last executing test programs: 1.690709848s ago: executing program 1 (id=13701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) close(r0) 1.592122555s ago: executing program 1 (id=13704): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x14, 0x2, 0x1b1c, 0xc10, 0x0, 0x0, "05010900a101150026ff007508951009008102c0"}}, 0x12c) nanosleep(&(0x7f0000000640)={0x0, 0x2faf080}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000680), 0x6) 1.378556415s ago: executing program 1 (id=13706): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02785ff9782722f08138ee99701", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.378336725s ago: executing program 3 (id=13707): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$getown(r2, 0x9) 1.302339315s ago: executing program 1 (id=13708): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x20401) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x2004, 0x101, 0x0, 'queue0\x00'}) 1.239612507s ago: executing program 1 (id=13709): socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.239430307s ago: executing program 1 (id=13710): r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000200000040480b051000010102000109023900020100803209040000000000000009040100000000000009040101030000000007050102400000070581023200000705826d4197"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4}) 1.239322962s ago: executing program 3 (id=13711): modify_ldt$write(0x1, &(0x7f0000000140)={0x92, 0x20000000, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.147115924s ago: executing program 3 (id=13712): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000100)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}], '\x00', 0xffffffff}) mmap(&(0x7f000000a000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) 1.066954041s ago: executing program 3 (id=13713): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x48000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x3}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) 1.06674843s ago: executing program 3 (id=13714): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@ipv6_newaddr={0x34, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x18, 0x61, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004051}, 0x4) 971.718386ms ago: executing program 3 (id=13715): munlockall() getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 413.858285ms ago: executing program 2 (id=13721): mkdirat(0xffffffffffffff9c, &(0x7f00000013c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001400)='./proc\x00', &(0x7f0000001440)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001480)='./proc/irq/default_smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f00000014c0)='2', 0x1) 413.576321ms ago: executing program 0 (id=13722): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 413.491298ms ago: executing program 2 (id=13723): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x20) 295.696481ms ago: executing program 0 (id=13724): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000280)={r1, 0x1, 0x10, 0xaf9}, &(0x7f00000002c0)=0x18) 295.515636ms ago: executing program 2 (id=13725): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 181.912856ms ago: executing program 0 (id=13726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000280)={0xc900000000000000, 0x100000, 0x6cc697fc, 0x4, 0xa}) 146.77021ms ago: executing program 2 (id=13727): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f0000000140)=[{0xfffffffff, 0xffffffffffffff01}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r1, 0x0, &(0x7f00002c0000/0x4000)=nil, 0x4000, 0x10}) 64.434016ms ago: executing program 2 (id=13728): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x3, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x8001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff8, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 64.27811ms ago: executing program 0 (id=13729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xa1}]}]}, 0x28}}, 0x0) 64.182538ms ago: executing program 0 (id=13730): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100030000000000040001000000010020"], 0x1c, 0x2) chdir(&(0x7f0000000400)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 224.628µs ago: executing program 0 (id=13731): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x42801, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r1, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4040810) 0s ago: executing program 2 (id=13732): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/203, 0xcb}], 0x1, 0x7fffffff, 0x1000003) kernel console output (not intermixed with test programs): root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 339.975582][ T43] audit: type=1400 audit(2000000357.024:227698): avc: denied { read } for pid=31835 comm="syz.1.12338" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 339.977523][ T43] audit: type=1400 audit(2000000357.033:227699): avc: denied { open } for pid=31835 comm="syz.1.12338" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 340.155248][ T43] audit: type=1400 audit(2000000357.192:227700): avc: denied { ioctl } for pid=31835 comm="syz.1.12338" path="/dev/dri/card1" dev="devtmpfs" ino=637 ioctlcmd=0x64b5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 340.294097][ T43] audit: type=1400 audit(2000000357.323:227701): avc: denied { allowed } for pid=31839 comm="syz.0.12341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 340.314665][ T43] audit: type=1400 audit(2000000357.342:227702): avc: denied { create } for pid=31839 comm="syz.0.12341" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 340.330573][ T43] audit: type=1400 audit(2000000357.351:227703): avc: denied { map } for pid=31839 comm="syz.0.12341" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=98745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 PÚÿÿÿ-D [ 344.684975][T31870] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 345.114583][ T43] kauditd_printk_skb: 23 callbacks suppressed [ 345.114607][ T43] audit: type=1400 audit(2000000361.834:227727): avc: denied { mount } for pid=31876 comm="syz.0.12356" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 345.140572][ T43] audit: type=1400 audit(2000000361.862:227728): avc: denied { search } for pid=31876 comm="syz.0.12356" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 345.142895][ T43] audit: type=1400 audit(2000000361.862:227729): avc: denied { search } for pid=31876 comm="syz.0.12356" name="events" dev="tracefs" ino=6338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 345.146455][ T43] audit: type=1400 audit(2000000361.862:227730): avc: denied { search } for pid=31876 comm="syz.0.12356" name="irq_vectors" dev="tracefs" ino=98789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 345.152611][ T43] audit: type=1400 audit(2000000361.871:227731): avc: denied { write } for pid=31876 comm="syz.0.12356" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 345.159261][ T43] audit: type=1400 audit(2000000361.871:227732): avc: denied { open } for pid=31876 comm="syz.0.12356" path="/191/trace/events/irq_vectors/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 345.164278][ T43] audit: type=1400 audit(2000000361.881:227733): avc: denied { read } for pid=31876 comm="syz.0.12356" path="/191/trace/events/irq_vectors/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 345.303935][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.456944][ T43] audit: type=1400 audit(2000000362.152:227734): avc: denied { read write } for pid=31879 comm="syz.3.12358" name="cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 345.461570][ T43] audit: type=1400 audit(2000000362.161:227735): avc: denied { open } for pid=31879 comm="syz.3.12358" path="/2970/dev/cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 345.575527][ T43] audit: type=1400 audit(2000000362.264:227736): avc: denied { unmount } for pid=29938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 346.401871][T31886] Falling back ldisc for ttyS3. [ 347.601529][T31893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12363'. [ 350.484582][ T43] kauditd_printk_skb: 45 callbacks suppressed [ 350.484599][ T43] audit: type=1800 audit(2000000366.859:227782): pid=31918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=277006 res=0 errno=0 [ 350.487411][ T43] audit: type=1800 audit(2000000366.859:227783): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=277017 res=0 errno=0 [ 350.493445][T31957] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 350.508258][ T223] Bluetooth: hci4: Frame reassembly failed (-84) [ 350.530655][ T43] audit: type=1400 audit(2000000366.896:227784): avc: denied { name_bind } for pid=31960 comm="syz.2.12391" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 350.530927][ T43] audit: type=1400 audit(2000000366.896:227785): avc: denied { node_bind } for pid=31960 comm="syz.2.12391" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 350.563219][ T43] audit: type=1400 audit(2000000366.934:227786): avc: denied { search } for pid=31962 comm="syz.3.12392" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 350.674338][ T43] audit: type=1400 audit(2000000367.037:227787): avc: denied { read } for pid=31968 comm="syz.3.12395" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 350.674733][ T43] audit: type=1400 audit(2000000367.037:227788): avc: denied { open } for pid=31968 comm="syz.3.12395" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 350.677891][ T43] audit: type=1400 audit(2000000367.037:227789): avc: denied { ioctl } for pid=31968 comm="syz.3.12395" path="/dev/dri/card1" dev="devtmpfs" ino=637 ioctlcmd=0x64bf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 350.688561][ T43] audit: type=1400 audit(2000000367.046:227790): avc: denied { create } for pid=31970 comm="syz.2.12396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 350.690821][ T43] audit: type=1400 audit(2000000367.046:227791): avc: denied { bind } for pid=31970 comm="syz.2.12396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 350.794607][T31977] netlink: 'syz.3.12399': attribute type 4 has an invalid length. [ 350.794628][T31977] netlink: 'syz.3.12399': attribute type 8 has an invalid length. [ 350.794639][T31977] netlink: 212 bytes leftover after parsing attributes in process `syz.3.12399'. [ 350.944085][T31986] ima: rule for LSM 'u' is undefined [ 350.945406][T31987] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 350.947669][T31984] ima: policy update completed [ 351.309631][T32010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12415'. [ 351.429519][T32020] xt_MASQUERADE: bad rangesize 10242 [ 351.482709][T32026] Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! [ 351.580359][T32032] kernel read not supported for file /policy (pid: 32032 comm: syz.3.12425) [ 351.770937][T32032] SELinux: failed to load policy [ 352.155301][T32067] ima: policy update failed [ 352.197523][T32072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12445'. [ 352.347369][T32078] sd 0:0:0:0: PR command failed: 1026 [ 352.347405][T32078] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 352.347435][T32078] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 352.439799][T32085] netlink: 'syz.3.12451': attribute type 4 has an invalid length. [ 352.440378][T32085] netlink: 'syz.3.12451': attribute type 4 has an invalid length. [ 352.640662][ T5970] Bluetooth: hci4: command 0x1003 tx timeout [ 352.644180][ T5092] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 352.750474][ T5970] Bluetooth: hci2: link tx timeout [ 352.750493][ T5970] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 352.764709][ T5970] Bluetooth: hci2: link tx timeout [ 352.764726][ T5970] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 352.764988][ T5970] Bluetooth: hci2: link tx timeout [ 352.764997][ T5970] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 352.767341][ T5970] Bluetooth: hci2: link tx timeout [ 352.767350][ T5970] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 352.772813][ T5970] Bluetooth: hci2: link tx timeout [ 352.772824][ T5970] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 352.772844][ T5970] Bluetooth: hci2: link tx timeout [ 352.772853][ T5970] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 352.772908][ T5970] Bluetooth: hci2: link tx timeout [ 352.772917][ T5970] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 352.773837][ T5970] Bluetooth: hci2: link tx timeout [ 352.773848][ T5970] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 352.919215][T32107] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 353.192963][T32128] kAFS: bad VL server IP address [ 354.949176][ T5970] Bluetooth: hci2: command 0x0406 tx timeout [ 355.070874][T32236] ceph: No mds server is up or the cluster is laggy [ 355.250600][T32253] Failed to get privilege flags for destination (handle=0x2:0x0) [ 355.425244][T32275] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 355.475285][T32280] ip_tables: iptables: counters copy to user failed while replacing table [ 355.576908][T32280] nvme nvme0: failed to connect socket: -22 [ 355.715931][T32303] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 355.849855][ T43] kauditd_printk_skb: 203 callbacks suppressed [ 355.849873][ T43] audit: type=1400 audit(2000000371.875:227995): avc: denied { mount } for pid=32312 comm="syz.0.12553" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 355.866961][ T43] audit: type=1400 audit(2000000371.903:227996): avc: denied { create } for pid=32314 comm="syz.1.12554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 355.874842][ T43] audit: type=1400 audit(2000000371.903:227997): avc: denied { write } for pid=32314 comm="syz.1.12554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 355.877674][ T43] audit: type=1400 audit(2000000371.912:227998): avc: denied { nlmsg_write } for pid=32314 comm="syz.1.12554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 355.883831][ T43] audit: type=1400 audit(2000000371.912:227999): avc: denied { nlmsg_read } for pid=32314 comm="syz.1.12554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 355.902825][ T43] audit: type=1400 audit(2000000371.931:228000): avc: denied { unmount } for pid=29938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 355.903341][ T43] audit: type=1400 audit(2000000371.931:228001): avc: denied { name_bind } for pid=32316 comm="syz.2.12555" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 355.947884][ T43] audit: type=1400 audit(2000000371.968:228002): avc: denied { mount } for pid=32320 comm="syz.0.12556" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 355.948529][ T43] audit: type=1400 audit(2000000371.968:228003): avc: denied { module_request } for pid=32318 comm="syz.1.12557" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 355.965978][ T43] audit: type=1400 audit(2000000371.987:228004): avc: denied { create } for pid=32323 comm="syz.2.12558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 356.121391][T32338] zram: Cannot change disksize for initialized device [ 356.257127][ T1535] input: syz0 as /devices/virtual/misc/uhid/0002:1B1C:0C10.000C/input/input33 [ 356.279592][ T1535] hid-generic 0002:1B1C:0C10.000C: input,hidraw1: HID v0.00 Device [syz0] on syz0 [ 356.326139][T32354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12572'. [ 356.343216][T32354] ipvlan3: entered allmulticast mode [ 356.343237][T32354] virt_wifi0: entered allmulticast mode [ 356.344598][T32354] batman_adv: batadv0: Adding interface: ipvlan3 [ 356.344612][T32354] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.344640][T32354] batman_adv: batadv0: Interface activated: ipvlan3 [ 356.355947][T32351] fido_id[32351]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 356.879987][T32391] block2mtd: Using custom MTD label '&' for dev #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-‰%#!$([)^)} [ 356.889033][T32391] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-‰%#!$([)^)} [ 357.132707][T32381] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input34 [ 357.383724][T13576] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 357.554650][T13576] usb 7-1: Using ep0 maxpacket: 8 [ 357.555242][T13576] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 357.556228][T13576] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 357.556264][T13576] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 357.556284][T13576] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 357.556298][T13576] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 357.556318][T13576] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 357.556335][T13576] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.556365][T13576] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.620915][T32421] netlink: 'syz.3.12603': attribute type 46 has an invalid length. [ 357.620934][T32421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12603'. [ 357.784243][T13576] usb 7-1: GET_CAPABILITIES returned 0 [ 357.784281][T13576] usbtmc 7-1:16.0: can't read capabilities [ 358.010579][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 358.031983][T32401] usbtmc 7-1:16.0: Unable to send data, error -71 [ 358.033233][ T1912] usb 7-1: USB disconnect, device number 11 [ 358.147212][T32459] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 358.597551][T32493] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 358.798594][T32508] usb usb8: usbfs: process 32508 (syz.1.12645) did not claim interface 0 before use [ 359.141670][T32535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12659'. [ 359.141695][T32535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12659'. [ 359.141708][T32535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12659'. [ 359.448584][T13576] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 359.638426][T13576] usb 6-1: Using ep0 maxpacket: 8 [ 359.639242][T13576] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 359.640329][T13576] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 359.640354][T13576] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 359.640374][T13576] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 359.640393][T13576] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.640425][T13576] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.806055][T32572] nvme_fcloop: unknown parameter or missing value 'ww' [ 359.872573][T13576] usb 6-1: GET_CAPABILITIES returned 0 [ 359.872611][T13576] usbtmc 6-1:16.0: can't read capabilities [ 359.991188][T32587] XFS (mtdblock0): Invalid superblock magic number [ 360.103287][ T6058] usb 6-1: USB disconnect, device number 16 [ 360.382473][T32596] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 360.767356][T32627] erspan0: entered promiscuous mode [ 361.240199][ T43] kauditd_printk_skb: 305 callbacks suppressed [ 361.240218][ T43] audit: type=1400 audit(2000000376.919:228310): avc: denied { read write } for pid=32654 comm="syz.1.12710" name="vhost-net" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 361.240523][ T43] audit: type=1400 audit(2000000376.919:228311): avc: denied { open } for pid=32654 comm="syz.1.12710" path="/dev/vhost-net" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 361.248525][ T43] audit: type=1400 audit(2000000376.928:228312): avc: denied { ioctl } for pid=32654 comm="syz.1.12710" path="/dev/vhost-net" dev="devtmpfs" ino=1297 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 361.293317][ T43] audit: type=1400 audit(2000000376.966:228313): avc: denied { setopt } for pid=32659 comm="syz.2.12712" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 361.294140][T32660] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 361.295686][ T43] audit: type=1400 audit(2000000376.975:228314): avc: denied { write } for pid=32659 comm="syz.2.12712" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 361.340637][ T43] audit: type=1400 audit(2000000377.022:228315): avc: denied { write } for pid=32664 comm="syz.2.12714" name="sda" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 361.341737][T32665] sd 0:0:0:0: PR command failed: 1026 [ 361.341774][T32665] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 361.341809][T32665] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 361.364708][ T43] audit: type=1400 audit(2000000377.041:228316): avc: denied { sys_module } for pid=32661 comm="syz.1.12713" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 361.381192][ T43] audit: type=1400 audit(2000000377.059:228317): avc: denied { unmount } for pid=5973 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 361.382247][ T43] audit: type=1800 audit(2000000377.059:228318): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=25423 res=0 errno=0 [ 361.388022][ T43] audit: type=1400 audit(2000000377.059:228319): avc: denied { write } for pid=32661 comm="syz.1.12713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 361.978630][ T50] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 362.144687][ T50] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 362.144712][ T50] usb 6-1: too many configurations: 40, using maximum allowed: 8 [ 362.156534][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.156549][ T50] usb 6-1: Product: syz [ 362.156556][ T50] usb 6-1: Manufacturer: syz [ 362.156563][ T50] usb 6-1: SerialNumber: syz [ 362.383959][ T50] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 362.383992][ T50] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 362.384003][ T50] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 362.417628][ T50] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 362.420050][ T50] usb 6-1: USB disconnect, device number 17 [ 363.022793][T32724] ±ÿ)”ëfl: renamed from lo (while UP) [ 363.121175][T32731] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12743'. [ 363.363649][T32748] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12751'. [ 363.768623][T32758] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12755'. [ 363.987642][T13576] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 364.160838][T13576] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 364.161803][T13576] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 364.161818][T13576] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 364.161829][T13576] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 364.161846][T13576] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.163825][T32756] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 364.165626][T13576] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 364.185638][T13576] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 364.398289][T13576] usb 7-1: USB disconnect, device number 12 [ 364.420208][T13576] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 364.420973][T13576] cyberjack 7-1:1.0: device disconnected [ 365.539573][ T1912] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 365.571339][ T419] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 365.699547][ T1912] usb 6-1: Using ep0 maxpacket: 8 [ 365.700413][ T1912] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 365.701539][ T1912] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 365.701580][ T1912] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 365.701601][ T1912] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 365.701619][ T1912] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 365.701640][ T1912] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 365.701659][ T1912] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.701689][ T1912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.945713][ T1912] usb 6-1: GET_CAPABILITIES returned 0 [ 365.945737][ T1912] usbtmc 6-1:16.0: can't read capabilities [ 366.162657][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 366.162700][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 366.162752][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 366.164712][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 366.173025][ T392] usbtmc 6-1:16.0: Unable to send data, error -71 [ 366.174532][ T1535] usb 6-1: USB disconnect, device number 18 PÚÿÿÿ-D [ 366.795884][ T43] kauditd_printk_skb: 240 callbacks suppressed [ 366.795902][ T43] audit: type=1800 audit(2000000382.122:228560): pid=483 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.12846" name="target" dev="sysfs" ino=5247 res=0 errno=0 [ 366.997212][ T43] audit: type=1800 audit(2000000382.309:228561): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=278508 res=0 errno=0 [ 367.017801][ T1535] libceph: connect (1)[c::]:6789 error -101 [ 367.018135][ T1535] libceph: mon0 (1)[c::]:6789 connect error [ 367.026456][ T485] ceph: No mds server is up or the cluster is laggy [ 367.260366][ T43] audit: type=1400 audit(2000000382.562:228562): avc: denied { read write } for pid=498 comm="syz.1.12852" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 367.260416][ T43] audit: type=1400 audit(2000000382.562:228563): avc: denied { open } for pid=498 comm="syz.1.12852" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 367.270748][ T43] audit: type=1800 audit(2000000382.571:228564): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=278527 res=0 errno=0 [ 367.291891][ T71] hid_parser_main: 5 callbacks suppressed [ 367.291961][ T71] nintendo 0005:057E:2017.000D: unknown main item tag 0x0 [ 367.293789][ T71] nintendo 0005:057E:2017.000D: hidraw1: BLUETOOTH HID v80.00 Device [syz0] on syz0 [ 367.299189][ T43] audit: type=1800 audit(2000000382.590:228565): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=278549 res=0 errno=0 [ 367.308794][ T43] audit: type=1400 audit(2000000382.599:228566): avc: denied { allowed } for pid=505 comm="syz.3.12856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 367.335174][ T43] audit: type=1400 audit(2000000382.627:228567): avc: denied { create } for pid=505 comm="syz.3.12856" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 367.335912][ T43] audit: type=1400 audit(2000000382.627:228568): avc: denied { map } for pid=505 comm="syz.3.12856" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=104785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 367.336136][ T43] audit: type=1400 audit(2000000382.627:228569): avc: denied { read write } for pid=505 comm="syz.3.12856" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=104785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 367.416089][ T514] usb usb8: usbfs: process 514 (syz.0.12859) did not claim interface 0 before use [ 367.626705][ T530] Falling back ldisc for ttyS3. [ 367.827389][ T553] netlink: 'syz.2.12877': attribute type 5 has an invalid length. [ 367.876283][ T556] netlink: Unknown conntrack attr (type=12592, max=9) [ 367.876311][ T556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.969248][ T562] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 367.969269][ T562] syzkaller0: group set to 0 [ 368.058305][ T6009] extrace-0138 ex_trace_point : Method Begin [\_SB.CPUS.C001._OST] execution. [ 368.058474][ T6009] extrace-0174 ex_trace_args : 3, 84, Unknown [ 368.058860][ T6009] extrace-0138 ex_trace_point : Method Begin [\_SB.CPUS.COST] execution. [ 368.066374][ T568] zram0: detected capacity change from 8 to 0 [ 368.074039][ T6009] extrace-0174 ex_trace_args : 1, 3, 84, Unknown [ 368.075916][ T6009] extrace-0138 ex_trace_point : Method End [\_SB.CPUS.COST] execution. [ 368.076037][ T6009] extrace-0138 ex_trace_point : Method End [\_SB.CPUS.C001._OST] execution. [ 368.317059][ T6009] smpboot: CPU 1 is now offline [ 368.391141][ T6009] extrace-0138 ex_trace_point : Method Begin [\_SB.CPUS.C001._EJ0] execution. [ 368.391237][ T6009] extrace-0174 ex_trace_args : 1 [ 368.391424][ T6009] extrace-0138 ex_trace_point : Method Begin [\_SB.CPUS.CEJ0] execution. [ 368.391531][ T6009] extrace-0174 ex_trace_args : 1 [ 368.395967][ T6009] extrace-0138 ex_trace_point : Method End [\_SB.CPUS.CEJ0] execution. [ 368.396086][ T6009] extrace-0138 ex_trace_point : Method End [\_SB.CPUS.C001._EJ0] execution. [ 368.396288][ T6009] extrace-0138 ex_trace_point : Method Begin [\_SB.CPUS.C001._STA] execution. [ 368.396539][ T6009] extrace-0138 ex_trace_point : Method Begin [\_SB.CPUS.CSTA] execution. [ 368.396620][ T6009] extrace-0174 ex_trace_args : 1 [ 368.401378][T13576] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 368.407781][ T6009] extrace-0138 ex_trace_point : Method End [\_SB.CPUS.CSTA] execution. [ 368.407940][ T6009] extrace-0138 ex_trace_point : Method End [\_SB.CPUS.C001._STA] execution. [ 368.520599][ T6009] extrace-0138 ex_trace_point : Method Begin [\_SB.CPUS.C001._OST] execution. [ 368.520759][ T6009] extrace-0174 ex_trace_args : 103, 0, Unknown [ 368.521246][ T6009] extrace-0138 ex_trace_point : Method Begin [\_SB.CPUS.COST] execution. [ 368.521341][ T6009] extrace-0174 ex_trace_args : 1, 103, 0, Unknown [ 368.528214][ T6009] extrace-0138 ex_trace_point : Method End [\_SB.CPUS.COST] execution. [ 368.528339][ T6009] extrace-0138 ex_trace_point : Method End [\_SB.CPUS.C001._OST] execution. [ 368.582751][T13576] usb 7-1: Using ep0 maxpacket: 8 [ 368.583316][T13576] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 368.584327][T13576] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 368.584362][T13576] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.586871][T13576] usb 7-1: config 0 descriptor?? [ 368.714236][ T589] SELinux: security_context_str_to_sid (measure) failed with errno=-22 [ 368.824302][T13576] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 369.059468][T13576] usb 7-1: USB disconnect, device number 13 [ 369.772687][ T615] openvswitch: netlink: IPv4 tunnel dst address is zero [ 369.772703][ T615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.289209][ T649] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 370.960027][ T666] macvtap0: entered allmulticast mode [ 370.960048][ T666] veth0_macvtap: entered allmulticast mode [ 371.155748][ T679] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 371.327409][ T690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12940'. [ 371.616839][ T703] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12955'. [ 371.663539][ T708] xt_MASQUERADE: bad rangesize 10242 [ 371.704939][ T71] nintendo 0005:057E:2017.000D: Failed to get joycon info; ret=-110 [ 371.704954][ T71] nintendo 0005:057E:2017.000D: Failed to retrieve controller info; ret=-110 [ 371.704963][ T71] nintendo 0005:057E:2017.000D: Failed to initialize controller; ret=-110 [ 371.708882][ T71] nintendo 0005:057E:2017.000D: probe - fail = -110 [ 371.708964][ T71] nintendo 0005:057E:2017.000D: probe with driver nintendo failed with error -110 [ 371.839110][ T709] SELinux: failed to load policy [ 372.144760][ T43] kauditd_printk_skb: 133 callbacks suppressed [ 372.144777][ T43] audit: type=1800 audit(2000000387.128:228703): pid=744 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.12967" name="uevent" dev="sysfs" ino=1704 res=0 errno=0 [ 372.189887][ T43] audit: type=1400 audit(2000000387.166:228704): avc: denied { allowed } for pid=746 comm="syz.0.12968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 372.220536][ T43] audit: type=1400 audit(2000000387.203:228705): avc: denied { create } for pid=748 comm="syz.3.12969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 372.232187][ T43] audit: type=1400 audit(2000000387.213:228706): avc: denied { create } for pid=748 comm="syz.3.12969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 372.233475][ T43] audit: type=1400 audit(2000000387.213:228707): avc: denied { listen } for pid=748 comm="syz.3.12969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 372.238368][ T43] audit: type=1400 audit(2000000387.222:228708): avc: denied { map } for pid=749 comm="syz.2.12970" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=106038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 372.238553][ T43] audit: type=1400 audit(2000000387.222:228709): avc: denied { read write } for pid=749 comm="syz.2.12970" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=106038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 372.412619][ T763] netlink: 'syz.1.12976': attribute type 4 has an invalid length. [ 372.413198][ T763] netlink: 'syz.1.12976': attribute type 4 has an invalid length. [ 372.491731][ T43] audit: type=1400 audit(2000000387.447:228710): avc: denied { write } for pid=764 comm="syz.1.12977" name="sda" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 372.492667][ T765] sd 0:0:0:0: PR command failed: 1026 [ 372.492705][ T765] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 372.492740][ T765] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 372.521996][ T43] audit: type=1800 audit(2000000387.484:228711): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=25423 res=0 errno=0 [ 372.563264][ T43] audit: type=1400 audit(2000000387.521:228712): avc: denied { read } for pid=5968 comm="syz-executor" name="loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 372.650941][ T774] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 372.674938][ T773] hub 1-0:1.0: USB hub found [ 372.697221][ T773] hub 1-0:1.0: 2 ports detected [ 372.868632][ T784] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 372.933394][ T792] Line length is too long: Should be less than 4094 [ 372.992106][ T1166] Bluetooth: hci5: Frame reassembly failed (-84) [ 372.992478][ T794] Bluetooth: hci5: Frame reassembly failed (-84) [ 373.008228][ T796] SELinux: ebitmap: truncated map [ 373.008348][ T796] SELinux: invalid class [ 373.013261][ T796] SELinux: failed to load policy [ 373.107484][ T804] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 373.519372][ T824] ima: policy update failed [ 373.571113][ T830] Failed to get privilege flags for destination (handle=0x2:0x0) [ 374.866112][ T66] Bluetooth: hci4: command 0x1003 tx timeout [ 374.866338][ T5092] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 375.086610][ T843] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 375.209413][ T5092] Bluetooth: hci5: command 0x1003 tx timeout [ 375.209515][ T5970] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 376.508299][ T907] block nbd3: shutting down sockets [ 377.142197][ T1535] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 377.319362][ T1535] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 377.320676][ T1535] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.320716][ T1535] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 377.320734][ T1535] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.329147][ T1535] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.329169][ T1535] usb 6-1: Product: syz [ 377.329181][ T1535] usb 6-1: Manufacturer: syz [ 377.329194][ T1535] usb 6-1: SerialNumber: syz [ 377.500468][ T43] kauditd_printk_skb: 101 callbacks suppressed [ 377.500488][ T43] audit: type=1400 audit(2000000392.135:228814): avc: denied { create } for pid=945 comm="syz.2.13062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 377.500935][ T43] audit: type=1400 audit(2000000392.135:228815): avc: denied { write } for pid=945 comm="syz.2.13062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 377.501285][ T43] audit: type=1400 audit(2000000392.135:228816): avc: denied { read } for pid=945 comm="syz.2.13062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 377.502378][ T946] tmpfs: Bad value for 'mpol' [ 377.576996][ T43] audit: type=1400 audit(2000000392.210:228817): avc: denied { create } for pid=949 comm="syz.3.13063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 377.581277][ T43] audit: type=1400 audit(2000000392.210:228818): avc: denied { bind } for pid=949 comm="syz.3.13063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 377.581519][ T43] audit: type=1400 audit(2000000392.219:228819): avc: denied { name_bind } for pid=949 comm="syz.3.13063" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 377.582670][ T43] audit: type=1400 audit(2000000392.219:228820): avc: denied { node_bind } for pid=949 comm="syz.3.13063" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 377.593284][ T43] audit: type=1400 audit(2000000392.229:228821): avc: denied { write } for pid=949 comm="syz.3.13063" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 377.595877][ T43] audit: type=1400 audit(2000000392.229:228822): avc: denied { connect } for pid=949 comm="syz.3.13063" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 377.595925][ T43] audit: type=1400 audit(2000000392.229:228823): avc: denied { name_connect } for pid=949 comm="syz.3.13063" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 377.771726][ T956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13067'. [ 377.771855][ T956] netlink: 3 bytes leftover after parsing attributes in process `syz.0.13067'. [ 377.946753][ T1535] usb 6-1: Cannot retrieve CPort count: -110 [ 377.946795][ T1535] usb 6-1: Cannot retrieve CPort count: -110 [ 377.946817][ T1535] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 379.146531][ T1031] Bluetooth: hci4: Frame reassembly failed (-84) [ 379.366190][ T1043] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 379.417118][ T1046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13097'. [ 380.088762][T13576] usb 6-1: USB disconnect, device number 19 [ 381.363251][ T5092] Bluetooth: hci4: command 0x1003 tx timeout [ 381.365345][ T5970] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 382.468157][ T1123] overlayfs: conflicting options: nfs_export=on,index=off [ 382.792137][ T1177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13147'. [ 382.792158][ T1177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13147'. [ 382.857269][ T43] kauditd_printk_skb: 93 callbacks suppressed [ 382.857281][ T43] audit: type=1800 audit(2000000397.151:228917): pid=1181 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.13149" name="available_clocksource" dev="sysfs" ino=5287 res=0 errno=0 [ 382.877793][ T43] audit: type=1400 audit(2000000397.170:228918): avc: denied { append } for pid=1182 comm="syz.3.13150" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 382.890387][ T43] audit: type=1400 audit(2000000397.179:228919): avc: denied { unmount } for pid=29938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 382.947377][ T43] audit: type=1400 audit(2000000397.235:228920): avc: denied { unlink } for pid=1184 comm="syz.0.13151" name="#d" dev="tmpfs" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 382.948420][ T43] audit: type=1400 audit(2000000397.235:228921): avc: denied { mount } for pid=1184 comm="syz.0.13151" name="/" dev="overlay" ino=1960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 382.958790][ T43] audit: type=1400 audit(2000000397.254:228922): avc: denied { unmount } for pid=29938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 383.047382][ T1194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13155'. [ 383.143057][ T43] audit: type=1400 audit(2000000397.422:228923): avc: denied { name_bind } for pid=1200 comm="syz.0.13160" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 383.143216][ T43] audit: type=1400 audit(2000000397.422:228924): avc: denied { node_bind } for pid=1200 comm="syz.0.13160" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 383.172552][ T43] audit: type=1400 audit(2000000397.450:228925): avc: denied { mounton } for pid=1203 comm="syz.3.13159" path="/3192/sys" dev="tmpfs" ino=16156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 383.172900][ T43] audit: type=1400 audit(2000000397.450:228926): avc: denied { read } for pid=29938 comm="syz-executor" name="loop0" dev="devtmpfs" ino=2972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 383.176521][ T1204] ptp ptp0: only physical clock in use now [ 383.604173][ T1221] hub 1-0:1.0: USB hub found [ 383.604442][ T1221] hub 1-0:1.0: 2 ports detected [ 383.887223][ T1256] netlink: 'syz.2.13179': attribute type 10 has an invalid length. [ 383.948952][ T1258] hub 1-0:1.0: USB hub found [ 383.951057][ T1258] hub 1-0:1.0: 2 ports detected [ 384.779307][ T1294] netlink: 'syz.1.13196': attribute type 10 has an invalid length. [ 384.836223][ T1296] openvswitch: netlink: VLAN attribute unexpected. [ 385.056495][ T1309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13204'. [ 385.056516][ T1309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13204'. [ 385.156195][ T1314] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13206'. [ 385.156226][ T1314] netlink: 'syz.1.13206': attribute type 1 has an invalid length. [ 386.023159][ T1336] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input36 [ 386.260612][ T1351] block2mtd: Using custom MTD label '&' for dev #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-‰%#!$([)^)} [ 386.260824][ T1351] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-‰%#!$([)^)} [ 386.455616][ T1366] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 386.456341][ T1366] gre0: entered promiscuous mode [ 386.456362][ T1366] gre0: entered allmulticast mode [ 386.531965][ T1375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13235'. [ 386.532039][ T1375] xfrm0: entered promiscuous mode [ 386.532048][ T1375] xfrm0: entered allmulticast mode [ 386.536227][ T1375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13235'. [ 386.638874][ T1381] ima: policy update failed [ 387.087924][ T1412] sd 0:0:0:0: PR command failed: 1026 [ 387.087948][ T1412] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 387.087967][ T1412] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 387.442824][ T1436] block2mtd: illegal erase size [ 387.501931][ T1438] netlink: 'syz.1.13263': attribute type 1 has an invalid length. [ 387.710872][ T1470] blkio.reset_stats is deprecated [ 387.956207][ T1493] tmpfs: Using encoding : utf8-12.1.0 [ 387.957724][ T1493] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 388.338731][ T1520] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 388.339607][ T1520] bond5 (unregistering): Released all slaves [ 388.364269][ T43] kauditd_printk_skb: 258 callbacks suppressed [ 388.364286][ T43] audit: type=1400 audit(2000000402.307:229185): avc: denied { read } for pid=1522 comm="syz.1.13299" name="event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 388.384598][ T1524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13300'. [ 388.384611][ T1524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13300'. [ 388.482762][ T43] audit: type=1400 audit(2000000402.419:229186): avc: denied { create } for pid=1525 comm="syz.2.13301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 388.485129][ T43] audit: type=1400 audit(2000000402.419:229187): avc: denied { connect } for pid=1525 comm="syz.2.13301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 388.498526][ T43] audit: type=1400 audit(2000000402.429:229188): avc: denied { write } for pid=1525 comm="syz.2.13301" path="socket:[108181]" dev="sockfs" ino=108181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 388.554410][ T43] audit: type=1400 audit(2000000402.476:229189): avc: denied { read } for pid=1525 comm="syz.2.13301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 388.630932][ T43] audit: type=1400 audit(2000000402.560:229190): avc: denied { ioctl } for pid=1522 comm="syz.1.13299" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 388.697400][ T43] audit: type=1400 audit(2000000402.616:229191): avc: denied { read write } for pid=1528 comm="syz.2.13302" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 388.697450][ T43] audit: type=1400 audit(2000000402.616:229192): avc: denied { open } for pid=1528 comm="syz.2.13302" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 388.699243][ T43] audit: type=1400 audit(2000000402.616:229193): avc: denied { map } for pid=1528 comm="syz.2.13302" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 388.897598][T13576] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 388.903457][ T43] audit: type=1400 audit(2000000402.812:229194): avc: denied { read } for pid=1530 comm="syz.2.13303" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 389.059524][T13576] usb 6-1: Using ep0 maxpacket: 8 [ 389.060071][T13576] usb 6-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 389.060585][T13576] usb 6-1: config 0 has no interfaces? [ 389.062605][T13576] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.062624][T13576] usb 6-1: Product: syz [ 389.062636][T13576] usb 6-1: Manufacturer: syz [ 389.062646][T13576] usb 6-1: SerialNumber: syz [ 389.065618][T13576] usb 6-1: config 0 descriptor?? [ 389.281906][ T6058] usb 6-1: USB disconnect, device number 20 [ 389.484637][T13576] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 389.646056][T13576] usb 7-1: not running at top speed; connect to a high speed hub [ 389.646085][T13576] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 389.647032][T13576] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.647073][T13576] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 389.647091][T13576] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 389.647120][T13576] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.656225][T13576] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 389.661866][T13576] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 389.675402][T13576] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 389.677664][T13576] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 389.680491][T13576] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 389.682366][T13576] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 390.014523][T13576] usb 7-1: USB disconnect, device number 14 [ 390.021009][T13576] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 390.023231][T13576] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 390.023864][T13576] keyspan 7-1:1.0: device disconnected [ 390.489862][ T1578] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 390.491611][ T1578] gre0: entered promiscuous mode [ 390.491671][ T1578] gre0: entered allmulticast mode [ 391.480114][ T1622] i2c i2c-0: new_device: Can't parse I2C address [ 392.938474][ T1651] netlink: 'syz.2.13359': attribute type 4 has an invalid length. [ 392.938495][ T1651] netlink: 'syz.2.13359': attribute type 8 has an invalid length. [ 392.938505][ T1651] netlink: 212 bytes leftover after parsing attributes in process `syz.2.13359'. [ 393.078826][ T1661] overlayfs: conflicting options: userxattr,metacopy=on [ 393.307318][ T1657] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 393.424133][ T1675] block2mtd: device name too long [ 393.429537][ T1673] Need at least one configuration in g1. [ 393.431280][ T1673] udc dummy_udc.0: failed to start g1: -22 [ 393.431302][ T1673] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 393.440530][ T1673] UDC core: g1: couldn't find an available UDC or it's busy [ 393.739945][ T1696] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 393.739968][ T1696] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 393.740576][ T43] kauditd_printk_skb: 164 callbacks suppressed [ 393.740591][ T43] audit: type=1400 audit(2000000407.342:229359): avc: denied { mount } for pid=1694 comm="syz.1.13381" name="/" dev="overlay" ino=17090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 393.759703][ T43] audit: type=1400 audit(2000000407.351:229360): avc: denied { unmount } for pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 393.802901][ T43] audit: type=1400 audit(2000000407.389:229361): avc: denied { create } for pid=1697 comm="syz.0.13383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 393.813875][ T43] audit: type=1400 audit(2000000407.407:229362): avc: denied { read write } for pid=1699 comm="syz.1.13382" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 393.814238][ T43] audit: type=1400 audit(2000000407.407:229363): avc: denied { open } for pid=1699 comm="syz.1.13382" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 393.814719][ T43] audit: type=1400 audit(2000000407.407:229364): avc: denied { ioctl } for pid=1699 comm="syz.1.13382" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 393.861069][ T43] audit: type=1400 audit(2000000407.454:229365): avc: denied { create } for pid=1701 comm="syz.2.13384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 393.863405][ T43] audit: type=1400 audit(2000000407.454:229366): avc: denied { setopt } for pid=1701 comm="syz.2.13384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 393.863776][ T43] audit: type=1400 audit(2000000407.454:229367): avc: denied { ioctl } for pid=1701 comm="syz.2.13384" path="socket:[109993]" dev="sockfs" ino=109993 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 393.864119][ T43] audit: type=1400 audit(2000000407.454:229368): avc: denied { write } for pid=1701 comm="syz.2.13384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 394.056676][ T1710] Bluetooth: hci4: Frame reassembly failed (-84) [ 394.069206][ T6058] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 394.218995][ T25] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 394.229503][ T6058] usb 6-1: Using ep0 maxpacket: 8 [ 394.230249][ T6058] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 394.231288][ T6058] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 394.231324][ T6058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.234621][ T6058] usb 6-1: config 0 descriptor?? [ 394.380045][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 394.383185][ T25] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 394.384440][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 394.384477][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.387700][ T25] usb 7-1: config 0 descriptor?? [ 394.462427][ T6058] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 394.607613][ T25] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 394.679211][ T25] usb 6-1: USB disconnect, device number 21 [ 394.821938][ T1535] usb 7-1: USB disconnect, device number 15 [ 395.265367][ T1727] program syz.1.13396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.982534][ T1755] netlink: 'syz.3.13408': attribute type 42 has an invalid length. [ 396.219536][ T143] Bluetooth: hci5: Frame reassembly failed (-84) [ 396.221400][ T1770] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 396.238983][ T5970] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 396.579776][ T1794] input: syz0 as /devices/virtual/input/input38 [ 396.780018][ T1802] ip_tables: iptables: counters copy to user failed while replacing table [ 396.840453][ T1804] SELinux: ebitmap: truncated map [ 396.840570][ T1804] SELinux: invalid class [ 396.848423][ T1804] SELinux: failed to load policy [ 397.075707][ T1816] option changes via remount are deprecated (pid=1815 comm=syz.2.13438) [ 397.075728][ T1816] cgroup: option or name mismatch, new: 0x0 "noprefix", old: 0x0 "" [ 397.264859][ T143] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 397.462978][ T2346] wiimote 0005:057E:0306.000E: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 397.465842][ T2346] wiimote 0005:057E:0306.000E: New device registered [ 397.712830][ T6058] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 397.881410][ T1830] wiimote 0005:057E:0306.000E: Device removed [ 397.882622][ T6058] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 397.882652][ T6058] usb 6-1: no configurations [ 397.882662][ T6058] usb 6-1: can't read configurations, error -22 [ 398.379874][ T5092] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 398.557682][ T2346] wiimote 0005:057E:0306.000E: detected device: Nintendo Wii Remote (Gen 1) [ 398.613235][ T2346] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000E/input/input40 [ 398.617162][ T2346] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000E/input/input41 [ 398.635546][ T2346] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000E/input/input39 [ 398.717063][ T1853] block2mtd: parameter too long [ 399.085939][ T1876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13464'. [ 399.205290][ T43] kauditd_printk_skb: 185 callbacks suppressed [ 399.205309][ T43] audit: type=1400 audit(2000000412.451:229554): avc: denied { cmd } for pid=1879 comm="syz.2.13466" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 399.317188][ T43] audit: type=1400 audit(2000000412.564:229555): avc: denied { mount } for pid=1888 comm="syz.2.13471" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 399.321789][ T43] audit: type=1800 audit(2000000412.564:229556): pid=1890 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.13471" name="multicast_snooping" dev="sysfs" ino=127148 res=0 errno=0 [ 399.360077][ T43] audit: type=1400 audit(2000000412.601:229557): avc: denied { unmount } for pid=5973 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 399.407915][ T43] audit: type=1400 audit(2000000412.638:229558): avc: denied { ioctl } for pid=1896 comm="syz.2.13475" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=111634 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 399.416820][ T43] audit: type=1400 audit(2000000412.648:229559): avc: denied { create } for pid=1898 comm="syz.3.13474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 399.419267][ T43] audit: type=1400 audit(2000000412.648:229560): avc: denied { mmap_zero } for pid=1898 comm="syz.3.13474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 399.420416][ T43] audit: type=1400 audit(2000000412.648:229561): avc: denied { setopt } for pid=1898 comm="syz.3.13474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 399.501670][ T43] audit: type=1400 audit(2000000412.732:229562): avc: denied { mount } for pid=1904 comm="syz.2.13478" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 399.605376][ T43] audit: type=1400 audit(2000000412.826:229563): avc: denied { unmount } for pid=5973 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 400.540578][ T1961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13502'. [ 400.540612][ T1961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13502'. [ 400.548614][ T6072] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.548783][ T6072] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.548833][ T6072] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.548860][ T6072] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.611452][ T1965] option changes via remount are deprecated (pid=1964 comm=syz.0.13505) [ 401.477033][ T1971] CIFS: Attempting to mount //127.0.0.1/share [ 401.483579][ T6009] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 401.483605][ T6009] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 401.489993][ T1971] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:5445 failed: -ENODEV [ 401.491781][ T6009] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 401.491802][ T6009] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 401.493122][ T1971] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:445 failed: -ENODEV [ 401.506742][ T1971] CIFS: VFS: cifs_mount failed w/return code = -2 [ 402.109266][ T25] wiimote 0005:057E:0330.000F: hidraw2: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 402.109584][ T25] wiimote 0005:057E:0330.000F: New device registered [ 402.169823][ T2010] wiimote 0005:057E:0330.000F: Device removed [ 402.175034][ T2012] fido_id[2012]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 402.756692][ T6058] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 402.916908][ T6058] usb 7-1: Using ep0 maxpacket: 16 [ 402.917699][ T6058] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 402.921000][ T6058] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.921021][ T6058] usb 7-1: Product: syz [ 402.921032][ T6058] usb 7-1: Manufacturer: syz [ 402.921044][ T6058] usb 7-1: SerialNumber: syz [ 403.148548][ T6058] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 403.155178][ T6058] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 403.155446][ T6058] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 403.155481][ T6058] usb 7-1: media controller created [ 403.175358][ T6058] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 403.248270][ T25] wiimote 0005:057E:0330.000F: detected device: Nintendo Wii Remote Plus (Gen 2) [ 403.248688][ T25] sysfs: cannot create duplicate filename '/class/power_supply/wiimote_battery_syz0' [ 403.248707][ T25] CPU: 2 UID: 0 PID: 25 Comm: kworker/2:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.248732][ T25] Tainted: [L]=SOFTLOCKUP [ 403.248739][ T25] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 403.248751][ T25] Workqueue: events wiimote_init_worker [ 403.248776][ T25] Call Trace: [ 403.248782][ T25] [ 403.248790][ T25] dump_stack_lvl+0x100/0x190 [ 403.248820][ T25] sysfs_warn_dup.cold+0x1c/0x28 [ 403.248848][ T25] sysfs_do_create_link_sd+0x113/0x140 [ 403.248869][ T25] sysfs_create_link+0x61/0xc0 [ 403.248887][ T25] device_add+0x675/0x1970 [ 403.248910][ T25] ? __pfx_device_add+0x10/0x10 [ 403.248931][ T25] ? lockdep_init_map_type+0x5c/0x250 [ 403.248954][ T25] ? __raw_spin_lock_init+0x3a/0x110 [ 403.248983][ T25] __power_supply_register.part.0+0x9cf/0x13b0 [ 403.249013][ T25] ? __pfx___power_supply_register.part.0+0x10/0x10 [ 403.249040][ T25] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 403.249063][ T25] ? kasprintf+0xc7/0x100 [ 403.249088][ T25] ? __pfx_kasprintf+0x10/0x10 [ 403.249136][ T25] ? trace_kmalloc+0xeb/0x110 [ 403.249161][ T25] ? __kasan_kmalloc+0xaa/0xb0 [ 403.249194][ T25] power_supply_register+0xce/0x110 [ 403.249220][ T25] wiimod_battery_probe+0x21e/0x370 [ 403.249244][ T25] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 403.249266][ T25] ? input_ff_create+0x256/0x310 [ 403.249292][ T25] ? __pfx_wiimod_rumble_play+0x10/0x10 [ 403.249327][ T25] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 403.249350][ T25] wiimote_init_worker+0xd55/0x2730 [ 403.249379][ T25] ? __pfx_wiimote_init_worker+0x10/0x10 [ 403.249400][ T25] ? lock_acquire+0x1d1/0x380 [ 403.249420][ T25] ? process_one_work+0xa2c/0x1b10 [ 403.249449][ T25] ? process_one_work+0x906/0x1b10 [ 403.249476][ T25] ? process_one_work+0x906/0x1b10 [ 403.249508][ T25] process_one_work+0xac7/0x1b10 [ 403.249546][ T25] ? __pfx_process_one_work+0x10/0x10 [ 403.249575][ T25] ? lock_acquire+0x1d1/0x380 [ 403.249602][ T25] ? __pfx_wiimote_init_worker+0x10/0x10 [ 403.249626][ T25] worker_thread+0x5ef/0xe50 [ 403.249654][ T25] ? kthread+0x13a/0x450 [ 403.249677][ T25] ? __pfx_worker_thread+0x10/0x10 [ 403.249692][ T25] kthread+0x373/0x450 [ 403.249716][ T25] ? __pfx_kthread+0x10/0x10 [ 403.249743][ T25] ret_from_fork+0x730/0xd60 [ 403.249766][ T25] ? __pfx_ret_from_fork+0x10/0x10 [ 403.249788][ T25] ? __switch_to+0x800/0x10f0 [ 403.249813][ T25] ? __pfx_kthread+0x10/0x10 [ 403.249840][ T25] ret_from_fork_asm+0x1a/0x30 [ 403.249872][ T25] [ 403.254377][ T25] wiimote 0005:057E:0330.000F: cannot register battery device [ 403.415296][ T6058] zl10353_read_register: readreg error (reg=127, ret==-110) [ 403.496118][ T6058] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 403.499316][ T6058] usb 7-1: USB disconnect, device number 16 [ 404.173231][ T2037] kvm: user requested TSC rate below hardware speed [ 404.648882][ T43] kauditd_printk_skb: 120 callbacks suppressed [ 404.648900][ T43] audit: type=1400 audit(2000000417.551:229684): avc: denied { unmount } for pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 404.674192][ T43] audit: type=1400 audit(2000000417.570:229685): avc: denied { create } for pid=2059 comm="syz.2.13548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 404.677030][ T43] audit: type=1400 audit(2000000417.570:229686): avc: denied { setopt } for pid=2059 comm="syz.2.13548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 404.677602][ T43] audit: type=1400 audit(2000000417.570:229687): avc: denied { ioctl } for pid=2059 comm="syz.2.13548" path="socket:[111498]" dev="sockfs" ino=111498 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 404.678253][ T43] audit: type=1400 audit(2000000417.570:229688): avc: denied { write } for pid=2059 comm="syz.2.13548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 404.721893][ T43] audit: type=1400 audit(2000000417.607:229689): avc: denied { create } for pid=2061 comm="syz.2.13550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 404.725570][ T43] audit: type=1400 audit(2000000417.617:229690): avc: denied { setopt } for pid=2061 comm="syz.2.13550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 404.730078][ T43] audit: type=1400 audit(2000000417.617:229691): avc: denied { read } for pid=2061 comm="syz.2.13550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 404.785188][ T43] audit: type=1400 audit(2000000417.673:229692): avc: denied { write } for pid=2061 comm="syz.2.13550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 404.806009][ T43] audit: type=1400 audit(2000000417.692:229693): avc: denied { create } for pid=2066 comm="syz.1.13552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 404.829952][ T2067] ima: policy update failed [ 405.145014][ T2089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13560'. [ 405.145035][ T2089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13560'. [ 405.386402][ T2101] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 405.463987][ T2101] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 405.800592][ T2118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13573'. [ 405.800639][ T2118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13573'. [ 405.803184][ T2118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13573'. [ 405.815079][ T2118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13573'. [ 406.009915][ T2128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13578'. [ 407.435792][ T2162] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000003) at rIP: 0xffffffff81b3292a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 407.435840][ T2162] Call Trace: [ 407.435847][ T2162] [ 407.435858][ T2162] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 407.435887][ T2162] ? native_send_call_func_ipi+0xcb/0x1b0 [ 407.435921][ T2162] mce_cpu_restart+0xd5/0x1f0 [ 407.435943][ T2162] ? __pfx_mce_cpu_restart+0x10/0x10 [ 407.435964][ T2162] ? set_bank+0x240/0x3a0 [ 407.435984][ T2162] smp_call_function_many_cond+0x1449/0x18c0 [ 407.436016][ T2162] ? __pfx_mce_cpu_restart+0x10/0x10 [ 407.436044][ T2162] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 407.436073][ T2162] ? __timer_delete_sync+0x10f/0x1c0 [ 407.436100][ T2162] set_bank+0x240/0x3a0 [ 407.436121][ T2162] ? __pfx_set_bank+0x10/0x10 [ 407.436143][ T2162] ? find_held_lock+0x2b/0x80 [ 407.436171][ T2162] ? sysfs_file_kobj+0xe4/0x290 [ 407.436197][ T2162] ? sysfs_file_kobj+0xe4/0x290 [ 407.436227][ T2162] ? __pfx_set_bank+0x10/0x10 [ 407.436249][ T2162] dev_attr_store+0x58/0x80 [ 407.436270][ T2162] ? __pfx_dev_attr_store+0x10/0x10 [ 407.436291][ T2162] sysfs_kf_write+0xf2/0x150 [ 407.436322][ T2162] kernfs_fop_write_iter+0x3e0/0x5f0 [ 407.436345][ T2162] ? __pfx_sysfs_kf_write+0x10/0x10 [ 407.436376][ T2162] vfs_write+0x6af/0x1050 [ 407.436401][ T2162] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 407.436429][ T2162] ? __pfx_vfs_write+0x10/0x10 [ 407.436450][ T2162] ? find_held_lock+0x2b/0x80 [ 407.436496][ T2162] ksys_write+0x12a/0x250 [ 407.436519][ T2162] ? __pfx_ksys_write+0x10/0x10 [ 407.436550][ T2162] do_syscall_64+0x123/0x790 [ 407.436581][ T2162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.436601][ T2162] RIP: 0033:0x7f22e979e559 [ 407.436617][ T2162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.436636][ T2162] RSP: 002b:00007f22ea5f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 407.436654][ T2162] RAX: ffffffffffffffda RBX: 00007f22e9a25fa0 RCX: 00007f22e979e559 [ 407.436668][ T2162] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 407.436680][ T2162] RBP: 00007f22e98358b0 R08: 0000000000000000 R09: 0000000000000000 [ 407.436697][ T2162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.436709][ T2162] R13: 00007f22e9a26038 R14: 00007f22e9a25fa0 R15: 00007ffded733b38 [ 407.436737][ T2162] [ 407.616887][ T2170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13599'. [ 407.922983][ T2192] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [20] [ 407.922997][ T2192] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 407.923005][ T2192] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 407.923010][ T2192] One or more global auth toks could not properly register; rc = [-22] [ 407.923027][ T2192] Error validating options; rc = [-22] [ 408.196067][ T2212] virt_wifi0 speed is unknown, defaulting to 1000 [ 408.197470][ T2212] dummy0 speed is unknown, defaulting to 1000 [ 408.202483][ T2212] rxe_eth0 speed is unknown, defaulting to 1000 [ 408.220582][ T2214] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13619'. [ 409.507325][ T2283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13651'. [ 409.549931][ T2285] overlayfs: conflicting options: nfs_export=on,index=off [ 409.618925][ T2292] ip_tables: iptables: counters copy to user failed while replacing table [ 409.901247][ T2319] futex_wake_op: syz.1.13666 tries to shift op by 144; fix this program [ 409.901716][ T2319] futex_wake_op: syz.1.13666 tries to shift op by 144; fix this program [ 409.941065][ T2321] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 409.971841][ T2325] netlink: 'syz.1.13671': attribute type 3 has an invalid length. [ 410.018031][ T43] kauditd_printk_skb: 168 callbacks suppressed [ 410.018044][ T43] audit: type=1400 audit(2000000678.567:229862): avc: denied { write } for pid=2327 comm="syz.3.13672" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 410.022382][ T43] audit: type=1400 audit(2000000678.567:229863): avc: denied { read write } for pid=2326 comm="syz.0.13673" name="vbi2" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 410.022707][ T43] audit: type=1400 audit(2000000678.567:229864): avc: denied { open } for pid=2326 comm="syz.0.13673" path="/dev/vbi2" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 410.037362][ T43] audit: type=1400 audit(2000000678.586:229865): avc: denied { read write } for pid=2330 comm="syz.1.13674" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 410.039566][ T43] audit: type=1400 audit(2000000678.586:229866): avc: denied { open } for pid=2330 comm="syz.1.13674" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 410.041674][ T43] audit: type=1400 audit(2000000678.586:229867): avc: denied { read write } for pid=2330 comm="syz.1.13674" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 410.044991][ T43] audit: type=1400 audit(2000000678.595:229868): avc: denied { open } for pid=2330 comm="syz.1.13674" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 410.047247][ T2331] sg_write: data in/out 1718511883/120 bytes for SCSI command 0x0-- guessing data in; [ 410.047247][ T2331] program syz.1.13674 not setting count and/or reply_len properly [ 410.117367][ T43] audit: type=1400 audit(2000000678.660:229869): avc: denied { create } for pid=2334 comm="syz.0.13675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 410.119735][ T43] audit: type=1400 audit(2000000678.670:229870): avc: denied { setopt } for pid=2334 comm="syz.0.13675" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 410.163820][ T43] audit: type=1400 audit(2000000678.707:229871): avc: denied { write } for pid=2337 comm="syz.0.13677" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 410.503701][ T1535] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 410.619930][ T2349] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 410.619976][ T2349] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 410.650586][ T2351] openvswitch: netlink: Missing key (keys=40, expected=100) [ 410.681578][ T1535] usb 6-1: unable to get BOS descriptor or descriptor too short [ 410.681603][ T1535] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 410.682484][ T1535] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 410.682498][ T1535] usb 6-1: config 142 has no interface number 0 [ 410.682515][ T1535] usb 6-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 410.682528][ T1535] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 410.682539][ T1535] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 410.682550][ T1535] usb 6-1: config 142 interface 251 has no altsetting 0 [ 410.685043][ T1535] usb 6-1: string descriptor 0 read error: -22 [ 410.685099][ T1535] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.688250][ T2344] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 410.688376][ T2344] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 410.692003][ T1535] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 410.702685][ T1535] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 411.028461][ T2365] < [ 411.116272][ T2369] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 411.461385][ T2344] cyphidcom ttyUSB0: cypress_serial_control - failed sending serial line settings - -32 [ 411.461411][ T2344] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 411.461646][ C0] usb 6-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 411.748767][T13576] usb 6-1: USB disconnect, device number 24 [ 411.763439][T13576] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 411.773465][T13576] cypress_m8 6-1:142.251: device disconnected [ 412.343658][ T2380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13697'. [ 412.661381][ T6058] input: syz0 as /devices/virtual/misc/uhid/0002:1B1C:0C10.0010/input/input46 [ 412.682269][ T6058] hid-generic 0002:1B1C:0C10.0010: input,hidraw1: HID v0.00 Device [syz0] on syz0 [ 412.755859][ T2397] fido_id[2397]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 413.130510][ T2416] sch_fq: defrate 0 ignored. [ 413.282046][ T6058] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 413.444292][ T6058] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 413.445320][ T6058] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 413.445344][ T6058] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 50 [ 413.445364][ T6058] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 413.445384][ T6058] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 34625, setting to 1024 [ 413.447172][ T6058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 413.447190][ T6058] usb 6-1: Product: syz [ 413.447203][ T6058] usb 6-1: Manufacturer: syz [ 413.509679][ T5092] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 413.514372][ T5970] Bluetooth: hci4: command 0x1003 tx timeout [ 413.708627][ T2410] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 413.708777][ T2410] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 413.747012][ T6058] dvb_ttusb_budget: ttusb_init_controller: error [ 413.747029][ T6058] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 413.812205][ T6058] DVB: Unable to find symbol cx22700_attach() [ 413.875559][ T6058] DVB: Unable to find symbol tda10046_attach() [ 413.875573][ T6058] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 413.961448][ T6058] usb 6-1: USB disconnect, device number 25 [ 414.207664][ T2455] random: crng reseeded on system resumption [ 414.258312][ T2455] [ 414.259316][ T2455] ====================================================== [ 414.261535][ T2455] WARNING: possible circular locking dependency detected [ 414.264280][ T2455] syzkaller #0 Tainted: G L SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 414.266658][ T2455] ------------------------------------------------------ [ 414.269027][ T2455] syz.0.13731/2455 is trying to acquire lock: [ 414.271386][ T2455] ffff88803af67710 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 414.274787][ T2455] [ 414.274787][ T2455] but task is already holding lock: [ 414.277582][ T2455] ffffffff91d848c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.280335][ T2455] [ 414.280335][ T2455] which lock already depends on the new lock. [ 414.280335][ T2455] [ 414.284209][ T2455] [ 414.284209][ T2455] the existing dependency chain (in reverse order) is: [ 414.287535][ T2455] [ 414.287535][ T2455] -> #4 (cb_lock){++++}-{4:4}: [ 414.289962][ T2455] lock_acquire+0x1d1/0x380 [ 414.291709][ T2455] down_read+0x99/0x4c0 [ 414.293624][ T2455] genl_release+0x7e/0x1d0 [ 414.295313][ T2455] netlink_release+0x105e/0x2000 [ 414.297180][ T2455] __sock_release+0xb3/0x260 [ 414.299296][ T2455] sock_close+0x1c/0x30 [ 414.300824][ T2455] __fput+0x400/0xb60 [ 414.302419][ T2455] fput_close_sync+0x118/0x250 [ 414.304559][ T2455] __x64_sys_close+0x8b/0x120 [ 414.306361][ T2455] do_syscall_64+0x123/0x790 [ 414.308237][ T2455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.310744][ T2455] [ 414.310744][ T2455] -> #3 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 414.313668][ T2455] lock_acquire+0x1d1/0x380 [ 414.315740][ T2455] down_write+0x8b/0x1f0 [ 414.317402][ T2455] __sock_release+0x86/0x260 [ 414.319231][ T2455] sock_close+0x1c/0x30 [ 414.321141][ T2455] __fput+0x400/0xb60 [ 414.322807][ T2455] __fput_sync+0xd7/0x100 [ 414.324352][ T2455] nvme_tcp_alloc_queue.isra.0+0xd89/0x1630 [ 414.326876][ T2455] nvme_tcp_configure_admin_queue+0x26/0x530 [ 414.329120][ T2455] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 414.331023][ T2455] nvme_tcp_create_ctrl+0x970/0xd90 [ 414.333336][ T2455] nvmf_dev_write+0x4ee/0xb60 [ 414.335041][ T2455] vfs_write+0x2aa/0x1050 [ 414.336766][ T2455] ksys_write+0x12a/0x250 [ 414.338775][ T2455] do_syscall_64+0x123/0x790 [ 414.340569][ T2455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.342788][ T2455] [ 414.342788][ T2455] -> #2 (nvmf_dev_mutex){+.+.}-{4:4}: [ 414.345621][ T2455] lock_acquire+0x1d1/0x380 [ 414.347217][ T2455] __mutex_lock+0x1a4/0x1bd0 [ 414.349226][ T2455] nvmf_dev_show+0x26/0x210 [ 414.351176][ T2455] seq_read_iter+0x32f/0x1270 [ 414.353117][ T2455] seq_read+0x344/0x4d0 [ 414.354800][ T2455] vfs_read+0x1e4/0xb40 [ 414.356438][ T2455] ksys_read+0x12a/0x250 [ 414.358416][ T2455] do_syscall_64+0x123/0x790 [ 414.360242][ T2455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.362413][ T2455] [ 414.362413][ T2455] -> #1 (&p->lock){+.+.}-{4:4}: [ 414.365151][ T2455] lock_acquire+0x1d1/0x380 [ 414.366738][ T2455] __mutex_lock+0x1a4/0x1bd0 [ 414.368648][ T2455] seq_read_iter+0xe1/0x1270 [ 414.370686][ T2455] kernfs_fop_read_iter+0x46c/0x610 [ 414.372483][ T2455] __kernel_read+0x397/0xad0 [ 414.374520][ T2455] integrity_kernel_read+0x7e/0xb0 [ 414.376560][ T2455] ima_calc_file_hash_tfm+0x25e/0x350 [ 414.378533][ T2455] ima_calc_file_hash+0x1e3/0x380 [ 414.380767][ T2455] ima_collect_measurement+0x94f/0xb30 [ 414.382911][ T2455] process_measurement+0xdfe/0x2350 [ 414.385226][ T2455] ima_file_check+0xc3/0x110 [ 414.387317][ T2455] security_file_post_open+0xc4/0x210 [ 414.389697][ T2455] path_openat+0x5cd/0x2440 [ 414.391746][ T2455] do_file_open+0x20e/0x430 [ 414.393798][ T2455] do_sys_openat2+0x10f/0x1e0 [ 414.395898][ T2455] __x64_sys_openat+0x12d/0x210 [ 414.397979][ T2455] do_syscall_64+0x123/0x790 [ 414.399645][ T2455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.401670][ T2455] [ 414.401670][ T2455] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 414.404320][ T2455] check_prev_add+0xeb/0xe60 [ 414.405930][ T2455] __lock_acquire+0x1528/0x1f40 [ 414.407921][ T2455] lock_acquire+0x1d1/0x380 [ 414.410039][ T2455] __mutex_lock+0x1a4/0x1bd0 [ 414.412214][ T2455] process_measurement+0x5ab/0x2350 [ 414.414628][ T2455] ima_file_check+0xc3/0x110 [ 414.416372][ T2455] security_file_post_open+0xc4/0x210 [ 414.418302][ T2455] path_openat+0x5cd/0x2440 [ 414.420229][ T2455] do_file_open+0x20e/0x430 [ 414.422203][ T2455] file_open_name+0x1c3/0x3e0 [ 414.423856][ T2455] filp_open+0x2e/0x50 [ 414.425292][ T2455] kernel_read_file_from_path_initns+0xec/0x240 [ 414.427425][ T2455] _request_firmware+0x733/0x13c0 [ 414.429152][ T2455] request_firmware+0x35/0x50 [ 414.430863][ T2455] reg_reload_regdb+0x85/0x460 [ 414.432536][ T2455] genl_family_rcv_msg_doit+0x214/0x300 [ 414.434460][ T2455] genl_rcv_msg+0x560/0x800 [ 414.436043][ T2455] netlink_rcv_skb+0x159/0x420 [ 414.437747][ T2455] genl_rcv+0x28/0x40 [ 414.439188][ T2455] netlink_unicast+0x585/0x850 [ 414.440899][ T2455] netlink_sendmsg+0x8b0/0xda0 [ 414.442588][ T2455] ____sys_sendmsg+0xa4d/0xbe0 [ 414.444264][ T2455] ___sys_sendmsg+0x190/0x1e0 [ 414.445900][ T2455] __sys_sendmsg+0x160/0x210 [ 414.447640][ T2455] do_syscall_64+0x123/0x790 [ 414.449283][ T2455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.451399][ T2455] [ 414.451399][ T2455] other info that might help us debug this: [ 414.451399][ T2455] [ 414.454882][ T2455] Chain exists of: [ 414.454882][ T2455] &ima_iint_mutex_key[depth] --> &sb->s_type->i_mutex_key#13 --> cb_lock [ 414.454882][ T2455] [ 414.459368][ T2455] Possible unsafe locking scenario: [ 414.459368][ T2455] [ 414.461788][ T2455] CPU0 CPU1 [ 414.463467][ T2455] ---- ---- [ 414.465158][ T2455] rlock(cb_lock); [ 414.466402][ T2455] lock(&sb->s_type->i_mutex_key#13); [ 414.468911][ T2455] lock(cb_lock); [ 414.470865][ T2455] lock(&ima_iint_mutex_key[depth]); [ 414.472771][ T2455] [ 414.472771][ T2455] *** DEADLOCK *** [ 414.472771][ T2455] [ 414.475656][ T2455] locks held by syz.0.13731/2455: 1, last CPU#3: [ 414.477716][ T2455] #0: ffffffff91d848c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.480443][ T2455] [ 414.480443][ T2455] stack backtrace: [ 414.482465][ T2455] CPU: 3 UID: 0 PID: 2455 Comm: syz.0.13731 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.486167][ T2455] Tainted: [L]=SOFTLOCKUP [ 414.487562][ T2455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 414.490975][ T2455] Call Trace: [ 414.492106][ T2455] [ 414.493074][ T2455] dump_stack_lvl+0x100/0x190 [ 414.494646][ T2455] print_circular_bug.cold+0x178/0x1be [ 414.496400][ T2455] check_noncircular+0x146/0x160 [ 414.497967][ T2455] check_prev_add+0xeb/0xe60 [ 414.499437][ T2455] __lock_acquire+0x1528/0x1f40 [ 414.500983][ T2455] ? genl_family_rcv_msg_doit+0x214/0x300 [ 414.502790][ T2455] ? genl_rcv_msg+0x560/0x800 [ 414.504243][ T2455] lock_acquire+0x1d1/0x380 [ 414.505610][ T2455] ? process_measurement+0x5ab/0x2350 [ 414.507163][ T2455] ? __pfx___might_resched+0x10/0x10 [ 414.508681][ T2455] __mutex_lock+0x1a4/0x1bd0 [ 414.510019][ T2455] ? process_measurement+0x5ab/0x2350 [ 414.511573][ T2455] ? process_measurement+0x5ab/0x2350 [ 414.513118][ T2455] ? __pfx___mutex_lock+0x10/0x10 [ 414.514571][ T2455] ? rcu_is_watching+0x13/0xc0 [ 414.515956][ T2455] ? trace_kmem_cache_alloc+0xdd/0x100 [ 414.517494][ T2455] ? __kasan_slab_alloc+0x89/0x90 [ 414.518974][ T2455] ? process_measurement+0x5ab/0x2350 [ 414.520786][ T2455] process_measurement+0x5ab/0x2350 [ 414.522405][ T2455] ? find_held_lock+0x2b/0x80 [ 414.523774][ T2455] ? avc_has_perm_noaudit+0x11e/0x470 [ 414.525315][ T2455] ? __pfx_process_measurement+0x10/0x10 [ 414.527113][ T2455] ? lock_acquire+0x1d1/0x380 [ 414.528607][ T2455] ? fscrypt_file_open+0xf7/0x5c0 [ 414.530060][ T2455] ? find_held_lock+0x2b/0x80 [ 414.531458][ T2455] ? fscrypt_file_open+0x48f/0x5c0 [ 414.533163][ T2455] ? fscrypt_file_open+0x48f/0x5c0 [ 414.534745][ T2455] ? __pfx___fsnotify_parent+0x10/0x10 [ 414.536351][ T2455] ima_file_check+0xc3/0x110 [ 414.537719][ T2455] ? __pfx_ima_file_check+0x10/0x10 [ 414.539234][ T2455] ? vfs_open+0x2e3/0x3f0 [ 414.540486][ T2455] security_file_post_open+0xc4/0x210 [ 414.542162][ T2455] path_openat+0x5cd/0x2440 [ 414.543539][ T2455] ? __pfx_path_openat+0x10/0x10 [ 414.544984][ T2455] ? kasan_save_stack+0x3f/0x50 [ 414.546439][ T2455] ? kasan_save_stack+0x30/0x50 [ 414.547841][ T2455] ? kasan_save_track+0x14/0x30 [ 414.549247][ T2455] ? __kasan_slab_alloc+0x89/0x90 [ 414.550709][ T2455] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 414.552326][ T2455] ? do_getname_kernel+0x5d/0x250 [ 414.553854][ T2455] ? filp_open+0x1d/0x50 [ 414.555385][ T2455] ? kernel_read_file_from_path_initns+0xec/0x240 [ 414.557240][ T2455] do_file_open+0x20e/0x430 [ 414.558589][ T2455] ? netlink_sendmsg+0x8b0/0xda0 [ 414.560026][ T2455] ? __pfx_do_file_open+0x10/0x10 [ 414.561493][ T2455] ? rcu_is_watching+0x13/0xc0 [ 414.562889][ T2455] file_open_name+0x1c3/0x3e0 [ 414.564274][ T2455] ? __pfx_file_open_name+0x10/0x10 [ 414.565821][ T2455] ? do_getname_kernel+0x5d/0x250 [ 414.567432][ T2455] ? __asan_memcpy+0x3c/0x60 [ 414.568855][ T2455] ? do_getname_kernel+0x1be/0x250 [ 414.570373][ T2455] filp_open+0x2e/0x50 [ 414.571563][ T2455] kernel_read_file_from_path_initns+0xec/0x240 [ 414.573357][ T2455] _request_firmware+0x733/0x13c0 [ 414.574858][ T2455] ? __pfx__request_firmware+0x10/0x10 [ 414.576528][ T2455] ? __pfx_netdev_run_todo+0x10/0x10 [ 414.578078][ T2455] ? rcu_is_watching+0x13/0xc0 [ 414.579501][ T2455] ? trace_kmalloc+0xeb/0x110 [ 414.580872][ T2455] request_firmware+0x35/0x50 [ 414.582249][ T2455] reg_reload_regdb+0x85/0x460 [ 414.583640][ T2455] ? __pfx_reg_reload_regdb+0x10/0x10 [ 414.585217][ T2455] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 414.586817][ T2455] ? nl80211_pre_doit+0x19a/0xae0 [ 414.588283][ T2455] genl_family_rcv_msg_doit+0x214/0x300 [ 414.589868][ T2455] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 414.591634][ T2455] ? bpf_lsm_capable+0x9/0x10 [ 414.592989][ T2455] ? security_capable+0x80/0x260 [ 414.594424][ T2455] genl_rcv_msg+0x560/0x800 [ 414.595733][ T2455] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.597192][ T2455] ? __lock_acquire+0x5c0/0x1f40 [ 414.598645][ T2455] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 414.600187][ T2455] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 414.601813][ T2455] ? __pfx_nl80211_post_doit+0x10/0x10 [ 414.603384][ T2455] netlink_rcv_skb+0x159/0x420 [ 414.604771][ T2455] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.606231][ T2455] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.607764][ T2455] ? netlink_deliver_tap+0x1ae/0xcc0 [ 414.609283][ T2455] genl_rcv+0x28/0x40 [ 414.610504][ T2455] netlink_unicast+0x585/0x850 [ 414.612031][ T2455] ? __pfx_netlink_unicast+0x10/0x10 [ 414.613487][ T2455] netlink_sendmsg+0x8b0/0xda0 [ 414.614814][ T2455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.616256][ T2455] ? selinux_socket_sendmsg+0x198/0x2f0 [ 414.617746][ T2455] ____sys_sendmsg+0xa4d/0xbe0 [ 414.619077][ T2455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.620526][ T2455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.622066][ T2455] ___sys_sendmsg+0x190/0x1e0 [ 414.623833][ T2455] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.625606][ T2455] ? futex_wait+0x11e/0x370 [ 414.626993][ T2455] ? find_held_lock+0x2b/0x80 [ 414.628420][ T2455] __sys_sendmsg+0x160/0x210 [ 414.629751][ T2455] ? __pfx___sys_sendmsg+0x10/0x10 [ 414.631257][ T2455] do_syscall_64+0x123/0x790 [ 414.632597][ T2455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.634295][ T2455] RIP: 0033:0x7f39dc39e559 [ 414.635578][ T2455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.641138][ T2455] RSP: 002b:00007f39dd2d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.643504][ T2455] RAX: ffffffffffffffda RBX: 00007f39dc625fa0 RCX: 00007f39dc39e559 [ 414.645744][ T2455] RDX: 0000000004040810 RSI: 0000200000000480 RDI: 0000000000000004 [ 414.648018][ T2455] RBP: 00007f39dc4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 414.650283][ T2455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.652532][ T2455] R13: 00007f39dc626038 R14: 00007f39dc625fa0 R15: 00007fff9d513978 [ 414.654784][ T2455] [ 414.772028][ T2455] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 414.772059][ T2455] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 414.772431][ T2455] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 415.095146][ T2459] bond0: (slave syz_tun): Releasing backup interface [ 415.176296][ T5885] bridge_slave_1: left allmulticast mode [ 415.176318][ T5885] bridge_slave_1: left promiscuous mode [ 415.176423][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.180275][ T5885] macvtap0: left allmulticast mode [ 415.180286][ T5885] veth0_macvtap: left allmulticast mode [ 415.299170][ T5885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.336059][ T5885] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 415.354705][ T5885] veth1_vlan: left allmulticast mode [ 415.365939][ T2455] PM: hibernation: Basic memory bitmaps freed [ 415.420128][ T5885] bond0 (unregistering): (slave team0): Releasing backup interface [ 415.441932][ T5885] bond0 (unregistering): Released all slaves [ 415.443180][ T5885] bond1 (unregistering): Released all slaves [ 415.445604][ T5885] bond2 (unregistering): Released all slaves [ 415.448849][ T5885] bond3 (unregistering): Released all slaves [ 415.452422][ T5885] bond4 (unregistering): Released all slaves [ 415.455791][ T5885] b (unregistering): Released all slaves [ 415.514033][ T5885] : left promiscuous mode [ 415.665027][ T5885] IPVS: stopping backup sync thread 28268 ... [ 415.782573][ T43] kauditd_printk_skb: 144 callbacks suppressed [ 415.782591][ T43] audit: type=1800 audit(2000000683.967:230016): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=186093 res=0 errno=0 [ 416.206519][ T5885] hsr_slave_0: left promiscuous mode [ 416.207193][ T5885] hsr_slave_1: left promiscuous mode [ 416.207671][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.208027][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.208042][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.226135][ T5885] veth1_macvtap: left promiscuous mode [ 416.226160][ T5885] veth0_macvtap: left promiscuous mode [ 416.226207][ T5885] veth1_vlan: left promiscuous mode [ 416.226252][ T5885] veth0_vlan: left promiscuous mode [ 416.260732][ T43] audit: type=1400 audit(2000000684.388:230017): avc: denied { search } for pid=2462 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.260772][ T43] audit: type=1400 audit(2000000684.388:230018): avc: denied { search } for pid=2462 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.260801][ T43] audit: type=1400 audit(2000000684.388:230019): avc: denied { search } for pid=2462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.260829][ T43] audit: type=1400 audit(2000000684.388:230020): avc: denied { search } for pid=2462 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.260859][ T43] audit: type=1400 audit(2000000684.398:230021): avc: denied { read } for pid=2463 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.260888][ T43] audit: type=1400 audit(2000000684.398:230022): avc: denied { read open } for pid=2463 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.260917][ T43] audit: type=1400 audit(2000000684.398:230023): avc: denied { getattr } for pid=2463 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.260947][ T43] audit: type=1400 audit(2000000684.398:230024): avc: denied { write } for pid=2462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.260975][ T43] audit: type=1400 audit(2000000684.398:230025): avc: denied { add_name } for pid=2462 comm="dhcpcd-run-hook" name="resolv.conf.lapb8.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.368855][ T461] smbdirect: ib_dev[ÿ] removed [ 416.434542][ T5885] team0 (unregistering): Port device team_slave_1 removed [ 416.448622][ T5885] team0 (unregistering): Port device team_slave_0 removed [ 416.822276][ T5885] IPVS: stop unused estimator thread 0... [ 417.013656][ T5885] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.013689][ T5885] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.122625][ T5885] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.122656][ T5885] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.227733][ T5885] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.227767][ T5885] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.323734][ T5885] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.323767][ T5885] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.737033][ T5885] .`: (slave netdevsim1): Releasing backup interface [ 417.920444][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 418.062663][ T5885] bridge_slave_1: left allmulticast mode [ 418.062693][ T5885] bridge_slave_1: left promiscuous mode [ 418.062810][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.066397][ T5885] bridge_slave_0: left allmulticast mode [ 418.066416][ T5885] bridge_slave_0: left promiscuous mode [ 418.066518][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.091964][ T5885] veth1_to_hsr: left allmulticast mode [ 418.169484][ T5885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.198202][ T5885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.219026][ T5885] bond0 (unregistering): Released all slaves [ 418.365024][ T5885] .` (unregistering): Released all slaves [ 418.366952][ T5885] bond1 (unregistering): Released all slaves [ 418.373816][ T5885] bond0 (unregistering): Released all slaves [ 418.377283][ T5885] bond2 (unregistering): Released all slaves [ 418.381178][ T5885] bond3 (unregistering): Released all slaves [ 418.384590][ T5885] bond4 (unregistering): Released all slaves [ 418.388911][ T5885] bond5 (unregistering): Released all slaves [ 418.394211][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 418.484271][ T5885] : left promiscuous mode [ 418.522395][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 418.539164][ T5885] tipc: Disabling bearer [ 418.539215][ T5885] tipc: Left network mode [ 418.627852][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5 [ 418.753237][ T5445] 8021q: adding VLAN 0 to HW filter on device eth6 [ 418.864366][ T5445] 8021q: adding VLAN 0 to HW filter on device eth7 [ 418.991949][ T5445] 8021q: adding VLAN 0 to HW filter on device eth8 [ 419.103904][ T5445] 8021q: adding VLAN 0 to HW filter on device eth9 [ 419.681069][ T5885] hsr_slave_0: left promiscuous mode [ 419.681530][ T5885] hsr_slave_1: left promiscuous mode [ 419.686460][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.686477][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.687021][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.687033][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.704021][ T5885] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 419.704036][ T5885] batman_adv: batadv0: Removing interface: ipvlan3 [ 419.716104][ T5885] hsr_slave_0: left promiscuous mode [ 419.716676][ T5885] hsr_slave_1: left promiscuous mode [ 419.719389][ T5885] veth1_macvtap: left promiscuous mode [ 419.719403][ T5885] veth0_macvtap: left promiscuous mode [ 419.719431][ T5885] veth1_vlan: left promiscuous mode [ 419.719451][ T5885] veth0_vlan: left promiscuous mode [ 419.834195][ T5885] team0 (unregistering): Port device team_slave_1 removed [ 419.837838][ T5885] team0 (unregistering): Port device team_slave_0 removed [ 420.067950][ T143] smbdirect: ib_dev[syz0] removed [ 420.490529][ T5885] IPVS: stop unused estimator thread 0...