last executing test programs: 6m8.150542499s ago: executing program 2 (id=8778): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000000001}) 6m8.149056836s ago: executing program 2 (id=8779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x200000, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2212}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x34}}, 0x8006) 6m8.07718776s ago: executing program 2 (id=8781): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 6m8.077098109s ago: executing program 2 (id=8782): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x54, r1, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffd}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x54}, 0x4, 0x700000000000000, 0x0, 0x80c0}, 0x40) 6m8.051524197s ago: executing program 2 (id=8783): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) 6m7.982303947s ago: executing program 2 (id=8786): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d00)={0x6, 0x0, [{0x2000, 0x2c, &(0x7f0000000300)=""/44}, {0x6000, 0xd2, &(0x7f0000000980)=""/210}, {0x6000, 0xfb, &(0x7f0000000580)=""/251}, {0xeeee8000, 0x48, &(0x7f0000000680)=""/72}, {0xdddd0000, 0x8c, &(0x7f0000000880)=""/140}, {0xf000, 0x0, 0x0}]}) 5m51.954651423s ago: executing program 32 (id=8786): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d00)={0x6, 0x0, [{0x2000, 0x2c, &(0x7f0000000300)=""/44}, {0x6000, 0xd2, &(0x7f0000000980)=""/210}, {0x6000, 0xfb, &(0x7f0000000580)=""/251}, {0xeeee8000, 0x48, &(0x7f0000000680)=""/72}, {0xdddd0000, 0x8c, &(0x7f0000000880)=""/140}, {0xf000, 0x0, 0x0}]}) 5m31.553093029s ago: executing program 1 (id=10036): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000440)) 5m31.476715671s ago: executing program 1 (id=10039): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000021000100000000000000000a80"], 0x30}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 5m31.389610592s ago: executing program 1 (id=10041): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xc) 5m31.388643909s ago: executing program 1 (id=10043): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 5m31.341726081s ago: executing program 1 (id=10044): r0 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x91) 5m31.083502508s ago: executing program 1 (id=10045): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0x1, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000001}}}, 0x118) 5m31.062977265s ago: executing program 33 (id=10045): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0x1, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000001}}}, 0x118) 4m4.7942373s ago: executing program 0 (id=12727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r0, &(0x7f0000000640), 0x0}, 0x20) 4m4.794046715s ago: executing program 0 (id=12728): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) accept(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000740)=0x17, 0x4) 4m3.863821113s ago: executing program 0 (id=12733): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 4m3.863637132s ago: executing program 0 (id=12734): r0 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x16, 0x1, 0xf6e6}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 4m3.809972553s ago: executing program 0 (id=12735): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x00I\x00_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 4m3.809816786s ago: executing program 0 (id=12736): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x40, 0x6, {}, {0x7, 0x8, 0x0, 0x0, 0x5, 0x8, "845e6221"}, 0x0, 0x1, {0x0}, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xe000, 0xff, {}, {0x1, 0xc, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) 3m47.726658896s ago: executing program 34 (id=12736): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x40, 0x6, {}, {0x7, 0x8, 0x0, 0x0, 0x5, 0x8, "845e6221"}, 0x0, 0x1, {0x0}, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xe000, 0xff, {}, {0x1, 0xc, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) 1m4.738397289s ago: executing program 6 (id=16226): prctl$PR_SET_THP_DISABLE(0x41, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1m4.598336766s ago: executing program 6 (id=16230): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r2, 0xffffffff}, 0x8) 1m4.525052243s ago: executing program 6 (id=16231): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) 1m4.524803826s ago: executing program 6 (id=16232): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000001c0)="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", 0x23a}], 0x1}}], 0x1, 0x4001c00) 1m4.470462608s ago: executing program 6 (id=16234): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 1m4.470346675s ago: executing program 6 (id=16235): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 47.503554099s ago: executing program 35 (id=16235): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 9.794601698s ago: executing program 4 (id=17203): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x3f, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x20, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x44) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.681399195s ago: executing program 4 (id=17208): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x1}, 0xa) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x1) 8.772982036s ago: executing program 4 (id=17245): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x2, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x11) 8.712649477s ago: executing program 4 (id=17247): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000240), 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0xf00}, {&(0x7f00000002c0)="00000000008542f4cdb9eaa26519373f589fc2eb12c86e15e5d786493663546e514e6ad1b23e97c489", 0x5}], 0x2}}], 0x400000000000039, 0x8004) 8.650713546s ago: executing program 4 (id=17250): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 7.858749433s ago: executing program 4 (id=17271): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7) 329.253407ms ago: executing program 7 (id=17461): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx}, 0x1c) syz_emit_ethernet(0x11dc0, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) 327.924763ms ago: executing program 5 (id=17462): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f00000002c0)='./file0\x00', 0x180500, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 294.923511ms ago: executing program 5 (id=17464): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) 256.174793ms ago: executing program 5 (id=17466): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 217.748102ms ago: executing program 7 (id=17467): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000059c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f00000058c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="1400238005001e00"], 0x30}, 0x1, 0x0, 0x0, 0x31}, 0x20008004) 217.183118ms ago: executing program 3 (id=17468): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) fanotify_mark(r1, 0x441, 0x103f, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) 216.75476ms ago: executing program 5 (id=17469): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24044880) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 170.002997ms ago: executing program 7 (id=17470): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xfd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xc) 169.68497ms ago: executing program 7 (id=17471): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000840)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "7ce33c", 0x44, 0x2f, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0xa, 0x1, 0x3, 0x1, 0x0, 0x2, 0x3, 0x5}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x3, {{0xc, 0x2, 0x4a, 0x2, 0x0, 0x3, 0x7}, 0x2, {0x3, 0x9, 0x1, 0x1a, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 166.223849ms ago: executing program 5 (id=17472): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x300) 158.987528ms ago: executing program 3 (id=17473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 134.486248ms ago: executing program 5 (id=17474): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) 62.929756ms ago: executing program 3 (id=17475): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2a242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240)={0x2, 0x4}, 0x2) 62.549405ms ago: executing program 7 (id=17476): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000017c0)='task_rename\x00', r0, 0x0, 0xffffffffffff3b0b}, 0xd) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') 60.094283ms ago: executing program 3 (id=17477): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) 4.911425ms ago: executing program 3 (id=17478): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x9) 1.080474ms ago: executing program 7 (id=17479): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[], 0x0) 0s ago: executing program 3 (id=17480): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): cturer: syz [ 467.271716][ T5307] usb 9-1: SerialNumber: syz [ 467.275034][ T5307] usb 9-1: config 0 descriptor?? [ 467.281284][ T5307] hub 9-1:0.0: bad descriptor, ignoring hub [ 467.283259][ T5307] hub 9-1:0.0: probe with driver hub failed with error -5 [ 467.287870][ T5307] usb 9-1: selecting invalid altsetting 0 [ 467.393813][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.393961][ T838] usb 10-1: USB disconnect, device number 25 [ 467.396089][ C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 467.445041][ T838] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 467.936867][T15357] usb 9-1: reset high-speed USB device number 33 using dummy_hcd [ 467.956232][ T40] kauditd_printk_skb: 105 callbacks suppressed [ 467.956244][ T40] audit: type=1400 audit(2000001270.302:87458): avc: denied { create } for pid=15411 comm="syz.5.15792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 467.965056][ T40] audit: type=1400 audit(2000001270.311:87459): avc: denied { connect } for pid=15411 comm="syz.5.15792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 467.971218][ T40] audit: type=1400 audit(2000001270.311:87460): avc: denied { bind } for pid=15411 comm="syz.5.15792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 467.977228][ T40] audit: type=1400 audit(2000001270.311:87461): avc: denied { write } for pid=15411 comm="syz.5.15792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 468.000553][ T5307] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 468.075009][ T40] audit: type=1400 audit(2000001270.405:87462): avc: denied { read } for pid=15417 comm="syz.5.15795" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 468.082643][ T40] audit: type=1400 audit(2000001270.414:87463): avc: denied { open } for pid=15417 comm="syz.5.15795" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 468.110923][T15357] usb 9-1: device firmware changed [ 468.113169][T12503] usb 9-1: USB disconnect, device number 33 [ 468.162177][ T5307] usb 11-1: Using ep0 maxpacket: 32 [ 468.165860][ T5307] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.169756][ T5307] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.173204][ T5307] usb 11-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 468.176404][ T5307] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.181116][ T5307] usb 11-1: config 0 descriptor?? [ 468.257395][T12503] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 468.419225][T12503] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 468.421837][T12503] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 468.425015][T12503] usb 9-1: config 0 interface 0 has no altsetting 0 [ 468.429703][T12503] usb 9-1: string descriptor 0 read error: -22 [ 468.431790][T12503] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 468.434647][T12503] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 468.438647][T12503] usb 9-1: config 0 descriptor?? [ 468.441826][T12503] hub 9-1:0.0: bad descriptor, ignoring hub [ 468.443747][T12503] hub 9-1:0.0: probe with driver hub failed with error -5 [ 468.447406][T12503] usb 9-1: selecting invalid altsetting 0 [ 468.599462][ T6209] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 468.622723][ T5307] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 468.759816][ T6209] usb 10-1: Using ep0 maxpacket: 8 [ 468.762922][ T6209] usb 10-1: config 0 has no interfaces? [ 468.766957][ T6209] usb 10-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 468.771213][ T6209] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.773877][ T6209] usb 10-1: Product: syz [ 468.775369][ T6209] usb 10-1: Manufacturer: syz [ 468.776955][ T6209] usb 10-1: SerialNumber: syz [ 468.780212][ T6209] usb 10-1: config 0 descriptor?? [ 468.793159][T12503] usb 9-1: USB disconnect, device number 34 [ 468.901024][T14776] usb 11-1: USB disconnect, device number 18 [ 469.001075][ T6209] usb 10-1: USB disconnect, device number 26 [ 469.256561][ T40] audit: type=1400 audit(2000001271.517:87464): avc: denied { setopt } for pid=15486 comm="syz.4.15798" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 469.257991][T15487] xt_hashlimit: size too large, truncated to 1048576 [ 469.274380][ T40] audit: type=1400 audit(2000001271.536:87465): avc: denied { module_request } for pid=15486 comm="syz.4.15798" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 469.305821][ T40] audit: type=1400 audit(2000001271.564:87466): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=57152 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 469.314209][ T40] audit: type=1400 audit(2000001271.564:87467): avc: denied { connect } for pid=15486 comm="syz.4.15798" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 469.652994][T15513] netlink: 92 bytes leftover after parsing attributes in process `syz.5.15806'. [ 469.930390][T15534] syzkaller1: entered promiscuous mode [ 469.932127][T15534] syzkaller1: entered allmulticast mode [ 470.058976][T15554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15817'. [ 470.119870][T15554] team0: Port device team_slave_0 removed [ 470.130289][T15573] input: syz0 as /devices/virtual/input/input54 [ 470.413197][T15604] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15835'. [ 470.417019][T15604] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15835'. [ 470.420652][T15604] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15835'. [ 470.547330][T15617] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15841'. [ 470.550166][T15619] netlink: 'syz.6.15845': attribute type 1 has an invalid length. [ 470.550192][T15619] netlink: 'syz.6.15845': attribute type 2 has an invalid length. [ 470.550201][T15619] netlink: 'syz.6.15845': attribute type 1 has an invalid length. [ 470.550209][T15619] netlink: 'syz.6.15845': attribute type 3 has an invalid length. [ 470.552636][T15617] netlink: 32 bytes leftover after parsing attributes in process `syz.5.15841'. [ 470.555284][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15845'. [ 470.558031][T15617] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15841'. [ 470.569387][T15617] netlink: 32 bytes leftover after parsing attributes in process `syz.5.15841'. [ 470.611583][T15625] loop4: detected capacity change from 0 to 524288000 [ 470.633647][T15628] bond2: option xmit_hash_policy: invalid value (6) [ 470.674924][T15628] bond2 (unregistering): Released all slaves [ 470.722074][T15701] loop4: detected capacity change from 0 to 7 [ 470.802983][T13965] Dev loop4: unable to read RDB block 7 [ 470.804738][T13965] loop4: unable to read partition table [ 470.806667][ C2] blk_print_req_error: 11 callbacks suppressed [ 470.806678][ C2] invalid error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 470.811620][ C2] buffer_io_error: 11 callbacks suppressed [ 470.811630][ C2] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 470.813478][T13965] loop4: partition table beyond EOD, truncated [ 470.895773][T15701] Dev loop4: unable to read RDB block 7 [ 470.898115][T15701] loop4: unable to read partition table [ 470.900671][T15701] loop4: partition table beyond EOD, truncated [ 470.902976][T15701] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 470.951655][T15715] SELinux: security_context_str_to_sid () failed with errno=-22 [ 471.265065][T15733] loop4: detected capacity change from 0 to 524288000 [ 471.305383][ T6209] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 471.476271][ T6209] usb 10-1: Using ep0 maxpacket: 32 [ 471.479210][ T6209] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.482706][ T6209] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.485842][ T6209] usb 10-1: New USB device found, idVendor=aa0a, idProduct=6030, bcdDevice= 0.00 [ 471.489046][ T6209] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.494667][ T6209] usb 10-1: config 0 descriptor?? [ 471.655660][T15762] blktrace: Concurrent blktraces are not allowed on loop6 [ 471.765972][ T6209] usbhid 10-1:0.0: can't add hid device: -71 [ 471.767923][ T6209] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 471.772989][ T6209] usb 10-1: USB disconnect, device number 27 [ 472.463758][T15797] netlink: ct family unspecified [ 472.467228][T15784] xfrm0 speed is unknown, defaulting to 1000 [ 472.545233][T15827] netem: incorrect ge model size [ 472.547442][T15827] netem: change failed [ 473.471622][T15846] overlayfs: workdir and upperdir must reside under the same mount [ 473.491234][ T40] kauditd_printk_skb: 112 callbacks suppressed [ 473.491249][ T40] audit: type=1400 audit(2000001275.482:87580): avc: denied { unmount } for pid=29134 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 473.550718][ T40] audit: type=1400 audit(2000001275.529:87581): avc: denied { create } for pid=15852 comm="syz.5.15887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 473.558128][ T40] audit: type=1400 audit(2000001275.538:87582): avc: denied { connect } for pid=15852 comm="syz.5.15887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 473.572516][ T40] audit: type=1400 audit(2000001275.538:87583): avc: denied { write } for pid=15852 comm="syz.5.15887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 473.585703][ T40] audit: type=1400 audit(2000001275.566:87584): avc: denied { read write } for pid=15861 comm="syz.5.15890" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 473.592927][ T40] audit: type=1400 audit(2000001275.566:87585): avc: denied { open } for pid=15861 comm="syz.5.15890" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 473.600325][ T40] audit: type=1400 audit(2000001275.566:87586): avc: denied { ioctl } for pid=15861 comm="syz.5.15890" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 473.643484][ T40] audit: type=1400 audit(2000001275.622:87587): avc: denied { create } for pid=15871 comm="syz.6.15893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 473.658619][ T40] audit: type=1400 audit(2000001275.641:87588): avc: denied { recv } for pid=39 comm="rcu_tasks_trace" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=57152 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 473.672339][ T40] audit: type=1400 audit(2000001275.650:87589): avc: denied { read } for pid=15873 comm="syz.6.15897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 473.861530][ T6209] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 473.968658][ T5307] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 474.043966][ T6209] usb 10-1: Using ep0 maxpacket: 8 [ 474.047519][ T6209] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.051806][ T6209] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 474.054967][ T6209] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 474.058412][ T6209] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 474.061480][ T6209] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.065603][ T6209] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 474.074536][ T6209] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.146334][ T5307] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 474.150482][ T5307] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 474.153987][ T5307] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 474.157127][ T5307] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 474.161853][ T5307] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 474.164718][ T5307] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.169034][ T5307] usb 11-1: config 0 descriptor?? [ 474.302506][ T6209] usb 10-1: GET_CAPABILITIES returned 0 [ 474.304317][ T6209] usbtmc 10-1:16.0: can't read capabilities [ 474.528879][T16420] usb 10-1: USB disconnect, device number 28 [ 474.605639][ T5307] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 474.610467][ T5307] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 474.879086][ T5307] usb 11-1: USB disconnect, device number 19 [ 475.088126][T15961] __nla_validate_parse: 6 callbacks suppressed [ 475.088137][T15961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15914'. [ 475.157085][T15972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 475.551340][ T838] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 475.734639][ T838] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 475.737183][ T838] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 475.740372][ T838] usb 9-1: config 0 interface 0 has no altsetting 0 [ 475.744120][ T838] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 475.746951][ T838] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 475.749428][ T838] usb 9-1: Product: syz [ 475.750756][ T838] usb 9-1: Manufacturer: syz [ 475.752375][ T838] usb 9-1: SerialNumber: syz [ 475.755814][ T838] usb 9-1: config 0 descriptor?? [ 475.761322][ T838] hub 9-1:0.0: bad descriptor, ignoring hub [ 475.763468][ T838] hub 9-1:0.0: probe with driver hub failed with error -5 [ 475.767556][ T838] usb 9-1: selecting invalid altsetting 0 [ 476.739220][T15992] usb 9-1: reset high-speed USB device number 35 using dummy_hcd [ 476.742317][T15992] usb 9-1: device reset changed ep0 maxpacket size! [ 476.748203][ T838] usb 9-1: USB disconnect, device number 35 [ 476.909492][ T838] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 477.091303][ T838] usb 9-1: Using ep0 maxpacket: 32 [ 477.094392][ T838] usb 9-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1023 [ 477.097604][ T838] usb 9-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.101641][ T838] usb 9-1: config 1 interface 0 has no altsetting 0 [ 477.106149][ T838] usb 9-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 477.109099][ T838] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.111608][ T838] usb 9-1: Product: syz [ 477.113359][ T838] usb 9-1: Manufacturer: syz [ 477.115393][ T838] usb 9-1: SerialNumber: syz [ 477.119456][T16007] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 477.196298][T16112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15957'. [ 477.345292][ T838] usblp0: Disabling reads from problematic bidirectional printer [ 477.349230][ T838] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 9 proto 1 vid 0x03F0 pid 0x0004 [ 477.357161][ T838] usb 9-1: USB disconnect, device number 36 [ 477.361158][ T838] usblp0: removed [ 477.497953][ T5307] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 477.540885][T16150] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.15967'. [ 477.606079][T16157] netlink: 348 bytes leftover after parsing attributes in process `syz.6.15970'. [ 477.674018][ T5307] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.678669][ T5307] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 477.683630][ T5307] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 477.687429][ T5307] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 477.692665][ T5307] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 477.696267][ T5307] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.702783][ T5307] usb 10-1: config 0 descriptor?? [ 477.736949][T16169] team0: Device gtp0 is of different type [ 477.916333][T16182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15977'. [ 478.138080][ T5307] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 478.140822][ T5307] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 478.143272][ T5307] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 478.145739][ T5307] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 478.148152][ T5307] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 478.150602][ T5307] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 478.152951][ T5307] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 478.155364][ T5307] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 478.157739][ T5307] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 478.165092][ T5307] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 478.411809][ T5307] usb 10-1: USB disconnect, device number 29 [ 478.760296][T16212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15980'. [ 478.796917][T16216] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.15982'. [ 478.862101][ T40] kauditd_printk_skb: 149 callbacks suppressed [ 478.862118][ T40] audit: type=1400 audit(2000001280.493:87739): avc: denied { execute } for pid=16223 comm="syz.3.15989" path="/dev/nullb0" dev="tmpfs" ino=16656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 478.872809][ T40] audit: type=1800 audit(2000001280.493:87740): pid=16225 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.15989" name="nullb0" dev="tmpfs" ino=16656 res=0 errno=0 [ 478.879942][ T40] audit: type=1400 audit(2000001280.493:87741): avc: denied { read } for pid=16224 comm="syz.6.15988" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 478.886907][ T40] audit: type=1400 audit(2000001280.493:87742): avc: denied { open } for pid=16224 comm="syz.6.15988" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 478.895791][ T40] audit: type=1400 audit(2000001280.512:87743): avc: denied { ioctl } for pid=16224 comm="syz.6.15988" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 478.903982][ T40] audit: type=1400 audit(2000001280.521:87744): avc: denied { create } for pid=16228 comm="syz.4.15986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 478.910685][ T40] audit: type=1400 audit(2000001280.521:87745): avc: denied { write } for pid=16228 comm="syz.4.15986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 478.917130][ T40] audit: type=1400 audit(2000001280.521:87746): avc: denied { read } for pid=16228 comm="syz.4.15986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 478.923675][ T40] audit: type=1400 audit(2000001280.540:87747): avc: denied { create } for pid=16230 comm="syz.3.15990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 478.929829][ T40] audit: type=1400 audit(2000001280.540:87748): avc: denied { allowed } for pid=16230 comm="syz.3.15990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 479.400043][T16279] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.16009'. [ 480.253599][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16032'. [ 480.309572][T16351] input: syz1 as /devices/virtual/input/input56 [ 480.671778][T16381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.692719][T16387] netlink: 360 bytes leftover after parsing attributes in process `syz.6.16047'. [ 480.715131][T16381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.724983][T16381] 8021q: adding VLAN 0 to HW filter on device bond2 [ 480.731471][T16381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 480.742254][T16381] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 480.745348][T16381] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check. [ 480.758223][ T4654] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 481.308109][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16058'. [ 481.311853][T16417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16058'. [ 481.314814][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16058'. [ 481.473650][T16428] overlayfs: workdir and upperdir must reside under the same mount [ 482.560796][T16462] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 483.639584][T16517] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.16103'. [ 483.794733][T16534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=16534 comm=syz.6.16110 [ 484.233760][ T40] kauditd_printk_skb: 168 callbacks suppressed [ 484.233773][ T40] audit: type=1400 audit(2000001285.514:87917): avc: denied { read } for pid=16585 comm="syz.6.16127" dev="nsfs" ino=4026532880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 484.242437][ T40] audit: type=1400 audit(2000001285.514:87918): avc: denied { open } for pid=16585 comm="syz.6.16127" path="net:[4026532880]" dev="nsfs" ino=4026532880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 484.250589][ T40] audit: type=1400 audit(2000001285.514:87919): avc: denied { create } for pid=16585 comm="syz.6.16127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 484.257928][ T40] audit: type=1400 audit(2000001285.524:87920): avc: denied { bind } for pid=16585 comm="syz.6.16127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 484.264467][ T40] audit: type=1400 audit(2000001285.524:87921): avc: denied { write } for pid=16585 comm="syz.6.16127" path="socket:[142510]" dev="sockfs" ino=142510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 484.272405][ T40] audit: type=1400 audit(2000001285.524:87922): avc: denied { read } for pid=16585 comm="syz.6.16127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 484.279411][ T838] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 484.324129][ T40] audit: type=1400 audit(2000001285.608:87923): avc: denied { execmem } for pid=16587 comm="syz.3.16128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 484.374746][ T54] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 484.471146][ T838] usb 10-1: Using ep0 maxpacket: 8 [ 484.474304][ T838] usb 10-1: config 0 interface 0 has no altsetting 0 [ 484.476412][ T838] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 484.479348][ T838] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.483923][ T838] usb 10-1: config 0 descriptor?? [ 484.545849][ T54] usb 9-1: Using ep0 maxpacket: 8 [ 484.548935][ T54] usb 9-1: config 0 interface 0 has no altsetting 0 [ 484.551020][ T54] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 484.554064][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.558385][ T54] usb 9-1: config 0 descriptor?? [ 484.780703][ T54] usbhid 9-1:0.0: can't add hid device: -71 [ 484.782992][ T54] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 484.786690][ T54] usb 9-1: USB disconnect, device number 37 [ 484.922114][ T838] mcp2221 0003:04D8:00DD.0012: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 485.134134][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 485.134573][ T54] usb 10-1: USB disconnect, device number 30 [ 485.181133][T16628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16131'. [ 485.184560][T16628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16131'. [ 485.187913][ T40] audit: type=1400 audit(2000001286.421:87924): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=57152 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 485.286816][T16630] netlink: 6 bytes leftover after parsing attributes in process `syz.6.16132'. [ 485.343497][ T40] audit: type=1400 audit(2000001286.562:87925): avc: denied { read write } for pid=16635 comm="syz.4.16135" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 485.351436][ T40] audit: type=1400 audit(2000001286.571:87926): avc: denied { open } for pid=16635 comm="syz.4.16135" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 485.585743][T16667] netlink: 44 bytes leftover after parsing attributes in process `syz.6.16149'. [ 485.639942][T16677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16153'. [ 485.702309][T16685] netlink: 'syz.3.16157': attribute type 29 has an invalid length. [ 485.705514][T16685] netlink: 'syz.3.16157': attribute type 29 has an invalid length. [ 485.839937][ T7866] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 486.000335][ T7866] usb 9-1: Using ep0 maxpacket: 32 [ 486.005573][ T7866] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.008895][ T7866] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.015011][ T7866] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 486.018923][ T7866] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 486.022621][ T7866] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.026899][ T7866] usb 9-1: config 0 descriptor?? [ 486.050641][T16734] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 486.055950][T16734] __nla_validate_parse: 1 callbacks suppressed [ 486.055961][T16734] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.16177'. [ 486.472374][ T7866] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5011.0013/input/input58 [ 486.567439][ T7866] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5011.0013/input/input59 [ 486.580196][ T7866] kye 0003:0458:5011.0013: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 486.686158][ T4654] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 487.083857][T16781] netlink: 68 bytes leftover after parsing attributes in process `syz.5.16189'. [ 487.552874][T16832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16209'. [ 487.578130][ C2] kye 0003:0458:5011.0013: usb_submit_urb(ctrl) failed: -1 [ 487.587960][T16833] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.590714][T16833] bridge0: port 1(bridge_slave_0) entered listening state [ 487.626721][T16833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.633784][T16827] xfrm0 speed is unknown, defaulting to 1000 [ 487.817723][T16884] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 488.443631][ T838] usb 9-1: USB disconnect, device number 38 [ 488.562631][T16930] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16241'. [ 488.669644][T16941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16244'. [ 488.846052][T13965] udevd[13965]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 488.896235][T16977] netlink: 156 bytes leftover after parsing attributes in process `syz.4.16251'. [ 489.552503][ C2] vcan0: j1939_tp_rxtimer: 0xffff888033dd1800: rx timeout, send abort [ 489.557773][ C2] vcan0: j1939_tp_rxtimer: 0xffff888033dd0400: rx timeout, send abort [ 489.560458][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888033dd1800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 489.566557][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888033dd0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 489.583258][ T40] kauditd_printk_skb: 219 callbacks suppressed [ 489.583269][ T40] audit: type=1400 audit(2000001290.517:88146): avc: denied { read write } for pid=29134 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 489.604226][ T40] audit: type=1400 audit(2000001290.526:88147): avc: denied { open } for pid=29134 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 489.612618][ T40] audit: type=1400 audit(2000001290.526:88148): avc: denied { ioctl } for pid=29134 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 489.650393][ T40] audit: type=1400 audit(2000001290.591:88149): avc: denied { mounton } for pid=17013 comm="syz.5.16264" path="/1589/bus" dev="tmpfs" ino=8109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 489.657945][T17014] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 489.661650][ T40] audit: type=1400 audit(2000001290.601:88150): avc: denied { mount } for pid=17013 comm="syz.5.16264" name="/" dev="overlay" ino=8110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 489.679848][ T40] audit: type=1400 audit(2000001290.619:88151): avc: denied { recv } for pid=5918 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=57152 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 489.688521][ T40] audit: type=1400 audit(2000001290.619:88152): avc: denied { unmount } for pid=29134 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 489.743921][ T5307] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 489.755450][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 489.851981][T17027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16269'. [ 489.904122][ T5307] usb 9-1: Using ep0 maxpacket: 8 [ 489.915062][ T5307] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 489.917458][ T5307] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 489.921018][ T5307] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 489.924580][ T5307] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 489.930184][ T5307] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 489.933692][ T5307] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 489.939364][ T5307] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 489.944466][ T5307] usb 9-1: config 168 interface 0 has no altsetting 0 [ 489.948780][ T5307] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 489.951146][ T5307] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 489.954664][ T5307] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 489.958726][ T5307] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 489.962453][ T5307] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 489.965989][ T5307] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 489.969732][ T5307] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 489.974025][ T5307] usb 9-1: config 168 interface 0 has no altsetting 0 [ 489.976974][ T5307] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 489.979520][ T5307] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 489.983069][ T5307] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 489.986633][ T5307] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 489.991185][ T5307] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 489.994648][ T5307] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 489.998253][ T5307] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 490.002516][ T5307] usb 9-1: config 168 interface 0 has no altsetting 0 [ 490.007050][ T5307] usb 9-1: string descriptor 0 read error: -22 [ 490.009084][ T5307] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 490.012092][ T5307] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.022285][T16420] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 490.028920][ T5307] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 490.194388][T16420] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.197867][T16420] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.200886][T16420] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 490.205269][T16420] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 490.208144][T16420] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.212279][T16420] usb 10-1: config 0 descriptor?? [ 490.246532][ T6198] usb 9-1: USB disconnect, device number 39 [ 490.659320][T16420] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 490.757132][ T40] audit: type=1400 audit(2000001291.620:88153): avc: denied { mount } for pid=17090 comm="syz.3.16274" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 490.788598][ T40] audit: type=1400 audit(2000001291.648:88154): avc: denied { allowed } for pid=17092 comm="syz.3.16275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 490.795905][ T40] audit: type=1400 audit(2000001291.657:88155): avc: denied { create } for pid=17092 comm="syz.3.16275" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 490.931973][ T54] usb 10-1: USB disconnect, device number 31 [ 491.502322][T17117] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.16288'. [ 491.979016][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.981764][ C1] bridge0: topology change detected, propagating [ 492.160369][T17161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16297'. [ 492.765162][T17200] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 492.856286][ T838] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 493.033079][ T838] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.036780][ T838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 493.040486][ T838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 493.043533][ T838] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 493.047565][ T838] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 493.050891][ T838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.055241][ T838] usb 9-1: config 0 descriptor?? [ 493.493475][ T838] hid_parser_main: 6 callbacks suppressed [ 493.493490][ T838] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 493.497987][ T838] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 493.500448][ T838] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 493.502786][ T838] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 493.505082][ T838] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 493.514920][ T838] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 493.529951][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 493.768955][ T54] usb 9-1: USB disconnect, device number 40 [ 494.337516][T17255] xfrm0 speed is unknown, defaulting to 1000 [ 502.418736][ T40] kauditd_printk_skb: 120 callbacks suppressed [ 502.418747][ T40] audit: type=1400 audit(2000001302.531:88276): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 502.427802][ T40] audit: type=1400 audit(2000001302.531:88277): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 505.151519][ T40] audit: type=1400 audit(2000001305.075:88278): avc: denied { execute } for pid=17284 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 505.172175][ T40] audit: type=1400 audit(2000001305.084:88279): avc: denied { execute_no_trans } for pid=17284 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 505.187924][ T40] audit: type=1400 audit(2000001305.112:88280): avc: denied { ioctl } for pid=17285 comm="syz.4.16335" path="socket:[143882]" dev="sockfs" ino=143882 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 505.195940][ T40] audit: type=1400 audit(2000001305.112:88281): avc: denied { execmem } for pid=17284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 505.202646][ T40] audit: type=1400 audit(2000001305.121:88282): avc: denied { shutdown } for pid=17292 comm="syz.5.16334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 505.208585][ T40] audit: type=1400 audit(2000001305.121:88283): avc: denied { getopt } for pid=17292 comm="syz.5.16334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 505.214764][ T40] audit: type=1400 audit(2000001305.121:88284): avc: denied { connect } for pid=17292 comm="syz.5.16334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 505.221173][ T40] audit: type=1400 audit(2000001305.121:88285): avc: denied { name_connect } for pid=17292 comm="syz.5.16334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 505.289184][T17306] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 505.293982][T17306] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 505.298670][T17306] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 505.302717][T17306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 505.313203][T17306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 505.436017][T17303] xfrm0 speed is unknown, defaulting to 1000 [ 505.572226][T17303] chnl_net:caif_netlink_parms(): no params data found [ 505.656409][T17303] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.658878][T17303] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.661226][T17303] bridge_slave_0: entered allmulticast mode [ 505.664038][T17303] bridge_slave_0: entered promiscuous mode [ 505.667371][T17303] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.670377][T17303] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.672781][T17303] bridge_slave_1: entered allmulticast mode [ 505.675664][T17303] bridge_slave_1: entered promiscuous mode [ 505.697429][T17303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.702617][T17303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.718399][T17303] team0: Port device team_slave_0 added [ 505.723747][T17303] team0: Port device team_slave_1 added [ 505.990232][T17303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.992462][T17303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.000403][T17303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.029585][ T4654] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.040204][T17303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.042470][T17303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.050783][T17303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.073566][T17303] hsr_slave_0: entered promiscuous mode [ 506.076156][T17303] hsr_slave_1: entered promiscuous mode [ 506.078265][T17303] debugfs: 'hsr0' already exists in 'hsr' [ 506.080086][T17303] Cannot create hsr debugfs directory [ 506.113444][ T4654] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.185201][ T4654] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.228957][T17303] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 506.239788][T17303] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 506.244477][T17303] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 506.270828][T17303] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 506.322979][T17303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.333409][T17303] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.338455][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.340724][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.346785][ T3732] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.348936][ T3732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.457566][ T4654] bridge_slave_1: left allmulticast mode [ 506.459600][ T4654] bridge_slave_1: left promiscuous mode [ 506.462947][ T4654] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.467759][ T4654] bridge_slave_0: left allmulticast mode [ 506.469640][ T4654] bridge_slave_0: left promiscuous mode [ 506.472098][ T4654] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.477558][ T4654] batman_adv: batadv0: Interface deactivated: gretap1 [ 506.492347][T14776] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 506.654292][T14776] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.658898][T14776] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 506.662438][T14776] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 506.666336][T14776] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.671718][T14776] usb 10-1: config 0 descriptor?? [ 506.682064][T14776] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 506.685132][T14776] dvb-usb: bulk message failed: -22 (3/0) [ 506.692458][T14776] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 506.698210][T14776] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 506.700934][T14776] usb 10-1: media controller created [ 506.703713][T14776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 506.717157][ T4654] gretap0 (unregistering): left promiscuous mode [ 506.717602][T14776] dvb-usb: bulk message failed: -22 (6/0) [ 506.721212][T14776] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 506.726691][T14776] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input61 [ 506.731815][ T4654] batman_adv: batadv0: Removing interface: gretap1 [ 506.734381][T14776] dvb-usb: schedule remote query interval to 150 msecs. [ 506.736884][T14776] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 506.749455][ T838] usb 9-1: new low-speed USB device number 41 using dummy_hcd [ 506.858236][ T4654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.901437][ T4654] bond0 (unregistering): (slave c@0): Releasing backup interface [ 506.909470][T14776] dvb-usb: bulk message failed: -22 (1/0) [ 506.911476][T14776] dvb-usb: error while querying for an remote control event. [ 506.911586][ T838] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 506.916535][ T838] usb 9-1: config 0 has no interface number 0 [ 506.918493][ T838] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 506.920777][ T6178] usb 10-1: USB disconnect, device number 32 [ 506.922014][ T838] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 506.926946][ T838] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 506.929690][ T838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.933819][ T838] usb 9-1: config 0 descriptor?? [ 506.936446][T17649] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 506.943434][ T838] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 506.947995][ T4654] bond0 (unregistering): Released all slaves [ 506.954416][ T4654] bond1 (unregistering): Released all slaves [ 506.965458][T17303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.012374][ T6178] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 507.095573][T17303] veth0_vlan: entered promiscuous mode [ 507.100926][T17303] veth1_vlan: entered promiscuous mode [ 507.124450][T17303] veth0_macvtap: entered promiscuous mode [ 507.128784][T17303] veth1_macvtap: entered promiscuous mode [ 507.137194][T17303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.143217][T17303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.150214][T20282] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.153005][T20282] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.159146][T20282] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.161279][ T838] usb 9-1: USB disconnect, device number 41 [ 507.161821][T20282] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.215500][ T4537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.218175][ T4537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.223140][T12503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.240553][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.243529][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.551156][T17306] Bluetooth: hci0: command tx timeout [ 507.750784][ T4654] veth0_to_team: left promiscuous mode [ 507.757342][ T4654] hsr_slave_0: left promiscuous mode [ 507.760464][ T4654] hsr_slave_1: left promiscuous mode [ 507.762932][ T4654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.767143][ T4654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.770752][ T4654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.773524][ T4654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.788548][ T4654] veth1_to_batadv: left promiscuous mode [ 507.790654][ T4654] veth1_macvtap: left promiscuous mode [ 507.792852][ T4654] veth0_macvtap: left promiscuous mode [ 507.795355][ T4654] veth1_vlan: left promiscuous mode [ 507.797495][ T4654] veth0_vlan: left promiscuous mode [ 507.901520][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.984849][ T40] kauditd_printk_skb: 129 callbacks suppressed [ 507.984861][ T40] audit: type=1400 audit(2000001307.730:88415): avc: denied { name_bind } for pid=17756 comm="syz.3.16361" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 507.998038][ T40] audit: type=1400 audit(2000001307.730:88416): avc: denied { create } for pid=17756 comm="syz.3.16361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 508.011765][ T40] audit: type=1400 audit(2000001307.730:88417): avc: denied { connect } for pid=17756 comm="syz.3.16361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 508.018795][ T40] audit: type=1400 audit(2000001307.758:88418): avc: denied { recv } for pid=26831 comm="syz-executor" saddr=127.0.0.1 src=57152 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 508.072957][ T40] audit: type=1400 audit(2000001307.805:88419): avc: denied { prog_load } for pid=17765 comm="syz.3.16377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 508.081499][ T40] audit: type=1400 audit(2000001307.805:88420): avc: denied { bpf } for pid=17765 comm="syz.3.16377" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 508.088751][ T40] audit: type=1400 audit(2000001307.805:88421): avc: denied { perfmon } for pid=17765 comm="syz.3.16377" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 508.095144][ T40] audit: type=1400 audit(2000001307.805:88422): avc: denied { prog_run } for pid=17765 comm="syz.3.16377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 508.256743][ T4654] team0 (unregistering): Port device team_slave_1 removed [ 508.293458][ T4654] team0 (unregistering): Port device team_slave_0 removed [ 508.454729][ T40] audit: type=1400 audit(2000001308.169:88423): avc: denied { module_request } for pid=17768 comm="syz.5.16369" kmod="netdev-lo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 508.473851][ T40] audit: type=1400 audit(2000001308.188:88424): avc: denied { sys_module } for pid=17768 comm="syz.5.16369" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 509.007286][T17806] input: syz1 as /devices/virtual/input/input62 [ 509.011964][ T4654] IPVS: stop unused estimator thread 0... [ 509.027135][T14776] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 509.188127][T14776] usb 9-1: Using ep0 maxpacket: 32 [ 509.191523][T14776] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 509.194881][T14776] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 509.199154][T14776] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 509.202932][T14776] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 509.208908][T14776] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 509.211765][T14776] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.214300][T14776] usb 9-1: Product: syz [ 509.215622][T14776] usb 9-1: Manufacturer: syz [ 509.217076][T14776] usb 9-1: SerialNumber: syz [ 509.228311][ C3] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 509.235331][T14776] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input63 [ 509.410744][T17831] syzkaller1: entered promiscuous mode [ 509.413326][T17831] syzkaller1: entered allmulticast mode [ 509.476315][T14776] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 509.479273][T14776] (id 0x00) [ 509.519236][T14776] rc_core: IR keymap rc-imon-pad not found [ 509.521772][T14776] Registered IR keymap rc-empty [ 509.523899][T14776] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 509.528223][T14776] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 509.692596][T14776] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 509.709282][T14776] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input64 [ 509.724985][T14776] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:42> initialized [ 509.775992][T17306] Bluetooth: hci0: command tx timeout [ 509.788212][T17858] overlayfs: failed to clone upperpath [ 509.875548][T17784] imon:display_open: display port is already open [ 509.880972][ T959] usb 9-1: USB disconnect, device number 42 [ 509.957642][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 510.300361][T17927] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 510.304906][T17927] bridge0: port 4(gretap0) entered disabled state [ 510.307110][T17927] bridge0: port 3(syz_tun) entered disabled state [ 510.309500][T17927] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.476415][T17956] netlink: 'syz.4.16421': attribute type 29 has an invalid length. [ 510.480424][T17956] netlink: 'syz.4.16421': attribute type 29 has an invalid length. [ 510.485068][T17956] netlink: 500 bytes leftover after parsing attributes in process `syz.4.16421'. [ 510.632575][ T4537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.861209][T18000] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 511.144754][T16420] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 511.305179][T16420] usb 10-1: Using ep0 maxpacket: 32 [ 511.308793][T16420] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 511.312815][T16420] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 511.318031][T16420] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 511.322273][T16420] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 511.329844][T16420] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 511.332644][T16420] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.335169][T16420] usb 10-1: Product: syz [ 511.336490][T16420] usb 10-1: Manufacturer: syz [ 511.338358][T16420] usb 10-1: SerialNumber: syz [ 511.344539][ C0] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 511.349639][T16420] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input65 [ 511.400445][T18031] block nbd4: shutting down sockets [ 511.583242][T16420] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 511.585981][T16420] (id 0x00) [ 511.636775][T16420] rc_core: IR keymap rc-imon-pad not found [ 511.638696][T16420] Registered IR keymap rc-empty [ 511.640296][T16420] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 511.643523][T16420] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 511.799030][T16420] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0 [ 511.803613][T16420] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input66 [ 511.809404][T16420] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:33> initialized [ 512.001631][T17306] Bluetooth: hci0: command tx timeout [ 512.002023][T18004] imon:vfd_write: invalid payload size [ 512.011571][T16420] usb 10-1: USB disconnect, device number 33 [ 512.577908][T18128] syzkaller1: entered promiscuous mode [ 512.579712][T18128] syzkaller1: entered allmulticast mode [ 512.774476][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16483'. [ 513.059464][ T6209] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 513.220228][ T6209] usb 9-1: Using ep0 maxpacket: 8 [ 513.223349][ T6209] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 513.226390][ T6209] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 513.229780][ T6209] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 513.233501][ T6209] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.237820][ T6209] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 513.247854][ T6209] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.476530][ T6209] usb 9-1: GET_CAPABILITIES returned 0 [ 513.483029][ T6209] usbtmc 9-1:16.0: can't read capabilities [ 513.523546][ T40] kauditd_printk_skb: 240 callbacks suppressed [ 513.523564][ T40] audit: type=1400 audit(2000001312.910:88665): avc: denied { prog_load } for pid=18199 comm="syz.5.16494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 513.539995][ T40] audit: type=1400 audit(2000001312.910:88666): avc: denied { prog_run } for pid=18199 comm="syz.5.16494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 513.557248][ T40] audit: type=1400 audit(2000001312.919:88667): avc: denied { create } for pid=18199 comm="syz.5.16494" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 513.567672][ T40] audit: type=1400 audit(2000001312.929:88668): avc: denied { ioctl } for pid=18199 comm="syz.5.16494" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=144210 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 513.577220][ T40] audit: type=1400 audit(2000001312.957:88669): avc: denied { create } for pid=18204 comm="syz.7.16497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 513.588448][ T40] audit: type=1400 audit(2000001312.966:88670): avc: denied { write } for pid=18204 comm="syz.7.16497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 513.596861][ T40] audit: type=1400 audit(2000001312.966:88671): avc: denied { allowed } for pid=18209 comm="syz.3.16499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 513.691631][ T40] audit: type=1400 audit(2000001313.069:88672): avc: denied { write } for pid=18154 comm="syz.4.16484" name="usbtmc0" dev="devtmpfs" ino=3934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 513.693597][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.702454][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.705253][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.708026][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.710783][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.713949][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.716779][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.721362][ T40] audit: type=1400 audit(2000001313.088:88673): avc: denied { bpf } for pid=18214 comm="syz.7.16510" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 513.723501][T18215] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.16510'. [ 513.732919][ T40] audit: type=1400 audit(2000001313.097:88674): avc: denied { perfmon } for pid=18221 comm="syz.3.16504" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 513.764387][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.767580][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.770404][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.773260][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.776123][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.778944][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.781781][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.784623][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.787451][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 513.801152][T12503] usb 9-1: USB disconnect, device number 43 [ 513.991470][T18259] Invalid ELF header magic: != ELF [ 514.035288][T18270] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.16518'. [ 514.225724][T17306] Bluetooth: hci0: command tx timeout [ 514.485370][T18326] kAFS: unable to lookup cell '(,cL' [ 514.488026][T18326] kAFS: unable to lookup cell '(,' [ 515.354787][T18372] Invalid ELF header magic: != ELF [ 515.423368][ T6209] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 515.432517][ T6209] hid-generic 0000:0000:0000.0016: hidraw1: HID v0.00 Device [syz0] on syz0 [ 515.553849][T18409] netlink: 'syz.5.16555': attribute type 1 has an invalid length. [ 515.662036][T18430] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16562'. [ 516.238013][T18498] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16585'. [ 516.240925][T18498] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16585'. [ 516.257120][ T959] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 516.428156][ T959] usb 12-1: Using ep0 maxpacket: 8 [ 516.431443][ T959] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 516.434076][ T959] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 516.437553][ T959] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 516.440741][ T959] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 516.443990][ T959] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.448417][ T959] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 516.451410][ T959] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.673960][ T959] usb 12-1: usb_control_msg returned -32 [ 516.675974][ T959] usbtmc 12-1:16.0: can't read capabilities [ 516.832769][T18516] netlink: 'syz.4.16590': attribute type 25 has an invalid length. [ 516.863191][T18518] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16591'. [ 517.151873][T18535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16596'. [ 517.280441][T18547] netlink: 'syz.5.16599': attribute type 25 has an invalid length. [ 517.733191][ T55] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 517.893631][ T55] usb 10-1: Using ep0 maxpacket: 32 [ 517.897756][ T55] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.901826][ T55] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.905084][ T55] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 517.909288][ T55] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 517.912462][ T55] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.917292][ T55] usb 10-1: config 0 descriptor?? [ 518.372350][ T55] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0458:5011.0017/input/input67 [ 518.444663][ T55] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0458:5011.0017/input/input68 [ 518.457926][ T55] kye 0003:0458:5011.0017: input,hiddev1,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 518.573402][ T55] usb 10-1: USB disconnect, device number 34 [ 518.706951][ T6209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.922240][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802622c400: rx timeout, send abort [ 518.924918][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802622f000: rx timeout, send abort [ 518.927648][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802622c400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 518.932167][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802622f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 518.937822][ T40] kauditd_printk_skb: 196 callbacks suppressed [ 518.937834][ T40] audit: type=1400 audit(2000001317.968:88871): avc: denied { read } for pid=5326 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 518.946724][ T40] audit: type=1400 audit(2000001317.968:88872): avc: denied { search } for pid=5326 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.954645][ T40] audit: type=1400 audit(2000001317.968:88873): avc: denied { append } for pid=5326 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 518.961651][ T40] audit: type=1400 audit(2000001317.968:88874): avc: denied { open } for pid=5326 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 518.968717][ T40] audit: type=1400 audit(2000001317.968:88875): avc: denied { getattr } for pid=5326 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 518.975722][ T40] audit: type=1400 audit(2000001317.978:88876): avc: denied { read write } for pid=26831 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 518.983079][ T40] audit: type=1400 audit(2000001317.978:88877): avc: denied { open } for pid=26831 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 518.990943][ T40] audit: type=1400 audit(2000001317.978:88878): avc: denied { ioctl } for pid=26831 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 518.999398][ T40] audit: type=1400 audit(2000001317.996:88879): avc: denied { allowed } for pid=18610 comm="syz.4.16614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 519.005532][ T40] audit: type=1400 audit(2000001318.006:88880): avc: denied { create } for pid=18610 comm="syz.4.16614" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 519.031080][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.156128][ T6209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.208618][ T6209] usb 12-1: USB disconnect, device number 2 [ 519.390786][ T55] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 519.444429][T18658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 519.450254][T18653] xfrm0 speed is unknown, defaulting to 1000 [ 519.551144][ T55] usb 10-1: Using ep0 maxpacket: 8 [ 519.554515][ T55] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 519.557537][ T55] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 519.560505][ T55] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 519.564615][ T55] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.568596][ T55] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 519.571362][ T55] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.786708][T12503] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 519.802898][ T55] usb 10-1: GET_CAPABILITIES returned 0 [ 519.804672][ T55] usbtmc 10-1:16.0: can't read capabilities [ 519.953265][T12503] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.957613][T12503] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 519.961321][T12503] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 519.967516][T12503] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.978822][T12503] usb 9-1: config 0 descriptor?? [ 519.995525][T12503] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 519.998315][T12503] dvb-usb: bulk message failed: -22 (3/0) [ 520.001886][T12503] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 520.005018][T12503] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 520.007272][T12503] usb 9-1: media controller created [ 520.012317][T12503] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 520.021399][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 520.025176][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 520.027084][T12503] dvb-usb: bulk message failed: -22 (6/0) [ 520.028754][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 520.031082][T12503] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 520.034094][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 520.034117][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 520.044935][T12503] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input69 [ 520.048989][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 520.052623][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 520.056519][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 520.060435][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 520.063845][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 520.069992][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 520.073655][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 520.077472][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 520.078888][T12503] dvb-usb: schedule remote query interval to 150 msecs. [ 520.080259][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 520.082347][T12503] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 520.093249][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 520.096833][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 520.102511][ T6178] usb 10-1: USB disconnect, device number 35 [ 520.140376][ T3732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.145099][ T3732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.236431][T12503] usb 9-1: USB disconnect, device number 44 [ 520.248356][T14776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.308993][T12503] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 520.512318][T18794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16645'. [ 520.910808][ T3732] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 521.294778][ T55] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 521.478024][ T55] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 521.480542][ T55] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 521.483500][ T55] usb 10-1: config 0 interface 0 has no altsetting 0 [ 521.490768][ T55] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 521.498740][ T55] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 521.508089][ T55] usb 10-1: Product: syz [ 521.510202][ T55] usb 10-1: Manufacturer: syz [ 521.511738][ T55] usb 10-1: SerialNumber: syz [ 521.517085][ T55] usb 10-1: config 0 descriptor?? [ 521.522754][ T55] hub 10-1:0.0: bad descriptor, ignoring hub [ 521.524617][ T55] hub 10-1:0.0: probe with driver hub failed with error -5 [ 521.532989][ T55] usb 10-1: selecting invalid altsetting 0 [ 521.667877][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16692'. [ 522.003815][T18987] netlink: 68 bytes leftover after parsing attributes in process `syz.7.16702'. [ 522.492500][T18864] usb 10-1: reset high-speed USB device number 36 using dummy_hcd [ 522.499029][T18864] usb 10-1: device reset changed ep0 maxpacket size! [ 522.502504][ T9] usb 10-1: USB disconnect, device number 36 [ 522.652842][ T9] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 522.813194][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 522.816269][ T9] usb 10-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1023 [ 522.819673][ T9] usb 10-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.824698][ T9] usb 10-1: config 1 interface 0 has no altsetting 0 [ 522.829016][ T9] usb 10-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 522.832447][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.835713][ T9] usb 10-1: Product: syz [ 522.837031][ T9] usb 10-1: Manufacturer: syz [ 522.838482][ T9] usb 10-1: SerialNumber: syz [ 522.842255][T18968] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 523.052682][T19034] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16714'. [ 523.073957][ T9] usblp0: Disabling reads from problematic bidirectional printer [ 523.078109][ T9] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 9 proto 1 vid 0x03F0 pid 0x0004 [ 523.083570][ T9] usb 10-1: USB disconnect, device number 37 [ 523.095073][ T9] usblp0: removed [ 523.380199][T14776] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 523.540551][T14776] usb 9-1: Using ep0 maxpacket: 8 [ 523.544380][T14776] usb 9-1: config 0 interface 0 has no altsetting 0 [ 523.547352][T14776] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 523.551931][T14776] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.557209][T14776] usb 9-1: config 0 descriptor?? [ 523.895680][T19102] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 523.937020][ T6209] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 524.003552][T14776] mcp2221 0003:04D8:00DD.0018: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 524.098044][ T6209] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 524.102565][ T6209] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 524.107152][ T6209] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 524.111617][ T6209] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 524.116844][ T6209] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.121119][ T6209] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.126793][ T6209] usb 12-1: config 0 descriptor?? [ 524.216349][ T5307] usb 9-1: USB disconnect, device number 45 [ 524.246455][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.565990][ T6209] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 524.568688][ T6209] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 524.571046][ T6209] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 524.573445][ T6209] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 524.575846][ T6209] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 524.581607][ T6209] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 524.783894][ T40] kauditd_printk_skb: 310 callbacks suppressed [ 524.783907][ T40] audit: type=1400 audit(2000001323.438:89191): avc: denied { prog_load } for pid=19144 comm="syz.4.16736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 524.792628][ T40] audit: type=1400 audit(2000001323.438:89192): avc: denied { bpf } for pid=19144 comm="syz.4.16736" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 524.798890][ T40] audit: type=1400 audit(2000001323.438:89193): avc: denied { perfmon } for pid=19144 comm="syz.4.16736" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 524.806727][ T40] audit: type=1400 audit(2000001323.438:89194): avc: denied { prog_run } for pid=19144 comm="syz.4.16736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 524.812475][ T40] audit: type=1400 audit(2000001323.447:89195): avc: denied { recv } for pid=5919 comm="syz-executor" saddr=127.0.0.1 src=57152 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 524.823687][ T40] audit: type=1400 audit(2000001323.466:89196): avc: denied { create } for pid=19146 comm="syz.3.16738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 524.829839][ T40] audit: type=1400 audit(2000001323.475:89197): avc: denied { bind } for pid=19146 comm="syz.3.16738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 524.835932][ T40] audit: type=1400 audit(2000001323.475:89198): avc: denied { write } for pid=19146 comm="syz.3.16738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 524.836205][ T6209] usb 12-1: USB disconnect, device number 3 [ 524.951487][ T40] audit: type=1400 audit(2000001323.588:89199): avc: denied { mounton } for pid=19168 comm="syz.4.16742" path="/1697/file0" dev="tmpfs" ino=8667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 524.958565][ T40] audit: type=1400 audit(2000001323.588:89200): avc: denied { module_request } for pid=19167 comm="syz.3.16743" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 525.142205][T19195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16749'. [ 525.232821][T19205] blkio.reset_stats is deprecated [ 526.171104][T19235] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16768'. [ 526.261862][T17314] udevd[17314]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 526.299422][T19252] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 526.349868][T19259] Bluetooth: MGMT ver 1.23 [ 527.046501][T19355] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 527.175064][T19375] netlink: 16 bytes leftover after parsing attributes in process `syz.7.16809'. [ 527.178668][ T1146] bond0: (slave bond_slave_0): interface is now down [ 527.184181][ T1146] bond0: (slave bond_slave_1): interface is now down [ 527.195106][ T1146] bond0: now running without any active interface! [ 527.234973][T19380] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 527.308918][T19379] xfrm0 speed is unknown, defaulting to 1000 [ 527.510228][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16818'. [ 527.513797][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16818'. [ 528.708953][T19530] overlayfs: failed to clone upperpath [ 528.831392][T19553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16861'. [ 528.890606][T19533] xfrm0 speed is unknown, defaulting to 1000 [ 529.032854][T19568] tipc: Resetting bearer [ 529.381095][T19568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.392889][T19568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.451113][T19568] veth1_vlan: left allmulticast mode [ 529.551704][T19568] veth0_macvtap: left allmulticast mode [ 529.598104][T19568] veth1_macvtap: left allmulticast mode [ 529.940938][T19568] batman_adv: batadv0: Interface deactivated: gretap2 [ 530.057351][T19568] batman_adv: batadv0: Interface deactivated: gretap3 [ 530.065135][T16420] xfrm0 speed is unknown, defaulting to 1000 [ 530.067181][T16420] syz1: Port: 1 Link DOWN [ 530.069870][ T9] syz0: Port: 1 Link DOWN [ 530.078381][ T4654] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.080986][ T4654] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.083687][ T4654] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.086677][ T4654] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.091019][ T81] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.093983][ T81] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.157413][ T81] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.160111][ T81] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.163820][ T40] kauditd_printk_skb: 284 callbacks suppressed [ 530.163831][ T40] audit: type=1400 audit(2000001328.468:89485): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=57152 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 530.175284][ T40] audit: type=1400 audit(2000001328.478:89486): avc: denied { create } for pid=19622 comm="syz.4.16877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 530.181613][ T40] audit: type=1400 audit(2000001328.478:89487): avc: denied { ioctl } for pid=19622 comm="syz.4.16877" path="socket:[150099]" dev="sockfs" ino=150099 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 530.182673][T19624] overlayfs: failed to clone upperpath [ 530.189659][ T40] audit: type=1400 audit(2000001328.478:89488): avc: denied { bind } for pid=19622 comm="syz.4.16877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 530.216838][ T40] audit: type=1400 audit(2000001328.515:89489): avc: denied { create } for pid=19625 comm="syz.4.16878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 530.223787][ T40] audit: type=1400 audit(2000001328.515:89490): avc: denied { setopt } for pid=19625 comm="syz.4.16878" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 530.232858][ T40] audit: type=1400 audit(2000001328.534:89491): avc: denied { write } for pid=19627 comm="syz.3.16879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 530.240216][ T40] audit: type=1400 audit(2000001328.543:89492): avc: denied { read } for pid=19627 comm="syz.3.16879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 530.277077][ T40] audit: type=1400 audit(2000001328.571:89493): avc: denied { create } for pid=19632 comm="syz.4.16880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 530.283471][ T40] audit: type=1400 audit(2000001328.571:89494): avc: denied { setopt } for pid=19632 comm="syz.4.16880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 530.399112][T19649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16886'. [ 530.402940][T19649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16886'. [ 530.426953][T19653] netlink: 'syz.7.16888': attribute type 11 has an invalid length. [ 530.445865][T19655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16889'. [ 530.471383][T19662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16890'. [ 530.688417][T19692] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16902'. [ 531.270094][T19727] erspan0: left promiscuous mode [ 531.281621][T19727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.285025][T19727] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.287435][T19727] tipc: Resetting bearer [ 531.290639][T19727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.307276][T19727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.310900][T19727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.315300][T19727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 531.320583][T19727] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 531.325505][T19727] veth1_vlan: left promiscuous mode [ 531.330745][T19727] veth1_vlan: entered promiscuous mode [ 531.332697][T19727] veth1_vlan: entered allmulticast mode [ 531.336402][T19727] veth1_macvtap: left promiscuous mode [ 531.340088][T19727] veth0_macvtap: left promiscuous mode [ 531.342533][T19727] veth0_macvtap: entered promiscuous mode [ 531.344366][T19727] veth0_macvtap: entered allmulticast mode [ 531.346844][T19727] veth1_macvtap: entered promiscuous mode [ 531.348924][T19727] veth1_macvtap: entered allmulticast mode [ 531.367773][T19727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 531.370702][T19727] 8021q: adding VLAN 0 to HW filter on device bond2 [ 531.373994][T19727] 8021q: adding VLAN 0 to HW filter on device bond3 [ 531.378384][T19727] batman_adv: batadv0: Interface activated: gretap2 [ 531.383466][T19727] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 531.385932][T19727] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check. [ 531.409101][ T6186] xfrm0 speed is unknown, defaulting to 1000 [ 531.409274][T21438] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.410993][ T6186] syz1: Port: 1 Link ACTIVE [ 531.419648][T21438] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.423243][T21438] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.426620][T21438] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.432367][ T959] syz0: Port: 1 Link ACTIVE [ 531.432745][T19722] xfrm0 speed is unknown, defaulting to 1000 [ 531.444949][ T4654] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.447565][ T4654] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.450169][ T4654] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.452747][ T4654] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.473310][T19732] pim6reg1: entered promiscuous mode [ 531.475143][T19732] pim6reg1: entered allmulticast mode [ 531.479662][ T4654] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 531.498176][T18700] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 531.550688][T17306] block nbd5: Receive control failed (result -32) [ 531.571361][T19690] block nbd5: shutting down sockets [ 531.835229][T19794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16927'. [ 531.850726][ T6186] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 531.873283][T18700] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 532.021735][ T6186] usb 12-1: Using ep0 maxpacket: 8 [ 532.025022][ T6186] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 532.032441][ T6186] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 532.036334][ T6186] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 532.040313][ T6186] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.044974][T18700] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.045525][ T6186] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 532.048915][T18700] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 532.052257][ T6186] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.055521][T18700] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 532.060691][T18700] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.065228][T18700] usb 10-1: config 0 descriptor?? [ 532.076371][T18700] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 532.079297][T18700] dvb-usb: bulk message failed: -22 (3/0) [ 532.095747][T18700] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 532.100772][ T55] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 532.106181][T18700] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 532.109227][T18700] usb 10-1: media controller created [ 532.111886][T18700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 532.123193][T18700] dvb-usb: bulk message failed: -22 (6/0) [ 532.125654][T18700] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 532.131956][T18700] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input73 [ 532.141141][T18700] dvb-usb: schedule remote query interval to 150 msecs. [ 532.143558][T18700] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 532.278747][ T6186] usb 12-1: GET_CAPABILITIES returned 0 [ 532.280730][ T6186] usbtmc 12-1:16.0: can't read capabilities [ 532.310506][T18700] dvb-usb: bulk message failed: -22 (1/0) [ 532.312413][T18700] dvb-usb: error while querying for an remote control event. [ 532.332299][ T6186] usb 10-1: USB disconnect, device number 38 [ 532.367139][ T4654] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 532.432798][ T6186] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 532.496651][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 532.499631][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 532.502527][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 532.505491][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 532.508385][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 532.511302][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 532.514233][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 532.517153][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 532.521920][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 532.524890][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 532.527789][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 532.530665][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 532.533531][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 532.536505][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 532.539374][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 532.542177][ C3] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 532.547712][ T959] usb 12-1: USB disconnect, device number 4 [ 532.927576][T19923] netlink: 'syz.4.16960': attribute type 29 has an invalid length. [ 532.941727][T19923] netlink: 'syz.4.16960': attribute type 29 has an invalid length. [ 533.216737][T19949] __nla_validate_parse: 1 callbacks suppressed [ 533.216749][T19949] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.16970'. [ 533.477580][ T81] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 533.480597][ T81] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 533.507502][T19982] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 533.535675][T19985] veth0_to_bridge: entered promiscuous mode [ 533.539018][T19983] veth0_to_bridge: left promiscuous mode [ 534.057842][T20002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16992'. [ 534.247849][ T6209] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 534.302670][T20014] netlink: 3 bytes leftover after parsing attributes in process `syz.4.16997'. [ 534.306528][T20014] 0X: renamed from caif0 [ 534.343213][T20014] 0X: entered allmulticast mode [ 534.350132][T20014] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 534.725567][T20064] netlink: 'syz.5.17014': attribute type 29 has an invalid length. [ 534.730152][T20064] netlink: 'syz.5.17014': attribute type 29 has an invalid length. [ 534.734519][T20064] netlink: 604 bytes leftover after parsing attributes in process `syz.5.17014'. [ 534.735266][T20066] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.17016'. [ 535.165379][T20129] input: syz1 as /devices/virtual/input/input74 [ 535.556731][ T40] kauditd_printk_skb: 211 callbacks suppressed [ 535.556743][ T40] audit: type=1400 audit(2000001333.508:89706): avc: denied { prog_load } for pid=20180 comm="syz.5.17057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 535.566994][ T40] audit: type=1400 audit(2000001333.508:89707): avc: denied { bpf } for pid=20180 comm="syz.5.17057" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 535.573719][ T40] audit: type=1400 audit(2000001333.508:89708): avc: denied { perfmon } for pid=20180 comm="syz.5.17057" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 535.580593][ T40] audit: type=1400 audit(2000001333.508:89709): avc: denied { write } for pid=20180 comm="syz.5.17057" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 535.588190][ T40] audit: type=1400 audit(2000001333.536:89710): avc: denied { read } for pid=20183 comm="syz.5.17059" dev="nsfs" ino=4026532934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 535.596848][ T40] audit: type=1400 audit(2000001333.536:89711): avc: denied { open } for pid=20183 comm="syz.5.17059" path="net:[4026532934]" dev="nsfs" ino=4026532934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 535.605703][ T40] audit: type=1400 audit(2000001333.536:89712): avc: denied { create } for pid=20183 comm="syz.5.17059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 535.612060][ T40] audit: type=1400 audit(2000001333.536:89713): avc: denied { bind } for pid=20183 comm="syz.5.17059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 535.620137][ T40] audit: type=1400 audit(2000001333.536:89714): avc: denied { connect } for pid=20183 comm="syz.5.17059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 535.626799][ T40] audit: type=1400 audit(2000001333.564:89715): avc: denied { execmem } for pid=20185 comm="syz.7.17058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 535.711760][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 535.840187][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.320237][T20234] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17075'. [ 536.387109][ T6209] usb 9-1: new full-speed USB device number 46 using dummy_hcd [ 536.556832][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.556843][ T6209] usb 9-1: config 0 has no interfaces? [ 536.558335][ T6209] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 536.561783][T20240] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.17085'. [ 536.561882][ T6209] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 536.570492][ T6209] usb 9-1: SerialNumber: syz [ 536.573849][ T6209] usb 9-1: config 0 descriptor?? [ 536.802993][T18700] usb 9-1: USB disconnect, device number 46 [ 536.890729][T20287] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.17092'. [ 537.038134][T18699] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 537.208898][T18699] usb 12-1: Using ep0 maxpacket: 16 [ 537.211896][T18699] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.215362][T18699] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.219129][T18699] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 537.225404][T18699] usb 12-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 537.229179][T18699] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.235224][T18699] usb 12-1: config 0 descriptor?? [ 537.408280][T20326] loop5: detected capacity change from 0 to 2640 [ 537.411264][T20326] Buffer I/O error on dev loop5, logical block 0, async page read [ 537.414464][T20326] Buffer I/O error on dev loop5, logical block 0, async page read [ 537.416913][T20326] Buffer I/O error on dev loop5, logical block 0, async page read [ 537.419444][T20326] Buffer I/O error on dev loop5, logical block 0, async page read [ 537.421877][T20326] Buffer I/O error on dev loop5, logical block 0, async page read [ 537.425184][T20326] Buffer I/O error on dev loop5, logical block 0, async page read [ 537.427805][T20326] Buffer I/O error on dev loop5, logical block 0, async page read [ 537.430290][T20326] Buffer I/O error on dev loop5, logical block 0, async page read [ 537.432777][T20326] ldm_validate_partition_table(): Disk read failed. [ 537.435699][T20326] Buffer I/O error on dev loop5, logical block 0, async page read [ 537.438174][T20326] Buffer I/O error on dev loop5, logical block 0, async page read [ 537.440668][T20326] Dev loop5: unable to read RDB block 0 [ 537.442515][T20326] loop5: unable to read partition table [ 537.450838][T20326] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 537.673126][T18699] input: HID 0955:7214 Haptics as /devices/virtual/input/input75 [ 537.711478][T18699] shield 0003:0955:7214.001A: Registered Thunderstrike controller [ 537.714759][T18699] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 537.840242][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 537.885020][ T6209] usb 12-1: USB disconnect, device number 5 [ 537.885612][ T838] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 537.896165][ T838] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 537.899717][ T838] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 537.903251][ T838] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 538.225414][ T959] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 538.385440][ T959] usb 9-1: Using ep0 maxpacket: 8 [ 538.388455][ T959] usb 9-1: config 0 interface 0 has no altsetting 0 [ 538.390563][ T959] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 538.393444][ T959] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.403932][ T959] usb 9-1: config 0 descriptor?? [ 538.424041][T20453] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.17135'. [ 538.848309][ T959] mcp2221 0003:04D8:00DD.001B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 538.860490][T20498] netlink: 'syz.7.17150': attribute type 1 has an invalid length. [ 538.862951][T20498] netlink: 'syz.7.17150': attribute type 2 has an invalid length. [ 539.062047][ T838] usb 9-1: USB disconnect, device number 47 [ 539.273077][ T6209] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 539.438472][ T6209] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 539.442044][ T6209] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 539.445435][ T6209] usb 10-1: Product: syz [ 539.447100][ T6209] usb 10-1: Manufacturer: syz [ 539.449042][ T6209] usb 10-1: SerialNumber: syz [ 539.452849][ T6209] usb 10-1: config 0 descriptor?? [ 539.457247][ T6209] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 539.460520][ T6209] dvb-usb: bulk message failed: -22 (2/0) [ 539.465086][ T6209] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 539.469105][ T6209] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 539.472291][ T6209] usb 10-1: media controller created [ 539.479538][ T6209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 539.676126][T20522] cxusb: i2c wr: len=79 is too big! [ 539.676126][T20522] [ 539.679302][ T6209] cxusb: set interface failed [ 539.695792][ T6209] dvb-usb: bulk message failed: -22 (1/0) [ 539.715336][ T6209] DVB: Unable to find symbol mt352_attach() [ 539.717726][ T6209] dvb-usb: bulk message failed: -22 (5/0) [ 539.719957][ T6209] zl10353_read_register: readreg error (reg=127, ret==-121) [ 539.723070][ T6209] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 539.769091][T20567] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 539.775756][ T6209] rc_core: IR keymap rc-dvico-mce not found [ 539.778145][ T6209] Registered IR keymap rc-empty [ 539.781693][ T6209] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 539.796026][ T6209] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input76 [ 539.801036][ T6209] dvb-usb: schedule remote query interval to 100 msecs. [ 539.803197][ T6209] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 539.808664][ T6209] usb 10-1: USB disconnect, device number 39 [ 539.919748][ T6209] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 539.999144][T20594] sock: sock_set_timeout: `syz.4.17166' (pid 20594) tries to set negative timeout [ 540.140893][T20596] xfrm0 speed is unknown, defaulting to 1000 [ 540.441673][T20650] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input77 [ 540.866661][ T9] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 540.919685][ T40] kauditd_printk_skb: 226 callbacks suppressed [ 540.919698][ T40] audit: type=1400 audit(2000001338.520:89942): avc: denied { read write } for pid=29134 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 540.931170][ T40] audit: type=1400 audit(2000001338.520:89943): avc: denied { open } for pid=29134 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 540.938763][ T40] audit: type=1400 audit(2000001338.520:89944): avc: denied { ioctl } for pid=29134 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 540.948158][ T40] audit: type=1400 audit(2000001338.548:89945): avc: denied { map_read map_write } for pid=20696 comm="syz.5.17183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 540.974847][ T40] audit: type=1400 audit(2000001338.576:89946): avc: denied { read } for pid=20698 comm="syz.5.17184" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 540.981858][ T40] audit: type=1400 audit(2000001338.576:89947): avc: denied { open } for pid=20698 comm="syz.5.17184" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 540.989246][ T40] audit: type=1400 audit(2000001338.576:89948): avc: denied { ioctl } for pid=20698 comm="syz.5.17184" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 541.028882][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.032310][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.035440][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 541.040158][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 541.043019][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.047663][ T9] usb 9-1: config 0 descriptor?? [ 541.049279][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802df92c00: rx timeout, send abort [ 541.049502][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88802df92c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 541.049922][ T40] audit: type=1400 audit(2000001338.650:89949): avc: denied { read } for pid=5326 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 541.050189][ T40] audit: type=1400 audit(2000001338.650:89950): avc: denied { search } for pid=5326 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.050375][ T40] audit: type=1400 audit(2000001338.650:89951): avc: denied { append } for pid=5326 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 541.422869][ T5307] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 541.488207][ T9] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 541.490612][ T9] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 541.493989][ T9] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 541.496358][ T9] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 541.499025][ T9] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 541.501365][ T9] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 541.503729][ T9] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 541.506218][ T9] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 541.508624][ T9] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 541.510940][ T9] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 541.519451][ T9] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 541.584611][ T5307] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.588265][ T5307] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.591423][ T5307] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 541.595965][ T5307] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 541.599238][ T5307] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.604180][ T5307] usb 10-1: config 0 descriptor?? [ 541.690219][ T959] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 541.766527][ T9] usb 9-1: USB disconnect, device number 48 [ 541.873669][ T959] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 541.877123][ T959] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.880487][ T959] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.883807][ T959] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 541.889260][ T959] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 541.892056][ T959] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 541.894951][ T959] usb 12-1: Manufacturer: syz [ 541.897958][ T959] usb 12-1: config 0 descriptor?? [ 542.044912][ T5307] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 542.312114][ T6186] usb 10-1: USB disconnect, device number 40 [ 542.346733][ T959] appleir 0003:05AC:8243.001E: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 542.622967][ T5307] usb 12-1: USB disconnect, device number 6 [ 542.863585][T20815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17203'. [ 542.866462][T20815] netlink: 'syz.4.17203': attribute type 30 has an invalid length. [ 542.876555][T20817] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.17204'. [ 543.152100][T20846] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.17211'. [ 543.285349][T20869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17218'. [ 543.414029][T20893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17227'. [ 543.417143][T20893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17227'. [ 543.503490][T20907] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17229'. [ 543.704778][T20928] tipc: Resetting bearer [ 543.819204][T20928] tipc: Disabling bearer [ 543.826639][T20928] team0 (unregistering): Port device team_slave_0 removed [ 543.835706][T20928] team0 (unregistering): Port device team_slave_1 removed [ 544.074052][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17254'. [ 544.077051][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17254'. [ 544.171522][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 544.474769][T21000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17261'. [ 544.482089][ T12] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.485925][ T12] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.489985][ T12] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.494075][ T12] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.720813][T21019] netlink: 'syz.5.17267': attribute type 30 has an invalid length. [ 544.837013][T21024] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.922851][T21024] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.026815][T21024] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.139340][T21024] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.198492][ T6125] Bluetooth: hci0: command 0x0405 tx timeout [ 545.320152][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.331347][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.342184][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.354111][ T12] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.361417][T21079] mmap: syz.5.17280 (21079): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 545.604765][T21101] input: syz0 as /devices/virtual/input/input78 [ 545.790608][T21118] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 545.825119][T21118] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 545.830083][T21118] overlayfs: failed to look up (tracing) for ino (-66) [ 546.315599][ T40] kauditd_printk_skb: 172 callbacks suppressed [ 546.315612][ T40] audit: type=1400 audit(2000001343.569:90124): avc: denied { mount } for pid=21157 comm="syz.3.17301" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 546.437365][ T40] audit: type=1400 audit(2000001343.681:90125): avc: denied { create } for pid=21167 comm="syz.7.17305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 546.445953][ T40] audit: type=1400 audit(2000001343.681:90126): avc: denied { write } for pid=21167 comm="syz.7.17305" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 546.468412][ T40] audit: type=1400 audit(2000001343.709:90127): avc: denied { create } for pid=21170 comm="syz.3.17307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 546.475518][ T40] audit: type=1400 audit(2000001343.718:90128): avc: denied { getopt } for pid=21170 comm="syz.3.17307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 546.499432][ T40] audit: type=1400 audit(2000001343.737:90129): avc: denied { create } for pid=21173 comm="syz.3.17309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 546.507347][ T40] audit: type=1400 audit(2000001343.746:90130): avc: denied { write } for pid=21173 comm="syz.3.17309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 546.516079][ T40] audit: type=1400 audit(2000001343.746:90131): avc: denied { ioctl } for pid=21175 comm="syz.7.17308" path="socket:[152285]" dev="sockfs" ino=152285 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 546.528086][ T40] audit: type=1400 audit(2000001343.756:90132): avc: denied { read } for pid=21173 comm="syz.3.17309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 546.556361][ T40] audit: type=1400 audit(2000001343.784:90133): avc: denied { execmem } for pid=21180 comm="syz.3.17311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 546.909539][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 547.476686][T21234] xfrm0 speed is unknown, defaulting to 1000 [ 547.530103][T21271] erspan0: entered promiscuous mode [ 547.533588][T21271] erspan0: left promiscuous mode [ 548.032505][T17306] Bluetooth: hci4: command 0x2016 tx timeout [ 548.034604][ T5307] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 548.037382][ T5307] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 548.211248][T21295] input: syz1 as /devices/virtual/input/input79 [ 548.542921][T21306] __nla_validate_parse: 10 callbacks suppressed [ 548.542935][T21306] netlink: 3900 bytes leftover after parsing attributes in process `syz.5.17345'. [ 548.588276][T21309] binder: 21307:21309 ioctl c0306201 200000000640 returned -22 [ 548.838409][T21325] PID 21325 killed due to inadequate hugepage pool [ 548.953814][T21342] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 548.956416][T21342] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 548.958864][T21342] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 548.961337][T21342] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 548.963982][T21342] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 548.966459][T21342] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 548.968902][T21342] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 548.971338][T21342] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 548.973927][T21342] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 548.976460][T21342] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 549.210880][T21353] netlink: 52 bytes leftover after parsing attributes in process `syz.5.17365'. [ 549.469016][T21365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17371'. [ 549.602900][T21375] netlink: 44 bytes leftover after parsing attributes in process `syz.5.17376'. [ 549.608147][T21375] netlink: 44 bytes leftover after parsing attributes in process `syz.5.17376'. [ 549.810744][T21385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17381'. [ 550.099234][T21411] netfs: Couldn't get user pages (rc=-14) [ 550.339568][T17306] Bluetooth: hci1: command 0x0405 tx timeout [ 550.345405][ T5307] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 550.347374][ T5307] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 550.475377][T21450] overlayfs: failed to clone upperpath [ 550.475895][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17406'. [ 550.851600][T21498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17420'. [ 551.324214][T21540] netlink: 'syz.7.17440': attribute type 39 has an invalid length. [ 551.758012][ T40] kauditd_printk_skb: 182 callbacks suppressed [ 551.758029][ T40] audit: type=1400 audit(2000001348.655:90316): avc: denied { node_bind } for pid=21556 comm="syz.7.17442" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 551.770477][ T40] audit: type=1400 audit(2000001348.664:90317): avc: denied { create } for pid=21557 comm="syz.5.17443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 551.796345][ T40] audit: type=1400 audit(2000001348.692:90318): avc: denied { prog_load } for pid=21562 comm="syz.3.17445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 551.835330][ T40] audit: type=1400 audit(2000001348.730:90319): avc: denied { create } for pid=21568 comm="syz.5.17447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 551.843971][ T40] audit: type=1400 audit(2000001348.730:90320): avc: denied { connect } for pid=21568 comm="syz.5.17447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 551.850437][ T40] audit: type=1400 audit(2000001348.730:90321): avc: denied { bind } for pid=21568 comm="syz.5.17447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 551.856867][ T40] audit: type=1400 audit(2000001348.730:90322): avc: denied { write } for pid=21568 comm="syz.5.17447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 551.864270][ T40] audit: type=1400 audit(2000001348.730:90323): avc: denied { getopt } for pid=21568 comm="syz.5.17447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 551.941640][ T40] audit: type=1400 audit(2000001348.823:90324): avc: denied { mount } for pid=21574 comm="syz.7.17451" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 551.995608][T21579] netlink: 64 bytes leftover after parsing attributes in process `syz.5.17453'. [ 552.036468][T21587] netlink: 40 bytes leftover after parsing attributes in process `syz.7.17455'. [ 552.184147][ T40] audit: type=1400 audit(2000001349.057:90325): avc: denied { create } for pid=21590 comm="syz.7.17458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 552.370297][ T6197] syz0: Port: 1 Link DOWN [ 552.371024][T21605] bridge_slave_0: entered promiscuous mode [ 552.375111][ T55] syz0: Port: 1 Link ACTIVE [ 552.421006][T21612] Timeout policy `syz1' can only be used by L3 protocol number 35095 [ 552.653197][T17306] Bluetooth: hci0: command 0x0405 tx timeout [ 552.657080][ T5307] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 552.659230][ T5307] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 552.734164][ T5307] ------------[ cut here ]------------ [ 552.736850][ T5307] refcount_t: underflow; use-after-free. [ 552.739423][ T5307] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xc9/0x120, CPU#1: kworker/1:2/5307 [ 552.742493][ T5307] Modules linked in: [ 552.744555][ T5307] CPU: 1 UID: 0 PID: 5307 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.750779][ T5307] Tainted: [L]=SOFTLOCKUP [ 552.752100][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 552.755406][ T5307] Workqueue: events rfkill_op_handler [ 552.757131][ T5307] RIP: 0010:refcount_warn_saturate+0xc9/0x120 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 552.759695][ T5307] Code: 5d e9 bb d8 11 fd e8 b6 d8 11 fd 48 8d 3d 7f 21 e5 0b 67 48 0f b9 3a 5b 5d e9 a3 d8 11 fd e8 9e d8 11 fd 48 8d 3d 77 21 e5 0b <67> 48 0f b9 3a 5b 5d e9 8b d8 11 fd e8 86 d8 11 fd 48 8d 3d 6f 21 [ 552.766417][ T5307] RSP: 0018:ffffc900041c77d8 EFLAGS: 00010293 [ 552.768356][ T5307] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff84ad265c [ 552.770977][ T5307] RDX: ffff88802d53a4c0 RSI: ffffffff84ad26c2 RDI: ffffffff90924840 [ 552.773484][ T5307] RBP: ffff888035582078 R08: 0000000000000005 R09: 0000000000000004 [ 552.775945][ T5307] R10: 0000000000000003 R11: 0000000000002ba1 R12: ffff88802204fc00 [ 552.778443][ T5307] R13: ffff888035582078 R14: ffffffff85e718b0 R15: ffffffff906c1320 [ 552.780972][ T5307] FS: 0000000000000000(0000) GS:ffff8880d69f1000(0000) knlGS:0000000000000000 [ 552.783932][ T5307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.786007][ T5307] CR2: 000056106d67c300 CR3: 0000000042a39000 CR4: 0000000000352ef0 [ 552.788644][ T5307] Call Trace: [ 552.789746][ T5307] [ 552.790728][ T5307] klist_put+0x11b/0x1b0 [ 552.792207][ T5307] klist_remove+0x13f/0x2e0 [ 552.793693][ T5307] ? __pfx_klist_remove+0x10/0x10 [ 552.795710][ T5307] ? kobject_move+0x15d/0x260 [ 552.797789][ T5307] ? __pfx_kobject_move+0x10/0x10 [ 552.799335][ T5307] ? get_device_parent+0x1ed/0x4e0 [ 552.800901][ T5307] device_move+0x12d/0x1160 [ 552.802469][ T5307] hci_conn_del_sysfs+0xaa/0x1a0 [ 552.804056][ T5307] hci_conn_del+0x680/0x11d0 [ 552.805529][ T5307] hci_conn_hash_flush+0x186/0x290 [ 552.807138][ T5307] hci_dev_close_sync+0x601/0x1260 [ 552.808727][ T5307] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 552.810437][ T5307] ? do_raw_spin_lock+0x12c/0x2b0 [ 552.812047][ T5307] hci_dev_do_close+0x2e/0xc0 [ 552.813719][ T5307] hci_rfkill_set_block+0x225/0x3b0 [ 552.815398][ T5307] ? lockdep_hardirqs_on+0x7c/0x110 [ 552.817058][ T5307] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 552.818871][ T5307] rfkill_set_block+0x1fe/0x550 [ 552.820423][ T5307] rfkill_epo+0x8e/0x1d0 [ 552.821779][ T5307] rfkill_op_handler+0x25c/0x270 [ 552.823371][ T5307] process_one_work+0x9ba/0x1b20 [ 552.825106][ T5307] ? __pfx_process_one_work+0x10/0x10 [ 552.826851][ T5307] ? assign_work+0x1a0/0x250 [ 552.828364][ T5307] worker_thread+0x6c8/0xf10 [ 552.829867][ T5307] ? __pfx_worker_thread+0x10/0x10 [ 552.831514][ T5307] kthread+0x3c5/0x780 [ 552.832832][ T5307] ? __pfx_kthread+0x10/0x10 [ 552.834394][ T5307] ? rcu_is_watching+0x12/0xc0 [ 552.835965][ T5307] ? __pfx_kthread+0x10/0x10 [ 552.837450][ T5307] ret_from_fork+0x983/0xb10 [ 552.838941][ T5307] ? __pfx_ret_from_fork+0x10/0x10 [ 552.840564][ T5307] ? __switch_to+0x7af/0x10d0 [ 552.842068][ T5307] ? __pfx_kthread+0x10/0x10 [ 552.843631][ T5307] ret_from_fork_asm+0x1a/0x30 [ 552.845617][ T5307] [ 552.846653][ T5307] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 552.848930][ T5307] CPU: 1 UID: 0 PID: 5307 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.852311][ T5307] Tainted: [L]=SOFTLOCKUP [ 552.853676][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 552.857048][ T5307] Workqueue: events rfkill_op_handler [ 552.858766][ T5307] Call Trace: [ 552.859842][ T5307] [ 552.860799][ T5307] dump_stack_lvl+0x3d/0x1f0 [ 552.862293][ T5307] vpanic+0x640/0x6f0 [ 552.863573][ T5307] ? refcount_warn_saturate+0xc9/0x120 [ 552.865328][ T5307] panic+0xca/0xd0 [ 552.866490][ T5307] ? __pfx_panic+0x10/0x10 [ 552.867920][ T5307] ? check_panic_on_warn+0x1f/0xb0 [ 552.869574][ T5307] check_panic_on_warn+0xab/0xb0 [ 552.871156][ T5307] __warn+0x108/0x3c0 [ 552.872432][ T5307] __report_bug+0x2a0/0x520 [ 552.874047][ T5307] ? refcount_warn_saturate+0xc9/0x120 [ 552.875824][ T5307] ? __pfx___report_bug+0x10/0x10 [ 552.877447][ T5307] ? refcount_warn_saturate+0xc2/0x120 [ 552.879210][ T5307] ? refcount_warn_saturate+0x5c/0x120 [ 552.880966][ T5307] ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0 [ 552.882976][ T5307] report_bug_entry+0xe1/0x290 [ 552.884554][ T5307] ? refcount_warn_saturate+0xc9/0x120 [ 552.886305][ T5307] handle_bug+0x18a/0x260 [ 552.887690][ T5307] exc_invalid_op+0x17/0x50 [ 552.889148][ T5307] asm_exc_invalid_op+0x1a/0x20 [ 552.890715][ T5307] RIP: 0010:refcount_warn_saturate+0xc9/0x120 [ 552.892640][ T5307] Code: 5d e9 bb d8 11 fd e8 b6 d8 11 fd 48 8d 3d 7f 21 e5 0b 67 48 0f b9 3a 5b 5d e9 a3 d8 11 fd e8 9e d8 11 fd 48 8d 3d 77 21 e5 0b <67> 48 0f b9 3a 5b 5d e9 8b d8 11 fd e8 86 d8 11 fd 48 8d 3d 6f 21 [ 552.898647][ T5307] RSP: 0018:ffffc900041c77d8 EFLAGS: 00010293 [ 552.900592][ T5307] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff84ad265c [ 552.903109][ T5307] RDX: ffff88802d53a4c0 RSI: ffffffff84ad26c2 RDI: ffffffff90924840 [ 552.905628][ T5307] RBP: ffff888035582078 R08: 0000000000000005 R09: 0000000000000004 [ 552.908123][ T5307] R10: 0000000000000003 R11: 0000000000002ba1 R12: ffff88802204fc00 [ 552.910615][ T5307] R13: ffff888035582078 R14: ffffffff85e718b0 R15: ffffffff906c1320 [ 552.913095][ T5307] ? __pfx_klist_children_put+0x10/0x10 [ 552.914902][ T5307] ? refcount_warn_saturate+0x5c/0x120 [ 552.916617][ T5307] ? refcount_warn_saturate+0xc2/0x120 [ 552.918405][ T5307] ? refcount_warn_saturate+0xc2/0x120 [ 552.920087][ T5307] klist_put+0x11b/0x1b0 [ 552.921390][ T5307] klist_remove+0x13f/0x2e0 [ 552.922756][ T5307] ? __pfx_klist_remove+0x10/0x10 [ 552.924476][ T5307] ? kobject_move+0x15d/0x260 [ 552.925896][ T5307] ? __pfx_kobject_move+0x10/0x10 [ 552.927422][ T5307] ? get_device_parent+0x1ed/0x4e0 [ 552.928986][ T5307] device_move+0x12d/0x1160 [ 552.930395][ T5307] hci_conn_del_sysfs+0xaa/0x1a0 [ 552.931898][ T5307] hci_conn_del+0x680/0x11d0 [ 552.933340][ T5307] hci_conn_hash_flush+0x186/0x290 [ 552.935122][ T5307] hci_dev_close_sync+0x601/0x1260 [ 552.936846][ T5307] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 552.938643][ T5307] ? do_raw_spin_lock+0x12c/0x2b0 [ 552.940246][ T5307] hci_dev_do_close+0x2e/0xc0 [ 552.941644][ T5307] hci_rfkill_set_block+0x225/0x3b0 [ 552.943214][ T5307] ? lockdep_hardirqs_on+0x7c/0x110 [ 552.944878][ T5307] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 552.946705][ T5307] rfkill_set_block+0x1fe/0x550 [ 552.948268][ T5307] rfkill_epo+0x8e/0x1d0 [ 552.949624][ T5307] rfkill_op_handler+0x25c/0x270 [ 552.951214][ T5307] process_one_work+0x9ba/0x1b20 [ 552.952800][ T5307] ? __pfx_process_one_work+0x10/0x10 [ 552.954572][ T5307] ? assign_work+0x1a0/0x250 [ 552.956056][ T5307] worker_thread+0x6c8/0xf10 [ 552.957549][ T5307] ? __pfx_worker_thread+0x10/0x10 [ 552.959190][ T5307] kthread+0x3c5/0x780 [ 552.960449][ T5307] ? __pfx_kthread+0x10/0x10 [ 552.961930][ T5307] ? rcu_is_watching+0x12/0xc0 [ 552.963486][ T5307] ? __pfx_kthread+0x10/0x10 [ 552.965008][ T5307] ret_from_fork+0x983/0xb10 [ 552.966508][ T5307] ? __pfx_ret_from_fork+0x10/0x10 [ 552.968142][ T5307] ? __switch_to+0x7af/0x10d0 [ 552.969656][ T5307] ? __pfx_kthread+0x10/0x10 [ 552.971145][ T5307] ret_from_fork_asm+0x1a/0x30 [ 552.972696][ T5307] [ 552.974401][ T5307] Kernel Offset: disabled [ 552.975782][ T5307] Rebooting in 86400 seconds..