetooth: hci4: Frame reassembly failed (-84) [ 95.048343][ T8297] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 95.051163][ T8297] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 96.129513][ T8334] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 96.192177][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 96.193588][ T5741] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 96.337524][ T42] audit: type=1400 audit(1784912632.318:521): avc: denied { write } for pid=8339 comm="syz.2.1073" name="/" dev="9p" ino=71858331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.349733][ T42] audit: type=1400 audit(1784912632.318:522): avc: denied { write } for pid=8339 comm="syz.2.1073" name="/" dev="9p" ino=71858331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.359526][ T42] audit: type=1400 audit(1784912632.318:523): avc: denied { unlink } for pid=8339 comm="syz.2.1073" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=71858357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.521562][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1075'. [ 96.564072][ T8348] program syz.2.1076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.358315][ T8377] IPv6: addrconf: prefix option has invalid lifetime [ 97.498186][ T42] audit: type=1400 audit(1784912633.479:524): avc: denied { watch_mount } for pid=8384 comm="syz.0.1093" path="/283" dev="tmpfs" ino=1481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 97.618270][ T42] audit: type=1400 audit(1784912633.599:525): avc: denied { write } for pid=8396 comm="syz.1.1099" name="/" dev="9p" ino=71858331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.742709][ T8454] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 98.980373][ T5816] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 99.057798][ T8471] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 99.140039][ T5816] usb 6-1: Using ep0 maxpacket: 8 [ 99.143585][ T5816] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 99.147468][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.156306][ T5816] pvrusb2: Hardware description: Terratec Grabster AV400 [ 99.159323][ T5816] pvrusb2: ********** [ 99.162880][ T5816] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 99.167532][ T5816] pvrusb2: Important functionality might not be entirely working. [ 99.170617][ T5816] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 99.174198][ T5816] pvrusb2: ********** [ 99.213779][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1135'. [ 99.345086][ T8483] : renamed from vlan0 (while UP) [ 99.369137][ T2520] pvrusb2: Invalid write control endpoint [ 99.403675][ T8491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1141'. [ 99.414572][ T2520] pvrusb2: Invalid write control endpoint [ 99.416429][ T2520] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 99.419188][ T2520] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 99.421714][ T2520] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 99.424935][ T2520] pvrusb2: Device being rendered inoperable [ 99.426765][ T2520] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 99.429503][ T2520] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 99.441574][ T2520] pvrusb2: Attached sub-driver cx25840 [ 99.443897][ T2520] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 99.448098][ T2520] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 99.570202][ T8456] pvrusb2: Attempted to execute control transfer when device not ok [ 99.577490][ T60] usb 6-1: USB disconnect, device number 8 [ 99.800467][ T5816] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 99.960483][ T5816] usb 7-1: Using ep0 maxpacket: 8 [ 99.964919][ T5816] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 99.968342][ T5816] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.972978][ T5816] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.978204][ T5816] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.982598][ T5816] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.987712][ T5816] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 99.991989][ T5816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.033680][ T8532] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1162'. [ 100.037535][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'. [ 100.212318][ T5816] usb 7-1: GET_CAPABILITIES returned 0 [ 100.215101][ T5816] usbtmc 7-1:16.0: can't read capabilities [ 100.417869][ T29] usb 7-1: USB disconnect, device number 6 [ 100.598618][ T8568] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 100.601293][ T8568] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 100.932064][ T8597] binder: 8596:8597 ioctl c018620c 200000000040 returned -22 [ 100.994871][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 101.221110][ T8621] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1204'. [ 101.711103][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'. [ 101.944282][ T8674] netlink: 'syz.1.1225': attribute type 4 has an invalid length. [ 101.987170][ T8678] 8021q: VLANs not supported on gre0 [ 102.321402][ T42] audit: type=1400 audit(1784912638.309:526): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 102.354841][ T8696] kvm: kvm [8695]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x4 [ 103.992682][ T42] audit: type=1400 audit(1784912639.979:527): avc: denied { ioctl } for pid=8786 comm="syz.2.1280" path="socket:[24116]" dev="sockfs" ino=24116 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.000430][ T60] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 104.164839][ T60] usb 6-1: Using ep0 maxpacket: 32 [ 104.171462][ T60] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 104.174897][ T60] usb 6-1: config 0 has no interface number 0 [ 104.176783][ T60] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.180666][ T60] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 104.184544][ T60] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 104.187668][ T60] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.193499][ T60] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 104.196292][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.198812][ T60] usb 6-1: Product: syz [ 104.200494][ T60] usb 6-1: Manufacturer: syz [ 104.201985][ T60] usb 6-1: SerialNumber: syz [ 104.206311][ T60] usb 6-1: config 0 descriptor?? [ 104.209042][ T8771] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 104.214499][ T60] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input11 [ 104.224405][ C3] bcm5974 6-1:0.119: trackpad urb failed: -1 [ 104.309988][ T8808] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 104.312573][ T8808] syzkaller1: linktype set to 776 [ 104.424323][ T150] usb 6-1: USB disconnect, device number 9 [ 104.799822][ T55] e1000 0000:00:06.0 eth0: Reset adapter [ 104.876668][ T8843] hpfs: Bad magic ... probably not HPFS [ 104.882942][ T8843] hpfs: Bad magic ... probably not HPFS [ 104.909791][ T55] e1000 0000:00:06.0 eth0: Reset adapter [ 105.006955][ T8851] batadv_slave_1: entered promiscuous mode [ 105.013016][ T8849] batadv_slave_1: left promiscuous mode [ 105.019670][ T55] e1000 0000:00:06.0 eth0: Reset adapter [ 105.377217][ T42] audit: type=1400 audit(1784912641.359:528): avc: denied { write } for pid=8853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.442150][ T42] audit: type=1400 audit(1784912641.429:529): avc: denied { write } for pid=8856 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.529876][ T42] audit: type=1400 audit(1784912641.519:530): avc: denied { write } for pid=8858 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.600339][ T42] audit: type=1400 audit(1784912641.589:531): avc: denied { write } for pid=8861 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.691157][ T42] audit: type=1400 audit(1784912641.680:532): avc: denied { write } for pid=8863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.761552][ T42] audit: type=1400 audit(1784912641.750:533): avc: denied { write } for pid=8866 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.912881][ T815] block nbd1: Connection timed out, retrying (0/1 alive) [ 106.917457][ T815] block nbd1: Connection timed out, retrying (0/1 alive) [ 106.920745][ T815] block nbd1: Dead connection, failed to find a fallback [ 106.923762][ T815] block nbd1: shutting down sockets [ 106.926014][ T815] blk_print_req_error: 10 callbacks suppressed [ 106.926030][ T815] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 106.932378][ T815] buffer_io_error: 10 callbacks suppressed [ 106.932393][ T815] Buffer I/O error on dev nbd1, logical block 1, async page read [ 106.937806][ T815] Buffer I/O error on dev nbd1, logical block 2, async page read [ 106.941159][ T815] Buffer I/O error on dev nbd1, logical block 3, async page read [ 106.944318][ T815] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.948142][ T815] Buffer I/O error on dev nbd1, logical block 0, async page read [ 106.954774][ T815] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 106.958756][ T815] Buffer I/O error on dev nbd1, logical block 0, async page read [ 106.961994][ T815] Buffer I/O error on dev nbd1, logical block 1, async page read [ 106.965125][ T815] Buffer I/O error on dev nbd1, logical block 2, async page read [ 106.968258][ T815] Buffer I/O error on dev nbd1, logical block 3, async page read [ 106.974281][ T815] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 106.978140][ T815] Buffer I/O error on dev nbd1, logical block 0, async page read [ 106.981597][ T815] Buffer I/O error on dev nbd1, logical block 1, async page read [ 106.985039][ T815] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 106.989287][ T815] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 106.993543][ T815] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 106.997647][ T815] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.001936][ T7442] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 107.006826][ T7442] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.011954][ T7272] ldm_validate_partition_table(): Disk read failed. [ 107.015913][ T7272] Dev nbd1: unable to read RDB block 0 [ 107.019725][ T7272] nbd1: unable to read partition table [ 107.031471][ T7272] ldm_validate_partition_table(): Disk read failed. [ 107.035408][ T7272] Dev nbd1: unable to read RDB block 0 [ 107.039242][ T7272] nbd1: unable to read partition table [ 107.150220][ T5843] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 111.180538][ T42] audit: type=1400 audit(1784912647.170:534): avc: denied { write } for pid=8871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.237325][ T42] audit: type=1400 audit(1784912647.220:535): avc: denied { write } for pid=8874 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.760887][ T42] audit: type=1400 audit(1784912649.750:536): avc: denied { write } for pid=8876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.825959][ T42] audit: type=1400 audit(1784912649.810:537): avc: denied { write } for pid=8879 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.852936][ T8886] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 114.889119][ T42] audit: type=1400 audit(1784912650.841:538): avc: denied { connect } for pid=8885 comm="syz.1.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.919053][ T8894] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 115.135400][ T8921] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 115.260875][ T8929] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 115.359835][ T8942] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 115.924998][ T8989] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1362'. [ 115.937438][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 116.041142][ T9006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1369'. [ 116.051276][ T9003] : renamed from vlan0 (while UP) [ 116.233818][ T9025] loop9: detected capacity change from 0 to 255852544 [ 116.302267][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1383'. [ 116.308573][ T9025] loop9: detected capacity change from 255852544 to 524287999 [ 116.552216][ T9051] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 116.638472][ T9056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1401'. [ 116.773310][ T9068] loop9: detected capacity change from 0 to 255852544 [ 116.803035][ T9068] loop9: detected capacity change from 255852544 to 524287999 [ 116.910299][ T9080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1404'. [ 117.350968][ T9111] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 117.798066][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 117.947967][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 117.953156][ T29] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 117.956630][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.960896][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.964837][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.969012][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.974294][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.978120][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.192640][ T29] usb 5-1: GET_CAPABILITIES returned 0 [ 118.194989][ T29] usbtmc 5-1:16.0: can't read capabilities [ 118.280598][ T9141] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 118.401554][ T29] usb 5-1: USB disconnect, device number 8 [ 118.783139][ T5741] Bluetooth: hci3: link tx timeout [ 118.787736][ T5741] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 118.792072][ T5741] Bluetooth: hci3: link tx timeout [ 118.794210][ T5741] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.803503][ T5741] Bluetooth: hci3: link tx timeout [ 118.805623][ T5741] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 118.808887][ T5741] Bluetooth: hci3: link tx timeout [ 118.811027][ T5741] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.239218][ T9189] IPv6: addrconf: prefix option has invalid lifetime [ 119.290823][ T9197] program syz.1.1464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.496411][ T9210] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 119.622206][ T9220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1469'. [ 119.831594][ T5741] Bluetooth: hci3: link tx timeout [ 119.834714][ T5741] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 119.839213][ T5741] Bluetooth: hci3: link tx timeout [ 119.843011][ T5741] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.847133][ T5741] Bluetooth: hci3: link tx timeout [ 119.849429][ T5741] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 119.852518][ T5741] Bluetooth: hci3: link tx timeout [ 119.854657][ T5741] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.958972][ T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 120.117490][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 120.121541][ T29] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 120.125152][ T29] usb 7-1: config 0 has no interface number 0 [ 120.128259][ T29] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 120.132737][ T29] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 120.137572][ T29] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 120.141720][ T29] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.149351][ T29] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 120.153255][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.156651][ T29] usb 7-1: Product: syz [ 120.158503][ T29] usb 7-1: Manufacturer: syz [ 120.160491][ T29] usb 7-1: SerialNumber: syz [ 120.164720][ T29] usb 7-1: config 0 descriptor?? [ 120.168009][ T9226] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 120.193110][ T29] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.119/input/input12 [ 120.379959][ T55] usb 7-1: USB disconnect, device number 7 [ 120.827351][ T5741] Bluetooth: hci3: command 0x0406 tx timeout [ 122.907259][ T5741] Bluetooth: hci3: command 0x0406 tx timeout [ 123.328633][ T9353] comedi: valid board names for 8255 driver are: [ 123.330681][ T9353] 8255 [ 123.331663][ T9353] comedi: valid board names for vmk80xx driver are: [ 123.333731][ T9353] vmk80xx [ 123.334772][ T9353] comedi: valid board names for usbduxsigma driver are: [ 123.337250][ T9353] usbduxsigma [ 123.338356][ T9353] comedi: valid board names for usbduxfast driver are: [ 123.340536][ T9353] usbduxfast [ 123.341684][ T9353] comedi: valid board names for usbdux driver are: [ 123.343784][ T9353] usbdux [ 123.344817][ T9353] comedi: valid board names for ni6501 driver are: [ 123.346875][ T9353] ni6501 [ 123.347886][ T9353] comedi: valid board names for dt9812 driver are: [ 123.349899][ T9353] dt9812 [ 123.350861][ T9353] comedi: valid board names for ni_labpc_cs driver are: [ 123.353103][ T9353] ni_labpc_cs [ 123.354180][ T9353] comedi: valid board names for ni_daq_700 driver are: [ 123.356364][ T9353] ni_daq_700 [ 123.357658][ T9353] comedi: valid board names for labpc_pci driver are: [ 123.360075][ T9353] labpc_pci [ 123.361123][ T9353] comedi: valid board names for adl_pci9118 driver are: [ 123.363529][ T9353] pci9118dg [ 123.364558][ T9353] pci9118hg [ 123.365618][ T9353] pci9118hr [ 123.366717][ T9353] comedi: valid board names for 8255_pci driver are: [ 123.369452][ T9353] 8255_pci [ 123.370471][ T9353] comedi: valid board names for s526 driver are: [ 123.372465][ T9353] s526 [ 123.373343][ T9353] comedi: valid board names for multiq3 driver are: [ 123.375350][ T9353] multiq3 [ 123.376329][ T9353] comedi: valid board names for pcmuio driver are: [ 123.378757][ T9353] pcmuio48 [ 123.379788][ T9353] pcmuio96 [ 123.380791][ T9353] comedi: valid board names for pcmmio driver are: [ 123.382734][ T9353] pcmmio [ 123.383692][ T9353] comedi: valid board names for pcmda12 driver are: [ 123.385796][ T9353] pcmda12 [ 123.386769][ T9353] comedi: valid board names for pcmad driver are: [ 123.389572][ T9353] pcmad12 [ 123.390552][ T9353] pcmad16 [ 123.391566][ T9353] comedi: valid board names for ni_labpc driver are: [ 123.393637][ T9353] lab-pc-1200 [ 123.394700][ T9353] lab-pc-1200ai [ 123.395905][ T9353] lab-pc+ [ 123.396875][ T9353] comedi: valid board names for atmio16 driver are: [ 123.399353][ T9353] atmio16 [ 123.400421][ T9353] atmio16d [ 123.401422][ T9353] comedi: valid board names for ni_at_ao driver are: [ 123.403572][ T9353] at-ao-6 [ 123.404544][ T9353] at-ao-10 [ 123.405550][ T9353] comedi: valid board names for ni_at_a2150 driver are: [ 123.407867][ T9353] ni_at_a2150 [ 123.408939][ T9353] comedi: valid board names for adq12b driver are: [ 123.410995][ T9353] adq12b [ 123.411952][ T9353] comedi: valid board names for mpc624 driver are: [ 123.413990][ T9353] mpc624 [ 123.414915][ T9353] comedi: valid board names for c6xdigio driver are: [ 123.417020][ T9353] c6xdigio [ 123.418106][ T9353] comedi: valid board names for aio_iiro_16 driver are: [ 123.420241][ T9353] aio_iiro_16 [ 123.421368][ T9353] comedi: valid board names for aio_aio12_8 driver are: [ 123.423654][ T9353] aio_aio12_8 [ 123.424754][ T9353] aio_ai12_8 [ 123.425823][ T9353] aio_ao12_4 [ 123.426900][ T9353] comedi: valid board names for fl512 driver are: [ 123.429233][ T9353] fl512 [ 123.430161][ T9353] comedi: valid board names for dmm32at driver are: [ 123.432262][ T9353] dmm32at [ 123.433259][ T9353] comedi: valid board names for dt282x driver are: [ 123.435447][ T9353] dt2821 [ 123.436403][ T9353] dt2821-f [ 123.437564][ T9353] dt2821-g [ 123.438566][ T9353] dt2823 [ 123.439596][ T9353] dt2824-pgh [ 123.440648][ T9353] dt2824-pgl [ 123.441731][ T9353] dt2825 [ 123.442667][ T9353] dt2827 [ 123.443607][ T9353] dt2828 [ 123.444576][ T9353] dt2829 [ 123.445510][ T9353] dt21-ez [ 123.446497][ T9353] dt23-ez [ 123.447572][ T9353] dt24-ez [ 123.448546][ T9353] dt24-ez-pgl [ 123.449615][ T9353] comedi: valid board names for dt2817 driver are: [ 123.451689][ T9353] dt2817 [ 123.452595][ T9353] comedi: valid board names for dt2815 driver are: [ 123.454584][ T9353] dt2815 [ 123.455471][ T9353] comedi: valid board names for dt2814 driver are: [ 123.457660][ T9353] dt2814 [ 123.458540][ T9353] comedi: valid board names for dt2811 driver are: [ 123.460526][ T9353] dt2811-pgh [ 123.461566][ T9353] dt2811-pgl [ 123.462699][ T9353] comedi: valid board names for dt2801 driver are: [ 123.464935][ T9353] dt2801 [ 123.465900][ T9353] comedi: valid board names for das6402 driver are: [ 123.467951][ T9353] das6402-12 [ 123.469044][ T9353] das6402-16 [ 123.470092][ T9353] comedi: valid board names for das1800 driver are: [ 123.472046][ T9353] das-1701st [ 123.473414][ T9353] das-1701st-da [ 123.474623][ T9353] das-1702st [ 123.475672][ T9353] das-1702st-da [ 123.476770][ T9353] das-1702hr [ 123.477855][ T9353] das-1702hr-da [ 123.478935][ T9353] das-1701ao [ 123.479951][ T9353] das-1702ao [ 123.480948][ T9353] das-1801st [ 123.481948][ T9353] das-1801st-da [ 123.483146][ T9353] das-1802st [ 123.484289][ T9353] das-1802st-da [ 123.485408][ T9353] das-1802hr [ 123.486458][ T9353] das-1802hr-da [ 123.487815][ T9353] das-1801hc [ 123.488817][ T9353] das-1802hc [ 123.489847][ T9353] das-1801ao [ 123.490842][ T9353] das-1802ao [ 123.491869][ T9353] comedi: valid board names for das800 driver are: [ 123.493790][ T9353] das-800 [ 123.494798][ T9353] cio-das800 [ 123.495869][ T9353] das-801 [ 123.496829][ T9353] cio-das801 [ 123.497960][ T9353] das-802 [ 123.498924][ T9353] cio-das802 [ 123.499988][ T9353] cio-das802/16 [ 123.501076][ T9353] comedi: valid board names for isa-das08 driver are: [ 123.503134][ T9353] isa-das08 [ 123.504141][ T9353] das08-pgm [ 123.505219][ T9353] das08-pgh [ 123.506222][ T9353] das08-pgl [ 123.507273][ T9353] das08-aoh [ 123.508351][ T9353] das08-aol [ 123.509348][ T9353] das08-aom [ 123.510349][ T9353] das08/jr-ao [ 123.511412][ T9353] das08jr-16-ao [ 123.512510][ T9353] pc104-das08 [ 123.513597][ T9353] das08jr/16 [ 123.514594][ T9353] comedi: valid board names for das16m1 driver are: [ 123.516585][ T9353] das16m1 [ 123.517826][ T9353] comedi: valid board names for dac02 driver are: [ 123.519734][ T9353] dac02 [ 123.520616][ T9353] comedi: valid board names for rti802 driver are: [ 123.522496][ T9353] rti802 [ 123.523426][ T9353] comedi: valid board names for rti800 driver are: [ 123.525301][ T9353] rti800 [ 123.526221][ T9353] rti815 [ 123.527231][ T9353] comedi: valid board names for pcm3724 driver are: [ 123.529150][ T9353] pcm3724 [ 123.530119][ T9353] comedi: valid board names for pcl818 driver are: [ 123.532025][ T9353] pcl818l [ 123.532982][ T9353] pcl818h [ 123.533912][ T9353] pcl818hd [ 123.534880][ T9353] pcl818hg [ 123.535879][ T9353] pcl818 [ 123.536800][ T9353] pcl718 [ 123.537806][ T9353] pcm3718 [ 123.538767][ T9353] comedi: valid board names for pcl816 driver are: [ 123.540739][ T9353] pcl816 [ 123.541653][ T9353] pcl814b [ 123.542608][ T9353] comedi: valid board names for pcl812 driver are: [ 123.544556][ T9353] pcl812 [ 123.545468][ T9353] pcl812pg [ 123.546430][ T9353] acl8112pg [ 123.548099][ T9353] acl8112dg [ 123.549132][ T9353] acl8112hg [ 123.550312][ T9353] a821pgl [ 123.551291][ T9353] a821pglnda [ 123.552367][ T9353] a821pgh [ 123.553367][ T9353] a822pgl [ 123.554349][ T9353] a822pgh [ 123.555338][ T9353] a823pgl [ 123.556314][ T9353] a823pgh [ 123.557384][ T9353] pcl813 [ 123.558332][ T9353] pcl813b [ 123.559330][ T9353] acl8113 [ 123.560313][ T9353] iso813 [ 123.561247][ T9353] acl8216 [ 123.562232][ T9353] a826pg [ 123.563179][ T9353] comedi: valid board names for pcl730 driver are: [ 123.565178][ T9353] pcl730 [ 123.566113][ T9353] iso730 [ 123.567130][ T9353] acl7130 [ 123.568120][ T9353] pcm3730 [ 123.569107][ T9353] pcl725 [ 123.570051][ T9353] p8r8dio [ 123.571140][ T9353] acl7225b [ 123.572145][ T9353] p16r16dio [ 123.573215][ T9353] pcl733 [ 123.574146][ T9353] pcl734 [ 123.575082][ T9353] opmm-1616-xt [ 123.576208][ T9353] pearl-mm-p [ 123.577535][ T9353] ir104-pbf [ 123.578575][ T9353] comedi: valid board names for pcl726 driver are: [ 123.580592][ T9353] pcl726 [ 123.581522][ T9353] pcl727 [ 123.582457][ T9353] pcl728 [ 123.583518][ T9353] acl6126 [ 123.584490][ T9353] acl6128 [ 123.585462][ T9353] comedi: valid board names for pcl724 driver are: [ 123.587582][ T9353] pcl724 [ 123.588514][ T9353] pcl722 [ 123.589443][ T9353] pcl731 [ 123.590380][ T9353] acl7122 [ 123.591377][ T9353] acl7124 [ 123.592354][ T9353] pet48dio [ 123.593410][ T9353] pcmio48 [ 123.594385][ T9353] onyx-mm-dio [ 123.595473][ T9353] comedi: valid board names for pcl711 driver are: [ 123.597585][ T9353] pcl711 [ 123.598682][ T9353] pcl711b [ 123.599926][ T9353] acl8112hg [ 123.601264][ T9353] acl8112dg [ 123.602571][ T9353] comedi: valid board names for amplc_pc263 driver are: [ 123.605312][ T9353] pc263 [ 123.606540][ T9353] comedi: valid board names for amplc_pc236 driver are: [ 123.609834][ T9353] pc36at [ 123.611088][ T9353] comedi: valid board names for amplc_dio200 driver are: [ 123.614021][ T9353] pc212e [ 123.615291][ T9353] pc214e [ 123.616553][ T9353] pc215e [ 123.617969][ T9353] pc218e [ 123.619239][ T9353] pc272e [ 123.620504][ T9353] comedi: valid board names for comedi_parport driver are: [ 123.623468][ T9353] comedi_parport [ 123.625010][ T9353] comedi: valid board names for comedi_test driver are: [ 123.627922][ T9353] comedi_test [ 123.629382][ T9353] comedi: valid board names for comedi_bond driver are: [ 123.632237][ T9353] comedi_bond [ 124.091927][ T9363] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 124.304152][ T9371] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1539'. [ 124.308819][ T9373] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1538'. [ 124.393710][ T9379] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1549'. [ 125.376205][ T9399] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 125.482516][ T9405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1550'. [ 125.498832][ T9407] tap0: tun_chr_ioctl cmd 1074025675 [ 125.501144][ T9407] tap0: persist disabled [ 125.608256][ T9413] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1553'. [ 125.957901][ T9449] binder: 9448:9449 ioctl c018620c 200000000040 returned -22 [ 126.116676][ T65] block nbd2: Receive control failed (result -32) [ 126.357013][ T5815] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 126.404262][ T65] block nbd3: Receive control failed (result -32) [ 126.472906][ T9495] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 126.475723][ T9495] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 126.508204][ T5815] usb 7-1: Using ep0 maxpacket: 8 [ 126.511256][ T5815] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 126.517861][ T5815] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 126.526190][ T5815] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 126.534221][ T5815] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 126.539609][ T5815] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 126.544533][ T5815] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.550569][ T5815] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.556494][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.780623][ T5815] usb 7-1: GET_CAPABILITIES returned 0 [ 126.785917][ T5815] usbtmc 7-1:16.0: can't read capabilities [ 126.987248][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 126.991353][ T9464] usbtmc 7-1:16.0: Unable to send data, error -71 [ 126.995109][ T5846] usb 7-1: USB disconnect, device number 8 [ 127.185759][ T5846] Process accounting resumed [ 127.325541][ T64] Bluetooth: hci1: Malformed HCI Event [ 127.557983][ T9553] netlink: 'syz.0.1632': attribute type 1 has an invalid length. [ 127.567428][ T9553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1632'. [ 127.729025][ T10] Process accounting resumed [ 127.935708][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'. [ 127.945343][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'. [ 128.020731][ T42] audit: type=1326 audit(1784913176.016:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.0.1644" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2d99de99 code=0x7ffc0000 [ 128.029307][ T42] audit: type=1326 audit(1784913176.016:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.0.1644" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2d99de99 code=0x7ffc0000 [ 128.039916][ T42] audit: type=1326 audit(1784913176.016:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.0.1644" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2d99de99 code=0x7ffc0000 [ 128.048227][ T42] audit: type=1326 audit(1784913176.016:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.0.1644" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2d99de99 code=0x7ffc0000 [ 128.055525][ T42] audit: type=1326 audit(1784913176.016:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.0.1644" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a2d99de99 code=0x7ffc0000 [ 128.064088][ T42] audit: type=1326 audit(1784913176.016:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.0.1644" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2d99de99 code=0x7ffc0000 [ 128.072485][ T42] audit: type=1326 audit(1784913176.016:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.0.1644" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2d99de99 code=0x7ffc0000 [ 128.080691][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 128.080941][ T42] audit: type=1326 audit(1784913176.016:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.0.1644" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2d99de99 code=0x7ffc0000 [ 128.095025][ T42] audit: type=1326 audit(1784913176.016:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.0.1644" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3a2d99de99 code=0x7ffc0000 [ 128.105161][ T42] audit: type=1326 audit(1784913176.016:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.0.1644" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2d99de99 code=0x7ffc0000 [ 128.257218][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 128.262791][ T10] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 128.269899][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 128.273979][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 128.279587][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 128.284560][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 128.288625][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.293391][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.296997][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.297754][ T5737] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.304733][ T5737] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.310736][ T5737] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.315069][ T5737] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.318891][ T5737] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.319020][ T9625] netlink: 'syz.0.1661': attribute type 10 has an invalid length. [ 128.322023][ T5737] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.328170][ T5737] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.331275][ T5737] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.334460][ T5737] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.337325][ T9625] team0: Port device veth0 added [ 128.337815][ T5737] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.348703][ T5737] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 128.348703][ T5737] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on [ 128.412307][ T9630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1663'. [ 128.431731][ T9626] fido_id[9626]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 128.507630][ T5886] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 128.510506][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 128.512945][ T10] usbtmc 6-1:16.0: can't read capabilities [ 128.614049][ T9644] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1670'. [ 128.658507][ T5886] usb 7-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 128.663057][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 128.680769][ T5886] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.684497][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.685521][ T9647] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 128.687940][ T5886] usb 7-1: Product: syz [ 128.692293][ T5886] usb 7-1: Manufacturer: syz [ 128.693919][ T5886] usb 7-1: SerialNumber: syz [ 128.696916][ T5886] usb 7-1: config 0 descriptor?? [ 128.698992][ T9620] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 128.703479][ T5886] usb 7-1: selecting invalid altsetting 0 [ 128.714752][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 128.720384][ T9573] usbtmc 6-1:16.0: Unable to send data, error -71 [ 128.724034][ T10] usb 6-1: USB disconnect, device number 10 [ 128.916784][ T5886] usb 7-1: USB disconnect, device number 9 [ 129.051913][ T9680] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 129.067004][ T9682] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 129.070667][ T9682] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 129.107656][ T9686] netlink: 'syz.0.1690': attribute type 8 has an invalid length. [ 129.315100][ T9700] Falling back ldisc for ttyS3. [ 130.095504][ T9735] kvm: kvm [9734]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000074) [ 130.336070][ T9744] xt_hashlimit: size too large, truncated to 1048576 [ 130.529079][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 130.533067][ T9759] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1722'. [ 130.807557][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 130.956668][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 130.960920][ T10] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 130.964427][ T10] usb 5-1: config 0 has no interface number 0 [ 130.967145][ T10] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 130.971662][ T10] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.975637][ T10] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 130.980313][ T10] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 130.984722][ T10] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.992031][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 130.995947][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.999389][ T10] usb 5-1: Product: syz [ 131.001130][ T10] usb 5-1: Manufacturer: syz [ 131.003056][ T10] usb 5-1: SerialNumber: syz [ 131.009685][ T10] usb 5-1: config 0 descriptor?? [ 131.066931][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 131.226865][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 131.230908][ T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.233970][ T24] usb 7-1: config 0 has no interface number 0 [ 131.238606][ T24] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 131.238983][ T10] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 131.242192][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.249791][ T24] usb 7-1: Product: syz [ 131.251385][ T24] usb 7-1: Manufacturer: syz [ 131.253163][ T24] usb 7-1: SerialNumber: syz [ 131.255938][ T24] usb 7-1: config 0 descriptor?? [ 131.260372][ T24] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 131.263409][ T24] usb 7-1: selecting invalid altsetting 1 [ 131.265355][ T24] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 131.271842][ T24] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 131.275415][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 131.278974][ T24] usb 7-1: media controller created [ 131.285620][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.296783][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1733'. [ 131.300954][ T9781] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1733'. [ 131.428438][ C2] iowarrior 5-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 131.434914][ T5737] usb 5-1: USB disconnect, device number 9 [ 132.348670][ T24] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 132.352052][ T9771] usb 7-1: dvb_usb_ce6230: I2C read not implemented [ 132.355734][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 132.358729][ T24] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 132.374353][ T24] usb 7-1: USB disconnect, device number 10 [ 132.509712][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.512441][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.946956][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 133.106704][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 133.110987][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 133.115494][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.124603][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 133.127757][ T24] pvrusb2: ********** [ 133.129470][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 133.133629][ T24] pvrusb2: Important functionality might not be entirely working. [ 133.137278][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 133.142003][ T24] pvrusb2: ********** [ 133.256848][ T5886] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 133.329119][ T2520] pvrusb2: Invalid write control endpoint [ 133.351470][ T2520] pvrusb2: Invalid write control endpoint [ 133.353452][ T2520] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 133.356345][ T2520] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 133.358871][ T2520] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 133.361982][ T2520] pvrusb2: Device being rendered inoperable [ 133.363931][ T2520] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 133.366208][ T2520] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 133.369614][ T2520] pvrusb2: Attached sub-driver cx25840 [ 133.371341][ T2520] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 133.374458][ T2520] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 133.416632][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 133.419994][ T5886] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 133.425534][ T5886] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 133.429221][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 133.432473][ T5886] usb 5-1: Product: syz [ 133.434123][ T5886] usb 5-1: Manufacturer: syz [ 133.435977][ T5886] usb 5-1: SerialNumber: syz [ 133.439504][ T5886] usb 5-1: config 0 descriptor?? [ 133.441596][ T9841] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 133.445003][ T5886] hub 5-1:0.0: bad descriptor, ignoring hub [ 133.446942][ T5886] hub 5-1:0.0: probe with driver hub failed with error -5 [ 133.530167][ T9829] pvrusb2: Attempted to execute control transfer when device not ok [ 133.535306][ T24] usb 6-1: USB disconnect, device number 11 [ 133.767200][ T60] usb 5-1: USB disconnect, device number 10 [ 134.303537][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 134.303550][ T42] audit: type=1400 audit(1784913182.296:567): avc: denied { read } for pid=9874 comm="syz.1.1776" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.468094][ T42] audit: type=1400 audit(1784913182.466:568): avc: denied { create } for pid=9887 comm="syz.0.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 134.480193][ T42] audit: type=1400 audit(1784913182.476:569): avc: denied { sys_admin } for pid=9887 comm="syz.0.1783" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 134.685594][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1785'. [ 134.757033][ T10] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 134.918738][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 134.922621][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 134.927106][ T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 134.933423][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.937113][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.940043][ T10] usb 7-1: Product: syz [ 134.941482][ T10] usb 7-1: Manufacturer: syz [ 134.942920][ T10] usb 7-1: SerialNumber: syz [ 135.156893][ T10] cdc_ncm 7-1:1.0: bind() failure [ 135.178761][ T10] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 135.181694][ T10] cdc_ncm 7-1:1.1: bind() failure [ 135.187877][ T10] usb 7-1: USB disconnect, device number 11 [ 136.789204][ T42] audit: type=1400 audit(1784913184.786:570): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=36996 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 136.792419][T10019] bridge0: port 3(syz_tun) entered blocking state [ 136.798329][ T42] audit: type=1400 audit(1784913184.786:571): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=36996 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 136.800360][T10019] bridge0: port 3(syz_tun) entered disabled state [ 136.812234][T10019] syz_tun: entered allmulticast mode [ 136.815834][T10019] syz_tun: entered promiscuous mode [ 136.818811][T10019] bridge0: port 3(syz_tun) entered blocking state [ 136.821972][T10019] bridge0: port 3(syz_tun) entered forwarding state [ 136.835191][ T42] audit: type=1400 audit(1784913184.826:572): avc: denied { egress } for pid=10018 comm="syz.2.1840" daddr=172.20.20.45 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 136.842389][ T42] audit: type=1400 audit(1784913184.826:573): avc: denied { sendto } for pid=10018 comm="syz.2.1840" daddr=172.20.20.45 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 136.867030][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 136.869856][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 136.911357][T10023] ALSA: mixer_oss: invalid OSS volume '' [ 136.913523][T10023] ALSA: mixer_oss: invalid OSS volume '@' [ 136.915708][T10023] ALSA: mixer_oss: invalid OSS volume '|' [ 136.918622][T10023] ALSA: mixer_oss: invalid OSS volume '' [ 136.952827][T10025] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1843'. [ 136.957058][T10025] openvswitch: netlink: Message has 512 unknown bytes. [ 137.000624][ T42] audit: type=1400 audit(1784913184.996:574): avc: denied { mounton } for pid=10026 comm="syz.2.1844" path="/480/file0" dev="ramfs" ino=30377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 137.000901][T10027] overlayfs: workdir and upperdir must reside under the same mount [ 137.017186][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 137.021461][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 137.024859][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.034482][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 137.037060][ T10] pvrusb2: ********** [ 137.038548][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 137.041980][ T10] pvrusb2: Important functionality might not be entirely working. [ 137.044529][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 137.048496][ T10] pvrusb2: ********** [ 137.234933][ T2520] pvrusb2: Invalid write control endpoint [ 137.268049][ T2520] pvrusb2: Invalid write control endpoint [ 137.270509][ T2520] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 137.274418][ T2520] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 137.278077][ T2520] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 137.282133][ T2520] pvrusb2: Device being rendered inoperable [ 137.284669][ T2520] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 137.287781][ T2520] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 137.292328][ T2520] pvrusb2: Attached sub-driver cx25840 [ 137.294642][ T2520] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 137.296226][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1850'. [ 137.298965][ T2520] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 137.314206][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1850'. [ 137.435663][ T9999] pvrusb2: Attempted to execute control transfer when device not ok [ 137.446255][ T24] usb 6-1: USB disconnect, device number 12 [ 137.578703][T10058] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1858'. [ 137.612220][T10062] IPv6: NLM_F_CREATE should be specified when creating new route [ 137.980431][T10090] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 138.074400][ T42] audit: type=1804 audit(1784913186.066:575): pid=10102 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1879" name="/newroot/499/cgroup.controllers" dev="tmpfs" ino=2591 res=1 errno=0 [ 138.089784][ T42] audit: type=1800 audit(1784913186.076:576): pid=10102 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1879" name="cgroup.controllers" dev="tmpfs" ino=2591 res=0 errno=0 [ 138.105124][ T64] Bluetooth: hci3: unexpected cc 0x2029 length: 100 > 1 [ 138.108041][ T64] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 138.788992][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1888'. [ 139.135530][T10145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1900'. [ 139.163137][T10149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1902'. [ 139.206288][T10155] Context (ID=0x0) not attached to queue pair (handle=0x4d3:0x8) [ 139.667015][ T5846] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 139.830300][ T5846] usb 6-1: unable to get BOS descriptor or descriptor too short [ 139.834308][ T5846] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 139.837842][ T5846] usb 6-1: can't read configurations, error -71 [ 140.512279][T10207] netlink: 'syz.1.1928': attribute type 10 has an invalid length. [ 140.538486][T10207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 140.543864][T10207] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 140.551826][T10207] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1928'. [ 140.571533][T10207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.579464][T10207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.586250][T10207] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 140.592536][T10207] bond0 (unregistering): Released all slaves [ 140.831842][ T1167] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 140.916988][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 141.056993][ T5846] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 141.069384][ T10] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 141.072763][ T10] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 141.076399][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 141.081170][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 141.084034][ T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 141.086848][ T10] usb 5-1: Product: syz [ 141.088217][ T10] usb 5-1: Manufacturer: syz [ 141.089653][ T10] usb 5-1: SerialNumber: syz [ 141.092431][ T10] usb 5-1: config 0 descriptor?? [ 141.099728][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 141.101650][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 141.105606][ T10] usb 5-1: selecting invalid altsetting 0 [ 141.206668][ T5846] usb 6-1: Using ep0 maxpacket: 8 [ 141.209591][ T5846] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 141.212389][ T5846] usb 6-1: config 179 has no interface number 0 [ 141.214903][ T5846] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 141.220730][ T5846] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 141.225844][ T5846] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 141.229962][ T5846] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 141.233521][ T5846] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 141.237943][ T5846] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 141.240750][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.245144][T10219] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 141.462122][ T5816] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input15 [ 141.604949][T10227] loop3: detected capacity change from 0 to 7 [ 141.614284][ C1] blk_print_req_error: 117 callbacks suppressed [ 141.614303][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.621035][ C1] buffer_io_error: 138 callbacks suppressed [ 141.621052][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 141.630270][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.634356][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 141.637963][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.642046][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 141.645555][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.648494][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 141.651198][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.654778][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 141.657702][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.660895][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 141.664847][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.668129][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 141.668964][ T5737] usb 6-1: USB disconnect, device number 15 [ 141.670657][T10227] ldm_validate_partition_table(): Disk read failed. [ 141.670665][ C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 141.670696][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 141.683900][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.686970][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 141.690980][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.694078][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 141.697008][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.700594][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 141.703200][T10227] Dev loop3: unable to read RDB block 0 [ 141.706437][T10227] loop3: unable to read partition table [ 141.709531][T10227] loop3: partition table beyond EOD, truncated [ 141.712204][T10227] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 141.721733][T10212] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 141.764883][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1938'. [ 141.893283][T10212] usb 5-1: device firmware changed [ 141.905721][ T5846] usb 5-1: USB disconnect, device number 11 [ 141.927207][T10240] __nla_validate_parse: 1 callbacks suppressed [ 141.927219][T10240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1943'. [ 142.066661][ T5846] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 142.219624][ T5846] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 142.222267][ T5846] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 142.225934][ T5846] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.231127][ T5846] usb 5-1: string descriptor 0 read error: -22 [ 142.233133][ T5846] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 142.236300][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 142.241089][ T5846] usb 5-1: config 0 descriptor?? [ 142.244581][ T5846] hub 5-1:0.0: bad descriptor, ignoring hub [ 142.247100][ T5846] hub 5-1:0.0: probe with driver hub failed with error -5 [ 142.251246][ T5846] usb 5-1: selecting invalid altsetting 0 [ 142.280683][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 142.280700][ T42] audit: type=1400 audit(1784913190.276:578): avc: denied { accept } for pid=10251 comm="syz.2.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.566949][ T55] usb 5-1: USB disconnect, device number 12 [ 142.786714][ T5886] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 142.906778][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 142.907036][ T5741] Bluetooth: hci4: command 0x1003 tx timeout [ 142.947293][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 142.952404][ T5886] usb 6-1: unable to get BOS descriptor or descriptor too short [ 142.958518][ T5886] usb 6-1: string descriptor 0 read error: -22 [ 142.960970][ T5886] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 142.966493][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 142.978202][ T5886] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 142.984538][ T5886] dw2102: su3000_power_ctrl: 1, initialized 0 [ 142.986460][ T5886] dvb-usb: bulk message failed: -22 (2/0) [ 142.996915][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 143.000556][ T5886] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 143.004092][ T5886] usb 6-1: media controller created [ 143.005983][ T5886] dvb-usb: bulk message failed: -22 (6/0) [ 143.009863][ T5886] dw2102: i2c transfer failed. [ 143.012662][ T5886] dvb-usb: bulk message failed: -22 (6/0) [ 143.019502][ T5886] dw2102: i2c transfer failed. [ 143.021138][ T5886] dvb-usb: bulk message failed: -22 (6/0) [ 143.023073][ T5886] dw2102: i2c transfer failed. [ 143.025069][ T5886] dvb-usb: bulk message failed: -22 (6/0) [ 143.027800][ T5886] dw2102: i2c transfer failed. [ 143.030915][ T5886] dvb-usb: bulk message failed: -22 (6/0) [ 143.032765][ T5886] dw2102: i2c transfer failed. [ 143.034343][ T5886] dvb-usb: bulk message failed: -22 (6/0) [ 143.036118][ T5886] dw2102: i2c transfer failed. [ 143.038069][ T5886] dvb-usb: MAC address: 02:02:02:02:02:02 [ 143.046248][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.055584][ T5886] dvb-usb: bulk message failed: -22 (3/0) [ 143.058741][ T5886] dw2102: command 0x0e transfer failed. [ 143.065413][ T5886] dvb-usb: bulk message failed: -22 (3/0) [ 143.067510][ T5886] dw2102: command 0x0e transfer failed. [ 143.197277][T10286] loop4: detected capacity change from 0 to 7 [ 143.376666][ T5886] dvb-usb: bulk message failed: -22 (3/0) [ 143.380900][ T5886] dw2102: command 0x0e transfer failed. [ 143.383068][ T5886] dvb-usb: bulk message failed: -22 (3/0) [ 143.385121][ T5886] dw2102: command 0x0e transfer failed. [ 143.388013][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 143.391202][ T5886] dw2102: command 0x51 transfer failed. [ 143.395552][T10266] dvb-usb: bulk message failed: -22 (4/0) [ 143.404244][T10266] dw2102: i2c transfer failed. [ 143.429168][ T5886] DVB: Unable to find symbol ds3000_attach() [ 143.431968][ T5886] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 143.454652][ T42] audit: type=1400 audit(1784913191.446:579): avc: denied { load_policy } for pid=10302 comm="syz.3.1972" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 143.454773][T10303] SELinux: ebitmap: empty map [ 143.465637][T10303] SELinux: failed to load policy [ 143.480048][ T5886] rc_core: IR keymap rc-su3000 not found [ 143.482219][ T5886] Registered IR keymap rc-empty [ 143.490068][ T5886] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 143.494774][ T5886] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input16 [ 143.501001][ T5886] dvb-usb: schedule remote query interval to 150 msecs. [ 143.503210][ T5886] dw2102: su3000_power_ctrl: 0, initialized 1 [ 143.505078][ T5886] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 143.516991][ T5886] usb 6-1: USB disconnect, device number 16 [ 143.545074][ T5886] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 143.683440][T10317] SELinux: security_context_str_to_sid (measure) failed with errno=-22 [ 143.725408][T10321] Failed to get privilege flags for destination (handle=0x2:0xffffff01) [ 143.753500][ T42] audit: type=1400 audit(1784913191.746:580): avc: denied { watch } for pid=10324 comm="syz.3.1984" path="/436/file1" dev="tmpfs" ino=2251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 143.760131][T10329] tipc: Started in network mode [ 143.760476][ T42] audit: type=1400 audit(1784913191.746:581): avc: denied { watch_sb watch_reads } for pid=10324 comm="syz.3.1984" path="/436/file1" dev="tmpfs" ino=2251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.761996][T10329] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 143.776378][T10329] tipc: Enabled bearer , priority 10 [ 143.816350][T10335] input: syz0 as /devices/virtual/input/input17 [ 144.004874][ T42] audit: type=1400 audit(1784913191.996:582): avc: denied { read } for pid=10344 comm="syz.3.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.051158][ T42] audit: type=1326 audit(1784913192.046:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10350 comm="syz.3.1996" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f697e99de99 code=0x0 [ 144.417052][ T5816] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 144.444654][ T42] audit: type=1400 audit(1784913192.436:584): avc: denied { append } for pid=10381 comm="syz.2.2011" name="001" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 144.571296][ T5816] usb 5-1: unable to get BOS descriptor or descriptor too short [ 144.574211][ T5816] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 144.576395][ T5816] usb 5-1: can't read configurations, error -71 [ 144.770705][ T5886] tipc: Node number set to 4269801492 [ 145.210050][ T42] audit: type=1400 audit(1784913193.206:585): avc: denied { mounton } for pid=10429 comm="syz.2.2032" path="/" dev="tmpfs" ino=2904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 145.222136][T10433] batadv_slave_1: entered promiscuous mode [ 145.225886][T10432] batadv_slave_1: left promiscuous mode [ 145.330720][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2040'. [ 145.334408][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2040'. [ 145.455715][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2049'. [ 145.811506][T10480] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 145.878929][T10465] syz.2.2050 (10465): drop_caches: 1 [ 145.926392][T10470] syz.2.2050 (10470): drop_caches: 1 [ 146.004045][T10465] syz.2.2050 (10465): drop_caches: 1 [ 146.104680][T10497] netlink: 'syz.3.2073': attribute type 8 has an invalid length. [ 146.359268][T10519] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 146.526913][ T5816] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 146.627359][T10540] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 146.629994][T10540] syzkaller1: linktype set to 776 [ 146.688675][ T5816] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 146.692371][ T5816] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.698069][ T5816] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 146.702312][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 146.705347][ T5816] usb 5-1: Product: syz [ 146.709548][ T5816] usb 5-1: Manufacturer: syz [ 146.711437][ T5816] usb 5-1: SerialNumber: syz [ 146.720552][ T5816] usb 5-1: config 0 descriptor?? [ 146.725692][T10513] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.732724][ T5816] usb 5-1: selecting invalid altsetting 0 [ 146.951125][ T5737] usb 5-1: USB disconnect, device number 15 [ 146.986974][ T89] Bluetooth: hci4: Frame reassembly failed (-84) [ 147.003625][T10568] Bluetooth: hci4: Frame reassembly failed (-84) [ 147.066714][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 147.216678][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 147.220344][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.224637][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.228804][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.233450][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.239081][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.242572][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.462169][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 147.464531][ T24] usbtmc 7-1:16.0: can't read capabilities [ 147.670207][ T5816] usb 7-1: USB disconnect, device number 12 [ 148.998327][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 149.839537][T10677] xt_hashlimit: size too large, truncated to 1048576 [ 150.272609][T10712] can0: slcan on ptm0. [ 150.329012][T10717] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2165'. [ 150.375635][ T42] audit: type=1400 audit(1784913198.366:586): avc: denied { write } for pid=10718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.434943][ T42] audit: type=1400 audit(1784913198.426:587): avc: denied { write } for pid=10725 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.607262][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2172'. [ 150.758146][ T42] audit: type=1400 audit(1784913198.756:588): avc: denied { write } for pid=10748 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.821860][T10706] can0 (unregistered): slcan off ptm0. [ 150.833026][ T42] audit: type=1400 audit(1784913198.826:589): avc: denied { write } for pid=10757 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.918108][T10768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2186'. [ 150.961491][ T42] audit: type=1400 audit(1784913198.956:590): avc: denied { write } for pid=10770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.031464][ T42] audit: type=1400 audit(1784913199.026:591): avc: denied { write } for pid=10776 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.155146][T10789] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.163907][T10789] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.300317][T10789] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.304526][T10789] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.488024][T10789] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.495191][T10789] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.614291][T10789] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.619469][T10789] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.766313][ T5844] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.770598][ T5844] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.780790][ T42] audit: type=1400 audit(1784913199.776:592): avc: denied { write } for pid=10836 comm="syz.1.2216" name="/" dev="9p" ino=71858331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.798048][ T42] audit: type=1400 audit(1784913199.776:593): avc: denied { associate } for pid=10836 comm="syz.1.2216" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 151.811032][ T42] audit: type=1400 audit(1784913199.776:594): avc: denied { read write } for pid=10836 comm="syz.1.2216" name="file0" dev="9p" ino=71858269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.812742][ T5844] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.823833][ T5844] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.851109][ T5844] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.854816][ T5844] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.864694][ T5844] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.868733][ T5844] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.296701][T10864] erspan0: entered promiscuous mode [ 152.347557][ T42] audit: type=1400 audit(1784913200.346:595): avc: denied { execute } for pid=10868 comm="syz.3.2229" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 152.552475][T10894] netlink: 'syz.0.2240': attribute type 10 has an invalid length. [ 152.556898][T10894] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2240'. [ 152.580193][T10894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.592251][T10894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.599796][T10894] bond0 (unregistering): Released all slaves [ 152.862546][T10918] loop3: detected capacity change from 0 to 7 [ 152.869926][ C0] blk_print_req_error: 17 callbacks suppressed [ 152.869938][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.874816][ C0] buffer_io_error: 16 callbacks suppressed [ 152.874826][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.880423][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.883449][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.886049][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.889140][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.893314][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.896592][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.899780][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.902857][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.906180][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.910110][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.915321][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.919323][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.922406][T10918] ldm_validate_partition_table(): Disk read failed. [ 152.925411][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.929357][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.932859][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.936014][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.938832][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.942746][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.946427][T10918] Dev loop3: unable to read RDB block 0 [ 152.949785][T10918] loop3: unable to read partition table [ 152.952265][T10918] loop3: partition table beyond EOD, truncated [ 152.954751][T10918] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 153.013246][T10923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2254'. [ 153.293758][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'. [ 153.297377][T10946] netlink: 'syz.2.2265': attribute type 30 has an invalid length. [ 153.345367][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'. [ 153.349866][T10949] netlink: 'syz.2.2265': attribute type 30 has an invalid length. [ 153.546983][ T89] wlan1: Trigger new scan to find an IBSS to join [ 153.946661][ T5886] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 154.112080][ T5886] usb 7-1: unable to get BOS descriptor or descriptor too short [ 154.116393][ T5886] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 154.119692][ T5886] usb 7-1: can't read configurations, error -71 [ 155.678423][T10975] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2279'. [ 155.980802][T10995] batman_adv: batadv0: Adding interface: macvtap1 [ 155.983570][T10995] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.985742][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 155.994061][T10995] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 156.126321][ T89] Bluetooth: hci5: Frame reassembly failed (-84) [ 156.130839][T11011] Bluetooth: hci5: Frame reassembly failed (-84) [ 156.597559][ T1167] wlan1: Trigger new scan to find an IBSS to join [ 156.644249][T11038] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2308'. [ 156.757768][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 156.758116][ T5743] Bluetooth: hci4: command 0x1003 tx timeout [ 157.555970][T11070] erspan0: entered promiscuous mode [ 157.561844][T11072] netlink: 'syz.1.2324': attribute type 83 has an invalid length. [ 157.601596][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 157.601607][ T42] audit: type=1400 audit(1784913205.596:599): avc: denied { write } for pid=11075 comm="syz.1.2326" name="ptp0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 157.631218][T11080] openvswitch: netlink: Missing key (keys=40, expected=100) [ 157.700995][T11088] evm: overlay not supported [ 157.746435][T11094] qrtr: Invalid version 0 [ 157.936171][T11116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2346'. [ 157.978352][T11120] qrtr: Invalid version 0 [ 157.995921][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2350'. [ 158.118132][T11134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2354'. [ 158.128865][T11134] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.148041][ T42] audit: type=1400 audit(1784913206.136:600): avc: denied { mount } for pid=11139 comm="syz.1.2357" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 158.167534][ T42] audit: type=1400 audit(1784913206.166:601): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 158.196896][ T64] Bluetooth: hci5: command 0xfc11 tx timeout [ 158.198877][ T5741] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 158.539688][T11176] block nbd4: server does not support multiple connections per device. [ 158.543682][T11176] block nbd4: shutting down sockets [ 158.926752][ T5886] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 159.076649][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 159.080943][ T5886] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 159.085153][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.098073][ T5886] pvrusb2: Hardware description: Terratec Grabster AV400 [ 159.100749][ T5886] pvrusb2: ********** [ 159.102094][ T5886] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 159.105329][ T5886] pvrusb2: Important functionality might not be entirely working. [ 159.108454][ T5886] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 159.112032][ T5886] pvrusb2: ********** [ 159.306764][ T2520] pvrusb2: Invalid write control endpoint [ 159.351917][ T2520] pvrusb2: Invalid write control endpoint [ 159.354778][ T2520] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 159.360540][ T2520] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 159.363646][ T2520] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 159.368807][ T2520] pvrusb2: Device being rendered inoperable [ 159.373034][ T2520] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 159.380748][T11227] openvswitch: netlink: IP tunnel TTL not specified. [ 159.383579][T11227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.389325][ T2520] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 159.399793][ T2520] pvrusb2: Attached sub-driver cx25840 [ 159.402507][ T2520] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 159.411840][ T2520] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 159.510234][ T10] usb 5-1: USB disconnect, device number 16 [ 159.546967][ T89] wlan1: Creating new IBSS network, BSSID c2:35:19:db:d5:d1 [ 159.755818][T11254] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 159.763245][ T61] Bluetooth: hci4: Frame reassembly failed (-84) [ 160.188326][T11275] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 160.692132][ T42] audit: type=1400 audit(1784913208.686:602): avc: denied { mounton } for pid=11305 comm="syz.0.2433" path="/proc/1301/cgroup" dev="proc" ino=38266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 160.972508][T11328] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.197728][ T42] audit: type=1400 audit(1784913209.186:603): avc: denied { mount } for pid=11357 comm="syz.2.2457" name="/" dev="pstore" ino=1382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 161.590555][T11376] loop4: detected capacity change from 0 to 7 [ 161.789838][ T5741] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 162.006486][T11376] Dev loop4: unable to read RDB block 7 [ 162.010490][T11376] loop4: unable to read partition table [ 162.014812][T11376] loop4: partition table beyond EOD, truncated [ 162.017912][T11376] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 162.090103][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2473'. [ 162.105590][T11392] gretap0: entered promiscuous mode [ 162.113199][T11392] macvlan2: entered allmulticast mode [ 162.116679][T11392] gretap0: entered allmulticast mode [ 162.181259][T11396] bond0: invalid ARP target 0.0.0.0 specified for addition [ 162.184588][T11396] bond0: option arp_ip_target: invalid value (0) [ 162.200905][T11396] bond0 (unregistering): Released all slaves [ 162.258120][T11401] netlink: 'syz.3.2477': attribute type 27 has an invalid length. [ 162.294860][T11401] bond0: (slave bond_slave_1): Releasing backup interface [ 162.698462][T11430] Invalid logical block size (4) [ 162.747355][ T42] audit: type=1400 audit(1784913210.736:604): avc: denied { read } for pid=11433 comm="syz.0.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.846857][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 163.007237][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 163.013688][ T10] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 163.017971][ T10] usb 7-1: config 179 has no interface number 0 [ 163.022642][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 163.027877][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 163.032554][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 163.039161][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 163.044425][ T10] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 163.050470][ T10] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 163.055034][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.073722][T11428] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.489376][ T5886] usb 7-1: USB disconnect, device number 15 [ 163.659582][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2527'. [ 163.776928][ T42] audit: type=1400 audit(1784913211.766:605): avc: denied { accept } for pid=11518 comm="syz.0.2533" laddr=::ac14:14aa lport=60650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.898032][T11535] netlink: 'syz.1.2540': attribute type 1 has an invalid length. [ 163.901362][T11535] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2540'. [ 163.905104][T11535] netlink: 'syz.1.2540': attribute type 1 has an invalid length. [ 163.909289][T11535] netlink: 29 bytes leftover after parsing attributes in process `syz.1.2540'. [ 164.223553][T11563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2554'. [ 164.350151][T11574] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 164.352416][T11574] syzkaller1: owner set to 805 [ 164.999362][ T42] audit: type=1400 audit(1784913212.996:606): avc: denied { unmount } for pid=11593 comm="syz.1.2569" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 165.021493][T11592] [ 165.022539][T11592] ====================================================== [ 165.025453][T11592] WARNING: possible circular locking dependency detected [ 165.028308][T11592] syzkaller #0 Not tainted [ 165.030147][T11592] ------------------------------------------------------ [ 165.032588][T11592] syz.0.2568/11592 is trying to acquire lock: [ 165.034878][T11592] ffff888028372ac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1bc/0x530 [ 165.038405][T11592] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 165.038405][T11592] but task is already holding lock: [ 165.041231][T11592] ffff8880283725a0 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 165.045437][T11592] [ 165.045437][T11592] which lock already depends on the new lock. [ 165.045437][T11592] [ 165.049286][T11592] [ 165.049286][T11592] the existing dependency chain (in reverse order) is: [ 165.052643][T11592] [ 165.052643][T11592] -> #6 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 165.055957][T11592] lock_acquire+0x1b9/0x370 [ 165.057985][T11592] blk_alloc_queue+0x610/0x790 [ 165.060026][T11592] blk_mq_alloc_queue+0x174/0x290 [ 165.062090][T11592] __blk_mq_alloc_disk+0x29/0x120 [ 165.064145][T11592] nbd_dev_add+0x492/0xb10 [ 165.065932][T11592] nbd_init+0x291/0x2b0 [ 165.067741][T11592] do_one_initcall+0x11d/0x700 [ 165.069632][T11592] kernel_init_freeable+0x6ea/0x7b0 [ 165.071772][T11592] kernel_init+0x1f/0x1e0 [ 165.073641][T11592] ret_from_fork+0x72b/0xd50 [ 165.075591][T11592] ret_from_fork_asm+0x1a/0x30 [ 165.077625][T11592] [ 165.077625][T11592] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 165.080311][T11592] lock_acquire+0x1b9/0x370 [ 165.082214][T11592] fs_reclaim_acquire+0xc4/0x100 [ 165.084398][T11592] __kmalloc_cache_node_noprof+0x66/0x6c0 [ 165.086955][T11592] create_worker+0x110/0x750 [ 165.089074][T11592] workqueue_prepare_cpu+0xb5/0x160 [ 165.091288][T11592] cpuhp_invoke_callback+0x3b4/0x9a0 [ 165.093460][T11592] __cpuhp_invoke_callback_range+0x158/0x1d0 [ 165.095871][T11592] _cpu_up+0x3f6/0x960 [ 165.097644][T11592] cpu_up+0x1ba/0x230 [ 165.099373][T11592] cpuhp_bringup_mask+0xf8/0x180 [ 165.101374][T11592] bringup_nonboot_cpus+0xd9/0x1b0 [ 165.103467][T11592] smp_init+0x32/0x150 [ 165.105224][T11592] kernel_init_freeable+0x44b/0x7b0 [ 165.107431][T11592] kernel_init+0x1f/0x1e0 [ 165.109341][T11592] ret_from_fork+0x72b/0xd50 [ 165.111418][T11592] ret_from_fork_asm+0x1a/0x30 [ 165.113528][T11592] [ 165.113528][T11592] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 165.116480][T11592] lock_acquire+0x1b9/0x370 [ 165.118412][T11592] cpus_read_lock+0x42/0x170 [ 165.120367][T11592] static_key_slow_inc+0x12/0x30 [ 165.122304][T11592] nbd_genl_reconfigure+0xd82/0x1a00 [ 165.124484][T11592] genl_family_rcv_msg_doit+0x214/0x300 [ 165.126719][T11592] genl_rcv_msg+0x560/0x800 [ 165.128642][T11592] netlink_rcv_skb+0x159/0x420 [ 165.130621][T11592] genl_rcv+0x28/0x40 [ 165.132461][T11592] netlink_unicast+0x585/0x850 [ 165.134566][T11592] netlink_sendmsg+0x8b0/0xda0 [ 165.136779][T11592] ____sys_sendmsg+0xa4d/0xbe0 [ 165.138773][T11592] ___sys_sendmsg+0x190/0x1e0 [ 165.140741][T11592] __sys_sendmsg+0x160/0x210 [ 165.142652][T11592] do_syscall_64+0x115/0x870 [ 165.144578][T11592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.146954][T11592] [ 165.146954][T11592] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 165.149782][T11592] lock_acquire+0x1b9/0x370 [ 165.151670][T11592] __mutex_lock+0x1a4/0x1bd0 [ 165.153601][T11592] nbd_queue_rq+0x428/0x1080 [ 165.155604][T11592] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 165.157815][T11592] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 165.160389][T11592] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 165.162954][T11592] blk_mq_run_work_fn+0x135/0x380 [ 165.165087][T11592] process_one_work+0xa23/0x1940 [ 165.167123][T11592] worker_thread+0x5ef/0xe50 [ 165.169059][T11592] kthread+0x370/0x450 [ 165.170802][T11592] ret_from_fork+0x72b/0xd50 [ 165.172745][T11592] ret_from_fork_asm+0x1a/0x30 [ 165.174753][T11592] [ 165.174753][T11592] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 165.177526][T11592] lock_acquire+0x1b9/0x370 [ 165.179554][T11592] __mutex_lock+0x1a4/0x1bd0 [ 165.181527][T11592] nbd_queue_rq+0xba/0x1080 [ 165.183403][T11592] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 165.185682][T11592] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 165.188264][T11592] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 165.190689][T11592] blk_mq_run_work_fn+0x135/0x380 [ 165.192761][T11592] process_one_work+0xa23/0x1940 [ 165.194803][T11592] worker_thread+0x5ef/0xe50 [ 165.196822][T11592] kthread+0x370/0x450 [ 165.198702][T11592] ret_from_fork+0x72b/0xd50 [ 165.200853][T11592] ret_from_fork_asm+0x1a/0x30 [ 165.202841][T11592] [ 165.202841][T11592] -> #1 (set->srcu){.+.+}-{0:0}: [ 165.205414][T11592] lock_sync+0x9d/0x110 [ 165.207090][T11592] __synchronize_srcu+0xa2/0x300 [ 165.209041][T11592] blk_mq_quiesce_queue+0x149/0x1c0 [ 165.211089][T11592] elevator_switch+0x17b/0x7e0 [ 165.213002][T11592] elevator_change+0x352/0x530 [ 165.215007][T11592] elevator_set_default+0x29e/0x360 [ 165.217171][T11592] blk_register_queue+0x48e/0x630 [ 165.219257][T11592] __add_disk+0x73f/0xe40 [ 165.221089][T11592] add_disk_fwnode+0x118/0x480 [ 165.223038][T11592] nbd_dev_add+0x77a/0xb10 [ 165.224811][T11592] nbd_init+0x291/0x2b0 [ 165.226532][T11592] do_one_initcall+0x11d/0x700 [ 165.228488][T11592] kernel_init_freeable+0x6ea/0x7b0 [ 165.230585][T11592] kernel_init+0x1f/0x1e0 [ 165.232426][T11592] ret_from_fork+0x72b/0xd50 [ 165.234321][T11592] ret_from_fork_asm+0x1a/0x30 [ 165.236271][T11592] [ 165.236271][T11592] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 165.239230][T11592] check_prev_add+0xeb/0xe60 [ 165.241167][T11592] __lock_acquire+0x136c/0x1a40 [ 165.243177][T11592] lock_acquire+0x1b9/0x370 [ 165.245046][T11592] __mutex_lock+0x1a4/0x1bd0 [ 165.246975][T11592] elevator_change+0x1bc/0x530 [ 165.248951][T11592] elevator_set_none+0x92/0xf0 [ 165.250882][T11592] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 165.253233][T11592] nbd_start_device+0x1a6/0xbd0 [ 165.255260][T11592] nbd_genl_connect+0xff2/0x1a40 [ 165.257299][T11592] genl_family_rcv_msg_doit+0x214/0x300 [ 165.259572][T11592] genl_rcv_msg+0x560/0x800 [ 165.261368][T11592] netlink_rcv_skb+0x159/0x420 [ 165.263348][T11592] genl_rcv+0x28/0x40 [ 165.265150][T11592] netlink_unicast+0x585/0x850 [ 165.267300][T11592] netlink_sendmsg+0x8b0/0xda0 [ 165.269406][T11592] ____sys_sendmsg+0xa4d/0xbe0 [ 165.271517][T11592] ___sys_sendmsg+0x190/0x1e0 [ 165.273503][T11592] __sys_sendmsg+0x160/0x210 [ 165.275441][T11592] do_syscall_64+0x115/0x870 [ 165.277335][T11592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.279719][T11592] [ 165.279719][T11592] other info that might help us debug this: [ 165.279719][T11592] [ 165.283747][T11592] Chain exists of: [ 165.283747][T11592] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 165.283747][T11592] [ 165.289111][T11592] Possible unsafe locking scenario: [ 165.289111][T11592] [ 165.291928][T11592] CPU0 CPU1 [ 165.293952][T11592] ---- ---- [ 165.295947][T11592] lock(&q->q_usage_counter(io)#53); [ 165.297983][T11592] lock(fs_reclaim); [ 165.300399][T11592] lock(&q->q_usage_counter(io)#53); [ 165.303216][T11592] lock(&q->elevator_lock); [ 165.305006][T11592] [ 165.305006][T11592] *** DEADLOCK *** [ 165.305006][T11592] [ 165.308177][T11592] 6 locks held by syz.0.2568/11592: [ 165.310199][T11592] #0: ffffffff90b4d768 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 165.313567][T11592] #1: ffffffff90b4d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 165.317046][T11592] #2: ffff8880267581c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x9d/0x15f0 [ 165.321264][T11592] #3: ffff8880267580d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb0/0x15f0 [ 165.325254][T11592] #4: ffff8880283725a0 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 165.329580][T11592] #5: ffff8880283725d8 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 165.334118][T11592] [ 165.334118][T11592] stack backtrace: [ 165.336513][T11592] CPU: 0 UID: 0 PID: 11592 Comm: syz.0.2568 Not tainted syzkaller #0 PREEMPT(full) [ 165.336541][T11592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.336551][T11592] Call Trace: [ 165.336559][T11592] [ 165.336568][T11592] dump_stack_lvl+0x100/0x190 [ 165.336595][T11592] print_circular_bug.cold+0x178/0x1c7 [ 165.336624][T11592] check_noncircular+0x146/0x160 [ 165.336646][T11592] check_prev_add+0xeb/0xe60 [ 165.336664][T11592] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 165.336693][T11592] __lock_acquire+0x136c/0x1a40 [ 165.336717][T11592] lock_acquire+0x1b9/0x370 [ 165.336736][T11592] ? elevator_change+0x1bc/0x530 [ 165.336755][T11592] ? __pfx___might_resched+0x10/0x10 [ 165.336777][T11592] ? __pfx___flush_work+0x10/0x10 [ 165.336796][T11592] __mutex_lock+0x1a4/0x1bd0 [ 165.336813][T11592] ? elevator_change+0x1bc/0x530 [ 165.336831][T11592] ? elevator_change+0x1bc/0x530 [ 165.336849][T11592] ? enable_work+0x295/0x320 [ 165.336874][T11592] ? lockdep_hardirqs_on+0x78/0x100 [ 165.336890][T11592] ? __pfx___mutex_lock+0x10/0x10 [ 165.336906][T11592] ? __pfx_enable_work+0x10/0x10 [ 165.336924][T11592] ? __pfx___might_resched+0x10/0x10 [ 165.336942][T11592] ? blk_mq_cancel_work_sync+0x101/0x3c0 [ 165.336958][T11592] ? cancel_delayed_work_sync+0x96/0xf0 [ 165.336979][T11592] ? blk_mq_cancel_work_sync+0x36c/0x3c0 [ 165.336995][T11592] ? elevator_change+0x1bc/0x530 [ 165.337013][T11592] elevator_change+0x1bc/0x530 [ 165.337032][T11592] elevator_set_none+0x92/0xf0 [ 165.337052][T11592] ? __pfx_elevator_set_none+0x10/0x10 [ 165.337070][T11592] ? blk_mq_unregister_hctx.part.0+0x1ba/0x230 [ 165.337095][T11592] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 165.337120][T11592] ? print_kernel_ident+0x17/0x40 [ 165.337147][T11592] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 165.337175][T11592] ? sysfs_create_file_ns+0x14c/0x1e0 [ 165.337199][T11592] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 165.337223][T11592] nbd_start_device+0x1a6/0xbd0 [ 165.337245][T11592] nbd_genl_connect+0xff2/0x1a40 [ 165.337265][T11592] ? __pfx_nbd_genl_connect+0x10/0x10 [ 165.337284][T11592] ? __nla_parse+0x40/0x60 [ 165.337298][T11592] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 165.337316][T11592] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 165.337334][T11592] genl_family_rcv_msg_doit+0x214/0x300 [ 165.337351][T11592] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 165.337367][T11592] ? genl_get_cmd+0x3e7/0x760 [ 165.337384][T11592] ? ____sys_sendmsg+0xa4d/0xbe0 [ 165.337404][T11592] ? ___sys_sendmsg+0x190/0x1e0 [ 165.337425][T11592] ? __radix_tree_lookup+0x217/0x2b0 [ 165.337440][T11592] genl_rcv_msg+0x560/0x800 [ 165.337456][T11592] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.337471][T11592] ? __pfx_nbd_genl_connect+0x10/0x10 [ 165.337491][T11592] ? __lock_acquire+0x49f/0x1a40 [ 165.337509][T11592] netlink_rcv_skb+0x159/0x420 [ 165.337522][T11592] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.337537][T11592] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 165.337554][T11592] ? netlink_deliver_tap+0x1ae/0xcc0 [ 165.337576][T11592] genl_rcv+0x28/0x40 [ 165.337589][T11592] netlink_unicast+0x585/0x850 [ 165.337603][T11592] ? __pfx_netlink_unicast+0x10/0x10 [ 165.337628][T11592] netlink_sendmsg+0x8b0/0xda0 [ 165.337643][T11592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.337657][T11592] ? selinux_socket_sendmsg+0x198/0x2f0 [ 165.337678][T11592] ____sys_sendmsg+0xa4d/0xbe0 [ 165.337698][T11592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.337712][T11592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.337736][T11592] ___sys_sendmsg+0x190/0x1e0 [ 165.337758][T11592] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.337778][T11592] ? __lock_acquire+0x49f/0x1a40 [ 165.337806][T11592] __sys_sendmsg+0x160/0x210 [ 165.337823][T11592] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.337844][T11592] do_syscall_64+0x115/0x870 [ 165.337864][T11592] ? clear_bhb_loop+0x40/0x90 [ 165.337881][T11592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.337896][T11592] RIP: 0033:0x7f3a2d99de99 [ 165.337909][T11592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.337923][T11592] RSP: 002b:00007f3a2e92b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.337940][T11592] RAX: ffffffffffffffda RBX: 00007f3a2dc25fa0 RCX: 00007f3a2d99de99 [ 165.337950][T11592] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 165.337959][T11592] RBP: 00007f3a2da33eaf R08: 0000000000000000 R09: 0000000000000000 [ 165.337968][T11592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.337977][T11592] R13: 00007f3a2dc26038 R14: 00007f3a2dc25fa0 R15: 00007ffccbe20c58 [ 165.337991][T11592] [ 165.694020][ T8783] bridge0: port 3(syz_tun) entered disabled state [ 165.706066][ T8783] syz_tun (unregistering): left allmulticast mode [ 165.709184][ T8783] syz_tun (unregistering): left promiscuous mode [ 165.712036][ T8783] bridge0: port 3(syz_tun) entered disabled state