last executing test programs: 46.401121162s ago: executing program 1 (id=9084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000acc000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000009e000c0046723040dcf851353d80428b66c4a5c76fdd086344be5b4b365b030000000000000098b7647dd42e1f003e993562f77b29872355e30839152ef602e4e7b1a25f4123ba0b4f5889c3681c221c0b96e521524250432d6063a60098490ece73ddd10f0030be88fed0a90e3ad8f6863296818bb85f56f7ce8ea7f57bd1a124d9398abb0010000000000000e9577a02dd7f0018c1ac994fbb855ea542000014000000110001"], 0xf4}, 0x1, 0x0, 0x0, 0x4040854}, 0x24000840) 46.303889255s ago: executing program 1 (id=9085): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000003f00)={&(0x7f0000002f00)=""/4096, 0x1000}) 46.303678892s ago: executing program 1 (id=9086): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)={0x3c, r1, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2}, 0x0) 46.237593755s ago: executing program 1 (id=9087): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 46.237506697s ago: executing program 1 (id=9088): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x11) 45.946243877s ago: executing program 1 (id=9089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x20, r1, 0x301, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x29}}}}}, 0x20}}, 0x40) 45.922745084s ago: executing program 32 (id=9089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x20, r1, 0x301, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x29}}}}}, 0x20}}, 0x40) 1.047118271s ago: executing program 0 (id=10674): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r1, 0x1, 0xfffffffa, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x50010}, 0x0) 1.04229937s ago: executing program 0 (id=10676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) 1.001601534s ago: executing program 0 (id=10678): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x100, 0xb, 0xdd, 0x2, 0x1, 0x103, 0x3, 0x20000000, 0x8, 0xb, 0xffffffff, 0xb51, 0x9, 0x401, 0x3, 0xe, 0x0, 0x3, 0xfe9, 0xfffffffd, 0x6, 0x2, 0x4, 0x9, 0x48, 0x6, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) 997.270764ms ago: executing program 0 (id=10680): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) 935.028464ms ago: executing program 0 (id=10682): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xf}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 934.802282ms ago: executing program 0 (id=10684): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 154.182895ms ago: executing program 2 (id=10705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0)) 153.787716ms ago: executing program 3 (id=10707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}, 0x1, 0x0, 0x0, 0x840}, 0x0) 115.120425ms ago: executing program 3 (id=10708): r0 = socket(0x40000000015, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x3f, &(0x7f00000008c0)=0x1, 0x4) 112.552255ms ago: executing program 3 (id=10709): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 110.214637ms ago: executing program 2 (id=10710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x400, 0x4}, 0x14}}, 0x0) 64.5063ms ago: executing program 2 (id=10711): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000ffff00000000ac0714bb000000000000000000000000fffe04001000000002"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 61.852252ms ago: executing program 3 (id=10712): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) 61.561608ms ago: executing program 2 (id=10713): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x8, 0xc66c, 0x21, 0x2, "7f0900006b3beb00", 0x0, 0x5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x9) 60.092954ms ago: executing program 3 (id=10714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x4048010) 4.553918ms ago: executing program 2 (id=10715): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42}, 0x2000400c) 158.226µs ago: executing program 3 (id=10716): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001d00010029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="80007e0a0a000200aaaaaaaaaaeeffff05000500"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 0s ago: executing program 2 (id=10717): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) kernel console output (not intermixed with test programs): ngth. [ 132.207432][T20579] NCSI netlink: No device for ifindex 0 [ 132.298689][T20590] xt_hashlimit: size too large, truncated to 1048576 [ 132.343447][T20487] syz.3.7137 (20487): drop_caches: 2 [ 132.443112][T20612] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 132.457466][T20617] MTD: Couldn't look up './bus': -15 [ 132.641160][T20654] __nla_validate_parse: 18 callbacks suppressed [ 132.641173][T20654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7216'. [ 132.829661][T20700] program syz.3.7238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.888922][ T1134] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 132.892930][ T1134] ata1.00: irq_stat 0x40000000 [ 132.894474][ T1134] ata1.00: failed command: ZAC MANAGEMENT OUT [ 132.896960][ T1134] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 17 [ 132.896960][ T1134] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 132.902162][ T1134] ata1.00: status: { DRDY ERR } [ 132.903749][ T1134] ata1.00: error: { ABRT } [ 132.905118][ T1134] ata1.00: device reported invalid CHS sector 0 [ 132.917076][T20716] IPv6: NLM_F_CREATE should be specified when creating new route [ 133.020254][T20740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7260'. [ 133.285795][T20781] random: crng reseeded on system resumption [ 133.330717][T20785] program syz.3.7281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.379029][T20791] IPv6: Can't replace route, no match found [ 133.436803][T20798] netlink: 'syz.0.7287': attribute type 21 has an invalid length. [ 133.487201][T20808] nfs: Unknown parameter './file0' [ 133.556687][T20823] dlm: no locking on control device [ 133.635071][T20842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7309'. [ 133.668642][T20846] NILFS (nullb0): couldn't find nilfs on the device [ 133.684636][T20844] xt_CT: No such helper "pptp" [ 133.716399][T20859] netlink: 'syz.3.7316': attribute type 11 has an invalid length. [ 133.718903][T20859] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7316'. [ 133.753246][T20867] xt_TPROXY: Can be used only with -p tcp or -p udp [ 133.827750][ T42] kauditd_printk_skb: 304 callbacks suppressed [ 133.827761][ T42] audit: type=1400 audit(128.038:3601): avc: denied { setopt } for pid=20882 comm="syz.3.7328" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.862334][T20893] random: crng reseeded on system resumption [ 133.864107][ T42] audit: type=1400 audit(128.065:3602): avc: denied { read } for pid=20890 comm="syz.3.7332" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 133.873200][ T42] audit: type=1400 audit(128.065:3603): avc: denied { open } for pid=20890 comm="syz.3.7332" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 133.879715][T20897] autofs4:pid:20897:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 133.881236][ T42] audit: type=1400 audit(128.065:3604): avc: denied { ioctl } for pid=20890 comm="syz.3.7332" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64b8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 133.881260][ T42] audit: type=1400 audit(128.065:3605): avc: denied { write } for pid=20892 comm="syz.2.7335" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 133.881281][ T42] audit: type=1400 audit(128.065:3606): avc: denied { open } for pid=20892 comm="syz.2.7335" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 133.881304][ T42] audit: type=1400 audit(128.075:3607): avc: denied { write } for pid=20894 comm="syz.1.7334" name="v4l-subdev6" dev="devtmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.881324][ T42] audit: type=1400 audit(128.075:3608): avc: denied { read } for pid=20895 comm="syz.0.7333" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 133.881344][ T42] audit: type=1400 audit(128.075:3609): avc: denied { open } for pid=20895 comm="syz.0.7333" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 133.881364][ T42] audit: type=1400 audit(128.084:3610): avc: denied { ioctl } for pid=20892 comm="syz.2.7335" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 134.048313][T20931] XFS (nbd1): SB validate failed with error -5. [ 134.070314][T20906] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 134.310403][T20994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7380'. [ 134.477661][ T6030] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.503943][T21041] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7404'. [ 134.535486][T21044] dummy0: entered allmulticast mode [ 134.676898][T21052] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 134.783052][T21094] sit0: entered promiscuous mode [ 134.790682][T21094] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7429'. [ 134.893621][T21118] IPv6: NLM_F_CREATE should be specified when creating new route [ 134.966122][T21131] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 135.182404][T21168] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7465'. [ 135.301510][T21185] program syz.1.7474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.317465][T21187] /dev/sg0: Can't lookup blockdev [ 135.436771][T21208] random: crng reseeded on system resumption [ 135.476403][ C2] ata1: illegal qc_active transition (00000000->00080000) [ 135.506742][T21218] block nbd3: NBD_DISCONNECT [ 135.525412][T21220] befs: (loop1): No write support. Marking filesystem read-only [ 135.533418][T21220] befs: (loop1): unable to read superblock [ 135.829536][ T1134] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 135.832626][ T1134] ata1.00: configured for UDMA/100 [ 135.949867][T21283] tmpfs: Bad value for 'mpol' [ 136.146162][T21307] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 136.235043][T21325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7542'. [ 136.237786][T21325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7542'. [ 136.243452][T21325] geneve2: entered promiscuous mode [ 136.245076][T21325] geneve2: entered allmulticast mode [ 136.489650][T21343] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 136.530611][T21363] bond5 (unregistering): Released all slaves [ 136.576941][T21372] gretap0: left allmulticast mode [ 136.580231][T21372] sit0: left promiscuous mode [ 136.607472][T21372] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.611532][T21372] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.619313][T21372] batadv_slave_0: left promiscuous mode [ 136.620980][T21372] batadv_slave_0: left allmulticast mode [ 136.630931][T21372] virt_wifi0: left promiscuous mode [ 136.632654][T21372] virt_wifi0: left allmulticast mode [ 136.636576][T21372] vlan0: left promiscuous mode [ 136.640822][T21372] ipvlan0: left allmulticast mode [ 136.642414][T21372] veth0_vlan: left allmulticast mode [ 136.649749][T21372] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 136.663986][T21372] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 136.675841][T21372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.678834][T21372] bridge1: left promiscuous mode [ 136.680435][T21372] bridge1: left allmulticast mode [ 136.683825][T21372] ip6erspan0: left promiscuous mode [ 136.690426][T21372] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.695514][T21372] bridge4: left promiscuous mode [ 136.700026][T21372] bond3: left promiscuous mode [ 136.702470][T21372] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.708304][T21372] vcan1: left allmulticast mode [ 136.714430][T21372] 8021q: adding VLAN 0 to HW filter on device bond4 [ 136.722814][T21372] geneve2: left promiscuous mode [ 136.725613][T21372] geneve2: left allmulticast mode [ 136.729514][ T29] lo speed is unknown, defaulting to 1000 [ 136.735584][ T29] sz1: Port: 1 Link ACTIVE [ 136.757966][ T6030] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 136.761938][ T6030] ip6_tunnel: K xmit: Local address not yet configured! [ 136.762528][ T29] lo speed is unknown, defaulting to 1000 [ 136.786820][T21389] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 137.013528][T21425] overlay: Bad value for 'workdir' [ 137.271593][T21454] 9pnet: Found fid 0 not clunked [ 137.549916][T21477] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 137.571049][ T6121] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 137.993310][T21541] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 138.072593][T21558] cgroup: Name too long [ 138.173722][T21571] ubi8: attaching mtd0 [ 138.180014][T21571] ubi8: scanning is finished [ 138.181808][T21571] ubi8: empty MTD device detected [ 138.291682][ T6121] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 138.329399][T21571] ubi8: attached mtd0 (name "mtdram test device", size 0 MiB) [ 138.339595][T21571] ubi8: PEB size: 4096 bytes (4 KiB), LEB size: 385 bytes [ 138.343773][T21571] ubi8: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 138.346284][T21571] ubi8: VID header offset: 3647 (aligned 3647), data offset: 3711 [ 138.348705][T21571] ubi8: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 138.351121][T21571] ubi8: user volume: 0, internal volumes: 1, max. volumes count: 2 [ 138.353582][T21571] ubi8: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2985871889 [ 138.356653][T21571] ubi8: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 138.360901][T21593] ubi8: background thread "ubi_bgt8d" started, PID 21593 [ 138.527192][T21633] lo: left promiscuous mode [ 138.592857][T21643] program syz.0.7697 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.604833][T21633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.612485][T21633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.649897][T21633] veth0_macvtap: left allmulticast mode [ 138.656171][T21633] veth1_macvtap: left allmulticast mode [ 138.659034][T21633] macsec0: left promiscuous mode [ 138.681523][T21633] erspan1: left promiscuous mode [ 138.692421][T21633] bond5: left promiscuous mode [ 138.695883][T21633] bridge9: left promiscuous mode [ 138.699756][ T9] xfrm0 speed is unknown, defaulting to 1000 [ 138.702334][ T9] syz0: Port: 1 Link DOWN [ 138.716130][T21651] bond4: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 138.720227][T21651] bond4 (unregistering): Released all slaves [ 138.743225][T21654] validate_nla: 7 callbacks suppressed [ 138.743237][T21654] netlink: 'syz.2.7703': attribute type 39 has an invalid length. [ 138.744917][ T12] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.753307][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.756848][ T9] xfrm0 speed is unknown, defaulting to 1000 [ 138.773074][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.776857][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.833700][T21664] bond0: entered promiscuous mode [ 138.833725][T21664] bond_slave_0: entered promiscuous mode [ 138.833871][T21664] bond_slave_1: entered promiscuous mode [ 138.835260][T21664] batadv0: entered promiscuous mode [ 138.941301][T21552] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 138.973976][T21678] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 138.999596][ T6121] Bluetooth: hci1: unexpected event for opcode 0x201c [ 139.112478][T21703] lo: entered allmulticast mode [ 139.115242][T21703] tunl0: entered allmulticast mode [ 139.118341][T21703] gre0: entered allmulticast mode [ 139.123282][T21703] gretap0: entered allmulticast mode [ 139.126291][T21703] erspan0: entered allmulticast mode [ 139.129342][T21703] ip_vti0: entered allmulticast mode [ 139.132223][T21703] ip6_vti0: entered allmulticast mode [ 139.135560][T21703] sit0: entered allmulticast mode [ 139.138246][T21707] binder: 21706:21707 unknown command 0 [ 139.139927][T21703] ip6tnl0: entered allmulticast mode [ 139.140033][T21707] binder: 21706:21707 ioctl c0306201 200000000480 returned -22 [ 139.142667][T21703] ip6gre0: entered allmulticast mode [ 139.146819][T21703] syz_tun: entered allmulticast mode [ 139.149576][T21703] ip6gretap0: entered allmulticast mode [ 139.155062][T21703] vcan0: entered allmulticast mode [ 139.160713][T21703] bond0: left promiscuous mode [ 139.162901][T21703] bond_slave_0: left promiscuous mode [ 139.164867][T21703] bond_slave_1: left promiscuous mode [ 139.166761][T21703] batadv0: left promiscuous mode [ 139.169195][T21703] bond0: entered allmulticast mode [ 139.171058][T21703] bond_slave_0: entered allmulticast mode [ 139.173086][T21703] bond_slave_1: entered allmulticast mode [ 139.175319][T21703] batadv0: entered allmulticast mode [ 139.178102][T21703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.182024][T21703] team0: left promiscuous mode [ 139.184984][T21703] team_slave_0: left promiscuous mode [ 139.187266][T21703] team_slave_1: left promiscuous mode [ 139.189507][T21703] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.192828][T21703] nlmon0: entered allmulticast mode [ 139.196253][T21703] vxcan0: entered allmulticast mode [ 139.198742][T21703] vxcan1: entered allmulticast mode [ 139.201163][T21703] veth0: entered allmulticast mode [ 139.203502][T21703] veth1: entered allmulticast mode [ 139.210055][T21703] wg0: entered allmulticast mode [ 139.213553][T21703] wg1: entered allmulticast mode [ 139.218200][T21703] wg2: entered allmulticast mode [ 139.220752][T21703] veth0_to_bridge: entered allmulticast mode [ 139.223613][T21703] bridge_slave_0: left promiscuous mode [ 139.225364][T21703] bridge_slave_0: entered allmulticast mode [ 139.228125][T21703] veth1_to_bridge: entered allmulticast mode [ 139.231748][T21703] bridge_slave_1: entered allmulticast mode [ 139.234554][T21703] veth0_to_bond: entered allmulticast mode [ 139.240089][T21703] veth1_to_bond: entered allmulticast mode [ 139.243391][T21703] veth0_to_team: entered allmulticast mode [ 139.246604][T21703] veth1_to_team: entered allmulticast mode [ 139.250051][T21703] veth0_to_batadv: entered allmulticast mode [ 139.252612][T21703] batadv_slave_0: entered allmulticast mode [ 139.254792][T21703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.257347][T21703] veth1_to_batadv: entered allmulticast mode [ 139.259942][T21703] batadv_slave_1: entered allmulticast mode [ 139.262317][T21703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.266437][T21703] xfrm0: entered allmulticast mode [ 139.269733][T21703] veth0_to_hsr: entered allmulticast mode [ 139.272846][T21703] hsr_slave_0: entered allmulticast mode [ 139.275281][T21703] veth1_to_hsr: entered allmulticast mode [ 139.278224][T21703] hsr_slave_1: entered allmulticast mode [ 139.327268][ T42] kauditd_printk_skb: 28872 callbacks suppressed [ 139.327283][ T42] audit: type=1400 audit(133.113:32483): avc: denied { read } for pid=21723 comm="syz.0.7735" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 139.338080][T21726] __nla_validate_parse: 2 callbacks suppressed [ 139.338093][T21726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7736'. [ 139.338986][ T42] audit: type=1400 audit(133.113:32484): avc: denied { open } for pid=21723 comm="syz.0.7735" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 139.340447][T21726] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7736'. [ 139.344050][ T42] audit: type=1400 audit(133.113:32485): avc: denied { ioctl } for pid=21723 comm="syz.0.7735" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64b8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 139.459615][T21739] bond4: entered promiscuous mode [ 139.461460][T21739] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.505637][ T42] audit: type=1400 audit(133.270:32486): avc: denied { append } for pid=21747 comm="syz.3.7746" name="pmem0" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.539465][ T42] audit: type=1400 audit(133.306:32487): avc: denied { setopt } for pid=21751 comm="syz.3.7748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.554337][T21754] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 139.559694][ T42] audit: type=1400 audit(133.325:32488): avc: denied { prog_load } for pid=21756 comm="syz.3.7750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 139.566485][ T42] audit: type=1400 audit(133.325:32489): avc: denied { bpf } for pid=21756 comm="syz.3.7750" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.588580][ T42] audit: type=1400 audit(133.353:32490): avc: denied { perfmon } for pid=21760 comm="syz.3.7752" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.623071][ T42] audit: type=1400 audit(133.380:32491): avc: denied { create } for pid=21766 comm="syz.0.7755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.628943][T21767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7755'. [ 139.629522][ T42] audit: type=1400 audit(133.389:32492): avc: denied { write } for pid=21766 comm="syz.0.7755" path="socket:[62030]" dev="sockfs" ino=62030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.757528][T21786] xt_nfacct: accounting object `syz0' does not exist [ 139.990489][T21826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7784'. [ 140.056803][T21838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7790'. [ 140.156326][T21852] netlink: 868 bytes leftover after parsing attributes in process `syz.3.7796'. [ 140.246425][ T6121] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.292503][T21841] infiniband uyz0: set active [ 140.299870][T21841] infiniband uyz0: added bridge_slave_1 [ 140.306985][T21841] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 140.311787][T21841] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 140.316830][T21841] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 140.331506][T21841] RDS/IB: uyz0: added [ 140.332975][T21841] smc: adding ib device uyz0 with port count 1 [ 140.335164][T21841] smc: ib device uyz0 port 1 has no pnetid [ 140.445634][T21906] ptrace attach of "/syz-executor exec"[6118] was attempted by ""[21906] [ 140.584847][T21927] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 140.587369][T21927] CIFS: VFS: Malformed UNC in devname [ 140.620975][T21936] tc_dump_action: action bad kind [ 140.729568][T21951] wireguard0: entered promiscuous mode [ 140.806664][T21967] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 140.846191][T21973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7854'. [ 141.025336][T21997] netdevsim netdevsim3: Direct firmware load for . [ 141.025336][T21997] failed with error -2 [ 141.030856][T21997] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 141.030856][T21997] [ 141.056230][T22001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7868'. [ 141.058882][T22001] openvswitch: netlink: Actions may not be safe on all matching packets [ 141.066952][T22003] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 141.070642][T22003] CIFS mount error: No usable UNC path provided in device string! [ 141.070642][T22003] [ 141.073742][T22003] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 141.099398][T22007] ata1.00: invalid cdb length 6 [ 141.113645][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 141.121194][T22010] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 141.169530][T22021] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 141.337473][T22049] netlink: 'syz.0.7892': attribute type 29 has an invalid length. [ 141.471180][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 141.547290][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 141.548636][T22064] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 141.649902][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 141.652852][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.655504][ T24] usb 6-1: Product: syz [ 141.656817][ T24] usb 6-1: Manufacturer: syz [ 141.658334][ T24] usb 6-1: SerialNumber: syz [ 141.666422][ T24] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 141.689484][ T24] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 141.709306][T22086] netlink: 4376 bytes leftover after parsing attributes in process `syz.0.7910'. [ 141.712296][T22086] netlink: 4376 bytes leftover after parsing attributes in process `syz.0.7910'. [ 141.739519][T22088] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 141.911497][ T6121] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 141.938534][T22115] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 141.976211][T22121] macsec0: entered promiscuous mode [ 141.978148][T22121] macsec0: entered allmulticast mode [ 141.979928][T22121] veth1_macvtap: entered allmulticast mode [ 142.142291][ T6297] usb 6-1: USB disconnect, device number 8 [ 142.180865][T22161] netlink: 'syz.2.7947': attribute type 21 has an invalid length. [ 142.361316][T22183] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 142.363349][T22183] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 142.367933][T22183] vhci_hcd vhci_hcd.0: Device attached [ 142.376939][T22183] vhci_hcd vhci_hcd.0: port 0 already used [ 142.381158][T22184] vhci_hcd: connection closed [ 142.382960][ T6030] vhci_hcd vhci_hcd.2: stop threads [ 142.386275][ T6030] vhci_hcd vhci_hcd.2: release socket [ 142.387817][ T6030] vhci_hcd vhci_hcd.2: disconnect device [ 142.405394][ T41] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 142.511508][ T6121] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.544123][ T3262] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 142.566936][ T41] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 142.569611][ T41] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 142.572117][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 142.574794][ T41] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 142.578332][ T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 142.581679][ T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 142.584786][ T41] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 142.593078][ T41] usb 8-1: string descriptor 0 read error: -22 [ 142.595071][ T41] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 142.598723][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.605931][ T41] usb 8-1: config 0 descriptor?? [ 142.609251][ T41] hub 8-1:0.0: bad descriptor, ignoring hub [ 142.611150][ T41] hub 8-1:0.0: probe with driver hub failed with error -5 [ 142.614961][ T41] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input25 [ 142.719106][ T3262] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 142.722409][ T3262] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 142.725947][ T3262] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.730585][ T3262] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 142.733843][ T3262] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 142.737004][ T3262] usb 5-1: Product: syz [ 142.738677][ T3262] usb 5-1: Manufacturer: syz [ 142.742041][T22190] hfs: unable to load iocharset "io#harset" [ 142.742273][ T3262] usb 5-1: SerialNumber: syz [ 142.749154][ T3262] usb 5-1: config 0 descriptor?? [ 142.753248][ T3262] hub 5-1:0.0: bad descriptor, ignoring hub [ 142.755285][ T3262] hub 5-1:0.0: probe with driver hub failed with error -5 [ 142.762843][ T3262] usb 5-1: selecting invalid altsetting 0 [ 142.911249][ T3262] usb 8-1: USB disconnect, device number 5 [ 142.959037][T22205] IPv6: sit1: Disabled Multicast RS [ 142.961168][T22205] sit1: entered allmulticast mode [ 143.021706][ T24] usb 6-1: Service connection timeout for: 256 [ 143.024170][ T24] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 143.028366][ T24] ath9k_htc: Failed to initialize the device [ 143.036196][ T6297] usb 6-1: ath9k_htc: USB layer deinitialized [ 143.086170][ T9] usb 5-1: USB disconnect, device number 6 [ 143.558902][T22238] netlink: 'syz.0.7982': attribute type 2 has an invalid length. [ 143.580242][T22238] netlink: 'syz.0.7982': attribute type 1 has an invalid length. [ 143.704479][T22256] SET target dimension over the limit! [ 143.870880][T22280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.234153][T22315] syz.0.8020 (22315): drop_caches: 2 [ 144.251585][T22302] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.253577][T22302] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.260171][T22302] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.265595][T22302] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.277197][T22302] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.322127][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.456284][T22334] cgroup: Unknown subsys name 'cpuset' [ 144.611450][T22353] openvswitch: netlink: Actions may not be safe on all matching packets [ 144.705781][T22361] netlink: 'syz.3.8043': attribute type 21 has an invalid length. [ 144.708449][T22361] IPv6: NLM_F_CREATE should be specified when creating new route [ 144.757730][ T42] kauditd_printk_skb: 17540 callbacks suppressed [ 144.757741][ T42] audit: type=1326 audit(138.123:50033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22208 comm="syz.1.7968" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d1d9ce59 code=0x50000 [ 144.770027][ T42] audit: type=1326 audit(138.123:50034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22208 comm="syz.1.7968" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d1d9ce59 code=0x50000 [ 144.778425][ T42] audit: type=1326 audit(138.123:50035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22208 comm="syz.1.7968" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d1d9ce59 code=0x50000 [ 144.789673][ T42] audit: type=1326 audit(138.123:50036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22208 comm="syz.1.7968" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d1d9ce59 code=0x50000 [ 144.797990][T22371] SET target dimension over the limit! [ 144.802613][ T42] audit: type=1326 audit(138.123:50037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22208 comm="syz.1.7968" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d1d9ce59 code=0x50000 [ 144.811174][ T42] audit: type=1326 audit(138.123:50038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22208 comm="syz.1.7968" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d1d9ce59 code=0x50000 [ 144.815421][ T5444] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.819721][ T42] audit: type=1326 audit(138.123:50039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22208 comm="syz.1.7968" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d1d9ce59 code=0x50000 [ 144.830423][ T5444] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 144.830804][ T42] audit: type=1326 audit(138.123:50040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22208 comm="syz.1.7968" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d1d9ce59 code=0x50000 [ 144.993661][T22390] sg_write: data in/out 808464396/14 bytes for SCSI command 0x0-- guessing data in; [ 144.993661][T22390] program syz.3.8055 not setting count and/or reply_len properly [ 145.052681][T22395] __nla_validate_parse: 6 callbacks suppressed [ 145.052693][T22395] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8057'. [ 145.170749][T22411] netlink: 'syz.2.8063': attribute type 1 has an invalid length. [ 145.208465][T22416] xt_time: unknown flags 0x78 [ 145.242624][ T24] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 145.428711][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.437690][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 145.442958][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.449440][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.455242][ T24] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 145.460642][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.471566][ T24] hub 5-1:1.0: bad descriptor, ignoring hub [ 145.475531][ T24] hub 5-1:1.0: probe with driver hub failed with error -5 [ 145.482651][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 145.484426][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 145.499137][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 145.500996][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 145.631325][T22458] tmpfs: Bad value for 'mpol' [ 145.813480][T22388] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 145.841213][ T24] usb 5-1: USB disconnect, device number 7 [ 145.884715][T22484] netlink: 'syz.2.8099': attribute type 3 has an invalid length. [ 145.887392][T22484] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8099'. [ 145.917773][T22486] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.087983][T22506] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 146.245664][T22522] netlink: 'syz.3.8118': attribute type 10 has an invalid length. [ 146.255763][T22522] team0 (unregistering): Port device team_slave_0 removed [ 146.261607][T22522] team0 (unregistering): Port device team_slave_1 removed [ 146.351918][T22539] /dev/sg0: Can't lookup blockdev [ 146.414524][ T6117] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.479191][T22564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8139'. [ 146.485277][T22564] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 146.489082][ T6117] Bluetooth: hci3: command 0x0406 tx timeout [ 146.489102][ T6121] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.492793][ T6117] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.507861][T22568] Mount JFS Failure: -5 [ 146.509812][T22568] jfs_mount failed w/return code = -5 [ 146.884203][T22642] JFS: discard option not supported on device [ 146.887080][T22642] Mount JFS Failure: -5 [ 146.947351][T22650] netlink: 'syz.0.8182': attribute type 11 has an invalid length. [ 146.950479][T22650] netlink: 'syz.0.8182': attribute type 11 has an invalid length. [ 146.953549][T22650] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8182'. [ 146.967368][T22652] netlink: 45 bytes leftover after parsing attributes in process `syz.3.8183'. [ 147.303530][T22700] openvswitch: netlink: Tunnel attr 99 out of range max 16 [ 147.358960][T22559] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 147.417343][T22722] netlink: 'syz.1.8218': attribute type 1 has an invalid length. [ 147.419702][T22722] netlink: 756 bytes leftover after parsing attributes in process `syz.1.8218'. [ 147.524158][T22746] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8230'. [ 147.574272][T22760] netlink: 276 bytes leftover after parsing attributes in process `syz.2.8234'. [ 147.710867][T22790] xt_l2tp: v2 doesn't support IP mode [ 147.746954][T22796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8251'. [ 147.926360][T22830] tmpfs: Bad value for 'mpol' [ 148.250953][T22891] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 148.328924][T22906] program syz.0.8305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.332804][T22906] ata1.00: invalid transfer count 0 [ 148.408576][T22926] netlink: zone id is out of range [ 148.422587][T22926] netlink: get zone limit has 4 unknown bytes [ 148.434004][T22932] [U] [ 148.435258][T22932] [U] [ 148.436239][T22932] [U] [ 148.437138][T22932] [U] [ 148.438119][T22932] [U] [ 148.438975][T22932] [U] [ 148.439847][T22932] [U] [ 148.440719][T22932] [U] [ 148.445036][T22935] erspan2: entered promiscuous mode [ 148.445319][T22932] [U] [ 148.447796][T22932] [U] [ 148.448677][T22932] [U] [ 148.449520][T22932] [U] [ 148.450472][T22932] [U] [ 148.451338][T22932] [U] [ 148.452209][T22932] [U] [ 148.453067][T22932] [U] [ 148.457257][T22931] [U] [ 148.479364][T22942] netlink: 'syz.3.8323': attribute type 1 has an invalid length. [ 148.626510][T22981] netlink: 172 bytes leftover after parsing attributes in process `syz.0.8344'. [ 148.692450][ T6117] Bluetooth: hci1: unexpected event for opcode 0x0c56 [ 148.743383][ T6117] Bluetooth: hci3: command 0x0406 tx timeout [ 148.787662][T23024] netlink: 'syz.3.8364': attribute type 4 has an invalid length. [ 148.903499][T23057] Invalid source name [ 148.904800][T23057] UBIFS error (pid: 23057): cannot open "./file0", error -22 [ 148.908150][T23059] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 148.913126][T23059] SELinux: failed to load policy [ 148.940146][T23068] program syz.2.8387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.960430][T23072] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 149.217190][T23133] IPVS: length: 120 != 24 [ 149.312297][T23151] netlink: 'syz.0.8427': attribute type 2 has an invalid length. [ 149.431294][T23162] netlink: 'syz.1.8432': attribute type 2 has an invalid length. [ 149.585023][T23188] netlink: 'syz.3.8444': attribute type 11 has an invalid length. [ 149.606630][T23190] xfrm0 speed is unknown, defaulting to 1000 [ 149.610240][T23194] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 149.686525][T23190] lo speed is unknown, defaulting to 1000 [ 149.870523][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 149.949384][T23255] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 4, id = 0 [ 150.048383][T23277] netdevsim netdevsim0: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 150.210182][T23307] validate_nla: 2 callbacks suppressed [ 150.210194][T23307] netlink: 'syz.1.8502': attribute type 1 has an invalid length. [ 150.231156][ T42] kauditd_printk_skb: 13611 callbacks suppressed [ 150.231168][ T42] audit: type=1400 audit(143.170:63645): avc: denied { create } for pid=23308 comm="syz.3.8503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 150.247250][ T42] audit: type=1400 audit(143.179:63646): avc: denied { map } for pid=23310 comm="syz.0.8504" path="/dev/video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 150.287216][ T42] audit: type=1400 audit(143.225:63647): avc: denied { create } for pid=23316 comm="syz.1.8507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.288959][T23318] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001 [ 150.295608][ T42] audit: type=1400 audit(143.225:63648): avc: denied { setopt } for pid=23316 comm="syz.1.8507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.324500][ T42] audit: type=1400 audit(143.253:63649): avc: denied { read } for pid=23323 comm="syz.1.8511" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 150.332793][ T42] audit: type=1400 audit(143.253:63650): avc: denied { open } for pid=23323 comm="syz.1.8511" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 150.340972][ T42] audit: type=1400 audit(143.262:63651): avc: denied { ioctl } for pid=23323 comm="syz.1.8511" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 150.351522][ T42] audit: type=1400 audit(143.262:63652): avc: denied { mounton } for pid=23322 comm="syz.3.8510" path="/2188/file0" dev="tmpfs" ino=11014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.360529][ T42] audit: type=1400 audit(143.262:63653): avc: denied { mount } for pid=23322 comm="syz.3.8510" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 150.370714][ T42] audit: type=1400 audit(143.262:63654): avc: denied { write } for pid=23324 comm="syz.0.8512" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 150.526343][T23352] tmpfs: Group quota block hardlimit too large. [ 150.638236][T23361] ptrace attach of "/syz-executor exec"[6112] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 151.140771][T23387] fuse: blksize only supported for fuseblk [ 151.379635][T23408] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 151.382754][T23408] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 151.386133][T23408] cramfs: wrong magic [ 151.546554][T23434] __nla_validate_parse: 13 callbacks suppressed [ 151.546566][T23434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8563'. [ 151.794926][T23466] syz.1.8578 (23466) used obsolete PPPIOCDETACH ioctl [ 151.951280][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 151.963240][T23493] xt_limit: Overflow, try lower: 271964/0 [ 152.027949][T23501] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 152.032584][T23501] bond5 (unregistering): Released all slaves [ 152.070021][T23505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8594'. [ 152.073050][T23505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8594'. [ 152.477324][T23515] team0: entered promiscuous mode [ 152.478892][T23515] team_slave_0: entered promiscuous mode [ 152.480825][T23515] team_slave_1: entered promiscuous mode [ 152.483627][T23515] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.840085][T23521] openvswitch: netlink: Actions may not be safe on all matching packets [ 153.192133][T23544] netlink: 756 bytes leftover after parsing attributes in process `syz.3.8614'. [ 153.199658][T23541] vivid-000: ================= START STATUS ================= [ 153.202056][T23541] vivid-000: Test Pattern: 75% Colorbar [ 153.204407][T23541] vivid-000: Fill Percentage of Frame: 4 [ 153.206471][T23541] vivid-000: Horizontal Movement: Move Right Slow [ 153.209444][T23541] vivid-000: Vertical Movement: Move Down Slow [ 153.212374][T23541] vivid-000: OSD Text Mode: Counters Only [ 153.214175][T23541] vivid-000: Show Border: false [ 153.215670][T23541] vivid-000: Show Square: false [ 153.217238][T23541] vivid-000: Sensor Flipped Horizontally: true [ 153.220351][T23541] vivid-000: Sensor Flipped Vertically: false [ 153.227341][T23541] vivid-000: Insert SAV Code in Image: true [ 153.229197][T23541] vivid-000: Insert EAV Code in Image: false [ 153.233179][T23541] vivid-000: Insert Video Guard Band: true [ 153.235021][T23541] vivid-000: Reduced Framerate: true [ 153.236859][T23541] vivid-000: HDMI 000-0 Is Connected To: None [ 153.238743][T23541] vivid-000: S-Video 000-0 Is Connected To: Output S-Video 002-0 [ 153.241687][T23541] vivid-000: Enable Capture Cropping: false grabbed [ 153.244895][T23541] vivid-000: Enable Capture Composing: true grabbed [ 153.246932][T23541] vivid-000: Enable Capture Scaler: false grabbed [ 153.248932][T23541] vivid-000: Timestamp Source: Start of Exposure [ 153.254467][T23541] vivid-000: Colorspace: Rec. 709 [ 153.256128][T23541] vivid-000: Transfer Function: Default [ 153.257920][T23541] vivid-000: Y'CbCr Encoding: BT.2020 Constant Luminance [ 153.260072][T23541] vivid-000: HSV Encoding: Hue 0-256 [ 153.261737][T23541] vivid-000: Quantization: Limited Range [ 153.264888][T23541] vivid-000: Apply Alpha To Red Only: true [ 153.266750][T23541] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 153.268804][T23541] vivid-000: DV Timings Signal Mode: Current DV Timings [ 153.270898][T23541] vivid-000: DV Timings: 640x480p59 inactive [ 153.272740][T23541] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 153.275470][T23541] vivid-000: Maximum EDID Blocks: 1 [ 153.277104][T23541] vivid-000: Limited RGB Range (16-235): true [ 153.279238][T23541] vivid-000: Rx RGB Quantization Range: Automatic [ 153.281252][T23541] vivid-000: Power Present: 0x00000000 [ 153.282974][T23541] tpg source WxH: 1280x720 (Y'CbCr) [ 153.284783][T23541] tpg field: 1 [ 153.285855][T23541] tpg crop: (0,0)/1280x720 [ 153.287298][T23541] tpg compose: (0,0)/1280x720 [ 153.288758][T23541] tpg colorspace: 12 [ 153.289962][T23541] tpg transfer function: 1/1 [ 153.291353][T23541] tpg Y'CbCr encoding: 7/7 [ 153.292741][T23541] tpg quantization: 2/2 [ 153.294023][T23541] tpg RGB range: 0/1 [ 153.296114][T23541] vivid-000: ================== END STATUS ================== [ 153.366020][T23557] netlink: 11 bytes leftover after parsing attributes in process `syz.1.8620'. [ 153.375905][T23557] macsec1: entered promiscuous mode [ 153.377675][T23557] macsec1: entered allmulticast mode [ 153.402311][T23561] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 153.430605][T23565] ucma_write: process 4188 (syz.2.8624) changed security contexts after opening file descriptor, this is not allowed. [ 153.818838][T23527] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.821557][T23527] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 153.828329][T23527] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.830210][T23527] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 153.837089][T23527] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.838767][T23527] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 153.948405][T23599] Bluetooth: MGMT ver 1.23 [ 154.103278][T23627] program syz.2.8653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.144104][T23633] nftables ruleset with unbound chain [ 154.680198][T23692] Zero length message leads to an empty skb [ 154.983102][T23662] syz.3.8670 (23662): drop_caches: 1 [ 155.279414][T23749] program syz.3.8712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.407962][ T1486] kernel read not supported for file /swradio7 (pid: 1486 comm: kworker/3:2) [ 155.467989][ T24] hid-generic E049:0000:0000.0003: unknown main item tag 0x0 [ 155.471389][ T24] hid-generic E049:0000:0000.0003: unknown main item tag 0x0 [ 155.481750][ T24] hid-generic E049:0000:0000.0003: hidraw1: HID v0.0e Device [syz0] on syz0 [ 155.587189][T23767] fido_id[23767]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 155.661500][ T42] kauditd_printk_skb: 163 callbacks suppressed [ 155.661513][ T42] audit: type=1400 audit(148.180:63818): avc: denied { execute } for pid=23786 comm="syz.2.8730" name="file0" dev="tmpfs" ino=10773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.670315][ T42] audit: type=1400 audit(148.180:63819): avc: denied { execute_no_trans } for pid=23786 comm="syz.2.8730" path="/2142/file0" dev="tmpfs" ino=10773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.726685][ T42] audit: type=1400 audit(148.245:63820): avc: denied { create } for pid=23794 comm="syz.2.8734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 155.732492][ T42] audit: type=1400 audit(148.245:63821): avc: denied { bind } for pid=23794 comm="syz.2.8734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 155.738386][ T42] audit: type=1400 audit(148.245:63822): avc: denied { getopt } for pid=23794 comm="syz.2.8734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 155.743948][ T42] audit: type=1400 audit(148.245:63823): avc: denied { create } for pid=23796 comm="syz.3.8735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.751194][ T42] audit: type=1400 audit(148.245:63824): avc: denied { write } for pid=23796 comm="syz.3.8735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.878375][ T42] audit: type=1400 audit(148.383:63825): avc: denied { connect } for pid=23807 comm="syz.2.8740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.956866][T23814] [U] v3f"S/4:XTzWtlW= [ 155.958756][T23814] [U] J"e:" [ 156.015189][T23817] Bluetooth: MGMT ver 1.23 [ 156.024216][ T42] audit: type=1400 audit(148.513:63826): avc: denied { create } for pid=23816 comm="syz.2.8745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.038927][ T42] audit: type=1400 audit(148.531:63827): avc: denied { setopt } for pid=23816 comm="syz.2.8745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.058186][T23820] CIFS: Unable to determine destination address [ 156.100732][T23824] netlink: 'syz.1.8748': attribute type 1 has an invalid length. [ 156.535558][ T9] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 156.616920][T23840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8756'. [ 156.664982][T23844] input input27: cannot allocate more than FF_MAX_EFFECTS effects [ 156.710240][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.712785][ T9] usb 6-1: config 0 has no interface number 0 [ 156.714666][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 156.718002][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 156.721493][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 156.724592][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.728567][ T9] usb 6-1: config 0 descriptor?? [ 156.733662][T23830] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.753569][ T9] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 156.785838][T23852] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 156.809075][T23736] kexec: Could not allocate control_code_buffer [ 156.969487][ T9] usb 6-1: USB disconnect, device number 9 [ 157.025467][T23879] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 157.063029][T23883] bridge: RTM_NEWNEIGH with invalid ether address [ 157.271198][T23907] 9pnet_fd: p9_fd_create_unix (23907): problem connecting socket: ./file0: -111 [ 157.302620][T23909] Bluetooth: MGMT ver 1.23 [ 157.605002][T23951] tipc: MTU too low for tipc bearer [ 157.657549][T23960] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.8814' resets device [ 157.749653][T23978] fuse: Invalid rootmode [ 157.836468][T23996] 9p: p9: multiple sources not supported [ 157.911287][T24012] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8839'. [ 157.988698][T24026] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8846'. [ 157.991541][T24026] tipc: Invalid UDP bearer configuration [ 157.991565][T24026] tipc: Enabling of bearer rejected, failed to enable media [ 158.063642][T24037] xt_l2tp: v2 tid > 0xffff: 2031748 [ 158.148258][T24049] pim6reg99999999: entered allmulticast mode [ 158.932591][T24099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8878'. [ 158.982456][T24103] __vm_enough_memory: pid: 24103, comm: syz.0.8880, bytes: 4503599627366400 not enough memory for the allocation [ 159.283833][ T6121] Bluetooth: hci4: sending frame failed (-49) [ 159.287858][ T6117] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 159.872977][T24184] EXT4-fs: Conflicting test_dummy_encryption options [ 159.914988][T24192] netlink: 'syz.2.8923': attribute type 29 has an invalid length. [ 160.245867][T24239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8946'. [ 160.313281][T24254] [U]  [ 160.326754][T24258] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8955'. [ 160.396641][T24269] loop4: detected capacity change from 0 to 7 [ 160.412076][T24269] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 160.413773][T24269] loop4: partition table partially beyond EOD, truncated [ 160.418986][T24269] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 160.450458][ T5733] udevd[5733]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 160.557546][T24276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8963'. [ 160.602279][T24278] IPVS: Scheduler module ip_vs_sip not found [ 160.792833][T24295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8972'. [ 161.144412][ T42] kauditd_printk_skb: 160 callbacks suppressed [ 161.144423][ T42] audit: type=1400 audit(153.246:63988): avc: denied { read } for pid=24317 comm="syz.1.8982" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 161.147687][T24318] binder: 24317:24318 ioctl c0306201 200000000640 returned -22 [ 161.152320][ T42] audit: type=1400 audit(153.246:63989): avc: denied { open } for pid=24317 comm="syz.1.8982" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 161.162059][ T42] audit: type=1400 audit(153.246:63990): avc: denied { ioctl } for pid=24317 comm="syz.1.8982" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 161.182773][T24322] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8984'. [ 161.215609][ T42] audit: type=1400 audit(153.301:63991): avc: denied { getopt } for pid=24325 comm="syz.1.8986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.257931][ T42] audit: type=1400 audit(153.347:63992): avc: denied { read write } for pid=24329 comm="syz.2.8988" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 161.265212][ T42] audit: type=1400 audit(153.347:63993): avc: denied { open } for pid=24329 comm="syz.2.8988" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 161.296370][ T42] audit: type=1400 audit(153.384:63994): avc: denied { ioctl } for pid=24337 comm="syz.3.8993" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=71243 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 161.324923][ T42] audit: type=1400 audit(153.403:63995): avc: denied { read write } for pid=24343 comm="syz.3.8995" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 161.335393][ T24] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 161.336705][ T42] audit: type=1400 audit(153.403:63996): avc: denied { open } for pid=24343 comm="syz.3.8995" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 161.339016][ T24] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 161.350778][ T24] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 161.353181][ T24] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 161.355664][ T24] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 161.359640][ T24] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 161.362228][ T24] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 161.364493][ T24] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 161.366841][ T24] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 161.369497][ T24] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 161.381703][ T24] hid-generic 0000:0000:0004.0004: hidraw1: HID v0.03 Device [syz1] on syz0 [ 161.387634][T24352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8999'. [ 161.399942][ T42] audit: type=1400 audit(153.477:63997): avc: denied { read write } for pid=6120 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 161.465599][T24354] fido_id[24354]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 161.491054][T24371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9007'. [ 161.979958][T24451] macvlan0: entered promiscuous mode [ 162.087027][T24472] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 162.156637][T24483] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 162.159988][T24483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.251421][T24499] CIFS mount error: No usable UNC path provided in device string! [ 162.251421][T24499] [ 162.254424][T24499] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 162.290563][ T6297] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 162.307078][T24507] netlink: 'syz.1.9072': attribute type 2 has an invalid length. [ 162.431437][T24530] nbd: must specify a size in bytes for the device [ 162.458348][ T6297] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 162.461276][ T6297] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 162.467939][ T6297] usb 8-1: Product: syz [ 162.469266][ T6297] usb 8-1: Manufacturer: syz [ 162.470725][ T6297] usb 8-1: SerialNumber: syz [ 162.476860][ T6297] usb 8-1: config 0 descriptor?? [ 162.703993][ T6297] usb 8-1: USB disconnect, device number 6 [ 162.875330][ T6058] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.967475][ T6058] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.995836][ T6121] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.004090][ T6121] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.007108][ T6121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.010142][ T6121] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.013774][ T6121] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.027578][ T6117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.031918][ T6117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.034853][ T6117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.038435][ T6117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.042139][ T6117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.090773][ T6058] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.182973][ T6058] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.206193][T24544] Failed to initialize the IGMP autojoin socket (err -2) [ 163.333077][ T6058] bridge_slave_1: left allmulticast mode [ 163.335354][ T6058] bridge_slave_1: left promiscuous mode [ 163.337650][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.342749][ T6058] bridge_slave_0: left allmulticast mode [ 163.344873][ T6058] bridge_slave_0: left promiscuous mode [ 163.347324][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.368460][ T6058] dvmrp0: left allmulticast mode [ 163.395399][T24573] __nla_validate_parse: 7 callbacks suppressed [ 163.395411][T24573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9097'. [ 163.427868][T24578] tmpfs: Bad value for 'mpol' [ 163.629034][T24605] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.9112'. [ 163.631863][T24605] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.9112'. [ 163.647728][ T6058] team0: Port device bond0 removed [ 163.650670][ T6058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.655440][ T6058] bond0 (unregistering): Released all slaves [ 163.660700][ T6058] bond1 (unregistering): Released all slaves [ 163.665523][T24609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9114'. [ 163.669775][ T6058] bond2 (unregistering): Released all slaves [ 163.676481][ T6058] bond3 (unregistering): Released all slaves [ 163.686201][ T6058] bond4 (unregistering): Released all slaves [ 163.929537][T24544] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.931813][T24544] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.934082][T24544] bridge_slave_0: entered allmulticast mode [ 163.936670][T24544] bridge_slave_0: entered promiscuous mode [ 163.941307][T24544] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.943882][T24544] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.946196][T24544] bridge_slave_1: entered allmulticast mode [ 163.949321][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 163.951769][T24544] bridge_slave_1: entered promiscuous mode [ 163.967886][T24642] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9124'. [ 163.991658][T24544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.000901][T24647] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9125'. [ 164.035837][T24544] team0: Port device team_slave_0 added [ 164.041002][T24544] team0: Port device team_slave_1 added [ 164.095036][T24544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.097215][T24544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.105122][T24544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.109355][T24544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.111635][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 164.113316][T24544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.121095][T24544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.128879][ T10] usb 8-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 164.131754][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.134630][ T10] usb 8-1: Product: syz [ 164.135958][ T10] usb 8-1: Manufacturer: syz [ 164.137450][ T10] usb 8-1: SerialNumber: syz [ 164.142241][ T10] usb 8-1: config 0 descriptor?? [ 164.145798][ T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 164.148478][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 164.151389][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 164.154560][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 164.156986][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 164.181642][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.185284][ T10] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 164.189309][ T10] usb 8-1: media controller created [ 164.198486][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.223812][ T10] usb 8-1: selecting invalid altsetting 3 [ 164.225628][ T10] ttusb2: set interface to alts=3 failed [ 164.238673][T24544] hsr_slave_0: entered promiscuous mode [ 164.243895][T24544] hsr_slave_1: entered promiscuous mode [ 164.250940][ T10] DVB: Unable to find symbol tda10086_attach() [ 164.253192][ T10] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 164.256171][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 164.257946][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 164.260976][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 164.262638][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 164.265807][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 164.374036][T24611] ttusb2: i2c wr len=124 too high [ 164.377748][ T29] usb 8-1: USB disconnect, device number 7 [ 164.418534][ T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 164.424085][T24672] ptrace attach of "/syz-executor exec"[24673] was attempted by "/syz-executor exec"[24672] [ 164.565865][T24677] No buffer was provided with the request [ 164.650578][T24544] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 164.663422][T24544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 164.668506][T24544] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 164.673651][T24544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 164.677350][T24544] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 164.686642][T24544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 164.689985][T24544] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 164.706611][T24544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 164.915327][T24544] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.938926][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.941252][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.949869][ T6058] hsr_slave_1: left promiscuous mode [ 164.964149][ T6058] veth1_macvtap: left promiscuous mode [ 164.965927][ T6058] veth0_macvtap: left promiscuous mode [ 164.969104][ T6058] veth1_vlan: left promiscuous mode [ 164.971157][ T6058] veth0_vlan: left promiscuous mode [ 165.086588][ T9] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 165.127423][ T6058] team0 (unregistering): Port device team_slave_1 removed [ 165.136358][ T6058] team0 (unregistering): Port device team_slave_0 removed [ 165.202240][ T3548] smc: removing ib device sz1 [ 165.217981][ T6297] lo speed is unknown, defaulting to 1000 [ 165.221356][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.223485][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.225716][ T6297] sz1: Port: 1 Link DOWN [ 165.237045][ T3548] smbdirect: ib_dev[sz1] removed [ 165.274051][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 165.280552][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 165.284944][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.288581][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 165.291964][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 165.297861][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 165.300345][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 165.307221][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.315432][ T6117] Bluetooth: hci1: command tx timeout [ 165.320960][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 165.334273][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 165.340656][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 165.342928][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 165.346226][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.351129][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 165.354523][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 165.361752][ T9] usb 5-1: string descriptor 0 read error: -22 [ 165.363812][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 165.369497][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.389623][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 165.646681][ T6326] usb 5-1: USB disconnect, device number 8 [ 165.736265][T24544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.907349][T24544] veth0_vlan: entered promiscuous mode [ 165.914091][T24544] veth1_vlan: entered promiscuous mode [ 165.944373][T24544] veth0_macvtap: entered promiscuous mode [ 165.952150][T24544] veth1_macvtap: entered promiscuous mode [ 165.976899][T24544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.985920][T24544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.992351][T24544] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 165.998857][T24544] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 166.008542][T24544] wireguard: wg0: Could not create IPv4 socket [ 166.012207][T24544] wireguard: wg1: Could not create IPv4 socket [ 166.016351][T24544] wireguard: wg2: Could not create IPv4 socket [ 166.462054][T24795] program syz.0.9169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.574905][T24812] tipc: Started in network mode [ 166.576636][T24812] tipc: Node identity ac14140f, cluster identity 4711 [ 166.579326][T24812] tipc: Enabling of bearer rejected, failed to enable media [ 166.591292][ T42] kauditd_printk_skb: 280 callbacks suppressed [ 166.591303][ T42] audit: type=1400 audit(158.265:64278): avc: denied { map_create } for pid=24817 comm="syz.0.9179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 166.601256][ T42] audit: type=1400 audit(158.265:64279): avc: denied { bpf } for pid=24817 comm="syz.0.9179" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.616411][ T42] audit: type=1400 audit(158.265:64280): avc: denied { map_read map_write } for pid=24817 comm="syz.0.9179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 166.622618][ T42] audit: type=1400 audit(158.284:64281): avc: denied { create } for pid=24820 comm="syz.0.9180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.628857][ T42] audit: type=1400 audit(158.293:64282): avc: denied { read write } for pid=24823 comm="syz.3.9181" name="vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 166.636257][ T42] audit: type=1400 audit(158.293:64283): avc: denied { open } for pid=24823 comm="syz.3.9181" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 166.645587][ T42] audit: type=1400 audit(158.293:64284): avc: denied { ioctl } for pid=24823 comm="syz.3.9181" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 166.654425][ T42] audit: type=1400 audit(158.312:64285): avc: denied { bind } for pid=24826 comm="syz.2.9182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.665042][ T42] audit: type=1400 audit(158.330:64286): avc: denied { create } for pid=24832 comm="syz.3.9184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.674448][ T42] audit: type=1400 audit(158.339:64287): avc: denied { read } for pid=24834 comm="syz.2.9185" dev="nsfs" ino=4026533560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 166.813213][T24865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9197'. [ 167.086227][T24918] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9215'. [ 167.164456][T24933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9220'. [ 167.195992][T24938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9221'. [ 167.671302][ T1486] hid_parser_main: 91 callbacks suppressed [ 167.671315][ T1486] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 167.676181][ T1486] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 167.679442][ T1486] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 167.681741][ T1486] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 167.684006][ T1486] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 167.686838][ T1486] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 167.689857][ T1486] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 167.692148][ T1486] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 167.694403][ T1486] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 167.696680][ T1486] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 167.718942][ T1486] hid-generic 0005:000B:0009.0005: hidraw1: BLUETOOTH HID v0.01 Device [syz0] on syz1 [ 167.756332][T25030] fido_id[25030]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 168.070559][T25076] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 168.158138][T25091] tipc: Started in network mode [ 168.159686][T25091] tipc: Node identity , cluster identity 3865 [ 168.161592][T25091] tipc: Failed to set node id, please configure manually [ 168.163803][T25091] tipc: Enabling of bearer rejected, failed to enable media [ 168.317640][T25116] xt_l2tp: invalid flags combination: 8 [ 168.405693][T25125] gretap0: entered promiscuous mode [ 168.408151][T25125] gretap0: left promiscuous mode [ 168.663083][T25168] netlink: 'syz.2.9304': attribute type 2 has an invalid length. [ 168.685942][T25171] random: crng reseeded on system resumption [ 168.693796][T25171] Restarting kernel threads ... [ 168.697952][T25171] Done restarting kernel threads. [ 168.773929][T25187] lo: MTU too low for tipc bearer [ 168.775943][T25187] tipc: Enabling of bearer rejected, failed to enable media [ 168.796256][T25192] openvswitch: netlink: Actions may not be safe on all matching packets [ 168.817415][T25198] netlink: 'syz.0.9316': attribute type 4 has an invalid length. [ 168.819875][T25198] __nla_validate_parse: 4 callbacks suppressed [ 168.819884][T25198] netlink: 17 bytes leftover after parsing attributes in process `syz.0.9316'. [ 169.387421][T25312] comedi comedi3: comedi_test: 256 microvolt, 15 microsecond waveform attached [ 169.712885][T25379] netlink: 'syz.0.9386': attribute type 322 has an invalid length. [ 169.787711][T25399] nbd: must specify an index to disconnect [ 170.009292][T25429] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 170.013738][T25429] bond0 (unregistering): Released all slaves [ 170.056145][T25435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9404'. [ 170.059221][T25435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9404'. [ 170.111842][T25441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9407'. [ 170.621617][T25500] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25500 comm=syz.3.9426 [ 170.665306][ T6297] hid (null): global environment stack underflow [ 170.687546][ T6297] hid-generic 616F:20C2607D:F72986D9.0006: global environment stack underflow [ 170.692981][ T6297] hid-generic 616F:20C2607D:F72986D9.0006: item 0 1 1 11 parsing failed [ 170.696780][ T6297] hid-generic 616F:20C2607D:F72986D9.0006: probe with driver hid-generic failed with error -22 [ 170.716187][T25509] binder: 25508:25509 ioctl c0306201 0 returned -14 [ 170.741850][T25512] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 171.366341][T25588] macvtap1: entered promiscuous mode [ 171.368559][T25588] macvtap1: entered allmulticast mode [ 171.647272][T25641] atomic_op ffff888026e01998 conn xmit_atomic 0000000000000000 [ 172.036047][ T42] kauditd_printk_skb: 367 callbacks suppressed [ 172.036064][ T42] audit: type=1400 audit(2000000000.544:64655): avc: denied { write } for pid=25697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.086698][ T42] audit: type=1400 audit(2000000000.590:64656): avc: denied { write } for pid=25704 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.103208][ T42] audit: type=1400 audit(2000000000.608:64657): avc: denied { create } for pid=25705 comm="syz.0.9498" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.114779][ T42] audit: type=1400 audit(2000000000.608:64658): avc: denied { map } for pid=25705 comm="syz.0.9498" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=77258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.124135][ T42] audit: type=1400 audit(2000000000.608:64659): avc: denied { read write } for pid=25705 comm="syz.0.9498" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=77258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.133301][ T42] audit: type=1400 audit(2000000000.608:64660): avc: denied { create } for pid=25706 comm="syz.2.9497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 172.139667][ T42] audit: type=1400 audit(2000000000.618:64661): avc: denied { write } for pid=25706 comm="syz.2.9497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 172.146375][ T42] audit: type=1400 audit(2000000000.645:64662): avc: denied { mount } for pid=25710 comm="syz.2.9499" name="/" dev="configfs" ino=2071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 172.156361][ T42] audit: type=1400 audit(2000000000.655:64663): avc: denied { write } for pid=25710 comm="syz.2.9499" name="/" dev="configfs" ino=2071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.182157][ T42] audit: type=1400 audit(2000000000.673:64664): avc: denied { unmount } for pid=6118 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 172.556766][T25753] netlink: 'syz.0.9511': attribute type 1 has an invalid length. [ 172.559568][T25753] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9511'. [ 172.681830][T25768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9516'. [ 172.744103][T25779] bpf: Bad value for 'uid' [ 173.076601][T25819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9533'. [ 173.079675][T25819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9533'. [ 173.258122][T25847] program syz.3.9543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.267286][T25847] ata1.00: invalid service action 3 [ 173.793584][T25927] vivid-004: disconnect [ 173.798887][T25927] vivid-004: reconnect [ 173.846509][T25936] random: crng reseeded on system resumption [ 173.873447][T25942] tipc: Failed to obtain node identity [ 173.875221][T25942] tipc: Enabling of bearer rejected, failed to enable media [ 173.936725][T25955] netlink: 'syz.3.9580': attribute type 11 has an invalid length. [ 174.434155][T26026] fuseblk: Unknown parameter 'subj_type' [ 174.574269][T26048] netlink: 'syz.0.9613': attribute type 2 has an invalid length. [ 174.582287][T26048] : entered promiscuous mode [ 174.717292][T26067] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 174.720268][T26067] overlayfs: missing 'lowerdir' [ 175.140941][T26135] xt_HMARK: spi-set and port-set can't be combined [ 175.152494][T26138] overlayfs: regular lower layers cannot follow data lower layers [ 175.231156][T26155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9651'. [ 175.279019][T26167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9655'. [ 175.319157][T26176] macsec1: entered promiscuous mode [ 175.321920][T26176] macsec1: entered allmulticast mode [ 175.366574][ T10] hid_parser_main: 4086 callbacks suppressed [ 175.366589][ T10] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 175.370980][ T10] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 175.374800][ T10] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 175.377233][ T10] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 175.379784][ T10] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 175.382258][ T10] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 175.385169][ T10] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 175.387700][ T10] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 175.390058][ T10] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 175.392744][ T10] hid-generic 99A1:E260D13B:624ADF33.0007: unknown main item tag 0x0 [ 175.414778][ T10] hid-generic 99A1:E260D13B:624ADF33.0007: hidraw1: HID v306f9c.17 Device [] on 9OR) K8S2c93;mmf$[g~ [ 175.460644][T26194] fido_id[26194]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 175.548121][T26216] SELinux: unknown common [ 175.549953][T26216] SELinux: invalid class [ 175.551721][T26216] SELinux: failed to load policy [ 175.623174][ T58] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 175.794432][ T58] usb 7-1: Using ep0 maxpacket: 16 [ 175.797330][ T58] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 175.800352][ T58] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 175.803705][ T58] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 175.807718][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 175.812147][ T58] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 175.815018][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.817575][ T58] usb 7-1: Product: syz [ 175.818895][ T58] usb 7-1: Manufacturer: syz [ 175.820294][ T58] usb 7-1: SerialNumber: syz [ 175.824590][ T58] usb 7-1: config 0 descriptor?? [ 175.994145][T26254] tmpfs: Cannot change global quota limit on remount [ 176.016878][T26256] program syz.0.9691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.060078][ T58] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input29 [ 176.067224][ T5125] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 176.081807][ T5125] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 176.094087][ T5125] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 176.101246][ T7064] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 176.104556][ T5125] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 176.107617][ T5125] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 176.115255][ T5125] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 176.277902][T26294] netlink: 'syz.0.9705': attribute type 23 has an invalid length. [ 176.325620][T26187] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 176.335295][ T58] usb 7-1: USB disconnect, device number 5 [ 176.674358][T26325] loop0: detected capacity change from 0 to 2640 [ 176.678827][T26325] Buffer I/O error on dev loop0, logical block 0, async page read [ 176.682110][T26325] Buffer I/O error on dev loop0, logical block 0, async page read [ 176.684632][T26325] Buffer I/O error on dev loop0, logical block 0, async page read [ 176.687037][T26325] Buffer I/O error on dev loop0, logical block 0, async page read [ 176.689461][T26325] Buffer I/O error on dev loop0, logical block 0, async page read [ 176.691870][T26325] Buffer I/O error on dev loop0, logical block 0, async page read [ 176.694722][T26325] Buffer I/O error on dev loop0, logical block 0, async page read [ 176.697186][T26325] Buffer I/O error on dev loop0, logical block 0, async page read [ 176.699546][T26325] ldm_validate_partition_table(): Disk read failed. [ 176.701576][T26325] Buffer I/O error on dev loop0, logical block 0, async page read [ 176.704006][T26325] Buffer I/O error on dev loop0, logical block 0, async page read [ 176.708653][T26325] Dev loop0: unable to read RDB block 0 [ 176.710687][T26325] loop0: unable to read partition table [ 176.712485][T26325] loop_reread_partitions: partition scan of loop0 (3 ) failed (rc=-5) [ 177.280044][T26358] hid-generic 0003:0627:0001.0001: pid 26358 passed too short report [ 177.493627][ T42] kauditd_printk_skb: 345 callbacks suppressed [ 177.493639][ T42] audit: type=1400 audit(2000000005.573:65010): avc: denied { execute } for pid=26401 comm="syz.2.9732" name="file0" dev="tmpfs" ino=12098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 177.518668][ T42] audit: type=1400 audit(2000000005.610:65011): avc: denied { write } for pid=26400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.580438][ T42] audit: type=1400 audit(2000000005.656:65012): avc: denied { read } for pid=26412 comm="syz.2.9736" dev="nsfs" ino=4026533560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 177.594489][ T42] audit: type=1400 audit(2000000005.656:65013): avc: denied { open } for pid=26412 comm="syz.2.9736" path="net:[4026533560]" dev="nsfs" ino=4026533560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 177.608308][ T42] audit: type=1400 audit(2000000005.665:65014): avc: denied { write } for pid=26409 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.621044][ T42] audit: type=1400 audit(2000000005.665:65015): avc: denied { bind } for pid=26412 comm="syz.2.9736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.634088][ T42] audit: type=1400 audit(2000000005.665:65016): avc: denied { read } for pid=26412 comm="syz.2.9736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.646437][ T42] audit: type=1400 audit(2000000005.674:65017): avc: denied { read write } for pid=26414 comm="syz.3.9737" name="video3" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 177.660561][ T42] audit: type=1400 audit(2000000005.674:65018): avc: denied { open } for pid=26414 comm="syz.3.9737" path="/dev/video3" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 177.675796][ T42] audit: type=1400 audit(2000000005.674:65019): avc: denied { ioctl } for pid=26414 comm="syz.3.9737" path="/dev/video3" dev="devtmpfs" ino=960 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 177.719450][T26431] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 178.061170][T26466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9755'. [ 178.064048][T26466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9755'. [ 178.378447][T26514] netlink: 'syz.3.9772': attribute type 178 has an invalid length. [ 178.409675][T26517] [U] V3Fپ"S/4:XTZWTLW= [ 178.412920][T26516] [U] J"E:" [ 178.488741][T26531] kAFS: unable to lookup cell '(,cL' [ 178.493397][T26531] kAFS: unable to lookup cell '(,cL' [ 178.561136][T26541] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 178.610748][T26547] Failed to initialize the IGMP autojoin socket (err -2) [ 178.664364][T26552] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9783'. [ 178.675417][T26552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.787148][T26574] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.9793'. [ 178.843186][T26583] netlink: 'syz.0.9796': attribute type 10 has an invalid length. [ 178.892497][T26590] Failed to initialize the IGMP autojoin socket (err -2) [ 179.105957][T26619] openvswitch: netlink: Actions may not be safe on all matching packets [ 179.189156][T26631] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9812'. [ 179.448812][T26660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9821'. [ 179.599180][T26685] devpts: Bad value for 'max' [ 179.899094][T26744] Cannot find del_set index 14804 as target [ 180.099230][T26782] program syz.3.9866 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.191797][T26795] program syz.3.9870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.649594][ T41] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 180.823098][ T41] usb 5-1: Using ep0 maxpacket: 32 [ 180.827181][ T41] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 180.830730][ T41] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 180.834438][ T41] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 180.838823][ T41] usb 5-1: config 1 has no interface number 0 [ 180.841197][ T41] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.844502][ T41] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 180.849841][ T41] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 180.853655][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.863824][ T41] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 181.228876][T26873] Bluetooth: MGMT ver 1.23 [ 181.473233][ T41] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 181.482796][T26913] SELinux: security policydb version 18 (MLS) not backwards compatible [ 181.485604][T26913] SELinux: failed to load policy [ 181.506502][T26918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9901'. [ 181.541421][T26925] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9904'. [ 181.705615][ T58] usb 5-1: USB disconnect, device number 9 [ 181.712179][ T58] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 181.738820][T26952] netlink: 'syz.3.9912': attribute type 11 has an invalid length. [ 181.966038][T26993] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 182.317748][T27082] use of bytesused == 0 is deprecated and will be removed in the future, [ 182.320468][T27082] use the actual size instead. [ 182.838003][T27111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9959'. [ 182.844353][T27111] bridge0: port 1(macvlan0) entered blocking state [ 182.846589][T27111] bridge0: port 1(macvlan0) entered disabled state [ 182.848734][T27111] macvlan0: entered allmulticast mode [ 182.852068][T27111] macvlan0: left allmulticast mode [ 182.936907][ T42] kauditd_printk_skb: 335 callbacks suppressed [ 182.936922][ T42] audit: type=1400 audit(2000000010.611:65355): avc: denied { write } for pid=27112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.948222][ T42] audit: type=1400 audit(2000000010.611:65356): avc: denied { add_name } for pid=27112 comm="dhcpcd-run-hook" name="resolv.conf.lapb7.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.955150][ T42] audit: type=1400 audit(2000000010.611:65357): avc: denied { create } for pid=27112 comm="dhcpcd-run-hook" name="resolv.conf.lapb7.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 182.961998][ T42] audit: type=1400 audit(2000000010.611:65358): avc: denied { write } for pid=27112 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb7.link" dev="tmpfs" ino=22114 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 182.970227][ T42] audit: type=1400 audit(2000000010.611:65359): avc: denied { append } for pid=27112 comm="dhcpcd-run-hook" name="resolv.conf.lapb7.link" dev="tmpfs" ino=22114 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 182.983724][ T42] audit: type=1400 audit(2000000010.647:65360): avc: denied { read write } for pid=6112 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.991826][ T42] audit: type=1400 audit(2000000010.647:65361): avc: denied { open } for pid=6112 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.004511][ T42] audit: type=1400 audit(2000000010.647:65362): avc: denied { ioctl } for pid=6112 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.012094][ T42] audit: type=1400 audit(2000000010.657:65363): avc: denied { write } for pid=27115 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.025172][ T42] audit: type=1400 audit(2000000010.657:65364): avc: denied { remove_name } for pid=27115 comm="rm" name="resolv.conf.lapb7.link" dev="tmpfs" ino=22114 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.422968][T27178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9986'. [ 183.425922][T27178] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9986'. [ 183.840096][T27223] rdma_op ffff88802d0d01f0 conn xmit_rdma 0000000000000000 [ 184.020146][ T29] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 184.194836][ T29] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 184.197459][ T29] usb 5-1: config 0 has no interface number 0 [ 184.199372][ T29] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.205632][ T29] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 184.209328][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.212608][ T29] usb 5-1: Product: syz [ 184.214285][ T29] usb 5-1: Manufacturer: syz [ 184.216209][ T29] usb 5-1: SerialNumber: syz [ 184.219917][T27250] openvswitch: netlink: Duplicate or invalid key (type 0). [ 184.222809][ T29] usb 5-1: config 0 descriptor?? [ 184.224383][T27250] openvswitch: netlink: Actions may not be safe on all matching packets [ 184.227861][ T29] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 184.451688][ T29] usb 5-1: USB disconnect, device number 10 [ 184.458363][ T29] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 184.786709][T27275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10030'. [ 185.247515][T27318] program syz.0.10050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.465941][T27343] netlink: 'syz.0.10063': attribute type 49 has an invalid length. [ 185.565902][T27349] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 185.640705][T27356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10069'. [ 185.644476][T27356] smc: net device veth1_to_team applied user defined pnetid S [ 185.721683][ T29] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 185.898237][ T29] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 185.901592][ T29] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 185.905510][ T29] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 185.909864][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 185.913693][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 185.919437][ T29] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 185.922914][ T29] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 185.925368][ T29] usb 8-1: Product: syz [ 185.927061][ T29] usb 8-1: Manufacturer: syz [ 185.934789][ T29] cdc_wdm 8-1:1.0: skipping garbage [ 185.936616][ T29] cdc_wdm 8-1:1.0: skipping garbage [ 185.945413][ T29] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 185.947956][ T29] cdc_wdm 8-1:1.0: Unknown control protocol [ 185.971575][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 186.374288][ T29] usb 8-1: USB disconnect, device number 8 [ 189.982223][ T42] kauditd_printk_skb: 116 callbacks suppressed [ 189.982239][ T42] audit: type=1400 audit(2000000017.106:65481): avc: denied { write } for pid=27468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.035965][ T42] audit: type=1400 audit(2000000017.152:65482): avc: denied { write } for pid=27471 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.646132][ T42] audit: type=1400 audit(2000000019.561:65483): avc: denied { write } for pid=27477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.686240][ T42] audit: type=1400 audit(2000000019.598:65484): avc: denied { write } for pid=27481 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.855766][ T42] audit: type=1400 audit(2000000019.755:65485): avc: denied { write } for pid=27484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.921969][ T42] audit: type=1400 audit(2000000019.819:65486): avc: denied { write } for pid=27487 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.279166][ T42] audit: type=1400 audit(2000000020.142:65487): avc: denied { write } for pid=27490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.321217][ T42] audit: type=1400 audit(2000000020.188:65488): avc: denied { write } for pid=27493 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.396799][ T42] audit: type=1400 audit(2000000020.253:65489): avc: denied { write } for pid=27496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.433048][ T42] audit: type=1400 audit(2000000020.290:65490): avc: denied { write } for pid=27499 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.453662][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 195.453675][ T42] audit: type=1400 audit(2000000022.144:65522): avc: denied { write } for pid=27595 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.540926][ T42] audit: type=1400 audit(2000000022.237:65523): avc: denied { write } for pid=27598 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.580652][ T42] audit: type=1400 audit(2000000022.264:65524): avc: denied { write } for pid=27601 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.654789][ T42] audit: type=1400 audit(2000000022.338:65525): avc: denied { write } for pid=27604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.694297][ T42] audit: type=1400 audit(2000000022.375:65526): avc: denied { write } for pid=27607 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.772656][ T42] audit: type=1400 audit(2000000022.449:65527): avc: denied { write } for pid=27610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.819637][ T42] audit: type=1400 audit(2000000022.486:65528): avc: denied { write } for pid=27613 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.907620][ T42] audit: type=1400 audit(2000000022.569:65529): avc: denied { write } for pid=27616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.956858][ T42] audit: type=1400 audit(2000000022.615:65530): avc: denied { write } for pid=27619 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.078673][ T42] audit: type=1400 audit(2000000022.726:65531): avc: denied { write } for pid=27622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.272122][T27636] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10082'. [ 196.275070][T27639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10084'. [ 196.278093][T27639] netlink: del zone limit has 8 unknown bytes [ 196.306525][T27646] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10085'. [ 196.502933][T27678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10098'. [ 196.512118][T27678] netlink: 'syz.3.10098': attribute type 1 has an invalid length. [ 196.515574][T27678] nbd: error processing sock list [ 196.580466][T27698] program syz.2.10106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.975467][T27766] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 197.001041][T27768] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 197.040807][T27771] ptrace attach of "/syz-executor exec"[27773] was attempted by "/syz-executor exec"[27771] [ 197.067304][T27778] loop5: detected capacity change from 0 to 7 [ 197.081932][T27778] Dev loop5: unable to read RDB block 7 [ 197.084046][T27778] loop5: unable to read partition table [ 197.085917][T27778] loop5: partition table beyond EOD, truncated [ 197.087884][T27778] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 197.101312][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 197.262863][T27809] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 197.277934][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 197.282923][ T10] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 197.292656][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 197.295355][ T10] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.299095][T27814] [U]  [ 197.300686][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 197.304093][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 197.310607][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 197.314638][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 197.317191][ T10] usb 5-1: Product: syz [ 197.318737][ T10] usb 5-1: Manufacturer: syz [ 197.322210][T27734] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 197.326136][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 197.327810][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 197.330950][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 197.332926][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 197.552196][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 197.554396][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 197.556937][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 197.558952][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 197.559616][T27861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10161'. [ 197.561031][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 197.567101][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 197.569007][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 197.574112][ T10] usb 5-1: USB disconnect, device number 11 [ 197.808224][T27900] openvswitch: netlink: Missing key (keys=40, expected=100) [ 197.932099][ T3262] libceph: mon0 (1)[c::]:6789 connect error [ 197.952342][ T3262] libceph: mon0 (1)[c::]:6789 connect error [ 198.230359][ T3262] libceph: mon0 (1)[c::]:6789 connect error [ 198.265197][T27965] ata1.00: invalid multi_count 128 ignored [ 198.570437][T28016] netlink: 'syz.2.10216': attribute type 1 has an invalid length. [ 198.573499][T28016] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10216'. [ 198.600624][T28020] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 198.668803][T28029] macsec1: entered allmulticast mode [ 198.670505][T28029] batadv_slave_1: entered allmulticast mode [ 198.673503][T28029] batadv_slave_1: left allmulticast mode [ 198.781329][ T6297] libceph: mon0 (1)[c::]:6789 connect error [ 198.806283][T27920] ceph: No mds server is up or the cluster is laggy [ 198.903243][T28052] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10226'. [ 198.906063][T28052] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10226'. [ 199.226700][T28094] Cache volume key already in use (9p,syz,) [ 199.398722][T28100] netlink: 4804 bytes leftover after parsing attributes in process `syz.2.10246'. [ 199.428121][T28102] batadv0: vlans aren't supported yet for dev_uc|mc_add() [ 199.657929][T28137] block nbd3: not configured, cannot reconfigure [ 200.873161][T28280] program syz.0.10329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.885438][ T42] kauditd_printk_skb: 348 callbacks suppressed [ 200.885449][ T42] audit: type=1400 audit(2000000027.164:65880): avc: denied { create } for pid=28281 comm="syz.2.10330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.900966][ T42] audit: type=1400 audit(2000000027.164:65881): avc: denied { ioctl } for pid=28281 comm="syz.2.10330" path="socket:[84689]" dev="sockfs" ino=84689 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.909390][ T42] audit: type=1400 audit(2000000027.164:65882): avc: denied { bind } for pid=28281 comm="syz.2.10330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.915275][ T42] audit: type=1400 audit(2000000027.182:65883): avc: denied { create } for pid=28283 comm="syz.0.10331" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 200.922128][ T42] audit: type=1400 audit(2000000027.191:65884): avc: denied { create } for pid=28285 comm="syz.2.10332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 200.928281][ T42] audit: type=1400 audit(2000000027.191:65885): avc: denied { read } for pid=28285 comm="syz.2.10332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 200.968755][ T42] audit: type=1400 audit(2000000027.238:65886): avc: denied { write } for pid=28285 comm="syz.2.10332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 200.975371][ T42] audit: type=1400 audit(2000000027.247:65887): avc: denied { read write } for pid=28293 comm="syz.0.10335" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.982746][ T42] audit: type=1400 audit(2000000027.247:65888): avc: denied { open } for pid=28293 comm="syz.0.10335" path="/dev/raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.997275][ T42] audit: type=1400 audit(2000000027.247:65889): avc: denied { ioctl } for pid=28293 comm="syz.0.10335" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.046252][T28298] can0: slcan on ttynull. [ 201.144026][T28297] can0 (unregistered): slcan off ttynull. [ 201.242172][ T41] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 201.309262][T28324] netlink: 'syz.3.10350': attribute type 3 has an invalid length. [ 201.414713][ T41] usb 5-1: Using ep0 maxpacket: 32 [ 201.418407][ T41] usb 5-1: unable to get BOS descriptor or descriptor too short [ 201.423919][ T41] usb 5-1: string descriptor 0 read error: -22 [ 201.425856][ T41] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 201.428638][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.434460][ T41] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 201.444301][ T41] dw2102: su3000_power_ctrl: 1, initialized 0 [ 201.446491][ T41] dvb-usb: bulk message failed: -22 (2/0) [ 201.456951][T28346] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio0-cursor) [ 201.473961][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.478496][ T41] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 201.483156][ T41] usb 5-1: media controller created [ 201.485309][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 201.489728][ T41] dw2102: i2c transfer failed. [ 201.492749][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 201.495060][ T41] dw2102: i2c transfer failed. [ 201.498104][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 201.499943][ T41] dw2102: i2c transfer failed. [ 201.502909][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 201.505242][ T41] dw2102: i2c transfer failed. [ 201.507241][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 201.509520][ T41] dw2102: i2c transfer failed. [ 201.511508][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 201.514721][ T41] dw2102: i2c transfer failed. [ 201.516339][ T41] dvb-usb: MAC address: 02:02:02:02:02:02 [ 201.518981][T28356] netlink: 'syz.2.10366': attribute type 12 has an invalid length. [ 201.522777][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.536040][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 201.537924][ T41] dw2102: command 0x0e transfer failed. [ 201.541480][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 201.543873][ T41] dw2102: command 0x0e transfer failed. [ 201.671192][T28372] binder: 28371:28372 ioctl c0306201 200000000080 returned -22 [ 201.747813][T28384] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 201.881132][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 201.885257][ T41] dw2102: command 0x0e transfer failed. [ 201.887051][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 201.888873][ T41] dw2102: command 0x0e transfer failed. [ 201.890558][ T41] dvb-usb: bulk message failed: -22 (1/0) [ 201.894825][ T41] dw2102: command 0x51 transfer failed. [ 201.899650][T28294] dvb-usb: bulk message failed: -22 (5/0) [ 201.903853][T28294] dw2102: i2c transfer failed. [ 201.920318][ T41] DVB: Unable to find symbol ds3000_attach() [ 201.922166][ T41] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 201.970755][T28413] netlink: 108 bytes leftover after parsing attributes in process `syz.3.10393'. [ 201.973660][T28413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10393'. [ 201.989187][ T41] rc_core: IR keymap rc-su3000 not found [ 201.991410][ T41] Registered IR keymap rc-empty [ 201.995738][ T41] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 201.999673][ T41] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input30 [ 202.006641][ T41] dvb-usb: schedule remote query interval to 150 msecs. [ 202.008820][ T41] dw2102: su3000_power_ctrl: 0, initialized 1 [ 202.013283][ T41] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 202.017165][ T41] usb 5-1: USB disconnect, device number 12 [ 202.041679][ T41] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 202.248965][T28435] netlink: 277 bytes leftover after parsing attributes in process `syz.3.10404'. [ 202.363766][T28443] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 202.418382][T28447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10409'. [ 202.421471][T28447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10409'. [ 202.425209][T28447] netlink: 'syz.3.10409': attribute type 6 has an invalid length. [ 202.530734][T28463] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10417'. [ 202.613426][T28478] tmpfs: Cannot change global quota limit on remount [ 203.539093][ T6326] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 203.560607][ T41] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 203.703384][ T6326] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 203.706777][ T6326] usb 8-1: config 1 has no interface number 0 [ 203.709329][ T6326] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 203.714315][ T6326] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 203.722832][ T6326] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.730419][ T6326] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 203.734486][ T6326] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.740600][ T6326] usb 8-1: Product: syz [ 203.742009][ T6326] usb 8-1: Manufacturer: syz [ 203.743482][ T6326] usb 8-1: SerialNumber: syz [ 203.745328][ T41] usb 5-1: Using ep0 maxpacket: 32 [ 203.747866][T28560] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.751112][ T41] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.757193][ T41] usb 5-1: string descriptor 0 read error: -22 [ 203.759126][ T41] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 203.761960][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.772340][ T41] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 203.774998][ T41] dw2102: su3000_power_ctrl: 1, initialized 0 [ 203.777073][ T41] dvb-usb: bulk message failed: -22 (2/0) [ 203.781395][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 203.785435][ T41] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 203.788077][ T41] usb 5-1: media controller created [ 203.789806][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 203.791636][ T41] dw2102: i2c transfer failed. [ 203.793580][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 203.795504][ T41] dw2102: i2c transfer failed. [ 203.797007][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 203.798718][ T41] dw2102: i2c transfer failed. [ 203.802715][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 203.804647][ T41] dw2102: i2c transfer failed. [ 203.806443][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 203.808446][ T41] dw2102: i2c transfer failed. [ 203.810150][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 203.811907][ T41] dw2102: i2c transfer failed. [ 203.813383][ T41] dvb-usb: MAC address: 02:02:02:02:02:02 [ 203.821991][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.836403][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 203.838486][ T41] dw2102: command 0x0e transfer failed. [ 203.840774][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 203.842636][ T41] dw2102: command 0x0e transfer failed. [ 203.971995][T28560] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 204.178404][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 204.180899][ T41] dw2102: command 0x0e transfer failed. [ 204.183191][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 204.185532][ T41] dw2102: command 0x0e transfer failed. [ 204.187826][ T41] dvb-usb: bulk message failed: -22 (1/0) [ 204.194599][T28600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10482'. [ 204.194886][ T41] dw2102: command 0x51 transfer failed. [ 204.197526][T28600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10482'. [ 204.200091][T28558] dw2102: i2c rd: len=136 is too big! [ 204.200091][T28558] [ 204.215650][ T6326] sierra_net 8-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 204.223987][ T41] DVB: Unable to find symbol ds3000_attach() [ 204.225853][ T41] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 204.275864][ T41] rc_core: IR keymap rc-su3000 not found [ 204.277624][ T41] Registered IR keymap rc-empty [ 204.279621][ T41] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 204.283899][ T41] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input31 [ 204.287962][ T41] dvb-usb: schedule remote query interval to 150 msecs. [ 204.290129][ T41] dw2102: su3000_power_ctrl: 0, initialized 1 [ 204.291991][ T41] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 204.298005][ T41] usb 5-1: USB disconnect, device number 13 [ 204.321202][ T41] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 204.415619][ T6326] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 204.417912][ T6326] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 204.420492][ T6326] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 204.422566][ T6326] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 204.429730][ T6326] usb 8-1: USB disconnect, device number 9 [ 204.440479][ T6326] sierra_net 8-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 204.481424][T28616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10489'. [ 204.484463][T28616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10489'. [ 204.525695][ T6326] sierra_net 8-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 204.754780][T28629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.782091][T28631] overlayfs: conflicting lowerdir path [ 204.895306][T28648] kernel profiling enabled (shift: 5) [ 205.225450][T28698] devtmpfs: Cannot change global quota limit on remount [ 205.309290][T28711] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 205.309290][T28711] The task syz.2.10529 (28711) triggered the difference, watch for misbehavior. [ 205.447879][T28729] netlink: 'syz.0.10543': attribute type 83 has an invalid length. [ 205.642146][T28753] binder: 28752:28753 ioctl c018620b 0 returned -14 [ 206.282607][T28824] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 206.287265][T28824] bond0 (unregistering): Released all slaves [ 206.320750][ T42] kauditd_printk_skb: 241 callbacks suppressed [ 206.320761][ T42] audit: type=1400 audit(2000000032.174:66131): avc: denied { create } for pid=28829 comm="syz.0.10590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.329995][ T42] audit: type=1400 audit(2000000032.174:66132): avc: denied { setopt } for pid=28829 comm="syz.0.10590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.336359][ T42] audit: type=1400 audit(2000000032.174:66133): avc: denied { getopt } for pid=28829 comm="syz.0.10590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.391180][ T42] audit: type=1400 audit(2000000032.248:66134): avc: denied { ioctl } for pid=28833 comm="syz.2.10593" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 206.498727][ T42] audit: type=1400 audit(2000000032.349:66135): avc: denied { create } for pid=28845 comm="syz.2.10598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.504614][ T42] audit: type=1400 audit(2000000032.349:66136): avc: denied { write } for pid=28845 comm="syz.2.10598" name="raw" dev="proc" ino=4026533698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 206.521518][ T42] audit: type=1400 audit(2000000032.368:66137): avc: denied { setopt } for pid=28847 comm="syz.2.10599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 206.527482][ T42] audit: type=1400 audit(2000000032.368:66138): avc: denied { getopt } for pid=28847 comm="syz.2.10599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 206.731669][ T42] audit: type=1400 audit(2000000032.552:66139): avc: denied { append } for pid=28873 comm="syz.0.10609" name="comedi3" dev="devtmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 206.750194][ T42] audit: type=1400 audit(2000000032.580:66140): avc: denied { recv } for pid=5129 comm="klogd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=38004 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 206.823607][T28887] Invalid ELF header len 18 [ 207.049530][T28913] loop4: detected capacity change from 0 to 2640 [ 207.057864][T28913] buffer_io_error: 11 callbacks suppressed [ 207.057880][T28913] Buffer I/O error on dev loop4, logical block 0, async page read [ 207.067165][T28913] Buffer I/O error on dev loop4, logical block 0, async page read [ 207.070473][T28913] Buffer I/O error on dev loop4, logical block 0, async page read [ 207.074388][T28913] Buffer I/O error on dev loop4, logical block 0, async page read [ 207.077726][T28913] Buffer I/O error on dev loop4, logical block 0, async page read [ 207.080964][T28913] Buffer I/O error on dev loop4, logical block 0, async page read [ 207.085373][T28913] Buffer I/O error on dev loop4, logical block 0, async page read [ 207.088717][T28913] Buffer I/O error on dev loop4, logical block 0, async page read [ 207.091760][T28913] ldm_validate_partition_table(): Disk read failed. [ 207.095303][T28913] Buffer I/O error on dev loop4, logical block 0, async page read [ 207.097842][T28913] Buffer I/O error on dev loop4, logical block 0, async page read [ 207.100222][T28913] Dev loop4: unable to read RDB block 0 [ 207.102086][T28913] loop4: unable to read partition table [ 207.105775][T28913] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 207.321318][T28953] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 207.321318][T28953] program syz.0.10642 not setting count and/or reply_len properly [ 207.449589][T28974] Invalid logical block size (-1) [ 207.560221][T28989] __nla_validate_parse: 6 callbacks suppressed [ 207.560232][T28989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10660'. [ 207.596110][ T41] kernel write not supported for file /audio1 (pid: 41 comm: kworker/3:1) [ 208.239622][T29051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10690'. [ 208.243830][T29051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10690'. [ 208.847636][ T6206] ------------[ cut here ]------------ [ 208.849996][ T6206] workqueue: cannot queue hci_conn_timeout on wq hci1 [ 208.852163][ T6206] WARNING: kernel/workqueue.c:2305 at __queue_work+0xd2d/0x12b0, CPU#0: kworker/0:4/6206 [ 208.855436][ T6206] Modules linked in: [ 208.856863][ T6206] CPU: 0 UID: 0 PID: 6206 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.860635][ T6206] Tainted: [L]=SOFTLOCKUP [ 208.862446][ T6206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.866502][ T6206] Workqueue: events l2cap_chan_timeout [ 208.868568][ T6206] RIP: 0010:__queue_work+0xd31/0x12b0 [ 208.870253][ T6206] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d 03 c1 0f 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 208.876151][ T6206] RSP: 0018:ffffc90005ef7a28 EFLAGS: 00010046 [ 208.878005][ T6206] RAX: dffffc0000000000 RBX: ffff88801b8f5400 RCX: 1ffff110060b894b [ 208.880379][ T6206] RDX: ffff88804e480970 RSI: ffffffff8a928f60 RDI: ffffffff90dea750 [ 208.882733][ T6206] RBP: ffff8880305c4a40 R08: 0000000000000005 R09: 0000000000000000 [ 208.885662][ T6206] R10: 0000000000200000 R11: 0000000000000000 R12: ffff88804e480800 [ 208.888822][ T6206] R13: ffff88802dfa8000 R14: ffff8880305c4a88 R15: ffff8880305c4a48 [ 208.891315][ T6206] FS: 0000000000000000(0000) GS:ffff8880d62ec000(0000) knlGS:0000000000000000 [ 208.894007][ T6206] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.896057][ T6206] CR2: 0000001b3301eff8 CR3: 00000000368b6000 CR4: 0000000000352ef0 [ 208.898437][ T6206] Call Trace: [ 208.899657][ T6206] [ 208.900697][ T6206] ? __cancel_work+0x2b5/0x340 [ 208.902232][ T6206] ? lockdep_hardirqs_on+0x78/0x100 [ 208.903936][ T6206] ? __cancel_work+0x245/0x340 [ 208.905404][ T6206] __queue_delayed_work+0x357/0x450 [ 208.907012][ T6206] queue_delayed_work_on+0x180/0x1e0 [ 208.908653][ T6206] l2cap_chan_del+0x644/0x920 [ 208.910109][ T6206] l2cap_chan_close+0x3b0/0xa70 [ 208.911688][ T6206] ? __pfx_l2cap_chan_close+0x10/0x10 [ 208.913369][ T6206] l2cap_chan_timeout+0x211/0x3f0 [ 208.914913][ T6206] process_one_work+0xa23/0x1940 [ 208.916445][ T6206] ? __pfx_process_one_work+0x10/0x10 [ 208.918081][ T6206] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 208.919810][ T6206] worker_thread+0x5ef/0xe50 [ 208.921307][ T6206] ? __pfx_worker_thread+0x10/0x10 [ 208.922907][ T6206] ? kthread+0x13a/0x450 [ 208.924190][ T6206] ? __pfx_worker_thread+0x10/0x10 [ 208.925747][ T6206] kthread+0x370/0x450 [ 208.926921][ T6206] ? __pfx_kthread+0x10/0x10 [ 208.928513][ T6206] ret_from_fork+0x72b/0xd50 [ 208.929960][ T6206] ? __pfx_ret_from_fork+0x10/0x10 [ 208.931603][ T6206] ? __switch_to+0x800/0x10f0 [ 208.933128][ T6206] ? __pfx_kthread+0x10/0x10 [ 208.934690][ T6206] ret_from_fork_asm+0x1a/0x30 [ 208.936143][ T6206] [ 208.937104][ T6206] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 208.939371][ T6206] CPU: 0 UID: 0 PID: 6206 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.942736][ T6206] Tainted: [L]=SOFTLOCKUP [ 208.944153][ T6206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.947265][ T6206] Workqueue: events l2cap_chan_timeout [ 208.948957][ T6206] Call Trace: [ 208.949996][ T6206] [ 208.950913][ T6206] dump_stack_lvl+0x100/0x190 [ 208.952378][ T6206] vpanic+0x552/0x970 [ 208.953635][ T6206] ? __pfx_vpanic+0x10/0x10 [ 208.955091][ T6206] panic+0xd1/0xe0 [ 208.956278][ T6206] ? __pfx_panic+0x10/0x10 [ 208.957662][ T6206] ? check_panic_on_warn+0x1f/0x90 [ 208.959287][ T6206] check_panic_on_warn.cold+0x19/0x34 [ 208.960900][ T6206] ? __queue_work+0xd2d/0x12b0 [ 208.962353][ T6206] __warn.cold+0x191/0x318 [ 208.963771][ T6206] __report_bug+0x30f/0x440 [ 208.965219][ T6206] ? __queue_work+0xd2d/0x12b0 [ 208.966820][ T6206] ? __pfx___report_bug+0x10/0x10 [ 208.968398][ T6206] ? __pfx_hci_conn_timeout+0x10/0x10 [ 208.970091][ T6206] ? __pfx_debug_object_assert_init+0x10/0x10 [ 208.971990][ T6206] report_bug_entry+0xe1/0x290 [ 208.973526][ T6206] ? __queue_work+0xd31/0x12b0 [ 208.975047][ T6206] handle_bug+0x1cd/0x2a0 [ 208.976449][ T6206] exc_invalid_op+0x17/0x50 [ 208.977869][ T6206] asm_exc_invalid_op+0x1a/0x20 [ 208.979427][ T6206] RIP: 0010:__queue_work+0xd31/0x12b0 [ 208.981097][ T6206] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d 03 c1 0f 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 208.986928][ T6206] RSP: 0018:ffffc90005ef7a28 EFLAGS: 00010046 [ 208.988958][ T6206] RAX: dffffc0000000000 RBX: ffff88801b8f5400 RCX: 1ffff110060b894b [ 208.991413][ T6206] RDX: ffff88804e480970 RSI: ffffffff8a928f60 RDI: ffffffff90dea750 [ 208.993817][ T6206] RBP: ffff8880305c4a40 R08: 0000000000000005 R09: 0000000000000000 [ 208.996271][ T6206] R10: 0000000000200000 R11: 0000000000000000 R12: ffff88804e480800 [ 208.999256][ T6206] R13: ffff88802dfa8000 R14: ffff8880305c4a88 R15: ffff8880305c4a48 [ 209.002300][ T6206] ? __pfx_hci_conn_timeout+0x10/0x10 [ 209.004242][ T6206] ? __queue_work+0xcff/0x12b0 [ 209.005711][ T6206] ? __cancel_work+0x2b5/0x340 [ 209.007223][ T6206] ? lockdep_hardirqs_on+0x78/0x100 [ 209.008810][ T6206] ? __cancel_work+0x245/0x340 [ 209.010304][ T6206] __queue_delayed_work+0x357/0x450 [ 209.011807][ T6206] queue_delayed_work_on+0x180/0x1e0 [ 209.013347][ T6206] l2cap_chan_del+0x644/0x920 [ 209.014747][ T6206] l2cap_chan_close+0x3b0/0xa70 [ 209.016198][ T6206] ? __pfx_l2cap_chan_close+0x10/0x10 [ 209.017846][ T6206] l2cap_chan_timeout+0x211/0x3f0 [ 209.019354][ T6206] process_one_work+0xa23/0x1940 [ 209.020855][ T6206] ? __pfx_process_one_work+0x10/0x10 [ 209.022485][ T6206] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 209.024053][ T6206] worker_thread+0x5ef/0xe50 [ 209.025381][ T6206] ? __pfx_worker_thread+0x10/0x10 [ 209.026943][ T6206] ? kthread+0x13a/0x450 [ 209.028243][ T6206] ? __pfx_worker_thread+0x10/0x10 [ 209.029839][ T6206] kthread+0x370/0x450 [ 209.031294][ T6206] ? __pfx_kthread+0x10/0x10 [ 209.032805][ T6206] ret_from_fork+0x72b/0xd50 [ 209.034238][ T6206] ? __pfx_ret_from_fork+0x10/0x10 [ 209.035832][ T6206] ? __switch_to+0x800/0x10f0 [ 209.037280][ T6206] ? __pfx_kthread+0x10/0x10 [ 209.038828][ T6206] ret_from_fork_asm+0x1a/0x30 [ 209.040352][ T6206] [ 209.042049][ T6206] Kernel Offset: disabled [ 209.043440][ T6206] Rebooting in 86400 seconds..